Edit tour

Windows Analysis Report
https://auth.us.brightmine.com

Overview

General Information

Sample URL:	https://auth.us.brightmine.com
Analysis ID:	1428289
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2216,i,13429566003554083046,4485005034574453211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.us.brightmine.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzux...

HTTP Parser: Number of links: 0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: Title: Log In | Brightmine.com does not match URL

HTTP Parser: <input type="password" .../> found

Source: https://td.doubleclick.net/td/rul/940382430?random=1713460598535&cv=11&fst=1713460598535&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/936886275?random=1713460598639&cv=11&fst=1713460598639&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/938545461?random=1713460598652&cv=11&fst=1713460598652&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/903682655?badge=0	HTTP Parser: No favicon
Source: https://player.vimeo.com/video/903682655?badge=0	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=9cc2wvmvhrz5	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=9cc2wvmvhrz5	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=h6hnb8mbbpsh	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=h6hnb8mbbpsh	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=ls6gt4og4jfj	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=ls6gt4og4jfj	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/940382430?random=1713460612487&cv=11&fst=1713460612487&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/936886275?random=1713460613596&cv=11&fst=1713460613596&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/938545461?random=1713460613609&cv=11&fst=1713460613609&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/936886275?random=1713460614437&cv=11&fst=1713460614437&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/938545461?random=1713460614506&cv=11&fst=1713460614506&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon
Source: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=om7fq0ieawmg	HTTP Parser: No favicon
Source: https://td.doubleclick.net/td/rul/940382430?random=1713460613414&cv=11&fst=1713460613414&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config	HTTP Parser: No favicon

Source: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzux	HTTP Parser: No <meta name="author".. found
Source: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzux	HTTP Parser: No <meta name="author".. found
Source: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking	HTTP Parser: No <meta name="author".. found
Source: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking	HTTP Parser: No <meta name="author".. found
Source: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax	HTTP Parser: No <meta name="author".. found
Source: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax	HTTP Parser: No <meta name="author".. found
Source: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax	HTTP Parser: No <meta name="author".. found

Source: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzux...	HTTP Parser: No <meta name="copyright".. found
Source: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzux...	HTTP Parser: No <meta name="copyright".. found
Source: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking	HTTP Parser: No <meta name="copyright".. found
Source: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking	HTTP Parser: No <meta name="copyright".. found
Source: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax	HTTP Parser: No <meta name="copyright".. found
Source: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax	HTTP Parser: No <meta name="copyright".. found
Source: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 23.201.212.130
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==
Source: global traffic	HTTP traffic detected: GET /login HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==
Source: global traffic	HTTP traffic detected: GET /login/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==
Source: global traffic	HTTP traffic detected: GET /login/Gateway/?returnUrl=%2F HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==
Source: global traffic	HTTP traffic detected: GET /connect/authorize?client_id=core_consumer&redirect_uri=https%3A%2F%2Fhrcenter.us.brightmine.com%2F&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fcorecms_content_bridge%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fhotline_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fuserinsight_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Feventtrack_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fheaderfooter_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fuserpersonalisation_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fcustom_claims&state=OpenIdConnect.AuthenticationProperties%3DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww&response_mode=form_post&nonce=638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0 HTTP/1.1Host: auth.us.brightmine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
Source: global traffic	HTTP traffic detected: GET /Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 HTTP/1.1Host: auth.us.brightmine.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /lib/material/css/material-components-web.min.css?v=PXXfdSPiOxM3WNImwuAvCQPN09U46MGonkGuVRS905g HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /css/custom_site.css?v=aJorWfNIR3ggUCXMiS10jSg3fhJeMPZHUa8gWgyHP9I HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /lib/jquery/jquery.js HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /js/app/default.js HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /lib/material/js/material-components-web.min.js HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /js/app/login-page.js HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /latest/Gateway/Bundle/Gateway.css HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://auth.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
Source: global traffic	HTTP traffic detected: GET /latest//Shared/Content/Images/Global/bm_logo.svg HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
Source: global traffic	HTTP traffic detected: GET /js/app/login-page-loader.js HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=3&cb=1490197904 HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
Source: global traffic	HTTP traffic detected: GET /latest//Shared/Content/Images/Global/bm_logo.svg HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=abktQocod1QD3Gqy6DoT2QAAAADveYpFcoKpd66NZBK+EWD1; incap_ses_1815_3085445=FAjBCseDYDzQAEXq5iwwGTlVIWYAAAAA4JYDPSIsffo+miwrKbu8LA==
Source: global traffic	HTTP traffic detected: GET /latest/Shared/Content/Images/LocaleSelector/Flags.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.us.brightmine.com/latest/Gateway/Bundle/Gateway.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /img/Icon-eye-fill.png HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.us.brightmine.com/css/custom_site.css?v=aJorWfNIR3ggUCXMiS10jSg3fhJeMPZHUa8gWgyHP9IAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Shared/Content/Images/LocaleSelector/Flags.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /img/Icon-eye-fill.png HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.us.brightmine.com/css/custom_site.css?v=aJorWfNIR3ggUCXMiS10jSg3fhJeMPZHUa8gWgyHP9IAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=2 HTTP/1.1Host: auth.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /img/Icon-eye-fill.png HTTP/1.1Host: auth.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v=2 HTTP/1.1Host: auth.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /help-and-support/keep-me-logged-in/16393/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/default.css?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/bootstrap.css?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Global/Bundle/sharedAssetFontCss-en-US.css?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/legacyFormCss.css?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/article.min.css?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Shared/AngularBundle/styles.css HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/toolIcons-en-US.css?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Shared/ClientSideConfig/ng-app-settings.js?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/helpers.min.js?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /web/Assets/Full/Bundle/sitejs.min.js?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Shared/Scripts/Libs/OneTrust/one-trust-init.min.js?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Shared/AngularBundle/runtime.js HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hrcenter.us.brightmine.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1Host: rbi.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/checkScript.min.js?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Shared/AngularBundle/polyfills.js HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hrcenter.us.brightmine.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Shared/AngularBundle/main.js HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hrcenter.us.brightmine.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/shareAssetsJs.min.js?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/sharedKnockoutJs.min.js?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/analyticsJs.min.js?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/article.min.js?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /firstevent?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1Host: rbi.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/googleTagManagerJs.min.js?v=2.0.769 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /web/assets/shared/ClientSideConfig/ng-app-settings.json HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest/Global/Content/Fonts/ggl-roboto/roboto-v30-latin-regular.woff2 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hrcenter.us.brightmine.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://assets.us.brightmine.com/latest/Global/Bundle/sharedAssetFontCss-en-US.css?v=2.0.769Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /web/assets/shared/ClientSideConfig/ng-app-settings.json HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
Source: global traffic	HTTP traffic detected: GET /libs/atc/1.6.1/atc.min.js HTTP/1.1Host: addevent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn/target.js HTTP/1.1Host: cdn.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460549104-847971&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=16393&gwa_contentTitle=Keep%20Me%20Logged%20in&gwa_contentType=Article&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_author=&gwa_pubDate=2018-05-10&gwa_localVar4=2014-11-26&gwa_aboutness=&gwa_localVar2=unlocked&gwa_localVar1=&gwa_localVar3=&gwa_siteSection1=tools-and-services&gwa_siteSection2=help-and-support&gwa_siteSection3=Keep%20Me%20Logged%20in&gwa_siteSection4=&gwa_pageName=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_contentHierarchy=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_server=desktop%20platform&mboxMCSDID=4119095A45114079-47347D76165FC6B7&mbox=target-global-mbox&mboxId=0&mboxTime=1713467749114&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1Host: reedbusinessinternat.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /libs/atc/1.6.1/atc.min.js HTTP/1.1Host: www.addevent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=5&cb=456564548 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Content/Images/Article/persistentHeadingBackground.png HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/article.min.css?v=6951Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /latest/Shared/Content/Images/ajax-loader.gif HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/print.css?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /latest/Full/Bundle/webComponentDefaultCss.css HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /latest/Shared/Content/Images/ContentModule/cmCalloutBackground.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /latest/Full/Content/Images/Icons/remove.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.2987047014654294 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/print.css?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /latest/Global/Content/Fonts/ggl-roboto/roboto-v30-latin-700.woff2 HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://hrcenter.us.brightmine.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://assets.us.brightmine.com/latest/Global/Bundle/sharedAssetFontCss-en-US.css?v=2.0.769Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest/Full/Content/Images/ContentModule/DropShadowTwoCol.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
Source: global traffic	HTTP traffic detected: GET /jurisdiction/getalljurisdictions/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /legacy2000/libs/atc/1.6.1/atc.min.js HTTP/1.1Host: cdn.addevent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018e1e0f-938a-75cb-b9e9-d78ab7e6535a/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //Full//Content//Images//Logos//core_consumer_us.svg HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Content/Images/Article/persistentHeadingBackground.png HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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
Source: global traffic	HTTP traffic detected: GET /latest/Shared/Content/Images/ContentModule/cmCalloutBackground.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET /latest/Full/Content/Images/Icons/remove.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET /latest/Full/Content/Images/ContentModule/DropShadowTwoCol.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET /latest/Shared/Content/Images/ajax-loader.gif HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0
Source: global traffic	HTTP traffic detected: GET /_Incapsula_Resource?SWKMTFSR=1&e=0.2987047014654294 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018e1e0f-938a-75cb-b9e9-d78ab7e6535a/en-us.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcTab.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jurisdiction/getalljurisdictions/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET //Full//Content//Images//Logos//core_consumer_us.svg HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcTab.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460552529 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/950188369/?random=1713460552602&cv=11&fst=1713460552602&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/rul/950188369?random=1713460552602&cv=11&fst=1713460552602&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460552529 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460552602&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqaUeMBiijcwlPkVMK4yctatlKv2lLIA&random=4055244565&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-135618937-1&cid=1717981528.1713460552&jid=1492948423&_u=YEBAAEAAAAAAACAAI~&z=1401109685 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-135618937-1&cid=1717981528.1713460552&jid=1492948423&gjid=159953432&_gid=1780739987.1713460552&_u=YEBAAEAAAAAAACAAI~&z=17192609 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460552602&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqaUeMBiijcwlPkVMK4yctatlKv2lLIA&random=4055244565&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-135618937-1&cid=1717981528.1713460552&jid=1492948423&_u=YEBAAEAAAAAAACAAI~&z=1401109685 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/018e1e11-08a1-7636-85ca-4577d898aaa6/7e637ca4-577a-48f6-bdf8-17957e2bfcc4/brightmine-logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/018e1e11-08a1-7636-85ca-4577d898aaa6/7e637ca4-577a-48f6-bdf8-17957e2bfcc4/brightmine-logo.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
Source: global traffic	HTTP traffic detected: GET /favicon.ico?v2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
Source: global traffic	HTTP traffic detected: GET /forgottenpassword/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/register-or-login.css?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
Source: global traffic	HTTP traffic detected: GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1Host: rbi.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; rbi=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /Web/Assets/Full/Bundle/generic-standard-page.min.js?v=6951 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460558286-269908&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=&gwa_contentTitle=Forgotten%20password&gwa_contentType=&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_siteSection1=forgottenpassword&gwa_siteSection2=&gwa_siteSection3=&gwa_siteSection4=&gwa_pageName=forgottenpassword&gwa_contentHierarchy=forgottenpassword&gwa_server=desktop%20platform&mboxMCSDID=692873E39B366FD7-655FB5B4EA028375&mbox=target-global-mbox&mboxId=0&mboxTime=1713467758297&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1Host: reedbusinessinternat.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /latest/Full/Content/Images/Forms/fieldBackground.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://assets.us.brightmine.com/latest/Full/Bundle/legacyFormCss.css?v=2.0.769Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
Source: global traffic	HTTP traffic detected: GET /latest/Full/Content/Images/Forms/fieldBackground.png HTTP/1.1Host: assets.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/950188369/?random=1713460559129&cv=11&fst=1713460559129&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /td/rul/950188369?random=1713460559129&cv=11&fst=1713460559129&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460559195 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460559129&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqHU9SbkGTH_-Gbt1q8QIq2sHFtyLdvcxkQesG-_-qsCPPEy_G&random=4245107337&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460559195 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460559129&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqHU9SbkGTH_-Gbt1q8QIq2sHFtyLdvcxkQesG-_-qsCPPEy_G&random=4245107337&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/css/main.css?v=638484963597398887 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentification.js HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=F1DF4E8DA09829A65EEF7AACA0C56D50 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=915B990125E8A6865191232B3C3F9D8F HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/heroes/pattern_hero%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg?h=420&iar=0&w=1230&hash=51E0FB2312B4005496EF1209FD583A43 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/csr%20wellness_mobile%201_800x420.jpg?h=420&iar=0&w=800&hash=5CAE46E3F2412A05E7D8584D25B63DFF HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/from-complex-to-possible.png?h=420&iar=0&w=1230&hash=980BED648303F4AA5BC7BDCF211C2315 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/js/LNRS.bundle.config.js?v=638484963603668861 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=915B990125E8A6865191232B3C3F9D8F HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=F1DF4E8DA09829A65EEF7AACA0C56D50 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /layouts/system/VisitorIdentificationCSS.aspx?tstamp=1713460563277 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/js/Vendor/require.score.3.1.14.min.js HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/heroes/pattern_hero%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/celent%20tile%20img%20jpg.jpg?h=170&iar=0&w=270&hash=5C83B7E104E9151B0581F8CD10EA72E0 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/payment%20trends%202024_tile-image-270x170%20jpg.jpg?h=170&iar=0&w=270&hash=31A1E0E0236BBF7A98DD735B10DDF8E6 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/tile%20img%20for%20tcof%20retail%20jpg.jpg?h=170&iar=0&w=270&hash=83A5C49094FD423F6A608530CF757C1E HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/government/5%20public%20sector%202024/5%20top%20threat%2012924%20jpg.jpg?h=170&iar=0&w=270&hash=282500ABCD598FC9D9CC84300150B53F HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/csr%20wellness_mobile%201_800x420.jpg?h=420&iar=0&w=800&hash=5CAE46E3F2412A05E7D8584D25B63DFF HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg?h=420&iar=0&w=1230&hash=51E0FB2312B4005496EF1209FD583A43 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/javelin%20pr%20tile%20img%20png.png?h=170&iar=0&w=270&hash=98F44E34F06D15DDC759AAA71D4B85F7 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
Source: global traffic	HTTP traffic detected: GET /-/media/images/healthcare/3-i%20and%20r%20pages/video/member%20engagement%20with%20sdoh%20webinar/ln%20menu%20image%20270x170%20knocking%20down%20barriers%20with%20data%20jpg.jpg?h=170&iar=0&w=270&hash=F9FAAD5F1BF33D3F6177BFF5F80A0F99 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/tcoc-regional_270x170%20png.png?h=170&iar=0&w=270&hash=F43278B90D67065468EDD449166DD2E5 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/flag_270x170%20png.png?h=170&iar=0&w=270&hash=7B72FF4206EA37A8AC8DEADF8690F469 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/from-complex-to-possible.png?h=420&iar=0&w=1230&hash=980BED648303F4AA5BC7BDCF211C2315 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/celent%20tile%20img%20jpg.jpg?h=170&iar=0&w=270&hash=5C83B7E104E9151B0581F8CD10EA72E0 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/payment%20trends%202024_tile-image-270x170%20jpg.jpg?h=170&iar=0&w=270&hash=31A1E0E0236BBF7A98DD735B10DDF8E6 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/catfishing-website-thumbnail_270x170%20png.png?h=170&iar=0&w=270&hash=7C549725CE1171E10F84CD1535971AEF HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/iwd%202024_270x170%20png.png?h=170&iar=0&w=270&hash=BAC305282643EF1EE26BB0E2B96C3EA3 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/government/5%20public%20sector%202024/5%20top%20threat%2012924%20jpg.jpg?h=170&iar=0&w=270&hash=282500ABCD598FC9D9CC84300150B53F HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/bhm%20graphic%20simple_270x170%20png.png?h=170&iar=0&w=270&hash=ABB107F15E66C1D41B6BAF4A394BD0E3 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/content/runaway-children-story_270x170%20jpg.jpg?h=170&iar=0&w=270&hash=3136CC6D5BF8B0C93796551094BA84B0 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/tile%20img%20for%20tcof%20retail%20jpg.jpg?h=170&iar=0&w=270&hash=83A5C49094FD423F6A608530CF757C1E HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/healthcare/3-i%20and%20r%20pages/video/member%20engagement%20with%20sdoh%20webinar/ln%20menu%20image%20270x170%20knocking%20down%20barriers%20with%20data%20jpg.jpg?h=170&iar=0&w=270&hash=F9FAAD5F1BF33D3F6177BFF5F80A0F99 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/javelin%20pr%20tile%20img%20png.png?h=170&iar=0&w=270&hash=98F44E34F06D15DDC759AAA71D4B85F7 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/battle-climate-change.png?h=170&iar=0&w=270&hash=87197225C830C3E4A9EFE2B9DFF28CA1 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/road%20to%20zero%20thumbnail2%20jpg.jpg?h=170&iar=0&w=270&hash=A15673A378D6B17FDDC8AFD66C93A728 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/tcoc-regional_270x170%20png.png?h=170&iar=0&w=270&hash=F43278B90D67065468EDD449166DD2E5 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/financial%20inclusion_banner270x170.png?h=170&iar=0&w=270&hash=11A79D8E6FA505DA6B1E1965DD928F02 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/our%20stories/traffic270%20170%20png.png?h=170&iar=0&w=270&hash=462A40E91F079D87E5F29BC8A96AC035 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/privacyoptions29x14%20png.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/flag_270x170%20png.png?h=170&iar=0&w=270&hash=7B72FF4206EA37A8AC8DEADF8690F469 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/js/LNRS.bundle.js?v=638484963592761859 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/iwd%202024_270x170%20png.png?h=170&iar=0&w=270&hash=BAC305282643EF1EE26BB0E2B96C3EA3 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/catfishing-website-thumbnail_270x170%20png.png?h=170&iar=0&w=270&hash=7C549725CE1171E10F84CD1535971AEF HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/bhm%20graphic%20simple_270x170%20png.png?h=170&iar=0&w=270&hash=ABB107F15E66C1D41B6BAF4A394BD0E3 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/content/runaway-children-story_270x170%20jpg.jpg?h=170&iar=0&w=270&hash=3136CC6D5BF8B0C93796551094BA84B0 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/battle-climate-change.png?h=170&iar=0&w=270&hash=87197225C830C3E4A9EFE2B9DFF28CA1 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/road%20to%20zero%20thumbnail2%20jpg.jpg?h=170&iar=0&w=270&hash=A15673A378D6B17FDDC8AFD66C93A728 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/financial%20inclusion_banner270x170.png?h=170&iar=0&w=270&hash=11A79D8E6FA505DA6B1E1965DD928F02 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/corporate/our%20stories/traffic270%20170%20png.png?h=170&iar=0&w=270&hash=462A40E91F079D87E5F29BC8A96AC035 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/privacyoptions29x14%20png.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /ajax/libs/algoliasearch/3.33.0/algoliasearch.min.js?v=638484963592761859 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/autocomplete.js/0.37.1/autocomplete.min.js?v=638484963592761859 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/vue/2.2.6/vue.min.js?v=638484963592761859 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yts/jsbin/www-widgetapi-vflktVMi7/www-widgetapi.js HTTP/1.1Host: s.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/favicon.ico HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/favicon.ico HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
Source: global traffic	HTTP traffic detected: GET /scripttemplates/otSDKStub.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /copyright HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460568891 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"
Source: global traffic	HTTP traffic detected: GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460568891 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0If-None-Match: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw"
Source: global traffic	HTTP traffic detected: GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460570393 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; gpv_Page=home; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065370%7C9%7CMCAAMB-1714065370%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467770s%7CNONE%7CvVersion%7C5.5.0If-None-Match: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg"
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: lexisnexisrisksolutions.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460570626 HTTP/1.1Host: analytics.lexisnexisrisk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460570393 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460571119 HTTP/1.1Host: analytics.lexisnexisrisk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: lexisnexisrisksolutions.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /data.js?rnd=62fe5c0e6ad95 HTTP/1.1Host: tags.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /up_loader.1.1.0.js HTTP/1.1Host: js.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460570626 HTTP/1.1Host: analytics.lexisnexisrisk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460571119 HTTP/1.1Host: analytics.lexisnexisrisk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lnrs/logerror HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; gpv_Page=home; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=1; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE
Source: global traffic	HTTP traffic detected: GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFVXAAAADfeEAOj HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/018e86cb-0f61-72d5-abc5-660accde9ba2/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=tthfdvo&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&upid=rw95j4b&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFVXQAAADbhbAOj HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adscores/g.pixel?sid=9212289188&_puid=ZiFVXXDhCtzE4SDixudDNfFr&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D HTTP/1.1Host: aa.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFVXAAAADfeEAOj HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/018e86cb-0f61-72d5-abc5-660accde9ba2/en.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXXDhCtzE4SDixudDNfFr
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; cb=ZiFVXaa9gf7uMjfnRYtEussv
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=ZiFVXQAAADbhbAOj HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/10751/?che=1713460573794&ip=81.181.57.52&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D214410604856006788229 HTTP/1.1Host: d.agkn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ab=0001%3AbRnmeV4GDedoZSAAHo%2FGOdhwxO4NB42U
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXY7IHCL1JRUBV94o5H49
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; cb=ZiFVXaa9gf7uMjfnRYtEussv
Source: global traffic	HTTP traffic detected: GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/ot_guard_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/104ff038-4400-483e-a464-09cc53e8c04f/517eb6c6-b474-40d4-9c47-7b50cbe09d2f/LNRS_RGB_POS_300.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/static/powered_by_logo.svg HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=128&cm=214410604856006788229 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; cb=ZiFVXaa9gf7uMjfnRYtEussv
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3583132725641?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2019%3A16%3A13%204%20-120&mid=72321666800473193042525972382318204557&aamlh=9&ce=UTF-8&cdp=2&pageName=copyright&g=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&c.&getPreviousValue=3.0&getTimeParting=6.3&call_type=page%20view&opt.&perf=1&dmp=Y&sell=Y&.opt&cm.&ssf=1&.cm&.c&cc=USD&ch=copyright&server=risk.lexisnexis.com&events=event21%2Cevent19%2Cevent60%3D14&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=copyright&v1=copyright&c2=D%3Dv14&v2=D%3Dmid&c3=not%20tagged&v3=not%20tagged&c4=home&c6=D%3Dv6&v6=desktop&c7=D%3Dv7&v7=en-us&c8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v9=5.0%20%28windows%20nt%2010.0%3B%20win64%3B%20x64%29%20applewebkit%2F537.36%20%28khtml%2C%20like%20gecko%29%20chrome%2F117.0.0.0%20safari%2F537.36&c10=2.25.0%7Cpage%20view&v10=2.25.0%7Cpage%20view&c11=D%3Dv11&v11=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&v14=copyright&c16=D%3Dv21&c17=D%3Dv42&v20=page_view&v21=united_states&c22=not%20tagged&v22=bj13hp1dwohhdvwlnmv00t12%7C795f63a1528045ecb42c7dd1921764b8%7CTrue&c23=not%20tagged&v24=%2B1&c25=D%3Dv45&v25=not%20tagged&v26=not%20tagged&c34=D%3Dv34&v34=4%2F18%2F2024%201%3A16%3A10%20pm&c40=14&v41=home&v42=last_build%3D2024-04-17t14%3A53%3A26z%7Cenv%3Dproduction%7Cnum_of_files%3D0&v44=%2B1&v45=A625F8BC-FECA-43F1-B214-C093F227F173%7Cen-US&v60=14&v63=%2B1&v65=%2B1&v66=2&c70=home&c71=highestPercentViewed%3D21%7CinitialPercentViewed%3D21&v76=solution%20missing&v78=not%20set&v87=not%20tagged&v88=not%20tagged&v89=660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3&v90=not%20tagged&v101=1%7CY%7CY&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.lexisnexisrisk.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/up?adv=tthfdvo&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&upid=rw95j4b&upv=1.1.0 HTTP/1.1Host: insight.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&firstPartyCookieDomain=tracking.risk.lexisnexis.com HTTP/1.1Host: tracking.risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=571&optin=disabled&firstPartyCookieDomain=tracking.risk.lexisnexis.com HTTP/1.1Host: tracking.risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright
Source: global traffic	HTTP traffic detected: GET /connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/104ff038-4400-483e-a464-09cc53e8c04f/517eb6c6-b474-40d4-9c47-7b50cbe09d2f/LNRS_RGB_POS_300.png HTTP/1.1Host: cdn.cookielaw.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3583132725641?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2019%3A16%3A13%204%20-120&mid=72321666800473193042525972382318204557&aamlh=9&ce=UTF-8&cdp=2&pageName=copyright&g=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&c.&getPreviousValue=3.0&getTimeParting=6.3&call_type=page%20view&opt.&perf=1&dmp=Y&sell=Y&.opt&cm.&ssf=1&.cm&.c&cc=USD&ch=copyright&server=risk.lexisnexis.com&events=event21%2Cevent19%2Cevent60%3D14&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=copyright&v1=copyright&c2=D%3Dv14&v2=D%3Dmid&c3=not%20tagged&v3=not%20tagged&c4=home&c6=D%3Dv6&v6=desktop&c7=D%3Dv7&v7=en-us&c8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v9=5.0%20%28windows%20nt%2010.0%3B%20win64%3B%20x64%29%20applewebkit%2F537.36%20%28khtml%2C%20like%20gecko%29%20chrome%2F117.0.0.0%20safari%2F537.36&c10=2.25.0%7Cpage%20view&v10=2.25.0%7Cpage%20view&c11=D%3Dv11&v11=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&v14=copyright&c16=D%3Dv21&c17=D%3Dv42&v20=page_view&v21=united_states&c22=not%20tagged&v22=bj13hp1dwohhdvwlnmv00t12%7C795f63a1528045ecb42c7dd1921764b8%7CTrue&c23=not%20tagged&v24=%2B1&c25=D%3Dv45&v25=not%20tagged&v26=not%20tagged&c34=D%3Dv34&v34=4%2F18%2F2024%201%3A16%3A10%20pm&c40=14&v41=home&v42=last_build%3D2024-04-17t14%3A53%3A26z%7Cenv%3Dproduction%7Cnum_of_files%3D0&v44=%2B1&v45=A625F8BC-FECA-43F1-B214-C093F227F173%7Cen-US&v60=14&v63=%2B1&v65=%2B1&v66=2&c70=home&c71=highestPercentViewed%3D21%7CinitialPercentViewed%3D21&v76=solution%20missing&v78=not%20set&v87=not%20tagged&v88=not%20tagged&v89=660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3&v90=not%20tagged&v101=1%7CY%7CY&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&AQE=1 HTTP/1.1Host: analytics.lexisnexisrisk.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=571&optin=disabled&firstPartyCookieDomain=tracking.risk.lexisnexis.com HTTP/1.1Host: tracking.risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; s_cc=true
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&elq1pcGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1Host: tracking.risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; s_cc=true
Source: global traffic	HTTP traffic detected: GET /connectors/clickagy/usersync?cookieQ=1&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1Host: pixel-sync.sitescout.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ssi=c5218487-d718-4b42-91be-3fd18ac4d1d4#1713460575544
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=5&cm=c5218487-d718-4b42-91be-3fd18ac4d1d4-6621555f-5553 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"}]
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&elq1pcGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1Host: tracking.risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=clickagy&google_sc&google_cm&google_hm=WmlGVlhhYTlnZjd1TWpmblJZdEV1c3N2 HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=8&cm=CAESEO96mNRiSkwTTcCWYFFYN5Q&google_cver=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"}]
Source: global traffic	HTTP traffic detected: GET /420246.gif?partner_uid=ZiFVXaa9gf7uMjfnRYtEussv HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CJbTGRIkCiAIARD1lgkaGFppRlZYYWE5Z2Y3dU1qZm5SWXRFdXNzdhAAGg0I4qqFsQYSBQjoBxAAQgBKAA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=a7pUoLvmJ1UQ9DtOhZQjvFejgKT79TMTtRM+DtO/x3I=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /pixel.gif?ch=114&cm=c0f183b26b286232d8c67bf30ce5378ca314913c4474d5c990a970ef9594319725abae5358c0e7bc HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"}]
Source: global traffic	HTTP traffic detected: GET /map/c=8545/tp=CKGY/tpid=ZiFVXaa9gf7uMjfnRYtEussv/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=8545/tp=CKGY/tpid=ZiFVXaa9gf7uMjfnRYtEussv/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=120&cm=4058da1893e56f9a9dd2e53119e94f35 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"}]
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
Source: global traffic	HTTP traffic detected: GET /help-and-support/keep-me-logged-in/16393/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1Host: rbi.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; rbi=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460583884-867507&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=16393&gwa_contentTitle=Keep%20Me%20Logged%20in&gwa_contentType=Article&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_author=&gwa_pubDate=2018-05-10&gwa_localVar4=2014-11-26&gwa_aboutness=&gwa_localVar2=unlocked&gwa_localVar1=&gwa_localVar3=&gwa_siteSection1=tools-and-services&gwa_siteSection2=help-and-support&gwa_siteSection3=Keep%20Me%20Logged%20in&gwa_siteSection4=&gwa_pageName=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_contentHierarchy=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_server=desktop%20platform&mboxMCSDID=098376FFA2BFF1D1-172618600D8287A7&mbox=target-global-mbox&mboxId=0&mboxTime=1713467783890&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1Host: reedbusinessinternat.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/950188369/?random=1713460584429&cv=11&fst=1713460584429&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/950188369?random=1713460584429&cv=11&fst=1713460584429&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460584539 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460584429&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqjzmByJwT00an2qav7NPPu8lO3mxZJXVo2cGwKwqzAsMPWAu2&random=3626280790&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /jurisdiction/getalljurisdictions/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460584539 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460584429&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqjzmByJwT00an2qav7NPPu8lO3mxZJXVo2cGwKwqzAsMPWAu2&random=3626280790&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jurisdiction/getalljurisdictions/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /forgottenpassword/ HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1Host: rbi.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; rbi=72487132774482760582579231535531206623; DST=
Source: global traffic	HTTP traffic detected: GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460588402-661231&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=&gwa_contentTitle=Forgotten%20password&gwa_contentType=&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_siteSection1=forgottenpassword&gwa_siteSection2=&gwa_siteSection3=&gwa_siteSection4=&gwa_pageName=forgottenpassword&gwa_contentHierarchy=forgottenpassword&gwa_server=desktop%20platform&mboxMCSDID=2148D62479FDDBC4-0CD37E5C55CA8F67&mbox=target-global-mbox&mboxId=0&mboxTime=1713467788413&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1Host: reedbusinessinternat.tt.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0Authorization: Bearer nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/forgottenpassword/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/950188369/?random=1713460590852&cv=11&fst=1713460590852&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/950188369?random=1713460590852&cv=11&fst=1713460590852&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460590958 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://hrcenter.us.brightmine.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460590852&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqLu9FVaOSyCG4emrz3CMFlyX1dz9db6_reGsCOQ9mOhWzWy0l&random=2199991498&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://hrcenter.us.brightmine.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A30+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
Source: global traffic	HTTP traffic detected: GET /headerfooterservice/v1/header/full HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A30+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1Host: hrcenter.us.brightmine.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A30+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
Source: global traffic	HTTP traffic detected: GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460590958 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /layouts/system/VIChecker.aspx?tstamp=638490573626029594 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
Source: global traffic	HTTP traffic detected: GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/950188369/?random=1713460590852&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqLu9FVaOSyCG4emrz3CMFlyX1dz9db6_reGsCOQ9mOhWzWy0l&random=2199991498&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57CIf-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57CIf-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57CIf-None-Match: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw"
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57CIf-None-Match: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg"
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=12ad48b0-2785-42b9-8a9d-64a5609cdfa1&ca=2024-04-18T17%3A16%3A37.520Z&tz=Europe%2FZurich&bis=5&referrer=&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=true HTTP/1.1Host: ws.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://risk.lexisnexis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: cjBHzyT+ne2EH4+TttWYtw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=12ad48b0-2785-42b9-8a9d-64a5609cdfa1&ca=2024-04-18T17%3A16%3A37.520Z&tz=Europe%2FZurich&bis=5&referrer=&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=false HTTP/1.1Host: ws.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://risk.lexisnexis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 0nLipIdt3Ml3+qrdKpj3QA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/940382430/?random=1713460598535&cv=11&fst=1713460598535&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978398205/?random=1713460598569&cv=11&fst=1713460598569&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10896111711/?random=1713460598583&cv=11&fst=1713460598583&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/940382430?random=1713460598535&cv=11&fst=1713460598535&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/938539671/?random=1713460598597&cv=11&fst=1713460598597&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/978398205?random=1713460598569&cv=11&fst=1713460598569&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/10896111711?random=1713460598583&cv=11&fst=1713460598583&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/938539671?random=1713460598597&cv=11&fst=1713460598597&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10827142419/?random=1713460598612&cv=11&fst=1713460598612&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/10827142419?random=1713460598612&cv=11&fst=1713460598612&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/527644678?random=1713460598626&cv=11&fst=1713460598626&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/527644678/?random=1713460598626&cv=11&fst=1713460598626&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=12ad48b0-2785-42b9-8a9d-64a5609cdfa1&ca=2024-04-18T17%3A16%3A37.520Z&tz=Europe%2FZurich&bis=5&referrer=&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=false HTTP/1.1Host: ws.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://risk.lexisnexis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: nbDe95j5v3y/nD5Sjm5dew==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/936886275/?random=1713460598639&cv=11&fst=1713460598639&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/938545461/?random=1713460598652&cv=11&fst=1713460598652&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1048135065/?random=1713460598672&cv=11&fst=1713460598672&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/936886275?random=1713460598639&cv=11&fst=1713460598639&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/938545461?random=1713460598652&cv=11&fst=1713460598652&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/1048135065?random=1713460598672&cv=11&fst=1713460598672&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/940382430/?random=1713460598535&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqt2vxCGdh_-KR7snwfntA4Ym8_jPckvpGbEdEfwHARSqNJNpK&random=2682472879&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978398205/?random=1713460598569&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxzAb7MtqgiCdj6IdS-xkQHro7O0Xeic3T1lPdsMzd3UpjWLU&random=2076076556&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10896111711/?random=1713460598583&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeQz13I9vWjWPFAmCsD_z8DG_7cWa_dHiwpAR3LqpdcA0NQDB&random=2259684138&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/938539671/?random=1713460598597&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqq9l0-oIOctTVbZa_ylso2QtUz3PmK7dXGRADxHsEHp9vfC3B&random=2916656638&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10827142419/?random=1713460598612&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq9CkvN06-cqQCBSmyay6SSpeNMpZb8Tg8PhtBeUZnm2vWVWWL&random=1184559777&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/527644678/?random=1713460598626&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqrjn7gevXohfm76TOqo60hJvadSULCli3gn_CmJ7Tuoqbzxim&random=4131391049&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/936886275/?random=1713460598639&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqtU78pFEc-HI-83Puyd01qRjFFh4bCabpvwslW6h0YnzoZqPd&random=3864921354&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/938545461/?random=1713460598652&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqY7p5mSXpArU4oNiZIH6FJjw5Us8rtxNid1qLOYiXNy7zuFY7&random=1949043970&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1048135065/?random=1713460598672&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq323deJXyqVPzoU_tcc8V3DkgXsV7w0SF1if2B25ev-YHLGjj&random=3722380409&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/978398205/?random=1713460598569&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxzAb7MtqgiCdj6IdS-xkQHro7O0Xeic3T1lPdsMzd3UpjWLU&random=2076076556&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/940382430/?random=1713460598535&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqt2vxCGdh_-KR7snwfntA4Ym8_jPckvpGbEdEfwHARSqNJNpK&random=2682472879&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10896111711/?random=1713460598583&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeQz13I9vWjWPFAmCsD_z8DG_7cWa_dHiwpAR3LqpdcA0NQDB&random=2259684138&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/938539671/?random=1713460598597&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqq9l0-oIOctTVbZa_ylso2QtUz3PmK7dXGRADxHsEHp9vfC3B&random=2916656638&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/10827142419/?random=1713460598612&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq9CkvN06-cqQCBSmyay6SSpeNMpZb8Tg8PhtBeUZnm2vWVWWL&random=1184559777&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/527644678/?random=1713460598626&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqrjn7gevXohfm76TOqo60hJvadSULCli3gn_CmJ7Tuoqbzxim&random=4131391049&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/1048135065/?random=1713460598672&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq323deJXyqVPzoU_tcc8V3DkgXsV7w0SF1if2B25ev-YHLGjj&random=3722380409&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/938545461/?random=1713460598652&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqY7p5mSXpArU4oNiZIH6FJjw5Us8rtxNid1qLOYiXNy7zuFY7&random=1949043970&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/936886275/?random=1713460598639&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqtU78pFEc-HI-83Puyd01qRjFFh4bCabpvwslW6h0YnzoZqPd&random=3864921354&rmt_tld=0&ipr=y HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=79908&dpuuid=ZiFVXaa9gf7uMjfnRYtEussv&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
Source: global traffic	HTTP traffic detected: GET /data HTTP/1.1Host: aorta.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]
Source: global traffic	HTTP traffic detected: GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1Host: hemsync.clickagy.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv
Source: global traffic	HTTP traffic detected: GET /pixel.gif?clkgypv=pxl&ch=124&cm=72487132774482760582579231535531206623 HTTP/1.1Host: aorta.clickagy.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/css/main.css?v=638484955469443221 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/phone-ringing-160x160-wht%20png.png?h=160&iar=0&w=160&hash=04AAD29CAD79C9A6F7B5D2EAD19611A4 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/pencil_icon%20png.png?h=20&iar=0&w=20&hash=A7C6AB4BF363E42EA2DCD3CA10ECF939 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/placeholders/Download_svg.svg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-270x170.jpg?h=170&iar=0&w=270&hash=7919C829305E7DE80573C4DD67D91B54 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-600x570.jpg?h=570&iar=0&w=600&hash=BE1263DEFABDE72A7F0B006766788148 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/js/LNRS.bundle.config.js?v=638484955474984366 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/phone-ringing-160x160-wht%20png.png?h=160&iar=0&w=160&hash=04AAD29CAD79C9A6F7B5D2EAD19611A4 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/healthcare/default_videomodal_image-v2-845x403.jpg?h=403&iar=0&w=845&hash=6B5C626A3B68E134F023C3930C5A6220 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/download%20svg.svg?iar=0&hash=06D88EFA3785CDBEE6D8D56186DBFC35 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/pencil_icon%20png.png?h=20&iar=0&w=20&hash=A7C6AB4BF363E42EA2DCD3CA10ECF939 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/placeholders/Download_svg.svg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/tag_icon.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-270x170.jpg?h=170&iar=0&w=270&hash=7919C829305E7DE80573C4DD67D91B54 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-600x570.jpg?h=570&iar=0&w=600&hash=BE1263DEFABDE72A7F0B006766788148 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/js/LNRS.bundle.js?v=638484955464930367 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/download%20svg.svg?iar=0&hash=06D88EFA3785CDBEE6D8D56186DBFC35 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/healthcare/default_videomodal_image-v2-845x403.jpg?h=403&iar=0&w=845&hash=6B5C626A3B68E134F023C3930C5A6220 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/tag_icon.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /copyright HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.29.7/js/player.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.29.7/js/vendor.module.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://player.vimeo.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/4.29.7/css/player.css HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d?mw=80&q=85 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DAIf-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DAIf-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"
Source: global traffic	HTTP traffic detected: GET /ajax/libs/algoliasearch/3.33.0/algoliasearch.min.js?v=638484955464930367 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/autocomplete.js/0.37.1/autocomplete.min.js?v=638484955464930367 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/vue/2.2.6/vue.min.js?v=638484955464930367 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-/media/csr%20wellness_mantle%201_1230x420.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DAIf-None-Match: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw"
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DAIf-None-Match: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg"
Source: global traffic	HTTP traffic detected: GET /ajax/libs/mustache.js/2.3.0/mustache.min.js?v=638484955464930367 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js_opt/modules/utils/vuid.min.js HTTP/1.1Host: f.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iframe_api?v=638484955464930367 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-/media/csr%20wellness_mantle%201_1230x420.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"e4cfb76386f1f61f399d299928b57ee3"
Source: global traffic	HTTP traffic detected: GET /lnrs/logerror HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /portrait/35637746_60x60 HTTP/1.1Host: i.vimeocdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://player.vimeo.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /insights-resources/case-study HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /portrait/35637746_60x60 HTTP/1.1Host: i.vimeocdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GetEloquaFieldIds/%7B794409E6-12BE-4A3B-9B65-C67BFA5FDEE2%7D?formId=4317 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /ajax/libs/instantsearch.js/1.12.1/instantsearch.min.js?v=638484963592761859 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GetLocationInfo?_=1713460605018 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /temp/dictionary.en-US.json?_=1713460608986 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetEloquaFieldIds/%7B613E43EC-B648-4C66-81D0-937DCA7B3A72%7D?formId=4318 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetLocationInfo?_=1713460605019 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetEloquaFieldIds/%7B58EC541D-362A-4C45-9D59-4901223CD661%7D?formId=4318 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /visitor/v200/svrGP?pps=70&siteid=903&ms=402&firstPartyCookieDomain=tracking.risk.lexisnexis.com&elqGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1Host: tracking.risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetLocationInfo?_=1713460605020 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=h6hnb8mbbpsh HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=9cc2wvmvhrz5 HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=ls6gt4og4jfj HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/algoliasearch-helper-js/2.28.1/algoliasearch.helper.min.js?v=638484963592761859 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /temp/dictionary.en-US.json?_=1713460608986 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetLocationInfo?_=1713460605019 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/js/Components/Resources/Templates/MasonryResourceListingItem.html?v=638484963592761859 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetEloquaFieldIds/%7B794409E6-12BE-4A3B-9B65-C67BFA5FDEE2%7D?formId=4317 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetLocationInfo?_=1713460605020 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/heroes/key_image%20jpg.jpg?h=470&iar=0&w=1230&hash=183D924018454C8F9F17F6FFD180EFF8 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/icon_filter%20png.png?h=20&iar=0&w=24&hash=AE854452B53B709A96D69C06C51A76EC HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /GetEloquaFieldIds/%7B58EC541D-362A-4C45-9D59-4901223CD661%7D?formId=4318 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /GetEloquaFieldIds/%7B613E43EC-B648-4C66-81D0-937DCA7B3A72%7D?formId=4318 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-1230x420.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /GetLocationInfo?_=1713460605018 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /-/media/8c790672c01448b9ae07187b79fe2079.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/js/Components/Resources/Templates/MasonryResourceListingItem.html?v=638484963592761859 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/heroes/key_image%20jpg.jpg?h=470&iar=0&w=1230&hash=183D924018454C8F9F17F6FFD180EFF8 HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/heroes/our_technology_hero%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"If-None-Match: W/"e4cfb76386f1f61f399d299928b57ee3"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/icons/icon_filter%20png.png?h=20&iar=0&w=24&hash=AE854452B53B709A96D69C06C51A76EC HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /-/media/8c790672c01448b9ae07187b79fe2079.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-/media/images/lnrs/heroes/our_technology_hero%20jpg.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-trackingAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"e4cfb76386f1f61f399d299928b57ee3"
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=8a1d4bfb-8e0f-4262-9de0-dd25bb89bc20&ca=2024-04-18T17%3A16%3A50.864Z&tz=Europe%2FZurich&bis=5&referrer=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=true HTTP/1.1Host: ws.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://risk.lexisnexis.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: FnUostwpNIlah8nk9DnP4w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /js/bg/IsHUla7t4cK5kOAb6cwcBiPQ5HnUjMTZuq5wUJJd2UM.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.recaptcha.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/940382430/?random=1713460610947&cv=11&fst=1713460610947&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/940382430?random=1713460610947&cv=11&fst=1713460610947&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/978398205/?random=1713460610976&cv=11&fst=1713460610976&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/978398205?random=1713460610976&cv=11&fst=1713460610976&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-1230x420.jpg HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10896111711/?random=1713460610993&cv=11&fst=1713460610993&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/10896111711?random=1713460610993&cv=11&fst=1713460610993&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/938539671?random=1713460611010&cv=11&fst=1713460611010&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/938539671/?random=1713460611010&cv=11&fst=1713460611010&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/10827142419?random=1713460611030&cv=11&fst=1713460611030&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/10827142419/?random=1713460611030&cv=11&fst=1713460611030&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/527644678?random=1713460611045&cv=11&fst=1713460611045&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/527644678/?random=1713460611045&cv=11&fst=1713460611045&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1Host: ws.zoominfo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
Source: global traffic	HTTP traffic detected: GET /cookieconsentpub/v1/geo/location HTTP/1.1Host: geolocation.onetrust.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://risk.lexisnexis.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=76420934-eb93-4a88-94c8-85612c0f99b7&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a3d6060f-69fb-461d-9c80-0b696d307f47&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1Host: www.recaptcha.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=h6hnb8mbbpshAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/936886275/?random=1713460611056&cv=11&fst=1713460611056&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D
Source: global traffic	HTTP traffic detected: GET /td/rul/936886275?random=1713460611056&cv=11&fst=1713460611056&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/938545461/?random=1713460611072&cv=11&fst=1713460611072&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/1048135065/?random=1713460611085&cv=11&fst=1713460611085&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /td/rul/938545461?random=1713460611072&cv=11&fst=1713460611072&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
Source: global traffic	HTTP traffic detected: GET /i/adsct?bci=3&eci=2&event_id=76420934-eb93-4a88-94c8-85612c0f99b7&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a3d6060f-69fb-461d-9c80-0b696d307f47&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="
Source: global traffic	HTTP traffic detected: GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1Host: risk.lexisnexis.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5DIf-None-Match: "awSmcPLAOnF6/B0h4W9/TEG+qLYXKrTMxy8aBCCs7Wo"
Source: global traffic	HTTP traffic detected: GET /td/rul/1048135065?random=1713460611085&cv=11&fst=1713460611085&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://risk.lexisnexis.com/insights-resources/case-studyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1

Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: typeof define === 'function' && define.amd ? define('score_bootstrap/Components/YoutubeVideo',["jquery", "eventManager", 'loglevel', "//www.youtube.com/iframe_api"], factory) : equals www.youtube.com (Youtube)
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: typeof exports === 'object' && typeof module !== typeof void 0 ? module.exports = factory(require("jquery"), require("eventManager"), require('loglevel'), require("//www.youtube.com/iframe_api")) : equals www.youtube.com (Youtube)
Source: chromecache_331.2.dr	String found in binary or memory: ;function W(a){this.c=a\|\|{};this.a={};this.a.host="http://www.youtube.com";this.a.title="";this.f=this.b=!1;a=document.getElementById("www-widgetapi-script");if(this.b=!!("https:"==document.location.protocol\|\|a&&0==a.src.indexOf("https:"))){a=[this.c,window.YTConfig\|\|{},this.a];for(var b=0;b<a.length;b++)a[b].host&&(a[b].host=a[b].host.replace("http://","https://"))}} equals www.youtube.com (Youtube)
Source: chromecache_331.2.dr	String found in binary or memory: Y.prototype.l=function(a,b){Y.D.l.call(this,a,b?b.info:void 0)};function Pb(a){W.call(this,a);this.a.host="https://www.youtube.com";this.a.title="upload widget";this.a.width=640;this.a.height=.67*T(this,"width")} equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=hA(a,c,e);M(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return M(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},kA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: define("Components/Buttons/VideoModalButton", ["require", "exports", "jquery", "eventManager", "//www.youtube.com/iframe_api", "//player.vimeo.com/api/player.js"], function (require, exports, $) { equals www.youtube.com (Youtube)
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: if (!window['YT']) { var YT = { loading: 0, loaded: 0 }; } if (!window['YTConfig']) { var YTConfig = { 'host': 'http://www.youtube.com' }; } if (!YT.loading) { YT.loading = 1; (function () { var l = []; YT.ready = function (f) { if (YT.loaded) { f(); } else { l.push(f); } }; window.onYTReady = function () { YT.loaded = 1; for (var i = 0; i < l.length; i++) { try { l[i](); } catch (e) { } } }; YT.setConfig = function (c) { for (var k in c) { if (c.hasOwnProperty(k)) { YTConfig[k] = c[k]; } } }; var a = document.createElement('script'); a.type = 'text/javascript'; a.id = 'www-widgetapi-script'; a.src = 'https://s.ytimg.com/yts/jsbin/www-widgetapi-vflktVMi7/www-widgetapi.js'; a.async = true; var b = document.getElementsByTagName('script')[0]; b.parentNode.insertBefore(a, b); })(); }; equals www.youtube.com (Youtube)
Source: chromecache_364.2.dr, chromecache_579.2.dr, chromecache_450.2.dr	String found in binary or memory: return b}oC.H="internal.enableAutoEventOnTimer";var gc=ia(["data-gtm-yt-inspected-"]),qC=["www.youtube.com","www.youtube-nocookie.com"],rC,sC=!1; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: var DB=function(a,b,c,d,e){var f=Iz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Iz("fsl","nv.ids",[]):Iz("fsl","ids",[]);if(!g.length)return!0;var h=Ez(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);M(121);if("https://www.facebook.com/tr/"===m)return M(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!uy(h,vy(b, equals www.facebook.com (Facebook)
Source: chromecache_369.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/f92087f2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: auth.us.brightmine.com

Source: unknown

HTTP traffic detected: POST /lnrs/logerror HTTP/1.1Host: risk.lexisnexis.comConnection: keep-aliveContent-Length: 165sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://risk.lexisnexis.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://risk.lexisnexis.com/copyrightAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8|True; gpv_Page=home; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE

Source: chromecache_336.2.dr	String found in binary or memory: http://api.jqueryui.com/button/#theming
Source: chromecache_336.2.dr	String found in binary or memory: http://api.jqueryui.com/category/theming/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://bl.ocks.org/hunzy/9929724
Source: chromecache_666.2.dr	String found in binary or memory: http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://brm.io/jquery-match-height/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/11820
Source: chromecache_666.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_666.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_666.2.dr	String found in binary or memory: http://bugs.jquery.com/ticket/13378
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://bugs.sun.com/bugdatabase/view_bug.do?bug_id=4508058
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://bugs.webkit.org/show_bug.cgi?id=11231
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://bumppo.net/projects/amputator/
Source: chromecache_666.2.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://docs.python.org/library/functions.html#range).
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_292.2.dr, chromecache_532.2.dr, chromecache_553.2.dr, chromecache_275.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://getbootstrap.com/javascript/#scrollspy
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://github.com/requirejs/text/LICENSE
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://imagesloaded.desandro.com/
Source: chromecache_666.2.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_556.2.dr, chromecache_336.2.dr, chromecache_666.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_336.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://jqueryvalidation.org/
Source: chromecache_666.2.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_666.2.dr	String found in binary or memory: http://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://labs.rampinteractive.co.uk/touchSwipe/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://meta.stackoverflow.com/questions/64655/strange-wmd-bug
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://meta.stackoverflow.com/questions/95987
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://plugins.jquery.com/project/touchSwipe
Source: chromecache_394.2.dr	String found in binary or memory: http://requirejs.org/docs/errors.html#
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://scottjehl.github.io/picturefill
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://scrollmagic.io
Source: chromecache_556.2.dr, chromecache_666.2.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://stackoverflow.com/questions/14902581/unobtrusive-validation-not-working-with-dynamic-content
Source: chromecache_340.2.dr, chromecache_406.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001709a
Source: chromecache_340.2.dr, chromecache_406.2.dr	String found in binary or memory: http://typekit.com/eulas/00000000000000000001709c
Source: chromecache_311.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://wiki.ecmascript.org/doku.php?id=harmony:egal).
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://www.cardrates.com/news/lexisnexis-risk-solutions-improves-small-business-lending/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://www.foo.com
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://www.github.com/mattbryson
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_311.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: http://www.unicode.org/faq/utf_bom.html
Source: chromecache_381.2.dr, chromecache_311.2.dr, chromecache_331.2.dr	String found in binary or memory: http://www.youtube.com
Source: chromecache_337.2.dr	String found in binary or memory: https://addevent.com/libs/atc/1.6.1/atc.min.js
Source: chromecache_364.2.dr, chromecache_579.2.dr, chromecache_450.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_364.2.dr, chromecache_579.2.dr, chromecache_450.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_541.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_400.2.dr	String found in binary or memory: https://app.qualified.com
Source: chromecache_341.2.dr	String found in binary or memory: https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC4d2cbbb7ee224f988a4509d18ecf476
Source: chromecache_313.2.dr	String found in binary or memory: https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC67ba8c389edd4bb381090349821d0ab
Source: chromecache_427.2.dr	String found in binary or memory: https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RCbf68ef0f931143e0b59cdba8256b8be
Source: chromecache_393.2.dr, chromecache_298.2.dr	String found in binary or memory: https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/launch-2c0d426e12dd.js
Source: chromecache_495.2.dr	String found in binary or memory: https://assets.adobedtm.com/c89af706acda/ae6034d4a157/09aeb3ccce2d/RC60594665c22743b6a49c7f53e0af736
Source: chromecache_415.2.dr	String found in binary or memory: https://assets.adobedtm.com/c89af706acda/ae6034d4a157/launch-459de5cf96a6.js
Source: chromecache_610.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.js
Source: chromecache_329.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_Acti
Source: chromecache_623.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_Audi
Source: chromecache_284.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement.js
Source: chromecache_627.2.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement_Module_Acti
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://auth.%NewCoParentDomain%/
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://brainjocks.atlassian.net/browse/SCORE-1334
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://brainjocks.atlassian.net/browse/SCORE-1585
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://brainjocks.atlassian.net/wiki/display/SDD/eventManager
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://brainjocks.atlassian.net/wiki/display/SDD/moduleLoader
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://brainjocks.atlassian.net/wiki/spaces/SDD/pages/116261662
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://brainjocks.atlassian.net/wiki/spaces/SDD/pages/217972958
Source: chromecache_666.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_666.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_666.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_666.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://c.la1-c1-lo3.salesforceliveagent.com/content/g/js/53.0/deployment.js
Source: chromecache_364.2.dr, chromecache_579.2.dr, chromecache_450.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_337.2.dr, chromecache_277.2.dr	String found in binary or memory: https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Source: chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2V2Data.json
Source: chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_666.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=229280
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://code.google.com/p/chromium/issues/detail?id=26723
Source: chromecache_288.2.dr, chromecache_664.2.dr	String found in binary or memory: https://consumer.risk.lexisnexis.com/request
Source: chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	String found in binary or memory: https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://d.la1-c1-lo3.salesforceliveagent.com/chat
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://d3js.org
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Object/assign)
Source: chromecache_666.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/Location
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://developer.vimeo.com/player/sdk/reference#play-a-video
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Autoplay_and_scripted_playback
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#escape-a-character
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#escape-a-character-as-code-point
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#serialize-an-identifier
Source: chromecache_337.2.dr, chromecache_277.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:wght
Source: chromecache_337.2.dr, chromecache_277.2.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZ9hiA.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZBhiI2B.woff2
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZFhiI2B.woff2
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZJhiI2B.woff2
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZNhiI2B.woff2
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZthiI2B.woff2
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZxhiI2B.woff2
Source: chromecache_440.2.dr, chromecache_616.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_440.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsoutlined/v109/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWSw
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWT4
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV0
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV4
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWV8
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVA
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVI
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVM
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVQ
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memQYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWq8tWZ0Pw86hd0Rk8ZkWVw
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_362.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_360.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7jsDJT9g.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7ksDJT9g.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7osDJT9g.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7psDJT9g.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7qsDJT9g.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7rsDJT9g.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qN67lqDY.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNK7lqDY.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNa7lqDY.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qNq7lqDY.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qO67lqDY.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qPK7lqDY.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdg18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdh18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdi18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdj18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdo18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCds18Q.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZY4lCdv18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidg18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidh18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidi18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidj18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkido18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkids18Q.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidv18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdg18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdh18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdi18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdj18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdo18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSds18Q.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZclSdv18Smxg.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwkxduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlBduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmBduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmRduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmhduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwmxduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwkxduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlBduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmBduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmRduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmhduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwmxduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwkxduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlBduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmBduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmRduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmhduz8A.woff2)
Source: chromecache_580.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwmxduz8A.woff2)
Source: chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	String found in binary or memory: https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://github.com/RobinHerbots/jquery.inputmask
Source: chromecache_552.2.dr, chromecache_557.2.dr	String found in binary or memory: https://github.com/algolia/autocomplete.js
Source: chromecache_666.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_666.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_666.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/blob/master/text.js
Source: chromecache_666.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_520.2.dr	String found in binary or memory: https://github.com/material-components/material-components-web/blob/master/LICENSE
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://github.com/mattbryson/TouchSwipe-Jquery-Plugin
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://github.com/pimterry/loglevel
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://github.com/robflaherty/jquery-scrolldepth/blob/master/jquery.scrolldepth.js
Source: chromecache_311.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture
Source: chromecache_292.2.dr, chromecache_532.2.dr, chromecache_553.2.dr, chromecache_275.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://github.com/twitter/typeahead.js
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://github.com/umdjs/umd/blob/master/returnExports.js
Source: chromecache_567.2.dr	String found in binary or memory: https://github.com/vimeo/player.js
Source: chromecache_450.2.dr	String found in binary or memory: https://google.com
Source: chromecache_450.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_370.2.dr	String found in binary or memory: https://help.vimeo.com/hc/en-us/articles/115015677227-Troubleshoot-player-error-messages
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.%NewCoParentDomain%/contentbridge
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/chatapi/v1
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/displaymodeservice/v1/
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/eventtrack/v1
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/headerfooterservice/v1/
Source: chromecache_337.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/insight/v1
Source: chromecache_366.2.dr, chromecache_317.2.dr	String found in binary or memory: https://hrcenter.us.brightmine.com/userpersonalisation/api
Source: chromecache_400.2.dr	String found in binary or memory: https://js.qualified.com
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=quarterly&key=
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://mths.be/cssescape
Source: chromecache_340.2.dr	String found in binary or memory: https://p.typekit.net/p.css?s=1&k=xkz1feq&ht=tk&f=6851.6852&a=681435&app=typekit&e=css
Source: chromecache_406.2.dr	String found in binary or memory: https://p.typekit.net/p.gif
Source: chromecache_450.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_315.2.dr, chromecache_595.2.dr, chromecache_629.2.dr, chromecache_538.2.dr, chromecache_669.2.dr, chromecache_525.2.dr, chromecache_320.2.dr, chromecache_327.2.dr, chromecache_449.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=$
Source: chromecache_364.2.dr, chromecache_579.2.dr, chromecache_450.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_655.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_370.2.dr, chromecache_397.2.dr	String found in binary or memory: https://player.vimeo.com/NOTICE.txt
Source: chromecache_410.2.dr, chromecache_280.2.dr	String found in binary or memory: https://privacy.reedexpo.com/en-us/cookie-policy.html
Source: chromecache_410.2.dr, chromecache_280.2.dr	String found in binary or memory: https://privacy.rxglobal.com/en-us/cookie-policy.html
Source: chromecache_579.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_655.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_288.2.dr, chromecache_664.2.dr	String found in binary or memory: https://risk.lexisnexis.com/-/media/images/privacyoptions29x14%20png.png
Source: chromecache_664.2.dr	String found in binary or memory: https://risk.lexisnexis.com/corporate/cookie-policy
Source: chromecache_288.2.dr, chromecache_664.2.dr	String found in binary or memory: https://risk.lexisnexis.com/corporate/privacy-policy
Source: chromecache_337.2.dr, chromecache_277.2.dr	String found in binary or memory: https://risk.lexisnexis.com/group/cookie-policy
Source: chromecache_277.2.dr	String found in binary or memory: https://risk.lexisnexis.com/group/privacy-policy
Source: chromecache_579.2.dr	String found in binary or memory: https://s.adroll.com/j/roundtrip.js
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://s.ytimg.com/yts/jsbin/www-widgetapi-vflktVMi7/www-widgetapi.js
Source: chromecache_400.2.dr	String found in binary or memory: https://schedule.qualified.com
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: chromecache_579.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_541.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_410.2.dr, chromecache_280.2.dr	String found in binary or memory: https://support.google.com/admanager/answer/9012903
Source: chromecache_655.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_541.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bjs
Source: chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net/td/bts
Source: chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net/td/buyer.wasm
Source: chromecache_538.2.dr, chromecache_320.2.dr, chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j476327158
Source: chromecache_538.2.dr, chromecache_320.2.dr, chromecache_449.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j478041389
Source: chromecache_595.2.dr, chromecache_669.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j7859409331
Source: chromecache_595.2.dr, chromecache_669.2.dr, chromecache_327.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j7859872220
Source: chromecache_315.2.dr, chromecache_629.2.dr, chromecache_525.2.dr	String found in binary or memory: https://td.doubleclick.net/td/update?ig_name=1j8107391740
Source: chromecache_406.2.dr	String found in binary or memory: https://use.typekit.net/af/80c5d0/00000000000000000001709c/27/
Source: chromecache_340.2.dr	String found in binary or memory: https://use.typekit.net/af/80c5d0/00000000000000000001709c/27/a?subset_id=2&fvd=n6&v=3
Source: chromecache_340.2.dr	String found in binary or memory: https://use.typekit.net/af/80c5d0/00000000000000000001709c/27/d?subset_id=2&fvd=n6&v=3
Source: chromecache_340.2.dr	String found in binary or memory: https://use.typekit.net/af/80c5d0/00000000000000000001709c/27/l?subset_id=2&fvd=n6&v=3
Source: chromecache_406.2.dr	String found in binary or memory: https://use.typekit.net/af/cafa63/00000000000000000001709a/27/
Source: chromecache_340.2.dr	String found in binary or memory: https://use.typekit.net/af/cafa63/00000000000000000001709a/27/a?subset_id=2&fvd=n4&v=3
Source: chromecache_340.2.dr	String found in binary or memory: https://use.typekit.net/af/cafa63/00000000000000000001709a/27/d?subset_id=2&fvd=n4&v=3
Source: chromecache_340.2.dr	String found in binary or memory: https://use.typekit.net/af/cafa63/00000000000000000001709a/27/l?subset_id=2&fvd=n4&v=3
Source: chromecache_430.2.dr	String found in binary or memory: https://vimeo.com/ablincoln/vuid
Source: chromecache_567.2.dr	String found in binary or memory: https://vimeo.com/api/oembed.json?url=
Source: chromecache_579.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_541.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_541.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_541.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_450.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_541.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_657.2.dr, chromecache_547.2.dr, chromecache_582.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/1048135065/?random
Source: chromecache_368.2.dr, chromecache_312.2.dr, chromecache_643.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/10827142419/?random
Source: chromecache_297.2.dr, chromecache_414.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/10896111711/?random
Source: chromecache_383.2.dr, chromecache_285.2.dr, chromecache_509.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/527644678/?random
Source: chromecache_594.2.dr, chromecache_639.2.dr, chromecache_571.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/936886275/?random
Source: chromecache_396.2.dr, chromecache_476.2.dr, chromecache_279.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/938539671/?random
Source: chromecache_413.2.dr, chromecache_612.2.dr, chromecache_519.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/938545461/?random
Source: chromecache_576.2.dr, chromecache_611.2.dr, chromecache_549.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/940382430/?random
Source: chromecache_574.2.dr, chromecache_375.2.dr, chromecache_357.2.dr, chromecache_346.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/950188369/?random
Source: chromecache_395.2.dr, chromecache_615.2.dr, chromecache_310.2.dr	String found in binary or memory: https://www.google.com/pagead/1p-user-list/978398205/?random
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_450.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_364.2.dr, chromecache_579.2.dr, chromecache_450.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_541.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_543.2.dr, chromecache_655.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_564.2.dr, chromecache_482.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Source: chromecache_381.2.dr, chromecache_311.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/api.js?onload=onRecaptchaApiLoaded&render=explicit&hl=
Source: chromecache_482.2.dr	String found in binary or memory: https://www.recaptcha.net/recaptcha/api2/
Source: chromecache_331.2.dr, chromecache_369.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_415.2.dr	String found in binary or memory: https://zn9gisoxzdyq0ido2-rbi.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_9GiSOxZdyq0ido2

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50452 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50532 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50502
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50501
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50504
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50503
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50506
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50417 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50505
Source: unknown	Network traffic detected: HTTP traffic on port 50440 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50508
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50507
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50500
Source: unknown	Network traffic detected: HTTP traffic on port 50486 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50600 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50292 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50509
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50359 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50512
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50515
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50514
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50517
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50516
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50519
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50518
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50464 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50511
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50510
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50544 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 50439 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50524
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50526
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50525
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50528
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50527
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50529
Source: unknown	Network traffic detected: HTTP traffic on port 50507 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50520
Source: unknown	Network traffic detected: HTTP traffic on port 50337 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 50612 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50521
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50510 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 50382 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50462 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50591 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50301 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 50347 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50622 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 50335 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50407 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50430 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 50313 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50429 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50496 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50369 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50337
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50579
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50336
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50339
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50338
Source: unknown	Network traffic detected: HTTP traffic on port 50581 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50546 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50571
Source: unknown	Network traffic detected: HTTP traffic on port 50392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50570
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50573
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50572
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50333
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50574
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50335
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50577
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50576
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50580
Source: unknown	Network traffic detected: HTTP traffic on port 50305 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50348
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50347
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50589
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 50505 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50340
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50582
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50581
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50342
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50584
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50341
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 50339 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50344
Source: unknown	Network traffic detected: HTTP traffic on port 50352 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50586
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50585
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50346
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50588
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50591
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50590
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50512 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50359
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50358
Source: unknown	Network traffic detected: HTTP traffic on port 50609 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50351
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50593
Source: unknown	Network traffic detected: HTTP traffic on port 50317 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50350
Source: unknown	Network traffic detected: HTTP traffic on port 50558 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50592
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50595
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50352
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50594
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50355
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50597
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50596
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50357
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50599
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50356
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50598
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50620 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 50419 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50369
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 50524 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 50442 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50364
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50367
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50370
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50340 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 50478 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50539
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 50571 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50315 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50531
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50530
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50533
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50532
Source: unknown	Network traffic detected: HTTP traffic on port 50350 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50410 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50607 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50444 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50546
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50545
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50548
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50305
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50547
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50540
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50542
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50544
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50301
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50543
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50476 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50315
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50557
Source: unknown	Network traffic detected: HTTP traffic on port 50384 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50317
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50316
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50558
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50319
Source: unknown	Network traffic detected: HTTP traffic on port 50548 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50550
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 50394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50553
Source: unknown	Network traffic detected: HTTP traffic on port 50619 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50552
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50313
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50555
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50312
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50554
Source: unknown	Network traffic detected: HTTP traffic on port 50454 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50503 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50567
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50328
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50327
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50560
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50562
Source: unknown	Network traffic detected: HTTP traffic on port 50593 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50561
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50322
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50564
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50563
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50324
Source: unknown	Network traffic detected: HTTP traffic on port 50488 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50323
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50432 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50514 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50409 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50327 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50296
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 50617 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50299
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50389 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50584 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50377 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50434 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074

Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.201.212.130:443 -> 192.168.2.4:49747 version: TLS 1.2

Source: classification engine

Classification label: clean2.win@29/683@190/61

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2216,i,13429566003554083046,4485005034574453211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.us.brightmine.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2216,i,13429566003554083046,4485005034574453211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Name	IP	Active	Malicious	Reputation
d20qwf0wrdtevy.cloudfront.net	3.161.188.80	true	false	high
isrlk46.ng.impervadns.net	107.154.193.69	true	false	unknown
p01b.hs.eloqua.com	192.29.70.228	true	false	high
platform.twitter.map.fastly.net	151.101.12.157	true	false	unknown
addevent.com	52.48.44.115	true	false	high
stats.g.doubleclick.net	64.233.177.155	true	false	high
dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	44.216.52.108	true	false	high
duerzc3hf5let.cloudfront.net	18.160.46.11	true	false	high
i5aarcp.ng.impervadns.net	107.154.193.69	true	false	unknown
t.co	104.244.42.69	true	false	high
sync.crwdcntrl.net	3.227.94.68	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
cm.g.doubleclick.net	74.125.136.156	true	false	high
www.google.com	64.233.176.105	true	false	high
us-u.openx.net	34.98.64.218	true	false	high
s.twitter.com	104.244.42.131	true	false	high
d3i9xyriglxn0r.cloudfront.net	99.84.208.103	true	false	high
dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	54.71.166.176	true	false	high
pixel-sync.sitescout.com	34.36.216.150	true	false	high
d2ctznuk6ro1vp.cloudfront.net	3.163.101.20	true	false	high
vimeo.com	162.159.138.60	true	false	high
vimeo.map.fastly.net	151.101.0.217	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
youtube-ui.l.google.com	64.233.176.93	true	false	high
googleads.g.doubleclick.net	64.233.185.156	true	false	high
www.addevent.com	54.171.248.54	true	false	high
lit-wildwood-9179.fathomless-lake-7710.herokuspace.com	52.5.243.19	true	false	unknown
td.doubleclick.net	142.250.105.154	true	false	high
cdn.cookielaw.org	104.19.177.52	true	false	high
hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com	35.174.21.144	true	false	high
www.recaptcha.net	173.194.219.94	true	false	unknown
risk.lexisnexis.com	151.101.2.133	true	false	high
c9-use-2.algolia.net	162.210.193.238	true	false	unknown
dg2iu7dxxehbo.cloudfront.net	18.67.60.119	true	false	high
c9-use-1.algolia.net	192.96.201.45	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
adobetarget.data.adobedc.net	63.140.39.150	true	false	unknown
insight.adsrvr.org	52.223.40.198	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
cdn.addevent.com	108.156.152.116	true	false	high
fresnel.vimeocdn.com	34.120.202.204	true	false	high
bu2qu5g.ng.impervadns.net	107.154.193.69	true	false	unknown
s.ytimg.com	64.233.177.100	true	false	high
ws.zoominfo.com	104.16.118.43	true	false	high
wt83sydv1s.data.adobedc.net	63.140.39.65	true	false	unknown
js.qualified.com	104.18.16.5	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	high
aorta.clickagy.com	34.228.243.82	true	false	high
vimeo-video.map.fastly.net	151.101.14.109	true	false	unknown
tags.clickagy.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
hrcenter.us.brightmine.com	unknown	unknown	false	unknown
i.vimeocdn.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
hemsync.clickagy.com	unknown	unknown	false	high
tracking.risk.lexisnexis.com	unknown	unknown	false	high
ws.qualified.com	unknown	unknown	false	unknown
reedbusinessinternat.tt.omtrdc.net	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	high
assets.us.brightmine.com	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	high
js.adsrvr.org	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
img.en25.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
p.typekit.net	unknown	unknown	false	high
cdn.tt.omtrdc.net	unknown	unknown	false	unknown
d.agkn.com	unknown	unknown	false	high
analytics.lexisnexisrisk.com	unknown	unknown	false	unknown
f.vimeocdn.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
aa.agkn.com	unknown	unknown	false	high
rbi.demdex.net	unknown	unknown	false	high
auth.us.brightmine.com	unknown	unknown	false	unknown
lexisnexisrisksolutions.demdex.net	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
km18szrxtm-dsn.algolia.net	unknown	unknown	false	unknown
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
player.vimeo.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://tracking.risk.lexisnexis.com/visitor/v200/svrGP?pps=70&siteid=903&ms=131&firstPartyCookieDomain=tracking.risk.lexisnexis.com&elqGUID=5D9E5884886A4AD98F78488A8F12F57C	false	high
https://assets.us.brightmine.com/latest/Full/Content/Images/Icons/remove.png	false	unknown
about:blank	false	low
https://www.google.com/pagead/1p-user-list/1048135065/?random=1713460598672&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq323deJXyqVPzoU_tcc8V3DkgXsV7w0SF1if2B25ev-YHLGjj&random=3722380409&rmt_tld=0&ipr=y	false	high
https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=5&cm=c5218487-d718-4b42-91be-3fd18ac4d1d4-6621555f-5553	false	high
https://risk.lexisnexis.com/-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg	false	high
https://t.co/i/adsct?bci=3&eci=2&event_id=d9d435b1-9254-49c2-b565-ff407c4cce8e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9dd2d2c2-7eab-4e5e-a89c-33f03a57bf66&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30	false	high
https://js.adsrvr.org/up_loader.1.1.0.js	false	high
https://www.google.com/pagead/1p-user-list/527644678/?random=1713460611045&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqZjGyuNpEwICRPmclMqVsYRDss0thgFl2nPufsEh0_WmWX9ut&random=269121769&rmt_tld=0&ipr=y	false	high
https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=ls6gt4og4jfj	false	unknown
https://assets.us.brightmine.com/latest/Full/Bundle/checkScript.min.js?v=2.0.769	false	unknown
https://assets.us.brightmine.com/latest/Full/Bundle/bootstrap.css?v=2.0.769	false	unknown
https://risk.lexisnexis.com/-/media/images/lnrs/icons/pencil_icon%20png.png?h=20&iar=0&w=20&hash=A7C6AB4BF363E42EA2DCD3CA10ECF939	false	high
https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769	false	unknown
https://assets.us.brightmine.com/latest/Global/Content/Fonts/ggl-roboto/roboto-v30-latin-700.woff2	false	unknown
https://risk.lexisnexis.com/-/media/images/financial%20services/wildlifetraffickingwhitepaper-270x170.jpg?h=170&iar=0&w=270&hash=7919C829305E7DE80573C4DD67D91B54	false	high
https://risk.lexisnexis.com/-/media/images/financial%20services/tcoc-regional_270x170%20png.png?h=170&iar=0&w=270&hash=F43278B90D67065468EDD449166DD2E5	false	high
https://js.qualified.com/qualified.js?token=FsU5iFRQMWKZpcF1	false	unknown
https://insight.adsrvr.org/track/up?adv=tthfdvo&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&upid=rw95j4b&upv=1.1.0	false	high
https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=124&cm=72487132774482760582579231535531206623	false	high
https://dpm.demdex.net/id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460570393	false	high
https://risk.lexisnexis.com/-/media/images/corporate/battle-climate-change.png?h=170&iar=0&w=270&hash=87197225C830C3E4A9EFE2B9DFF28CA1	false	high
https://www.google.com/pagead/1p-user-list/938539671/?random=1713460611010&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqerCJGzMHDwX2hZyeX_0vNVup1HDiOYkIntjjYeRkEPy7acoN&random=2365703598&rmt_tld=0&ipr=y	false	high
https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221	false	high
https://risk.lexisnexis.com/GetEloquaFieldIds/%7B613E43EC-B648-4C66-81D0-937DCA7B3A72%7D?formId=4318	false	high
https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcTab.json	false	high
https://risk.lexisnexis.com/GetEloquaFieldIds/%7B58EC541D-362A-4C45-9D59-4901223CD661%7D?formId=4318	false	high
https://analytics.lexisnexisrisk.com/b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3583132725641?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2019%3A16%3A13%204%20-120&mid=72321666800473193042525972382318204557&aamlh=9&ce=UTF-8&cdp=2&pageName=copyright&g=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&c.&getPreviousValue=3.0&getTimeParting=6.3&call_type=page%20view&opt.&perf=1&dmp=Y&sell=Y&.opt&cm.&ssf=1&.cm&.c&cc=USD&ch=copyright&server=risk.lexisnexis.com&events=event21%2Cevent19%2Cevent60%3D14&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=copyright&v1=copyright&c2=D%3Dv14&v2=D%3Dmid&c3=not%20tagged&v3=not%20tagged&c4=home&c6=D%3Dv6&v6=desktop&c7=D%3Dv7&v7=en-us&c8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v9=5.0%20%28windows%20nt%2010.0%3B%20win64%3B%20x64%29%20applewebkit%2F537.36%20%28khtml%2C%20like%20gecko%29%20chrome%2F117.0.0.0%20safari%2F537.36&c10=2.25.0%7Cpage%20view&v10=2.25.0%7Cpage%20view&c11=D%3Dv11&v11=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&v14=copyright&c16=D%3Dv21&c17=D%3Dv42&v20=page_view&v21=united_states&c22=not%20tagged&v22=bj13hp1dwohhdvwlnmv00t12%7C795f63a1528045ecb42c7dd1921764b8%7CTrue&c23=not%20tagged&v24=%2B1&c25=D%3Dv45&v25=not%20tagged&v26=not%20tagged&c34=D%3Dv34&v34=4%2F18%2F2024%201%3A16%3A10%20pm&c40=14&v41=home&v42=last_build%3D2024-04-17t14%3A53%3A26z%7Cenv%3Dproduction%7Cnum_of_files%3D0&v44=%2B1&v45=A625F8BC-FECA-43F1-B214-C093F227F173%7Cen-US&v60=14&v63=%2B1&v65=%2B1&v66=2&c70=home&c71=highestPercentViewed%3D21%7CinitialPercentViewed%3D21&v76=solution%20missing&v78=not%20set&v87=not%20tagged&v88=not%20tagged&v89=660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3&v90=not%20tagged&v101=1%7CY%7CY&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&AQE=1	false	unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	high
https://analytics.twitter.com/i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30	false	high
https://auth.us.brightmine.com/js/app/default.js	false	unknown
https://assets.us.brightmine.com/latest/Full/Bundle/analyticsJs.min.js?v=2.0.769	false	unknown
https://risk.lexisnexis.com/Areas/LNRS/favicon.ico	false	high
https://assets.us.brightmine.com//Full//Content//Images//Logos//core_consumer_us.svg	false	unknown
https://www.google.com/pagead/1p-user-list/978398205/?random=1713460613452&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqAOlCxXVhji7zdtymp7vsJovEsRKWwSGrhXr8iHhZVQhIZhTE&random=3878595316&rmt_tld=0&ipr=y	false	high
https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/generic-standard-page.min.js?v=6951	false	unknown
https://assets.us.brightmine.com/latest/Full/Bundle/webComponentDefaultCss.css	false	unknown
https://insight.adsrvr.org/track/up?adv=tthfdvo&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&upid=rw95j4b&upv=1.1.0	false	high
https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/helpers.min.js?v=6951	false	unknown
https://risk.lexisnexis.com/Areas/LNRS/js/LNRS.bundle.js?v=638484955464930367	false	high
https://aorta.clickagy.com/pixel.gif?clkgypv=jstag&ws=1	false	high
https://risk.lexisnexis.com/-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg	false	high
https://cdn.cookielaw.org/consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018e1e0f-938a-75cb-b9e9-d78ab7e6535a/en-us.json	false	high
https://www.google.com/pagead/1p-user-list/938539671/?random=1713460598597&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqq9l0-oIOctTVbZa_ylso2QtUz3PmK7dXGRADxHsEHp9vfC3B&random=2916656638&rmt_tld=0&ipr=y	false	high
https://assets.us.brightmine.com/latest//Shared/Content/Images/Global/bm_logo.svg	false	unknown
https://risk.lexisnexis.com/-/media/images/lnrs/icons/download%20svg.svg?iar=0&hash=06D88EFA3785CDBEE6D8D56186DBFC35	false	high
https://auth.us.brightmine.com/lib/material/js/material-components-web.min.js	false	unknown
https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsJs.min.js?v=2.0.769	false	unknown
https://aorta.clickagy.com/pixel.gif?ch=8&cm=CAESEO96mNRiSkwTTcCWYFFYN5Q&google_cver=1	false	high
https://risk.lexisnexis.com/-/media/images/financial%20services/celent%20tile%20img%20jpg.jpg?h=170&iar=0&w=270&hash=5C83B7E104E9151B0581F8CD10EA72E0	false	high
https://www.google.com/pagead/1p-user-list/10896111711/?random=1713460614350&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq5hen_kQiECTfyBGImVxGq-JhE-h5XxCkXhn-cKNpuKv5TSY0&random=421115011&rmt_tld=0&ipr=y	false	high
https://cdnjs.cloudflare.com/ajax/libs/vue/2.2.6/vue.min.js?v=638484955464930367	false	high
https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887	false	high
https://f.vimeocdn.com/p/4.29.7/js/vendor.module.js	false	high
https://risk.lexisnexis.com/-/media/images/government/le%20staffing%20wp/siu%20thumbnail%20jpg.jpg?h=170&iar=0&w=270&hash=6694AFD94C49271307817C41FFC6FE39	false	high
https://hemsync.clickagy.com/external/hasHashes?clkgypv=jstag&cb=null	false	high
https://analytics.lexisnexisrisk.com/id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460570626	false	unknown
https://risk.lexisnexis.com/	false	high
https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/article.min.css?v=6951	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://requirejs.org/docs/errors.html#	chromecache_394.2.dr	false	high
https://td.doubleclick.net/td/update?ig_name=1j7859872220	chromecache_595.2.dr, chromecache_669.2.dr, chromecache_327.2.dr	false	high
http://underscorejs.org	chromecache_311.2.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_541.2.dr	false	high
https://px.ads.linkedin.com/collect?	chromecache_579.2.dr	false	high
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_666.2.dr	false	high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_666.2.dr	false	high
https://support.google.com/recaptcha/#6175971	chromecache_543.2.dr, chromecache_655.2.dr	false	high
http://getbootstrap.com)	chromecache_381.2.dr, chromecache_311.2.dr, chromecache_292.2.dr, chromecache_532.2.dr, chromecache_553.2.dr, chromecache_275.2.dr	false	low
http://stackoverflow.com/questions/14902581/unobtrusive-validation-not-working-with-dynamic-content	chromecache_381.2.dr, chromecache_311.2.dr	false	high
https://brainjocks.atlassian.net/wiki/display/SDD/eventManager	chromecache_381.2.dr, chromecache_311.2.dr	false	high
https://support.google.com/recaptcha	chromecache_655.2.dr	false	high
https://zn9gisoxzdyq0ido2-rbi.siteintercept.qualtrics.com/SIE/?Q_ZID=ZN_9GiSOxZdyq0ido2	chromecache_415.2.dr	false	high
http://bugs.jquery.com/ticket/11820	chromecache_381.2.dr, chromecache_311.2.dr	false	high
http://bl.ocks.org/hunzy/9929724	chromecache_381.2.dr, chromecache_311.2.dr	false	high
http://www.opensource.org/licenses/mit-license.php)	chromecache_311.2.dr	false	high
https://www.google.com/pagead/1p-user-list/1048135065/?random	chromecache_657.2.dr, chromecache_547.2.dr, chromecache_582.2.dr	false	high
https://drafts.csswg.org/cssom/#serialize-an-identifier	chromecache_381.2.dr, chromecache_311.2.dr	false	high
https://github.com/jrburke/requirejs/blob/master/text.js	chromecache_311.2.dr	false	high
https://td.doubleclick.net/td/update?ig_name=1j478041389	chromecache_538.2.dr, chromecache_320.2.dr, chromecache_449.2.dr	false	high
https://p.typekit.net/p.css?s=1&k=xkz1feq&ht=tk&f=6851.6852&a=681435&app=typekit&e=css	chromecache_340.2.dr	false	high
https://js.qualified.com	chromecache_400.2.dr	false	unknown
http://bumppo.net/projects/amputator/	chromecache_381.2.dr, chromecache_311.2.dr	false	unknown
https://www.google.com/pagead/1p-user-list/527644678/?random	chromecache_383.2.dr, chromecache_285.2.dr, chromecache_509.2.dr	false	high
http://jsperf.com/getall-vs-sizzle/2	chromecache_666.2.dr	false	high
https://cloud.google.com/contact	chromecache_543.2.dr, chromecache_655.2.dr	false	high
https://cdn.cookielaw.org/vendorlist/googleData.json	chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	false	high
https://github.com/material-components/material-components-web/blob/master/LICENSE	chromecache_520.2.dr	false	high
https://app.qualified.com	chromecache_400.2.dr	false	unknown
http://typekit.com/eulas/00000000000000000001709a	chromecache_340.2.dr, chromecache_406.2.dr	false	high
https://use.typekit.net/af/80c5d0/00000000000000000001709c/27/	chromecache_406.2.dr	false	high
http://typekit.com/eulas/00000000000000000001709c	chromecache_340.2.dr, chromecache_406.2.dr	false	high
https://developer.mozilla.org/en-US/docs/Web/API/Location	chromecache_381.2.dr, chromecache_311.2.dr	false	high
https://cdn.cookielaw.org/vendorlist/iab2Data.json	chromecache_570.2.dr, chromecache_452.2.dr, chromecache_301.2.dr, chromecache_462.2.dr	false	high
http://www.cardrates.com/news/lexisnexis-risk-solutions-improves-small-business-lending/	chromecache_381.2.dr, chromecache_311.2.dr	false	high
https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture	chromecache_381.2.dr, chromecache_311.2.dr	false	high
http://imagesloaded.desandro.com/	chromecache_381.2.dr, chromecache_311.2.dr	false	high
https://player.vimeo.com/NOTICE.txt	chromecache_370.2.dr, chromecache_397.2.dr	false	high
https://github.com/twitter/typeahead.js	chromecache_381.2.dr, chromecache_311.2.dr	false	high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_543.2.dr, chromecache_655.2.dr	false	high
http://jqueryvalidation.org/	chromecache_381.2.dr, chromecache_311.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.156.152.116	cdn.addevent.com	United States	16509	AMAZON-02US	false
3.227.94.68	sync.crwdcntrl.net	United States	14618	AMAZON-AESUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
104.16.117.43	unknown	United States	13335	CLOUDFLARENETUS	false
3.161.188.80	d20qwf0wrdtevy.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.0.217	vimeo.map.fastly.net	United States	54113	FASTLYUS	false
192.96.201.45	c9-use-1.algolia.net	United States	30633	LEASEWEB-USA-WDCUS	false
104.18.32.137	unknown	United States	13335	CLOUDFLARENETUS	false
99.84.208.103	d3i9xyriglxn0r.cloudfront.net	United States	16509	AMAZON-02US	false
3.163.101.20	d2ctznuk6ro1vp.cloudfront.net	United States	16509	AMAZON-02US	false
52.48.44.115	addevent.com	United States	16509	AMAZON-02US	false
35.174.21.144	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
74.125.138.154	unknown	United States	15169	GOOGLEUS	false
63.140.39.150	adobetarget.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
74.125.138.104	unknown	United States	15169	GOOGLEUS	false
74.125.138.106	unknown	United States	15169	GOOGLEUS	false
104.244.42.131	s.twitter.com	United States	13414	TWITTERUS	false
44.216.52.108	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.16.118.43	ws.zoominfo.com	United States	13335	CLOUDFLARENETUS	false
107.154.193.69	isrlk46.ng.impervadns.net	United States	19551	INCAPSULAUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
142.251.15.154	unknown	United States	15169	GOOGLEUS	false
63.140.39.65	wt83sydv1s.data.adobedc.net	United States	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
104.18.16.5	js.qualified.com	United States	13335	CLOUDFLARENETUS	false
108.177.122.106	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.14.109	vimeo-video.map.fastly.net	United States	54113	FASTLYUS	false
74.125.136.156	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
52.223.40.198	insight.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
151.101.12.157	platform.twitter.map.fastly.net	United States	54113	FASTLYUS	false
34.199.102.5	unknown	United States	14618	AMAZON-AESUS	false
54.71.166.176	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.19.177.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
64.233.176.93	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.105.156	unknown	United States	15169	GOOGLEUS	false
142.250.105.154	td.doubleclick.net	United States	15169	GOOGLEUS	false
52.5.243.19	lit-wildwood-9179.fathomless-lake-7710.herokuspace.com	United States	14618	AMAZON-AESUS	false
64.233.185.156	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
3.215.140.156	unknown	United States	14618	AMAZON-AESUS	false
54.171.248.54	www.addevent.com	United States	16509	AMAZON-02US	false
151.101.194.133	unknown	United States	54113	FASTLYUS	false
34.228.243.82	aorta.clickagy.com	United States	14618	AMAZON-AESUS	false
162.210.193.238	c9-use-2.algolia.net	United States	30633	LEASEWEB-USA-WDCUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.67.60.119	dg2iu7dxxehbo.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
104.19.178.52	unknown	United States	13335	CLOUDFLARENETUS	false
34.36.216.150	pixel-sync.sitescout.com	United States	2686	ATGS-MMD-ASUS	false
104.244.42.69	t.co	United States	13414	TWITTERUS	false
34.120.202.204	fresnel.vimeocdn.com	United States	15169	GOOGLEUS	false
104.244.42.3	unknown	United States	13414	TWITTERUS	false
142.250.105.106	unknown	United States	15169	GOOGLEUS	false
35.169.212.254	unknown	United States	14618	AMAZON-AESUS	false
104.244.42.5	unknown	United States	13414	TWITTERUS	false
18.160.46.11	duerzc3hf5let.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
151.101.2.133	risk.lexisnexis.com	United States	54113	FASTLYUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
192.29.70.228	p01b.hs.eloqua.com	United States	31898	ORACLE-BMC-31898US	false
64.233.177.100	s.ytimg.com	United States	15169	GOOGLEUS	false
64.233.185.94	unknown	United States	15169	GOOGLEUS	false
64.233.176.105	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428289
Start date and time:	2024-04-18 19:14:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://auth.us.brightmine.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@29/683@190/61
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Browse: https://hrcenter.us.brightmine.com/forgottenpassword/ Browse: https://risk.lexisnexis.com/ Browse: https://risk.lexisnexis.com/copyright Browse: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Browse: https://hrcenter.us.brightmine.com/forgottenpassword/ Browse: https://risk.lexisnexis.com/ Browse: https://risk.lexisnexis.com/copyright

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.215.94, 142.250.9.113, 142.250.9.100, 142.250.9.102, 142.250.9.101, 142.250.9.138, 142.250.9.139, 172.217.215.84, 34.104.35.123, 23.40.205.40, 23.40.205.73, 23.212.97.41, 23.212.97.5, 172.217.215.95, 64.233.185.95, 74.125.136.95, 64.233.176.95, 172.253.124.95, 74.125.138.95, 142.250.9.95, 142.250.105.95, 142.251.15.95, 64.233.177.95, 108.177.122.95, 173.194.219.95, 40.68.123.157, 23.201.213.17, 142.250.105.94, 199.232.214.172, 192.229.211.108, 52.165.164.15, 64.233.185.97, 131.253.33.237, 13.107.22.237, 142.250.105.113, 142.250.105.138, 142.250.105.101, 142.250.105.100, 142.250.105.102, 142.250.105.139, 96.7.224.9, 96.7.224.73, 13.107.42.14, 23.40.205.16, 23.40.205.50, 64.233.185.102, 64.233.185.113, 64.233.185.100, 64.233.185.138, 64.233.185.101, 64.233.185.139, 64.233.176.94, 64.233.177.155, 64.233.177.157, 64.233.177.156, 64.233.177.154, 142.251.15.101, 142.251.15.100, 142.251.15.102, 142.251.15.113, 142.251.15.138, 142.251.15.139, 23.197.1.14, 23.2.81.247,
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, www.googleadservices.com, slscr.update.microsoft.com, wildcard.en25.com.edgekey.net, cn-assets.adobedtm.com.edgekey.net, clientservices.googleapis.com, a1874.dscg1.akamai.net, l-0005.l-msedge.net, clients2.google.com, use-stls.adobe.com.edgesuite.net, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, dual-a-0034.dc-msedge.net, update.googleapis.com, www.gstatic.com, e5763.x.akamaiedge.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, player.vimeo.com.cdn.cloudflare.net, fonts.gstatic.com, cm.everesttech.net.akadns.net, ctldl.windowsupdate.com, od.linkedin.edgesuite.net, wu-bg-shim.trafficmanager.net, p.typekit.net-stls-v3.edgesuite.net, fe3cr.delivery.mp
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://auth.us.brightmine.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1230 x 420, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	631619
Entropy (8bit):	7.984755098090169
Encrypted:	false
SSDEEP:	12288:n5Uc+qkMLTJ6GK0f8findO1yV4NNpMUiGWxtscUYA:5oa9RK0Gio1vPiGWnslYA
MD5:	ECD3A161AD5093A33974CE07ABD26FC3
SHA1:	D92D33FEB6B1C77660BE5F14FF9BB3FF77FF40E4
SHA-256:	C724C1322FBFA90E67FEC48FECD7FDAA9BFE063FF53918BDBD3F180D15953C03
SHA-512:	1E1CB1970AA739504A56382F56103F51E8D99A48C45A7E85D8B33A0A4E653CD7F5E6C87D2E5342AF4844743552CF4AC931698CC142AE02CBE8AC3079C506803B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............F.......sRGB....... .IDATx.d..$I.$.,j.G.yVUw.....`..H...... Z......]LWgU...~....AD.c.l...L.s3UQ.f...............@...D. ..!.X....y...[........'.4..P.$.....HJ....Q.&..@P.n..?N.4..&./..W..I.4.OJ..~.p...{.^.t}....4#.k.?...IH...........r,,.;{...?..&.........h 5.+/bc%.)...6j.@.u..4.=.2..`.O..>.J..O...>.r8..S..~}~y.M.o..$.P.Z......a.N....s...b.x.G..r.&....K.....j;n.M.."...d.....Z.<<\|\|.>/u].....eY...t..q..w..=..'.[*..o...........n.).sLH2p;.yB..>>B...X...."........,o...............gN..f..B...N...c.:..m._}.b...G..to.....0.\|....T.'O^z&.k.i-....... ..e...O..X.?..D.j..j...m;c./...7{.......TO......^.......k3..{....ol..i.....f....;C..:..... Q......D..!.A...P..[.0..c......}.....t>..\....}......D.MSckSk6..ZD(.w'..o....wo.....w...?..[.Vw.........f&.6oB.4.....0...b..Q.. )Ek."H.b.......ED.Z_....=H3.%.F.r....\h.N .h..#.P.+=..Sx.9...........<.I.d.....Ak...........4..H.J.0)......k.D3.@#..v..k..4k.N2.B....E]....Qn......,..$..3kf...B..

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53175), with CRLF line terminators
Category:	downloaded
Size (bytes):	328068
Entropy (8bit):	4.927673032841969
Encrypted:	false
SSDEEP:	768:Cfd3fjrIzkePpjODp9t0NnCIcTGca32lYWbIPedAvrvkRZNuCKMLSPvrviThOTdT:CmxODp9t0NnCIcTGca3E/Dp9p26RAhOI
MD5:	B13E5F20ECCD68521E5CA2F25A0968DE
SHA1:	6F97A8FA2DFB56BFF170CFE5C04B1F1BA49CE69F
SHA-256:	5E3E574E5B8DB9DB8915DD10451689BBE489F570BB4157650DCCF7F5F6DDE36E
SHA-512:	DEFA03BB61ED33733582DD7383432519C55C10023109A204888CDCF40136B688C046619587C78085E09B5224E1325DB0516364676E60936067BCF943D0AB7BBB
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/bootstrap.css?v=2.0.769
Preview:	/!.. Bootstrap v3.3.6 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40p

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=1773394&time=1713460559174&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F
Preview:	{}

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	13629
Entropy (8bit):	4.891745567080891
Encrypted:	false
SSDEEP:	192:KMCjAytQrJfes9n3eKjj3ijY0T08VPjlrH2QSGdwytqXwGHagjTDTeH9q:VeQtGsBdjgJ72jGdwytuaxq
MD5:	B45AA07634D8514C2105C9D8D40F8AC8
SHA1:	3F8065D2D2CDCD04CEB1282FF7B9B64FA96A9578
SHA-256:	0729056EB1C7259B9F2A15FE7E18FEC36B7E77D640CB288D4A9BC7F8D0CF982D
SHA-512:	2C6678F26EAC08462011D8DCFF66219A98022E0E93712D8960947BA18A14AECFB156CCAC4304DAD910505DD4A8B9038F62BAB810894BD04D4F92E306F9306156
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/forgottenpassword/
Preview:	........<!DOCTYPE html>..<html.. class="no-script chrome-bt 123-bv ".. lang="en-US">....<head id="head" data-xperthr-pagename="ForgottenPasswordPage">.. .. <meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width, initial-scale=1">.... <meta name="robots" content="index, follow" />.......... <meta name="header-host" content="hrcenter.us.brightmine.com"/>...... <title>Forgotten password</title>.... OneTrust Cookies Consent Notice start -->.. <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="UTF-8".. data-domain-script="018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0"></script>.. <script src="//assets.us.brightmine.com/latest/Shared/Scripts/Libs/OneTrust/one-trust-init.min.js?v=2.0.769" type="text/javascript"></script>.. OneTrust Cookies Consent Notice end -->.... <script type="text/javascript" src="//use.typ

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	150251
Entropy (8bit):	7.9713803543335215
Encrypted:	false
SSDEEP:	3072:rA8WRaBKtSUE6zb8wF5Xr9dDt5ApsAtDgJ6naP9YJclzz5kJv:EpFE6zblxElmgaHlzzCJv
MD5:	125B4D265854CC32C4CD194325F1B55E
SHA1:	05CE23A6083A8B538CC93D6ADE271289B0C1B7EB
SHA-256:	340345E6AFC40B7B83900804BF83485A7C4737AC8E17F24AF51904355C124A24
SHA-512:	ABE2987BFDDD2D4C1912057F351D3900EA323A44EE25CF99030570BECCFA092A036B58219826562E3C547D054E3C8600E61975382260B48454854759BFA1E2D8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................J.........................!.1A."Q.a2q..#B....R...3b$C...%r..4S..Tcs.5....................................C......................!..1A."Qa.q..2....#BR..3r..b...C.$4Ss....c.............?...3I...wW...L_4....Q.......{4PO..Q.^..D...y..*.........j..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553), with no line terminators
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	5.841947990720846
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08t3/FQPEDT8IodlKwTHw6:wsbSUtJfxrqLWWWdV6j1J3dYiCnTHx
MD5:	DE195AA329BF96901188D3B634F5E2B5
SHA1:	94066C6FF37F6FF6C2C78E9EF457A4755DAB45F3
SHA-256:	654BAB0C9FC086A07782092598FDC949F36397AC346811DBF54BC3B2281445DD
SHA-512:	C1EF2B4FBCD965E52863547E21F397B112E83F3D7390E75EA02EF3F38FF981EC240B1A10755F308B730508CAA6E58DD1DFA2223DE2A5AF7B844A6A25DCA4D7C9
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/938539671/?random=1713460613557&cv=11&fst=1713460613557&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	43182
Entropy (8bit):	5.562323023518122
Encrypted:	false
SSDEEP:	768:gVe+CN+tDD+6flC+ZIdZnBwlkM1BcMY3zct3mucJlYRWKLuFPMqoMwrb2OtKCB:g/QUChS8fTcVmuSlYRFTqol7B
MD5:	C4748B6DD5096FF9B28FDF70C3608B54
SHA1:	A1366582F2219B96549C1434797CE93F7D9B18F6
SHA-256:	97915B71071ECE2ED03D75486665344E6292190DBD66756B9B891735CC16B3F3
SHA-512:	AAFCD57092D77A18CC167A03C72110E22429370F6F801873B6145D4C8D896988852A40B474C3FC57984D1C94314D194FB41CEE7007499AD801A22EAE7E68B9E7
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Preference Center","MainInfoText":"We process your information, to deliver content or advertisements and measure the delivery of such content or advertisements, extract insights, and generate reports to understand service usage; and/or accessing or storing information on devices for that purpose.\n<br><br>\nYou can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more, to change our default settings, and/or view the list of <a href=\"https://support.google.com/admanager/answer/9012903\" target=\"_blank\">Google Ad-Tech Vendors</a>.\n<br><br>","AboutText":"Cookie Policy","AboutCookies

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1831
Entropy (8bit):	4.821550768722196
Encrypted:	false
SSDEEP:	48:YPwJwQviiWadJ1Z53lpMEfME5MYMeMXMuqoIvm42xvTGo:rKiWjPlprcuAG
MD5:	B0FA212FEFCAE171DD6E1D5E58235A9B
SHA1:	470916F31A9AC840154F30ACDF5E7F25966838D9
SHA-256:	04FF5442AD6938897019EA4B2D62F1D8C85949E39EB09B05B06E0627F149AA4C
SHA-512:	BDBFE71F74EAB5B52938065FE79353521C835EE9AE091CA605441C6AA0A94338B30FB2E40B1D0D97487EFFAA3C45058CDD74DC9B74D936E116BFE0526974BBAF
Malicious:	false
Reputation:	low
Preview:	{"Active Filters":"Active Filters","All Industries":"All Industries","All Industries Item":"All Industries Item","All Product Names":"All Product Names","All Resource Types":"All Resource Types","All Solutions":"All Solutions","All Sub-Industries Item":"All Sub-Industries Item","Article":"Article","Back":"","Brochure":"Brochure","Case Study":"Case Study","Choose AddThis key":"Choose AddThis key for this page","Close":"Close","Contact Sales":"Contact Sales","Contact Us":"Contact Us","Displayed Per Scroll On Desktop":"Displayed Per Scroll On Desktop","Displayed Per Scroll On Mobile":"Displayed Per Scroll On Mobile","Displayed Per Scroll On Tab":"Displayed Per Scroll On Tab","Download PDF":"Download PDF","Filter By Industry":"Filter By Industry","Filter By Product Name":"Filter By Product Name","Filter By Resource Type":"Filter By Resource Type","Filter By Solution":"Filter By Solution","Filter By Sub-Industry":"Filter By Sub-Industry","Filter By Year":"Filter By Year","Filter Selection":

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	21651
Entropy (8bit):	7.927742279353881
Encrypted:	false
SSDEEP:	384:krNOt2cNRiaphSzeXpU3LQEvpiFmFKoBPtQfrqeRiu2aNF0kGZ1a24Zi6yD:kwwcNRiapUrriFmFKoBP+fmeiu2QWTZN
MD5:	1EC82442F6B150D85A7AD6F214870E9D
SHA1:	B3022C053F687A332B6B2B952BE0EE4C3C8E816C
SHA-256:	FEED8F4E2A74CA0E88E7119FB7847D64BE3E1EBC99E042F6720F67041DD9280A
SHA-512:	9B1B3D65EA2A5909AC8A5206F3130D31F10FF9F6A77CE8EC9F0755E3394D166A161988377D346654CF8C61D9355372AD578011EC5D3C5CF4373C7E151094248C
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".............................................................................a...>1...h.+.x.?.&.W..b..KFp...d....J.7$..%.m...~l..L.;vg.v.D.vp'..o.....g.Q....z.e>....G.E.a8#\|.-.\|.-.f....r.w_.D$......z+.s.t..Ve.....B.E^..-4...5.p..J..M...Q..OTo#EN.xh..r...._...Uf....z.<w..1[.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32730)
Category:	downloaded
Size (bytes):	35222
Entropy (8bit):	5.318458002165108
Encrypted:	false
SSDEEP:	768:wOzYlTmNb/jPryl9jm1Uinxk5CvMD/DIVx32QnOmYf/:wMYlT+b/DOfjTSDi+Ju/
MD5:	208EB534EA01036A4FCA64E6715CCF3F
SHA1:	90C85649634FF5A627023668B2E10FA01CF30315
SHA-256:	6C789117A5F69B39293256E6899288C8317358589E20C6D08278223F948CD2CF
SHA-512:	B108B9DBE519FFACCF727B5D7FB4EBD88C96B1C628A4F515DACC625E22CD5DA62A70CE50408FA41DDDF0CF3C57433945534B0F4F22512E4913192C070D8676D9
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement.js`..function AppMeasurement(e){var t=this;t.version="2.25.0";var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_c";var a=n.AppMeasurement.uc;a\|\|(a=null);var i,r,o,c=n;try{for(i=c.parent,r=c.location;i&&i.location&&r&&""+i.location!=""+r&&c.location&&""+i.location!=""+c.location&&i.location.host===r.host;)i=(c=i).parent}catch(e){}t.log=function(e){try{console.log(e)}catch(e){}},t.Ya=function(e){return""+parseInt(e)==""+e},t.replace=function(e,t,n){return!e\|\|0>e.indexOf(t)?e:e.split(t).join(n)},t.escape=function(e){var n,a;if(!e)return e;for(e=encodeURIComponent(e),n=0;7>n;n++)a="+~!*()'".substring(n,n+1),0<=e.indexOf(a)&&(e=t.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},t.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?t.replace(e,"+"," "):e;try{return decodeURIComponent(e

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553), with no line terminators
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	5.830350806024768
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08uLyayKm0FQPEDT8IodlKHY:wsbSUtJfxrqLWWWdV6j16LyayKmiYiCF
MD5:	8E3203A3C30798F6E6A683C80E2546BE
SHA1:	E3C8AB1D39BD41EDC2EE69952000FB67D413A5C3
SHA-256:	9B54B408B78DF653DB172606BEC1CE3E2E251D95175CE0D783C84E493B769CEE
SHA-512:	1B1DB1A5AC11175C0C4583D7522059264ED53FD37DBA3E54DB185D56C672FBD537A99CC99ACBBEF2353661EE4F23A8F796857C5222215BDE7B978F69E2DBC078
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/527644678/?random=1713460613584&cv=11&fst=1713460613584&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978398205?random=1713460610976&cv=11&fst=1713460610976&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	59708
Entropy (8bit):	7.986207514300823
Encrypted:	false
SSDEEP:	1536:uKi+Z4X5Q21RU4V78uOEIhROy+WO+DDapjtgKL:u9p5Q2fU4V78uHIey+WOqat7
MD5:	6BA773EC4B372A25A5BFEF5A3F9D2E9A
SHA1:	1D029CFCAED6E0BD54CAC82B576EAD91C361D987
SHA-256:	47AAABA65593410F1A1051FF3FA8A15FFF7F1DBF233CBA366B9E69B83861CD07
SHA-512:	C40A3D331EBC63345CFB8EAFB0C68540501A0C7FEDA5383A21762609D26E91E455244BD9119F75D73D948F9BA3CCE206689428D98F15E2CB58D7A0767C3A3512
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/corporate/battle-climate-change.png?h=170&iar=0&w=270&hash=87197225C830C3E4A9EFE2B9DFF28CA1
Preview:	RIFF4...WEBPVP8L'.../.A.M@l.F..........g.k.....(.{...$.\|.%.C......d {.....m....@9....G.HI...m;Y_\,....Bx...Zj @....._.j...Q...l.k%i... ..Y...#>......,U.p&......$..n..6..,....'<O~...$M..60.J.h).G....kF9.t.v:.I..V.V..h....&...R.D.........H..5o./.#.$ ...M.H........ 1.....wk.3...s..$..-......)6....A.6mK..i..B........9M.!H.m[J.CS.H.>........>......v).:..GaV.u....(..{..\|Ty4.Y..Hc.)...A.....E.j.rE......[.....T.uTQG..3.C.e$..[.N._;._ dE..$.z...oT....K'_.c.[../.hj.`..<...$.Q..w..f..W~..T..<.o....\|nV..;.J.N...2l.C.Y{\|........b.P.j#[JyZ...A.1"Dh.B.b.....D...'....x....DX....\|@1.vj.Jr..`....Y...._0.h...a.!. ...o2..D..^.....3...u.U.......# ......j.......0.%..L.a<t...t:!.!.N............VJ+...'."...C........G.....a.q5.>c.)D 19....EL.&#..'q^...4...=L..<..^x..$H.....&3.N.r.s.........!?0.......Gar.:!P..y......B...D...!^.Qn...@..ne<....10...g .....<.^.........R.HlFf.=.4.......@.....<..=....N.B..J..."3Aje...8....H/..B..>...!.X..........bk....1P.... ..e..]y

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	70126
Entropy (8bit):	5.448556489350698
Encrypted:	false
SSDEEP:	768:gbElE4VjBD+kLOBZGX3DB0OJwl3iwrnunOkUjtNwlP+O08KZa4BIkRxca3rucJlQ:gGEsCwwW0xiwbkW8wceruSlYRFwi7B
MD5:	F022F3AB88EAA703CCF5B9EB70D80BD5
SHA1:	24C37750D27FD45C850881495AEE2E6A3595C454
SHA-256:	9CDBAEADA5271E602DC4899140F70CCF1217BFA3309FCE36211F7045A23CE967
SHA-512:	4D786F94B9BC13EAA1EADD73AF5B6D7493FFFBB6BC2E916DC4A2EBECB33A468467353296235B18AE57A0608950E0776F24F8F1069D9BC3B0DF1C775221D7596D
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Preference Center","MainInfoText":"We use cookies that are necessary to make our site work. We may also use additional cookies to analyze, improve, and personalize our content and your digital experience. You can choose to reject some types of cookies. However, blocking some types may impact your experience of our site and the services we are able to offer. Click the category headings below to find out more or change your settings. For more information, see our <a href=\"https://risk.lexisnexis.com/corporate/cookie-policy\" target=\"_blank\">Cookie Policy</a>.<br /> <br />\nYou may also be able to exercise <a href=\"https://consumer.risk.lexisnexis.com/request\" target=\"_blank\">Your Privacy Choices</a> <img src=\"https://risk.lexisnexis.com/-/

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js?loadCastFramework=1
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	943
Entropy (8bit):	5.324218858657467
Encrypted:	false
SSDEEP:	12:TMHdPcWi/nzVJ/KYf3naNjxHpjhdxEVlHTr5dHMZ3TG/L/c3d5+C/pI8pmcLeex0:2dTATLf3yjxJlTQr6hNzxpRKe+
MD5:	498FF88311E667D15AFFED64D2F2B76F
SHA1:	82D53BDDBC787E0371528EC59E0DC2D64BFD2665
SHA-256:	A5E7846148248A8A146CC18B2D8866875ACF2F4099465379515E4469BA3DBA19
SHA-512:	C14C703AF0ED135F24C5E0EF6DA23227DF4589B0720AE8B18D9423E69FD1C40BB02875CF706A98F4FC6DA0D788090B55BA24367FA67CC3A6235B64732F05615B
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/icons/download%20svg.svg?iar=0&hash=06D88EFA3785CDBEE6D8D56186DBFC35
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 144 144" style="enable-background:new 0 0 144 144;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M105.7,45.6H91.6v11.9h14.1c4.2,0,7.5,3.4,7.5,7.5v40.8c0,4.2-3.4,7.5-7.5,7.5H37.1c-4.2,0-7.5-3.4-7.5-7.5V65...c0-4.1,3.4-7.5,7.5-7.5h14.1V45.6H37.1c-10.7,0-19.4,8.7-19.4,19.4v40.8c0,10.7,8.7,19.4,19.4,19.4h68.6c10.7,0,19.4-8.7,19.4-19.4...V65C125.1,54.3,116.4,45.6,105.7,45.6z"/>..<path class="st1" d="M42.5,69.5l27.8,31.9c0.6,0.8,1.5,0.8,2.1,0l27.8-31.9c0.6-0.8,0.3-1.4-0.7-1.4H85.5l0-48.1...c0-1-0.8-1.7-1.7-1.7H59c-1,0-1.7,0.8-1.7,1.7v48.1H43.2C42.2,68.1,41.9,68.7,42.5,69.5z"/>.</g>.</svg>.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10103)
Category:	downloaded
Size (bytes):	10104
Entropy (8bit):	5.25927595270407
Encrypted:	false
SSDEEP:	192:LfZB6p87rbM3DM15HYoFIqfTzvAVTwUZ/hRifBHbbQGPVT5hiyhLWS44qpK7ziK:LBB6+M3DMftzGifBHbc2VDisL14XC
MD5:	CD056B72A31972BE87DBBF0927DC2DFD
SHA1:	54C3779E6CFB48D5FDA25F3462B77A0216371FB0
SHA-256:	CFEE63B22A45F4F02E6E6BAA93AF19E68399A72F6EC390F2795E60DBD72988BA
SHA-512:	A765204469A9101444B26D8CFD9B33ECA1BF267A51F8C9E6D4D7866FDE033F433ED307F718343A926CFACC65EE99420C3A834F7E679E31692B8106775F48499C
Malicious:	false
Reputation:	low
URL:	https://js.adsrvr.org/up_loader.1.1.0.js
Preview:	!function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&&t<=a){for(var n=arguments.length,i=new Array(n),o=0;o<n;o++)i[o]=arguments[o];const[a,...r]=[...i];console[e](d.toUpperCase()+" - (TTD) "+a,...r)}}},e),{});function e(e){c=e}let o=null,n=null,r=[],d=[];function t(e){var t=e[0],e=e[1];if("setIdentifier"!==t)throw"method not implemented";f(e)}function l(){i();{let n=o.detectionEventType,e=(r=m(o.triggerElements),m(o.cssSelectors)),i=[];for(var t of e)t&&t.tagName&&"INPUT"===t.tagName&&i.push(t);a.debug("triggers ",r),a.debug("validInputs ",e),d=[],r.forEach(e=>{d.push(e[n])});for(let t=0;t<r.length;t++)r[t][n]=function(){a.debug("Detect event: ",n,"on element, ",r[t]);for(var e of i){e=e.value.trim();if(function(e){var t=/((([^<>()\[\].,;:\s@"]+(\.[^<>()\[\].,;:\s@"]+)*)\|(".+"))@(([^<>(

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65354)
Category:	downloaded
Size (bytes):	385007
Entropy (8bit):	4.9752471628188015
Encrypted:	false
SSDEEP:	1536:H+/4K/zAV3D3roU5lmbYWyN59oHpSDG26RAhO0KcU5UnS:Hjf00e5US
MD5:	087CF381271A0C959B807BEE563C9F22
SHA1:	2DDC1FC975D2395E60A8270FC2AA72B59F24F15D
SHA-256:	EA2F860FA0B0DB823EEDD400CF8AF0C394F373C2A6A5BA7EA4BFD98C100CBACD
SHA-512:	FC8DC84D83DA94B93FB3E170FC5AB7AC2C253277A770C534E3039D71A8C06DB4381D66A783B4C92F605ED3337E48F185EBCEE275F90A4A58345477E51C97CA05
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Gateway/Bundle/Gateway.css
Preview:	@charset "UTF-8";/!. Bootstrap v3.3.6 (http://getbootstrap.com). * Copyright 2011-2015 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{m

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10896111711?random=1713460610993&cv=11&fst=1713460610993&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.725480556997868
Encrypted:	false
SSDEEP:	3:59LRqL:59Ly
MD5:	B031D22B559E320E553A27E63D55A52D
SHA1:	E81357B1D15DC0E64461F3908F197F5821DF1F82
SHA-256:	F35B6EBDF92787F1A83E6D3F1D364EB1F8DDB01EE32493B3201F51ED86AA9DCE
SHA-512:	4FC4C476476F213C6F390EAFC61746B8C0D4C1F60567E428947E43531DEEDAE4A2F39D9DF6E0B2131271B85059E6F99E361C364EC6AEE72E9253C4A47E61A521
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/layouts/system/VisitorIdentificationCSS.aspx?tstamp=1713460563277
Preview:	...sc_Contact {..}

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	52634
Entropy (8bit):	7.996217073695633
Encrypted:	true
SSDEEP:	768:DB+nDQsOP2l8bh1IgwSuQIHn8pMI10Pjl1EXeiMLrIbfzbsOnJlgj4X0faqorPQq:DB+DKelGXIHhnn8D00FZr2jMkQSHgAi
MD5:	3DEF21404B47A0DBA92A6C521E6C9D0A
SHA1:	0499601B55637049EBD47BD76705DBBAB86B99B4
SHA-256:	C86F2594EA1D09F75E3B99FD7D0AD7625DF056278B85C700E23E18ADB0D27D45
SHA-512:	187AAAFDF04FAE13C21E85AE33D043A862E1E2DD4EEC1A17566D1E6304D39DC3E142B2CD8CB7A1B1BDD8AD462AF762661EC3DEDDD8FB9B8EEB0A193D723D00CD
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg
Preview:	RIFF....WEBPVP8 ....P........>Q&.F#.!'..{....em.:...i...OS!....~...........Q..{.y.....k...:..g....?:#}..........I..../.._..?.{..T......G...?.}Y.\...s.....g......u_.>......v.#?..............g._..v._.k.?_Z.#...;.l....>g.F.Y.....y.....Q..?.....Z.[...?....?.....f......p....>\.M...a................7./.o.>......o......i.c..,$CXd..U=..S..3..Fr7p..-..gO. ".......#.9_...[H%.l..-...\j..Y0X!.}......<.......2w..Y.....BZ......hI.@S...@...%T..!....v..x..s....<..1K...H..>.=....5._..-.`..<...._..8n..#.JYRE........IV..Ey[.b..sF.....I........<4L.%1f9....x..E..0.^..+...... (.._a........Y.r.G..W.3K..b!"!.qE....j.D....pn......!b:...d.A.LZ{.[....zc..H.'.b.......n.q.....,.......1S%...k:.\|.....b..K.W]...._.#v~.<.!.Up.L...]...3.x.O..[;*8._.'....;..<..0`....k..H.......}S..<F.9...~.......,c^.^I..>A;....^......m.~.@1..O..].0..)..Se.\|o~S.....8l.0...\|.......l.a...\....v..K.h..G`.jP..Y.K...2.,...........>..?.y...&..o....@.$..Ja.P....A.Ih...1z.v(#v....J.Yq.IT.

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22296), with no line terminators
Category:	downloaded
Size (bytes):	22296
Entropy (8bit):	5.4553575342223555
Encrypted:	false
SSDEEP:	192:NSNAVPmBWdhruf2E+JTl4GDMhq4GD1FFu/JVZ4GDbiaoVKE:wAEWOu7BDMABDbF4pBDGnKE
MD5:	48D3AD2DCDDFE6F4771C98E2003239EF
SHA1:	EEAD6C221FDB1F9965148BC741003DF58A98ED86
SHA-256:	AACBEB90A032D58492215EADFEC6C77D70B8B6481499A7E943B21E7E160DB33D
SHA-512:	8BC9B5AFF8FE26DC0C4488BAD02E5ABEF81B9DBB0DFACD161111DFF37F04E8D2458225EFAF7031AF4F1C1EA11F31BCCD54325949A6664E26801D9A3D802F0222
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/legacyFormCss.css?v=2.0.769
Preview:	.editorial-body{border:none}.editorial-body h1{border:none}.editorial-body h1#formTitle{color:#606667}.editorial-body .editorial-form{color:#606667;position:relative}.editorial-body .editorial-form #formIntroText{font-size:15px}.editorial-body .editorial-form #formFieldsMandatoryText,.editorial-body .editorial-form #formIntroText{margin-bottom:25px}.editorial-body .editorial-form .xhr-form .form-group .control-label{font-size:.8125rem;margin-bottom:5px;color:#606667;font-weight:500}.editorial-body .editorial-form .xhr-form .dpa-section{margin-top:30px}.editorial-body .editorial-form .xhr-form .dpa-section a{color:#0e728b;text-decoration:underline}.editorial-body .editorial-form .xhr-form .dpa-section a:hover{text-decoration:none}.editorial-body .editorial-form .has-error .validation-error-message{color:#c00;margin-top:8px}.international-product-interest-section{display:none}.xhr-form label{font-weight:400}.xhr-form .section-header{color:#747474;font-size:20px;font-size:1.25rem;font-fam

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2555), with no line terminators
Category:	downloaded
Size (bytes):	2555
Entropy (8bit):	5.846122009567099
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08B4s2FQPEDT8IodlKGJUH6:wsbSUtJfxrqLWWWdV6j1l4sIYiCLv
MD5:	8990641B8C6DEA086DD26852B6162255
SHA1:	3CCA84480AE200907A1F3C2CD35D7F5E6A000D87
SHA-256:	144190D17B0A6715FBE5F0B305265F92BEDDA3FF9F4B0893C5AAC4EB57463304
SHA-512:	7BE75BB2866A0D831F8E87C79C0645919C002028DAB84CDADE92725D367E6E293A88C45E7FC5FFFCCE32BC054F8CE21D79C50B746D456EADE061775A9A1DB2F8
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10896111711/?random=1713460613536&cv=11&fst=1713460613536&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32700)
Category:	downloaded
Size (bytes):	268538
Entropy (8bit):	5.431012675789175
Encrypted:	false
SSDEEP:	3072:WaEUvimDA1BxfOAB75LTS+E3lhhg2Wt7DVA:WaEUvimDA1Bxfri+E/
MD5:	A248E94F751757B6CD6A8F0C413B990E
SHA1:	58E64EC5D7915597FFB63C7943B223EFE0633DC2
SHA-256:	681C3080BF4F44B380AADCC99FFC8D9B7F359FC1AC0C26186559A37567F46000
SHA-512:	4541785ECD55C460B046262D53B21945A0A32D253F636F4EE326C7D4B1E3D9E9D5B3B926B93DB04EBCD8E281B6C1037EB4ADE4BD78203138650A47DFFAF1FF0F
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/launch-2c0d426e12dd.min.js?v=638484955464930367
Preview:	// For license information, see `https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/launch-2c0d426e12dd.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-04-17T14:53:26Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"EN65958cce67004ae78b15e0f83ce066b0",stage:"production"},dataElements:{"Free Trial":{storageDuration:"pageview",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){if(document.querySelector("body").innerText.toLowerCase().match(/free trial/)&&!JSON.stringify(digitalData[1].site_events).includes("view_industry_page"))return!0}}},"Site Language":{cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var e=digitalData[0].site_language?digitalData[0].site_language:"no value";return _satellite.logger.log("siteLanguage",e),e}}},"Insurance Pages":{storageDuration:"pageview",modulePath:"

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4667
Entropy (8bit):	4.915698154241733
Encrypted:	false
SSDEEP:	96:bpyIW40w4IKL26upiFpFEKxYa6AyLHGjCX9jEjJjkW1h4M+F:Zp4IotSiFpZ6vjyc0JfiMc
MD5:	F34E9430A752D657C06A4975F24BB8D2
SHA1:	77D183E29F78AE4F0320B0E01D4956D0BE09C5DD
SHA-256:	FE3AD3EE14FCE4FB0F916C8BD738400A87BA593B9DF3AF972C3003825A67CB89
SHA-512:	483E5A453CCE2B4258A3870060937390A7CEE50D944A8E01D19EDA3276F4112D46C31395AEC4315383C976EFB418F15C899E4C523B66B66E7387F2E644AED389
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0.json
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018e1e22-56c1-7b07-8583-fd7fa5fbedbf","Name":"US Data Privacy Acts","Countries":[],"States":{"us":["ca","va"]},"LanguageSwitcherPlaceholder":{"de":"de","ru":"ru","en-US":"en-US","pt":"pt","ko":"ko","it":"it","fr":"fr","zh-CN":"zh-CN","es":"es","cs":"cs","zh-Hans":"zh-Hans","default":"en","vi":"vi","ja":"ja","id":"id","pl":"pl","tr":"tr","en-GB":"en-GB","nl":"nl"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 222, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1541
Entropy (8bit):	7.09334702908159
Encrypted:	false
SSDEEP:	24:Jy1htZdWwjx82lY2T3pHEVYny3yJ3VWeSQGbRYnqQ60O7eqe6lPDq:JwqNn2S2yiJ38dQERYqJxlP+
MD5:	0014E62A387F62A6F809A8B1D06C46D4
SHA1:	5C43BF6B94AB935B8EB3D0F208899659CB3E76D6
SHA-256:	B6A8D9080DC845FEFAF0017220FE212C7285186826E34914CA0FD355061C32FB
SHA-512:	AEBD42BA5760994CECCDACF0AEF0111EAAB00C5882FB82130B7C5263278F1BE81CF882367D0CC61724AFBC2A1A0E7E930425CEBAAE66093F619CBE4B24A486FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:09650A70337511E48A76BF4B435C1388" xmpMM:DocumentID="xmp.did:09650A71337511E48A76BF4B435C1388"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09650A6E337511E48A76BF4B435C1388" stRef:documentID="xmp.did:09650A6F337511E48A76BF4B435C1388"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{1R,...yIDATx..=..Q...UaaE...V...@D...EE.B.t..XZH..V....N....".E....VH#..)..e..(B......+3.Dg1.*.{.0o.o..8.v.e...%..

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1831
Entropy (8bit):	4.821550768722196
Encrypted:	false
SSDEEP:	48:YPwJwQviiWadJ1Z53lpMEfME5MYMeMXMuqoIvm42xvTGo:rKiWjPlprcuAG
MD5:	B0FA212FEFCAE171DD6E1D5E58235A9B
SHA1:	470916F31A9AC840154F30ACDF5E7F25966838D9
SHA-256:	04FF5442AD6938897019EA4B2D62F1D8C85949E39EB09B05B06E0627F149AA4C
SHA-512:	BDBFE71F74EAB5B52938065FE79353521C835EE9AE091CA605441C6AA0A94338B30FB2E40B1D0D97487EFFAA3C45058CDD74DC9B74D936E116BFE0526974BBAF
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/temp/dictionary.en-US.json?_=1713460608986
Preview:	{"Active Filters":"Active Filters","All Industries":"All Industries","All Industries Item":"All Industries Item","All Product Names":"All Product Names","All Resource Types":"All Resource Types","All Solutions":"All Solutions","All Sub-Industries Item":"All Sub-Industries Item","Article":"Article","Back":"","Brochure":"Brochure","Case Study":"Case Study","Choose AddThis key":"Choose AddThis key for this page","Close":"Close","Contact Sales":"Contact Sales","Contact Us":"Contact Us","Displayed Per Scroll On Desktop":"Displayed Per Scroll On Desktop","Displayed Per Scroll On Mobile":"Displayed Per Scroll On Mobile","Displayed Per Scroll On Tab":"Displayed Per Scroll On Tab","Download PDF":"Download PDF","Filter By Industry":"Filter By Industry","Filter By Product Name":"Filter By Product Name","Filter By Resource Type":"Filter By Resource Type","Filter By Solution":"Filter By Solution","Filter By Sub-Industry":"Filter By Sub-Industry","Filter By Year":"Filter By Year","Filter Selection":

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	17804
Entropy (8bit):	7.976073124897306
Encrypted:	false
SSDEEP:	384:zKAZlC01CXyzsbEMNzKw1m2Jc5LOUzmZPbdcENI6m4XFeUfoafp8gQF0z9sdlCr:zhZlCasyzfMNzKS3ZtNIN0UUfo+pRfJr
MD5:	230C5CEE6C7EED3FE43C6F7E66B95003
SHA1:	3FE682AEA33101C43E61FFA28CBD1949B1F0A7DA
SHA-256:	CB1F9FE3AFC2FB356324B1BB57D9F8E7D210C7928822C0D7E126003E0914B7BB
SHA-512:	6381149D7325A356E42C22637060C06335936CE506F6422F6FE489D29A5E467CCB1FED2D36C34593F563425E1D4AD695EA02FF9BA167F49011802F11A3C3EE0C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............k.Q.....PLTE.3e./a.F..C..;t.8q.=w.L..,^.6h.5m..d.I..S..V..1i.?\|.@y.M.$7p.R..K..<p%P..P..N..4m.\..C\|.M..?u.9kFh..By.F.@d..W.;`..[..O..I..I..j.,W..0g1Z.'U..d.,r.7]..Z.6u..U..^..X..(V.c..f..[.2c..].Sr.1V.8Z..%R"q.Ll.Dm..a.%K._..?x..m..n..j.Qx..9p.g..)].1i)^.."M.F..D}.f..9n[t.Gs.:g.V../E.BY.+T.8=r.U..V.CI.=l.M`...c0f..)Z.a..M.gx.X~.-Z..Y..J."h.2^.cW..+].4m..\Ky.!k..Q..Q..V.5n..`.JL.]{.gU..>qh...P..I.$T.o`.k.P`.K~.qf.WP.VL.DBv.c.?q.DX.9F.5Q.o[.CE...0&b.pY.f\.PQ.C`.KI.{n.;A\|}k..q.!b.b`. G}sl..R.ZY.Vc."3e&?.KU.<Q.rg..Z.dc..{...E..x^....8^....LF\|do.`Q.(=vUk...:Ln.XZ.\|b.YT.&G.1?\|...tr..]..9t.z....k.....M.B[..>y06f.s...;J.~x....q....Yk.....8Q........`.........e....v{.... $O....K.hv..8udl..y.........M......u......>...p...O9c.\..g....k....8/TyVzeAf.^y.Le....\|.ZP...4..BGIDATx.\|..O\U.../0),...hX..\.jb..@I...fZ.8.313.Hg........B.m...P....h.K)R.._.mhc.[..}.gf >.~...g~...uo.'...)=.8q...q......p#:.q...'...d.u%u..3p%....mrr..zS8..4....o...uwg2..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	3624310
Entropy (8bit):	5.672493271977684
Encrypted:	false
SSDEEP:	49152:gg8rXT2KFfik2RU7eThQ1G8A8c0rwTyamVRRudsDUvlZEXvyG+NLguMs+Ue9wYgS:b8N
MD5:	F18224D56D32C2EAA860692D03B7BFF7
SHA1:	D391DAF52B5BFCA6BC292A3950F45D814CC2866B
SHA-256:	6B669B3D5394DBECFEF89295CA05ED815A95F45102F1D355E379321656AA1B3C
SHA-512:	63AA5E0AE4C000ED22ECD4A7DF1F05B64183E2AFA3057C5A987D6E74086F79E1F684992B0478073DBA40DE3D0D54FFA50F28094656F013721707070A3FB1706B
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Shared/AngularBundle/main.js
Preview:	(self.webpackChunkweb_component_builder=self.webpackChunkweb_component_builder\|\|[]).push([[179],{9576:(qr,te,It)=>{"use strict";function W(e){return"function"==typeof e}function Y(e){const t=e(n=>{Error.call(n),n.stack=(new Error).stack});return t.prototype=Object.create(Error.prototype),t.prototype.constructor=t,t}const R=Y(e=>function(t){e(this),this.message=t?`${t.length} errors occurred during unsubscription:\n${t.map((n,a)=>`${a+1}) ${n.toString()}`).join("\n ")}`:"",this.name="UnsubscriptionError",this.errors=t});function Q(e,i){if(e){const t=e.indexOf(i);0<=t&&e.splice(t,1)}}class X{constructor(i){this.initialTeardown=i,this.closed=!1,this._parentage=null,this._finalizers=null}unsubscribe(){let i;if(!this.closed){this.closed=!0;const{_parentage:t}=this;if(t)if(this._parentage=null,Array.isArray(t))for(const o of t)o.remove(this);else t.remove(this);const{initialTeardown:n}=this;if(W(n))try{n()}catch(o){i=o instanceof R?o.errors:[o]}const{_finalizers:a}=this;if(a){this._finalize

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	17950
Entropy (8bit):	7.988226197425402
Encrypted:	false
SSDEEP:	384:ZD9FovbnyYvsDlWpL9Q/SpE58tCcKMdhSTeQrImLa0y59e8FrrNTTZ67S0fekm:lOZQ/KM8tCfMTSum8eArrV1B0frm
MD5:	78257FAD33D52BC8F4A68B58F553635D
SHA1:	396028226D11531FEC8D7EE80326C8F342B1DB71
SHA-256:	196DC3E3EEC637723ACFA1E348A31CABDD6A751CECEC6858B3253AEF5A2244DC
SHA-512:	386C2680439B944418EA9029166BA33045404A2DE1D994ACAB18593E706BD9E4990EE586B2038B54A4DB0AE6359811660D2505DB0D445D98116FA7B64437C14F
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/corporate/road%20to%20zero%20thumbnail2%20jpg.jpg?h=170&iar=0&w=270&hash=A15673A378D6B17FDDC8AFD66C93A728
Preview:	RIFF.F..WEBPVP8 .F..0........>I..D".....`(......l....W.............n.............Q.-.s.'._p_..T...r}..m.s.'.g...oyo..~.?........o.[.}.........7.'......`.....?..ux..g....\|.G.?............X..Q.........Oc.......#.o.....~R...?........_..k.a......../.o......o.'.ON..}....[...G...~....v.W.o.......................z}.}).....O.....?....I....W./..._._...[...}.4..O...\|&.X.Y.[+.B7a.99,</....h1b...n.A8.....MB....G..#.3......6......7..y,^s......g&..-.r.2.V.F..[c....\..........Z..-.......ib$..?......\/.:....#..M.W.....d..1.....E#@w._.FSX..\p@O.U.}17#[..S.=Z........Z.Yg....q..vD./..[.D..s.Rq.i:.p..?....[.89:........k......... 3oy\....:..^.\|tb..Bs..#..D"}.........y/.......?.U.?.o.M....<$.].C. h9...........'O:.E.k..F:.....>.......n4B.o[.3.....%ZBk..vSq9./.9...>......n.pA...=)..S.e.La.S....^..u.K3..AK..'..>FQ;.....C!.R..b...)y....v...+'..V .........O..U...n".:@..$9..g..\........<...Q9.gQ..!.q.l2.. c.../e.E>...a'...>S=..`..yYm]....2[..h\....By.~..lC3B.

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316), with no line terminators
Category:	downloaded
Size (bytes):	2316
Entropy (8bit):	5.853131095280778
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt082pFoFQ9XhKm6:wsbSUtJfxrqLWWWdV6j1Kpo1
MD5:	41773777C97046BC89956E300A33CDC7
SHA1:	1F80F599F834E614BD163A3028BA584051EA8410
SHA-256:	A74C40A9E2A227F77E6E6C3B9F6A191287D8CE7DE16606DF59FE75BB98E60E0C
SHA-512:	20EB21367E434C5AAE2079659986A4D05809F079298BA2079D124CBA282BC939D15EFB51C194305F7A5877562D18606898BCD9F26B72E1ED08A4BFA3237484F5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978398205/?random=1713460598569&cv=11&fst=1713460598569&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2737), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2035967
Entropy (8bit):	5.028787831389879
Encrypted:	false
SSDEEP:	24576:He/058e+4Gs9ZKRTV0D1G+b24q1IL1azdm/d47tm:He/05o3sPKRZ0Y+b24q1aGmz
MD5:	14E83B1543E35A67FCBD44D648C39EA1
SHA1:	265D40AEAA6B15F3158F2D34179EBFFB11614DBB
SHA-256:	2F54D03110253AD8697E3C3449D41A35FCF98C9C665E0E467139F47DFF6BA1F0
SHA-512:	E90801FE85AF49EE371D05ADABC19D25D320FC3BD3E82DEC84EBADED9C432E5542BF29FCE195F5E3148B82364D277206AAF10FEDB3CEB7908E967DDE6C9E209A
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/js/LNRS.bundle.js?v=638484955464930367
Preview:	///<amd-module name="Components/Buttons/VideoModalButton"/>..define("Components/Buttons/VideoModalButton", ["require", "exports", "jquery", "eventManager", "//www.youtube.com/iframe_api", "//player.vimeo.com/api/player.js"], function (require, exports, $) {.. "use strict";.. var eventManager = require("eventManager");.. var vimeoPlayer = require("//player.vimeo.com/api/player.js");.. var VideoModalButton = /** @class */ (function () {.. function VideoModalButton(args) {.. this.$scope = $(args.scope);.. this.autoplay = args.autoplay;.. this.showVimeo = args.showVimeo;.. this.vimeoAutoplay = args.vimeoAutoplay;.. this.stateChangeMessages = [];.. $(".modal", args.scope).on('shown.bs.modal', function () {.. if (this.showVimeo) {.. if (this.vimeoAutoplay) {.. this.player.play();.. }.. }.. else {..

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2555), with no line terminators
Category:	downloaded
Size (bytes):	2555
Entropy (8bit):	5.838634025123869
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08BZYFQPEDT8IodlKHH6:wsbSUtJfxrqLWWWdV6j1FZGYiC8a
MD5:	15B238681FEC0751EA55E4B8C69C4635
SHA1:	8848424E477374BE3D71D005093EF45A15C41214
SHA-256:	CD87EE50D004718750208C6FF01A7300E500A4C6CE91EBBF6F517996DA6163CD
SHA-512:	7E679724A924FBCDEBB68F6046627037B629FD9CE566B7F4FA6A4E1B80B2A941BB2863F35F9D7C796E803E09D019FDBE2F65148160DEEF7200AC6A586A853C6E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10827142419/?random=1713460613570&cv=11&fst=1713460613570&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (879)
Category:	downloaded
Size (bytes):	1026
Entropy (8bit):	5.306548512296383
Encrypted:	false
SSDEEP:	24:E+UXct/B9+UrC8zUSlK0BRAy6+LyTV38/qAgbvurrhsWevf:NPt/BIyCIUT0BIYnIbqhsWeH
MD5:	5C8EB932B2264BC8C5E87D7406099111
SHA1:	A631FD9A07D7AD91686BA98DFEC602981ED33BF5
SHA-256:	C747EECFC3CCF7FBFA3E8215BFDDBF0B314546913207B00D6D31167788D4F199
SHA-512:	C500D5D4EEB3CC4333A4F61843BBE2D3B6FFE204369153E9B425BAB8E2A57EFAE8AC20AD868430C58F4C483103374ED6012F5FED01F94483C7F3F6AE0430EE06
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC67ba8c389edd4bb381090349821d0abe-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC67ba8c389edd4bb381090349821d0abe-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC67ba8c389edd4bb381090349821d0abe-source.min.js', "function selectorMatches(e,t){var r=Element.prototype;return(r.matches\|\|r.webkitMatchesSelector\|\|r.mozMatchesSelector\|\|r.msMatchesSelector\|\|function(e){return-1!==[].indexOf.call(document.querySelectorAll(e),this)}).call(e,t)}function closest(e,t){for(var r;e;){if((r=e.parentElement)&&selectorMatches(r,t))return r;e=r}return null}document.addEventListener(\"click\",(function(e){var t=closest(e.target,\"ul.score-section-menu > li > a\");if(e.target&&t){console.log(\"Anchor element clicked! \"+t.href);var r=t,c=r.querySelector(\"div.subpage-title\");if(c&&(c=c.innerText.trim()),c){var n=r.pathname;if(!n){var l=document.createElement(\"a\");l.href=r.href,n=l.pathname}_satellite.cookie.set(\"gnavCook

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1457), with no line terminators
Category:	downloaded
Size (bytes):	1457
Entropy (8bit):	5.64675910557071
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcNZfcEzHDaggOOJVcTuOqmgz8+Yg/PqjCC5zqinzYjnpRn3:YyLVkckEzjaggOsiDqrmlYnbuO
MD5:	381394F3B066115CCA8A73D2A95718DA
SHA1:	838E80AA670CA3DE4C69F2BEB46C269FAC29F9D1
SHA-256:	D1921BCA8AA1BEE81E2180A4544BE2F6DF06679CE34A089B147FAFE93079D021
SHA-512:	2B5BB3361A9934B7DF1EBE68BC59DA982DFE05324C914E5C69AE491D24EF9748BFB7918668A0BBBA2489791059EED44030C8589A07A80911E78732E76DE9352D
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/936886275?random=1713460598639&cv=11&fst=1713460598639&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8107391740","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j8107391740","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWG2Flg!2sZkjieA!3sAAptDV6D8UhO"],"userBiddingSignals":[null,null,1713460600550385],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested-sizes"}}]

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2197
Entropy (8bit):	5.0029458408138945
Encrypted:	false
SSDEEP:	48:o3KkzSstnkwBAPNNZbBkNgFy6rruxdue2zT46I05ZSsnidKK:zbsp6NNt26r63ue2z86I0jqT
MD5:	8A13A62BDDE79568BEC514284110884E
SHA1:	A2A653646553BD483A108C5708FC3C6D58B44A78
SHA-256:	BEAAB32DB868D45EB38728FF90BF959D74256760132D52C48A70323C59DEE559
SHA-512:	939213EA0D76D6CDFF102CC448C45BDD9E96BE8CF16B3B19228C8148DA306689B5F2165DABF64BF9040647459908E961C85DD403AA765E5C4A1EC397A4A4A0ED
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/web/assets/shared/ClientSideConfig/ng-app-settings.json
Preview:	{..."eventTrackApiHostName": "https://hrcenter.us.brightmine.com/eventtrack/v1",..."userInsightApiHostName" : "https://hrcenter.us.brightmine.com/insight/v1",..."userPersonalisationApiHostName" : "https://hrcenter.us.brightmine.com/userpersonalisation/api",.. "chatApiHostName" : "https://hrcenter.us.brightmine.com/chatapi/v1",..."assetServerUrl": "//assets.us.brightmine.com",.. "liveAgent": {.. "popupLoggedInScriptId": "5734G000000blLO",.. "popupLoggedOutScriptId": "5734G000000blLT",.. "numberOfDaysBlocked": 1,.. "chatWindowHeight": 600,.. "chatWindowWidth": 800,.. "headerScriptId": "5734G000000blLY",.. "deploymentId": "5724G000000blLT",.. "organisationId": "00D0Y000001disJ",.. "sourceScriptUrl": "https://c.la1-c1-lo3.salesforceliveagent.com/content/g/js/53.0/deployment.js",.. "initScriptUrl": "https://d.la1-c1-lo3.salesforceliveagent.com/chat",.. "enableLogging": false,.. "offlineFormPath": "/Liv

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	12121
Entropy (8bit):	7.850695215209509
Encrypted:	false
SSDEEP:	192:dLm6qWt7OD5TBKY1Pt4OOoi7GrbcsqTgV8670/xiryIm5mhbBYrDQ/NinBZ:dLwNKY1Pt2oiyrfqTRCCxir1iWbBoklw
MD5:	E27885E42F00698563FEF86BE50EC79D
SHA1:	3EF1C9BDC06665E0AE83DE0E45D4B06D24435012
SHA-256:	A22681798F7785564EB9B4FF7F24EC425856151BBC54E60BCF515A58E4039A9B
SHA-512:	ACAE1D1ADA954BC0B0BB05AC9C7CC8122F48E3C8BCB7237827909624A71E13E3C7CAB7ACD181DB85477EFD4472E5DCDAF4F99B773F9F519B4597268C918B04C0
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".................................................................................i/o..o....0....*.dB......cp.....K..:..\|.F..:.....7..^.a..x...0..+..F....&U1..;...ZU.t.ym..U.... .q..k.....\|!n..^,&..iQ/..~6_3.G.X.;.#1..+=y..].9}.a2z...T6....Kz...e.8.g@............a..&A9mt....... .W'M.je

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	69866
Entropy (8bit):	7.997021719748588
Encrypted:	true
SSDEEP:	1536:y1fDvq2r4ccZ4bfGjpjUvJvWFY/i+/WiZDx9SHmKhngjMOOqgXBBlB:qfyccmE6/i+vZDx9rKxrXBBlB
MD5:	50ADE124DD897EC344BA38C42C4E4D33
SHA1:	CA4C4A46BDA42F658CA8A8A56C134A3E05E70668
SHA-256:	2CBE902E87BA3300634147D0BAB294295E72A95168AE280BC9E90BD151845F03
SHA-512:	1A3DE1E5AC3ED763ADC4725070834E613CADB018EE0BF1F171E12B4D3054D23807F85F360F0AB9C964589BBAC8E7B15D7C175991E39294271DAA60DF13C2E355
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/csr%20wellness_mantle%201_1230x420.jpg
Preview:	RIFF....WEBPVP8 .............>Q".E..%!&R.....cn.t2....!..{.m.". 9/p.4.._U._...v..<.9'..h............i.....7............I.!...k...............#...?....Q.._...vK.....G.......#......G..`.....]...o.\|...._........_.-K>q...?.z.............................}K.......?.?....g.?.}.._..{....'....p>..............?Q__...{.)...O.o..u?.....i....`>.#...uN@.v...J.f.....#..n/....^..n,k....F.....>Rw..9..S..m..n=..=.:aUZ......$.O..^wI....I.'...)..7s0..._...}...G+Q.o.....b.!.k.}....Y...t8K....w..~..i...&.....Y6w.w.....WHz.....E>.........a.X..A..Q..,..p.\q....Z..`..h%1..?.Ve..M.~[......+.?...y.n.d..........~(..g...,.4.l.!.....q.5....~.......~....Y.h...$.K..@....4.s...7i.....?.~....5..Z.. ......3.r.........fg.d..r....6.k.\|..Bkh......{..wh%........+......[...0.H.g)u..q..=5......8M...n...`.e..E(....))...L....>L.h.....a.-.\H,+5..X..:......jY;...VN.TH.^...O6X..juh.x..w....I...@8..........t.^u..t...2.f.. ..#.Z&1.....j.H. ....3_....G.z.38....N.?..j~...M...

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2120), with no line terminators
Category:	downloaded
Size (bytes):	2120
Entropy (8bit):	5.566432826922575
Encrypted:	false
SSDEEP:	48:YyLVkckEzcggFoUS+xDqrm/EzZggi17xDqrmlYnbuO:YyRkckycgWoKqYyZgpXqdnb3
MD5:	602883AB101830831918758DC34939FB
SHA1:	6D902491981491415A5AD24A25E997842EFC7F04
SHA-256:	769D8C9CEF7F138B3E5752BA542CA46B99CA9058BF6A634953D96B1DA450A1F0
SHA-512:	AE5679CB3B0DF5FA2F07178207319B23EFCB220D57B7219D6E8176A79D05B12F1C8AE28B18406CB9435A383D4052C90C4063C107F1440AC26355D4ACF987AE77
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/938545461?random=1713460598652&cv=11&fst=1713460598652&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j478041389","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j478041389","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1ssLp4xA!2sZkjieA!3sAAptDV6KdiuH"],"userBiddingSignals":[["476327158"],null,1713460600563412],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested-si

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	62839
Entropy (8bit):	7.951972440602161
Encrypted:	false
SSDEEP:	1536:UAcRwd5/QCeyzbZT11XAjPWOXJT2f4PdFFllU:UAcc/h5xT1FAB5if4O
MD5:	54863C0BD09CA08056A49C817CE05639
SHA1:	31743245C479162FE205957ADFCF765BE96CBC36
SHA-256:	EAE7EC342B3F787A4F49798BFE1F8F832EED1294F88E821D30A5490AD0D32390
SHA-512:	52A101759E4C072357ADCED73E7F1C6F7F9402603AEE682AB9232E313A1CE6B843D2574B0C8E3986D75BCB0F57B48070D8996F8C6CF448646FC31438D8A32312
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......8...."....................................................Z..sS.m.$.......e.m.DV.1.kL.u...k[.~.[..2h..]E'>r .C7]7....3w9.$.g..z.!.".>\~?....Z!.fe!.B2.....[..nc.+2F`.1..oz...I.J.d.+[..u.....&`0..mc......tf3.i9..%.oz..f...\>?.8B...d.H.I..5...U..g.fD..&3.n..]i.V.3...h.u.oz..[..4.fH.....!D.k.....,bkw...w.m,..K..>_...q.U3&q..L.)...\.,.M......F.%L..v.M.]kI....T,oz.....k}%....n...e)1.-.KZ.g3e..g,......-ifq.\|x\|~\...&s.fHD2Fs..bD.uML.8. .)1....[..L.....&.,....[...-...j.....&d......m...0..Z.U.]hg8.8p..EE..s&FD3&.G..At.l]]..KZf.&q"..Z+z..d.,..em.....w[..,.h...]kS..2.7.c...e.sS2I...kZ9.<.8...dVW2g..9....\|.......}..9.jf5..$.[...v3.u3.atE...u..K...[+9..s.z..$NL.ek].1...d....E...9.\...".e.I...FR>..9c3....dGM.L.5$...k(..[..#....<.ZB......kZn..fj.n9....3$.m....-v.fg..2.nWzn.<..I..x.I..&s.

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	dropped
Size (bytes):	1690
Entropy (8bit):	7.048915681165956
Encrypted:	false
SSDEEP:	24:AJal1hiyWwjx82lY2T37V+d0dyJ3Vq1Y6pYGY8P1+YXY1xWHtZsoye+oy3+KrGle:5uNn2vUKsJ3w1fpYL8EYXy3nrGle
MD5:	B25D13940D12B6C6CB3022FC218ED3E8
SHA1:	B4E547E9D96FDCA3AD222367A8320F008E910D21
SHA-256:	866746DFF379F2E84E752D3816BA32B6F19BDA4287AD9497F37328AE23D9C766
SHA-512:	CFB520B7563B7B7ED6459D67DB8EC90148714E654F7779832DBA478B8DD0B93C364C10DC87A70596037D494E43179A4F90E3655ED4064F3A348802B84C656655
Malicious:	false
Reputation:	low
Preview:	GIF89a..........B......b...........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:C085D18D6B7511E59F4F99BC3C8B2470" xmpMM:DocumentID="xmp.did:C085D18E6B7511E59F4F99BC3C8B2470"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C085D18B6B7511E59F4F99BC3C8B2470" stRef:documentID="xmp.did:C085D18C6B7511E59F4F99BC3C8B2470"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqpo

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	23476
Entropy (8bit):	7.990797130000364
Encrypted:	true
SSDEEP:	384:rk87HrGraOtoCsylbTqVV6R/ypIoVrbAUKu0wl8mPSf/p8IWlZBJLw99c6DIkgQr:TEtoCVlsVGV+AUwQSf/1WFJk99c6DDgE
MD5:	C881429FD090210EE8F0909929BDA503
SHA1:	157A23454C44B9797C220E8A214FE91A8018791F
SHA-256:	D565DE6C6017106107530876636DE5781E7BDB693A7182F2D73B73C27E36F482
SHA-512:	B0A3B95FE4EA01DC7FF9C325CB7771FF8BB741519EC7C4CFD8EF8CBDDDAEF79279B8B5B3AC76B7DE9ED20C41C5A25D6B03C1881BFC0034BEB2BC8B701B5F4652
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/8f2ac5bc533c4b41ad1580b4f298ab1f.jpg
Preview:	RIFF.[..WEBPVP8 .[..0........>A..D".!.>N.(...._#7l...o".\|U.5..Y..1.v...G....6.>O_?..z........_...oS.........^.8..}...\|.........r...?.o.}.=.......#.s...._.=..]................W./.?....k.............W.?....#...G....u.5.........=H.;.o.....?............._..x.}k.......?.........?.O./.....Y.[...............].S.............W....7..t../.?..?..6..9....-..x..w.?...h.\...............*b.,.x.VW...dt.z9..r.y....P..r.......A.-.xR..+Z5..t.5)kB...\|..}.....%..H....3LD"p.;...<.~Z`R4f....0.d..>..=/....3....J...<..1c....<.TM.\|.. R..O..j.y...S4... .yf..{B[....h.......A.\|.kO....+......{?..b^.....>..W..W......v.5...k......nzKN.....;....s.m...x.H\|.....L....U...ia...._Wa.d...G.>h=c....t._t....OY....r.....XC'.."n ........j.W.B.....?.".7.... ..).......TFuc..J.m.....w.w.......)..i8..2P....".[5`8S..&..c..k.[....$?r....E.q.V2.:.$%.e)..m..]&..wk,.[..TJ...sj.o.......yk?.?.`wI\|.Q....B..Gj..!sM..f.....GM.t...R....7>>..8r.........xu~.}..eg....3..u...M8..n+...\|.%h

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	74392
Entropy (8bit):	7.995237484909063
Encrypted:	true
SSDEEP:	1536:wFod3Np5hpllGmREfcxGIMqCrp1LGuPLa8GnpjBg2wpFaesQkjHB2s1w:goPZHJQ/wuDwawkkjHBta
MD5:	72426EE9FD8CB5B16B0C86C0E4BA7D2A
SHA1:	66EAFF4BE925D50A5CE51A8BE6E223947C89AC4D
SHA-256:	FA955D623A51A36E3ED8AA848EF1AF6280E4BD0FCF1B80B9EDEB1728F7A48014
SHA-512:	A335C21C6FB83868EF1C4F0C3DCB6E9AE4E74990CAF125C5CF259B59FFA697953BBB73BF59969D59BB5C5391F26AD612ADF98D00AE93D2FBB0C861A51C884083
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/javelin%20pr%20tile%20img%20png.png?h=170&iar=0&w=270&hash=98F44E34F06D15DDC759AAA71D4B85F7
Preview:	RIFF."..WEBPVP8L."../.A.M@.$7l3x..'..`.!......sh...HJ....9 '..hv>:.dw...<..td.2....M.#(.....$....g..;R.>E..P....P..{w#.k..........w.`pm;....%.i.;V.......D......%.8..HFDT....>.......@i..n..$....XU..z'3e..fD.P._......N.D?..D...T......t.[......... [.......`.....@<...u...@U.{H."ww...!f.............;.$$..?v.?r?.s%\..-.T$...{....U..H.......AB.B.AM.$.!..Z.......u....RH!\|.E.v....a.g...f9`[Q\[.!N.6.W..."... .* \8W..8.4X....!UY.jx.l&-...f.t.p.:...lH..@..z;..V......`.{...{...".....v.....0(.I.e3.,...l.........,._.......n..\.....-...:S/Lb.>.Hd.1&`...3...!....S\|~. ...ab..N...RB{p..*...[@.D"<......./.D.yP.@N.XO.+.}...$..1e$.I#I..5g........D0.. ..DFd........9......ap.....;........H.[3i.;/x....;....G...X$..x....#..%`..h~.-..c..J.....q.[(..$.p.L..a...a..p\|8.................d......M.Ux.W(..3.....p..........=@.&0...0..z;..YS.............%.4N.....=...}.E.i..E..[T.\Q..@K.b..u.xc<.o....}..[DL....t..Hr.........oE..,..hP.Z...r... ~.~....`.;.{.a6.u{

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2126), with no line terminators
Category:	downloaded
Size (bytes):	2126
Entropy (8bit):	5.572246073243467
Encrypted:	false
SSDEEP:	48:YyLVkckEz1gg8hcDqrm/EzUsaggzRkbDqrmlYnbuO:YyRkcky1gBhSqYyagMwqdnb3
MD5:	8302DEE374CE0D7B7477E88E014256B2
SHA1:	AA36762B3B8CB9B89FD0CA5DC6F781F180110747
SHA-256:	525330624885F8E095168E407C4DE42A2FB41E605BA85D11665561086C28976E
SHA-512:	FE23743A4E65D3DF89710D7F27142D72443EAA67339533597D3BA2F6177DEA18DAF9F8FEA3593305B0F8C1C5EB13DF658155AE927CB77AF71CE7303CF0B942EA
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/940382430?random=1713460598535&cv=11&fst=1713460598535&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7859409331","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7859409331","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sT5ZByw!2sZkjieA!3sAAptDV67iMPS"],"userBiddingSignals":[["7859872220"],null,1713460600077195],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3138)
Category:	downloaded
Size (bytes):	3284
Entropy (8bit):	5.455942869879721
Encrypted:	false
SSDEEP:	48:mToY9+qw87WpFtuOXMfUFyJZAeNeMqOIDcgjHQ0jOpXSHVajXKCw1tngEo:ms2+qJWpFtu4MvX0Mb0jOpXOCN
MD5:	B89FCB8870AC40EECB6D3CC844D35389
SHA1:	1BBDE1A85912BDEFF9C9CF55BF2FB3969D245874
SHA-256:	78C1C1BAF0D964522F8AFAB09CFC754685C1648826A7F9967FD52B774B4EC5AA
SHA-512:	80285D0F67F80E522159222157417814F244C000B1C7022158AB12A3744695F781650C0FA2ACCEFAB4175C5711B6C432DFFB3F1D1A38F55968AC92F9763AD214
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(e){function t(){var e=s.pageYOffset+(s.innerHeight\|\|0);e&&e>+f&&(f=e)}function n(){if(l.scrollReachSelector){var t=e.d.querySelector&&e.d.querySelector(l.scrollReachSelector);t?(f=t.scrollTop\|\|0,t.addEventListener("scroll",(function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>f&&(f=e)}))):0<g--&&setTimeout(n,1e3)}}function r(e,t){var n,r,i;if(e&&t&&(n=l.c[t]\|\|(l.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function i(t,n,r,i,a){var c,o;if((t.dataset&&(o=t.dataset[n])\|\|t.getAttribute&&((o=t.getAttribute("data-"+r))\|\|(o=t.getAttribute(r))))&&(c=o),!c&&e.useForcedLinkTracking&&a){var l;if(t=t.onclick?""+t.onclick:"",n="",i&&t&&0<=(r=t.indexOf(i))){for(r+=i.length;r<t.length;)if(o=t.charAt(r++),0<="'\"".indexOf(o)){l=o;break}for(var s=!1;r<t.length&&l&&(o=t

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (628)
Category:	downloaded
Size (bytes):	24580
Entropy (8bit):	5.414118494053741
Encrypted:	false
SSDEEP:	384:kWX+zyKPPw1xWuH//d3tmYXjUybflICJo+1N7+yorT8NsVQ5+y86:kWfc9uH//6IUs9pCKoyL
MD5:	67F8FF6AC67E25730A71D61A6FAE527C
SHA1:	EE71455488B70500D18B45B2520DAB2E844DF6BC
SHA-256:	D34B6804445415D521267F5ACA65EA9A5105168D6FBAFADCC72ECA8A7533E293
SHA-512:	8B3E78F67072C44A3AF547A779667E4227EB3C28F8095EFE6BDBA46C37CE543BBA714D51AD3E3BE082CAFAF7BDEBE5EBBA85157FB29C7020F394CA894A92E824
Malicious:	false
Reputation:	low
URL:	https://s.ytimg.com/yts/jsbin/www-widgetapi-vflktVMi7/www-widgetapi.js
Preview:	(function(){var g,k=this;function m(a){a=a.split(".");for(var b=k,c;c=a.shift();)if(null!=b[c])b=b[c];else return null;return b}.function aa(){}.function n(a){var b=typeof a;if("object"==b)if(a){if(a instanceof Array)return"array";if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if("[object Window]"==c)return"object";if("[object Array]"==c\|\|"number"==typeof a.length&&"undefined"!=typeof a.splice&&"undefined"!=typeof a.propertyIsEnumerable&&!a.propertyIsEnumerable("splice"))return"array";if("[object Function]"==c\|\|"undefined"!=typeof a.call&&"undefined"!=typeof a.propertyIsEnumerable&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if("function"==b&&"undefined"==typeof a.call)return"object";return b}.function p(a){var b=n(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length}.function q(a){return"string"==typeof a}.function ba(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}.var r="closure_uid_"+(1E9*Math.random()>>>0),ca

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	70
Entropy (8bit):	4.10370516063324
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HptOE9HhEyRHfHyI:x2pHDO4ElhZyI
MD5:	B0F41DFDB39537EAD363417D80CFC0A7
SHA1:	93C53BC2B37815BF7574FF54D923979054DE4057
SHA-256:	413FA819EBD01D88E44A674D282AB109B747DB63592C57E099706B364D8C2DEB
SHA-512:	273AD5ECF19EDBE8F81006676558110F122A50E8BED71E2D69E8A7D6474189256198B38803086AFA21EF14F457B6FB1CB1EB4E633A9DF50505A8E9C84F6F8AB4
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 14, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	694
Entropy (8bit):	6.37923553709459
Encrypted:	false
SSDEEP:	12:6v/7neovgpSxacrByKfvVN2lKWlQfL5HfnGLz532M8i9Tbm3kza81:CJzrTTCTQD5HfG/53MObmqaO
MD5:	8F8297A3FFFBAD9121460D64379AE037
SHA1:	24437F340EC54771E7BC89130CE52183D0FA6B06
SHA-256:	456FB1192ABF623356CD8629205AF4FB772A18B3D3C5DA9AB5645116D403E546
SHA-512:	E1529025FAB57C1ADC7FF7C33F57D56A20E280FB11BC0E0AC0BF7066C09665A65A025B4E4B6DF5E3238C98AE1276B012AB59681CF4DB4373CFAE78C8DE77B663
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB.........PLTE....f..f..f..f..h..o.......................e...........g........h..o..l....4..f..6...k..f..h....%\|.!z.2..b..1..`...f.......R........g....................(~.\...h.......x......u.${.u..9..Z...f..h..q.......}..;...o..g...........n..i..d....h...h..e..t...........h.....m..g..f..f.....~.....]tRNS.....;........:...9..}.......z........................................~.....B..@D....B......B.U.....IDAT..e..R.A.D#.(....x_..x...(.....w....U...d..U_......~.........K..0FO...1... ...E&&.d*A&.N.3t...\....5....%.[.`U.5=....if..tZ#Kna.;...y{d.C...<......Z..Oyf.\....u.m.x...No..Go...'.ew"y.K.V.l..U...G.-....?..{~..l).....j.2 S....IEND.B`.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	1.5097187856279355
Encrypted:	false
SSDEEP:	48:D4xTaGcwbEb5qJPyKppRyEM7lyTqqZbXyE1N7yC5uPISzKnZrEdV1:D49aebEkJPyKppfcl8yE1NP1Kj
MD5:	D5F830AAACF83FD8EAC047BB27942B1A
SHA1:	B2E8C9CDE5052F37B1E43552F9BE27158C7E90EE
SHA-256:	5168F9DF2238F1ED03D618EE373D4A06D69F5CBCBC4A567822109F708E33150A
SHA-512:	AF220D8EF1F6081CF59151AB657A6400B46BE57B4A8D5AECD2A53B75EAD25AC03EE461C6836564BBDCA9777CC3B004C7A00E368459AF4B79BF8C0503FFBBBFBE
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ........................................................................................................................................................................................*...................................................................\...............................................................b....................................................Gq.=...7hhcXhh^1............................................ggaYgg`m....mm[.hf`.hf`}mm[.................................kkc.hga.UUU.............hhaBhf`.did=.........../................gg`.llb.................qqc.he_SSm}1...........\................bvv.fff.ff`-ifa_hg`.hhb.gga.ff`ZiiZ....A...g.......R...............Dhg`.gga\|gg`Jaaa................................<..............."...................................................a.......N..........................................................................................................................

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10827142419?random=1713460613570&cv=11&fst=1713460613570&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	314605
Entropy (8bit):	5.431093740597478
Encrypted:	false
SSDEEP:	3072:m2zuwQS08qrKfxSDOkTuETu8TuKTuVUk3rh3rl+k0c000liOR:m2zuw73rh3r03PliOR
MD5:	66F66826BE310766CC5C7A68125A631D
SHA1:	37F2009FC614E8B7FFDB74CC8A839092620C44AF
SHA-256:	77DE0CCDCECDD4945DC3321EB9AC01A6B641D496501EF9A8248A0F480BFA59F8
SHA-512:	3290E751F06BC5653011776FE37DE2F58F3F28CB14019289D270EAD2D3CE06676AB8E789D1866FE1E555F1B22B9BEF762880F89A5C1F0C5EB2FF817BD12CFCBF
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769
Preview:	dd,div,dl,dt,fieldset,form,input,label,legend,p,table,tbody,td,tfoot,th,thead,tr,ul{margin:0;padding:0}html{background:#efefef;-ms-overflow-style:scrollbar}button,dd,dt,legend,li,p,table{font-size:16px;font-size:1rem;line-height:1.6}body{font-family:Roboto,sans-serif;background-color:#f9f9f8;color:#202526}html.article-page body,html.static-page body,html[class*=my-account-] body{background-color:#fff}html body.basic-layout{background-color:#fff}#pageBody{padding:24px 33px 0;min-height:330px}@media (max-width:1279px){#pageBody{width:972px;padding:0;margin:24px auto 0}}.page-article{width:648px}.page-article li,.page-article p{margin-bottom:12px}ul{list-style:none}ul li{background:url(../../Shared/Content/Images/Global/Bullet.gif) 3px .5em no-repeat;padding-left:20px}ul li ul li{background:url(../../Shared/Content/Images/Global/bullet2.png) 3px .5em no-repeat}ul li ul li ul li{background:url(../../Shared/Content/Images/Global/bullet3.png) 3px .5em no-repeat}ul li ul li ul li ul li{backgr

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (415), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	21503
Entropy (8bit):	4.972526012888692
Encrypted:	false
SSDEEP:	192:QMoCjOtQrJfes9n3eKjj3ijY0T2Y0TEKc8KL5pjlrHAJBMQxwdDvEvO/V/Hohigl:OFQtGsBdjcKSL5P7AJBMZ/RoDVxaJq
MD5:	5718767B24ECF112665BB90D5529B3C4
SHA1:	F4EC65C0BD0FBBD6C292639B8E997CD719A3521F
SHA-256:	046CEE3EBFF029A4026D38CE2CF98B5B0AF534A21C0D5630C97F7D818E4F958E
SHA-512:	B530D7F80F40CE50EBAF68608923C54CFF7026DA6287165DD123D74FEC58C38DFFF61166194D7830A479E3767154D331C94C084DFFCF92F3749F11077A6BD00E
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/
Preview:	........<!DOCTYPE html>..<html.. class="no-script article-page no-sidebar xhr-help chrome-bt 123-bv ".. lang="en-US">....<head id="head" data-xperthr-pagename="ArticlePage">.. . ... <meta charset="utf-8">..<meta http-equiv="X-UA-Compatible" content="IE=edge">..<meta name="viewport" content="width=device-width, initial-scale=1">.... <meta name="robots" content="index, follow" />...... <link id="canonical-url" rel="canonical" href="https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/" />...... <meta name="header-host" content="hrcenter.us.brightmine.com"/>...... <title>.. Keep Me Logged in \| Help and Support \| Tools \| hrcenter.us.brightmine.com..</title>.... OneTrust Cookies Consent Notice start -->.. <script src="https://cdn.cookielaw.org/scripttemplates/otSDKStub.js" type="text/javascript" charset="UTF-8".. data-domain-script="018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0"></script>.. <script src="//assets.us

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3396), with no line terminators
Category:	downloaded
Size (bytes):	3396
Entropy (8bit):	4.967138471372957
Encrypted:	false
SSDEEP:	96:QCL9TYbjNHQQQwPj50JUukiO6BXg1WGTzm1:NBE3BG/83TK1
MD5:	6BC65A5562C3DD4815BE5525F71D9C35
SHA1:	BAD87C54036D7446E7E0A3961E48CF0D97126461
SHA-256:	697FAFBB905175D3C98696ABB5E62BBC17FC3BB381EADC666066B5E50A0BED25
SHA-512:	F951FDD0D88D02701CEFB85EE68595B8A1CD0036DAF73695D78310F9FB694DFA6B58A3B13F83115556970F387CC8FD820A9176517B4B24BF9E2C47B3C6D5F306
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/default.css?v=6951
Preview:	#caseSection,.expanding-area{margin-bottom:12px}#caseSection h2,.expanding-area h2{border:0}#caseSection ul li,.expanding-area ul li{padding-left:0}#caseSection ul li:after,.expanding-area ul li:after{content:".";display:block;height:0;clear:both;visibility:hidden}#caseSection ul li h3,.expanding-area ul li h3{font-family:Arial,Verdana,sans-serif}#caseSection ul li a,.expanding-area ul li a{text-decoration:inherit}#caseSection ul li a:active,#caseSection ul li a:focus,#caseSection ul li a:hover,.expanding-area ul li a:active,.expanding-area ul li a:focus,.expanding-area ul li a:hover{text-decoration:inherit;box-shadow:none}#caseSection ul li a.icon-expand,.expanding-area ul li a.icon-expand{display:block;float:left;width:18px;height:18px;margin:0 5px 0 0;background:transparent url(../Content/Images/expand-collapse-article.png) no-repeat 0 0}#caseSection ul li a.icon-expand.disabled,.expanding-area ul li a.icon-expand.disabled{background:transparent url(../Content/Images/expand-collapse

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/527644678?random=1713460598626&cv=11&fst=1713460598626&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (336)
Category:	downloaded
Size (bytes):	1566
Entropy (8bit):	5.203185729297247
Encrypted:	false
SSDEEP:	24:35Y2AIQVzgrWDUP/DKmOtZvsmY1Ls8MLULDMxtvsmYNMnS8MFM8Mx44p:35Y2zQVbmbKn8LsLULDMznsMXMFM8MV
MD5:	5231B1A2F50DC0CE45266D9F6DBB9DB4
SHA1:	BE336694B7947D997641B5480DAC6270FB1BAD65
SHA-256:	1865B276E05CB88789A4FB9E6F6EFC69CEBA80EA725B37A4016B03CF79DF39D7
SHA-512:	3F24DDD29B5420334895036178218627F2689D752B5D677944C4FB794DD93F531BC3DC392D3EA7DFB95F606A315D846AEB02621C010BD604FA784B19550221AC
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/xkz1feq.css
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . myriad-pro:. * - http://typekit.com/eulas/00000000000000000001709a. * - http://typekit.com/eulas/00000000000000000001709c. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. /./{"last_published":"2017-02-15 17:11:48 UTC"}*/..@import url("https://p.typekit.net/p.css?s=1&k=xkz1feq&ht=tk&f=6851.6852&a=681435&app=typekit&e=css");..@font-face {.font-family:"myriad-pro";.src:url("https://use.typekit.net/af/cafa63/00000000000000000001709a/27/l?subset_id=2&fvd=n4&v=3") format("woff2"),url("https://use.typekit.net/af/cafa63/00000000000000000001709a/27/d?subset_id=2&fvd=n4&v=3") format("woff"),url("https://use.typekit.net/af/cafa63/00000000000000000001709a/27/a?subset_id=2&fvd=n4&v=3") format("opentype");.font-display:auto;f

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1262)
Category:	downloaded
Size (bytes):	1409
Entropy (8bit):	5.305755427531691
Encrypted:	false
SSDEEP:	24:EnIct/B9ny6DQOqFXNEXJZXs0ztbFTmumI9YxqXsYeDDOFUFTmumI9Yil+RI:ut/Bc6DyhQbVmJI96YmaUVmJI9+RI
MD5:	27284F5B968118802357CC8850DEACA2
SHA1:	CADA2CE501C427075709011BD932878613745DCF
SHA-256:	ADFD9B88A65939919FEF700C4C9124D592D335458E3988860CB8C666232CD367
SHA-512:	A4FC499629D2C709EB19CD6AABB96605D2EB25539624F53BAA46F1AD84172F75DFEC85DDE867B30A5457A0955F320DF0637C747F02553F31BB804102B6A319B0
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC4d2cbbb7ee224f988a4509d18ecf476e-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC4d2cbbb7ee224f988a4509d18ecf476e-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RC4d2cbbb7ee224f988a4509d18ecf476e-source.min.js', "function defer(){null!=window[\"jQuery\"]&&\"undefined\"!=typeof jQuery?function(){if(\"undefined\"!=typeof jQuery){var t=window.jQuery;jQuery((function(){t(\"[data-ta-intcmp]\").each((function(){var a=t(this).attr(\"href\"),e=[t(this).data(\"ta-intcmp-loc\")\|\|t(this).closest(\"[data-ta-intcmp-loc]\").data(\"ta-intcmp-loc\")\|\|\"\",t(this).data(\"ta-intcmp-id\")\|\|t(this).closest(\"[data-ta-intcmp-id]\").data(\"ta-intcmp-id\")\|\|\"\"].join(\";\");e=\"intcmp=\"+encodeURI(e).replace(/%7C/g,\";\"),a.match(/#/g)&&(a=a.replace(/#.*/g,\"\")),a.match(e)\|\|(a+=\"#\"+e,t(this).attr(\"href\",a))})),t(\"[data-ta-gnav]\").each((function(){var a=t(this).attr(\"href\"),e=[t(this).data(\"ta-gnav-loc\")\|\|t(this).clo

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.09306920777189
Encrypted:	false
SSDEEP:	3:fMkPqaY:fNqaY
MD5:	C1AADBF716DC882ECD2F0BB322DC8841
SHA1:	EDEA4D0E9098EC549EF2CA966CF6D55F304B7175
SHA-256:	EDE82AD06B17FD4BC421EB45301555A7982A6F6552B17AFEF17B2202D2F51419
SHA-512:	8CE14B9B5564EF0626CCF4F02794BBE5144A92083B6DDAC43F02C1170496D67E33759DA9C0A014EF332E83CF7575ADED7F6941FEA746FCAD0CA999F036896AB0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwm8Cd6FVJUaMxIFDTJjoKESBQ2lkzYk?alt=proto
Preview:	ChIKBw0yY6ChGgAKBw2lkzYkGgA=

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/938539671?random=1713460598597&cv=11&fst=1713460598597&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13836
Entropy (8bit):	7.983800643747364
Encrypted:	false
SSDEEP:	384:NprmIrmiuRQg8FXRPw86j4Xc54iX7wD9zjUDKwT+HB:NpqIrYH2XFMd5ipYKwKh
MD5:	CF87FBC962A4C94A1D437BCE4EA8F124
SHA1:	3C543E8A140774C9E91A8FD0D4453E9D3CF9327A
SHA-256:	F3060D29BA66A4F2910950762FA7EF2C996D939AA0A7DC1F58D33B7F2C980287
SHA-512:	29DDD8FB3C68785C71BC507F4A5E2643847ACCC0DCA1D1E68FA21914639AA65A4E044B7FB6D72D9AEF502E592CDBF72CE136A53328D97731A66658F368844EA3
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/wildlifetraffickingwhitepaper-270x170.jpg?h=170&iar=0&w=270&hash=7919C829305E7DE80573C4DD67D91B54
Preview:	RIFF.6..WEBPVP8 .5...........>M..D"...\.(...A.B.w.s>.....2....y.{.{.....S{.~..3v..E.i...G.g...O.m.>^>._.<.t.%..m).W....?.......................................s........_...=!>....~.?....S._.O..=........p.........{....w...q...............9.v..{H.....a.E.A.4..+.d.r..j2....R.;f..4R.}..`....m.^0"........`......J..'..O.....eO9.........H<_....(....&..j.{.p&.....J/......r..5.P.>2WH.......p...o.f.k^....2f[.]n-.\|..V..$..k.....fO.;..u.T.HiQ.2.@.V.6..J@.q..Ce.9{....H.,.m.E..M.:....%.yv.8....,.I.3..X>.B..6./...zUA....B.A..e....r].5'..f7....:...):.P..S..].]..&W.........L. ..^1a.......5.....QH.)XM...\|..a..Ov..w/..sX....[J....R@...V.a..M..M,..~p..W.D..].....G....W..1.E.3.....6."..a%...?.50;.V:6..#.._U_..f..O....yd.....xE....V.:.Z...7\|...8..1..].t.....8......vZ.:.+.....D.cW...1......8..L.L..~.,0...b?.Tx./..z........(r&.[..........2.........="!..}L..D7.a[....eP=S...-.H.f...:.R#.B...R...U.....&.V.w+..R....r......e..m..$..54h.^........8

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2263), with no line terminators
Category:	downloaded
Size (bytes):	2263
Entropy (8bit):	5.841074467601352
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08/njqpQsI/Ie9KM6:wsbSUtJfxrqLWWWdV6j1rnGp4o
MD5:	CC4EF7A5DB679FF8C64E102D08CA6A75
SHA1:	9D9C896A2DF4976BA92A68BF600D6003B6F8DF4B
SHA-256:	5C9DBE4652621AA7DB0FB11B07C257AF88B5815C76CB2081E7DEBDB6356A3262
SHA-512:	8213DD9D720C856EA8037DEA37881DC31F2384C488CF75DDCF482B7A1CB0E7C35AC15987187564AB7337788F658A4D642F4FAFE6DAB1C0D72BA9C4E055DBC278
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/950188369/?random=1713460590852&cv=11&fst=1713460590852&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	49755
Entropy (8bit):	4.666109930571229
Encrypted:	false
SSDEEP:	768:D70PUFKhz8La0CNuS31ka61ytK9mi0tMwO1GWxN69VORY/Oda3ZMjjRz9nucz8pG:dx6HA
MD5:	A9A4FFDA879E7FCC45D49B4D2E7B22DF
SHA1:	D8B703DBD110BB856EA9D909C4A97DB0457B7DBC
SHA-256:	A6A1EC05ABE13E0CB4D0400ADBC6D2BBD003C8EECC1D579EC1BB13BAF0974E61
SHA-512:	9DA49E3A2B31D2ADABB64321AF0E86B3AFA9FA59D846622FE87FD99797B8873976EF72B22BF64F5D968BFD99C00838EDAA8FB894BF357E633994C09651F62ED9
Malicious:	false
Reputation:	low
Preview:	{"JurisdictionData":[{"Selected":false,"TaggingCode":"OK1452","Name":"Ada, Pontotoc, Oklahoma","SimplifiedName":"Ada","Country":"","State":"","StateCode":"OK","County":null,"Municipality":"Ada","Level":"municipality"},{"Selected":false,"TaggingCode":"OH1739","Name":"Akron, Summit, Ohio","SimplifiedName":"Akron","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Akron","Level":"municipality"},{"Selected":false,"TaggingCode":"AL","Name":"Alabama","SimplifiedName":"Alabama","Country":"","State":"","StateCode":"AL","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode":"CA1000","Name":"Alameda, Alameda, California","SimplifiedName":"Alameda","Country":"","State":"","StateCode":"CA","County":null,"Municipality":"Alameda","Level":"municipality"},{"Selected":false,"TaggingCode":"AK","Name":"Alaska","SimplifiedName":"Alaska","Country":"","State":"","StateCode":"AK","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode"

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
URL:	https://us-u.openx.net/w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	1.5097187856279355
Encrypted:	false
SSDEEP:	48:D4xTaGcwbEb5qJPyKppRyEM7lyTqqZbXyE1N7yC5uPISzKnZrEdV1:D49aebEkJPyKppfcl8yE1NP1Kj
MD5:	D5F830AAACF83FD8EAC047BB27942B1A
SHA1:	B2E8C9CDE5052F37B1E43552F9BE27158C7E90EE
SHA-256:	5168F9DF2238F1ED03D618EE373D4A06D69F5CBCBC4A567822109F708E33150A
SHA-512:	AF220D8EF1F6081CF59151AB657A6400B46BE57B4A8D5AECD2A53B75EAD25AC03EE461C6836564BBDCA9777CC3B004C7A00E368459AF4B79BF8C0503FFBBBFBE
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/favicon.ico?v=2
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ........................................................................................................................................................................................*...................................................................\...............................................................b....................................................Gq.=...7hhcXhh^1............................................ggaYgg`m....mm[.hf`.hf`}mm[.................................kkc.hga.UUU.............hhaBhf`.did=.........../................gg`.llb.................qqc.he_SSm}1...........\................bvv.fff.ff`-ifa_hg`.hhb.gga.ff`ZiiZ....A...g.......R...............Dhg`.gga\|gg`Jaaa................................<..............."...................................................a.......N..........................................................................................................................

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	224
Entropy (8bit):	4.808075827403634
Encrypted:	false
SSDEEP:	6:MCI5bybhfGenwUPI5yQCfGERGW/SB/q6TCv2OC:MCIBwRGeTPvK3BXqC
MD5:	EA72FB1235A6E7E4216A1F3203803051
SHA1:	4499F97C6D6C817DD8F6FC5D29935A2DE1DEABE9
SHA-256:	D1A40106E6099742D9DC1731115575835C4C558687A176438886737545497DAE
SHA-512:	7A9EAEEDFE08A30718091838A0F5ED79E91FE9A043011C1FF106D112E7F295074F2898BD9239B4C351AF012A5CE02CEC078D6691D12DA5A72A29C20E5AED4B35
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISgAEJE8it2q3-3IISBQ38jPmlEgUNNv6k5RIFDWVN6Z4SBQ38E6eUEgUN0LAlAhIFDZr6tJMSBQ0c_HLyEgUN0TDZphIFDc7C5zYSBQ1MYo10EgUNtF0iARIFDQqycR4SBQ2hdvj0EgUNi59syhIFDQXLx6ESBQ2TQQs-EgUNzyi_aBIQCaZPXgAzwS4zEgUNMmOgoQ==?alt=proto
Preview:	CpkBCgcN/Iz5pRoACgcNNv6k5RoACgcNZU3pnhoACgcN/BOnlBoACgcN0LAlAhoACgcNmvq0kxoACgcNHPxy8hoACgcN0TDZphoACgcNzsLnNhoACgcNTGKNdBoACgcNtF0iARoACgcNCrJxHhoACgcNoXb49BoACgcNi59syhoACgcNBcvHoRoACgcNk0ELPhoACgcNzyi/aBoACgkKBw0yY6ChGgA=

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=23114&time=1713460611144&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study
Preview:	{}

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1230x214, components 3
Category:	dropped
Size (bytes):	22752
Entropy (8bit):	6.790507897889993
Encrypted:	false
SSDEEP:	384:XaUQGgg5BhrJfQpNzumvJD3gJ473w5Uw5Jxsi8O+orE9DO8Yc+t9Wg0puEdr1f2:9QG3Qw+geoDof2
MD5:	B6954552B1890F0EEA6CA814ADDA3E4F
SHA1:	22148E3A4AD794491B2039345E338BC061E03BE9
SHA-256:	828E777268CB03684EAF8F79E03E7B7BB91EAE3FA9C966499A3E1D6AC220B5A7
SHA-512:	5C3F057F4B17720AA7C91E8FC64AA6986FB8366998C25BC2946BF04FF12550F8E53AAB935046FCB1C1F0B7CE382492AC77B4C86C70824E1135242B43688861F5
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".......................................................................................(.......e..(.....DX..@....%...........................................(....(......Q..@..@..@%.................................(..........,..,........Q....@...`..%.................................,...@

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	383
Entropy (8bit):	4.692998827692633
Encrypted:	false
SSDEEP:	6:0ULfI8HEJXFCVoBQsE+CCCCbKJOmxS15Kr4CCbKJCS1ZBS1ZB6Hbk:NA4+FCVoBQsBCCCCuJMTKr4CCuJxvwvT
MD5:	5D27767268EE03EBD4CBF7A371232388
SHA1:	33D7A3176674212F842EE3F47E530E7228F2D3CF
SHA-256:	F8EDE619AAE36CE63EA656C1E84DAAE6ED1CAC1C2B948F0F4D37A2545AB5E8EC
SHA-512:	B70D4DA3C73B5D133BE57802858EF9A4787D9BEB69637682EA6D25CB45AE7F81183F35399E6771C61C741699DEC8F965240ED0F73D453910E0D507C7F91EFF3E
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/js/app/default.js
Preview:	$(document).ready(function () {.. var $localeOptions = $('#localeOptions');.. var $localeSelector = $('#localeSelector');.. $localeSelector.on('mouseenter', function () {.. $localeOptions.show();.. });.. $localeSelector.on('mouseleave', function () {.. $localeOptions.hide();.. });.. $localeOptions.hide();..});..//# sourceMappingURL=default.js.map

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	52634
Entropy (8bit):	7.996217073695633
Encrypted:	true
SSDEEP:	768:DB+nDQsOP2l8bh1IgwSuQIHn8pMI10Pjl1EXeiMLrIbfzbsOnJlgj4X0faqorPQq:DB+DKelGXIHhnn8D00FZr2jMkQSHgAi
MD5:	3DEF21404B47A0DBA92A6C521E6C9D0A
SHA1:	0499601B55637049EBD47BD76705DBBAB86B99B4
SHA-256:	C86F2594EA1D09F75E3B99FD7D0AD7625DF056278B85C700E23E18ADB0D27D45
SHA-512:	187AAAFDF04FAE13C21E85AE33D043A862E1E2DD4EEC1A17566D1E6304D39DC3E142B2CD8CB7A1B1BDD8AD462AF762661EC3DEDDD8FB9B8EEB0A193D723D00CD
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg?h=420&iar=0&w=1230&hash=51E0FB2312B4005496EF1209FD583A43
Preview:	RIFF....WEBPVP8 ....P........>Q&.F#.!'..{....em.:...i...OS!....~...........Q..{.y.....k...:..g....?:#}..........I..../.._..?.{..T......G...?.}Y.\...s.....g......u_.>......v.#?..............g._..v._.k.?_Z.#...;.l....>g.F.Y.....y.....Q..?.....Z.[...?....?.....f......p....>\.M...a................7./.o.>......o......i.c..,$CXd..U=..S..3..Fr7p..-..gO. ".......#.9_...[H%.l..-...\j..Y0X!.}......<.......2w..Y.....BZ......hI.@S...@...%T..!....v..x..s....<..1K...H..>.=....5._..-.`..<...._..8n..#.JYRE........IV..Ey[.b..sF.....I........<4L.%1f9....x..E..0.^..+...... (.._a........Y.r.G..W.3K..b!"!.qE....j.D....pn......!b:...d.A.LZ{.[....zc..H.'.b.......n.q.....,.......1S%...k:.\|.....b..K.W]...._.#v~.<.!.Up.L...]...3.x.O..[;*8._.'....;..<..0`....k..H.......}S..<F.9...~.......,c^.^I..>A;....^......m.~.@1..O..].0..)..Se.\|o~S.....8l.0...\|.......l.a...\....v..K.h..G`.jP..Y.K...2.,...........>..?.y...&..o....@.$..Ja.P....A.Ih...1z.v(#v....J.Yq.IT.

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1384 x 417, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	60579
Entropy (8bit):	7.925433054820642
Encrypted:	false
SSDEEP:	1536:mEuwusAVU3aG2cghcu1ZBHy6ZPccp3bc/gCyIv801p5m:9rbp3aVc2ZBHymEcpg/gcC
MD5:	109CB1B95EF0040C195CFD0B433459D3
SHA1:	93B366708EA619E92DFEEA09D919F23F79226C67
SHA-256:	6F01AC663C62D2A5BCFCB993F3E2FEE3BF83DD09D18CE3C621EADC4E757A476D
SHA-512:	879B4438DF86C6F2B3ADE4042563382B41EE8012596BF8B6B57540B6D2C7E6080004EBCE57A1EECB69AD0293A178CF21A9A7C7E0C3A52540F4170C72EA9CE62E
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/104ff038-4400-483e-a464-09cc53e8c04f/517eb6c6-b474-40d4-9c47-7b50cbe09d2f/LNRS_RGB_POS_300.png
Preview:	.PNG........IHDR...h...........]+....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<...0IDATx...t..y..Uw...;..".$EH....]..H.M8...qBh..$..D.d..#4s&..9oL..e.$....kDz.#[.6k....H..Dq'...]..V....Z.....BW.^.k..__.?IQ................P.............P. .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-......................T..$......(.(.....d...F.z..A...;...........*.q7.~.......jwP.....1.....P.{6{....{=&9....(-P....Z......

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x420, components 3
Category:	dropped
Size (bytes):	70726
Entropy (8bit):	7.976787458120761
Encrypted:	false
SSDEEP:	1536:su4U28iD3yek/Qx9nTRboWmkTXlcLkbHB2yQ7L:su4d8iLy989nT1dx5jB2yeL
MD5:	6FF838CEE20B84B45ADD19847CBEF27A
SHA1:	D44F786FEE9F6BB5FAD2B39BAD642AE2E309848B
SHA-256:	10C267E4608A92BCF162697D44D49B2CE8D059078BF02C14577B53F5E47FFE3C
SHA-512:	A29119262E6ED3F5A47126D45A7E024888B4935E3BFF500A916D7455D767056CF46E26D362DE1A126A2EB8428A1FFD16266760DF9B53AAE5BA5FCE2E7B5F39C3
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}........ ..".........................................Z........................!..1.AQa."q....2B...#Rbr..$3C...%4DScds....&5Tt.....6U..'F.7Eeu..................................I........................!1AQ.."2aq..B..3R....#Cbr..4d......$%Ds...ESTc.............?.5.c.i/.\..#........Ep>...hI.F#....

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2263), with no line terminators
Category:	downloaded
Size (bytes):	2263
Entropy (8bit):	5.8435460159149715
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08PnzqpQsI/Ie9KR6:wsbSUtJfxrqLWWWdV6j1LnWp4h
MD5:	7D98F921268AC96CB50D8F662FFAA0D6
SHA1:	B247D1A8A35D4B1E2B1D7FC6E1750620FD860145
SHA-256:	88F6F7A9E13EA5B29D25A2DA710383D048EC37264724056785C363D63B721F3B
SHA-512:	23102AC99D4137671C7AE55C52EB10F1AF28DDD0560129426CB00FE91E2E71005D566D323E183C43B498E790B0759BA3550B6BEA9132AEB5CF39F3A078B8668C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/950188369/?random=1713460559129&cv=11&fst=1713460559129&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 845x403, components 3
Category:	dropped
Size (bytes):	32248
Entropy (8bit):	7.930425814117578
Encrypted:	false
SSDEEP:	768:eFZrjZ1AU+1DgOSE8xMnyyQVPTKjCKnVhu5PaM/:oZrlSxgOSxxMnyhPTKj9VQX
MD5:	A5A16F5358B4633B6150BAD4366B092C
SHA1:	0AFBE5C1F63D4D8264A199793B15B288562253E4
SHA-256:	614BE7722FE8D024893A55696FBE791F832B1622D1223FDDA5DFC055DA37CD82
SHA-512:	42361BA03D7A700C6080590E87F4C641618923C6F48630E8D4C8825E0E008A24B2CCB98F2185D888DF9377CAF469AE3EF2AB12045D43E728A7447354AE74BE5B
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}........M.."...............................................................................Q&....... &...........bX.L...S.e)A.=.~....&.\|.n....YZ.....@...B..3.'E^.5.:..~x.....X.]C.\BK..@E.8MW..H..4I.Z....7.6...wx.3.q..x<.H......#....,n.6....N.2...3w?..!..\.].-q..t.0..................+..K...,.

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	7004
Entropy (8bit):	5.396532018831599
Encrypted:	false
SSDEEP:	192:rNabNSNFNO3YNkNIFNuNF6NBNWNW3FN/NGYN+5NUpNWNVNs3mNkNifNJ:RahIrM2iykFAXckrVV4UvcbaMiyJ
MD5:	48BE14D383C80BEE3C0F34215FD5C467
SHA1:	BEE0863DE9AC198217B469A5CA74E3979E5A5214
SHA-256:	694ADC42B1E12C4EDC69F43C2AAAFEA20E28D55D4EE73C3505CD1BF8B90E3452
SHA-512:	92B28064852DE361DA7FD9C4C181FFA6D197F05772897AEF12EF5342EAB5156140EAEAD412DBA36A62E9FDF46C58EFE982B73EABDFD76DDF0C9F8C493E6D93F7
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.gif?s=1&k=xkz1feq&ht=tk&h=hrcenter.us.brightmine.com&f=6851.6852&a=681435&js=1.21.0&app=typekit&e=js&_=1713460559018
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	20185
Entropy (8bit):	5.448348658834183
Encrypted:	false
SSDEEP:	384:PW/mtBXmMQHQO430WTZPoq99VR/aHq904Zq9r:BYsK
MD5:	6118F2183F96837378429C6CDE29FE65
SHA1:	5DD4F2835B2E7A8C1823168B08B1DE5D8211B839
SHA-256:	62FC1BEFA1B254D0C4CFFA16C912A004F4FE90F6C6175D681AB1BD3FA68164AE
SHA-512:	191D40943BE9C5B6D8666C7051EA33A824A67BBE113255D684ED29F8CDDE770D9AC44939B3C9DD971FD31D96051117BAC020F94A76F01E4925B8A72DB92BD0CD
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css2?family=Inter&family=Open+Sans:ital,wght@0,400;0,600;1,400&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZJhiI2B.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZthiI2B.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Inter';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/inter/v13/UcCO3FwrK3iLTeHuS_fvQtMwCp50KnMw2boKoduKmMEVuLyfAZNhiI2B.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Inter';. font-sty

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	7.3712991791556535
Encrypted:	false
SSDEEP:	6:bZSr5i+kL36cFac+cIe09DwId9uux0jeS1ei7CFuu65O/KMeGwlYSnPYGrI:MViOcFEzf6IGuqiS1v7yuXsSvlYSnTU
MD5:	3470D93E78C94CC6328A41E40E6204B4
SHA1:	A8437627D93ABAC4E3DA55796FD56B758C93A279
SHA-256:	267D7049C2751094AED8D9C01D796F40D6B82E3DB73A14A9703C4BF15FA7054C
SHA-512:	B4A633A3263113B63DC5E6A3CF3BD3676C50B6B4D0C36A2E658325ABD48FE7CEBB32D12A73AEEC251788987D67B0C8354EF3510EE43510240FDCDC3C23F06BB5
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/privacyoptions29x14%20png.png
Preview:	RIFFx...WEBPVP8Ll.../.@.....$E.....d.i...IR.....+y..+k..D..DM...X@...r...L..o1\|o,..P..j..4[..#?(.....}Tf...E.?...<..\|......?J.(.m..(..E...1..K....Py... Ta.(.....X....i....G,...h.\.A.b.M.....m.vN...c.m.....".?..........GO..J.rcSssss........:.....{(..sL.Y.l(...~5......,l..zo+....WA........2a.0.....a..i;...]f.XN....t;@R.)].H.......S...7{s.&r>E....5....#..wm...

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4179)
Category:	downloaded
Size (bytes):	223994
Entropy (8bit):	5.542218987872351
Encrypted:	false
SSDEEP:	3072:Kmq+71vbzwHnHVdi8Vvp2LUF1er5yyXatvFv522gY8pv1H9iL:Rq8wH1Ff7tvx522v8pNH9E
MD5:	7965E5987A91EA5E5EE8DBA25F6F68A6
SHA1:	B7BF87A8EE274F3A85B2C42ED6F3310EC105F5AB
SHA-256:	94FD193F556FF5F4525A4E1FA5FEFACDDEB95FF1214ED30ACD9A9635E0B57BEC
SHA-512:	A5ECA4059662AA41E514EECADFEA193BDDC89A931756364421784AA8781B403608E36AD35BA7C5C61141859177DE968833D2E87E067A5CC1F3ADB2E7FEBF6A67
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/destination?id=AW-950188369&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_1p_data_v2","priority":3,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneType":"CSS_SELECTOR","vtp_phoneValue":"","vtp_streetType":"CSS_SELECTOR","vtp_autoPhoneEnabled":false,"vtp_postalCodeType":"CSS_SELECTOR","vtp_emailValue":"","vtp_firstNameValue":"","vtp_streetValue":"","vtp_lastNameType":"CSS_SELECTOR","vtp_autoAddressEnabled":false,"vtp_regionValue":"","vtp_countryValue":"","vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":4},{"function":"__c

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	23213
Entropy (8bit):	7.988071326799665
Encrypted:	false
SSDEEP:	384:5SWKRpVcPOccqtCDpG3uIIv6uS8nyUdqJw1Mnu2/vnxyVzUxVHoy5F6SqT/GKUgS:5ER/cPxcqtCDpG3MsQqiSu2XnN1yZ8gS
MD5:	8C8B3458F7F203CA6BEC9B891DAF064C
SHA1:	D377730003EDF646E396FD32D0DC850497E8498A
SHA-256:	218692F9C7368F56B72DF9D200F0DC8C4711CB1A919C5BC53DC59ADD3EC62069
SHA-512:	5C28992CB10684729B7A2EAC9E01C4596C0700E5695EC328F844ED96954DB5E5B721F514E5C2E591BA582D749C336EBF1D8C9C2FD691DD966E04FB2D151DA25A
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D...............Y....(iinf..........infe........av01Color....jiprp...Kipco....ispe...........8....pixi............av1C........colrnclx...........ipma.................Y.mdat.......7.B2...OE<..3...>.z.^..T.J......`...U......N...S.\|~..b...0...j[..c.o5X.z=jTp....b..X.:...e.m........]sl.}../.L\.....Eu.%.....G.&^.g...A..]cNEa....`t..+....8...d\..>..=.Q4X.e#.8.R./...Z..~..n.$F....`S....n..JW(...^..2.Q..9.....".}5.....Z......m....S."Ef...n@.sl...U..(......V..+...P@Me9..$Y.^..%..E)I.....y"5.......I..-Cj..H.fY...49..(...;i/&..2...wW.0..W..D.....Ok.oz.Xv......1VT..AD1...M..?..Ld..S.t\?.0}..x.;.Sw..Ee.]la8.'.?....S..K...........VQ....l`.\|Q....9..F&....}.4.......M..@h....a..>}..Z..>8.a.Y..-.%..sOk.2..r..l.e...k..>.....z......c.(ey..z.bT..K...e....~].,.{465_S.Sn..(mf.y.......IM........Xq.a"..(Q......dCU:\.}...}.F3.....\..wu.<D..'X.Co......y..R..;.Q

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2197
Entropy (8bit):	5.0029458408138945
Encrypted:	false
SSDEEP:	48:o3KkzSstnkwBAPNNZbBkNgFy6rruxdue2zT46I05ZSsnidKK:zbsp6NNt26r63ue2z86I0jqT
MD5:	8A13A62BDDE79568BEC514284110884E
SHA1:	A2A653646553BD483A108C5708FC3C6D58B44A78
SHA-256:	BEAAB32DB868D45EB38728FF90BF959D74256760132D52C48A70323C59DEE559
SHA-512:	939213EA0D76D6CDFF102CC448C45BDD9E96BE8CF16B3B19228C8148DA306689B5F2165DABF64BF9040647459908E961C85DD403AA765E5C4A1EC397A4A4A0ED
Malicious:	false
Reputation:	low
Preview:	{..."eventTrackApiHostName": "https://hrcenter.us.brightmine.com/eventtrack/v1",..."userInsightApiHostName" : "https://hrcenter.us.brightmine.com/insight/v1",..."userPersonalisationApiHostName" : "https://hrcenter.us.brightmine.com/userpersonalisation/api",.. "chatApiHostName" : "https://hrcenter.us.brightmine.com/chatapi/v1",..."assetServerUrl": "//assets.us.brightmine.com",.. "liveAgent": {.. "popupLoggedInScriptId": "5734G000000blLO",.. "popupLoggedOutScriptId": "5734G000000blLT",.. "numberOfDaysBlocked": 1,.. "chatWindowHeight": 600,.. "chatWindowWidth": 800,.. "headerScriptId": "5734G000000blLY",.. "deploymentId": "5724G000000blLT",.. "organisationId": "00D0Y000001disJ",.. "sourceScriptUrl": "https://c.la1-c1-lo3.salesforceliveagent.com/content/g/js/53.0/deployment.js",.. "initScriptUrl": "https://d.la1-c1-lo3.salesforceliveagent.com/chat",.. "enableLogging": false,.. "offlineFormPath": "/Liv

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	49755
Entropy (8bit):	4.666109930571229
Encrypted:	false
SSDEEP:	768:D70PUFKhz8La0CNuS31ka61ytK9mi0tMwO1GWxN69VORY/Oda3ZMjjRz9nucz8pG:dx6HA
MD5:	A9A4FFDA879E7FCC45D49B4D2E7B22DF
SHA1:	D8B703DBD110BB856EA9D909C4A97DB0457B7DBC
SHA-256:	A6A1EC05ABE13E0CB4D0400ADBC6D2BBD003C8EECC1D579EC1BB13BAF0974E61
SHA-512:	9DA49E3A2B31D2ADABB64321AF0E86B3AFA9FA59D846622FE87FD99797B8873976EF72B22BF64F5D968BFD99C00838EDAA8FB894BF357E633994C09651F62ED9
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/jurisdiction/getalljurisdictions/
Preview:	{"JurisdictionData":[{"Selected":false,"TaggingCode":"OK1452","Name":"Ada, Pontotoc, Oklahoma","SimplifiedName":"Ada","Country":"","State":"","StateCode":"OK","County":null,"Municipality":"Ada","Level":"municipality"},{"Selected":false,"TaggingCode":"OH1739","Name":"Akron, Summit, Ohio","SimplifiedName":"Akron","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Akron","Level":"municipality"},{"Selected":false,"TaggingCode":"AL","Name":"Alabama","SimplifiedName":"Alabama","Country":"","State":"","StateCode":"AL","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode":"CA1000","Name":"Alameda, Alameda, California","SimplifiedName":"Alameda","Country":"","State":"","StateCode":"CA","County":null,"Municipality":"Alameda","Level":"municipality"},{"Selected":false,"TaggingCode":"AK","Name":"Alaska","SimplifiedName":"Alaska","Country":"","State":"","StateCode":"AK","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode"

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2318), with no line terminators
Category:	downloaded
Size (bytes):	2318
Entropy (8bit):	5.865292142660259
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08cZFTFQ9XhKXz/k6:wsbSUtJfxrqLWWWdV6j1oZHF/d
MD5:	5C1C62F1605348D3C191FA2329A3592B
SHA1:	704223B53A451B6E657EF48FA3FC9A180A320519
SHA-256:	4B1895190BBA21F3871BAAE4D1BFC5CCBBEC9A7B11BE80ACD5E7B5AB8F3EA585
SHA-512:	A48658AC0427A3B9A9A29B52BB1D5238EC64363EE0A7B5BF16DFC81CE38072C9DC5E9E81F52F503FBD9D824FBBB38D12330A2BB4D488E21A97B1D84DA85F0B0B
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10827142419/?random=1713460598612&cv=11&fst=1713460598612&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (501)
Category:	downloaded
Size (bytes):	1055
Entropy (8bit):	5.3180809732942755
Encrypted:	false
SSDEEP:	24:E1KefkXIbtEHvIYWwmqAK/HJ2cNAXzk5vuHM8aJLtMCRWZ4FhQ:E1wXmtEPT6cLAXzk5kaJL+CwYhQ
MD5:	ACF9E88E61C647C1089D42235B4BAA08
SHA1:	72DC12DBF96DA6EACF5560278E9A4ECCC3664663
SHA-256:	EBC32FF356680CA83638A3D2D79CD4919C2119A86F7BFFCE95DB70642C7B9367
SHA-512:	A61A389E393EB7E38DE338634F064901ED214E6DD8E788DEABA252987642ADB37DEBFAA91B996B7C1F0F00A313622F6AF01A7FFA54E042B0107BA380FAF39DBC
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/iframe_api?v=638484955464930367
Preview:	var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/f92087f2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"};.if(!YT.loading){YT.loading=1;(function(){var l=[];YT.ready=function(f){if(YT.loaded)f();else l.push(f)};window.onYTReady=function(){YT.loaded=1;var i=0;for(;i<l.length;i++)try{l[i]()}catch(e){}};YT.setConfig=function(c){var k;for(k in c)if(c.hasOwnProperty(k))YTConfig[k]=c[k]};var a=document.createElement("script");a.type="text/javascript";a.id="www-widgetapi-script";a.src=scriptUrl;a.async=true;var c=document.currentScript;if(c){var n=c.nonce\|\|c.getAttribute("nonce");if(n)a.setAttribute("nonce",.n)}var b=document.getElementsByTag

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	586757
Entropy (8bit):	5.6220892051894396
Encrypted:	false
SSDEEP:	6144:IHySnHLgsYwTAXcTuAqIhzgCzDk+0DQTtM+un8rwMF5BiCPC7:InHLnYNChzgCzIjv87FPPw
MD5:	2296FB574AA5763E0DE8D692AACC8FC9
SHA1:	BFD743AA1EF5D70B43F5A06C6D71245117C3CBBE
SHA-256:	DA286F7DDC94DA3F6FD6453FD5B05D463E31E9F3A64D8EB1CAF44F36627A12C0
SHA-512:	52AFBA15F97D2C7F50FDC7D60A09C442561219988510C930D4C08ACFB610A3A9B02697FAB4C73397745F1AEBC27E47C95A0927E661E01242BBD596E131C46276
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.7/js/player.module.js
Preview:	/* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */.import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,r as g,m as b,p as E,P as y,T as C,l as T,n as w,o as L,q as S,u as A,G as k,v as I,w as P,F as O,y as R,Q as N,S as D,z as M,A as x,H as B,R as V,B as U,D as F,E as H,I as q,M as W,J as Y,K as G,N as $,O as z,U as K,W as j,X,Y as Z,Z as J,$ as Q,a0 as ee,a1 as te,a2 as ne,a3 as ie,a4 as oe,a5 as re,a6 as ae,a7 as se,a8 as le,a9 as ce,aa as de,ab as ue,ac as pe,ad as _e,ae as ve,af as me,ag as fe,ah as he,ai as ge,aj as be,ak as Ee,al as ye,am as Ce,an as Te,ao as we,ap as Le,aq as Se,ar as Ae,as as ke,at as Ie,au as Pe,av as Oe,aw as Re,ax as Ne,ay as De,az as Me,aA as xe,aB as Be,aC as Ve,aD as Ue,aE as Fe,aF as He,aG as qe,aH as We,aI as Ye,aJ as Ge,aK as $e,aL as ze,aM as Ke,aN as je,aO as Xe,aP as Ze,aQ as Je,aR as Qe,aS as et,aT as tt,aU as nt,aV as it}from"./vendor.module.js"

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	123686
Entropy (8bit):	7.99850506616667
Encrypted:	true
SSDEEP:	1536:iM5Er9lQIqY3a/UiVzU9PZNerlRb1YZQLYjL4C4VIaPs1xMMfT8G0nXAoet/4JLe:HvY3hiVYtGrmXL7taU13wG0nW/9N
MD5:	AEA9B56BADC66FE2470418EDBAD21CB0
SHA1:	52CDCE21611E842616629C3FA0F7E7F89EB996F4
SHA-256:	729AC7271D3FF3CED2B89B1EFFC15ED0F47F0C436CB64209B5403ACBF874D390
SHA-512:	86A953198F586617817C38D432CC1763E11BE179295B41D7ACE66B5133D04BF8387CA850F9EBFE94B18C69DD12A28A34636D44D2B584BBDB2315F8CECD70D551
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=915B990125E8A6865191232B3C3F9D8F
Preview:	RIFF....WEBPVP8 ....p>.......>Q .D..!&+v.....M..W..........h.......h.l...]..\Oq3.B.......s.g..Wa.k....................\|....i...W./........A.....C...........~......#........N.H.E........;...u=......}.#.+....oO...?.?.?...~........../...7..............u.3.........9.{..?..m.e............/......?....v..'...~1......G.?....\|....?...?.x.k............?.{!}.........;..........R.5...7.w........-......._..n......~.............R.Vdv...qK...q:`.%x..!....m\.;\|.wyV...`.kx......k9.L!.8..,gA(.}'.........z...g<Dt..c.[8.Ztr......u....n:.1x....s...-....Qq......K..A....s_...,{~.'.0..03.?..].....#.]...W....B.O.......v.(TF.<.h.,..z".\|S.d...9.9.w&!.:SI..{V......UZ)A.....L.Qp^.`..cm.....-r......K.....k...D.f>S.V5x.....j.82=..y...X.....J...zF!.}..9.....0~.....}...[.#.]5....P.XFvdu7..Y}.8....-.....9.4/.G......w..~.....j#.L.C...n.'.mL.', .......v.~J..nbH.N.>.$...d.L..:......S.NsF.{..xe= .TV..4..'..Qv........,<.&9../[...H.g..tQBfV.@.........qg...\|..@....u...-..fU.w.C..N.G..._..../

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 128352, version 1.0
Category:	downloaded
Size (bytes):	128352
Entropy (8bit):	7.998349465466699
Encrypted:	true
SSDEEP:	3072:b4XkN5u3RbAR2r4lJ8FBnP7fNblbKBRvqy:fGdA8FBP7fNb5y
MD5:	53436ACA8627A49F4DEAAA44DC9E3C05
SHA1:	0BC0C675480D94EC7E8609DDA6227F88C5D08D2C
SHA-256:	8265F64786397D6B832D1CA0AAFDF149AD84E72759FFFA9F7272E91A0FB015D1
SHA-512:	6655E0426EB0C78A7CB4D4216A3AF7A6EDD50ABA8C92316608B1F79B8FC15F895CBA9314BEB7A35400228786E2A78A33E8C03322DA04E0DA94C2F109241547E8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
Preview:	wOF2.......`......~....................................D.`..........,..t..X..6.$..p. ..z. [.\.M.B.....-..VT .&"..Qc.=.U..XwD...7Q.v.a..; (...I........+.I..%...._.v.:..N.Y....;J.V...+..S..9Z...X.J........_0)c`[vb?.".P.E..Q......."p.v..........3.Zm`k":8..Kk........UR%U2...<....'a.L.4.&....P.X...,z5.j<++....ff..X1I.......%.Z<.UT.G.)L........;.A....O~ev...-z....^.\|.....pE..@.t.7...4..>...}.U[y...O8....\|m.L04....t...g...../...&.E...."...q.1.(..g.&?;...Vx..\|.-p=......;...a..Q\|L8..}..$.I.2.tI8...O..Q...k+;..N.hf.M...t..(..\...O.......:n.... v..}H...\|B<..'..r...1..B, .....6.&...6.x.i.=...r......Os.._...g.{W$VD..A1........B[.<un...t......k..n0........ ..O&.....%.@..c..Tv...pT.Np...U...%j+ZP....@.....b..........~...f..D..... ...O$....\|......$W842...S.....2.pIL.....Z.[.xo.r.{.d)I.P.-)0..K.`.~,.8..[...m..3d....A..v.s.d..KW..j.4.Ic.m..,.P........../W.j...>B..BJ.........[?.....$."...-...K.P.R..K.....Dz(..7_...=.....b.C...2..4F.+....P...f.#.q.G.G8.

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	21361
Entropy (8bit):	7.9604195530485775
Encrypted:	false
SSDEEP:	384:UAPi5f+rdJBIdWU5cUyP8GcWhcGL2EQ/Dtl3nKQCU:U+/rbBS9KLCXnKQCU
MD5:	5EA4A94D901045D44537C7651E46EB24
SHA1:	3283B9758F2BA0484FB17F5234A9E6EB8561697D
SHA-256:	D07135029ADAF82A3E423B2F21D24A4B8FB101324FB6813FB2DA897924646D16
SHA-512:	13C4D036F8CA6504C1E3E087E481D4CAB3B71878DA2FFD11DB37B37264B2FCA99C9BDCEA281DD542A686A7279F92482CDD417A6459504AB75E927EC2F1F6F6C8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx..w..gu.{.y..}+u....4I3.,F.%@B...hd.k.ml.z..{.w...w.{....-.5.`....$.P..M...............a,0A3cf...>.......yN.....m.y5.R..........q ......".........4iK...$...r..N0."...f.0m.\0....Y.R....y..{..3.lqq~j.....O..g.........r.@$...x......w.j....@.D.......cG..y..'...k.1'.....g.R9.8. ...............G.(......H...i.+.\|.]?......?..OC.\ .R9...3o.........822T.U+.%$B@R..-."%",..a.Q'........~.M...~.\.'R..B?.K.....%."...o{...._<..w..t..""".T......"4.Z.X.X.V.q.;......-;^.l.....~.... .....k...JK..XDr.....:?...........RJ.....W...........D.B?.K..T..D$..?.._..G.F5......D.....Xf.hZ..f..EH.HH.Z.F......[...m70.Z..m..sH)f.v..?....UK.....D...At.-@..."..(.....0..(..a.....k...=.l.?...............Yl.@.b.Y........E.....DJ).@...kE... R.\^.q.O..G....hK............u.VgS.D..g4D.D......"".,..r.M.A.Z..(BD.Z.KKo.....\#".v..=.......<.....kup.*D.A..g0........H+...Ne........E$........9...r.p&......U.B.H".-..C..P..y......'..

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2371), with no line terminators
Category:	downloaded
Size (bytes):	2371
Entropy (8bit):	5.868599050142727
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08QnmqpQs5eOQKVd6:wsbSUtJfxrqLWWWdV6j1snPp5s
MD5:	462770A38ECADA6B7D6FB20C1CAC3A5B
SHA1:	1AE5CFFAC3B2382463622F8279E204990C70298C
SHA-256:	582DF43A32B085154AB6C34A75BCBE8492EA7EA18C50C847F5265C782906AB70
SHA-512:	FFA6DDE6EDE78D56A93E26F2BF5B34ED5779ACF070076BA47E188D4AA74E90F72482024CDE3B45323B1B3C56E0B529ED7A5DE2E0753FD22D5D2B028AB5FB5C21
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/950188369/?random=1713460584429&cv=11&fst=1713460584429&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16345), with no line terminators
Category:	downloaded
Size (bytes):	16345
Entropy (8bit):	5.267348015842993
Encrypted:	false
SSDEEP:	192:j6DrabULylZQT9kTlAYxayqM2WL5YW7VhpIhtoJGWizFXk842Tbva+1mV:j6D+bfAYUWjpIno8WiVkBWT1mV
MD5:	8734765E98CBD2DB0A9C8247A0C0444E
SHA1:	E71B3EE54DF745ADF82D07E0FEEB7C0A6610B9B2
SHA-256:	F2EB7AD21A6B644D6FDCEB1A86B24C2A54D4C98A0970A0830A4F59C556231FBF
SHA-512:	BB42D2D5EC0726EBA8801FCAE162C1E3E870DCF147A543EE02CBAF5996D0F957F548C7F61CE2F3F17E63557625214333F5E219AEBD49F0B7625F66685543CA6D
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/web/Assets/Full/Bundle/sitejs.min.js?v=6951
Preview:	var AppShared;!function(a){var b;!function(b){function c(){var b,c=AssetShared.Helpers.modelDataLibrary.get("ConsumerSettings");if(a.Helpers.Common.isDefinedAndNotNull(c.CurrentCulture))switch(c.CurrentCulture){case"en-US":b=a.Common.Culture["en-US"];break;case"en-GB":b=a.Common.Culture["en-GB"];break;case"en-NL":b=a.Common.Culture["en-NL"];break;default:b=null}a.Common.ConsumerSettings={CurrentCulture:b}}var d;!function(a){a[a["en-US"]=0]="en-US",a[a["en-GB"]=1]="en-GB",a[a["en-NL"]=2]="en-NL"}(d=b.Culture\|\|(b.Culture={})),b.loadConsumerSettings=c}(b=a.Common\|\|(a.Common={}))}(AppShared\|\|(AppShared={})),$(document).ready(AppShared.Common.loadConsumerSettings);var AppShared;!function(a){var b;!function(a){function b(a){d([[e],[f],[g,escape(a),""]])}function c(){d([[e],[f]])}function d(a){AssetShared.Helpers.loadEloqua(AssetShared.Helpers.modelDataLibrary.get("ConsumerSettings").eloquaSiteId,a)}var e="elqTrackPageView",f="elqGetCustomerGUID",g="elqDataLookup";a.initEloquaForFormsPage=b,a

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	16152
Entropy (8bit):	4.543361292856887
Encrypted:	false
SSDEEP:	384:5oPr8Zj3+DcoTJ1Brdqd9ztcRchn1jzaOg41it6Z9GMTeip6i:uBvNgd9tC2g41it6X
MD5:	BB9AD1F428E21E1A55A4620F65ADAE5F
SHA1:	037B96AE235E872E743BD484F5540A6E423CF836
SHA-256:	F64928B57D1CFE72F66BD46B27C5E2FF8D837D349905A1C03A3534866A50650C
SHA-512:	D879681771B6F0CC72AE6BBBB18D97B0D87F4D1BFA677AD56EB63FDBD5AD02AE316285CD02A25B4C5E0DC7F4520E8A6F1ACEE979AA89BE108EC62A419C39AD1E
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com//Full//Content//Images//Logos//core_consumer_us.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 920.9 151.7" style="enable-background:new 0 0 920.9 151.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{display:none;}...st2{display:inline;opacity:0.1;fill:#606667;}...st3{display:inline;}...st4{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;}...st5{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12.1068,12.1068;}...st6{display:inline;fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12;}...st7{fill:#FF8200;}...st8{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.8797,11.8797;}...st9{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.7895,1

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2737), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2035967
Entropy (8bit):	5.028787831389879
Encrypted:	false
SSDEEP:	24576:He/058e+4Gs9ZKRTV0D1G+b24q1IL1azdm/d47tm:He/05o3sPKRZ0Y+b24q1aGmz
MD5:	14E83B1543E35A67FCBD44D648C39EA1
SHA1:	265D40AEAA6B15F3158F2D34179EBFFB11614DBB
SHA-256:	2F54D03110253AD8697E3C3449D41A35FCF98C9C665E0E467139F47DFF6BA1F0
SHA-512:	E90801FE85AF49EE371D05ADABC19D25D320FC3BD3E82DEC84EBADED9C432E5542BF29FCE195F5E3148B82364D277206AAF10FEDB3CEB7908E967DDE6C9E209A
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/js/LNRS.bundle.js?v=638484963592761859
Preview:	///<amd-module name="Components/Buttons/VideoModalButton"/>..define("Components/Buttons/VideoModalButton", ["require", "exports", "jquery", "eventManager", "//www.youtube.com/iframe_api", "//player.vimeo.com/api/player.js"], function (require, exports, $) {.. "use strict";.. var eventManager = require("eventManager");.. var vimeoPlayer = require("//player.vimeo.com/api/player.js");.. var VideoModalButton = /** @class */ (function () {.. function VideoModalButton(args) {.. this.$scope = $(args.scope);.. this.autoplay = args.autoplay;.. this.showVimeo = args.showVimeo;.. this.vimeoAutoplay = args.vimeoAutoplay;.. this.stateChangeMessages = [];.. $(".modal", args.scope).on('shown.bs.modal', function () {.. if (this.showVimeo) {.. if (this.vimeoAutoplay) {.. this.player.play();.. }.. }.. else {..

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316), with no line terminators
Category:	downloaded
Size (bytes):	2316
Entropy (8bit):	5.845061164694818
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08mLyayKF2hFQ9XhKIL6:wsbSUtJfxrqLWWWdV6j1KLyayKk6G
MD5:	DB0EA8921DECC0BA5C2D5A91FF8D2CAD
SHA1:	645EE0ECF3975252EB6B389F41935E1F8DEC4AC9
SHA-256:	BCE69A7FE5DA109D02EE4D5E1845F112DC28AB2D4C73E102F29910169E5533A5
SHA-512:	D11ABC2258838AAFE1F2D86BAC59610E27F58BACF9BA013085AB146C2ABFEE2ABA667CB49E62F64368997E8B10B88D461D892913553C50DB2974B0E45F51326A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/527644678/?random=1713460598626&cv=11&fst=1713460598626&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	850
Entropy (8bit):	7.654652850623572
Encrypted:	false
SSDEEP:	12:6v/74/6Ts/YX4angMRxDdQmPU1bW6m3YY8aTbyVdDcMUOpmmhkkZkW+FtfIrG2mK:x/6J/Qm89ZCzdTby7cL1mhaW+HEG5brG
MD5:	1C32395F1E4B2A54D6DC200AB58770AE
SHA1:	FA60928EA99FD76E8361BD63A124C9B800EA1993
SHA-256:	B74391BDBCBDB8D0A05342A252E0A0B47E775D1B87C478092E303F9ED50A837B
SHA-512:	7381FAB263B505BD515176B5F03C651419F2217D8B5FFCB469FEE0C124BAD56CDAE30D0638BD08305CA562D2EC5716DE4A80BBE63241F32E7C05734093D17690
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/img/Icon-eye-fill.png
Preview:	.PNG........IHDR..............w=.....pHYs.................sRGB.........gAMA......a.....IDATx..TOO.A..o...?.mS...J.H"..zU.p..A..<..._..W.......z.&@R"...i+1.ELI.ew.7....z..K&3......TNZ.8.......v.!...Ub..M.......;(..... p.@D.1o...3.R.T._;....a(n.+aM.VQ.K"@."BB...\|v}e.t....#..........KK.\|>..1.p..E.2=.H?..4....D.\|..F..2.....J....Y_^.........=E...(F.].H&2.x\|....X.) .&.....].....;. ...........a\|s.X.}.X.....5:}.$.l..?,Kk..N,.,.NvZ.....r...\.H9..${.{Z.(.B...:%...s[...%.(.q.\|i\|7M..p2..8.DT...=[.v.C.y......y..8.uM9.v9.R...lY...~.cD.bCss....+u".);.W.1V.Xp".......=.3.Sn`.E..@.j .J....X:.,..S..K.T.HK.t...:js.Ku.g.....'..c..W./F..u %..,...(.;.tB."..\ \|....FdF.7..A.................A....A...._..BaD..9..[.T..........Ak...."{.0.....P00...W.GE`..SO...W.C.....7.\v(..`.....-"J.M..tZR......X..ua..V>.....da...!.....IEND.B`.

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10896111711?random=1713460613536&cv=11&fst=1713460613536&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17948, version 1.0
Category:	downloaded
Size (bytes):	17948
Entropy (8bit):	7.986455895783019
Encrypted:	false
SSDEEP:	384:hPTysj4bHF+k3UWpWh4YjwZW2OU0c/uVnt/H1dP7+8Japu6mzD:1bOHck3lW5jRBU5Gnlj+8Ypu6mP
MD5:	BAA5E9FB5E47796A7B60E368A973C76D
SHA1:	15953516DCE3D8C5BF6675F3D360C8B711F795E3
SHA-256:	2681BCB64E933A5280E9C5E528B62ED2535A17672B55E6F60FB8B5D0BE4F89C9
SHA-512:	CCC64980E91DAEDB7CCAE4FDC11E46D397B8FFACE007C270EB42D8D168546A1B67E3EB564A263903B523EF7DC19330B91534027F6AFA7ED34B8F6265713012C8
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/cafa63/00000000000000000001709a/27/l?subset_id=2&fvd=n4&v=3
Preview:	wOF2......F...........E..........................F?DYNA.>?GDYN.i..J.`...."..s........4..R..6.$.. . ..v..e.B...e.POj/..HM.!..........o........>......$.b.O.z.w....]^u.........@5..N....I..8.\.(.6...2Dv...U.}......C....uD../...Wg.g...W&$c\.%dJo...L..3..x{.>W....)..J....HW...?.~g.....^.v..m.b..fl....bc.oc.....#........0.O.}x.V........F...c.D..H..{....l.P.<7..r/.x.w..d.,..AV..e+b4...........\|....j....D..3.RQA..\...5..gfA......K.>."..(..f.+y.PGR.Ceg.C.N.e^$.C(c...........C....?.Z.t..4.D..7...>.......c.13.7..r...yo...P........F....r.~.f[:"..8\|4.......c:.b.)E.=..:.,<.u\|.e_..o..z.._..........f7.^...Io.In...t.nb_^Ig......E...!s{r.../..=.B1..4y.V]\.1l.Q..@.3raC....q?B.&...#....{.P.=.!D=.....x(J.....6....4.\|.....j....jZ.S...tpILM.e.....u.!M.l.a.9m.j.........6.rV#.E..-aA3i...{.....cW7..8...`d.>.HN.f./%.....Vb.....IO.....g..zS.H....`Am..l.K.....N)..>......}Kj...Fe,f..........7...dt....Vy.%....."...D..+W.....S.."...Q].."..y..PK7y.CE'.2.v'.......d.d[e.ur.cU..

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	82985
Entropy (8bit):	7.989713152867554
Encrypted:	false
SSDEEP:	1536:DHmJhUfl/IgU6EsbquGDXBEOE0GOBSvMSXEoeCjT/l1JSTn4gmfgni/ba:DGJhUdzU6Eg6xEKR8EoblyPBniDa
MD5:	E2DB5BF570D20DDCD8255B49F1690924
SHA1:	1F18B0FA349565DCB21FF8F5803B7977EAFB1D5D
SHA-256:	13BCC734F7940FD9273C05FA86593F48F215B5279E90FF51755FD68679DCBB66
SHA-512:	DB9D740554AA948F452919FC4047D3213F30587CD6F924CBC8EE6732313C5E1E529DD114558CB54C4BB97C95E8EF4EBDE40B66BC8B55910BC0DC9FA143328E7F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\K......pHYs..........+....C.IDATx..w...y...">.}....\|U.......h...%.p%..(....4.v4..)CI3r...H...p.......Jo.7...?..YY.p7.....y..7.{.sN.w^xaE..d.X...s1...4Q...F..P..P.8.@k.(..jpkq..\.....+......h..............o<....(.....P.k\|..O8u`..z.$.G......}..mrqy....\|...@HE.....T...UR...;t.m.$....+o.&.9u...a.. ....J.K...Q..$..ma .L.Tin..#....urN.T.8....=..?.&...o......S..X..IB.\.....O....F.....W.e...T(.;/.B...V._[GI.r..........}{).\...9/.a.... e..&.1.aR.\.9..H...2..H..0I....J..Fs.......W...\|....P..$.&N#.A.f.E'.(..&+%.M..2.L.BJ.V...f.b.@......K..aDu..-.2..^..8.5..q.]...p....N.......jmr..=.H....).(.f.V..Z.^....s..U.j4....X`cc..N.F...G....u......~....K..q...!JAH...O.O..G.;&W.V..>..9...0.c.$..+........TJ9Fr.}....s......S.."....3........=..{..5........3.t.."..2..~..o.._..aj?n....ml!..H!K9..?.{.33F....9..:T.E..J.4#.....3...@....i.H.E..H.i. ..V..)...m.....@....(.f..........2_z.5..&.@.J.5.F ........b.....T!.D.R...$..-.4.tM.H.'.(......?.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1683
Entropy (8bit):	7.515929054433011
Encrypted:	false
SSDEEP:	24:hraCstOGIX/lUIQnfhVLuz1Xams9BBOalEMOEQKGi3cjQdMtMZFp+xI7q3MlbX8H:hrfscbdUIAc1XhsjlQK73HIvjCc
MD5:	7CD5D24AE7433C63BCF61CC1D0863E89
SHA1:	30990C04100851742D6ED640C45E2D3620A4499E
SHA-256:	D57D69BB6986194D3C52F6E27BB6D2BEDD32FD56543AAAF526C6AC098FC751A7
SHA-512:	95A8D7EB8A56D68ABB7357A8A208DF4A2DC8C986524CC4AA6994908910C3B0DB5398668FB88B231B819056454DF882E7228118389F814A2AB7EC8ECF46574699
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................PLTE........................................................................................................................................................................U...6tRNS........5/.~.g@...* ..E...b[I:$..L.Q......m....y.wu.\.f...gIDATx....r.0..._>.....s>.B..$.....i...$K..L....\.V.0J.R.T.J.R...&..T.......g......b\|".x..:..XS...].;"...y.Rr..'....^....Y.....W....C...H.G..:.....3e..&..Fx.u.i...j4..........Fq.>%Z.6....E.".T...i.V4>.ruds...F...Uf....MLQ..J/#h.n.Z.....4.[...0.hn..9....l..G.5..f.;.3jD..k.e.l..,..G^.G..F..Fu.c..:.7O(.B.[..]...Gm..R.f..N4.5...<Z..<=6@...NX[. ....@..e8l..../...,.#LbX.......mc..a.;.."J..=K&..i-.7".;.4s0..v...;m...H..........Ti.%..g.lR...`.6i..k....2...9..M3.,2..!l.<.....3$.9.9L...8.....$....=l....2M.%...OZ45...j......Pb.....8;\...g1l<...7.....i-.x......`.8......b..s...CE.....$..r.......f[..v.5v\.Q.B.W..@].J..t!...X..e...ps6F]\T...+".Z..x..s;+.F..w.E.{..2.g...T..(.>...'....

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5426
Entropy (8bit):	5.025256431953446
Encrypted:	false
SSDEEP:	96:JvfMJvDR1Wr1EYejCFBlXMMu0iz5yxRmokGRMKf2:5MJqr1EYKCFB5IVybtkZKf2
MD5:	5F0D201A09B5535ECCC53A9C55012BF8
SHA1:	667E39BB8C0C530136FF562E9BE99E4A9541CA2E
SHA-256:	638E5D328049A3216B19A44819510BD89F10EA1755FFD50772BDD8C1DACAD887
SHA-512:	B68EAA11E640F96DF42BB750496D17CFF0D2CD556AF4BB37B98709FE37291FCFBD71B4AF733E01280A962685F23C0BA8E18D98F4A5C5849571E5693367E479AE
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest//Shared/Content/Images/Global/bm_logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1020 266.8" style="enable-background:new 0 0 1020 266.8;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{display:none;}...st2{display:inline;opacity:0.1;fill:#606667;}...st3{display:inline;}...st4{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;}...st5{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12.1068,12.1068;}...st6{display:inline;fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12;}...st7{fill:#FF8200;}...st8{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.8797,11.8797;}...st9{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.7895,11.

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	150251
Entropy (8bit):	7.9713803543335215
Encrypted:	false
SSDEEP:	3072:rA8WRaBKtSUE6zb8wF5Xr9dDt5ApsAtDgJ6naP9YJclzz5kJv:EpFE6zblxElmgaHlzzCJv
MD5:	125B4D265854CC32C4CD194325F1B55E
SHA1:	05CE23A6083A8B538CC93D6ADE271289B0C1B7EB
SHA-256:	340345E6AFC40B7B83900804BF83485A7C4737AC8E17F24AF51904355C124A24
SHA-512:	ABE2987BFDDD2D4C1912057F351D3900EA323A44EE25CF99030570BECCFA092A036B58219826562E3C547D054E3C8600E61975382260B48454854759BFA1E2D8
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................J.........................!.1A."Q.a2q..#B....R...3b$C...%r..4S..Tcs.5....................................C......................!..1A."Qa.q..2....#BR..3r..b...C.$4Ss....c.............?...3I...wW...L_4....Q.......{4PO..Q.^..D...y..*.........j..

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32700)
Category:	downloaded
Size (bytes):	268538
Entropy (8bit):	5.431012675789175
Encrypted:	false
SSDEEP:	3072:WaEUvimDA1BxfOAB75LTS+E3lhhg2Wt7DVA:WaEUvimDA1Bxfri+E/
MD5:	A248E94F751757B6CD6A8F0C413B990E
SHA1:	58E64EC5D7915597FFB63C7943B223EFE0633DC2
SHA-256:	681C3080BF4F44B380AADCC99FFC8D9B7F359FC1AC0C26186559A37567F46000
SHA-512:	4541785ECD55C460B046262D53B21945A0A32D253F636F4EE326C7D4B1E3D9E9D5B3B926B93DB04EBCD8E281B6C1037EB4ADE4BD78203138650A47DFFAF1FF0F
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/launch-2c0d426e12dd.min.js?v=638484963592761859
Preview:	// For license information, see `https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/launch-2c0d426e12dd.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-04-17T14:53:26Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"EN65958cce67004ae78b15e0f83ce066b0",stage:"production"},dataElements:{"Free Trial":{storageDuration:"pageview",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){if(document.querySelector("body").innerText.toLowerCase().match(/free trial/)&&!JSON.stringify(digitalData[1].site_events).includes("view_industry_page"))return!0}}},"Site Language":{cleanText:!0,storageDuration:"pageview",modulePath:"core/src/lib/dataElements/customCode.js",settings:{source:function(){var e=digitalData[0].site_language?digitalData[0].site_language:"no value";return _satellite.logger.log("siteLanguage",e),e}}},"Insurance Pages":{storageDuration:"pageview",modulePath:"

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (880), with CRLF line terminators
Category:	downloaded
Size (bytes):	26570
Entropy (8bit):	5.208257801024317
Encrypted:	false
SSDEEP:	768:IOic6No2DrGIXBMbv1/h7WfemuiYt0MJlJ6d5Efs:IOiRDrGM8h7QruiY7zJa
MD5:	1C7867EBA3F708B9E2D7F5181654B16E
SHA1:	EB0B0DDD16595A127781A2E1E804BBF6448BA42C
SHA-256:	2BEDEBD46AC9BA8F425E2CB6C57FECA7557D5D50DE948B606C4B7026EB2F9553
SHA-512:	FBD8DB4222F2E1BDEB8935409B18627BA7F652381C05A344BBDF425532B90D47073FDEF2788F63E1D90FA124E36C52F7E47A96439DB7CFFC13094C1C53EA8D00
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/js/Vendor/require.score.3.1.14.min.js
Preview:	var requirejs,require,define;(function(global,setTimeout){var req,s,head,baseElement,dataMain,src,interactiveScript,currentlyAddingScript,mainScript,subPath,version='2.3.5',commentRegExp=/\/\[\s\S]?\\/\|([^:"'=]\|^)\/\/.$/mg,cjsRequireRegExp=/[^.]\srequire\s$\s["']([^'"\s]+)["']\s$/g,jsSuffixRegExp=/\.js$/,currDirRegExp=/^\.\//,op=Object.prototype,ostring=op.toString,hasOwn=op.hasOwnProperty,isBrowser=!!(typeof window!=='undefined'&&typeof navigator!=='undefined'&&window.document),isWebWorker=!isBrowser&&typeof importScripts!=='undefined',readyRegExp=isBrowser&&navigator.platform==='PLAYSTATION 3'?/^complete$/:/^(complete\|loaded)$/,defContextName='_',isOpera=typeof opera!=='undefined'&&opera.toString()==='[object Opera]',contexts={},cfg={},globalDefQueue=[],useInteractive=false;function commentReplace(match,singlePrefix){return singlePrefix\|\|'';}..function isFunction(it){return ostring.call(it)==='[object Function]';}..function isArray(it){return ostring.call(it)==='[object Arr

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2385), with no line terminators
Category:	downloaded
Size (bytes):	2385
Entropy (8bit):	5.847908722126297
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08zNpdFQP8oHK5alWl6:wsbSUtJfxrqLWWWdV6j1Fp/Yl
MD5:	F7ADE8C7E38A3132FA5302AEC89AF070
SHA1:	351CBFC92D271868AE02EB465F708EB4B98912FF
SHA-256:	F153AC7DD9F3BB3BB643680DEBFEC18BB309BA35615964554A9D8471A3757E81
SHA-512:	02A01A4112BCCE3E7C8830F42E756B63F69C69F09C64CF82CA10956943DA48965E35BB2896A6C88CF2FE29FADBD01C704848CA65D3FE243E7A64034A52DDFDEE
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978398205/?random=1713460610976&cv=11&fst=1713460610976&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386), with no line terminators
Category:	downloaded
Size (bytes):	2386
Entropy (8bit):	5.8513075452063505
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08+73jFQP8oHKSEU6:wsbSUtJfxrqLWWWdV6j1C73RYlC
MD5:	99E90F1708BE302F3AFD4FF47B7CF6F6
SHA1:	DBF142ECA1E6DE75B4E586AB93E574608F265985
SHA-256:	E89D491D70EF4BC443BB372120B383D4330F973E2776FE26D1A0F461CE1F8F57
SHA-512:	86A95C6F2047BA799BC0C6BC9A1719739CBA5884AEACF3DAA639E1C852D69C7260CE4DE38B3498DC458CD3E0309742476921FBEBE170037EA363C2A6F4200847
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/938539671/?random=1713460611010&cv=11&fst=1713460611010&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65457)
Category:	downloaded
Size (bytes):	435999
Entropy (8bit):	5.371953759816629
Encrypted:	false
SSDEEP:	6144:PRgOnSY1vAiPwrNhZQ9we1TbuYc5fSaxLTx0qnuCJ4+Tt634Nqb9HP:orf6TbChxLT1nDrTt634NkJP
MD5:	DAAF0CEF21D261FDB059DC53A1E7B610
SHA1:	144556C0102D239542A6FF66E18AF23EF8833B3A
SHA-256:	4CC5FDC2315043B6059E25FC11D246E71C17049221D468BFB1B17852E53D9311
SHA-512:	B30CB94326C889A8EFF97EFB516BA499885F2A7EE8A6CBA0B6F6A61A3DB718F3098B81DEF9EC9E88971DE5BFEE86D4D23DF954AD8CED817F8CC5ED5CE52C3DFF
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.7/js/vendor.module.js
Preview:	/* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */.var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,Object),r=Object.prototype.hasOwnProperty,i="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};function o(e,t,n){return e(n={path:t,exports:{},require:function(e,t){return function(){throw new Error("Dynamic requires are not currently supported by @rollup/plugin-commonjs")}(null==t&&n.path)}},n.exports),n.exports}var s="object"==typeof i&&i&&i.Object===Object&&i,a="object"==typeof self&&self&&self.Object===Object&&self,u=s\|\|a\|\|Function("return this")(),c=u.Symbol,l=Object.prototype,d=l.hasOwnProperty,h=l.toString,f=c?c.toStringTag:void 0,_=Object.prototype.toString,p=c?c.toStringTag:void 0,m=function(e){return null==e?void 0===e?"[object Undefine

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	943
Entropy (8bit):	5.324218858657467
Encrypted:	false
SSDEEP:	12:TMHdPcWi/nzVJ/KYf3naNjxHpjhdxEVlHTr5dHMZ3TG/L/c3d5+C/pI8pmcLeex0:2dTATLf3yjxJlTQr6hNzxpRKe+
MD5:	498FF88311E667D15AFFED64D2F2B76F
SHA1:	82D53BDDBC787E0371528EC59E0DC2D64BFD2665
SHA-256:	A5E7846148248A8A146CC18B2D8866875ACF2F4099465379515E4469BA3DBA19
SHA-512:	C14C703AF0ED135F24C5E0EF6DA23227DF4589B0720AE8B18D9423E69FD1C40BB02875CF706A98F4FC6DA0D788090B55BA24367FA67CC3A6235B64732F05615B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 144 144" style="enable-background:new 0 0 144 144;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{fill:#FFFFFF;}.</style>.<g>..<path class="st0" d="M105.7,45.6H91.6v11.9h14.1c4.2,0,7.5,3.4,7.5,7.5v40.8c0,4.2-3.4,7.5-7.5,7.5H37.1c-4.2,0-7.5-3.4-7.5-7.5V65...c0-4.1,3.4-7.5,7.5-7.5h14.1V45.6H37.1c-10.7,0-19.4,8.7-19.4,19.4v40.8c0,10.7,8.7,19.4,19.4,19.4h68.6c10.7,0,19.4-8.7,19.4-19.4...V65C125.1,54.3,116.4,45.6,105.7,45.6z"/>..<path class="st1" d="M42.5,69.5l27.8,31.9c0.6,0.8,1.5,0.8,2.1,0l27.8-31.9c0.6-0.8,0.3-1.4-0.7-1.4H85.5l0-48.1...c0-1-0.8-1.7-1.7-1.7H59c-1,0-1.7,0.8-1.7,1.7v48.1H43.2C42.2,68.1,41.9,68.7,42.5,69.5z"/>.</g>.</svg>.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1030), with no line terminators
Category:	downloaded
Size (bytes):	1030
Entropy (8bit):	5.308700948032209
Encrypted:	false
SSDEEP:	24:9TpTpNNm7J43kCDXqTpTp+gauFOLrOxuKueVIDhi65QA1pq+:7qs+oOMNe6Dc65QA1pN
MD5:	4B1AC64DC78F672F879AF0E76F0D6FBF
SHA1:	9F4A424D73E134EEF476A0D61446009E8618D0A2
SHA-256:	BE15E0FA2E17E1FA52920079EEF01C899EB8054AF251FF8E8F9A5AC29FEC3A76
SHA-512:	35179F3B323099F43E5051D224F31569410AD34E62DF4CEF251A8839697277B20517FDE3C13C19628480F4C2A948D8EE5ECB3EBC74F0307483448ED3CB37C54F
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/helpers.min.js?v=6951
Preview:	var AppShared;!function(a){var b;!function(a){var b;!function(a){function b(a){if($.isArray(a)){for(var b=!0,c=0;c<a.length;c++)"undefined"!=typeof a[c]&&null!==a[c]\|\|(b=!1);return b}return"undefined"!=typeof a&&null!==a}a.isDefinedAndNotNull=b}(b=a.Common\|\|(a.Common={}))}(b=a.Helpers\|\|(a.Helpers={}))}(AppShared\|\|(AppShared={}));var AppFull;!function(a){var b;!function(a){var b;!function(a){function b(a,b,c,d){var e,f=-1,g=new RegExp(".^","g");if(!a)return f;e="string"==typeof a?[a]:a;var h=function(a){return!(!AppShared.Helpers.Common.isDefinedAndNotNull(a)\|\|(a=a.replace(g,""),b.toLowerCase()!==a.toLowerCase()))};if(!AppShared.Helpers.Common.isDefinedAndNotNull(b)\|\|""===b)return f;AppShared.Helpers.Common.isDefinedAndNotNull(d)&&d.removeStopCharacters&&(g=new RegExp("[^a-zA-Z]","g")),b=b.replace(g,"");for(var i=0;i<c.length;i++)for(var j=0;j<e.length;j++){var k=c[i][e[j]];if(h(k))return i}return f}a.indexOfObjMatchingPropAndString=b}(b=a.Arrays\|\|(a.Arrays={}))}(b=a.Helpers\|\|(a.Helpers

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65432)
Category:	downloaded
Size (bytes):	697123
Entropy (8bit):	5.4903539211498655
Encrypted:	false
SSDEEP:	12288:p6MZo8HgM9VYjZ5J/VrR5EJgJMb4/NukPSWTWNeZdzH2XKwn5/MCHrhmVBJssFf7:pxkM9VYvJ/VrR5EJgJMb4/NukPjIHWS0
MD5:	6B6E3749FC25552E2B540DC1DD076FAB
SHA1:	20421D6E5481BE285ED2A1C5EB86D024DD345915
SHA-256:	E4CFB76386F1F61F399D299928B57EE31B5F16DD617CB98F27B8A331C0FE7E6B
SHA-512:	B57C46BC35072CEC5A50FA3090FC51A475E53BCF9C3C75AAA756CE4F7B7F94B060E3DEC01415590D8A1031FF0E80C165F056AFDB60AC587D4AABB892C5D0DF3E
Malicious:	false
Reputation:	low
URL:	https://js.qualified.com/qualified.js?token=FsU5iFRQMWKZpcF1
Preview:	(function() {. /! For license information please see qualified-ad66bd2c26614c51fa20.js.LICENSE.txt /.var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n),a.l=!0,a.exports}return n.m=e,n.c=t,n.d=function(e,t,i){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:i})},n.r=function(e){"undefined"!==typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.bind(null,a));return i},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnPrope

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	567
Entropy (8bit):	4.846877765360333
Encrypted:	false
SSDEEP:	6:5f2hZXc4s6c4XdF/42IIxYHB/IP/E2dWg//8E2WAH8RH/MEWE2xzoF9PAE2MoWXt:c06vN8h/rg8WAH8x/FRRJXChfB1do
MD5:	4DF41C737F0D25A08E0BDDE3FE5F628B
SHA1:	0DEBC3ACC04CFBF6AC7F636C466A4B662D11B7C3
SHA-256:	7980EDFEF2603B5F7F010C446665BFD9E3CC53EC566E9F682E2C9C28DD5476C8
SHA-512:	CB71D4D57520679B090EBDCBF147789070B4A9696804EB3D3469DE9340BAC4C09B487DB17DA9886821F11A651ABBD0221070B2F42B1F359835696C7FC69A79EE
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/js/Components/Resources/Templates/MasonryResourceListingItem.html?v=638484963592761859
Preview:	.<div class="masonry-resource-listing-item {{#isDownloadItem}}thumbnail-icon{{/isDownloadItem}}">.. <img class="masonry-resource-listing-item-thumbnail" src="{{thumbnail}}" />.. <span class="masonry-resource-listing-item-type" >{{_resource_type}}</span>.. <h2 class="masonry-resource-listing-item-title">{{default title}}</h2>.. <p class="masonry-resource-listing-item-description">{{meta description}}</p>.. <a href="{{url}}" class="masonry-resource-listing-item-link" {{#isDownloadItem}} target="_blank"{{/isDownloadItem}} >{{readMore}}</a>..</div>

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.gif?s=1&k=xkz1feq&ht=tk&h=hrcenter.us.brightmine.com&f=6851.6852&a=681435&js=1.21.0&app=typekit&e=js&_=1713460584370
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2258)
Category:	downloaded
Size (bytes):	16680
Entropy (8bit):	5.550152792288337
Encrypted:	false
SSDEEP:	384:YN2hpIgIVsUGiRm4lIeU4iDFeFs2NdFJsQF+i:YN7GiRm4X0JqsG7Ui
MD5:	93592247641836EB5028FC7FC423D181
SHA1:	36673686995A64791DC864D35C87F650FB6086E7
SHA-256:	79B1C9985F8571C8B6D589C58A2F1ADA31B045E9E77FDEBB69D31BC5930483E8
SHA-512:	BA11C9A8A23DE39A36D210A60E6D472DC413C234C2486CCCD7845399DA12338A3F5AFAEC9D67C4E719352BF224A068F771EC3B4BCEAD145656A1ADD2035D121E
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/xkz1feq.js
Preview:	/. The Typekit service used to deliver this font or fonts for use on websites. * is provided by Adobe and is subject to these Terms of Use. * http://www.adobe.com/products/eulas/tou_typekit. For font license. * information, see the list below.. . myriad-pro:. * - http://typekit.com/eulas/00000000000000000001709a. * - http://typekit.com/eulas/00000000000000000001709c. . . 2009-2024 Adobe Systems Incorporated. All Rights Reserved.. */.if(!window.Typekit)window.Typekit={};window.Typekit.config={"a":"681435","c":[".tk-myriad-pro","\"myriad-pro\",sans-serif"],"fi":[6851,6852],"fc":[{"id":6851,"family":"myriad-pro","src":"https://use.typekit.net/af/cafa63/00000000000000000001709a/27/{format}{?primer,subset_id,fvd,v}","descriptors":{"weight":"400","style":"normal","stretch":"normal","display":"auto","variable":false,"subset_id":2}},{"id":6852,"family":"myriad-pro","src":"https://use.typekit.net/af/80c5d0/00000000000000000001709c/27/{format}{?primer,subset_id,fvd,v}","descriptors

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31968)
Category:	downloaded
Size (bytes):	76666
Entropy (8bit):	5.237279554301839
Encrypted:	false
SSDEEP:	1536:vB5Uvlc7V23CP92cb1UVW/bQ8BeZ8+R81Np9LO:TUtcY3CmWFudW1NpY
MD5:	0A159168CC83B062EF5677D2C83FEE81
SHA1:	D27ECBE04CD5C14D174D30F26464CC5933BB96D1
SHA-256:	7166598E78FDF6BCA707E6FC15A346522BF17359094916BC64CFC4EFB703AB42
SHA-512:	C8D31716C65B3FE1E28B67CCE27D44BE129B0426763407D6D45BE537AC81D596A71FED6C11C355DAB3C483AA823114FFE1D634D442C2743EF959F95F4C774A26
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/vue/2.2.6/vue.min.js?v=638484963592761859
Preview:	/!. Vue.js v2.2.6. * (c) 2014-2017 Evan You. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.Vue=t()}(this,function(){"use strict";function e(e){return null==e?"":"object"==typeof e?JSON.stringify(e,null,2):String(e)}function t(e){var t=parseFloat(e);return isNaN(t)?e:t}function n(e,t){for(var n=Object.create(null),r=e.split(","),i=0;i<r.length;i++)n[r[i]]=!0;return t?function(e){return n[e.toLowerCase()]}:function(e){return n[e]}}function r(e,t){if(e.length){var n=e.indexOf(t);if(n>-1)return e.splice(n,1)}}function i(e,t){return $i.call(e,t)}function o(e){return"string"==typeof e\|\|"number"==typeof e}function a(e){var t=Object.create(null);return function(n){return t[n]\|\|(t[n]=e(n))}}function s(e,t){function n(n){var r=arguments.length;return r?r>1?e.apply(t,arguments):e.call(t,n):e.call(t)}return n._length=e.length,n}function c(e,t){t=t\|\|0;for(var n=e.lengt

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (360), with no line terminators
Category:	downloaded
Size (bytes):	360
Entropy (8bit):	5.317731339659437
Encrypted:	false
SSDEEP:	6:kn0gBkfFXV8AfnFULu64Vk34tu2gxCI5bybhfGenwUPI5yjfOoOC:k0goIiFUh4Vm4I5CIBwRGeTPvoC
MD5:	76B881579E6AB2FF78E044150C7840A7
SHA1:	7CB69EF3BFE738372401982F5E96043D07C43948
SHA-256:	844853BD9A3895708FF00A48AA1E7BA1F2962FB04F747F3FD5537F815D5F2560
SHA-512:	AD935675B6BE61840646ADF50EAB8CBB86314989B9CF07C9C3C2F84BB13EF6F3927C3B96A881B1FE7FAD098FB7B99743538FC5DA680655252BAB5A5189962142
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISTwmHUlu8z1HXUhIFDfyM-aUSBQ02_qTlEgUNZU3pnhIFDfwTp5QSBQ3QsCUCEgUNmvq0kxIFDRz8cvISBQ3RMNmmEgUNTGKNdBIFDc8ov2gSSAnR5mxTgaZuEhIFDfyM-aUSBQ02_qTlEgUNZU3pnhIFDfwTp5QSBQ3QsCUCEgUNmvq0kxIFDRz8cvISBQ3RMNmmEgUNTGKNdBJICX0IHMQfUNHoEgUN_Iz5pRIFDTb-pOUSBQ1lTemeEgUN_BOnlBIFDdCwJQISBQ2a-rSTEgUNHPxy8hIFDdEw2aYSBQ1MYo10EhAJpk9eADPBLjMSBQ0yY6Ch?alt=proto
Preview:	CloKBw38jPmlGgAKBw02/qTlGgAKBw1lTemeGgAKBw38E6eUGgAKBw3QsCUCGgAKBw2a+rSTGgAKBw0c/HLyGgAKBw3RMNmmGgAKBw1MYo10GgAKBw3PKL9oGgAKUQoHDfyM+aUaAAoHDTb+pOUaAAoHDWVN6Z4aAAoHDfwTp5QaAAoHDdCwJQIaAAoHDZr6tJMaAAoHDRz8cvIaAAoHDdEw2aYaAAoHDUxijXQaAApRCgcN/Iz5pRoACgcNNv6k5RoACgcNZU3pnhoACgcN/BOnlBoACgcN0LAlAhoACgcNmvq0kxoACgcNHPxy8hoACgcN0TDZphoACgcNTGKNdBoACgkKBw0yY6ChGgA=

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	15611
Entropy (8bit):	7.917830192102644
Encrypted:	false
SSDEEP:	384:fBsN+H0/qj8MxXpZSh8E3uYgHzJ3BS1qsRUJVn:ZfU/ABxXXnE3uYcRQH+Xn
MD5:	C372DA3F48BD195F71F5099E69252FC0
SHA1:	5F8CF2B75044AAB8AF2B77C097D52FED54A4B9F7
SHA-256:	A640D6E109BD0DD4A946AFEBAD771249714EF1F3E9CEBE7239CA8764508C4227
SHA-512:	54C7FD70C87FA64890C2B5C45FFB9229AAB3DD3BB1ED444382FB5A2CDAE12AD2F2980C48C9081644D4F1B622260324FF4DBAB34155479D196DBE70A7C71D154A
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."........................................8........................!.1A.Q.."aq2.#B......3Rr...b.$................................2........................!"1.2AB.Qaq.#Rb.....................?..l.......<k.M..G.F.>...N.. k....Oc..].*B.6.....,p%...3.S.)..s..L.......`..{..$1..<{..X....d.q

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	43182
Entropy (8bit):	5.562323023518122
Encrypted:	false
SSDEEP:	768:gVe+CN+tDD+6flC+ZIdZnBwlkM1BcMY3zct3mucJlYRWKLuFPMqoMwrb2OtKCB:g/QUChS8fTcVmuSlYRFTqol7B
MD5:	C4748B6DD5096FF9B28FDF70C3608B54
SHA1:	A1366582F2219B96549C1434797CE93F7D9B18F6
SHA-256:	97915B71071ECE2ED03D75486665344E6292190DBD66756B9B891735CC16B3F3
SHA-512:	AAFCD57092D77A18CC167A03C72110E22429370F6F801873B6145D4C8D896988852A40B474C3FC57984D1C94314D194FB41CEE7007499AD801A22EAE7E68B9E7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018e1e0f-938a-75cb-b9e9-d78ab7e6535a/en-us.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Preference Center","MainInfoText":"We process your information, to deliver content or advertisements and measure the delivery of such content or advertisements, extract insights, and generate reports to understand service usage; and/or accessing or storing information on devices for that purpose.\n<br><br>\nYou can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more, to change our default settings, and/or view the list of <a href=\"https://support.google.com/admanager/answer/9012903\" target=\"_blank\">Google Ad-Tech Vendors</a>.\n<br><br>","AboutText":"Cookie Policy","AboutCookies

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	234
Entropy (8bit):	5.031687203583395
Encrypted:	false
SSDEEP:	6:qHsR7bDRd7kKODyDULf024mHYRRbwBI4Hb4Z5V:YsRvDRRxON8hDRRXys
MD5:	1249E182313CAE5CDCE1448CE7FD5E4E
SHA1:	46DEAA286F1756607E6DEE000EB2F113BB82BD7E
SHA-256:	E1190168C8D6B12CF5C9021677EEF15BC57C4EFD2E43AF9F154BFB2CA0AE5866
SHA-512:	5182A53A07DEE26B7F77BBC32F66737D02F55CB28EF3BCB9A04E92A67B62C9970A6A43324E708B1B9F9AAFD02EFDEA00BEA394665217BB3291B1A0C2D56B018A
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/js/app/login-page-loader.js
Preview:	var thisScriptElement = document.getElementById('loginPageLoaderScript');..$(document).ready(function () {.. new LoginPage.ViewModel(thisScriptElement.getAttribute('data-model'));..});..//# sourceMappingURL=login-page-loader.js.map

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 17972, version 1.0
Category:	downloaded
Size (bytes):	17972
Entropy (8bit):	7.987099371181713
Encrypted:	false
SSDEEP:	384:2Y0v8jb/Xtp4NZe17oB3VUiQnNygJOn9AlDx0+essWUF:RKObH4i17Y2lnNygJOGDq+bsDF
MD5:	137AEE5D7D5B4CB76E5436018F0012CC
SHA1:	D42CBE6EC392138D71E7C4D2C4BD29E2784F0AEC
SHA-256:	739C0EB6ED4E5547D2253986C65058B1DE398F2C529FC1FDF517F26B1BB00863
SHA-512:	3B5D6B2EEE5FC7806084545F0ED9A87E863E9F3E6467ADD2BDF4B75C2BBFEE75E589933AE11B2B20A165C3782290DBE13C34519C81B0858333BDC879B87FF01F
Malicious:	false
Reputation:	low
URL:	https://use.typekit.net/af/80c5d0/00000000000000000001709c/27/l?subset_id=2&fvd=n6&v=3
Preview:	wOF2......F4..........E..........................F?DYNA.>?GDYN.i..8.`....$..s.....d..r..R..6.$.. . .....e.L...e..e...@...HM.!..........o........>...._.[..`...G<....JU.JweP.....}.:.ERK_......v.n.I..f...."[.......R....=@\ vrD.u...7W....#^$Y.....`.}1..D...r......;..so\.;Y...F.X..rz.[~...k............E6b..[.-.....c.,..%..#Qr..b.~./../&........G.....8W..K....b.bC%i...t.wXS..0.+.-..7.V,..%_.u.V..gj.b....J..lVvQ.'?=>Wr....f......./...M....)......X..M.....L9.;.XT)..seur..X..]t.....[.~O.C...V.....C_....I.L.......!$.'...._..R....x4F.T..2.)....)_.A...1H-.UPI=.T._..8....._..../~..\..\...3.'y..g.3..S]CK#...,K../.".o.......9.j.;..k-.\_.U].a..%d..>..x....A..\..l.!...e.).U%.7F..=M;.P.U..f.i2......S....!......UX...&.MeD..i......Y.l..i.O...I........6.......\|[%I..9...Z.:....,...5k.._..t.S;.\~S.....m.\!...........n....BQ..(......x.n...[...YD'(L.x(....N/.dLq.N.9..v..[..J.mL..+*B."..n2.@...O..P-.+.,...SP.#.37.Yw....z.+i..IjD..qV%f.8.:.v.........+.

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553), with no line terminators
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	5.844083543524679
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08nVzhFQPEDT8IodlKmv6:wsbSUtJfxrqLWWWdV6j1zVDYiCry
MD5:	6B245BE9201D0119305C3C2B5ACFA6BC
SHA1:	954A0386F5E9B6C0F6BC4F73C7A269F3475E09B4
SHA-256:	142BB6AE52C5F01DACA649519839711CD5ECE3E07DB7B14C6E8C79A32B3E6DCD
SHA-512:	1F4806DC400FBD3B1F56D5191C6BE2E42ECC66BB3220B9CFADE98C99EE3D6481B0CD20D67FDFBFCE5EF76CA33530A538E45F02585D9222146333E9BB73C15AED
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/938545461/?random=1713460613609&cv=11&fst=1713460613609&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386), with no line terminators
Category:	downloaded
Size (bytes):	2386
Entropy (8bit):	5.85354514465511
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08qsoFQP8oHKL6:wsbSUtJfxrqLWWWdV6j1us2Yr
MD5:	8D84F01D2E47DA1A389FAB8790E26F8E
SHA1:	35BE18802CE9850B7C76072C65CD72D150EF1D1E
SHA-256:	ED7337B15B584370DE4D2D7EA5D509CA22E491396AEE3507BA16B72B83AAA467
SHA-512:	E43548CF80DCCC275273664109EB09A36059C42B4BB2D8335D0F1DA7448E742CFB415A98F87C4AA5A875CB78C6322516E342EC35249650B8A2B1ECE18D57FB6E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10896111711/?random=1713460610993&cv=11&fst=1713460610993&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32753)
Category:	downloaded
Size (bytes):	342921
Entropy (8bit):	5.398270516590394
Encrypted:	false
SSDEEP:	6144:7ma+o+xaubCtiDYKGK7auiOe1k3JqEmN+1KQ/mu7dV6Ty98ycmPKrLq+4KuSu0cf:WxaubCPaauiT1LM1ht
MD5:	F96715941EB7508DBD9132F8E86DC851
SHA1:	58915FEABF63542E9EBE8A59D344D18F87B4DB89
SHA-256:	ACB2C00CEFA46CF88A1C8B0D808580F8097B32C29AA4DAEF6FA3304B2612FF2C
SHA-512:	2D2A9E8ECE79414791B932F44D174B9A009748931F93BAB5DEA133AD35702D94011C9B575B68645F6C2AEB404EBD45EA9F2717E5C72549D900B4A2037737C7E1
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/c89af706acda/ae6034d4a157/launch-459de5cf96a6.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/c89af706acda/ae6034d4a157/launch-459de5cf96a6.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2024-04-04T14:40:09Z",turbineBuildDate:"2023-02-22T20:37:26Z",turbineVersion:"27.5.0"},environment:{id:"EN376a6dd241ba43439a7de320caac5c90",stage:"production"},dataElements:{"Page - Advertiser Name":{defaultValue:"",forceLowerCase:!0,cleanText:!0,modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.page.advertiserName"}},"Launch - Version":{defaultValue:"",forceLowerCase:!0,modulePath:"core/src/lib/dataElements/constant.js",settings:{value:"1.16"}},"Page - Page Url - Previous":{defaultValue:"",modulePath:"core/src/lib/dataElements/sessionStorage.js",settings:{name:"target_s_gpv_pu"}},"Page - Form Type":{defaultValue:"",cleanText:!0,modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.page.formType"}},"Pa

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1107), with no line terminators
Category:	downloaded
Size (bytes):	1107
Entropy (8bit):	5.215389512844672
Encrypted:	false
SSDEEP:	24:9Phxe0BztOsOwVaKyJtuyztAprE6ttxdEpRuokI6h6DELNf:fPdnVaEE6tmRuo76h6DC
MD5:	8F06E3F2A98A0AF3E8BD8DBC2F72758E
SHA1:	62BAF2791849C6017BA752CE6EFCB9B6660985F9
SHA-256:	25C59B3D0914E0421BF1FCCCE8AEFB19EAE3F45D770E0DE0C169255CE9B3A735
SHA-512:	71A8E9877A27004720F8517F65759C297A9D0790864BB3FD5BACD81BBD9943A7CC4C2A5A5B5B7C6786F1D3A9265A81BB2A3965C7A2C090DB4A0E1358FE4B44A2
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Shared/AngularBundle/runtime.js
Preview:	(()=>{"use strict";var e,v={},b={};function n(e){var a=b[e];if(void 0!==a)return a.exports;var r=b[e]={exports:{}};return v[e].call(r.exports,r,r.exports,n),r.exports}n.m=v,e=[],n.O=(a,r,o,t)=>{if(!r){var c=1/0;for(l=0;l<e.length;l++){for(var[r,o,t]=e[l],s=!0,f=0;f<r.length;f++)(!1&t\|\|c>=t)&&Object.keys(n.O).every(i=>n.O[i](r[f]))?r.splice(f--,1):(s=!1,t<c&&(c=t));if(s){e.splice(l--,1);var u=o();void 0!==u&&(a=u)}}return a}t=t\|\|0;for(var l=e.length;l>0&&e[l-1][2]>t;l--)e[l]=e[l-1];e[l]=[r,o,t]},n.n=e=>{var a=e&&e.__esModule?()=>e.default:()=>e;return n.d(a,{a}),a},n.d=(e,a)=>{for(var r in a)n.o(a,r)&&!n.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:a[r]})},n.o=(e,a)=>Object.prototype.hasOwnProperty.call(e,a),(()=>{var e={666:0};n.O.j=o=>0===e[o];var a=(o,t)=>{var f,u,[l,c,s]=t,_=0;if(l.some(d=>0!==e[d])){for(f in c)n.o(c,f)&&(n.m[f]=c[f]);if(s)var p=s(n)}for(o&&o(t);_<l.length;_++)n.o(e,u=l[_])&&e[u]&&e[u][0](),e[u]=0;return n.O(p)},r=self.webpackChunkweb_component_builder=self.

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	64670
Entropy (8bit):	5.445559151761842
Encrypted:	false
SSDEEP:	384:IaMapYA02vw93aR8HdCSzqZBkFL/Rvq/GI2s/6LYlpCglbiwQqyNMqpGiaq3l/v+:DpYAm3rCpBvGhsxpCObicq3JsJLPqjdi
MD5:	67EAFE0CA141B9B52080C52D281966C4
SHA1:	93308B43A6234C01123881A7B02E9B014B082294
SHA-256:	51DFBAD7E1A227D3935016E5C4190E5E46E03DAA4B249E5DED55F54235EFBD7A
SHA-512:	BB006F610699E0912464ADB609509FE9CDCF35088FED00331CB14A2B4A6FFB0684C2763E13EF2FAE6152665C662076CE506118D14B2897851BA039BD9BAB9B79
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcTab",. "html": "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

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 27, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2810
Entropy (8bit):	7.8653319119866945
Encrypted:	false
SSDEEP:	48:ZE/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODpw:ySDZ/I09Da01l+gmkyTt6Hk8nT2
MD5:	64ED2DEA3BA8F87F97EC74B1ADFF7BFF
SHA1:	612E92A10177ABCEB7BA480C6F188E2ECE108A76
SHA-256:	2FF1E0DDC63F77784281A6DA3ECED276B87FFFA2F3AE5FEE5E1DEE3D5B26AF6B
SHA-512:	C0F8383616039809D2F4E1E0FE59F3F45055ED5150F071563F97490E8BB29CC8C9D5278E874F2F388C974C59AF41BD62045B917A0E563B2E5694FCE1F1E5B47A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2:r#....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	452757
Entropy (8bit):	5.357829356102245
Encrypted:	false
SSDEEP:	6144:4WpRmnYxRgUE7qLCp1RyoSQW2Hm5uO74sjGGHYyGedkQEs:4W+YxRgUE7qsWj74tyG2h
MD5:	3AB7906A4D12B7D35C62BAC882D39D74
SHA1:	5D034541D6A9A05B0719C3605880FCFC9229E4B4
SHA-256:	15DE250A16CE58A10F84BEBAB59B9005CE36DF4EC8E87C3BB1ACC92726CFA971
SHA-512:	3A8346339679F82647E763E70E91113366828BA07023578BDB8EF29A0EFAD62707330B7973BB7245C58B8D4FF4029F2D879F8CD3171E4F3612841E0BC8C7CD85
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202403.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	850
Entropy (8bit):	7.654652850623572
Encrypted:	false
SSDEEP:	12:6v/74/6Ts/YX4angMRxDdQmPU1bW6m3YY8aTbyVdDcMUOpmmhkkZkW+FtfIrG2mK:x/6J/Qm89ZCzdTby7cL1mhaW+HEG5brG
MD5:	1C32395F1E4B2A54D6DC200AB58770AE
SHA1:	FA60928EA99FD76E8361BD63A124C9B800EA1993
SHA-256:	B74391BDBCBDB8D0A05342A252E0A0B47E775D1B87C478092E303F9ED50A837B
SHA-512:	7381FAB263B505BD515176B5F03C651419F2217D8B5FFCB469FEE0C124BAD56CDAE30D0638BD08305CA562D2EC5716DE4A80BBE63241F32E7C05734093D17690
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....pHYs.................sRGB.........gAMA......a.....IDATx..TOO.A..o...?.mS...J.H"..zU.p..A..<..._..W.......z.&@R"...i+1.ELI.ew.7....z..K&3......TNZ.8.......v.!...Ub..M.......;(..... p.@D.1o...3.R.T._;....a(n.+aM.VQ.K"@."BB...\|v}e.t....#..........KK.\|>..1.p..E.2=.H?..4....D.\|..F..2.....J....Y_^.........=E...(F.].H&2.x\|....X.) .&.....].....;. ...........a\|s.X.}.X.....5:}.$.l..?,Kk..N,.,.NvZ.....r...\.H9..${.{Z.(.B...:%...s[...%.(.q.\|i\|7M..p2..8.DT...=[.v.C.y......y..8.uM9.v9.R...lY...~.cD.bCss....+u".);.W.1V.Xp".......=.3.Sn`.E..@.j .J....X:.,..S..K.T.HK.t...:js.Ku.g.....'..c..W./F..u %..,...(.;.tB."..\ \|....FdF.7..A.................A....A...._..BaD..9..[.T..........Ak...."{.0.....P00...W.GE`..SO...W.C.....7.\v(..`.....-"J.M..tZR......X..ua..V>.....da...!.....IEND.B`.

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2717)
Category:	downloaded
Size (bytes):	35946
Entropy (8bit):	5.471620889692367
Encrypted:	false
SSDEEP:	768:6DyNw5wDn4toiuumfztiabrBOWi5uf/J8P2Bcn+irSPMRpk+b/902GwD3DJgiOYA:e3Vuum7tiGrBOWguXTc+irY3Q/902Gwe
MD5:	05345F56355FA8421E88B29947743EF5
SHA1:	C2652FD719B401718457C94BC3292D3204699D00
SHA-256:	A2BDD8CB01353D4ED2A9AB4C7D7C263225F6908AA875614D015A2F39956D9D73
SHA-512:	DB343C949AFF72FA05C45F914A02F874770367153574CB70DC6ECA426D3C7EFBACABD93670C97F715EE71C0037973E6CB6F4A6E9DC61DC91D77F0735C1059D68
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js
Preview:	// Copyright Google Inc. All Rights Reserved..(function() { /.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var h=this\|\|self,aa=function(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"},ba=function(a){var b=aa(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length},ca=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},da=function(a,b,c){return a.call.apply(a.bind,arguments)},ea=function(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);.Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}},k=function(a,b,c){k=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?da:ea;return k.apply(null,arguments)},l=function(a,b){a=a.split(".");var c=h;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1690
Entropy (8bit):	7.048915681165956
Encrypted:	false
SSDEEP:	24:AJal1hiyWwjx82lY2T37V+d0dyJ3Vq1Y6pYGY8P1+YXY1xWHtZsoye+oy3+KrGle:5uNn2vUKsJ3w1fpYL8EYXy3nrGle
MD5:	B25D13940D12B6C6CB3022FC218ED3E8
SHA1:	B4E547E9D96FDCA3AD222367A8320F008E910D21
SHA-256:	866746DFF379F2E84E752D3816BA32B6F19BDA4287AD9497F37328AE23D9C766
SHA-512:	CFB520B7563B7B7ED6459D67DB8EC90148714E654F7779832DBA478B8DD0B93C364C10DC87A70596037D494E43179A4F90E3655ED4064F3A348802B84C656655
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Shared/Content/Images/ajax-loader.gif
Preview:	GIF89a..........B......b...........!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 (Windows)" xmpMM:InstanceID="xmp.iid:C085D18D6B7511E59F4F99BC3C8B2470" xmpMM:DocumentID="xmp.did:C085D18E6B7511E59F4F99BC3C8B2470"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C085D18B6B7511E59F4F99BC3C8B2470" stRef:documentID="xmp.did:C085D18C6B7511E59F4F99BC3C8B2470"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..................................................................................................................................~}\|{zyxwvutsrqpo

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/950188369?random=1713460559129&cv=11&fst=1713460559129&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2418), with no line terminators
Category:	downloaded
Size (bytes):	2418
Entropy (8bit):	5.221407008929116
Encrypted:	false
SSDEEP:	48:2kaUK9Oqw+awyDQ9SP9hDEWKM3c0wbgjwewrQCwG:2R1wnwmigI95rQZG
MD5:	34DC9E3A146926FD0ABECE343B236150
SHA1:	B38CB0408960C6B9B58ADAACB5B1AD4A794737E1
SHA-256:	F7C1BB814BE4786BE83D2D6C93A2103F88232E5C89FB8E436125E5CA5F66E570
SHA-512:	CBE3CA2A1389978AE1762EBCA857B92CE54A3F044CEEF1BB124F76B9778F859A685E266FEF10EEF4A1003CFEBD65557B35B35955C7D2D08249760FF0FC9BB604
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Shared/Scripts/Libs/OneTrust/one-trust-init.min.js?v=2.0.769
Preview:	function OptanonWrapper(){}function otGetInitialGrps(){OptanonWrapperCount="",otIniGrps=OnetrustActiveGroups}function otDeleteCookie(e){var t=JSON.parse(JSON.stringify(Optanon.GetDomainData().Groups)),n=otGetInactiveId(e,OnetrustActiveGroups);if(0!=n.length&&0!=t.length)for(var o=0;o<t.length;o++){if(""!=t[o].CustomGroupId&&n.includes(t[o].CustomGroupId))for(var r=0;r<t[o].Cookies.length;r++)otEraseCookie(t[o].Cookies[r].Name);if(0!=t[o].Hosts.length)for(r=0;r<t[o].Hosts.length;r++)if(n.includes(t[o].Hosts[r].HostId)&&0!=t[o].Hosts[r].Cookies.length)for(var a=0;a<t[o].Hosts[r].Cookies.length;a++)otEraseCookie(t[o].Hosts[r].Cookies[a].Name)}otGetInitialGrps()}function otGetInactiveId(e,t){e=(e=e.split(",")).filter(Boolean),t=(t=t.split(",")).filter(Boolean);for(var n=[],o=0;o<e.length;o++)t.indexOf(e[o])<=-1&&n.push(e[o]);return n}function otEraseCookie(e){var t=this.document.location.host.replace(/\:\d+/,""),n=t.replace("www",""),o=[t,n,"."+t,"."+n,"asset."+n];document.cookie=e+"=; Max

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	41908
Entropy (8bit):	7.990338026668511
Encrypted:	true
SSDEEP:	768:vZqsCJOWlFoa4wo92/to+B6FprcvWV317Vo47c8yuAhs0ncRTtVRw:vZqPgEF/v/t56wvWj7G4sfe7RTtVRw
MD5:	EF74FC1EEB12C1A1F9F67BD649742AE4
SHA1:	202787C218DE4349BB20504DF4A52FD80E548E4E
SHA-256:	D6D8159A1B91A5AEB7854DF7B79C25F8F2A7675B4EEFF9F2A71F7E74F88BFFDE
SHA-512:	CD5F7D4F424CF48CBAE48842F87B1CBE2AF1C3707D98622D8620473F00537882AE27B6A29C80A3FE3F61AE7DCB2ED1125B71B0B468974E0EB5F927B305076AD1
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/corporate/iwd%202024_270x170%20png.png?h=170&iar=0&w=270&hash=BAC305282643EF1EE26BB0E2B96C3EA3
Preview:	RIFF....WEBPVP8L..../.A.M@l#I...].j.....!D...&..........fn....m....p....?..e.......~.]..{..lb.=..}..&....r...P..P.S.....En.@_.6B.LM.D.mU..I<..;..#}...\|.Su.b.>.4.&Z....0&..PD......P.R~......:.R..8a.u.......c........r.u.$i..I.....F.p......7..*Pq...d.96.I^...d!K.$G.\|....g.....E.4+.E.MR0...m[...%....5...O..w..n%..!d^C.$...3........S.../..N..m.c........ .........)....p.8. ..P...D7u..!...@AJr.[..=QM7. h..g..k...v.,..\|Y...@....JJ.+.....3v,.P. ..&}..-.f..,.$.F....y.y..`._G.....).......u.....P....MBI....!..?}.l.5.&0@!T.......?.....`......Rr........x:~..!0..i...VJUP.Z.kk.&..v......VJa..$.4......>p....$..... ./.'0z8.=..P.JJ)U.N.;.....}.+7.......?Q..1.(.[..>.{4.}bN.Y....}B..}l..o........C..W....v........;.)...}F...}v.o..c.K...I.d0..[V4.Y..d...[zZ..D.BB...."1$$...SN.c...$...tc..[..Og.D.n.yZ.._...:..4c.l.11f.OL.SBB..2.d...1$....6../..Xn!)tsu..7.K.Z.H#...%...Vs.#%.d.<.l2>'.F.K.^,......q.x..A7c..=))..$..D3.9..bH.O.K&.fL}L]Qm0...4)R.......n..i.}..."J."%)S.I %X.

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1402)
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	5.379101905741689
Encrypted:	false
SSDEEP:	48:Qt/BUayiYJUkAJaBaGx3DkANq/EQLiSpAmCAaX5sD5E2xKjSP8nOr:QBBnydWSPx3HQLiSr+X5slE2UjSfr
MD5:	7F0D2C0A8281D18A1125EEC2E6986427
SHA1:	29C4EAE130870814B32EE25D649C5A5A7030AE93
SHA-256:	55EB0CB15E89E1225F4A62F2B1E12D362A4CF00F4583912BD2675C92DF688F12
SHA-512:	58DE0845F505024146B19AB6577AE302D0FFA0B45EDC4606FFAE363079BC5F24D1CAA22523783EC333712E30AF78125D65EAB24CE749FE2A345DA2AB8E968E12
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RCbf68ef0f931143e0b59cdba8256b8be4-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RCbf68ef0f931143e0b59cdba8256b8be4-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/a82ee6f2a18f/63c369982971/c59f14981bd2/RCbf68ef0f931143e0b59cdba8256b8be4-source.min.js', "if(~window.location.hash.indexOf(\"gnav=\")){var vals=window.location.hash.split(\"/\"),replace_string=[],gnav_loc=\"\",gnav_text=\"\",gnavCookieTitle=\"\",gnavCookiePath=\"\";if(_satellite.cookie.get(\"gnavCookie\")){var gnavCookie=_satellite.cookie.get(\"gnavCookie\").split(\"\|%\|\");gnavCookieTitle=gnavCookie[0]?gnavCookie[0]:\"\",gnavCookiePath=gnavCookie[1]?gnavCookie[1]:\"\"}for(var i=0,l=vals.length;i<l;i++)~vals[i].indexOf(\"gnav=\")?(gnav_loc=decodeURIComponent(vals[i].replace(/#?gnav=/i,\"\").split(\";\")[0]\|\|\"\"),console.log(\"%c ----gnav_loc: \"+gnav_loc,\"color: blue\"),gnav_text=gnavCookiePath&&gnavCookieTitle&&window.location.pathname.match(gnavCookiePath)?gnavCookieTitle:decodeURI

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31968)
Category:	downloaded
Size (bytes):	76666
Entropy (8bit):	5.237279554301839
Encrypted:	false
SSDEEP:	1536:vB5Uvlc7V23CP92cb1UVW/bQ8BeZ8+R81Np9LO:TUtcY3CmWFudW1NpY
MD5:	0A159168CC83B062EF5677D2C83FEE81
SHA1:	D27ECBE04CD5C14D174D30F26464CC5933BB96D1
SHA-256:	7166598E78FDF6BCA707E6FC15A346522BF17359094916BC64CFC4EFB703AB42
SHA-512:	C8D31716C65B3FE1E28B67CCE27D44BE129B0426763407D6D45BE537AC81D596A71FED6C11C355DAB3C483AA823114FFE1D634D442C2743EF959F95F4C774A26
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/vue/2.2.6/vue.min.js?v=638484955464930367
Preview:	/!. Vue.js v2.2.6. * (c) 2014-2017 Evan You. * Released under the MIT License.. */.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.Vue=t()}(this,function(){"use strict";function e(e){return null==e?"":"object"==typeof e?JSON.stringify(e,null,2):String(e)}function t(e){var t=parseFloat(e);return isNaN(t)?e:t}function n(e,t){for(var n=Object.create(null),r=e.split(","),i=0;i<r.length;i++)n[r[i]]=!0;return t?function(e){return n[e.toLowerCase()]}:function(e){return n[e]}}function r(e,t){if(e.length){var n=e.indexOf(t);if(n>-1)return e.splice(n,1)}}function i(e,t){return $i.call(e,t)}function o(e){return"string"==typeof e\|\|"number"==typeof e}function a(e){var t=Object.create(null);return function(n){return t[n]\|\|(t[n]=e(n))}}function s(e,t){function n(n){var r=arguments.length;return r?r>1?e.apply(t,arguments):e.call(t,n):e.call(t)}return n._length=e.length,n}function c(e,t){t=t\|\|0;for(var n=e.lengt

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1839)
Category:	downloaded
Size (bytes):	1862
Entropy (8bit):	5.378704584910478
Encrypted:	false
SSDEEP:	48:kq9vYpOXSCKt9Y67c8ouBCWs3cTPaLGqviMaE8FEbEfESEHZ:kq9vYQiCKt9Y6g8ZBCCra3viHEIEbEfc
MD5:	83583A4061DDC27E8B6EE0DC269519CD
SHA1:	8B1C0ACC28729208F640473EB5D8FB82C4BA3E15
SHA-256:	C051B8B5EB2A0AEF699780F15A449491868FAA6F8B39B684B5AE8F64F345B94A
SHA-512:	3652AB4345C138245677F415607E6447358DC064B8B3AD7820F34BF225A0D70B0820AFD87E5D2235919AFC703248DA54F126DF8F793DFDA529D1FA336FBA22C3
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js
Preview:	(function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()(t-e+1))+e}function d(t){var e=(new Date).getTime()/1e3,n=parseInt(e,10);return t?e:Math.round((e-n)1e3)/1e3+" "+n}function v(t,e,n){var o,i,r,u;e\|=0;o=Math.pow(10,e);t=o;u=t>0\|-(t<0);r=t%1===.5u;i=Math.floor(t);if(r){t=i+(u>0)}return(r?t:Math.round(t))/o}function h(t){var e=t+"",n=e.charCodeAt(0),o,i;if(55296<=n&&n<=56319){o=n;if(e.length===1){return n}i=e.charCodeAt(1);return(o-55296)1024+(i-56320)+65536}if(56320<=n&&n<=57343){return n}return n}function g(){return v(c()/f()2147483647)}function l(t){var e=t.toString(),n=1,o,i,r;if(typeof e!=="undefined"&&e!==""){n=0;o=e.length-1;for(o;o>=0;o--){i=h(e.charAt(o));n=(n<<6&268435455)+i+(i<<14);r=n&266338304;if(r){n^=r>>21}}}return n}function s(t,e,n,o,i,r,u){var a,f;if(arguments.length>1){if(n){a=new Date;a.s

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10827142419?random=1713460611030&cv=11&fst=1713460611030&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/950188369?random=1713460552602&cv=11&fst=1713460552602&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	38257
Entropy (8bit):	7.983137819408142
Encrypted:	false
SSDEEP:	768:q22jW77BmdpV+UjdR3f7HCo9iBhD6/BxoVLmcwL9:q2VuD++7h9if4xCi9
MD5:	C3EB835875DEF528EE9E7602F4342F18
SHA1:	771A4607F0F575A25B49941A36E7CECBECCFB1AB
SHA-256:	10B3BC781A37C1E68D6DA06ABFD750F209C5710E2D2B6E1EABA9D7652A09CC63
SHA-512:	6597418238BAA3EA094DEC19A00873D476C9E25E1200185F4034CDB6976AC28DB67D8C574FE0A7F8D117E3E3D31C237D1BE5B505836FC1F33A11BBFCF4EF9328
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx..g...u%..>...};....9....$..(&..2%Q..-......Ao$....i.q.eK.iY.%S..%.L. ..s..o..s...u..${~.?..u/....}Qu....9;.M..L....7.8gn.AO....O....WJa0u....U....G........>...............6..u...}..%b.1......o.....k.....X._.2Wk1.m..8^=}..(.......q.b.B"...N.=l...G.a..a.w../.z.oB:.`A..-._8r.R..H...$.+C/...._..i.......o..Dy6`%&@.P...@.gp....&..k+]..M.'/N...Q..]..i4.............E.R...~.....\)....J.sl...M....>.F+.........'.l?Qx.J.3..jc.3...D....89Q=c...N-....\|}.Ty........D......2Wf.2.@....:}........G7^.....V.c.f....g....x......h........Q..Bk.s.sRL...X6........=.?>....R....W...."(..t..a.8...,Uf.H......C.#..;.......YK.R\9w`..Z....Jg.R.`..?=}.#..cX...3b(.N..R.B..;........??.s.....{%.....:...(..O.......?...........;K...2........en...(..\|...a@R_..\Mk...Xe....q......Z..J.F\|.1...fg4k....\|..a.!.0.~oxYGK.W!.C. "U.....n.....8.8.U.J..&^\J. @..).....Huzn.2.]..`.!.......Q!4=......=..&:...HX......A[.O

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 27, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2810
Entropy (8bit):	7.8653319119866945
Encrypted:	false
SSDEEP:	48:ZE/6DocieftI9G9f6A+FIDOWu0lDl+gm7QyTtctIInQSy6IVpqlnBcODpw:ySDZ/I09Da01l+gmkyTt6Hk8nT2
MD5:	64ED2DEA3BA8F87F97EC74B1ADFF7BFF
SHA1:	612E92A10177ABCEB7BA480C6F188E2ECE108A76
SHA-256:	2FF1E0DDC63F77784281A6DA3ECED276B87FFFA2F3AE5FEE5E1DEE3D5B26AF6B
SHA-512:	C0F8383616039809D2F4E1E0FE59F3F45055ED5150F071563F97490E8BB29CC8C9D5278E874F2F388C974C59AF41BD62045B917A0E563B2E5694FCE1F1E5B47A
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Shared/Content/Images/ContentModule/cmCalloutBackground.png
Preview:	.PNG........IHDR.............2:r#....pHYs................OiCCPPhotoshop ICC profile..x.SgTS..=...BK...KoR.. RB....&!..J.!...Q..EE..........Q,......!.........{.k.......>........H3Q5...B..........@..$p....d!s.#...~<<+".....x.....M..0.....B.\.....t.8K....@z.B..@F....&S....`.cb..P-.`'........{..[.!..... .e.D.h;...V.E.X0..fK.9..-.0IWfH.............0Q..)..{.`.##x.....F.W<.+.....x..<.$9E.[.-q.WW..(.I.+.6a.a.@..y..2.4..............x.....6..._-..."bb....p@...t~..,/...;..m..%..h^..u..f..@.....W.p.~<<E.........J.B[a.W}.g._.W.l.~<.....$.2].G......L.....b..G.......".Ib.X..Q.q.D...2.".B.).%..d..,..>.5..j>.{.-.]c..K'.Xt......o..(...h...w..?.G.%..fI.q..^D$.T.?....D...A....,.........`6.B$..B.B.d..r`)..B(...*`/.@.4.Qh..p...U..=p..a...(....A...a!..b.X#......!.H...$ ..Q"K.5H1R.T UH..=r.9.\F..;..2....G1...Q=...C..7..F...dt1......r..=.6...h..>C.0....3.l0...B.8,..c."......V.....c.w...E..6.wB a.AHXLXN.H. .$4...7...Q.'"..K.&.....b21.XH,#..../.{.C.7$..C2'...I..T...F.nR#.,..4H.#...dk..9.,

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/527644678?random=1713460611045&cv=11&fst=1713460611045&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	127804
Entropy (8bit):	7.998678273882651
Encrypted:	true
SSDEEP:	3072:dbilgySsmkcbAVn+ocjfFN7WbhipxVk7N0lFiHfShO3Zl05mz:dbwPhtccn6jNN7WbCVSiOa8W2
MD5:	98396C37514E7BE3BD3E5D50EFF4DBBA
SHA1:	97B0533A49246076D3487CABB49505D5ACFD3A41
SHA-256:	62E5B4CE425EB42ED9FEB7DA0DFA8CC54EB8A065B752962CEC88B4B2F2853558
SHA-512:	881B55199BA31FD941CC4C953632C17B5D0D2B8DF374E5827428017B52D2709DCEC5E83D58D47C3490F1C15030241E9900948843BEDCC4F80EF84EB8FD81D645
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/wildlifetraffickingwhitepaper-1230x420.jpg
Preview:	RIFF4...WEBPVP8 (....@.......>Q .D#.!.,.88....yj..._..i\.O.}3.H......d..c...<.\|.g........I.}.{aro..K......7....o.O..y?-.............?..D....~........W.......k...../._._...?......k...k...O...?.>.?........Y............?._.^...........u...C./..Y......a..~..............?............?....o........s...._..r...S.o.O./....I.........a.........?.......................k........._.\|...Y......._......x.....w...../......I...t.so3....Z....)DkD..19................P:O.k.... )E.!l].......i..G..:......".,=.....u...m.%(..{.N...]\|"sr.....a._X.K...vr.(P...'[.s....V.YZ..XI.h.+RW.N.a."...4W....].?..`#.Z`..bS.9JM.e..x.0..-2..b>h.s.}..T(#..FJ;..-)~..Wv.AX....$.V.... .........'&v.....C.F..'<.....?.R..J.....J.^.....j..v....c..Iw......\|..v..,....3..J.....kw..s...s.n.,..)3.r.mo.y..BP..*.\|##.E....F.....s\...@.%7..0l...b....k.h....VO..5\..e.c.>.Q;..LY...D.-`..q..ve..R.....q.-.3.lU.XS9..H........~gjy[....5....~B.l.y...,.x}.dk..%o..l^......-.....hcy.+.-.'..a...0{..w..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	54235
Entropy (8bit):	7.987171318529533
Encrypted:	false
SSDEEP:	1536:nV7AlmMJtU9hrb5IEZoTdiKQ0OciW003DWAlubN:hAlmMJt6AEO5r3iWovbN
MD5:	58CB1E03AAE89DAF659B51C3E6F17BC8
SHA1:	3AD7689B448A1F2BDE89809043C00072A4817DB9
SHA-256:	FBCA2080EA54C2F6DDA19B610DF736A6716B30EBA5C4E35765DBF807BDAA963D
SHA-512:	035246D47EC3F547A0F352FE47B5CE5EBCE075C7E59B6189DFFB7541847F301A6846ED0467838E26CF5ACD1B85615F2D77B50223826070D7D6AF0F805054AEA7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx..I.%.&ff.....=..k.b...&....4.>..........].t.........f..Ej5F.....d..&.d...UY.Y..................UlG..x.x.............. .@Y.c...."......... .(". . . "...U.D4......@@..\|I..Pk...z....h._l.WVZ..~......oL.LIk?\|...X. ....._Fc....Akt.FZDL@....m.[(...q.t..9.C..ZUI.m!.).^..$.....#..R.....:Z#\.l)N..R?, Dh.......U.D%E_....=.m.i..JY`...J.T.Dp.Za.w" ...T\|\Sr...I.X>XKN..E.,.._o)....\|Xju...<c..b...V.(KR..Do0....-...dn......oL.FAEe1.TeL.r..^=z=.G.k...........jS3gU.......[7..P...e.+.V..J...T7.BY._.6...4..b.\|..hUR..L.ZM{..B..V.(.+....d..X......Y..T....].E5:..D.@+R.`6...yA..j../..."...c.....Ml..s.C.........X..x......##.d..5.T..C.-.K..6.T....R5..hM^......m...xp..YhQ...P....{.U..nc...ZV...hM.).5l.....}.^.;<.#z.>>M....2"%..n.>>q..g.#.../................Wu.F-..>..z..".5".zbq._.au..iy@iTr.....X......?...7...*..E.........w~uV....<iiZ.O''...L.M..q...{..v..$...Sm.j...wPJ..5"...JQi.......G(..iN....QJK)M....

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	116
Entropy (8bit):	4.455230376540782
Encrypted:	false
SSDEEP:	3:qOeIeY8JR1SIALRDReBK5AIeLbNE68GBIeLbNEpxYZLThuSxe:qOOYYz7ALxRe88PNkOPNMxe3Rxe
MD5:	874EC84C786F8ABF1EC3AA1ED3FAD52F
SHA1:	0EA93DDA087C709BCD1C6840442B6A72680F407D
SHA-256:	2E74DA6569DCBDEBB77D79811B9230303E1892FF83CFEB9D464219F6500EFA8B
SHA-512:	477079FB5BF0611A3B08B2355CCDED2AA03699838E16F79828DDA272659ABF507B8CD66348D4D15959D02DB2CFBF8835D636CF95F87B50C98D08641849F9D198
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/checkScript.min.js?v=2.0.769
Preview:	var docElement=document.documentElement;docElement.className=docElement.className.replace(/\bno-script\b/,"script");

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	444664
Entropy (8bit):	7.957578011552942
Encrypted:	false
SSDEEP:	12288:maLYRyTHbHWeOjSi1O1YYLQ9r1C3Y0n6LxsMZpd5rq9Q/:mcYUTHJOj3Ove83ln6LxzX529m
MD5:	E0629C3D38959AE133A6AD56A5142EE1
SHA1:	0BDDB2B57ACCD9B58B8CE8BF4011440252ED331B
SHA-256:	AB0594247670F3E2E43C73BA44BFF9CFB05FEA7BF27D4D4873A986134CE8C48E
SHA-512:	F664A421F03AABF3A9618BD22F5C7844CD235D145805EA25E08FB51B53BD2108F4282A63DB06826C756BB65F9A80F09C794868AF1C0465F2FF7FE141D19A2EBD
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/homepage%20carousel/from-complex-to-possible.png?h=420&iar=0&w=1230&hash=980BED648303F4AA5BC7BDCF211C2315
Preview:	RIFF....WEBPVP8L..../..h..@l$Ih.............D....mIj.-I-I...xl..$M...%..v.8.........]YH.%M.<O...@......O..9.G...s.m.I`.......$G.....>9...`.....B@U.>f&..8..'o..s.o..m.v...0..z...W..o....,.f...^.e..J.X.H.r...3I..Gl;.....:...=.s.6...n-...@......I{..#I...]H..dm.?...;...O.. ..Y]`.............G....m....^...h...........}...".b.,.>OVY?kI._....`.#a...%]...WZ...i.8........./..~.%=..%.S.q..7....e=..o..l=.Z.>..'dii.%...W...v...dv.....t....b.l..;...).J./`aa..d\.Im.=.6..~l.b...$.X.....z...+..S.>../...C].y.v..E.C.....v. 0.0..{a.gVb.%.x%..Fcs..V.M...az..1..H.%I.mQ......>..#.H...{....o.m.m.ZPeEVdE2TS......9.z.@[.m.m....v...ux<U.eIF.M....O@b..F..##...h..r8..-.1222..1......% .& ..<..>....<....6..^.L7`......(.H22.5.Y.n.d.(C.IV ..J...}.]......0O=....b.&(...o..]N)...5GFFF...H.#.......L..j..6...Y......l....3.Ca2a..;(.K.L...;..1.$....6.......a...6IF..!...i..4.......o,... ;d.&......H"..m$.Yy.KF.y....H..$+...x..!.O.)........,,.`.....//@...F..y...I^..l...1.jm...

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1185
Entropy (8bit):	4.958384565851289
Encrypted:	false
SSDEEP:	24:3F8OYsKuJZFA5OYsKTHpwYmOOk4TfenEPCa5YmOOk4TfenEPCD:3aOLDZS5OLvrOOlKa5rOOlKD
MD5:	618FB54E0C6051B9379FBD7CB44BE4DA
SHA1:	3D9214FCA585A649EF0135288E0EFED9E81CE36F
SHA-256:	B5BDBBCC72CBC9412F84B9A45C1BCB26E18C49F5B559F3E424AFB8CD1E250C6F
SHA-512:	656F236DD280CF0AA467374E5C4152633CB84F5433E73A77EB793D4DC5037F2847F1323F96FA58F21E8AF96F24286DE54CA21BADCEC70647A46CE1D3D47D8341
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons\|Material+Icons+Outlined
Preview:	/* fallback /.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}./ fallback */.@font-face {. font-family: 'Material Icons Outlined';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialiconsoutlined/v109/gok-H7zzDkdnRel8-DQ6KAXJ69wP1tGnf4ZGhUce.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}...material-icons-outlined {. font-family: 'Material Icons Outlined';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-t

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	95054
Entropy (8bit):	5.5720534712197205
Encrypted:	false
SSDEEP:	1536:6ykjJYwZtSTdn7AM2MGcWqHBbbbRKtRMxWRfip1zjQs:6Qv7BbbbstixZpZF
MD5:	8095D61F32FB584D60FCD00D093D503F
SHA1:	03FF011F23B725DBBE88A22006CCBD370F9E8790
SHA-256:	273DB86880B680229CBDB329872E7AEDEDA25CB532446BE7A44FE932AE2D12B1
SHA-512:	E0BA86D804609C7876E9FB6DB3659A1369E5171627AF625E424D67D77CC9330D649A2CBA535B663677A40257FCF77A7F5D9A4DE859F9C1105A930800E7D0A7FD
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Shared/AngularBundle/polyfills.js
Preview:	(self.webpackChunkweb_component_builder=self.webpackChunkweb_component_builder\|\|[]).push([[429],{5321:(a,i,t)=>{"use strict";t(242),t(4244),t(7657),t(8813),t(5310),t(1771),t(2314),t(6343),t(8148),t(7677),t(2691),t(9132),t(7878),t(6081),t(2298),t(3499),window.__Zone_enable_cross_context_check=!0},242:function(a,i,t){"use strict";var n,r,o=this&&this.__assign\|\|function(){return o=Object.assign\|\|function(e){for(var s,u=1,f=arguments.length;u<f;u++)for(var v in s=arguments[u])Object.prototype.hasOwnProperty.call(s,v)&&(e[v]=s[v]);return e},o.apply(this,arguments)};n=function(){!function(d){var p,I=d.performance;function M(U){I&&I.mark&&I.mark(U)}function N(U,E){I&&I.measure&&I.measure(U,E)}M("Zone");var $=d.__Zone_symbol_prefix\|\|"__zone_symbol__";function W(U){return $+U}var V=!0===d[W("forceDuplicateZoneCheck")];if(d.Zone){if(V\|\|"function"!=typeof d.Zone.__symbol__)throw new Error("Zone already loaded.");return d.Zone}var nt=function(){function U(E,P){this._parent=E,this._name=P?P.name\|\|"

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	14278
Entropy (8bit):	7.890515977846498
Encrypted:	false
SSDEEP:	384:ftRBBOiHFX+5/gqYRFSESNBq0lBfHBImwP:xnHB+t+QEaq0lBu7P
MD5:	368EEAAF581E216E7AFCF7E30AAC1272
SHA1:	D22A99E7C2872461CD641EE90D3C1B6820B6AFF0
SHA-256:	10AD8268E8C0989A2E988A0128DF042E2493B7709113EEE0921CAFA19218714E
SHA-512:	7024E78B9C8BEBD861AD94256A16705913E63D5A414F9991051140E09C68AEDB19B8AAE2B2B51F58FA373A6B432B6D229647903E900E56279109FD65CF54EDC3
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."...............................................................................H.\|.....I..4b+t>\..?t/4.4.B....u3.O..z`^....a;..e.P.g.7....."....).Xp[.;.I...E..5...x.....x'...H.@.(....(.@._.._6y....s7.t,L.;M...i.^.M.;Kr2...dC{..*."".X.jFn.......\|......eOA\..6...X...J.R.>OZq...x

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 60x60, components 3
Category:	dropped
Size (bytes):	1448
Entropy (8bit):	7.431312026404756
Encrypted:	false
SSDEEP:	24:emlZC/LlzCLlzCZrx5cr7Tvu8GkWVYjriXggW7zsIF5GuwOjPT:emGLZCLVClE7vu8GVUuqfdF3v7
MD5:	BCD40173A63B8EFEE224746EAFE20EB5
SHA1:	EEE18844A1FB55BE006592AE071C93C668565246
SHA-256:	EA21822E62DDF43D84F626A2CEA485F28185EAF94DD344C65466FBAE41C59909
SHA-512:	C025B36E7A385B0715D7427CCE28BE860FD7BF2CA302F7D1BA9474D5B6D9B795E33C2E68D5091C377E6BF483420BF9CD8CB36C81136F2BE729CD2DE93E82E6FF
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......<.<..".................................................}.m2..{g_b5..N#{.....o..z2.0.~..z.r.3n.(..........................................o:.{6.JG......................................0$u.Zw.r.......5............................!"1AQ...2r.0Raq 3B.............?...G..8.....>...}......x..6"...l}Y.......\|.....cq...w^yg.)...}..c.2x..!...<.I..s........j..... `cu.....c,.u......;...tm.=iq.F......];$.....k..G.2t.<x.D..K:...x.S.p.\U.vxv......JQ..%H_.3H..'..M/.g....@.Jy.dx0.:.[5..^.RkHIn.s..-./.:.j......m....5..pEot..x....o5.....1:..Q...x6../.Ld-....bs....d....X..fG............u..f2.....m.e......./.....O#-I..H.y?......q.9.."}...0.k6`.l.J..*v=.i.B.j...H..%....i.R.].^.....F./....N6.<..%...Gi.h.. .~.y.\...q...{1..V.nL.t._.}{].9...r.DN?$.g8.I.........H+....eDR..`5)..Zz...gC..2W.....o.#.....DJ..2$..#

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	32
Entropy (8bit):	4.202819531114783
Encrypted:	false
SSDEEP:	3:/qoCkubf9l:/xubFl
MD5:	B8AA1F4F8045563FAED0EE9C12E9C5FE
SHA1:	F7C1C2FB396E7AFC96DF7F34FA919E30F3303837
SHA-256:	F2B81E8DF81E923571DCBB08A7781D74C179994BD5D4F4B69B4AA04C6DF31993
SHA-512:	A5EE3C341E71242BCC3CDA5CD29E2FE3CF5BDB8BD014FE7BEA702A802F42DCDF6264DCB439A18C46D6B07A0FC739B096CAB7D9C24E0136059A6DAF63981AD3F7
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwlpB8EF1e-GqhIFDaGVjY8SBQ1lIZnq?alt=proto
Preview:	ChYKBw2hlY2PGgAKCw1lIZnqGgQISxgC

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	21406
Entropy (8bit):	7.98175662487334
Encrypted:	false
SSDEEP:	384:63dAKp5zToKCy6Uvmm6VA1zGNPLp+semg2trFYc8MGS4ZHj+sY:63dAySTy1WA1zY4sdL8XS4ZDK
MD5:	F768BA789887D831E62BB3D44829CC75
SHA1:	CD2CC01DB557646F4B8D18FBDB0434E4E7CA6CC9
SHA-256:	3054373CA56AC13E03217C25D62B9B31C48D6CC3681E060DB17EEF06E75F66B8
SHA-512:	6887F3924FF84C841CD53B3F8FA9F081E7D8434892A6085E30320146CA88C3913CBC7C4FF07E51DF3543EDBBA6AE0E58CC3A4300152AE35048DAA693FD360A38
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/img/icon_sprites_5aug2021.png
Preview:	RIFF.S..WEBPVP8L.S../?.Y.MHr.I.......?8<.j.sD.'..x..l...j....3t........>.?.N'..!...'.`..S....PSJ.....4Q.y._S...C...r!.....T.C&..m.I.....[.;..x.....n...$...!V....Q..y^.......^tik..f..V=K..qa..v..W.. ..H@....]....p.jQ.........O...X.....3..9.0....U.Z.._8@..U.!..W...Z.........@.j..@.d.....y}......A.^.x..$I."I:p......ef....J..3..U+]......P..=..[.$.6m+.m...n.m..s?.~......M.S...b\|.z..4.j...}..e/'!.....\|..Q.Y...a&....k.......d... .l..9.`.N./....0..w.g/..,..........1.3......N.1.a...P_...W..&...4.S"..30.n..f....8&..<p..e...;...&..~.BY@s.h{....M_..JBGfHE.P....B.V.0.`.c>....o..3.......$.=D>..j.6.g.O.>~.@B7..o23...=v.....gO{.'.c.7.....n.Q.....+..f..SM....?.f.."+.x...0.../..E.t..,..\|.y..4E.t..T.L-S.~..2.g..:..m#I.....B=.-"&..L.fHd...DG.2...-..AS...^=.n...&.p..<...E>e.G.....{.(....H..8z.z.._oG.>.z8..f.<Q....y..333u.233x..9.<<...............j.....Z.\..@.[,.paE.....).[...-....0Z.03..x.p.].c.....E......#.N..b!."`).b.Y.Z...S.."`.\.\x%.......".S..n.p......

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x570, components 3
Category:	dropped
Size (bytes):	46277
Entropy (8bit):	7.974130862795605
Encrypted:	false
SSDEEP:	768:Xc6WV5FEsI8AHvLluDbQlalcYDymLY++DWyqt5Yueq2hYKVlzr/4b5dUCnLeh+o7:XHWVv7uebQayGfyNqEuen6sVk3UCS0Xe
MD5:	3BE4A54336B76A828236392C31EE6985
SHA1:	4AF60B51008F27F015615423C85E8C4DAF87529A
SHA-256:	C08E2E2342572ACF6AF7DE2E80755A5E7B456C77A8046FE732D12B8282097A0F
SHA-512:	8FD8AFCF11A1CDBD8B8F3C0FB5501439298EEE3FD75AFD38CB5E3BCDF1240B639E5A4D439F9961F0752ECDB253EC96FAFC9866A3FC7B554A1F1065494A0F5937
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C.....................................#...!....).!$%'('..+.+&.#&'&...C...........&...&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&......:.X.."................................................................................R.............................................bz..p........................2=.....i...E..>.H.O...[eP@...................V.V......lm..9.k.....*...yeu../...l....I.......................>&./.<...{.>...#dm...j.Q.{.5.-9.c.3.....~V.D.............12k....~.c..y.'.{...<=..a.......l.c..a....y...\|.c.s.{r..._.2.gY..................G.q%eKLu.....qxxxy..........&.1.JV..Y.={%"L-..A.1...0.nP.=.;.....(......S..I................t.b..H.<L.e1.D.'LH...E...L..)x.2./=...#.5....[.=.F...m....C..<....#......#.\...g.3..,..}...y..&.2G....]R.y>.E.......s... >..v.F.-s4.,......F\|...eS..>$..2.H.Vs..u.mk.[p..#...'E......eu..m......ZX...[.Svs}n...._.J...9.6..>.5..}F.Dc..0./L=...H._i............5\|o......._j.N..$y."...D..^.....G.....8i..'D-

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2120), with no line terminators
Category:	downloaded
Size (bytes):	2120
Entropy (8bit):	5.569655782063283
Encrypted:	false
SSDEEP:	48:YyLVkckEzcggFooFh6Dqrm/EzZggi1MT6DqrmlYnbuO:YyRkckycgWooUqYyZgpaEqdnb3
MD5:	FF40B9FB068C942CAB584187871C5E68
SHA1:	85EEFF7AB409B8EA5D03650BC160A6314840E24B
SHA-256:	472ACCF1E4256DC72101A24B0A41D41C4B210C72288518A03FC227DA8B426904
SHA-512:	F91531285DC9F48091BB59E3BD26A30E5475098DEDDC2123BE5FD7B717DC1B118AAFC4BB81CC99DF40EAD84E29138C1EE645E0125C964552CD42E0E6FA37D6F3
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/938545461?random=1713460611072&cv=11&fst=1713460611072&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j478041389","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j478041389","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1ssLp4xA!2sZkjihA!3sAAptDV4rh7hM"],"userBiddingSignals":[["476327158"],null,1713460612812219],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested-si

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8982)
Category:	downloaded
Size (bytes):	265306
Entropy (8bit):	5.555219209691913
Encrypted:	false
SSDEEP:	3072:RnUq+71vbzwHnHYDi87np2LUF1er5yyXatvFY55CgY8pv1HOS+oon:yq8wH41f7tvW55Cv8pNHOSW
MD5:	58C4F231C9FC8DE26DE860A619D0380B
SHA1:	D9D953FA01C0F255A6538F408EFE2E7060663245
SHA-256:	5703A9F8B638F9CC02F205068ADBF7F9160219F272C04EF65A61EE40949C0424
SHA-512:	97591222A50134B52E4208C85C9AA727AF6B8FC1AF753D194B9A2BB14038014C996EE80B1292821403DB54FCC00F791AB6C611FAC17E3055149B9C81C86BED45
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=AW-940382430
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"13",. . "macros":[{"function":"__e"}],. "tags":[{"function":"__ogt_cross_domain","priority":19,"vtp_rules":["list","risk.lexisnexis.co.uk","risk.lexisnexis.com.br","risk.lexisnexis.es","risk.lexisnexis.co.jp","solutions.risk.lexisnexis.com","solutions.risk.lexisnexis.co.uk","validate.lexisnexisrisk.com"],"tag_id":25},{"function":"__ogt_ads_datatos","priority":19,"vtp_instanceDestinationId":"AW-940382430","tag_id":35},{"function":"__ogt_ads_datatos","priority":19,"vtp_instanceDestinationId":"AW-978398205","tag_id":38},{"function":"__ogt_ads_datatos","priority":19,"vtp_instanceDestinationId":"AW-1048135065","tag_id":41},{"function":"__ogt_1p_data_v2","priority":9,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	131673
Entropy (8bit):	7.96192797531747
Encrypted:	false
SSDEEP:	3072:Mxre7rTGGbJQATLuqCHioWNBnqJbdC7Yk8NS0:MxrurnQsLuqCHGnWI1O
MD5:	6BF4C41238FA3524EAE63887B761CC2E
SHA1:	9F38C97010CF184D385FB9DD0FAC12B8036B1545
SHA-256:	3F02BCDC384EF911AD4C142284361E95814CD5280E07082121F4352C52F1864C
SHA-512:	876078C2BAB6037CD3379A13CD5C375956D81D206CC0E5887C88D992CE59A6196874EBA8AF1F141A145C434911F4C1344B5EF6AE3200A8460FA68EEE4F714B40
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."....................................................................................Sh..2...9.E....."...U.vJ..$.4.A.&.)02H..J..x.n.n..8$.M;.2wCM..N..I.RN...I5&py3....*I J,.(r.i..V'9F.m):.i.!.d.Q`......30IE..\.2.L......c\GkT.kS..P.C..!..\|j.......".ATof.bY.".C..t+.)DI..".J-I.[W.f

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4229
Entropy (8bit):	4.967608450640694
Encrypted:	false
SSDEEP:	96:npyIUp40w9E6upiFpFEKxYa6AyXajxjojJjkW5h4mTF:F79fSiFpZ6vXexQJ3imx
MD5:	607BD1D2BEF17DF2647BD84F28AC56F6
SHA1:	D09DBFA19598052A7B6BAC26BA21336274FE284F
SHA-256:	C225F4F8AC1F220092B9A0C322C9BE2F81044055C7B41D6E7EA8DD81C0E510E8
SHA-512:	916C5FB721948FC555FE1E81BB4D8D1617C61EEC00AD699EDD5DCE90A8392757CD76249322292B86D370528D221A393972F90B9A69EB9F6C45C3BBB250BBB56A
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"bf7bd77c-7b68-4d29-8fc8-56fe629dc57e","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018e86cb-1067-70d9-a4e4-74d1a355b08a","Name":"US Cookie Compliance","Countries":[],"States":{"us":["ca","co","va","ct","ut"]},"LanguageSwitcherPlaceholder":{"default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"CPRA","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"LNRS CPRA","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"018e86cb-0f61-72d5-abc5-660accde9ba2","Name":"Global","Countries":["pr","ps","pw"

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	10330
Entropy (8bit):	7.8397879282488985
Encrypted:	false
SSDEEP:	192:M1jwY3ri+/tIuD1hSER4bnSHuoFrK0pIB9ZcbaiyYcfR73yHoDccwfdwVsGd:MFwOri+FB4bnczs5CaiyYcgHccdfdwfd
MD5:	9522AC0E645EAB2E9035700B6EA53107
SHA1:	EA4B010AABCEAE3340D102A95F5FF116461DE1D1
SHA-256:	CAE4EB43194B794ECB2B160B704E04CE4FBBE45E77A57D42D4B1DD7C9687A0D1
SHA-512:	D507B9045A490270D45A0EF79E6E59D24F85CFAF5EE1C6A8B692737E17EBDA049A56F137CC47EC9005F715CFF432A1051FD13267C062C5D3F07D5F95C5099AFE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."................................................................................-.$4...U.WT..Yv......Z.....<.L.@.mJ..+......=\|...0.4..[v....\n........_.}.?...R{H)......b...k....E...4.W....*UYi.....9k.o5.4......vf...m..r...r..../.yv......g#.{......>...3.......ge..lx..qb?KkZ.&..\|..

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	452757
Entropy (8bit):	5.357829356102245
Encrypted:	false
SSDEEP:	6144:4WpRmnYxRgUE7qLCp1RyoSQW2Hm5uO74sjGGHYyGedkQEs:4W+YxRgUE7qsWj74tyG2h
MD5:	3AB7906A4D12B7D35C62BAC882D39D74
SHA1:	5D034541D6A9A05B0719C3605880FCFC9229E4B4
SHA-256:	15DE250A16CE58A10F84BEBAB59B9005CE36DF4EC8E87C3BB1ACC92726CFA971
SHA-512:	3A8346339679F82647E763E70E91113366828BA07023578BDB8EF29A0EFAD62707330B7973BB7245C58B8D4FF4029F2D879F8CD3171E4F3612841E0BC8C7CD85
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202403.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x291, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4838
Entropy (8bit):	7.937911466436227
Encrypted:	false
SSDEEP:	96:/o2pusH5W8ST00mnNiO9ogjAQDzt4If6RlhfToSwefOLQ5Vi8YxW:/vBAR54NJpfAhMSwefOLQ5svW
MD5:	63E11BCD4BF53506EA4746326E7AE1EF
SHA1:	6D8E2F0BFB230928E530ADDA3539B3763A04956D
SHA-256:	3C2BF0515BA563D5655AA5EE879A30EB1EBD28DD8E020469E3F9F7EB72D32384
SHA-512:	C16D2559097E401363573D59BBCFC33F4B0CA0B24589C779C4B825D3CD9CD93839681865FC1DF1A4A4D1E2ADB87AE737707F3BC1F1FABC66475114C03381B6EE
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/heroes/our_technology_hero%20jpg.jpg
Preview:	RIFF....WEBPVP8 ....P......#.>Q$.F#.+.$P9.p..in.....fE.f`D.....z..7..d...............e...~...o....:.........UC..s30.Cwy.V.>..(=...sUU.......'.k......3Jr..;..,$.%....Gxvq..V..Mn.....K...;.1ww..).Q.8i.....#.8>..w.<`D../.eT....G.............\...RiE.@....@.33...$.9z7..C.uZ<..^ur.V,..'k\|.a..DQ.R..(..Q....M%v^.w#.).,.c.V4....DDDD=y.#cQ.H.2.....DC.Y.j......2.!D1.w...."2>..C6.........F.d.<.).g.T../m...-4R...y..#..A67...mwwww_B.......T....".c.....?Y..+....mT..u.&]5\|...u.y".....W..^.4....0.UA.&!T2...}..\|..4v.h.`.q.).z...qU.).#.\|....b.8...0........U<./........k..dX^.T.X$...b.).F......jo.3....'R,.Y..h\..~....9E....D..,7..%R.p.....F.....<T...K.(.H....g....h3.l..}...Q@.!_a.........)....o..5yL...4"+l..O@...UWe...~..h..P.3.M..5t.No.........Ze...1b.7.....6.\|z\'QS.Y...........i8U5........S8)..8..@.a.""!z....UUOF{pl........UUU.Q."`Q".s...F....h.+\.V...g.......kF.k.y...._...........@.6O.1...t.v..:.6...A..!?....%&.a...#..oi333333333333333332....'.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 400x137, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10020
Entropy (8bit):	7.982862143755222
Encrypted:	false
SSDEEP:	192:sC2hVCi6Iba8L02bd1L1JD1+eM52UMiHS6hCYWKuUOwKGJb4DNX988Dx:sxaIm8LvvDcemvy6hpWKLb1kXzd
MD5:	25E65829133D54F3FDEF2EDE3409F0F6
SHA1:	7608699A03E1391793B688279C76EB5DE4CBAC4A
SHA-256:	76625AC1F74F5417028FFD7788734BC64F9F80B639F1A63156693ABF14A6543A
SHA-512:	98C61632D1A7CC5F592D129077251ADA22454AAD5148BB8EC14E5C0600F4A605A091B72B6A4B820333F70FFEA2C3756015F0232F4D1B5FA6F639DD956EE16C03
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/government/shutterstock_308932925/training%20page%20refresh.jpg?w=400&hash=E97587CA6E8E8FCE847A89D8F79FE6C8
Preview:	RIFF.'..WEBPVP8 .'...........>Q".E#.!.Jm.8.................'.0......w.......+......G.....o........f.@...y...w...#0....>5=..O..X.!.G._.?o....._.?....../.....Y.....^..Y.;.#..........g...?e=..[..}.}...._.....?....G..._./..l>....{.........T.w....e.q..$l....5%...Em..Cr..=...m.g...5...!.noi...?O....-s...m........(.q...;.,..~....Y.Ow..#.F...B.e...5.;X....w....t.9.4.1.,}_Z.Mi.....\.tG....l..S....e....T.^.....,..........w3..#!......!.K...P\|.N..^..j...{......@aa.....[7.CvNL...&...9..(../......E......z.)K7.}#.....U.X.Go....6...Y?.Z.."...nmJZ..I7zk....n.1..e...SZ4......\..B....(~....[U..H3.W.........$...1M.....Y...R.......;...^..'.+-.(3.s..8......!K...!.V..1<N..[^.P...I...P'..j.XC....T.f...S..S5X...<.:..............@N.}....Eb.zD..qY2.V4..du....7R.v..Pq.u.i.d#.kV....\..e.p1'.d..5...+(.s8..........b2wa.syAT...Ry+..k.P7T..qX3MrG+=..]5.....)T.oai........6..9.-#.....S...u..8....CQN....cU...mG.0.i(....;a....K.......!c.0....Cu.....M.>...f.HXr..'....7

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17688)
Category:	downloaded
Size (bytes):	18283
Entropy (8bit):	5.647651525005327
Encrypted:	false
SSDEEP:	384:xz0pAgPpP7gxzDQ8uXM1kEaTLl0BzTj9KL0jQpPBr1eaetrbWjowdFu0:QAk2OXpib9+0jgPBQaet+E8
MD5:	193FAF4CCBFF651AFBDAB44C730688E6
SHA1:	D0F7A7137497933524C9C1ED7CB2347BF2C0419B
SHA-256:	22C1D495AEEDE1C2B990E01BE9CC1C0623D0E479D48CC4D9BAAE7050925DD943
SHA-512:	BCC7AFFD07786235EBA5C39A9A2BECCBDF2E8A70C832E5718829EFC7D8407E5ECC993AD751EEDDFA5B8A98D99E6CA40CCDC1E97D6ECD22E607E58C486C86E5A1
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/IsHUla7t4cK5kOAb6cwcBiPQ5HnUjMTZuq5wUJJd2UM.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(F,Y){if((F=(Y=x.trustedTypes,null),!Y)\|\|!Y.createPolicy)return F;try{F=Y.createPolicy("bg",{createHTML:g,createScript:g,createScriptURL:g})}catch(U){x.console&&x.console.error(U.message)}return F},g=function(F){return F},x=this\|\|self;(0,eval)(function(F,Y){return(Y=f())&&1===F.eval(Y.createScript("1"))?function(U){return Y.createScript(U)}:function(U){return""+U}}(x)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Fh=function(Y,F,x,g){try{g=Y[((F\|0)+2)%3],Y[F]=(Y[F]\|0)-(Y[((F\|0)+1)%3]\|0)-(g\|0)^(1==F?g<<x:g>>>x)}catch(f){throw f;}},Y0=function(Y,F){return[function(){return Y},(F(function(x){x(Y)}),function(){})]},x0=function(Y,F){if(!(Y=(F=Q.trustedTypes,null),F)\|\|!F.createPolicy)return Y;try{Y=F.createPolicy("bg",{createHTML:UI,createScript:UI,createScriptURL:UI})}catch(x){Q.console&&Q.console.error(x.messa

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	3.7612657704003114
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HptOE9HhEyRHfHyY:YGKed2pHDO4ElhZyY
MD5:	980C16696A6C7FB6C8242B74F5EDF52A
SHA1:	872854FDCD64A81655D447293D1E96AD0AD1C0BA
SHA-256:	5B719538163FA24625A0742209D09A4481C7589E767D9EA8BCB16008035F681A
SHA-512:	66AEF5D9B0D7C5B4D3BD91C87AA035FB5EB797A35755DAE5B6324941581186EFC4CC038DC3C99B0C3C5AA0C48F38B2E3C7F2437F112985CD92648AE937BAD2D3
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"","stateName":"","continent":"NA"}

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10176
Entropy (8bit):	7.9833037703897185
Encrypted:	false
SSDEEP:	192:RKkpKiglhZ/21yL5im06T8MU1HUwxHbN0Cb0IyYg+kJ0f:Abzte1ygPht1jHhDYIe0f
MD5:	E8ACFA3FD4F566A6D823C45F52A4EF2F
SHA1:	0DEF8D2A1475C008D41A3F115A77DD44DA5C054D
SHA-256:	0C2D2BEE562F7781BB44F54CD20B7CE602FCF0C5911E06D1FE3337B61670A5CE
SHA-512:	D0FF5DD79634982C9334003E1B8C9EBC2C5FD1EEABBB23268CE058EF9AD8A65400656ABAD6A96D5A76142748CD0AE2E89D2211A2E5D7A5642212BBE202DE0466
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/78ca58c9b8094d2cb1722b2bbcd4a19c.jpeg
Preview:	RIFF.'..WEBPVP8 .'..........>Q .E#.!....8.....?.....?.?..#.E.W....<..?.o.z.......C..X.y..k.C.{R...X...?j.....P.hot.O@.{?.....p........`O.....0...+.'..dOJ..[._...V..)...<..[.U/j..<...U...a.v_'.y4EM..0.x..#p..B...zA...t_l.O.?....q;....h.~....)F.(6..l...'=W...5....J.....V....3.!....$..5K.'.A.qH....wpU..0....Y...A:..[O.Y...1........9. ....5.%h_.h.M....u.....s..:.r.o.?...]`:.....(............-...x.........d....y...]...3..u[..uS`............&\|..2.v.9.b<.... .F....V.nu\....b......B..;....1\|.7....CR..s.......th..ZI....9.....2(.>.;........I.c.)...!k.(`9...d/@.81....j.e. c..m+@....lJl...G....e,.l.........d..,`....s..W.kh3..a...v.\|....G...t....Ox8F...m,.X........T^?.....Q5..g.z.....DFH`.W..pD.I......([.nbr..%.A..L$P-]Z.n.........D}a:^..2.....+.y.t.Zo)0..U....o....e..$.S7._.z.#..p...7.v.=..z.E..z./.?.b..........a.,`K.................V..p..\@.#,ru=.q2/..!.t.5.<}y=.z..}r...h.n.n]...;...c].W2..L..&^\|./.\.C.o..d......Y(..].W..I..1.p.'.....*..Z....

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	11152
Entropy (8bit):	7.984611250367353
Encrypted:	false
SSDEEP:	192:mHvMjRhZ+RA5KVaEL2GLK3N/X9gO7B6djEaTjyCLjcRhfSF9+g0rKEArg:mY6A5FjGCX9gO7B6djEaT+CLjcuyFrKM
MD5:	D85CFFC36DC79CA37AC2447D3CC9F9CF
SHA1:	131BCE0F9185E8911740AD00B612CD4FDD24E1F3
SHA-256:	2A455AA7A0363EB77BF22B01AC9E64A54B678983954C4909C7A3651A334E59F4
SHA-512:	B6EFAF19313DD0BAAD9D8ECC43B2729A4D2B8F10DAAF9EC9C2CABF666EFA156C0337668B2951733FA9173D3C8531B39827A73A9A61BCD08021E098C6D2C3DAC1
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/content/runaway-children-story_270x170%20jpg.jpg?h=170&iar=0&w=270&hash=3136CC6D5BF8B0C93796551094BA84B0
Preview:	RIFF.+..WEBPVP8 \|+..p........>Q .D..!...P8....d.9U..~.0..vq.!..x...6.M...).i...fq?........<5.._.......\|...S.#.?..<ng.........<.'......^.=3},...(M..]........@.2....]..\|....>V....8o.j}.".o..........`i..E..0.Z...v..."...m..}.w.w~...<.q1...p.J[.i.N......eh.#....F..^E4..w.L...(......6...&.O,...z....]..L..>.\|.VV..Ak..D.{..d4T.ql.F...m.x..G..,.L....hw~T.<.Xe....d)5....M$ ....P...G....9.:.("......6.{`..[..0.vVA./..2h...7t.s.....U.`WY%......TW#vfsl...J.<.\|......M....a..{.z.82...q..........r..J.T..?$x........<.v).......(........G...{.C.....&k3.{$D.Q...G.}.O....Ul....a.A.......'..}...E....p.tX<....)P...&T.`;.8.An.?..<.....4.-\|c^..L.9tv.S..,E..Qy.lh.q...^d..QZ.......Z..}..U..P..^LG...G.........u.....~..$....;..oA...I'.2......2....37.=0.>.k....?D.<..U.d..../....b....$...J.@;A.t.~.z..8.i..-B.Z.".K.H..`..1......g.R.".G............;HY...#>.{A..".N.A.(L7..~..9KS8..NtKW9.W....s.4.>..q.=.z..x.>............izV..i..lN>K../X."m.......-X..q....".'.....2

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	4667
Entropy (8bit):	4.915698154241733
Encrypted:	false
SSDEEP:	96:bpyIW40w4IKL26upiFpFEKxYa6AyLHGjCX9jEjJjkW1h4M+F:Zp4IotSiFpZ6vjyc0JfiMc
MD5:	F34E9430A752D657C06A4975F24BB8D2
SHA1:	77D183E29F78AE4F0320B0E01D4956D0BE09C5DD
SHA-256:	FE3AD3EE14FCE4FB0F916C8BD738400A87BA593B9DF3AF972C3003825A67CB89
SHA-512:	483E5A453CCE2B4258A3870060937390A7CEE50D944A8E01D19EDA3276F4112D46C31395AEC4315383C976EFB418F15C899E4C523B66B66E7387F2E644AED389
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018e1e22-56c1-7b07-8583-fd7fa5fbedbf","Name":"US Data Privacy Acts","Countries":[],"States":{"us":["ca","va"]},"LanguageSwitcherPlaceholder":{"de":"de","ru":"ru","en-US":"en-US","pt":"pt","ko":"ko","it":"it","fr":"fr","zh-CN":"zh-CN","es":"es","cs":"cs","zh-Hans":"zh-Hans","default":"en","vi":"vi","ja":"ja","id":"id","pl":"pl","tr":"tr","en-GB":"en-GB","nl":"nl"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10496
Entropy (8bit):	7.982095994596028
Encrypted:	false
SSDEEP:	192:gyjecrPtrd3fQbvC1LjCSDX+9YScGOL9nTet9A1jaZG97pqrKTsEghYrDwD+Ry:nrztrd4b61KmuafLVTGm2MVqrKTrghYy
MD5:	C73625F40089CA451BE33FA77382F7E4
SHA1:	D103E52624485649347DF243FF73A24B0AC26708
SHA-256:	067951AC62617939A3719D1FDE586E6E726124872658FA18DD4F8870AACF06AB
SHA-512:	1B2DD6F86207B1499EC90F15A4457440FD885725F36FD702701D615A0D02E437BDFF5E51D843AC53B625219DB04C8AB1046F14CF956C0DF4C8A3D96330540FFA
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/government/5%20public%20sector%202024/5%20top%20threat%2012924%20jpg.jpg?h=170&iar=0&w=270&hash=282500ABCD598FC9D9CC84300150B53F
Preview:	RIFF.(..WEBPVP8 .(..........>Q$.E#.!.K.88...o.P.6.y.d..f....././.O.....D...?..o..>...~.{......5.w.?.o.....>....=........1.....o....................(.^R.$jM.~r....~......-....G..u.N@..t...?...(...~.a..'4..lH.,z.:.rQ.@../..>.bk.f..;\>W,.=....;z~.....&.....Dp....=G ..a.".(/.z3.o...5..3'H...v@.....h..X.H...S..\|.S$..s2....D...}&9B`\...L.....(U.m......k..c'.-.H.!...I....k.4..NDS".D.G...=e.S.U....H.r..dZ.i8z....]....s....)M.j.,.swy.._.w..iHB.r...B...[^g'.cP..j.EP..=..7.y.0c/}..N.}...%..t.uJg'$+(.E.K!.s3.Aa....4N..Oe.y..4....N..=.V)e....+.e...`...)5,...I...{.....r?..<./."I6{...^.........U..hAH..~.u..A@6...V.%.....X.1....E.Dt.......v.T...r'Vf$..^.~n<B..9.#}...y...#.n..."..l.s..<>j...0...Va5Y...;=..:....Qn....:....e#T!.d....imy`~.p.\.p.b.*.........f..P...{....ybZ.P..G.....U............U.... .).}{$..`X.5...TMR.....&]..N.YmZ{.1......R.\.U.e.`......E-[..bvOH.(...cQ.l.x..."........n...y.2..Q.o.s..e..>w."l}y.>...-iJT.{iX.?A.f..^5..K..j.....

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 12 x 222, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1541
Entropy (8bit):	7.09334702908159
Encrypted:	false
SSDEEP:	24:Jy1htZdWwjx82lY2T3pHEVYny3yJ3VWeSQGbRYnqQ60O7eqe6lPDq:JwqNn2S2yiJ38dQERYqJxlP+
MD5:	0014E62A387F62A6F809A8B1D06C46D4
SHA1:	5C43BF6B94AB935B8EB3D0F208899659CB3E76D6
SHA-256:	B6A8D9080DC845FEFAF0017220FE212C7285186826E34914CA0FD355061C32FB
SHA-512:	AEBD42BA5760994CECCDACF0AEF0111EAAB00C5882FB82130B7C5263278F1BE81CF882367D0CC61724AFBC2A1A0E7E930425CEBAAE66093F619CBE4B24A486FD
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Content/Images/Icons/remove.png
Preview:	.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:09650A70337511E48A76BF4B435C1388" xmpMM:DocumentID="xmp.did:09650A71337511E48A76BF4B435C1388"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:09650A6E337511E48A76BF4B435C1388" stRef:documentID="xmp.did:09650A6F337511E48A76BF4B435C1388"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>{1R,...yIDATx..=..Q...UaaE...V...@D...EE.B.t..XZH..V....N....".E....VH#..)..e..(B......+3.Dg1.*.{.0o.o..8.v.e...%..

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1020 x 267, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	20560
Entropy (8bit):	7.865105122268418
Encrypted:	false
SSDEEP:	384:/9sP+CKx29QhUKOFmIX/u9x/yi1E03x6Mlq88t8keYqIz9sjN6NyITIyGjpLtxMZ:VsP+709vHmIX2rQ0QEq18Yhz96NRBLOT
MD5:	50504613EF1C5DCB31D45A16A359B04D
SHA1:	4270F6FACBB2DA9CA02F9D1051A8832F57218C0F
SHA-256:	3D6E0A3A53CB1A740DEA6AE49CD5DC573274877947D8E2E36A1AE17147DDA7FE
SHA-512:	BDCF23AB8D4966C0DC961C5D51B2109221A5B11AA9CAE35AC726121C1F3EED0EA4CB5002A8D9DD7AFA77F7C202FA4BC64C2C9AD3CE8FB69989B970161DD16805
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/018e1e11-08a1-7636-85ca-4577d898aaa6/7e637ca4-577a-48f6-bdf8-17957e2bfcc4/brightmine-logo.png
Preview:	.PNG........IHDR.............d..s....sRGB.........gAMA......a.....pHYs..........o.d..O.IDATx^.+p........x```....a...;.B...I..a`.a.a...a....}....z...I#.\|_._....i4...h5.......p..}....p....O.............g.........%b&.Tt#f.aW........C.......@...............C.......@n....e#.w.y."9..............{1.W.Y..p............).).b..Z...l.................Uc.Z...V............?.!O-...........$@L.o..R.Y..~.......x.4.g.sKL..U..........0...}.."...........fo&m...:.....@...c.{.....ye..........q....n'.i{...g.....^........4m.V.ar4k_.........U..~..........0N&.?.~4......k\|Q.y......k5..x....MN)k.W%...U......`.\|.....S..0.m.c.,..t.%...w..\|. ...}....7b./<.]....VM.......xf.g....~.=.....r5..,.W...r..-.H....u..[U........\|4..._.....c..~.....v.......4m_.....w.v!...\ZU.......!f...........`.........f./..NGGUL..,.n.U.....X...J.l....I..3.H...U......`w....W5p..v...]>..p>..F5,+X2.:K........m..\..<....2.:..y.h...5.Yu.......<N.7s%..W.#.HO../...e.3..a.<.0..*....G.....=.L....\.]...........

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (32031)
Category:	downloaded
Size (bytes):	221441
Entropy (8bit):	5.408943237502533
Encrypted:	false
SSDEEP:	3072:ldSsOpAmUT3etLYzDKPtqZJpmkOPLEuAznzEHGsIILHT0:lErpAmUzet2D+tkJ5OIuAcIIM
MD5:	FC01FFA6055A733DFB55860BFA53BB2B
SHA1:	8EABEFF279135E70B98E40BE873CEEF752D92A2C
SHA-256:	40FA3C35B9F296B5EDBB6DAB5792B23CE68ADC3EB916CEDA27B58D35E3FB4D7F
SHA-512:	74135BC38C36772C89A7B3A890F1FA3FE46870C44A4B12933FF1FAFF6448D4934FB287663A5F23AA018F43B5A3E7189BFC004A85F6998838A88E2F754497F0D1
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/article.min.js?v=6951
Preview:	function Animator(){this.Animate=function(a,b,c){if("undefined"!=typeof a&&null!==a&&a.length>0){b=b\|\|0;var d=a.offset().top-b;$("html,body").stop().animate({scrollTop:d.toString()},500,c)}}}function BrowserHistory(){this.addHash=function(a,b){if("undefined"!=typeof a&&null!==a&&a.length>0)if(history.pushState)history.pushState(null,null,"#"+b);else{var c=$(a).attr("id");$(a).removeAttr("id"),window.location.hash=b,$(a).attr("id",c)}}}function ArticleUrl(a){var b=function(a){return a.indexOf("_openArticles=")<0};this.getPageSectionIdToOpen=function(){var c=a.split("#"),d=c[1];return d&&b(d)?d:""},this.hasPageSectionToOpen=function(){var c=a.split("#"),d=c[1];return!!d&&b(d)}}function ArticlesModel(a){var b=this;b.articleExpansionState=a\|\|{},b.add=function(a,c){b.articleExpansionState[a]=c},b.update=function(a){b.articleExpansionState[a]=!b.articleExpansionState[a]},b.setExpanded=function(a){b.articleExpansionState[a]=!0},b.getIsExpandedById=function(a){return b.articleExpansionState[a]

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	19220
Entropy (8bit):	7.939907924603328
Encrypted:	false
SSDEEP:	384:OXfBGUJY6ttqPXxrfR2gxYOAyaTjkfIo91G2jyrxCV35+oxoyHoeYbULR:aBo6tapf5Yxy6kRjGPkA7DfbMR
MD5:	DE033BC071CC99B3656095FD351616E1
SHA1:	CB9BC78CBB278AB0D9E94C4AFB5B5ECFACD0E3E0
SHA-256:	391967C53BDAFD0F05D5AB7A4E0B0C038DC18569864C29BE885CBF7BF2BB1AF6
SHA-512:	1476E6A41760F8160C09D4134E6D0BA36884DA192614A04936D2F31E469CA9978417EC0488B202610BF57A44F38A066BB37619A75F936A60B0484704B7B2EFEE
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."........................................K.........................!..1A"Qa..q..#2BR..$br..3C...45Ss...ct....DU....................................<........................!.1AQ."aq....2B...#3R...Cbr..$.Dd.............?......u........2...:[...>....a.q....w...Q......~.P?.8.....w.`...&

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31928)
Category:	downloaded
Size (bytes):	481310
Entropy (8bit):	5.275734281562004
Encrypted:	false
SSDEEP:	6144:c2C4OQyu3p/yVqHPpQ1E54XfgGJNSuYF8RkL+xbI+:c2CIax1YkJNSuY+dI+
MD5:	33383E71A890E223FF91888FDA04B697
SHA1:	7DB2CE9560225162B2AC32AAC83CAFBADFE8B467
SHA-256:	2E6AA0983471E8E4796C3BCD2FA728CEE6AE36B1794E99705311756DF013CFAC
SHA-512:	4DBAE7119F082CB6C0F68A1AE7DAE3184663560F693A7DF3567A68786B920BA0072BEDACA56B661F0258BEA9ACD1BFC955C008948C02366F090202C69D5D1B29
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.js?v=638484963592761859
Preview:	/! instantsearch.js 1.12.1 \| . Algolia Inc. and other contributors; Licensed MIT \| github.com/algolia/instantsearch.js /.!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define([],t):"object"==typeof exports?exports.instantsearch=t():e.instantsearch=t()}(this,function(){return function(e){function t(r){if(n[r])return n[r].exports;var o=n[r]={exports:{},id:r,loaded:!1};return e[r].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="",t(0)}([function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}var o=n(1),i=r(o);e.exports=i.default},function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}Object.defineProperty(t,"__esModule",{value:!0}),n(2),n(3);var o=n(4),i=r(o),a=n(5),s=r(a),u=n(37),c=r(u),l=n(498),f=r(l),p=n(748),d=r(p),h=n(758),v=r(h),m=n(763),g=r(m),y=n(768),b=r(y),_=n(772),x=r(_),w=n(775),C=r(w),P=n(779),R=r(P),E=n(781),j=r(E

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 12, 2-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	164
Entropy (8bit):	5.678380797390933
Encrypted:	false
SSDEEP:	3:yionv//thPlKll0KgAfaillyc4LshCxGVHBUlcVgrzDD7gAHlMhZ3igcph/ljp:6v/lhPwlGhAfVKc8sh4GP8cYzkAFsZiz
MD5:	1CDF4C2465A291ADFBD9D29CBDADBD10
SHA1:	F68E220AF8FC07000AEDCAF343F86C3D7577AA68
SHA-256:	542FA7B69F6F7072C558FB50F4C95FCE9BD1AAEC6708A882F8B1404992F6FB3A
SHA-512:	D33DB4E2B3D09240068996BA8EF20B4451E6D02BA7E6FE549FB74666B293208BAB95BCFE25200FD12FF1F22F0E9DB3601DCCDA426CA4F00A901580680AEFDE39
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............\|./....PLTE.....'. ). ).<Mn....tRNS..W..<`....CIDAT.......!..,.J.cd.......DF`?F.\.N.i`..v...E.IZ..%b.)....G\|.......0?%.....IEND.B`.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (63497), with no line terminators
Category:	downloaded
Size (bytes):	63499
Entropy (8bit):	4.966515124466534
Encrypted:	false
SSDEEP:	384:bzuwEkSLqYn20BIgLoliBOXaOTCJ2jvb2xLt6s28HrWK89GfL0/TfXRt8pvtW2/l:nKJzVBiu4QUp6X
MD5:	4B729D05BBABB150AF7CDDADA179C931
SHA1:	1672C98704836A246A11461ADD3A762E5E58E08E
SHA-256:	C5095BFBE2F81633E8B527D16A82E22CEEF3EF33786BF0924909B87EBAAEC27F
SHA-512:	FC0AC198E6FF0EF362DF863D5908E902C5DCFB0383F891C8BFC6E97D6D2728943B826758B1DC06B50771947476CC390620D50D42C5C787A61EA299182A2E23E7
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/article.min.css?v=6951
Preview:	@charset "UTF-8";ul.tree{background-color:green}.no-script .dynatree ul ul{margin-top:12px}ul.dynatree-container{font-size:10pt;white-space:nowrap;padding:3px;margin:0;background-color:#fff;overflow:auto;height:100%}ul.dynatree-container ul{padding:0 0 0 27px;margin:0}ul.dynatree-container li{list-style-image:none;list-style-position:outside;list-style-type:none;-moz-background-clip:border;-moz-background-inline-policy:continuous;-moz-background-origin:padding;background-attachment:scroll;background-color:transparent;background-position:0 0;background-repeat:repeat-y;background-image:url(../Content/Css/Article/dynatree/vline.gif);margin:0;padding:0}ul.dynatree-container li.dynatree-lastsib{background-image:none}ul.dynatree-no-connector>li{background-image:none}.ui-dynatree-disabled ul.dynatree-container{opacity:.5;background-color:silver}#dynatree-drop-marker,span.dynatree-checkbox,span.dynatree-connector,span.dynatree-drag-helper-img,span.dynatree-empty,span.dynatree-expander,span.dyn

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	84177
Entropy (8bit):	7.977835605519002
Encrypted:	false
SSDEEP:	1536:JXGhQ0eC0TobxHud1lk899mbdx1Sp36Bk5sBVTWmzmKgihOMqCTW8:NweC06mj99i1SYBku3rgqOMq2W8
MD5:	5A78D97B3DF083049A1637B1BF332571
SHA1:	5E487EF1968E02DFDF0BED119ACA1E68D96DF359
SHA-256:	32F9DC43B0C58727F33CA0F51A1165DEEED4626F930D274A294790F7968AEFA3
SHA-512:	2CF65D872C54F0124B6EBCBC172B2917562DA5F64C3C514E77B1585C079F2BA7536935DCDA126A8F549F28E36921F3FE730AD80CB3B1B3DB6A51E1E219AA0B8E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx...Y.%Ir..KD.z..U.Zz_.....3..H."..d.3>.Q.Nf2=.A.!.$H ...$8.......[w=Kn...z.[.i.LOLK....8..y.......1.N......8&.T.I5.....F$.Q..f.`F.....X......"....A$.K...r.#t.TUe.4.`.....("........~3".c......0I.<}........sJ."2'."..'...\.$O..) .............a...9....R../.W...W... ... ....w=3#...._<.ZJ&.hff.z.Y..^..O.....i .....{CD.o}......@>8F.)...:.%D..../.c....7.....a.G.@@..."........WU.sJ...#.A......C<:;..!@R13.....n.UK.L..7'g..."y.........3..r..'..x....T.ON...w.= ......T...cGL`..L..................@...... ...!....U.Q.....I..@.....Z6..`.. ...`.\./..N..?.>.......y/...)..f.E"SU5v.(.H....p...E.E.B..;v&.M.................?.".........i....EX...L...v...+...2.!d.""bD...8..4..wLHH.D`.R....c.Hl....8.>.1."!s?...h.&B$"...&..wn..j..1..:>...3..8..C.f..m..T.....#.......l.A.........z.<..$..v..h.n..w]..j....zy....U3.n.E[.%..c..m..W..4y..4.8Mc...QV@.\.f.F....3QQ.._..9{&BX7M[....J..!..S*..........f...

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	104
Entropy (8bit):	6.097027338312603
Encrypted:	false
SSDEEP:	3:QF1Zrd1UeVTROxHRqrQx1jL52l4cg21Uln:QF1ZI4FO1RqrglNBR2Gln
MD5:	F3DBCB03175C84D9E5558AB76B4D2AAA
SHA1:	9DEA1910F4EE742F8EA9FC2F6A5713F578879F7D
SHA-256:	054EF3D3EAFF70397A424ACA4C5034A652A1CFD959E22A9C82B17D35160705AC
SHA-512:	3F9551A4D26447E9803634CB61F6C969586F2C1B33654FB74DCE6CFFEB5190EC98A87B024F2D1E751D36D48223D8471BEE63D12D35EBB98776F67F61F4BEAD1B
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/icons/icon_filter%20png.png?h=20&iar=0&w=24&hash=AE854452B53B709A96D69C06C51A76EC
Preview:	RIFF`...WEBPVP8LS.../....' .A..........k. !........GL....m#u....1X..S...G........}ON..e...0<.$.fU..7.

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.9889835948335506
Encrypted:	false
SSDEEP:	3:CUkxl7/lHh/:slf/
MD5:	B4491705564909DA7F9EAF749DBBFBB1
SHA1:	279315D507855C6A4351E1E2C2F39DD9CD2FCCD8
SHA-256:	4E0705327480AD2323CB03D9C450FFCAE4A98BF3A5382FA0C7882145ED620E49
SHA-512:	B8D82D64EC656C63570B82215564929ADAD167E61643FD72283B94F3E448EF8AB0AD42202F3537A0DA89960BBDC69498608FC6EC89502C6C338B6226C8BF5E14
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316), with no line terminators
Category:	downloaded
Size (bytes):	2316
Entropy (8bit):	5.855730218887558
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08F3FFFQ9XhK3L6:wsbSUtJfxrqLWWWdV6j1R3p1G
MD5:	76DA034BC3A4058198BADCCF25046DA7
SHA1:	85F209FAE107DCE7118217B41A8DDF023988BD92
SHA-256:	804A5113DCDAD707838A1680D7E49038EADAAE3770AC0C6DAE258DA3652C533E
SHA-512:	C31BC09DFEC4E8C8B2DB055F17A8740AECD8A227E29435784EC7D99A60EF3D5EF7569F6F430CE162EC28A00E2ADB50C1AE7333B5450A5E02B4B0E8B8BD1265AD
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/938539671/?random=1713460598597&cv=11&fst=1713460598597&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1048135065?random=1713460611085&cv=11&fst=1713460611085&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	932
Entropy (8bit):	5.833329452285003
Encrypted:	false
SSDEEP:	24:Jqy1he91Wwjx82lY2T3ouVrs0jyJ3Vr4K0qGEntj9:JqwqQNn2xCJ3NFj9
MD5:	5D6001D74CCA9715007F0E1955B39A1C
SHA1:	563F127CA54E3A165326C86E1BD124F6C826F79C
SHA-256:	A00361F25FC1A89A64C93C01210CFDC2A73279B3B1B05D9091A9C5CD6B086E1D
SHA-512:	B6286E6E18148D1AC0EA5929A2CE9159AD5BB76791158CE33AC99E37DF79B0D92DCF012D0A6EA854E1D24BBA665BEAADDE7F652C592EF97C8746CC4AB72EEFB7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............o&.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4FDC45EDEA2E11E2870C8AB07102A421" xmpMM:DocumentID="xmp.did:4FDC45EEEA2E11E2870C8AB07102A421"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4FDC45EBEA2E11E2870C8AB07102A421" stRef:documentID="xmp.did:4FDC45ECEA2E11E2870C8AB07102A421"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6.GZ....IDATx.b....k.4...P(..`......K5o....IEND.B`.

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (9565), with no line terminators
Category:	downloaded
Size (bytes):	9567
Entropy (8bit):	4.69946446041603
Encrypted:	false
SSDEEP:	192:UYAe7hO+TXJIdkdkd0dNXdPdEcB3IVpVmoSfPlcVtovryF5v0ULudAH1pkgg3LZ3:j3B9V
MD5:	54C7C4A1B64206D885E0D3271ACE0013
SHA1:	F5B181127B0246B08A5D9755B960C5193FBFEB60
SHA-256:	58A330E2770081928B49EF8335E10AE135CBF449AFF2CCF9D9B474B9870E5345
SHA-512:	D922DA42882F29A9015188405CAD299A6BD18D071348BA36C45DD7EDF6D2436070C884C58D49266DB9E7EDCB358BE1345D70F9BA1B3181DE31CF74FB143FB24A
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/print.css?v=6951
Preview:	@charset "UTF-8";body{background:0 0}.xhrob-global-header{display:none}.xhr-header{display:none}.xhr-print-header{display:block}.xhr-print-header h2{margin:0;padding:0;border:0 none}.xhr-footer-container{width:100%}.xhr-footer-container .xhr-footer{display:none}.xhr-print-footer{display:block;border-top:1px solid #d1d1d1}.xhr-section-container{width:100%;padding:0}.page-header{display:none}.page-body{overflow:hidden;margin-bottom:10px}.article-checklist li{list-style-type:none}.article-checklist li:before{content:".";padding-right:10px}ul{padding-left:2em}ul li{list-style:disc outside none;background:transparent none}.page-article{width:auto}.page-article .article-content-container #articleContent.article-body{width:auto}.page-article .article-content-container #articleContent.article-body span.highlight{opacity:1!important}.page-article .article-content-container #articleContent.article-body dd,.page-article .article-content-container #articleContent.article-body dt,.page-article .a

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (53041), with no line terminators
Category:	downloaded
Size (bytes):	53041
Entropy (8bit):	5.273849295784245
Encrypted:	false
SSDEEP:	1536:7Twik4bTc3nTJM7XaGdeJ8nZkSaN5UGhANgvpqioQv1:3O4bcu7FkVbpf9v1
MD5:	BC9DEE920BBC0D61A9B3130E97B5A7F6
SHA1:	6DD6A5140F836A34C410D638A53BB564900F6F63
SHA-256:	F61F91DBE5A83EF1B2E592723B97266CDF4AB228B2C4D194A569A5A39D08590F
SHA-512:	6935F3F799AF04C8F43881DCAC9FC1F1F66BD1E9A52C28A8911B94681AD61E2E2F30B09735B0F22E34E6AD36F15497867E5EE49490A0F33AD84F4E8CB88CE8BB
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/sharedKnockoutJs.min.js?v=2.0.769
Preview:	!function(Re){var e,Ie=this\|\|(0,eval)("this"),Fe=Ie.document,Le=Ie.navigator,qe=Ie.jQuery,Ve=Ie.JSON;e=function(e,R){function t(e,n){return(null===e\|\|typeof e in P)&&e===n}function I(e,n){var t;return function(){t=t\|\|setTimeout(function(){t=Re,e()},n)}}function F(e,n){var t;return function(){clearTimeout(t),t=setTimeout(e,n)}}function n(e,c,s,l){S.d[e]={init:function(a,r,e,n,o){var i,u;return S.s(function(){var e=S.a.c(r()),n=!s!=!e,t=!u;(t\|\|c\|\|n!==i)&&(t&&S.Y.la()&&(u=S.a.ia(S.f.childNodes(a),!0)),n?(t\|\|S.f.T(a,S.a.ia(u)),S.Ca(l?l(o,e):o,a)):S.f.ja(a),i=n)},null,{o:a}),{controlsDescendantBindings:!0}}},S.h.ha[e]=!1,S.f.Q[e]=!0}var r,L,i,a,S=void 0!==e?e:{};function f(e,n){for(var t in e)e.hasOwnProperty(t)&&n(t,e[t])}function q(e,n){if(n)for(var t in n)n.hasOwnProperty(t)&&(e[t]=n[t]);return e}function o(e,n){return e.__proto__=n,e}S.b=function(e,n){for(var t=e.split("."),a=S,r=0;r<t.length-1;r++)a=a[t[r]];a[t[t.length-1]]=n},S.A=function(e,n,t){e[n]=t},S.version="3.2.0",S.b("version"

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14796
Entropy (8bit):	7.983400172211298
Encrypted:	false
SSDEEP:	384:evSjWZicF6QJNeSary5XDT385KDGVpxc/bnHFzbX:ESjWbQOlam5X/4p2bHFvX
MD5:	9593D9552E5A71C698E68D46FE61BEFB
SHA1:	9A524E72158ADFD1C165C74C3F01896EF4A5A728
SHA-256:	D9824A827CDBF6BD58B58CD51605FEDE2E19191B0088AA6171EFDD8398F0592D
SHA-512:	DB7F687F95B501B67B382AFBF955D8C7DFEF44B420D2B2D1B9E22513BF89F6F28F1F58C99CD00906BD4AB47CB3F9EC589C834D7C818384AD366DD33E595394F7
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/corporate/our%20stories/traffic270%20170%20png.png?h=170&iar=0&w=270&hash=462A40E91F079D87E5F29BC8A96AC035
Preview:	RIFF.9..WEBPVP8L.9../.A.M8l#)..{.z.@....N.......[].`...7...rF...........3...=...\|.Qh.....d.Z.......Q`..{C.\|\...4...RC...vVU...XM.v.T.B-d.N..@M.....F..I.V...62...O{.G.$E..H+......[h..<f..q#I...G..y......O...B.B1.l.PE9.n...........E\|.J_g..t...#...J.,m. ..\\%b.+.-..... ......n.gsl....."]O.lN......x.t..3......p4......T.`.H.z...P..]..8.H...-[q.<...j....T.0.Xx..C/...A.@x...]NJ...Y.u....gVxg!%.=_..JMH.'..Y..&d....,......C...%..K...6.......G "&..R.F.....P............. Sj...4^..>h.U..s....L.,...v..e..033333333,3..m.D.Zj..}./.s.......Z....:.,c..tjAav.!...fP.I:L.N-....A.9.aR..A...\..$.."I.DD..= 3.g......O..vosZj(..w3S.$..#I...f.F.<gv.QZ.g.`.{.ZvOeV.........).,...U..kff...'..Q\|.'X?.333/33..0.s.j....%f.R.2....V./.Fe.VJ..QJ.u.[.H....jyK.m....3.QI.V......03Sh..cv...om.m..Rnc.6i.,}..m ..L....X...9.m.m.J).>.Zk..;.{...l.H..3.1ZM1..8.pB.^...pG.....h..&.Bs.,..DP....JLz...N.....tE...I....p..i."v.Nnx.`n.x2.C.....M......v.].s.r7`....L...h.~\|.@...`."..C..-<....xy{.

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1601), with no line terminators
Category:	downloaded
Size (bytes):	1601
Entropy (8bit):	5.879903371973777
Encrypted:	false
SSDEEP:	48:VKEAhikKonjfcvtTARXx/g/1/OXLrwUnG:fAQVqMSNY2bsuG
MD5:	545F15A2B25162C5712D656D65795E4A
SHA1:	842BED403565B1349DAA57561E71FBBD50F1A2A4
SHA-256:	460F9CC6D55F9B0779F5E740F4A7BAE26E7AE02474608DD44362CBCD218C1787
SHA-512:	082C8B649856A08824D37BB850DEC1512A86AA3F43BD3AEB07A162FA95A3CDCBB085838FE8084621290ECC1D12FC863FEC7E19EAE5FA175A5315E402F125FBA3
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/api.js?onload=onRecaptchaApiLoaded&render=explicit&hl=en&v=638484955464930367
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.recaptcha.net/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');(cfg['onload']=cfg['onload']\|\|[]).push('onRecaptchaApiLoaded');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A89JPrWYXvEpNQ/xE+PjjlGJiBu/L2GfQcplC/QkDJOS1fBoX5Q4/HLfT1dXpD1td7C2peXE3bSCJiYdwoFcNgQAAACSeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48A

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3325
Entropy (8bit):	4.3532506210268105
Encrypted:	false
SSDEEP:	48:ZKiaYfEJG1mmjmvI1oKhmScP67PcIaiNW:Z1aYfEE1mmjoIaINNW
MD5:	9A938BDE48F6BEFE9253E0E3BB735F41
SHA1:	84980BA97A921828F7B03E4F3907218B80568972
SHA-256:	D8CD08A6DCE1FA1B1A02C9384C296D5E71E8E982B5C5109635E30DA93CA2582E
SHA-512:	FDE523A0E90BEF48C64AAB4A19B0ECBAF625DAA928135091B8DD0504A4DF32DCFAB3E4A501D35E73BB82629D1BED72F01678544DA6CD9E97CB09C5CCF4B9AFA4
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/js/app/login-page.js
Preview:	var LoginPage;..(function (LoginPage) {.. var ViewModel = /** @class */ (function () {.. function ViewModel(modelData, standardLoginFormId, ukFedFormId, idSuffix) {.. var _this = this;.. if (standardLoginFormId === void 0) { standardLoginFormId = 'standardLoginForm'; }.. if (ukFedFormId === void 0) { ukFedFormId = 'ukFedForm'; }.. if (idSuffix === void 0) { idSuffix = '-suffix'; }.. this.standardLoginFormId = standardLoginFormId;.. this.ukFedFormId = ukFedFormId;.. this.idSuffix = idSuffix;.. this.checkHash = function () {.. switch (window.location.hash) {.. case '#' + _this.ukFedFormId:.. _this.showUkFederationLoginForm();.. break;.. case '#' + _this.standardLoginFormId:.. _this.showStandardLoginForm();.. break;.. default:..

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/938539671?random=1713460611010&cv=11&fst=1713460611010&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 20, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	133
Entropy (8bit):	5.623996215569925
Encrypted:	false
SSDEEP:	3:yionv//thPlO/1lq1I6awnJDzllOAkx92GFuRjBTxybn1pdrZFQ9cVp:6v/lhPEtlq1I6awnd/9w29BTxyb1riEp
MD5:	59BEACDE33E957A0CE97B5D03BB29DA0
SHA1:	CA45EDDEB378F620EAF766536EAD07B94A88BAF3
SHA-256:	6EF5F6922EE7C527462F26FF7AFFA1EAB276524D70F6CB58D64B8D7E44A8CC7F
SHA-512:	AE44DA5F9668A65F04D4860A63EE113EE18BE2C47E25AA463B47FA9E41C11EBE438285A19AB9A6745D2C5A47441CD9494EF4D91600E4F21BEBF864F497BF3086
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............e......PLTE..$..............a....1IDAT..c .(!..A$...v..Q1.r.`..........B."(G...x..f...I99.....IEND.B`.

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5537), with no line terminators
Category:	downloaded
Size (bytes):	5537
Entropy (8bit):	4.855245180104327
Encrypted:	false
SSDEEP:	96:lTkzAzrHRr1TR7ul+RubN+RG9Ge3hNeRh4eGpVechoekhXePEDO4vTdx201R4dpH:h6Grxrb7eWyWG9GeRNeX4eiVeOoeWXe1
MD5:	614981FC011FC82812969822698F4C4C
SHA1:	BDBE180212F98130FD06EDB2E3AAE6DAE82022BB
SHA-256:	37D1241A2EB5FCFC85098DBAAEEDCD75330250E2FD27554162BA392773EBAF1A
SHA-512:	52E56193FFD22EDA5268A43287649321F1CF1CD82EC22D99FC0462A1EC2A4597B24B227461841328D8A51A8B28BDB00D9B31F0416B2AC113A3F6FB0DAF53A892
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/register-or-login.css?v=6951
Preview:	.login-details{margin-top:14px}.simple-pages .center-align-form{display:block;width:634px;margin:auto}.marketing-form{position:relative;padding-bottom:40px}.marketing-form .content-container{background:url(../Content/Images/Marketing/GetFreeTrialBackground.png) no-repeat scroll 0 0 transparent;padding:8px 30px;position:relative;display:block;background-size:100%;width:972px;margin:auto}.marketing-form .request-demo-content-container{background:url(../Content/Images/Marketing/GetFreeTrialBackground.png) no-repeat scroll 0 0 transparent;padding:8px 30px;position:relative;display:block;background-size:100%;width:972px;margin:auto}.marketing-form .request-demo-content-container.en-gb .form-background{background:transparent url(../Content/Images/Marketing/RequestDemoFormDecoration_GB.png) no-repeat top right}.marketing-form .request-demo-content-container.en-us .form-background{background:transparent url(../Content/Images/Marketing/RequestDemoFormDecoration_US.png) no-repeat top right}.mark

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	123686
Entropy (8bit):	7.99850506616667
Encrypted:	true
SSDEEP:	1536:iM5Er9lQIqY3a/UiVzU9PZNerlRb1YZQLYjL4C4VIaPs1xMMfT8G0nXAoet/4JLe:HvY3hiVYtGrmXL7taU13wG0nW/9N
MD5:	AEA9B56BADC66FE2470418EDBAD21CB0
SHA1:	52CDCE21611E842616629C3FA0F7E7F89EB996F4
SHA-256:	729AC7271D3FF3CED2B89B1EFFC15ED0F47F0C436CB64209B5403ACBF874D390
SHA-512:	86A953198F586617817C38D432CC1763E11BE179295B41D7ACE66B5133D04BF8387CA850F9EBFE94B18C69DD12A28A34636D44D2B584BBDB2315F8CECD70D551
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg
Preview:	RIFF....WEBPVP8 ....p>.......>Q .D..!&+v.....M..W..........h.......h.l...]..\Oq3.B.......s.g..Wa.k....................\|....i...W./........A.....C...........~......#........N.H.E........;...u=......}.#.+....oO...?.?.?...~........../...7..............u.3.........9.{..?..m.e............/......?....v..'...~1......G.?....\|....?...?.x.k............?.{!}.........;..........R.5...7.w........-......._..n......~.............R.Vdv...qK...q:`.%x..!....m\.;\|.wyV...`.kx......k9.L!.8..,gA(.}'.........z...g<Dt..c.[8.Ztr......u....n:.1x....s...-....Qq......K..A....s_...,{~.'.0..03.?..].....#.]...W....B.O.......v.(TF.<.h.,..z".\|S.d...9.9.w&!.:SI..{V......UZ)A.....L.Qp^.`..cm.....-r......K.....k...D.f>S.V5x.....j.82=..y...X.....J...zF!.}..9.....0~.....}...[.#.]5....P.XFvdu7..Y}.8....-.....9.4/.G......w..~.....j#.L.C...n.'.mL.', .......v.~J..nbH.N.>.$...d.L..:......S.NsF.{..xe= .TV..4..'..Qv........,<.&9../[...H.g..tQBfV.@.........qg...\|..@....u...-..fU.w.C..N.G..._..../

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	470679
Entropy (8bit):	5.262243398005138
Encrypted:	false
SSDEEP:	6144:yEwmDEVJ8SgTVfNGf4EIMJEtAcgVGRz1mA2R+CtG5e/B09gZDH1L3O+:PvPpXgVWeVdO+
MD5:	329D71AE0AF9C7A7E50E2E2D29E2947F
SHA1:	DC721A91C6A540CAB277A3FC07DF762DB2B37243
SHA-256:	79146EBBDEE86EE7A87C297FAA08D635C486B0C3D46B2E596626FB9E04AD2F86
SHA-512:	9851C389A562B3B5614E2A9355970AD6F6268E564A4241CD02465335691D1EBCA53DE84BBEBAFA40FC4971BEF88155495DF47891714B441B9039716884FE903C
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/lib/material/js/material-components-web.min.js
Preview:	!function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("material-components-web",[],e):"object"==typeof exports?exports.mdc=e():t.mdc=e()}(this,function(){return i={},r.m=n=[function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.MDCFoundation=void 0;var i=(Object.defineProperty(r,"cssClasses",{get:function(){return{}},enumerable:!1,configurable:!0}),Object.defineProperty(r,"strings",{get:function(){return{}},enumerable:!1,configurable:!0}),Object.defineProperty(r,"numbers",{get:function(){return{}},enumerable:!1,configurable:!0}),Object.defineProperty(r,"defaultAdapter",{get:function(){return{}},enumerable:!1,configurable:!0}),r.prototype.init=function(){},r.prototype.destroy=function(){},r);function r(t){void 0===t&&(t={}),this.adapter=t}e.MDCFoundation=i,e.default=i},function(t,e,n){"use strict";var r=this&&this.__read\|\|function(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator];i

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	11828
Entropy (8bit):	7.89759802561681
Encrypted:	false
SSDEEP:	192:q4rHiKeOkELB3DgNlFDG563aKhW110rDbUrsbk8v8YQqIQYcoAMfLb86ek:JrH31DWX30irDRkYM22TY7k
MD5:	166D8EF08A24BA228FE7EE4185C79F88
SHA1:	B9B18B6963D2A5AD83B7E70AC11CB1060641DDF0
SHA-256:	C9B54ECF92901A306ED4218E61E27C5DD5E352E0EE8F5CE4D6E56D204FF4B032
SHA-512:	0B26C4627F4FF7511BC6134792A0E47B039C080CE774922E3BBBD8F62B739E54D4D6B2BB892F7CD0F7B0CEC854F9615C85BB172F98A67ED5989BC2C415F4BEB5
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................D......................!...1.AQ."aq...2B..#R.......$3r.4C...SbdsET................................-.....................!.1A..Q"2aq.....3..#..............?...eV.#c......./;h....y....L...MaZ.f....4.Z.C..VPA>DCS....;.{..&...w.'.....^...`..t.d..u

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	204
Entropy (8bit):	6.830818280652615
Encrypted:	false
SSDEEP:	6:0/PZGl/KTQ/SiLA6qniFDR0g69feIahm31+LnSOeKTl:034l/KTQT6YRrxIahSGVp
MD5:	FB37819446046BF6670DCC7B8F16FAFD
SHA1:	602DE86B21F4E3B661C3EC63888E39037A3DF449
SHA-256:	E3EE346C9855FBE84DD357C72FFA0E52FDC7ACF0ADD6B770CF58058B0D5515C3
SHA-512:	C0A7B6C4EBE5CE5589A4E93DA9B7B16DAC9B6DA970278FA9455092E80111511EFF31FB4C7DE020C33CD87A2DA49E07ACD6F721BB946CBDFCD8F5E5E6622C0CD4
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/img/tag_icon.png
Preview:	RIFF....WEBPVP8L..../........$.....c...P.6......c..)n.II.}..1..D......`.*v.A.......\d.....4.k..BH.....!...1F..9..H.~J)...{..8 ...F...3..7...".O0I..3M.....o....1I.N.....2...IQ+...K.Y~.-.o..w......lX..

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (975)
Category:	downloaded
Size (bytes):	1122
Entropy (8bit):	5.314513482600312
Encrypted:	false
SSDEEP:	24:7aOSct/B8aO0DXkYZYvIWiHvMYM7MQM9kMYM5GNCBsHAJPJEJ:GO5t/BzO0zJOuGGHkN78M
MD5:	3CB5AD270077F954866C9B1B2BC29D99
SHA1:	4BC0C56124F28D221FC308CBA1B57793C91D4DCA
SHA-256:	EE7B3B04144BED4058CDF7FFDA23B0DED977419559C0CD04E709BFBF538C5213
SHA-512:	D3E4D5597AF4B188BAEA858D92D66934D8652F6EA5931B1D554E853A26F2AC038DC2564E75AA9117A644B2837DFB53E180E9B59E5D3A2EFE58B12FDDF1220569
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/c89af706acda/ae6034d4a157/09aeb3ccce2d/RC60594665c22743b6a49c7f53e0af736e-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/c89af706acda/ae6034d4a157/09aeb3ccce2d/RC60594665c22743b6a49c7f53e0af736e-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/c89af706acda/ae6034d4a157/09aeb3ccce2d/RC60594665c22743b6a49c7f53e0af736e-source.min.js', "function check_not_flags(){var e=[];for(i=0;i<services.length;i++)flags.indexOf(services[i])<0&&e.push(services[i]);return e}function apply_consent(e){0!=flags.length?(adobe.optIn.approve(flags,!0),0!=e().length&&(adobe.optIn.deny(e(),!0),console.log(\"OneTrust - Adobe - \"+e()+\" not consented\")),adobe.optIn.complete(),console.log(\"OneTrust - Adobe - \"+flags+\" consented\")):(adobe.optIn.deny(e(),!0),adobe.optIn.complete(),console.log(\"OneTrust - Adobe - \"+e()+\" not consented\")),flags.indexOf(\"target\")>-1&&flags.indexOf(\"aa\")<0&&console.log(\"Target consented but AA is not. Disabling Target.\")}var i,consent=\"One Trust Consent Configuration\",services=[\"ecid\",\"aa\",\"target\",\"aa

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14780, version 1.0
Category:	downloaded
Size (bytes):	14780
Entropy (8bit):	7.982338554645172
Encrypted:	false
SSDEEP:	384:y1eEXK7BfwOIT30DseNrOrBB3ZjaHg6vIXPSH:y1LXK9wjTGNFU3+gMIXPSH
MD5:	8DAE809192C44690275A3624133293E7
SHA1:	969C98C4D7EB00386EBBD61A63288972D138ECB8
SHA-256:	C3DE27B2CBD6DEDA629C9B442700CF54C0DDA74E494B1C75A57D822068A047F8
SHA-512:	66DDA9008B2E992E8EFB994470338CB0F0A1A17A474AE2CF6ABA12CA5F14A3E6F950446675A4AC5F28DF65FB8878CC000DE5767C1D107271B15826B83177B881
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ik4zwlxdu.woff2
Preview:	wOF2......9........l..9e.........................n..b....`..b.....~..d..6.$..D. ..j..4..v%.m......{..HD.q0.....i.i...?'.Cl..... .B.......Xv=...MO............'HB.s..?.....Zq+..M3KBbw.0.a......e.....$....l.....<...._{..NV.....n.Uv..'....%!.`.h0.Q.7:...}k'n:<.....9.Q....>Y.)...X.O7.}7{kW..z...p....?`..~...X.Q..Q3..d.F..........HDX.%J Cc.ihf.........0/.Q.W&5<.zR.>.;.3!.K./.B>....9.'.0W......=t.b...G..8ZP.-...7...Vf.......+J..W..V..9.+Y7.\|...L.E0HB.......~o.6.eS7V..Vv...]...R..Ly.R......f..T.@..m..\]....?..;+..z'L5P.43._.\|....i.(m..3T.O.... .\....?...;...Z..skz...+.%....._.,..uh... 4...'...j.F..[Iu{.C.A.....v..W{d..0.:x.=Pf..1..b'............Ah...D..c..{.Gd./........!........."AD......E..D.L.>..B..`...0.......0.F.!C(&.P\.!..K.....`.U..(.4..V..."HW.!=..@........A........s..[..@..b....h.......1.l..Mj........6...s.Zz......k.X.V....9.H \|.<)..'O^.qbZ.M...}...Q....I9......w.P7.o..~..(../....I5.P.C:.1......j=....xU...).rt/Q...v...4i..'....px.:....ip.>-

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	959
Entropy (8bit):	5.357783166433538
Encrypted:	false
SSDEEP:	12:TMHdwcWi/nzVc/KYf3UaNjUHfaFjhdxEVlHTr5d/3TG/L/c3d/CKpI8zcLeex3nP:2dGA6LfEyjUSFlOQrgYzxpRKed
MD5:	E26A259CC582AFA6C04FBC4E699E865C
SHA1:	D32D7879A811A28370B27E95163427F64B46CC93
SHA-256:	E20EA4286A32C164F3CB4D303BEFF59D9A7BCB11C8068FD1020F074CA1EB766E
SHA-512:	89A147216E245B9E36EC557CD6020AE8DA0F22D9A45A2CE0A7CCCB7D6F8AFED10DE729B52BBBAA4010DEEB748B56B292D2B5EF8A8487871CEE18B94C176F6573
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 144 144" style="enable-background:new 0 0 144 144;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#FFFFFF;}..</style>..<g>...<path class="st0" d="M105.7,45.6H91.6v11.9h14.1c4.2,0,7.5,3.4,7.5,7.5v40.8c0,4.2-3.4,7.5-7.5,7.5H37.1c-4.2,0-7.5-3.4-7.5-7.5V65....c0-4.1,3.4-7.5,7.5-7.5h14.1V45.6H37.1c-10.7,0-19.4,8.7-19.4,19.4v40.8c0,10.7,8.7,19.4,19.4,19.4h68.6c10.7,0,19.4-8.7,19.4-19.4....V65C125.1,54.3,116.4,45.6,105.7,45.6z"/>...<path class="st1" d="M42.5,69.5l27.8,31.9c0.6,0.8,1.5,0.8,2.1,0l27.8-31.9c0.6-0.8,0.3-1.4-0.7-1.4H85.5l0-48.1....c0-1-0.8-1.7-1.7-1.7H59c-1,0-1.7,0.8-1.7,1.7v48.1H43.2C42.2,68.1,41.9,68.7,42.5,69.5z"/>..</g>..</svg>..

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAnKQ5L7yNL4HBIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10896111711?random=1713460598583&cv=11&fst=1713460598583&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	220
Entropy (8bit):	4.759593889632203
Encrypted:	false
SSDEEP:	6:gI5bybhfGenwUPI5yQCfGERGW/SB/q6TCvF:gIBwRGeTPvK3BXe
MD5:	19AE102D4CAC0DF4591BCFE0C680743E
SHA1:	5D274157520594AA556DBC81EE2B600FE50085DD
SHA-256:	912B18AE8B8D558416E1EBD01F6D0C38ED81C5C7439CA04483C0FC27BA35C786
SHA-512:	0667026249D9A1DA25930E458A557B281A601A1E22212D5ADDDDB670E4251CFCD8D7B97BEFD17883CD85049884FFA18F9C672F99838FD7F1CDFC6200CDA202A4
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzIShwEJaFW4qg1yjzISBQ38jPmlEgUNNv6k5RIFDWVN6Z4SBQ38E6eUEgUN0LAlAhIFDZr6tJMSBQ0c_HLyEgUN0TDZphIFDc7C5zYSBQ1MYo10EgUNtF0iARIFDQqycR4SBQ2hdvj0EgUNi59syhIFDQXLx6ESBQ2TQQs-EgUNzyi_aBIFDVNaR8U=?alt=proto
Preview:	CqIBCgcN/Iz5pRoACgcNNv6k5RoACgcNZU3pnhoACgcN/BOnlBoACgcN0LAlAhoACgcNmvq0kxoACgcNHPxy8hoACgcN0TDZphoACgcNzsLnNhoACgcNTGKNdBoACgcNtF0iARoACgcNCrJxHhoACgcNoXb49BoACgcNi59syhoACgcNBcvHoRoACgcNk0ELPhoACgcNzyi/aBoACgcNU1pHxRoA

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33032
Entropy (8bit):	7.991499835367553
Encrypted:	true
SSDEEP:	768:q2cg7BTRFVzlpRpzyLZdpIs3llgjccBJeaBOZQ:9xlpRpzynp9Vm4cBJezZQ
MD5:	054AC8E4BF00011CBB9EAD692C3D18C9
SHA1:	1C12811711E4D2E47E13D718B640FC1F19361E76
SHA-256:	4BA79E12B829B9AF92DE7D57BC8E196EAF29A728743771151B497BF36BCCE155
SHA-512:	A341E9EEB929F295D923951705E7A7E21521C75FDC2050037EB201FDA0F683D029BEE819F45AD765C0DAD6DDE3A22803996CB78FDBD392C8D8676B0AF5E82FD2
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/corporate/bhm%20graphic%20simple_270x170%20png.png?h=170&iar=0&w=270&hash=ABB107F15E66C1D41B6BAF4A394BD0E3
Preview:	RIFF....WEBPVP8L.../.A.M@h$..Y3o..?`.. ...P..JJ...9....k.ERdv.....8...]S.D...NG...b..#r].k......@5}...8...V...l.~.a...L.I..NTc'....H..C......{FM.-.L)PU\. )..G....8.....L...a....YO..H.".J.R..Z.....affFA.m[is.x..m..r...~RW..W....t...blr......AzZ....`..o..0....!{.9........)4WW..)...\G.]2Wz...Y....M.o..j.z=w..`E..L2..k....FW.$.W\|...E..@.[@`..<.I..t...U.a.`{..`u,.j...fH3...a..2H.$A$.d.......5..&.\|. .yg...m....~-.(...\|Wy3o...b.E...F..h.6.c....{7U...b.....D......yh.+....Br.H..jS.+..1(.E...q.C.G......0N.rT....5........g.N".E.r.....<.....r.JS..Q.........+;.}/..~.N..:$.g.....&...3.].qL..~.r...}.t.a..]...E.G.9.<.....4HK1.w]l.G.cT......s..E....St.q.>.....PI...........h..3.-.fG.......1_.....Z....L...QVT......q$"y.._g..k....9c#i%..V'.P.....=4...]..A.6.b.....{..1..Ri...T...T.........2..9..G.wA..;.b.J.W).!*..qj....G]5Q.\r....{....u.....tH..0.................Xj....{.....$..O..0gD:.......\|a.!..lo.........5...{.p:.Q8..Z=...V.....^Y......;..`.;..`..g...v.K=0

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 80x45, components 3
Category:	dropped
Size (bytes):	886
Entropy (8bit):	6.881269722176851
Encrypted:	false
SSDEEP:	12:Hq+FkS+Fkowbjj0NxkbLlSetn1lAJahGyjgk5styeGxkR3qOVMsyCxSf+uWh9zHf:emouju+Llx1ZGGgcsK2QOmzr+B9zHH/
MD5:	5F19F7138FB1159AF9B4CF2B05FFBD02
SHA1:	5D52573CEC92BA497626DEC71F42F39DBA0C2CDE
SHA-256:	933188F70383BA9E49A09539ED43D590FE7BE964EE206EFF3788EC8B0D07AEFC
SHA-512:	A32562CAD5BB9920F18A11AB16C32D4548CB3D0BA29EE9D167E1AE2BBC25D499C9F7DF2B2C4EF88CBCCE3B8973176EB449A7243438AE95E952071F7A7BE2F162
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................) .. )/'%'/9339GDG]]}............................................) .. )/'%'/9339GDG]]}......-.P..".....................................................P..=.-..99.&......',t..5....{.=4.^d.?......................................6J.....L.........................................].Z.....(.......................!...1"Q2A.3BTa.........?....J.<..'.L9104`u.."i.T.&La.4B?........L.w...1./!.........}G.......[......3P.m\|+U.f.d!...L.I$E.........<.#..\`.eN......a..<.....a.@.........4..!R...`8$LZ..].I......[]M.}.s.,..x....%.J.....:..Lm..s.6y.o......Tl..S.oc..1.U-.<.]...{....DS..! ...}dj....v]...;.o.M....'.;.M\.b...&C2....\......x.z....1>......Y.=\.DW.h\*.Q!...\?3.e.8............................... 2ABQ........?..Ib....J.{{Q.>.J..v......... ......................!.. a3C.........?...N...X.f/.'...S_...E3g...

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	678
Entropy (8bit):	6.587084548247928
Encrypted:	false
SSDEEP:	12:+cK/gj6qWaaFkrzCMXleB8LqhXxU+TqJ6QUnMeo9EGVoUoz7oC6ms3GV/:+cKYj6LazAxLTqIQJN9EGVoUKKv3GB
MD5:	AA27EACD5251968EB1B0A1FA48FE1F4E
SHA1:	9875B33726497EF0173C8A042A9C3D56D4E04745
SHA-256:	5E873F9821F87FAAEFDE51BCA690507E9106EA4C168B4D77363BAC4E346135CB
SHA-512:	CDED2382AEB842B2C0927C73C1A998EB41402AEE474F64A0048E6B8115BFB1FD74AD669FFE6CF8F65C297DF28CE942BFEF65622625898686A7DFB321519C74F9
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d?mw=80&q=85
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......P...-....pixi............av1C........colrnclx...........ipma...................mdat......g...2.......b..{.Y<L..F..._CN..R.9...Pe;.`.._...7a.c.........9...qmOH....C.B...{%.s\v.".X.......T......\|<.>S._...e...%...`.@.'...6.4ZH.U...3\..<...+.H.8....Y>...OVH...c.w....va.......b.C.UrN.P..aW...su.PvAe.J5.+.....D..Z...!..S.c}........l....;.B.+n..g...:..W'......s.6......Q.......>~..1>....r...M..g.:j..VF.+....1cU9..>W..........#.QN"..@H.AUFY.T....tgiW4..uO.,.<3.+.(MQ..m.

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	3.7612657704003114
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HptOE9HhEyRHfHyY:YGKed2pHDO4ElhZyY
MD5:	980C16696A6C7FB6C8242B74F5EDF52A
SHA1:	872854FDCD64A81655D447293D1E96AD0AD1C0BA
SHA-256:	5B719538163FA24625A0742209D09A4481C7589E767D9EA8BCB16008035F681A
SHA-512:	66AEF5D9B0D7C5B4D3BD91C87AA035FB5EB797A35755DAE5B6324941581186EFC4CC038DC3C99B0C3C5AA0C48F38B2E3C7F2437F112985CD92648AE937BAD2D3
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"","stateName":"","continent":"NA"}

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	12018
Entropy (8bit):	7.868991551506335
Encrypted:	false
SSDEEP:	192:ooz8l2lSR1AEyQC7Gz+pV7F7XHtTVVnePu9+7CBF8b7DE9CqEvU+:ImE9CyKp5d/APuQmzmJ
MD5:	D614F991DA7B6F8EA2C7A10F707A17CF
SHA1:	89325733DC80218D41DC7F085A7CBEE81090367C
SHA-256:	5642B7B9F183F0CDEF793C46C7A8C9C3BFD37CA3735E84096EF8849400789B4E
SHA-512:	E3FC267C2D89E9F3F7DD47ED3DC0CCB193DC690C0562B3A97E43774AC0EC3D54B0FDEB73A05C5A30F5F2F2A7F42BEB9D2CE5D0D995515362F532395BEEBEDB8E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."...............................................................................Ud..+W#R.,e..X...]....[km+>E..N.Z.R...o/..f.c(..0X..6.....W.2..-i%..}(0.i.j.X...m9..N!...3-o.rZ.....Z%.7.j\..5.F.P...8..`.Au..<..uD.u7>v.!F.:.v9=T...gK.4/<..%..S.[....7.]Y...y.*4dw4.#.....Q9...

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14160, version 1.0
Category:	downloaded
Size (bytes):	14160
Entropy (8bit):	7.984366061864312
Encrypted:	false
SSDEEP:	384:xuSsnqITlR8xFPvcabnz6OjCOntQsJjgaijTs1Q:xRsqsUxFncabzCi/jq6Q
MD5:	6CAF2B9A15E4AE129857767920794068
SHA1:	DC6946A2C472822BC25B5FAD19587B998A62B07E
SHA-256:	500F8AAF69DDCF71A16CEAE58C927F03371B33665185E16DF347B67F7F11BDB9
SHA-512:	9FD2548F0362D28EC755313FA21051105C5651865A67836FB1B368B0065D254F32F3460C07232CC564838FCC984CE0E4C8FD36EE63BF45BF1D3E247F14D62685
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xK1dSBYKcSV-LCoeQqfX1RYOo3qPZ7nsDI.woff2
Preview:	wOF2......7P......~...6..........................t..b..&.`..b.....d..\..6.$..4. ........l%.....'J..GQ6Yk.H.....j.!....lmA.q.Fj...w.5c.s.{6tS.q..t.:.i..z..c-..].8Y...q.k.M.....b.e.)../.I~v...@...@..H+kr.w...#.O.Tk......AT@.d.....6.a.U....8..{I-.S..6../j.f.M....\|.L...Q..O..\.M...~.#..ER..S.r;v.n:.w.......;..I......D!.F.4......s?I.....:.L....k."-..O.G..1........V[...../.Bk{E...x..FL.N..hs....2..f...U0..~...jy.E....b........g..VW...p.n.I.....\s....evgayMM>~D.M~[..;.._kl.....D.l..n..*...#v.?......Z&...X.V........V.=.....}...?}.FY}}...s..GC.......^b..v...%....CQ...IQ&.).....}.2.\|._...U\|.:...j...D...V...L$T.V...6....?.E....}.a...."...............Jr......BM.Gem....H.g...F....0"h$....P.q...0.H.`H$.tq.....&SB.\|M..f.ai&.-..s...1....P..(.K.cS...1.......y`..v@...G_.(........E%c.)...v.N...z,............3..S......^'...@....\|.............ln..8.YI...w..?dY.0J..O.c\..\,..Q.z...w......bI3(....j....y9....E..H.S..t.d.5e....u.l...#.A.....@&..j..8z.W.50...

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2385), with no line terminators
Category:	downloaded
Size (bytes):	2385
Entropy (8bit):	5.84838126950728
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08+cLyayKtFQP8oHKro6:wsbSUtJfxrqLWWWdV6j1CcLyayKvYM5
MD5:	0C118EC68049000AC0ACF7F6E5DE5EC3
SHA1:	57A951DADA4BDDD9C816D03EC3661D1307238163
SHA-256:	F6A4E637AF58912ADD31B02E277593DB70759A7027F4CEB6E916B7C1517776EA
SHA-512:	A6DAE249524857375DA07099DCDA64C1A9D7BBF145D4D0CBD9B528BCABCEAB8878BFA145B2CE61F8D4A9A41B4FF7A1B7BAAC8DAD04A8FD4FA9F4FA7B29EE8199
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/527644678/?random=1713460611045&cv=11&fst=1713460611045&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1382
Entropy (8bit):	7.864964861675362
Encrypted:	false
SSDEEP:	24:XIrGb+/D7kq1DAZD7XnzDKOlNFpYL9VDRWCUjJhByk+hEBcSOG1VPAd81J+tQ:4j/kq1kRXzuOxp2zRDU9hpLFb1VPA+1D
MD5:	1CDC1DB9C106586D37B81A1CAF0D5D49
SHA1:	0085C2494994230A9ED2BE7712B66CA5C9514529
SHA-256:	975ACAC227E5B810CE819D8B9CA421099E3082BAE9812E18D6E740B37A9CADEE
SHA-512:	B9CDC0312A10C9C0BEE00A5B5C8DAE51E3503CE5AFA393E77B241ED9D7C4DF72B2E28E75C1AA412AB0A7231BF0BAC3B6EB14ED01FB4DE84C9F8526B59E7F01B8
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/icons/phone-ringing-160x160-wht%20png.png?h=160&iar=0&w=160&hash=04AAD29CAD79C9A6F7B5D2EAD19611A4
Preview:	RIFF^...WEBPVP8LR.../..'....m...I.; .....m..t...Eat.N...(..B......"(....(........ ...".=!.e.v.6...{.M.....v.?.$.....D....?4.....~..L;A...._.W.R....g..0.wy..>S.......T..g.../...Y.<..^.g$an.H..o.7.F.....W.[...-....?&.L_.Z_..'j.0n..S...}..uhm&..{.....E[!x.]....Z..BPL.'..."..R....,...H.{..2>'v.p...'....!...;[;XJ".p\|(.0q%.-.]YD.R.......5iD.;....Fd..<......=L. .<Y.q.! k.@j.....\C...%G.p.".n.0c..S....n..i0Q.....6..T..}.h3P........P{.>....23,.B.g..0/.=...f...+.K./....0C$.$........vf......i0..A.....rp2XY...E..g k .......-..a$.V...~....j.F.Yt.t....M..QY..r%x..AK.&....Z.....:...e.....m,.M.Fi...h/fG._...u.`......2....y.....h%...._.._..N...e.V.V...lj..$.d...3._....,L.Ewk.6..2{.t.........FhkPb.#LeV.!...F....V..l$..<2...&gi...D.M.:K..4...@.I.31I.......14..Q.v.V3.h.L .Qp.Qn..h;G.W....P&..aB.....O.h.r...3.].+.K...tzze...F...'.^k}..1.EV.....[.59....E..Lg..N..1.-.E[..2"./..=ry..,.%.....p=...(....T..G<8.......Q{....@....:....A;...z.`^.....@c....@.<H{..<

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	64502
Entropy (8bit):	7.990724276617463
Encrypted:	true
SSDEEP:	1536:C7FznYX6LzL+fMHjrDtbsG5/hA/VpkQDzou3kV7:C7RYrijFVA/TkQnou0V7
MD5:	B7C7E12C19D5F26A23266E43A20DB78F
SHA1:	47873C59721308B04E5FD4267F88CF2A1ED6DAB0
SHA-256:	D30A430D3849898DAEAD6BE763C7E8E814AD94F0DAF577B5D819EC501CBB6518
SHA-512:	5E51CEF4878832350EF8FB327261A93A297FA5F6A2A92880DCFE41EA73EF0CFDD40EC4C0A416F3A2B53315ABE25B3951681C220AA8DE4DE7BDF3DF182C96D9C8
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/financial%20inclusion_banner270x170.png?h=170&iar=0&w=270&hash=11A79D8E6FA505DA6B1E1965DD928F02
Preview:	RIFF....WEBPVP8L..../.A.M8l.6.`..............@.%.%V1...$n..sH..(-l.\|.?7....f.rJ..d.@b.I.....8v.I..Dy.l.N...ID!.....P>.+...B9..mc...E.c...^...$0Ib$.....8..&...9^....,..e..mI.9.k.=..Z3.$.{.no3..R^.../..w[..~../I@.......-.`_.....v.{.....1\....Z.j.....l.B.b.J.p".g....<.....t.^.N...C..%o.....@.x=z...4C1..O.S.9PV..^]......M...3...r....._>."."B.me.4?..x.]...o....#....\......D...`...,..3...qF.iZ%Ey.m..^.=....M-.....s.Z8.."@g....S...s..m.;.....b.@$.E.....*.h..&M.n...~..{{...<..f......`....$.bT.h.3c.MB......Lw.5..us..........(..$.r..f.D3..1l.l./.~.l."&.......m,.....i.@M..v..Q..q... N.}.&...R........................'...$%.6.>./..77..U..3..^.....-...d.!.....pT...8l..57...V...........0..O......0..3.. ....?,.^W.A.=7......w.....l(....`..E..^.:..b.. .........r8...eU.............3...Mj5....QO...L\.D..6.....v...k.....zV.......7..%3Y.....P.%'L.T.a.s:.(...6........r\....U.EU..<.t.^.Z.].k..!5.._...jl..#' .i..9o...KJ..R...I)[~....+.d....p!......$

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.gif?s=1&k=xkz1feq&ht=tk&h=hrcenter.us.brightmine.com&f=6851.6852&a=681435&js=1.21.0&app=typekit&e=js&_=1713460589790
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 105, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1574
Entropy (8bit):	7.702116001323687
Encrypted:	false
SSDEEP:	48:/MzArXi+3XA/b4rhwLkooo5aNafvHBxJMsxQ1I:kzArXhXzuL/n3Ssm1I
MD5:	E5F28BCDBF8A2507CE88BED330EC3797
SHA1:	C085D2990FF46531670A52F87542A0E1E38EC02A
SHA-256:	930F21E5ED9E8140823BE566022253BEA61857DDE32CB1078CB8BEB343013351
SHA-512:	CAC8A5E1E04F8280088F988C721BD93B782509FDE0C3299C86386B2856628F4B4F0A00AC90F337EB73304ECB747CA648F6A14C249D6807ACD2E8E9AF513E8CF5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......i.....r:......gAMA......a.....PLTE....-\|.....PP.bb.......XX.dd...&6.....HH....xx.[[....(t...w.....i...aj.js........}..+:......cn.....ff......ww!0..RR.``...ny....Zd..ii.!o....jj....QQ....(.......................w......."\|......LSw....*.do._i....%5....t~.v}........$z......R..j.......0................. z...}...<<......z......%~...LL....hh.....n.^^RXy...it.....ZZ.QQ.,~.oo......^^...[g.......(7.v.........nv.Zd......T.....t..&x...UU......@@...&5.....ff.WW.....``.CC.......+v-=...O............XX......oo...!0..............S..k..q.....h..f..........i............'{......"2.u.............P.......-......`.............!x............~... oy................l..d..o.................k........f..............y........x........u........m........g..r.....Q.................................<....tRNS.@..f....IDATX..UP.Q.....BK..........+..........K.......l.S:..{.....r_.9.g....F...4?....w.?.?d%..^..A$........R..hwb.J. ....zZ...KS...dD....F....u._.E$ ..WH.

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 360, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	33432
Entropy (8bit):	7.980729623622542
Encrypted:	false
SSDEEP:	768:ox8baXLzyEajWrkgDx9O6a130zu5jDK/UZptfO:MkjWrkgD7a34uFDK6r2
MD5:	44D44FC7C76A17EEE6D2140CC5F10E70
SHA1:	749CADF1C4632DFC1B20FAEC8ED7674DFF38E7DB
SHA-256:	000912D3E26683C1A44497CCDF79664AE351CE663864072BBC057DC1D6C3F75D
SHA-512:	6689FF2E71F382DDCD98ECBD526D3A2D89FB2613A5453070F28600CD7669D627764723B20B9D3CADEB6E392FD5CEC532AA4731DDA94D3A398D9F5976F2825C4F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...h.....&o".....sRGB....... .IDATx..y..U..?oU.l.,.I..K..L. ..0.v.........x...."."\w.......CPQp.......d..l..If...]u....;...%.Y.......z...[.y.{N...p8...o..p8..........8.t8...'...c.....p.[..:..a..@..1lq..p8.-N....c.P.<...j..Z.{....m.G.p.....C...w....y.%...$....A.e.T.MCl.....y.....?u..e..[..A.hL.CE...=:b....t.65=Z......M)........."0....Hj~;0...W..ak......._...?.>v..........`.Y......#._..h.E.F\.....6m.P..D.s.....k_!\..A".#JH....M.....m...ii...C...'....?I...o..C._.....>....,.......D.l...X.T..,.\s...y.....#..7z.....QZ.1....O..i..=.....o&X..^a....)().d@..5.....;.=.....)......(...#R....~..v@....\.....+.hj9...<.....\|....j....._._..-..<..G^...%c.Z~.a..\|D..S...M.._\..a.Iho.'.G.$:}^...Mo.....hk+...D...k0.-..........u....X1.?._...Y..I...4.3.............#/U.{`.)'...!s....&Q^F...`.+.._$hlB">....N.Lt...ec 4H.'Z9.......LK+-.l$:......n~.Eo.?..<.......[.U`3p&.(.\>.i. @..w..r.i..4...H.X...b.F.r..c.F......YJ.z-~4B.Q...x.E.f#EE..{.d.>..*.W..h..\|H

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	959
Entropy (8bit):	5.357783166433538
Encrypted:	false
SSDEEP:	12:TMHdwcWi/nzVc/KYf3UaNjUHfaFjhdxEVlHTr5d/3TG/L/c3d/CKpI8zcLeex3nP:2dGA6LfEyjUSFlOQrgYzxpRKed
MD5:	E26A259CC582AFA6C04FBC4E699E865C
SHA1:	D32D7879A811A28370B27E95163427F64B46CC93
SHA-256:	E20EA4286A32C164F3CB4D303BEFF59D9A7BCB11C8068FD1020F074CA1EB766E
SHA-512:	89A147216E245B9E36EC557CD6020AE8DA0F22D9A45A2CE0A7CCCB7D6F8AFED10DE729B52BBBAA4010DEEB748B56B292D2B5EF8A8487871CEE18B94C176F6573
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/img/placeholders/Download_svg.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>.. Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 144 144" style="enable-background:new 0 0 144 144;" xml:space="preserve">..<style type="text/css">....st0{fill:#FFFFFF;}....st1{fill:#FFFFFF;}..</style>..<g>...<path class="st0" d="M105.7,45.6H91.6v11.9h14.1c4.2,0,7.5,3.4,7.5,7.5v40.8c0,4.2-3.4,7.5-7.5,7.5H37.1c-4.2,0-7.5-3.4-7.5-7.5V65....c0-4.1,3.4-7.5,7.5-7.5h14.1V45.6H37.1c-10.7,0-19.4,8.7-19.4,19.4v40.8c0,10.7,8.7,19.4,19.4,19.4h68.6c10.7,0,19.4-8.7,19.4-19.4....V65C125.1,54.3,116.4,45.6,105.7,45.6z"/>...<path class="st1" d="M42.5,69.5l27.8,31.9c0.6,0.8,1.5,0.8,2.1,0l27.8-31.9c0.6-0.8,0.3-1.4-0.7-1.4H85.5l0-48.1....c0-1-0.8-1.7-1.7-1.7H59c-1,0-1.7,0.8-1.7,1.7v48.1H43.2C42.2,68.1,41.9,68.7,42.5,69.5z"/>..</g>..</svg>..

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316), with no line terminators
Category:	downloaded
Size (bytes):	2316
Entropy (8bit):	5.865327921117036
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08/VzFfFQ9XhKEC6:wsbSUtJfxrqLWWWdV6j17Vzu
MD5:	3AB59D04A1722D36AAF3228C650539B8
SHA1:	E1BB2C428A8A97A83AAE702E81DE994AD7151547
SHA-256:	36274254565F1428753A99C4E68D28F2F6125268B6F956611F9C2D996A359A70
SHA-512:	DF08CAE35281C6004DA3013ACB5A213B8E9B38190DEDC550A9CE5893A42B00F31D1BCE5F357C564845D051E1CB51E2978533DF72F7294C0D3055A2451B2010B8
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/938545461/?random=1713460598652&cv=11&fst=1713460598652&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (437)
Category:	downloaded
Size (bytes):	566981
Entropy (8bit):	4.831753353602927
Encrypted:	false
SSDEEP:	6144:veImTIoNevZmTIo4e82z5Dvk+s2z5TPOevZmTIogOI/3/uNGNEbqbjpxpMevZmTn:ZJ
MD5:	7337923C99F2EE9CF2B2ECF3105822D1
SHA1:	B1E5F1F25B2D05DA2295F7A5B7B75DBCB52F10F8
SHA-256:	3D75DF7523E23B133758D226C2E02F0903CDD3D538E8C1A89E41AE5514BDD398
SHA-512:	13FCDF0744BA1942823E181B0AF9E44CC9A346697A7EB3B68E993F7734923CE384D90B07BD25A4B9E2C1F41BCE6DC322F5936C2F2A2EEA9F486BC08F95FABAA9
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/lib/material/css/material-components-web.min.css?v=PXXfdSPiOxM3WNImwuAvCQPN09U46MGonkGuVRS905g
Preview:	/** * @license * Copyright Google LLC All Rights Reserved. * * Use of this source code is governed by an MIT-style license that can be * found in the LICENSE file at https://github.com/material-components/material-components-web/blob/master/LICENSE */..mdc-banner__graphic {. color: #fff;. color: var(--mdc-theme-surface, #fff).}...mdc-banner__graphic {. background-color: #6200ee;. background-color: var(--mdc-theme-primary, #6200ee).}...mdc-banner__content, .mdc-banner__fixed {. min-width: 344px.}..@media(max-width: 480px),(max-width: 344px) {. .mdc-banner__content, .mdc-banner__fixed {. min-width: 100%. }.}...mdc-banner__content {. max-width: 720px.}...mdc-banner {. z-index: 1;. border-bottom-style: solid;. box-sizing: border-box;. display: none;. flex-shrink: 0;. height: 0;. position: relative;. width: 100%.}..@media(max-width: 480px) {. .mdc-banner .mdc-banner__fixed {. left: 0;. right: 0. }.. .mdc-banner .m

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	54514
Entropy (8bit):	7.993522668620659
Encrypted:	true
SSDEEP:	1536:IjW2T2mY18ty6852wNk5vZsO0ik6lkz5jWDiwwiMxr:qrTISzC2b5vZfRk6lkFjelwiMN
MD5:	979A0EEB828C4087CD5CFC3B8B0767BE
SHA1:	43EC5A19D742265B68B05704688D9EAFE9D0417C
SHA-256:	E455C92196356936F690979A06A90A8D47BC04D260F4000B2D28984DD955BC10
SHA-512:	1289250869450B5E1FC62D26C66269C5033B170B7390ECFCE7E120CD6FAAF6FBBBE8F9529B4908695DA43ADEF76637AB4D47A5F3E829D241FC79FD9598A0F78D
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/tcoc-regional_270x170%20png.png?h=170&iar=0&w=270&hash=F43278B90D67065468EDD449166DD2E5
Preview:	RIFF....WEBPVP8L..../.A.M@.$7l3..8.../Xr.BD.'......tA..!.$G...f.9....!i.....P.%.s.%....9..H.r..zO.n&U.......#.23...$.$..~...ye....VH..1.t>..vwu.<9..\|d}$.....-S..&.JIf&..a...+8?r..v.}.].` .~..<O.]..U.w.2aw...fF,PU@...y^.....`.....u..AD^DU....y<f...s..n......>&..0.4y".?}.T..H.....sh...n.(.-..[.uNYw{W.k.F...k.K=....U......[.m#...Zo....6!.~....:.$...d..............e..6.!..9.a.Y.....g...!..A..f...w..E..EEE.Z..YgE...3.:..Z<GGDE...4..h......$.j.j.....jQ.l.4$...#--..t...QQ....,..%e...<....4.B..B..U.z....h.N..U@..:..<..rk...x.^.>.?e..JJ...*..z..z.D;.[...wz......l.{.Q.uRU&...(. ...\|..\|.ZZZ..1..X......BRVVrZ..N.>.>.......#.@.2.. ......A....o.'....r.k4.)...RY._...'...........+G`.&D..x.....B..\..{Z...&$p...\| ..[....h....RA..._~.A.zefb........#r....#........\X...%3.X.ll.......<p..#... ..y.>.@.....G6{v...XY...]+.....^#......U6.Pi......(.U.J!\|iF.E.....I.......Y..D......G..v....HK.R..Q..b.Z].5.....H....`0..D.....*..!\]%...uI#..q..@......D....

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 5 x 5, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	932
Entropy (8bit):	5.833329452285003
Encrypted:	false
SSDEEP:	24:Jqy1he91Wwjx82lY2T3ouVrs0jyJ3Vr4K0qGEntj9:JqwqQNn2xCJ3NFj9
MD5:	5D6001D74CCA9715007F0E1955B39A1C
SHA1:	563F127CA54E3A165326C86E1BD124F6C826F79C
SHA-256:	A00361F25FC1A89A64C93C01210CFDC2A73279B3B1B05D9091A9C5CD6B086E1D
SHA-512:	B6286E6E18148D1AC0EA5929A2CE9159AD5BB76791158CE33AC99E37DF79B0D92DCF012D0A6EA854E1D24BBA665BEAADDE7F652C592EF97C8746CC4AB72EEFB7
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Content/Images/Article/persistentHeadingBackground.png
Preview:	.PNG........IHDR..............o&.....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:4FDC45EDEA2E11E2870C8AB07102A421" xmpMM:DocumentID="xmp.did:4FDC45EEEA2E11E2870C8AB07102A421"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4FDC45EBEA2E11E2870C8AB07102A421" stRef:documentID="xmp.did:4FDC45ECEA2E11E2870C8AB07102A421"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>6.GZ....IDATx.b....k.4...P(..`......K5o....IEND.B`.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	374
Entropy (8bit):	7.320293991325856
Encrypted:	false
SSDEEP:	6:tZj7+vopdkmFFZeKCjoncQEMC4T5LpJW+Q7hxT1vaYP2a0tACS7l+JUpndjYTbyG:X6vImyNCjocsC4TJn5Q7hxT1CYPNXCWW
MD5:	901D95D65A2C1A900F8536EB071832D0
SHA1:	6E7FC9B2C5F1FF475CAFE72B2A3D35CC6ABDF390
SHA-256:	65E49B247A7189010C107055B7A37756DCC83374CB5429C6D488CB07BC2BAF05
SHA-512:	979425898BE54687F553153F4AC87D9E954B1C76BD5991E99BC13800339227C7178D5F13D5A566233C5D6D9E1C298BF42659EB77BA3F2ECFFA47D433773E258B
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/icons/pencil_icon%20png.png?h=20&iar=0&w=20&hash=A7C6AB4BF363E42EA2DCD3CA10ECF939
Preview:	RIFFn...WEBPVP8La.../....W.(.$)....o,.a..j....<.....m$I.e. ......N..P".wg.h$....I....isww.....}Dw.A..di.7D.j . ....2..........-. .01.Y.R..g...$..*...O.1..q.&.i..geuOu-..0...4=...5.A...\]}".......l2f...=..P&..D.fj.;.z/...yT..\|.[...#.6m.y.m.....]g......o...\|8.g.~9.e.v"nIs.._ ..cYX...8...~......\...dH.#...Z..L...S..]df:..\e......CN..>.^^..}........\..Rf~.z...

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1020 x 267, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	20560
Entropy (8bit):	7.865105122268418
Encrypted:	false
SSDEEP:	384:/9sP+CKx29QhUKOFmIX/u9x/yi1E03x6Mlq88t8keYqIz9sjN6NyITIyGjpLtxMZ:VsP+709vHmIX2rQ0QEq18Yhz96NRBLOT
MD5:	50504613EF1C5DCB31D45A16A359B04D
SHA1:	4270F6FACBB2DA9CA02F9D1051A8832F57218C0F
SHA-256:	3D6E0A3A53CB1A740DEA6AE49CD5DC573274877947D8E2E36A1AE17147DDA7FE
SHA-512:	BDCF23AB8D4966C0DC961C5D51B2109221A5B11AA9CAE35AC726121C1F3EED0EA4CB5002A8D9DD7AFA77F7C202FA4BC64C2C9AD3CE8FB69989B970161DD16805
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............d..s....sRGB.........gAMA......a.....pHYs..........o.d..O.IDATx^.+p........x```....a...;.B...I..a`.a.a...a....}....z...I#.\|_._....i4...h5.......p..}....p....O.............g.........%b&.Tt#f.aW........C.......@...............C.......@n....e#.w.y."9..............{1.W.Y..p............).).b..Z...l.................Uc.Z...V............?.!O-...........$@L.o..R.Y..~.......x.4.g.sKL..U..........0...}.."...........fo&m...:.....@...c.{.....ye..........q....n'.i{...g.....^........4m.V.ar4k_.........U..~..........0N&.?.~4......k\|Q.y......k5..x....MN)k.W%...U......`.\|.....S..0.m.c.,..t.%...w..\|. ...}....7b./<.]....VM.......xf.g....~.=.....r5..,.W...r..-.H....u..[U........\|4..._.....c..~.....v.......4m_.....w.v!...\ZU.......!f...........`.........f./..NGGUL..,.n.U.....X...J.l....I..3.H...U......`w....W5p..v...]>..p>..F5,+X2.:K........m..\..<....2.:..y.h...5.Yu.......<N.7s%..W.#.HO../...e.3..a.<.0..*....G.....=.L....\.]...........

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1457), with no line terminators
Category:	downloaded
Size (bytes):	1457
Entropy (8bit):	5.644757331877369
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcNZfcEzHDaggOOJVALTuOqmgz8+Yg/PqjCC5zqinzYjnpR3:YyLVkckEzjaggOsKLDqrmlYnbuO
MD5:	60D31C3A7AAA38145E752419FC67C73F
SHA1:	F651B8E2BD7C62E04C68F865D32F8E4F98A0BDCF
SHA-256:	759F57AA53D7385E83530B2FF47AC9828ACC19443089F0BB0F7EBCB276AD4E88
SHA-512:	7BE75D9CF5A87DE80D53D508BCC78539D00741BB0263ED5868D35A8859448C13EE0EB0C98EB7E981EAE94C1B3311B0B37922BE14B483AC90D9199AC690A24716
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/936886275?random=1713460613596&cv=11&fst=1713460613596&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8107391740","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j8107391740","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWG2Flg!2sZkjihw!3sAAptDV6zs8ye"],"userBiddingSignals":[null,null,1713460615423140],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested-sizes"}}]

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/950188369?random=1713460584429&cv=11&fst=1713460584429&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	106
Entropy (8bit):	6.0839142045019585
Encrypted:	false
SSDEEP:	3:6n1ZrvAtE2PoupjSQP/nGi3BzpGmYZlp:M1Z7IE2PP/n13BzpGmYZlp
MD5:	6CFC9262AB161927910DF05238DCADF8
SHA1:	BB9A5233AA8E8E0A32F6BA305329F980EADDF82F
SHA-256:	F5AF37D6CAEEFEA2E15B837F7D9D8094E89CDAEA079A44E97991BC6919B39FD5
SHA-512:	969853AC19335CC91BE3BCCABFAA5A68389DE63AD005C3A5D0F015C61A6295AC351006FEC21668D8DC996445329964157E5F1A49B47A66845C09973408C9206E
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/img/icon_arrow_red_dn.png
Preview:	RIFFb...WEBPVP8LV.../..... .Ha.<......$ !.2.....OA0.$IJ...P........HX....x....xS.j.fcj..]O0.....ex..;.v.

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14892, version 1.0
Category:	downloaded
Size (bytes):	14892
Entropy (8bit):	7.98489201092774
Encrypted:	false
SSDEEP:	384:LKrbeS3uuEGg7o6yDdWa/TQcNc+rAsmnsTJ39cUZi:LKneSe4/6yDFU6rAGJZE
MD5:	9EC6DEAF6BADA919E20B98F9F7B718B1
SHA1:	501D36403AD8205E4644532600019ECB10F5CB0A
SHA-256:	7B348B30EA1FE43857E68FC462C29E5C6E63C97666AF75135C4396A272E54762
SHA-512:	03849431CEF204A1584FFE6F23DBE86730AFD076146AB3D1855B9C3402168A97FAA8A529E69FAE45EA24CFF7110C2930CB4744162BA0ED95D95600F6E777B322
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xK3dSBYKcSV-LCoeQqfX1RYOo3qOK7l.woff2
Preview:	wOF2......:,.......\|..9..........................n..B....`..b...L.4..d..6.$..D. ..f..4..v%..........D..dd.do......:d..M....E.&..J..G....3.Mxp....i....V..u$.[O.;MU.:j.?..{+/<....s....^[..d.d.....t A....`..z....IN^.......2......mY.kF...\...UYU..........$.O=5..2q..L.2.1.c.....`x~n=.'Ur.66V.f]./..L1..P..<.0.<.8.....Z/.+.H....y..F....h5....V.j.....l..O#.:-Q....9g....:..?..8v];u,O..'....c.\r......].&w.....%@..Z.^....$.,dJ....W.{.....h8}4..S/.sZ...f."$..`a.$Mb.....;.W.."..y.H.<.g.......oNS..MO....X.%.8..y.\...ly..w..?-.~.o.ZZ~G.....B.....@...._....g.fF_...d-...aA_..#k.I.....x...P.}z..JQ&E........).P\|."g.#.)Q.T...}.PD.T+<}c+.\|\|0...2.F..hD.X.J.O.eJ:.%ZW.m.K.Jd..c.7.....T.cr.2....DD.........2..y..?/g...... ={..c /.....X.0.F.F.PX.P..!..K..K.....i.%....B.."...A....F.........4..........S........z$`.T..h...E..........._%=..).)......x)...A.J..K...?.V.......w.Y}..N.....}..>.......%.f.O..o.{..=wz.e_&.O\..*..Q..c.'...X&.1wS.R..AY...G.....Q.f...z..E..u8&V

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65495)
Category:	downloaded
Size (bytes):	210609
Entropy (8bit):	5.113941528851756
Encrypted:	false
SSDEEP:	1536:ypJOoOYWxuY++npUEJAWSnnJ8erKz9EQ/yQTD/c52Xhr+f0h02C/ZlL+sLOIjZQk:Irjq/cUrXm2cZlLxIE
MD5:	2E4A9443FD858C2FFD20DA076D4B266D
SHA1:	A47F270E29164F38B31E0262808B7DDF0211A584
SHA-256:	C548B66FB01AFBC6B8DD54081E76F284DD6DAAA12E4A5E8E331C9299BC10C87E
SHA-512:	E37B42D72798371CCBBE1799E3EBC29491498B6FAD5B3A59809B41119D5EA1A88FB2310727ED2CE42EC344F99FAA5DCAC1F28F6039845A850F77A8AD7A50762B
Malicious:	false
Reputation:	low
URL:	https://f.vimeocdn.com/p/4.29.7/css/player.css
Preview:	/* VimeoPlayer - v4.29.7 - 2024-04-17 */.@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:translateY(10px)}20%{transform:translateY(0)}40%,80%{transform:translateX(8px)}60%{transform:translateX(-8px)}100%{transform:translateX(0)}}@keyframes pulse{50%{transform:scale(.9)}}@keyframes dash{0%{stroke-dasharray:1,200;stroke-dashoffset:0}50%{stroke-dasharray:89,200;stroke-dashoffset:-35px}100%{stroke-dasharray:89,200;stroke-dashoffset:-135px}}@keyframes rotate{100%{transform:rotate(360deg)}}:fullscreen-ancestor>:not(:fullscreen-ancestor):not(:fullscreen){display:none!important}body:not(.showfocus) .player a,body:not(.showfocus) .player button,body:not(.showfocus) .player li,body:not(.showfocus) .player span,body:not(.showfocus) .player svg{outline:0!important}body:not(.showfocus) .player input{outline:0}.vp-center{display:flex;align

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=1773394&time=1713460590704&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F
Preview:	{}

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1384 x 417, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	60579
Entropy (8bit):	7.925433054820642
Encrypted:	false
SSDEEP:	1536:mEuwusAVU3aG2cghcu1ZBHy6ZPccp3bc/gCyIv801p5m:9rbp3aVc2ZBHymEcpg/gcC
MD5:	109CB1B95EF0040C195CFD0B433459D3
SHA1:	93B366708EA619E92DFEEA09D919F23F79226C67
SHA-256:	6F01AC663C62D2A5BCFCB993F3E2FEE3BF83DD09D18CE3C621EADC4E757A476D
SHA-512:	879B4438DF86C6F2B3ADE4042563382B41EE8012596BF8B6B57540B6D2C7E6080004EBCE57A1EECB69AD0293A178CF21A9A7C7E0C3A52540F4170C72EA9CE62E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...h...........]+....pHYs...#...#.x.?v....tEXtSoftware.Adobe ImageReadyq.e<...0IDATx...t..y..Uw...;..".$EH....]..H.M8...qBh..$..D.d..#4s&..9oL..e.$....kDz.#[.6k....H..Dq'...]..V....Z.....BW.^.k..__.?IQ................P.............P. .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-............................P$ .............@..@.............E..-......................T..$......(.(.....d...F.z..A...;...........*.q7.~.......jwP.....1.....P.{6{....{=&9....(-P....Z......

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65364), with CRLF line terminators
Category:	downloaded
Size (bytes):	2443200
Entropy (8bit):	4.6640050452114865
Encrypted:	false
SSDEEP:	3072:g+OhP2FAOa/4bSwLNomJeY5Zh0m0qJ+HfRXEj:nOhP2FAO1Zh0m0qJ+HfRXEj
MD5:	F0A4EB2B34C11FBC367F2FC21192839B
SHA1:	6F643C2D51B95439951D5BDDAE952612887B1690
SHA-256:	C0004CA4A35B9B4308672D9E38723E6BD3775FA786D25BBE130483D923FB86AF
SHA-512:	AB03B6AC538A7C35BFB3CB647582DFE357048470FF8EA6F159848F5144E7DB87F72762916150E03189EB220DB2243AB747B799D92DC3CB75D915ACEB0DF0144E
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887
Preview:	./!.. Bootstrap v3.3.6 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */@import "//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css";html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=1773394&time=1713460584422&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F
Preview:	{}

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	7522
Entropy (8bit):	7.974774624352244
Encrypted:	false
SSDEEP:	192:UYP1q0M1S7ovghhY2M+1Z82coHn0eeFLi0TBT:rPG1RvCq+1Zkw1eF7BT
MD5:	49370117FF34C60CFFC189876C338B55
SHA1:	4520E31ED5D8FA8CDD64F0C4BF1F0C062CB5CE2A
SHA-256:	38AFA0FB6A7351D1C5EEE3EEF57409EB59B490A6B6844D2FCEDAE1C78B3CE68C
SHA-512:	6F4C190575C5470A95555F2C024F8A24BAD168EC28F9C72347201DEAB1FE61607A3AD53589F8166CDA0161BFB3CE6F84143FEFD90744A22BE6DFA41F796012AF
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/f14c2b86d09f44f09e54543661e39782.jpg
Preview:	RIFFZ...WEBPVP8 N............>Q".D..!....8....bJB........9.?.........E.\...o.w.;......{.S#Z[...?K.K.S3v...#..y....Zu...\|.6..G?.Y......L4..Y.........e...."9.{4.@{...G.._.l.Q..VQ..\|.).-...3J...e?W......^._._.V.tl5J..4%......Y.....T.e...w..x.r.....1=.GL+\.>...S.O.yi. .....y..T.4..._.._...W.v..p.8.....R.....0.D.w..B...?...q..u}U...\|.c...d:j.u...vg.F.....!..4..p.yz^]\..x.......b9.e....(\A....".....A.=.&).....1..i....XaG.g(..R..f.9.[..{U./.a."<..p7i.m..b............c.M..5...7).Jj.....=...n...3."_i...M..E!..X!%.^...Z.*.iq......~..Z.,o...C@f%..vk6.....l.3......L.y.y..X.Z.<,.s... .Y"....\|+..4a.&.U#.....+R(.s7Cl..Z..7R..Q.GnS...Z.y\N...G.>..E.C......#..y....d.S.^..=(........<........W.F6..(X..>N.....5.o.myn...~^M)<< ..R'8B[../.Hi..x.PE....b.r[..6.]......Z{uj..Eu......pl.J....T......<.`...(...JX.&..Z.....w.[.%....h.!...4...Fe..C/yq...h.0>...7.J..4...VG.+.&,%...<....(..h!.j....JE.P.}....6.85.v.......l.g.{..B.U.....z>x.q.)....2+>s..a....7.j\.DU...,...I>...$

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/10827142419?random=1713460598612&cv=11&fst=1713460598612&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 400x312, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	23564
Entropy (8bit):	7.992016461389997
Encrypted:	true
SSDEEP:	384:gbE0vsPb/ZPCiuhoLxw+6rC0mI3Inbznu4ohxdMCRi1mxr4iZGOKsdeo5RH3WhR:MfMPruhUdmC0inx62Cpxr4iZGo1RXs
MD5:	776DE4F90A4E57A4504031EB342F7D02
SHA1:	1A444914989D01968ED24D506B90A6606C99A431
SHA-256:	B5038FD5FC7CC8C43E2DF2583A1024725D9C5BA412C3768AE40EB73901C42A9A
SHA-512:	5EA33A3F907391F317B4D4FBCF21F68CDB6BAA739B19A4713B4C2017170A2A4DBE5B9B270F68DDA913BD90829C9609BDF92D7A23BB76F3C13F813E87FFF5856C
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/government/meet%20the%20siu%20team/siu%20team.jpg?w=400&hash=C7AAD7AB43C535C357EC425F781C3E0A
Preview:	RIFF.\..WEBPVP8 .[...?.....8.>Q$.E#.!..<8.......`#...."L"%+.x>.!}.go.N.LWy...x........r.+.K.....D...H.._.V.......?........G...I..u.....7......}......G.....zl...>........_..j.........../.....O.....=..s.9.A.....?.?....[.....O.Os.........'.7./...=.?.........m.......v....a-..3..d..~..&Q.\|`.o...v...a....:z.i.n..X9....l....h......D3....p..N.....M.e.t.A..y....].V..4QO6..2.2w.n..u=jc._.<N...7...!........?.$uN....&.`:...5.bd...`..;........5y...."\|..+'.Wv..3...f...<&l...Zm..7.Z.k.u .lGL........oJP.A.2..,.....V.....8.....~,.Z...{b...G....v.^.x.YSz........z.?.N.P.rf. .rb..Z........Z......P...\|*...UZ..l....]....OX.~. d.......)$..JL.....r....!LQN.b5.z......>.X.3t....i.wMsK..=..6.Dg.`m..U...":..e^u......x-.....$=.#../.N{(-..8oW.0Z4;M.\.}.........T$..n..."..........8r.].~X.?O..:...w.$SoD...w?r..4`...+.......LayYBcn].......x.%......U8....s...oL......O'.....1s...zQ.9/....Q..o3.i.~.H @...A5o..c...v..N..t.i3q...;n&.+.X...wRT0....Do..._:.;.Fo....&....!..4\...r.....

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3668
Entropy (8bit):	7.953978482348561
Encrypted:	false
SSDEEP:	96:966+KVRdQEwVVc9Je8Uew7enQ8bB5qDVnT/76tMPfuC:96z4dv6+UvubB0DVnTqafH
MD5:	81D5C9127624E23C0D8637EE9B8FF139
SHA1:	EEB2B5994E2DD0CA77C3CDA8A38ACBFBF8912B11
SHA-256:	4F0DD40A88D41631019EC278B03EDEF4DA6588F720F0439F810957C28DBD3A4E
SHA-512:	0994A00D5081723C2BA55FDD6225DC6327E4722A4B38A0864456EE61EFF3AF1C1C1394E22423C814EEC11850188D4734F704238D21967126EF5E43717452D562
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/tile%20img%20for%20tcof%20retail%20jpg.jpg?h=170&iar=0&w=270&hash=83A5C49094FD423F6A608530CF757C1E
Preview:	RIFFL...WEBPVP8 @....Y.......>Q$.E..!....8.......a\W.8%!.....9..1s....g....K..`..........Io=.f.D.N.7...=SL(.$..T....=...B..-..u...E.6# ..n~".D...l\|......>..RD..RE..un.e\5._v....-.v.Za..O...L......s.c....?@.E+.m...v.wg+....@.zi.....q.C.k.#.z.9.....g80..z.O$.....9..R...z..X.....5.9.j.........._.p.q..Np...@W....i.../`.zx...\|I..P.\|A..&.{.M..h..?.:.kcC....Q......%.]..)..Xc....P.B6..-Z`.'kUN...N.dD^..}......j.'..k.......)R.$.\..q!5,....m1...I..[p'.$,.g.]..Ht....f...<Z.=..U..:<.U.\|...>.L-O@.8%2..I.B..z...(....v.t\|.....H.Q3.'.."......W>.x7.8......(."p.O.0.Cq./..,b.v.,!."Y...;.\}.P._...1.......L.6..O.w9.yC..{.......:A...YZcq...Y.>.c;Q...n.!.L..$..q.Q.N....(\|.."..8/.l5.eM./.L4...ghI...Nf.UlA.....I.#~q9'.7....U.>.-..H.....9.A~.v...o...?.6..a.).B.k..j...h....G....Od.t..^....Gni.`....5}.....Kv.....].}.{k.e.. '.a.x..k...P.... '.w.D.D._4.r..D.....<B...5..=............Y...r....WxK.&.p[....xk.T-.(..?..,...<.......7.Fi..?.(...tV).t..Xv.q)"...E./..K..&..

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2120), with no line terminators
Category:	downloaded
Size (bytes):	2120
Entropy (8bit):	5.572678664056994
Encrypted:	false
SSDEEP:	48:YyLVkckEzZggi1MP6Dqrm/EzcggFooE6DqrmlYnbuO:YyRkckyZgpaP4qYycgWooE4qdnb3
MD5:	42060E7044A3B750A6FBA018D4F23E47
SHA1:	0CE8C06EDA89C5861D9682619A4A72A8E117E859
SHA-256:	FD6401B37B1C918E546DFAE49676F68592F4CFFAF4D848E8E9F8790CC47CBDAC
SHA-512:	1D6AE789000BA8323339251DD9F6A2D2399E3B03ED8614619A2993002E2F3742D8166458C617BD57E3A037B5E431C607A45FD38FB79A612F2A1DC8E5883C09EC
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/938545461?random=1713460613609&cv=11&fst=1713460613609&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j476327158","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j476327158","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1scGBZjQ!2sZkjihw!3sAAptDV617y9L"],"userBiddingSignals":[["478041389"],null,1713460615496910],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested-si

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	12398
Entropy (8bit):	7.98391417889017
Encrypted:	false
SSDEEP:	384:IR5lEEeRIw+Zn2hToQ82ayqrx+sqMqIasfSbiEBPUAT:y5iEEoZQazx6M+sQn5
MD5:	0F91DC6F98E9B42B7E97F43439012C6B
SHA1:	D65A68C3EDCA6610BBB2927A20113BB173E8933C
SHA-256:	247D6330C57CC65B927CDCD6FA824A70AC64B35DB0DBA2C667B4815BCCCF392E
SHA-512:	7A5E9AD9BF2BC57C97C441870668493B67B5FF263CCCC41D383EC613A98D3E4145799B843363D39725A349496B6351526A3CF630ECEE81CCEC8A3C6DC15ED367
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/healthcare/3-i%20and%20r%20pages/video/member%20engagement%20with%20sdoh%20webinar/ln%20menu%20image%20270x170%20knocking%20down%20barriers%20with%20data%20jpg.jpg?h=170&iar=0&w=270&hash=F9FAAD5F1BF33D3F6177BFF5F80A0F99
Preview:	RIFFf0..WEBPVP8 Z0..........>Q .E#...j^x8....b..6c.z._..G....ow....YOM?..&z.w...c.I........y......bZ.\|....?....q.....=D.5.....k..t....._...~..............U.u.../._.o..........g...?...?......m.O..................._.?.....>./9Q., R.xV.k.knop."M..c.....#.=..~I...8...s...F/...7..{....8..0.)..tk..{..$..R......=.....,4D\.....>.X.'H:..........W.......}.E ..h.F..:..#./.fD+.Kh.....aY._.E.?.t.....4!(O...n.t9.....t.?.QW..........\|...U......Dg.s.}...#f>.....>+.h$-..ta-....Hq..m.'y.....%w.....@..q..$!.U....{.xD.c>F.fP.......<F...d........o.Q.6...>..>.3t83M.}JT.>..6..#i.[p......e0lG.....u..Z..... G..NX!FB.v.].S..g.}.......& ~'....Wi....b+7.z....^....I.n..@M..;..."".ra.+"......T..-..z.!4y..!.zGe.o.....'...Y..$.8y.D...~.4..<...#..nQ...#.E...1..%...(...pUg.Bme_.m7.'.Q..c0{X....%.G.Su...'<...J.45Mz..<0.GQDu..n'.k(..G.q..u...Ia.M.".-...h.....4'....Q_....Kk...\|....ta.~h2....#X.%.e^b.I...Y..t\|..!....N.j.D...OP.>....Y.'".}......./.A..b2.&b.H...OB

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	133156
Entropy (8bit):	7.98379352711709
Encrypted:	false
SSDEEP:	3072:nEnYHYqOHdtrfcEJgmkpyTQizEsQXSbDtaXreZbTlz:nOFdFfckgrmQsUyta7eFlz
MD5:	71A047D690DFC15BC3F27A3523FADB7D
SHA1:	EE5D5FB6C7C2D46A53F9E2CA0CF193CBA549247F
SHA-256:	AF563C616E5D93B58D435B184DA3F77E3FC17A3BB7FA54092C02EEAFCE9E89F0
SHA-512:	7E0EF48ED46CE090F1686C49C9D74D5DEA0705749669630F34236B179F625D2E2CE9E0A17CAE52CE79848DB2A9055C6433105FE4532B2D5305516544AC973FFD
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................X........................!.1A.."Qa.2q..B.....#R.3br.....$CS...D.....%4cs.5FTU.&6...Ed..................................N........................!1AQ.."aq....2B....#Rr...3CSb..$DT...4c....s%EUd...............?......Ud7.{....\W.Vy.=....k ..aL..

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	1.9182958340544893
Encrypted:	false
SSDEEP:	3:e:e
MD5:	2A7864FD30EA87A1919FFA2B8AC356E6
SHA1:	56D5BFFBED8BA669E11DC16078CCF1B8486D5C04
SHA-256:	1E5941238A72B1F89A5D4CFAD9164D5D37F08FAB209161841EBF39BF057083D4
SHA-512:	DF1B81266707CFFFBF25F0DE9A1A53FD97BA92A56528C583C9438CBDCFE1BB1B1A6E3573E097B3398C1320A7F72A5698B49C7B07F3F0F13EDCAE2C30DA51B687
Malicious:	false
Reputation:	low
Preview:	"full"

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	75463
Entropy (8bit):	7.974302906394143
Encrypted:	false
SSDEEP:	1536:TajvwCME1GCT8MYwXTlJsRYoMaQF8JyG+e7i++Zznf59zNB7ESUwmY:Ojv52ClYOJsGoHQB1qi+u59JB7EFY
MD5:	FFA78A10A5DC61806E1AB93C444E80C0
SHA1:	FFEBA6F844E0BDFA62456E814C2D0E6D968B6EF4
SHA-256:	9ADB8F569A3B96BD25165875765D5A4AE40CBA3E82274FDC3A6534C8FA5FD5A5
SHA-512:	EDB5471656B0C09881C61D56EB6B941E2869B1DDD599C5FB5F69D510688C5924AA77DA6545997C6A9AF6B58A1BB4505716864E80F9644F36F0DE2970687C5E75
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................F.........................!1..AQa"q.2...#BR.3..b...$Cr..%4DS...c5T...................................=.......................!.1AQ."2aq...B..#3R.Cbr..$4.....DS.c............?..uN.+........[..z..;G.Y.I#K......?...we....D.....A.w0....h.:..n...K..

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	140804
Entropy (8bit):	7.99861388452635
Encrypted:	true
SSDEEP:	3072:ncYetQTsEcU17bkqS/9R82VGisC0KroPHUx7Ltbs8rTdX:S2TsOJhS/gAsC/ofUxdI8rTdX
MD5:	836E1DCA392A30D5A4D61035255DB315
SHA1:	ED11F26F87CB73884B017971635C40A8579BFD95
SHA-256:	4E06721234B242C46CE4128A91F4EA21CC91F239186C097A4894C3B2C839E98E
SHA-512:	5B62AA88707A304FBBFDC73C104B08BAFBB4196F45DF7B42DE6FD2E619E87A8BF542AEB93CDD079FFEB24994629A40775731B956E23693561B3F78A84071DE38
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=F1DF4E8DA09829A65EEF7AACA0C56D50
Preview:	RIFF.%..WEBPVP8 .%..0O.......>Q .D#.!!...`p..M.6.....~7B....P.'..z,?G...._......u...4....^{^[..]?....x...-..9w..~?..........g.?...{W......T.......w.o.?....?......S..7...'.....?.?..N.........?....m.....u.9....7._.....................?.....v..\|=.....C..........7..........'._................C.......s...........x_....?..........[...7...?.'>......o......G.o`.l...g.g./.....>..7........'..._....`_..........._....~.[.....7.W.....?w............/.?....o......./...o.........O..............!.....Te@)...r...'k;...8...@{=......]..%.k...L......B.?..;#.w.zz.g...%.2....=h....c8.N;_..{..0.E.-....@..qg.~I..g..TA.4.......".k$.F.p.r'7....KO....T>....4........K].T.<\_.u..m.T..I.+.{.....K...m<.j...S)n.g..+T.(.g.Z...Oz...._..}0y...6"./....v.)...A.h...X....S..J.....oHt.a..R.k2.....N-.I..{..,....B...Db.^^e.D.mk...^....._~.S-^....%Zi/!...?!,U..........A...*.@x&-(}....\|D.....y+.y...?...L...8cX.j{z...4l...Y7.@+$.p...E....].>9.~d.....i..0....7...3.+c.!SP[.d.,+..9..[..:-........

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2387), with no line terminators
Category:	downloaded
Size (bytes):	2387
Entropy (8bit):	5.860161431810623
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08+Vd5FQP8oHKal96:wsbSUtJfxrqLWWWdV6j1CVd7YrlM
MD5:	7B2FA279A91FBEB48CEAA2AA5AAE0BF0
SHA1:	56D623DB0E1A9C86057BAB6A55366C42BBFAD6ED
SHA-256:	F8B0BD6599AE9EC58D794C96F19F3BD85B3FB3ED426A35113EBD21284641F178
SHA-512:	3A227D59B2781B8932F5AB8EC86A37122487EEC5712360B6D6BF15F4D6AB11827EA34E9C7B93ED80CF6DEE84069F10E9D1A3E98C9CC54BCD36C8EFCA9BAEBC6E
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1048135065/?random=1713460611085&cv=11&fst=1713460611085&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x445, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	36650
Entropy (8bit):	7.994431620416437
Encrypted:	true
SSDEEP:	768:ct1MM4/Jjeiqn5FhyDi3KHilTIapkTY3HaHbJAB+eI4VM/T1yXEQ2b:iGM4EyDcKHiIapWYXCUA9L1AEQG
MD5:	19B37F075FA1334F8115508E736344F7
SHA1:	6B0DA9765CDEBCD478E62731EBE8BA6ABC89B0E6
SHA-256:	D0A034FA0B8CC28B5779F4BA5B056DF5A78BE1C0CB67DD36C2757F6270083A49
SHA-512:	BB0AB2326B9635855ECB2E6916833C844690D67FA6930752CD67DF4C95C4394707676A27EE3B1D7683A2ED4468C23A4097B378173B28434BD42631D90E1F2134
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/government/ln%20baby%20j%20case%20study%20mantle%20jpg.jpg
Preview:	RIFF"...WEBPVP8 .....g.......>Q$.F#..."...P..en..83.........\|)Z...s.....\|$....K.:......D..y.....p...!.S!,...:.k.I......q.....t.t=\....:.=.\|..n.'?v.'.y......C.o.7._..?......~..o..$.k....p.}.a......G.......2.A/'..<.}y.!.....L......w]....d.X..n..T...\(.d..^.,.Nv..#.3.X..P.X...'.4.....=..h.y.3...8hG^YU..z.U.LxA.$.v.g.0(....o.`...4...%....d.>.l.....\|V......Anu..v....['..@,H.T.b<u.2.g._}...HI..)..kL.2U/.....C.\6......E...mHL.....YO=..l......)..........D.a.!..K.2."-..H....l~.&.]..5?...n....Q(6Rd.Z....i;.3..l..;Y........6.{}}..d.I...-...;....:.....M..26x(.o.....(6.>z.dL.A.^..)W1..?O....`....%%.<m. ..l..`3/.bk_.<C.{b#..32..(Z.T'...)~...w@l...L......2Sl/.~..i..-...`......u....N.kw%...W.......>.~.q...~...y..u...O.?...Q.uV.R..\..u.b.+..0.QL...(.S...ZPL2..".a...."..d.E...e.N.....C...c....b.z.....4..1...pJ...xeON...z?.....x..;.`.A....c.....d...$..0..}.@...E.B/.....!......%b.....)[&`+....]._MZ.'1.+2.~.lh...\|s..T.E.V.#...aj......[.6_......,dD3..C...RN".

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316), with no line terminators
Category:	downloaded
Size (bytes):	2316
Entropy (8bit):	5.856126792513598
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08XEUF4eFQ9XhKoW6:wsbSUtJfxrqLWWWdV6j1zZaQk
MD5:	E40F15E493540F30360E61ED6F272001
SHA1:	4185DA6DDA7DBF3C16B3C66DB29B76C3F82D6376
SHA-256:	5DAF46940FE7FDDE3851EDB31A8D9ACF91438BCF5464A9DD032D2AB64D8DA977
SHA-512:	F98187EED09FFCE259BE16F7C4CC5EB1DD17C3722F009D4A9FD528EEF96F19BB9953544552D5F83B4B2B013A2DE5FBF367DEC7CE378E9121B28A07E1A2C7EBBA
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/940382430/?random=1713460598535&cv=11&fst=1713460598535&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	6220
Entropy (8bit):	7.745614980491875
Encrypted:	false
SSDEEP:	96:/5xVxrjLvyx57kqMT7Tr5V6zN84f7MlsrhDTqYbI3xlehs1EXaBt6WYBNYTipDL+:70tmfuzi4f7Ml0hDvSChkBtocio
MD5:	EE09226D2F7F441602D3E0F02BBAF906
SHA1:	D2511C3F7BF7CAA604A7E980AE27645AE338F402
SHA-256:	D28AEEE6C9108A456E9F9A6A19889EB1CB708E0B291A991DCAAEB8743B16D3C4
SHA-512:	3FA96D020BD5DD862F11E2D8DBBFF1E99BAF2BF45D2925B0329142AB7B3FBFB118BC362B8B3CEA6AE593D72BE3C797F88A270EC04F5A745EED57906D7DF46454
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".......................................5......................!1.AQ.a."q..2.....#BR.b..3r................................$.....................!1..AQa."q..B............?...j .Q..~........e..R<....j"Z............$.. x....u...k0........a..@..=B.....b.i..*..p..L.U.<o.t.....H}4.ex.v.

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	dropped
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31972)
Category:	downloaded
Size (bytes):	57214
Entropy (8bit):	5.249984515449858
Encrypted:	false
SSDEEP:	1536:ITGNIWOKFze+dRkZsr7D6TjBfLj4lYr4HR:SKFK1ID3
MD5:	AE7C5011DEF46B283696BAF367586B5D
SHA1:	0EA5DDBC83112EE772496075C59F604CE5DCE93B
SHA-256:	615590A2CA2B667AFA7C02EF396F5500B62E22795DDBB46448F90494605D09A5
SHA-512:	95377E01EEA2E97083A9E6B4AE56C55A423A5B0CB7E6A298F06C004BBC318FF9A88E6687CAA4C1C869AA278C33AAE29BDB234B2CD85AE80ACF7AD76B7AD61862
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/autocomplete.js/0.37.1/autocomplete.min.js?v=638484963592761859
Preview:	/!. autocomplete.js 0.37.1. * https://github.com/algolia/autocomplete.js. * Copyright 2020 Algolia, Inc. and other contributors; Licensed MIT. */.!function(a,b){"object"==typeof exports&&"object"==typeof module?module.exports=b():"function"==typeof define&&define.amd?define([],b):"object"==typeof exports?exports.autocomplete=b():a.autocomplete=b()}(this,function(){return function(a){function b(d){if(c[d])return c[d].exports;var e=c[d]={exports:{},id:d,loaded:!1};return a[d].call(e.exports,e,e.exports,b),e.loaded=!0,e.exports}var c={};return b.m=a,b.c=c,b.p="",b(0)}([function(a,b,c){"use strict";a.exports=c(1)},function(a,b,c){"use strict";function d(a,b,c,d){c=f.isArray(c)?c:[].slice.call(arguments,2);var j=e(a).each(function(a,f){var j=e(f),k=new i({el:j}),l=d\|\|new h({input:j,eventBus:k,dropdownMenuContainer:b.dropdownMenuContainer,hint:void 0===b.hint\|\|!!b.hint,minLength:b.minLength,autoselect:b.autoselect,autoselectOnBlur:b.autoselectOnBlur,tabAutocomplete:b.tabAutocomplete,openO

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (65364), with CRLF line terminators
Category:	downloaded
Size (bytes):	2443200
Entropy (8bit):	4.6640050452114865
Encrypted:	false
SSDEEP:	3072:g+OhP2FAOa/4bSwLNomJeY5Zh0m0qJ+HfRXEj:nOhP2FAO1Zh0m0qJ+HfRXEj
MD5:	F0A4EB2B34C11FBC367F2FC21192839B
SHA1:	6F643C2D51B95439951D5BDDAE952612887B1690
SHA-256:	C0004CA4A35B9B4308672D9E38723E6BD3775FA786D25BBE130483D923FB86AF
SHA-512:	AB03B6AC538A7C35BFB3CB647582DFE357048470FF8EA6F159848F5144E7DB87F72762916150E03189EB220DB2243AB747B799D92DC3CB75D915ACEB0DF0144E
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221
Preview:	./!.. Bootstrap v3.3.6 (http://getbootstrap.com).. * Copyright 2011-2015 Twitter, Inc... * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE).. //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */@import "//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css";html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	17208
Entropy (8bit):	4.943679752044451
Encrypted:	false
SSDEEP:	384:daOJYYN8HJMHmEHTLF8FWFxFS45FZDNqa9:ddYYN8H8mEHTLF8FWFxFL5F1
MD5:	28172E3174724F2CD6E4E5A2444B83F7
SHA1:	0F6F3C9160AA47B97F0E7C97D2D28A57991C4E67
SHA-256:	689A2B59F3484778205025CC892D748D28377E125E30F64751AF205A0C873FD2
SHA-512:	427A465A560685F7142C1543EE024A3E2995EE324E61201D55F10B22A5CA56F79AAC8AA2046DC1A8AEA93A87E1FDC34DFEBB20C94E24FEA141AF00E5A9D04307
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/css/custom_site.css?v=aJorWfNIR3ggUCXMiS10jSg3fhJeMPZHUa8gWgyHP9I
Preview:	@charset "UTF-8";.:root {. --mdc-theme-primary: #13294E;. --mdc-theme-secondary: #13294E;. --mdc-theme-on-primary: #13294E;. --mdc-theme-on-secondary: #13294E;.}..#formContainer .form-group{. margin-bottom: 0.5rem.}...border-bottom {. border-bottom: 1px solid #dee2e6;.}...errorMessage {. font-size: 16px;. color: #E71D31;.}...defaultlogo {. width: 80px;. height: 80px;.}...errorMessagesmall {. font-size: 12px;. color: #E71D31;.}...mdc-floating-label--required::after {. margin-left: 1px;. margin-right: 0px;. content: "";.}...eyes {. background: url(../img/Icon-eye-fill.png) no-repeat top left;. display: inline-block;. height: 20px;. width: 24px;. zoom: 1;.}...eye-slash {. background: url(../img/Icon-eye-off-fill.png) no-repeat;. display: inline-block;. height: 20px;. width: 24px;. zoom: 1;.}..input::-ms-reveal,.input::-ms-clear {. display: none;.}...mdc-text-field:not(.mdc-text-field--disabled) + .mdc-text-field-helper-line .mdc-text-field

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5426
Entropy (8bit):	5.025256431953446
Encrypted:	false
SSDEEP:	96:JvfMJvDR1Wr1EYejCFBlXMMu0iz5yxRmokGRMKf2:5MJqr1EYKCFB5IVybtkZKf2
MD5:	5F0D201A09B5535ECCC53A9C55012BF8
SHA1:	667E39BB8C0C530136FF562E9BE99E4A9541CA2E
SHA-256:	638E5D328049A3216B19A44819510BD89F10EA1755FFD50772BDD8C1DACAD887
SHA-512:	B68EAA11E640F96DF42BB750496D17CFF0D2CD556AF4BB37B98709FE37291FCFBD71B4AF733E01280A962685F23C0BA8E18D98F4A5C5849571E5693367E479AE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1020 266.8" style="enable-background:new 0 0 1020 266.8;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{display:none;}...st2{display:inline;opacity:0.1;fill:#606667;}...st3{display:inline;}...st4{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;}...st5{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12.1068,12.1068;}...st6{display:inline;fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12;}...st7{fill:#FF8200;}...st8{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.8797,11.8797;}...st9{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.7895,11.

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43466)
Category:	downloaded
Size (bytes):	43693
Entropy (8bit):	5.4058076143814375
Encrypted:	false
SSDEEP:	768:O24PgzEwFTXr3VaFcKS5aG+9e77Uy1cAp42u+F2ETAgSIsG8x2hG0ltqGEoRpBY/:O24PgzEATXr3VaFcKS5aG+9GHqOv6Jxv
MD5:	D94F7F548DC11D731F4F5949913BEC75
SHA1:	57F396A039B461D4F03FCA96CB52996694B14013
SHA-256:	052AE5D7723241F0A1439298B26BEB4DB53772B707B58FB707DFC30D5A22C029
SHA-512:	495D788A96D6A8733885D3BFF00683EC05621964C32050E22F1EB2714487016C91045375219EEE5891F0592F4EDBBDBA9C019872F66997ACB2B472087673BCE2
Malicious:	false
Reputation:	low
URL:	https://cdn.tt.omtrdc.net/cdn/target.js
Preview:	/!. Sizzle CSS Selector Engine v1.9.4-pre. * http://sizzlejs.com/. . Copyright 2013 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2013-04-24. /.window.getSizzleForTarget=function(aA,b,r){var G,m,w,R,U,ag,aG,S,aj,L,x,at,an,aB,l,P,av="sizzle"+-(new Date()),T=aA.document,aD={},aE=0,ao=0,f=J(),au=J(),Q=J(),ah=false,N=function(){return 0},az=typeof r,ab=1<<31,Y=aD.hasOwnProperty,ax=[],ay=ax.pop,W=ax.push,c=ax.push,v=ax.slice,k=ax.indexOf\|\|function(aI){var aH=0,e=this.length;for(;aH<e;aH++){if(this[aH]===aI){return aH}}return -1},d="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",y="[\\x20\\t\\r\\n\\f]",a="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",V=a.replace("w","w#"),aq="\\["+y+"("+a+")"+y+"(?:([^$\|!~]?=)"+y+"(?:(['\"])((?:\\\\.\|[^\\\\])?)\\3\|("+V+")\|)\|)"+y+"\\]",t=":("+a+")(?:\\(((['\"])((?:\\\\.\|[^\\\\])?)\\3\|((?:\\\\.\|[^\\\\()[\\]]

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31972)
Category:	downloaded
Size (bytes):	57214
Entropy (8bit):	5.249984515449858
Encrypted:	false
SSDEEP:	1536:ITGNIWOKFze+dRkZsr7D6TjBfLj4lYr4HR:SKFK1ID3
MD5:	AE7C5011DEF46B283696BAF367586B5D
SHA1:	0EA5DDBC83112EE772496075C59F604CE5DCE93B
SHA-256:	615590A2CA2B667AFA7C02EF396F5500B62E22795DDBB46448F90494605D09A5
SHA-512:	95377E01EEA2E97083A9E6B4AE56C55A423A5B0CB7E6A298F06C004BBC318FF9A88E6687CAA4C1C869AA278C33AAE29BDB234B2CD85AE80ACF7AD76B7AD61862
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/autocomplete.js/0.37.1/autocomplete.min.js?v=638484955464930367
Preview:	/!. autocomplete.js 0.37.1. * https://github.com/algolia/autocomplete.js. * Copyright 2020 Algolia, Inc. and other contributors; Licensed MIT. */.!function(a,b){"object"==typeof exports&&"object"==typeof module?module.exports=b():"function"==typeof define&&define.amd?define([],b):"object"==typeof exports?exports.autocomplete=b():a.autocomplete=b()}(this,function(){return function(a){function b(d){if(c[d])return c[d].exports;var e=c[d]={exports:{},id:d,loaded:!1};return a[d].call(e.exports,e,e.exports,b),e.loaded=!0,e.exports}var c={};return b.m=a,b.c=c,b.p="",b(0)}([function(a,b,c){"use strict";a.exports=c(1)},function(a,b,c){"use strict";function d(a,b,c,d){c=f.isArray(c)?c:[].slice.call(arguments,2);var j=e(a).each(function(a,f){var j=e(f),k=new i({el:j}),l=d\|\|new h({input:j,eventBus:k,dropdownMenuContainer:b.dropdownMenuContainer,hint:void 0===b.hint\|\|!!b.hint,minLength:b.minLength,autoselect:b.autoselect,autoselectOnBlur:b.autoselectOnBlur,tabAutocomplete:b.tabAutocomplete,openO

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	86915
Entropy (8bit):	4.847224330419047
Encrypted:	false
SSDEEP:	768:2H3JclIO8L7M8RHrx8dQuAQ/9kH8RH3A1Y+yrXCMERME2ME0eSMEFMEJMEU2egYy:6c6fL7NRHKvzHRH3A1Ae
MD5:	A477962EE030D575FD81429A5C8A7A69
SHA1:	D697D912AC27512CBF58B20021A9FBC0D6277AC1
SHA-256:	97ED3BA2E5CF2F13564012A9908A246E69FD1CD803F6D2A225D4ADD7EC7EB977
SHA-512:	A2BC07833D39CDF7BA29D917DB8EEA5CD1F7D66559E287C597F00CFF6ABFF084BA107EF555B7377C39B4D37E781CD9AADB59C6627BA69DCF46E57FAAA6AF36E9
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Shared/AngularBundle/styles.css
Preview:	@import"https://fonts.googleapis.com/icon?family=Material+Icons\|Material+Icons+Outlined";.mat-ripple{overflow:hidden;position:relative}.mat-ripple:not(:empty){transform:translateZ(0)}.mat-ripple.mat-ripple-unbounded{overflow:visible}.mat-ripple-element{position:absolute;border-radius:50%;pointer-events:none;transition:opacity,transform 0ms cubic-bezier(0,0,.2,1);transform:scale3d(0,0,0)}.cdk-high-contrast-active .mat-ripple-element{display:none}.cdk-visually-hidden{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;white-space:nowrap;outline:0;-webkit-appearance:none;-moz-appearance:none;left:0}[dir=rtl] .cdk-visually-hidden{left:auto;right:0}.cdk-overlay-container,.cdk-global-overlay-wrapper{pointer-events:none;top:0;left:0;height:100%;width:100%}.cdk-overlay-container{position:fixed;z-index:1000}.cdk-overlay-container:empty{display:none}.cdk-global-overlay-wrapper{display:flex;position:absolute;z-index:1000}.cdk-overlay-pane{posit

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (380), with no line terminators
Category:	downloaded
Size (bytes):	380
Entropy (8bit):	5.311686615616611
Encrypted:	false
SSDEEP:	6:r0gBkfFXV8AfnFtkuYLu64Vk34tu2gD6KzI5bybhfGenwUPI5yjfGn:r0goIiFtnYh4Vm4I5zIBwRGeTPvA
MD5:	3F39471EB4BB7F0E98A9D2B0BE8F62C1
SHA1:	1ECA9A55310B30A29DDF1214400E68A17050714D
SHA-256:	94D451730F26A32A31AE88A931221CE55517142B151E6DD76B680751FC7544F4
SHA-512:	96CDBC0A68165D29BE0CD9D8881825939FBE117C171959B7B162A9835689C26BD86E67263DD2DD90A7CA655960FE7B6989FD5638253AC6246BDCA9BE2EF1C649
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISVgnJVApXC-8R5hIFDfyM-aUSBQ02_qTlEgUNZU3pnhIFDfwTp5QSBQ3QsCUCEgUNmvq0kxIFDRz8cvISBQ3RMNmmEgUNTGKNdBIFDc8ov2gSBQ1TWkfFEk8JQF1AM5yX-MUSBQ38jPmlEgUNNv6k5RIFDWVN6Z4SBQ38E6eUEgUN0LAlAhIFDZr6tJMSBQ0c_HLyEgUN0TDZphIFDUxijXQSBQ1TWkfFEk8JkCB-zYfgFd4SBQ38jPmlEgUNNv6k5RIFDWVN6Z4SBQ38E6eUEgUN0LAlAhIFDZr6tJMSBQ0c_HLyEgUN0TDZphIFDUxijXQSBQ1TWkfF?alt=proto
Preview:	CmMKBw38jPmlGgAKBw02/qTlGgAKBw1lTemeGgAKBw38E6eUGgAKBw3QsCUCGgAKBw2a+rSTGgAKBw0c/HLyGgAKBw3RMNmmGgAKBw1MYo10GgAKBw3PKL9oGgAKBw1TWkfFGgAKWgoHDfyM+aUaAAoHDTb+pOUaAAoHDWVN6Z4aAAoHDfwTp5QaAAoHDdCwJQIaAAoHDZr6tJMaAAoHDRz8cvIaAAoHDdEw2aYaAAoHDUxijXQaAAoHDVNaR8UaAApaCgcN/Iz5pRoACgcNNv6k5RoACgcNZU3pnhoACgcN/BOnlBoACgcN0LAlAhoACgcNmvq0kxoACgcNHPxy8hoACgcN0TDZphoACgcNTGKNdBoACgcNU1pHxRoA

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	35357
Entropy (8bit):	7.978830502871806
Encrypted:	false
SSDEEP:	768:MGXxiFC9gSG7bdw2V71ir95mbrR0dXlMJ5ybUZxhwUMO8:hwFBS0btpsR5iR8XlMJ5Jxup
MD5:	FF4D268F98B67615D857F81FCB5D1F5F
SHA1:	2B0E65846FEEF75E14550CE2969D7CBD564DB17F
SHA-256:	EFE2AD8B507C71A97F82EDC6FA124EE3A3F887B458E4018449BC5D0A265F880A
SHA-512:	49EC6FE85AE4D90A8B49C531E6D6BD8607A2E0DF9C1E0455243940C193DCA38AE1B45C0850365CF81E8C4D2E1E07A8F284814E792743BDE2E07B8F1D4CC4B392
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/0eca225fec0d4e05b916e2403d22d9d6.png
Preview:	RIFF(...WEBPVP8L..../.A.M@l.H.....>......".?.i.,.M.I.Z..M....e..ZX_...?..v......?@`W.o..(m..#M......A..L..2.{@.....4.Dq.E....\|.V.....}..$s..M\...1....3...{.'..".....%.<..;%..8.J..9Fm.....@...Vc.27T.2.I.U...../.F.:L.]L-.......Bb#I.........h@Sk.q...,.E...i..).t..$Z..g..%.O.. ... .$..6....LE.....I...R..........>'.Y].8..#K...E..3.M.p0)....o'.=.....h>._.,.W....\|....G..y..q........(..~.o(......~..Id<qd..{(...IwU..[....DC.X....Ws.ok/....(.._..4E..$L..%z............]....V...g..Q.dY..i....y..H.3...?R..0...s?.:.."...Z.v8...v..V\|.F.....b......q...^...Z"5...G..L.j..-.D....x...].=...!..Q...!.:[vXko}K.(..a........TI's.jT.._..aZ...6wo...Y.j@.q-..{...Q.3.<!..Y.a...T..oy..n#.3.....gY.jU,..RQ.8R...%;.4.iT..y....C?..f_$...3.4.`-.gT.~."..s.6...nA.\...........^...T.q...e$.'.z.w...~u."...Hv..Yi..D.;........ICg.`...G.h`...F.^..N&@.............G.f.@#...tJ..D@. ...^..3.DG..F.,.sL@...A&..f.U`..`..-..@u?l\|....W.Z.......,D....W....8E.. E...,o..d......{.}tr'..w..z9u..{F..2Q.

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1131
Entropy (8bit):	4.9808488040581045
Encrypted:	false
SSDEEP:	24:QVI0YuEHEnF6wq/EgNBQU0H2CteseXXgHnPHr4HioApAyY8:LHEFxq/EgTGgXaPOJhyY8
MD5:	A932E59CAEBE539D107409FF898A02F4
SHA1:	0209680671D5B51BDED79B8E7BBA1E7CAC12A637
SHA-256:	68F918E00439B495B508E2476C8171D97E29B8C3179570CD072F7CF5BA30DE43
SHA-512:	26316CD114C39BFC9E24396D82BA389E2332202694E80852CF0DD513AE184A51650EFB09510D9B59CB474EF7FFD05B92D66433DA1B898BBACF7C37929E9CBD9F
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Shared/ClientSideConfig/ng-app-settings.js?v=6951
Preview:	var oReq = new XMLHttpRequest();..var config;..var anchorElement = document.createElement('a');..let windowExistsAndNotLocalhost = (window && location.hostname !== 'localhost');..var currentProtocol = window.location.protocol;..../*.. Replaces the host of a URL. Returns the new URL... * @param {string} originalUrl the URL to switch the host on.. * @param {string} replacementHost the new host.. */..function switchHost(originalUrl, replacementHost) {.. anchorElement.href = originalUrl;.. anchorElement.host = replacementHost;.. return anchorElement.href;..}....oReq.addEventListener("load", function () {.. config = JSON.parse(this.response);.. if (windowExistsAndNotLocalhost) {.. config.eventTrackApiHostName = switchHost(config.eventTrackApiHostName, window.location.hostname);.. config.userInsightApiHostName = switchHost(config.userInsightApiHostName, window.location.hostname);.. config.userPersonalisationApiHostName = switchHost(config.userPersonalisationApiHostName, window.

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/527644678?random=1713460613584&cv=11&fst=1713460613584&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	D751713988987E9331980363E24189CE
SHA1:	97D170E1550EEE4AFC0AF065B78CDA302A97674C
SHA-256:	4F53CDA18C2BAA0C0354BB5F9A3ECBE5ED12AB4D8E11BA873C2F11161202B945
SHA-512:	B25B294CB4DEB69EA00A4C3CF3113904801B6015E5956BD019A8570B1FE1D6040E944EF3CDEE16D0A46503CA6E659A25F21CF9CEDDC13F352A3C98138C15D6AF
Malicious:	false
Reputation:	low
Preview:	[]

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.87377555746297
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKeHZQx66FTEVgWaee:PLKdXNQKOyo6FIVgL
MD5:	701C50FE2F9D8CFCA61542DEE7684552
SHA1:	952A04F81A291E11F5D4ECD7364A3840412BA65E
SHA-256:	9FC5DFC54DE18E9C98733BBEA6EBDCBC1F01C0B23F985556F24684EE96DC0582
SHA-512:	5CA3C342F4BE563EE68235F32BCB8B25B62215A961B903B3568C496FCAD4508B9408FBDE00C6592085A819826630462863630F888FE73348F13FC037A9AB2C99
Malicious:	false
Reputation:	low
URL:	https://www.recaptcha.net/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	5.739938373287495
Encrypted:	false
SSDEEP:	24:XmpX+IlfPkMOUb9uWG4Xza8hpziWutQlk+uI1ct8eiv/:Xm1+INPnOvWGqBZPHiG/
MD5:	0B6F5A3F21496E6B70B48BC1501515C1
SHA1:	BCA941205C54D00FDD2876203FA064DE0E4C760C
SHA-256:	92B2D95A0176DB539FD7B247521D73AD22AD4E8D09FD888CC50B0BEB577BBCAE
SHA-512:	6615E836B7E24276BF22D128B8990A9EBD10CF3E3BF78EA18B6DAC46281092A440307F349C50EC2F010701F5E74A6BF5774F4A2D4AACDFA0CEFF70F705468770
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/favicon.ico
Preview:	............ .h.......(....... ..... ............................................................................................................Z........iz..hw...........Z...........................7....Pd...#...5.................kp.........7...............9..../G...... 9..">..."..................JW.........9............H\...)...0..2L.. 9....... ..."...!... ......Yj............._.....$..%>.. 9..AX...2.......!...#..."...!................._....jz.......G..+@..G_...1.......#...$...#...#...#..................@U...5..;T..-C..Oe...5... ...%...%...$...$...%......Zm..........F[...9..D[..2K..Xl..&>..."...%...'...&...&...$......Zi..........z...$;..;R..J_..Qf..;U....../...7...6...0...&......................$;..8N..Pe..Uj..Vp..3I..8O..J`..Ja..6P...6.................[....H\..5L..Kd..Xl..n...p...l...{.......j...1H..]q.........[............Od..:S..Rg..w.......................m......................3........n...Qf..m..................................3.............../..............................

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Global/Content/Fonts/ggl-roboto/roboto-v30-latin-700.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37717)
Category:	downloaded
Size (bytes):	37841
Entropy (8bit):	5.1499963345502415
Encrypted:	false
SSDEEP:	768:L5veG0+6ihBBT+MGGGEYBEZ9yEfRtEV12GQOeSBQ6qFOTH2:L5veGsacGGEGEZ9yunOeS1W
MD5:	BFC1FDB7CE042868FCE549B271D1C0BC
SHA1:	BB3606EFB09DD7F5C884295B6E711B77C74B93DB
SHA-256:	7CA8D104A83CBE3ECBBF319589825E678C69E8EDF97A760336F8CFD63A69EA06
SHA-512:	897590A47856FBB72B42274388B5A2301F2B41A50683F389C45169DF6E9613F77CB911A556FDDB52B7C98F52B6E7A36E473A3930E387792B5C7AC0335EEB7640
Malicious:	false
Reputation:	low
URL:	https://player.vimeo.com/api/player.js?v=638484955464930367
Preview:	/! @vimeo/player v2.22.0 \| (c) 2024 Vimeo \| MIT License \| https://github.com/vimeo/player.js /.!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):((e="undefined"!=typeof globalThis?globalThis:e\|\|self).Vimeo=e.Vimeo\|\|{},e.Vimeo.Player=t())}(this,function(){"use strict";function r(t,e){var n,r=Object.keys(t);return Object.getOwnPropertySymbols&&(n=Object.getOwnPropertySymbols(t),e&&(n=n.filter(function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable})),r.push.apply(r,n)),r}function u(t){for(var e=1;e<arguments.length;e++){var n=null!=arguments[e]?arguments[e]:{};e%2?r(Object(n),!0).forEach(function(e){s(t,e,n[e])}):Object.getOwnPropertyDescriptors?Object.defineProperties(t,Object.getOwnPropertyDescriptors(n)):r(Object(n)).forEach(function(e){Object.defineProperty(t,e,Object.getOwnPropertyDescriptor(n,e))})}return t}function j(){j=function(){return a};var a={},e=Object.prototype,s=e.hasOwnPrope

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32972), with no line terminators
Category:	downloaded
Size (bytes):	32972
Entropy (8bit):	5.306592542194423
Encrypted:	false
SSDEEP:	768:yJKNbjB11iunwtYUhl4TKogn1Afd8+f5CsUvLbcNgaC/C/CYv5NgaC/CjCzIv/mF:y41vrDfssUvm8Eid4C/SaJ
MD5:	D4881A6054DA56BD933DFF9367745F8C
SHA1:	C34F8952F2DAB91D764EB7C61312FE4916A4904A
SHA-256:	1CFDDF20D04F7F3F75603868AD2B4BDBCFD5B5520E177D0231F6E2AB2241354D
SHA-512:	0D9542052280B958F765D4FF188A59B9565F627D382DCE31BC7AFA4BDB7DA2E7F37366EC6E07DAE2A7567B325B941EAF3601A2292B92FB812277AFCC0ADAE6F1
Malicious:	false
Reputation:	low
URL:	https://cdn.addevent.com/legacy2000/libs/atc/1.6.1/atc.min.js
Preview:	function $d(e){return document.getElementById(e)}var addeventatc=function(){var p,u,i,b,t,e=!1,s=1,l=!1,r=!0,v=!1,m=!1,g=!1,h="",f=!0,x=!0,w=!0,k=!0,y=!0,_=!0,T=!0,N="Apple",E="Google <em>(online)</em>",z="Office 365 <em>(online)</em>",A="Outlook",I="Outlook.com <em>(online)</em>",C="Yahoo <em>(online)</em>",$="Facebook Event",S=null,L=null,a=null,H=null,U=null,R=null;return{initialize:function(){if(!e){e=!0;try{addeventasync()}catch(e){}addeventatc.trycss(),addeventatc.generate()}},generate:function(){for(var d=document.getElementsByTagName("*"),c=0;c<d.length;c+=1)addeventatc.hasclass(d[c],"addeventatc")&&function(){var a="addeventatc"+s;d[c].id=a,addeventatc.hasclass(d[c],"keeptitle")\|\|(d[c].title=""),d[c].style.visibility="visible",d[c].setAttribute("aria-haspopup","true"),d[c].setAttribute("aria-expanded","false"),d[c].setAttribute("tabindex","0"),d[c].setAttribute("translate","no"),d[c].setAttribute("data-loaded","true"),l?(d[c].onclick=function(){return!1},d[c].onmouseover=funct

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3091
Entropy (8bit):	4.970085854301921
Encrypted:	false
SSDEEP:	48:DeZ3HpmGScpxUCaHJM62Ytw6a1YbwLJ4YlQ1CUJwlI0e2Q5t712mZmjcx9N:jofJcy62Yqt1YcLvW1OY2Q51NZvx9N
MD5:	D72B43F28E46B358431C030C67AB0C38
SHA1:	9902D46756039E8B4726F13485B0E9C4CB77EF91
SHA-256:	21B00FF46E507BBDC1873BCCAAD02A3E26F8E4B34811D2A3915CCCB3C9E5FB05
SHA-512:	7FB14665A02D53149795A9727BC21D66B63C1C977BC2AC41F99C273CE85F87E6F5F943B1A028EC1284BAD420FB32EF84703A927B4D782BD50380BCFC99053C85
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/layouts/system/VisitorIdentification.js
Preview:	.function subscribeEvent(event, listener, useCapture) {.. if (document.addEventListener) {.. document.addEventListener(event, listener, useCapture);.. } else if (document.attachEvent) {.. document.attachEvent(event, listener, useCapture);.. }..}....function unsubscribeEvent(event, listener, useCapture) {.. if (document.removeEventListener) {.. document.removeEventListener(event, listener, useCapture);.. } else if (document.detachEvent) {.. document.detachEvent(event, listener, useCapture);.. }..}....function startActivityHandler(e) {.. unsubscribeEvent("touchstart", arguments.callee, false);.. document.documentElement.onmousemove = null; // We need it here to turn off mouse move too..... if (true) {.. timeoutSleep(0, placeCssAspxRequest);.. }..};....document.documentElement.onmousemove = startActivityHandler;..subscribeEvent("touchstart", startActivityHandler, false);....function placeCheckerRequest() {.. var stt1 = getVirtualFolder();.. var stt2 = "layouts

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	4229
Entropy (8bit):	4.967608450640694
Encrypted:	false
SSDEEP:	96:npyIUp40w9E6upiFpFEKxYa6AyXajxjojJjkW5h4mTF:F79fSiFpZ6vXexQJ3imx
MD5:	607BD1D2BEF17DF2647BD84F28AC56F6
SHA1:	D09DBFA19598052A7B6BAC26BA21336274FE284F
SHA-256:	C225F4F8AC1F220092B9A0C322C9BE2F81044055C7B41D6E7EA8DD81C0E510E8
SHA-512:	916C5FB721948FC555FE1E81BB4D8D1617C61EEC00AD699EDD5DCE90A8392757CD76249322292B86D370528D221A393972F90B9A69EB9F6C45C3BBB250BBB56A
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"bf7bd77c-7b68-4d29-8fc8-56fe629dc57e","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018e86cb-1067-70d9-a4e4-74d1a355b08a","Name":"US Cookie Compliance","Countries":[],"States":{"us":["ca","co","va","ct","ut"]},"LanguageSwitcherPlaceholder":{"default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"CPRA","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"LNRS CPRA","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false},{"Id":"018e86cb-0f61-72d5-abc5-660accde9ba2","Name":"Global","Countries":["pr","ps","pw"

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386), with no line terminators
Category:	downloaded
Size (bytes):	2386
Entropy (8bit):	5.846475192562845
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08+QNklhFQP8oHKVa46:wsbSUtJfxrqLWWWdV6j1CQNklDYL
MD5:	D4723E8C5034AFF8F68814A2F8BBD35B
SHA1:	7841BE2BD2DA94497B4E09A7A7376AB8419DCEE9
SHA-256:	9596810A82BC5ECC36D7F3C30797E4D15ED2E05D310853DC0847C753438238E4
SHA-512:	82B33D913D2ABC64588407C67445BC8857172CBC012F0C225741FEEFDBFBD87628BF04E01B2EEE340626AF2F212F14E6331F25FC967B753A458830E36FA274FD
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/936886275/?random=1713460611056&cv=11&fst=1713460611056&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978398205?random=1713460613452&cv=11&fst=1713460613452&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2006), with no line terminators
Category:	downloaded
Size (bytes):	2006
Entropy (8bit):	4.784022834507815
Encrypted:	false
SSDEEP:	48:sVLvDqvMVsJvfqvQVavDqqvDLVscvOqvXVNvJqvaVsfvhqvSV/vfqvQVstvbqvN:cNGMrxHv8Rz
MD5:	11EC2B4B1B1309FCDB2A083F7922950F
SHA1:	772E0C56180DA1245039D4ABC1E500F276611671
SHA-256:	DF426DA0161D97484D39F2CA0CD23A52FC68B069394924636189E2BA8F60FDCB
SHA-512:	DCA2FBBE8AAE10886560B9445C10B07DF86DE9881800EFE4CB47CBA649D8BB5DD3B3434BC35F52A0F77030951BF7CD04687CF6A0F3D8B1E0266E6DC4B9F76AE8
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Global/Bundle/sharedAssetFontCss-en-US.css?v=2.0.769
Preview:	@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:300;src:url("../Content/Fonts/ggl-roboto/roboto-v30-latin-300.woff2") format("woff2"),url("../Content/Fonts/ggl-roboto/roboto-v30-latin-300.woff") format("woff")}@font-face{font-display:swap;font-family:Roboto;font-style:italic;font-weight:300;src:url("../Content/Fonts/ggl-roboto/roboto-v30-latin-300italic.woff2") format("woff2"),url("../Content/Fonts/ggl-roboto/roboto-v30-latin-300italic.woff") format("woff")}@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:400;src:url("../Content/Fonts/ggl-roboto/roboto-v30-latin-regular.woff2") format("woff2"),url("../Content/Fonts/ggl-roboto/roboto-v30-latin-regular.woff") format("woff")}@font-face{font-display:swap;font-family:Roboto;font-style:italic;font-weight:400;src:url("../Content/Fonts/ggl-roboto/roboto-v30-latin-italic.woff2") format("woff2"),url("../Content/Fonts/ggl-roboto/roboto-v30-latin-italic.woff") format("woff")}@font-face{fon

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2353), with no line terminators
Category:	downloaded
Size (bytes):	2353
Entropy (8bit):	5.847085867158253
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08XniqpQs5eOQ4H6:wsbSUtJfxrqLWWWdV6j17nbp8
MD5:	C23891B6561A0F58FE853BBD986E7430
SHA1:	BF2A25E9E121E334775122C920A79D69FD30525A
SHA-256:	1371BE9266B4DB09B493078A6A4D7ABF8FD689CA4651690F3FE50FB773B4BA9D
SHA-512:	B6ED197B152B55F0A535C320EB8BD30300C379A6F75634F567572E1E073826589EB7C63BBDA8617FE802F2BA2EF90589C19E9DD3D3DE3C8226C6F705C4D41D59
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/950188369/?random=1713460552602&cv=11&fst=1713460552602&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 800x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	53504
Entropy (8bit):	7.996340581516049
Encrypted:	true
SSDEEP:	768:gDRJkC8+3qcT0xnN24hEfsfx1pl6U0YpiRfrQkiVwT3ZhcjiacisprOJOqzjzATV:7PhN2ix1rXYfhiVwT3ZZa4pKJOq3dg9N
MD5:	B8DD18157B89D2B6AFE2640393F89A16
SHA1:	278ABD750FC08E1972711EC688B16D28D450E144
SHA-256:	313A5083FBF1187BF2E26D33B6A35DAE5D20D066703B74D41551728DFE5EF907
SHA-512:	1C958178F4B3A0D83E5E93227AF68A4BFF3894F007B73E719F66DE1DEAD65C7ED20F25C12BDA990D0EB3CC1307527D2090810F8AEA18E63D00A715F5C76E6BE1
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/corporate/csr%20wellness_mobile%201_800x420.jpg?h=420&iar=0&w=800&hash=5CAE46E3F2412A05E7D8584D25B63DFF
Preview:	RIFF....WEBPVP8 ....08...* ...>Q".E#.%".R=(...cm..:c...L.K..../.`.y....>^O....W....\|...[...?3.........g......._..z......?.?x_..>......\.m.C......5...o...o..j..._.c.....=.2.?._......5..~.?..k.w......7...+.o.-.q...c.#...O...&.V..... ..._........p._..~..........~....!._./...._........[....O.........[..._.......~....\....x..x+..r...<..P.x.R 6.z.+..f[UM........L.*8.t..}..s..=..8..'.......l..dLz....t.S.....G. .....h..=..1...b..........9......Yc../.b.c.......r....b.[.......^p...v......r...<.....2...d.#....;+./R.ir..k~..l.W...Y..{.H.."..K.....<.k...a.H.J.n.d....B5@.K..J?@..mB...g...+%..? 23T./E.g....HY....U......Gr....r..I.$a..jF"ir.....+kM.vl...@.....P.a.)f..Z.O.0.^...5S....Y.^..(.."..R.^....=.1.H7......:{.`@.D.C..o.\.;n.V..W...B.o_a......b...(E..=y....M,.j.Z:1F.X....,D......;f.?`...\|Xk+c..~k.S... ,e....H!.f~.=..d.=x..t.E.B.A.}.....)/.;........\}.-Ko..\y...8....`.1.......5^b^X.E.........Z.TN..g.D3a........W......L...-4...Q...Z.$..- dGDZi."....g._..n.:.

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2552), with no line terminators
Category:	downloaded
Size (bytes):	2552
Entropy (8bit):	5.839657575711911
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08LEUtFQPEDT8IodlK4h6:wsbSUtJfxrqLWWWdV6j1HZvYiCvY
MD5:	D66D28C54B779F72F72760BC91D86301
SHA1:	DD1C10F4830E275718990D5BA009FFD7F8923E3D
SHA-256:	9F831682ACBD3B6D3B1D695349F423EC57A285F698E427E383EFCED7C0C99416
SHA-512:	4DB12184538F0D2171EDBBB604DF8854E66FD81D0847B6AFBA32FDB2FAEA8E37A655CA64A86DC8A12BEA802C8B9D1B9065C176C2E03A486A781CA87591E19775
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/940382430/?random=1713460613414&cv=11&fst=1713460613414&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	64124
Entropy (8bit):	7.991176885890086
Encrypted:	true
SSDEEP:	1536:6Q6gynx87/dI7ayx/QuKKioj/5pVHIAd/5Eb8i7uxQB0N:6KbJAayCuKne/53H9Yyyy
MD5:	20252150AE7D7D4519569918F52E7E26
SHA1:	B6BF11859DB2BEAAB3E9809ED90EFA3758AFF726
SHA-256:	4ED976AF9F4D52612A3997F5830A287AD823CFCBA171DAED26DE817A608487DC
SHA-512:	09A805BABA26146ED0B988EA81063AA83025FA64CE8A236EB407CD6FE0B5D944FBE6EAD76B8D09B29547F0994DEC6C7C663E5D25D8FD855B293CEC2DB7F2E67D
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/flag_270x170%20png.png?h=170&iar=0&w=270&hash=7B72FF4206EA37A8AC8DEADF8690F469
Preview:	RIFFt...WEBPVP8Lg.../.A.MHl.I..U..J....3!.....=.u...R..]...y.\e.......nF....2v7.......7.[.J,7..K..\|.2.<e.A5..Y.z....:....ww%f....X`..W.h\|.g.Xk..0..L.qN..I.....-...@...i#.....$U..\V./L...^2...}.......eZ...I.N o.^..O.....TU.I....'.4yu.r..._e....x...e!..6I..!.PJ..}..._...-..y...le..6z1...a...._......F..E.!L.".1IZ.....m..2.&....K..).u`E.DQ@.#/i.~.<p....^..Q.eas]..qH...(.u,...q8&LPN.!..'q....v.UV...N..9....%'.g....%9$/....YK....9..>..I.....&.5!{.M.Eu..S8...'q........Y.x...!........8..Sa>(...........p........'..\p.Y9;..........U..K"9kgu'Y.F..... ....Xq..G\J.......jRMT.Q..\|....7....E.9.k.1Q>..p.@..8..Sr....._%..W.)..5.A.... h.uGzIx._0...p.W8.9.%.p...`.%...N8%g.J....z..d..x..QBY~.....&..Nx.%...!.a.B_... ......vQPA-..TC.....}..1....<......s`...d......y..3G..pi..%...C.g...1a....@....0.GG....[2.`O.bo.e...-.A...y.sOFL......#.. ...pt.\|..'....4..M...L.`......U.]'..[...8V}`.7..g.K....... ]..x}j.=g..!.0..Y..)....7.Ew.....^..........t'....

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3204)
Category:	downloaded
Size (bytes):	3252
Entropy (8bit):	6.0203797863229545
Encrypted:	false
SSDEEP:	96:QdCh20mThfOOMSEPBunhSgtAPSiw78pX044J9sLo8h:rh2x2OGunhBAqiw4pXD49C
MD5:	61EFCD3C45FD8903FC208B953BC1B6B1
SHA1:	96B8BC64BEE956EAD67AAF7F6ABEB2C0FA7342D4
SHA-256:	46DBBCDC1A623E1675911759C9048BA214CE3380EAC98E6E74657DB5FAE15F95
SHA-512:	F63B024FDBD011E452BC7704D1327E2E0AD0E3A62D41DA59A6D88C9576822299972A07AF18F881FF86072D0A3B6DE1470A3B47D85556E5DDF4FB5B157124F53C
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/toolIcons-en-US.css?v=2.0.769
Preview:	.doc-pdf-icon-24{background:transparent url(data:image/png;base64,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) no-repeat}.doc-xls-icon-24{background:transparent url(data:image/png;base64,iVBORw0K

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29601)
Category:	downloaded
Size (bytes):	320449
Entropy (8bit):	5.570344299999475
Encrypted:	false
SSDEEP:	3072:i29q+71vbzwHnXfMi8Cnp2LUF1eF5fyXatvFF722gY8pv1HyrFhNKoMn:i29q8wHPdU7tvH722v8pNHW+
MD5:	BB455483E75564798728998A17BE8DAF
SHA1:	659470D44ED8482EA4BFC5A4EACE85F64A3F411B
SHA-256:	FF1162CB1B88A72BB1768D70854C5DFA67AFC25B475A97BE991813102899CF49
SHA-512:	F12489294FDC7C2C9CD88A88F1CF4269CE0AAD3CF9FC19C174C224C35FA0364EEB4941B254445882BC949D12103EFB204203C78FB09436B33D4DCBCD744A50F5
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-N3SZ2VM
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"17",. . "macros":[{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__e"},{"function":"__u","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_name":"gtm.triggers","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":""},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__gas","vtp_cookieDomain":"auto","vtp_doubleClick":false,"vtp_setTrackerName":false,"vtp_useDebugVersion":false,"vtp_useHashAutoLink":false,"vtp_decorateFormsAutoLink":false,"vtp_enableLinkId":false,"vtp_enableEcommerce":false,"vtp_trackingId":"UA-73904828-1","vtp_enableRecaptchaOption":false,"vtp_enableUaRlsa":false,"vtp_enableUseInternalVersion":false,"vtp_enableGA4Schema":true},{"function":"__v

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	19116
Entropy (8bit):	5.523804056320178
Encrypted:	false
SSDEEP:	384:m32XOMtuHsk2YlJtz8ub27Swt6zwi2SnPtJecIFzktQ0F:u
MD5:	4356A8DF932BC277E353DC372BBD64A1
SHA1:	4E10DABE7ABEC7C2934BB510DBBEDEC42ED22F83
SHA-256:	3B89B885FF35EA5BDB32E9999CEF1B3657244D95C0AF99A4BB8A3C1992410203
SHA-512:	8E134F9A2D05F90D1088059544CFA3BF5A6DA26B4C31E03EE627E1EA52ED9C6614D8D9467E8367DF00AA347E6B67CA7BE1ADA586657AC2DAFBF4405AFCE84A83
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Sans+Pro:300,300i,400,400i,600,600i,700,700i"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidh18Smxg.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkido18Smxg.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/sourcesanspro/v22/6xKwdSBYKcSV-LCoeQqfX1RYOo3qPZZMkidg18Smxg.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Source Sans Pro';. font-style: italic;. font-weight: 300;. src: url(h

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.gif?s=1&k=xkz1feq&ht=tk&h=hrcenter.us.brightmine.com&f=6851.6852&a=681435&js=1.21.0&app=typekit&e=js&_=1713460551978
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2554), with no line terminators
Category:	downloaded
Size (bytes):	2554
Entropy (8bit):	5.8428620987402
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08nd9NFQPEDT8IodlKaZc6:wsbSUtJfxrqLWWWdV6j1zdRYiCnZl
MD5:	65E82B77093991D04C3227D0679C8C4B
SHA1:	7C3BB9685C61BCAB0969B4FA30630AC4A84CF6BD
SHA-256:	88C4DA212487132EC4A72DC63C1CF77B0223930FE8A9501529646835C5CC857C
SHA-512:	09826D1B04C205F5279E587BBB07093B4820147878A8F702C6C3ED96225DAB6CBE8FF4B3620F200A3CD908A54C8E2EC91BF829F338FEA39AD4C531AE4E818081
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1048135065/?random=1713460613621&cv=11&fst=1713460613621&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	95184
Entropy (8bit):	7.981161836580709
Encrypted:	false
SSDEEP:	1536:OxJAbabmCO/usJCkKVFa4Sw50GhJa8VifAK0bM97fh845pEwBNxHMojfs+KqEdmd:OG1CO2sJ9q6w506J7iUQNLBNxHtjfs+F
MD5:	2EFA8686782EBCED2D2B1B0511B9086D
SHA1:	3F14799AD36B1BE47F31D33C14771F3B50936BB1
SHA-256:	FA2A689B1319824C2FD9892176A8BF56EB17838869FB463C4FFF753F86943B15
SHA-512:	05721A3C2A0607B2968535F9B42E040A3EB7BA4E8EA6FC7DC9E80630EB5ECB039E7BCBB65826A53B43EA0F099C22F00619390724E7A1B5B1EEC37A2D5E5BB627
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................W........................!..1A.Q."aq...2....#BRr...$3bs.4CSct.....%&6d.....5DTeu...EU.................................K........................!1AQaq.."2...B..3R..#br...4S..5CDs...$%Ut....de..............?..M....r.SA.<8..........[W1..9........J.

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2716), with CRLF line terminators
Category:	downloaded
Size (bytes):	7189
Entropy (8bit):	5.280957978949911
Encrypted:	false
SSDEEP:	192:myJYbojpuQhoKSM0SVrn/MLJmJ/MveMr/6SMhbR5:myJYbeStWb/SE/z+/9MR5
MD5:	17BD2F37859AE9A84120CED73813FD4C
SHA1:	804233A7DA10C13CCEC993E4D9C005F88C2B8F79
SHA-256:	03C201CD6EE773F46087AD5A380E9B922C182DB6A8AF201CFEAA8B18E687FF64
SHA-512:	EBC59D66834655452ABBF61BF2C67F23D5B04329C66D855EE0BA9701394C6941120BE018D54A62ADF7DD24F4D6C5B4334A44B8C0A7BE06DD300D922D28C67041
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/js/LNRS.bundle.config.js?v=638484955474984366
Preview:	;(function(global) {...global.require = global.require \|\| {};...global.require.paths = global.require.paths \|\| {};...global.require.paths.score_ccf = "/Areas/ScoreCCF/js";...global.require.paths.score_bootstrap = "/Areas/ScoreBootstrapUI/js";...global.require.paths.LNRS = "/Areas/LNRS/js";...global.require.paths.vue = "//cdnjs.cloudflare.com/ajax/libs/vue/2.2.6/vue.min";...global.require.paths.algoliasearch = "//cdnjs.cloudflare.com/ajax/libs/algoliasearch/3.33.0/algoliasearch.min";...global.require.paths.algoliasearchhelper = "//cdnjs.cloudflare.com/ajax/libs/algoliasearch-helper-js/2.28.1/algoliasearch.helper.min";...global.require.paths.autocomplete = "//cdnjs.cloudflare.com/ajax/libs/autocomplete.js/0.37.1/autocomplete.min";...global.require.paths.instantsearch = "//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min";...global.require.paths.mustache = "//cdnjs.cloudflare.com/ajax/libs/mustache.js/2.3.0/mustache.min";...global.require.paths.geoip = "//js.maxmin

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	16152
Entropy (8bit):	4.543361292856887
Encrypted:	false
SSDEEP:	384:5oPr8Zj3+DcoTJ1Brdqd9ztcRchn1jzaOg41it6Z9GMTeip6i:uBvNgd9tC2g41it6X
MD5:	BB9AD1F428E21E1A55A4620F65ADAE5F
SHA1:	037B96AE235E872E743BD484F5540A6E423CF836
SHA-256:	F64928B57D1CFE72F66BD46B27C5E2FF8D837D349905A1C03A3534866A50650C
SHA-512:	D879681771B6F0CC72AE6BBBB18D97B0D87F4D1BFA677AD56EB63FDBD5AD02AE316285CD02A25B4C5E0DC7F4520E8A6F1ACEE979AA89BE108EC62A419C39AD1E
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 920.9 151.7" style="enable-background:new 0 0 920.9 151.7;" xml:space="preserve">.<style type="text/css">...st0{fill:#FFFFFF;}...st1{display:none;}...st2{display:inline;opacity:0.1;fill:#606667;}...st3{display:inline;}...st4{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;}...st5{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12.1068,12.1068;}...st6{display:inline;fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12;}...st7{fill:#FF8200;}...st8{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.8797,11.8797;}...st9{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.7895,1

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2716), with CRLF line terminators
Category:	downloaded
Size (bytes):	7189
Entropy (8bit):	5.280790815395119
Encrypted:	false
SSDEEP:	192:myJYbojpuQhoKSM0SVrn/MLJmJ/MveMr/6SMhbRk:myJYbeStWb/SE/z+/9MRk
MD5:	6197073CCAF45F4AADFFA2D4589DA4A6
SHA1:	7E741519A46DD750E35AC9D79AAA5F49D3571B21
SHA-256:	4037D5990E984772B12BB3618569F60EAB8A65D0C8A313EA019668B923DB2A53
SHA-512:	84F6CBD47C50DA7FC2B8E7C0D071DC47F3078927613A81CDC0CF0863AED5A542E1CE2B4B640A8BD36E936BEF45E0A19054BA4D17FDF0F75DBAB29CC8D2E02E4A
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/js/LNRS.bundle.config.js?v=638484963603668861
Preview:	;(function(global) {...global.require = global.require \|\| {};...global.require.paths = global.require.paths \|\| {};...global.require.paths.score_ccf = "/Areas/ScoreCCF/js";...global.require.paths.score_bootstrap = "/Areas/ScoreBootstrapUI/js";...global.require.paths.LNRS = "/Areas/LNRS/js";...global.require.paths.vue = "//cdnjs.cloudflare.com/ajax/libs/vue/2.2.6/vue.min";...global.require.paths.algoliasearch = "//cdnjs.cloudflare.com/ajax/libs/algoliasearch/3.33.0/algoliasearch.min";...global.require.paths.algoliasearchhelper = "//cdnjs.cloudflare.com/ajax/libs/algoliasearch-helper-js/2.28.1/algoliasearch.helper.min";...global.require.paths.autocomplete = "//cdnjs.cloudflare.com/ajax/libs/autocomplete.js/0.37.1/autocomplete.min";...global.require.paths.instantsearch = "//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min";...global.require.paths.mustache = "//cdnjs.cloudflare.com/ajax/libs/mustache.js/2.3.0/mustache.min";...global.require.paths.geoip = "//js.maxmin

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	133156
Entropy (8bit):	7.98379352711709
Encrypted:	false
SSDEEP:	3072:nEnYHYqOHdtrfcEJgmkpyTQizEsQXSbDtaXreZbTlz:nOFdFfckgrmQsUyta7eFlz
MD5:	71A047D690DFC15BC3F27A3523FADB7D
SHA1:	EE5D5FB6C7C2D46A53F9E2CA0CF193CBA549247F
SHA-256:	AF563C616E5D93B58D435B184DA3F77E3FC17A3BB7FA54092C02EEAFCE9E89F0
SHA-512:	7E0EF48ED46CE090F1686C49C9D74D5DEA0705749669630F34236B179F625D2E2CE9E0A17CAE52CE79848DB2A9055C6433105FE4532B2D5305516544AC973FFD
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................X........................!.1A.."Qa.2q..B.....#R.3br.....$CS...D.....%4cs.5FTU.&6...Ed..................................N........................!1AQ.."aq....2B....#Rr...3CSb..$DT...4c....s%EUd...............?......Ud7.{....\W.Vy.=....k ..aL..

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15406
Entropy (8bit):	1.5097187856279355
Encrypted:	false
SSDEEP:	48:D4xTaGcwbEb5qJPyKppRyEM7lyTqqZbXyE1N7yC5uPISzKnZrEdV1:D49aebEkJPyKppfcl8yE1NP1Kj
MD5:	D5F830AAACF83FD8EAC047BB27942B1A
SHA1:	B2E8C9CDE5052F37B1E43552F9BE27158C7E90EE
SHA-256:	5168F9DF2238F1ED03D618EE373D4A06D69F5CBCBC4A567822109F708E33150A
SHA-512:	AF220D8EF1F6081CF59151AB657A6400B46BE57B4A8D5AECD2A53B75EAD25AC03EE461C6836564BBDCA9777CC3B004C7A00E368459AF4B79BF8C0503FFBBBFBE
Malicious:	false
Reputation:	low
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ........................................................................................................................................................................................*...................................................................\...............................................................b....................................................Gq.=...7hhcXhh^1............................................ggaYgg`m....mm[.hf`.hf`}mm[.................................kkc.hga.UUU.............hhaBhf`.did=.........../................gg`.llb.................qqc.he_SSm}1...........\................bvv.fff.ff`-ifa_hg`.hhb.gga.ff`ZiiZ....A...g.......R...............Dhg`.gga\|gg`Jaaa................................<..............."...................................................a.......N..........................................................................................................................

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 624 x 8, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1633
Entropy (8bit):	7.217184302376083
Encrypted:	false
SSDEEP:	24:uiy1htZdWwjx82lY2T3pHEVYr7APyJ3Vu25kYGSqUisU2/y9Jd4xrt3/312msMD8:uiwqNn2SWrMaJ3ALYkUisR843/MxMRan
MD5:	B130EC4957CA67A8A673E20B1C4144F4
SHA1:	2EEBF5FCF4A94B1C120E2A15CBE4D88E0666A302
SHA-256:	DA7FA89E7E6AD95732B0B43C021D3E4A5E947E050000B941B0AE4CA209AB4A4A
SHA-512:	78A9CEF134F8AEA0108182D916E36CF702378CAB718EDDCD01CD39FF610EE043533A185D33F593820056433E2A143742225F37E2DE33D76E32419A1F48146813
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Content/Images/ContentModule/DropShadowTwoCol.png
Preview:	.PNG........IHDR...p.........y..&....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:C2361935DF9E11E0AA53DE6A8D57B760" xmpMM:DocumentID="xmp.did:C2361936DF9E11E0AA53DE6A8D57B760"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C2361933DF9E11E0AA53DE6A8D57B760" stRef:documentID="xmp.did:C2361934DF9E11E0AA53DE6A8D57B760"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R.....IDATx.....!..).U.......l2..-..U...4.C...KQ).....k?e;.Ey>.y.]wSl.QZ.gt....r.....}.j.......7...[.\..j..s`...

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 600x570, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	44538
Entropy (8bit):	7.995041617551976
Encrypted:	true
SSDEEP:	768:JAUlk9blp7kfNifrbni0vGTicxe2CCMdFD9MLzlnwyoUQFDy27qrWmxbIDbQJEyK:JrlkvwifCicicxfJMBszpwyxsDy27gWv
MD5:	CCAC60BDC703E25F230FA886C022EB54
SHA1:	0826A2E33CE126FAC395C55159D86B830FAEDFDE
SHA-256:	DC8043EAACE175BAFBB6C87F1B5CFB6361A541CF0F767AD5F78FBA2E65655238
SHA-512:	285F4E777CFC9AAE8F470EAFC6ED76791AC35CF337AE7C9DBB5F137B8AF255142EE31365C21F14288D9B0AA68A9692BD3E291579792D17AF705C5D44F2707D81
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/wildlifetraffickingwhitepaper-600x570.jpg?h=570&iar=0&w=600&hash=BE1263DEFABDE72A7F0B006766788148
Preview:	RIFF...WEBPVP8 ....-...X.:.>Q$.E..!..uH8....\|.......b.,.dx5.......~7.,.:.4:....M.?...#.../...KN........E.s.......7...?..'...K...^......_.?.~.....kt.{...w.?....1......<.......pO.........3..._.o..........k......?M............?.......}...7...................nU..c.....=1.Lzc.....=1.Lzc...R>...=1.Lzc.../.n........f..X.. d{....6Q...l.e.(.F.......Z......\|..{.V\? ...k...<rGr;...w#..s.....p...O.p.c..H.....Gr;...N`.....G.[P.S..cB.wn..>qS.g.......(...[;;..}}!Y..ut<_.N.so:..=<n..).P..V3./....F..+=.=..Qr.........{!..~..O.s....$......;....S.._.o.$.K9..i]....<...].8.X?M.j...lypM./..../,A...I.<n.V...+...b.>/ya.;.B.;...F3C{_i.p .n.E\......-.rl]......0P.Aq..<x.:....W}R.\|AU.....WI......u..VR..ba.-....0.7.4.9.l.G.........\|..Gr:.....:....=r.<}[...h...6t.....+..dE...I...p.,....p...U.X=y.7;b....j...q...l.H....^.@Y..Z0..v.u.y.d..KJ../.W.b...6Pq`...y..4`..k}....o..z..0.\|...3.6..m.6@I.#)....?.V.....a'.5.:.1..XN.....'.x......E~e\.~`.qN$v.HKQ.D.

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	63952
Entropy (8bit):	7.9756899269777515
Encrypted:	false
SSDEEP:	1536:p2rsQdepQIehVM4UvX6Z4WUZEHWPRwLdkla:psjdeyDHgvzx/wLd7
MD5:	CFCB5396E9B4692269164BF1111A5D4F
SHA1:	DD451DA32C0CBC2D89B8C8996D0FF7A06223A733
SHA-256:	98369EAD3F3CB6530DBBBBEF5E3E6E883D906F683EFCEE8BD986985A343EC2FA
SHA-512:	DAC583EBB9B7AD320827C2B1287885070256B9571EDF11F4D28DA77EC35AFA78FFC22B2D6088800E27BBE0A87CA9C843A0343BD5F10AC06C3A9FB1E53625ED69
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/corporate/catfishing-website-thumbnail_270x170%20png.png?h=170&iar=0&w=270&hash=7C549725CE1171E10F84CD1535971AEF
Preview:	RIFF....WEBPVP8L..../.A.M@l.F..+.L..._..~.....Bb...4..'....KH33.}.I........9......U...y*2.^....r..YJ..?.Q"....Q.}7..Qf...#...e..B.H.,........zF.n..........^...v..!......6.79...H./....:.w$i.A...6SU..........j.&..g...xJ....R... .%.<.NW}.\|(%......r.....3P.l.q...u.Wl..DU`[@HB..~.%..<.kR<?v]......v.K.."A.............).."..%..w..N.$i{B...[s..>.<...0....B.)<.s]W....mkZ........)...s..a..%M!.../....i=N.$...`.+.......N...&#..e.G..q......]p..B.A....a...tb...V,.'=....z...........#...pR8).9..u..@..C`c.......4....:z.N.D.A..h.m..X.'l.......4o.9..'...Z...j.k.'....:.......z..H>...v.......!.z.%Y`......Y.E..k....J.C...J.D..&....#..~..z.46......6MG...UX.......Z..._u@...\lu....)...8..Q...n.z.)V.0.....7U.O.......n...'..:Fm.m.F5`..=.Z..U.\|.}.Z..P..`....b..T..f..\|.....X.l^d..\..g....G.#<...N.B_...7....v@..$t2w.-iDqE.n7Y\|.#..5.6].x..2...7....n....c.......7~........o1h........E_...:.o..S......M[XYu[...>.?..6f.V...l):.Z...Pz.i....{...[.[p.g.F...~...-e...B.2Q,

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2318), with no line terminators
Category:	downloaded
Size (bytes):	2318
Entropy (8bit):	5.858963414782629
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08zsFIFQ9XhKqFxn6:wsbSUtJfxrqLWWWdV6j13sIEFI
MD5:	5CF0ECB578F9EA9183816B37BF4D776B
SHA1:	90FCD5BE09EC9D5A17FDF72EE7352D1ECCFCEDBA
SHA-256:	083ECF5225B24DB1F7A95F8BE83180AB673DED28ACB625AAA10F8566C9543933
SHA-512:	ED2B9FE5BA08940D94EB02516331A8CD4D059A2554B00DFD6964CBB3115D6AD6CA721EA012DAF9BBD29204D6882B8B50364F911735E9F445BAF350E8FA58B295
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10896111711/?random=1713460598583&cv=11&fst=1713460598583&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553), with no line terminators
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	5.839306086204915
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08WklnAFQPEDT8IodlKB6:wsbSUtJfxrqLWWWdV6j1CklOYiCt
MD5:	EB08FF8C940494B644A7818B82AD0C93
SHA1:	B8C7C77BE1C3F6288EA2B1DF545EAB79253AE40B
SHA-256:	0F4006170495E418E05996E00E371260CDF99309112971E0586EDA4D57D958D2
SHA-512:	C2DEE2646A9FFFEFA2E673B2EB4582BCF8EB6BB02C6631B45B7D368A363E096073093CDF331A4D344D8556235A20A3CFD38D6600D385366E60DC65A19F853FB1
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/936886275/?random=1713460613596&cv=11&fst=1713460613596&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2126), with no line terminators
Category:	downloaded
Size (bytes):	2126
Entropy (8bit):	5.580324569547077
Encrypted:	false
SSDEEP:	48:YyLVkckEz1gg82FDADqrm/EzUsaggzR1FNzDqrmlYnbuO:YyRkcky1gB2xmqYyagM1bqdnb3
MD5:	62E33E163D7FB753F616FD44A1A3DFD8
SHA1:	29F21216D14FF7F8ABD2D9D859F884C7C97923CB
SHA-256:	EFCE00970B1038CF71B28D3DD778EED29A6A86D237558B5DF466A128FCAF57D8
SHA-512:	2FFF602BD46303EB0E1ED75CB2F28504A2A8BFA4337E3993AD06269E3E8675A18F24B6BD91808C95AF9CA3FE3CB7683BFA329C97A5DAFBDC92DA698D24C3CC5C
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/940382430?random=1713460610947&cv=11&fst=1713460610947&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7859409331","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7859409331","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sT5ZByw!2sZkjihA!3sAAptDV4NRBx6"],"userBiddingSignals":[["7859872220"],null,1713460612329484],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (13036), with no line terminators
Category:	downloaded
Size (bytes):	13037
Entropy (8bit):	5.045213733084344
Encrypted:	false
SSDEEP:	192:XkmpwYMHxSDuhpUg24tqsyYD05onnaBBO+sgXs3vfAQBoNf7CL3p:XXpwYESLg2gqHoai+yffAmoNy
MD5:	942B473ACD3AC737923CEA920928DFF4
SHA1:	26C3E38F9FD8796F7361AA57BDD4EF1B39E35653
SHA-256:	0A2922A2BEA318FE39AF61440B389E7758A4BA4B132988E3BA27D5B4F9A37A14
SHA-512:	D582B7380D290FC3B78DEAC6A4FC21CD65F97DFB8CB3FEBA9B6EE11375D4ACEDFB5B3A56966A1FE80561741C82B6DCFEBB6B22BEAE7F2A4E0A22E0AFF6149320
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css
Preview:	/! instantsearch.js 1.12.1 \| . Algolia Inc. and other contributors; Licensed MIT \| github.com/algolia/instantsearch.js /.ais-search-box--powered-by{font-size:.8em;text-align:right;margin-top:2px}.ais-search-box--powered-by-link{display:inline-block;width:45px;height:16px;text-indent:101%;overflow:hidden;white-space:nowrap;background-image:url('data:image/svg+xml;utf8,<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 130 18"><defs><linearGradient id="a" x1="-36.868%" x2="129.432%" y1="134.936%" y2="-27.7%"><stop stop-color="#00AEFF" offset="0%"/><stop stop-color="#3369E7" offset="100%"/></linearGradient></defs><g fill="none" fill-rule="evenodd"><path fill="url(#a)" d="M59.4.022h13.298a2.372 2.372 0 0 1 2.377 2.364V15.62a2.372 2.372 0 0 1-2.377 2.364h-13.3a2.372 2.372 0 0 1-2.376-2.364V2.38A2.368 2.368 0 0 1 59.4.023z"/><path fill="#FFF" d="M66.257 4.56c-2.815 0-5.1 2.272-5.1 5.078 0 2.806 2.284 5.072 5.1 5.072 2.815 0 5.1-2.272 5.1-5.078 0-2.806-2.28-5.072-5.1-5.072zm0 8.652c-1.98

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.012188403968661
Encrypted:	false
SSDEEP:	3:+/Sn3CuhkY:l3XR
MD5:	A646B6F3DC380DF94756C75C88798D2A
SHA1:	BC8230D223F1F8693509A836CBA10B0409FE529B
SHA-256:	86472673447713BAC54725B9EDEE396FCB7943105166FDB71D7547DD0D68CB75
SHA-512:	C396AA9E1381D4FD5482A6A03B3204B27B91DCF7818DBAA4B071C7A3DCBEE5ACCD5BD9397B9E013E61B88C15F799FFBAA369174EEE3979E5FD3863CF3F9B2668
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwn7GNz2a66rqxIFDfhm7DYSBQ2eRYgK?alt=proto
Preview:	ChIKBw34Zuw2GgAKBw2eRYgKGgA=

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32000)
Category:	downloaded
Size (bytes):	128206
Entropy (8bit):	5.320709114660837
Encrypted:	false
SSDEEP:	1536:LzaLFeINY1xylhEpPdvV8cK9MRLF/6VCel1/Dx6oDnpC4Afn1hcw:LAeCn9aLFMFLAsw
MD5:	BCDF3D09081878F0B332439FF1F03ED3
SHA1:	CA1C34938E077F959F84224E7607A3EB6C83A3E5
SHA-256:	45A44547BC03BF28EEF08B155E355F497CA18EE852614D0DC602B91E20C64512
SHA-512:	CC869C25A0A46CF2C27A7C0563E62242F8ABFF2023D7E378FFFE31ED2F5DA3AC2E1B523A8F3D74341098A042C7BA321CE03063B2C9401588454F02B509A0E624
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/algoliasearch-helper-js/2.28.1/algoliasearch.helper.min.js?v=638484963592761859
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{var t;t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this,t.algoliasearchHelper=e()}}(function(){return function e(t,r,n){function i(s,o){if(!r[s]){if(!t[s]){var c="function"==typeof require&&require;if(!o&&c)return c(s,!0);if(a)return a(s,!0);var u=new Error("Cannot find module '"+s+"'");throw u.code="MODULE_NOT_FOUND",u}var f=r[s]={exports:{}};t[s][0].call(f.exports,function(e){var r=t[s][1][e];return i(r\|\|e)},f,f.exports,e,t,r,n)}return r[s].exports}for(var a="function"==typeof require&&require,s=0;s<n.length;s++)i(n[s]);return i}({1:[function(e,t,r){"use strict";function n(e,t,r){return new i(e,t,r)}var i=e("./src/algoliasearch.helper"),a=e("./src/SearchParameters"),s=e("./src/SearchResults");n.version=e("./src/version.js"),n.AlgoliaSearchHelper=i,n.SearchParameters=a,n.SearchResu

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9302005337813077
Encrypted:	false
SSDEEP:	3:CUHaaatrllH5:aB
MD5:	81144D75B3E69E9AA2FA3E9D83A64D03
SHA1:	F0FBC60B50EDF5B2A0B76E0AA0537B76BF346FFC
SHA-256:	9B9265C69A5CC295D1AB0D04E0273B3677DB1A6216CE2CCF4EFC8C277ED84B39
SHA-512:	2D073E10AE40FDE434EB31CBEDD581A35CD763E51FB7048B88CAA5F949B1E6105E37A228C235BC8976E8DB58ED22149CFCCF83B40CE93A28390566A28975744A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,..............;

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (18689), with no line terminators
Category:	downloaded
Size (bytes):	18689
Entropy (8bit):	4.9442975369540525
Encrypted:	false
SSDEEP:	192:u3b0RewUxhleS+hXhLiXlhbrknUVLIZSZlw8nbUJCIStpdFbvb5I0DCASn+WiN:yuMHkpitJhRK+WiN
MD5:	7926E514C3826A257AB081A584BF879E
SHA1:	801710DEF45DDCD3A5F8396BAEC19534284C13C2
SHA-256:	EA9E71009DBEA890591550B912AEC33DF4BC3859362888F969BEBA923E452445
SHA-512:	99AC9720445DE70F11AB11923995D092546C4C71A6468261F30F4563630F2318DE5BA894A2B68521F90B9A71EB445C77B74503E4EB05BA73C533BD6A926F35AD
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/webComponentDefaultCss.css
Preview:	dd,div,dl,dt,fieldset,form,input,label,legend,p,table,tbody,td,tfoot,th,thead,tr,ul{margin:0;padding:0}html{background:#efefef;-ms-overflow-style:scrollbar}button,dd,dt,legend,li,p,table{font-size:16px;font-size:1rem;line-height:1.6}body{font-family:Roboto,sans-serif;background-color:#f9f9f8;color:#202526}html.article-page body,html.static-page body,html[class*=my-account-] body{background-color:#fff}html body.basic-layout{background-color:#fff}#pageBody{padding:24px 33px 0;min-height:330px}@media (max-width:1279px){#pageBody{width:972px;padding:0;margin:24px auto 0}}.page-article{width:648px}.page-article li,.page-article p{margin-bottom:12px}ul{list-style:none}ul li{background:url(../../Shared/Content/Images/Global/Bullet.gif) 3px .5em no-repeat;padding-left:20px}ul li ul li{background:url(../../Shared/Content/Images/Global/bullet2.png) 3px .5em no-repeat}ul li ul li ul li{background:url(../../Shared/Content/Images/Global/bullet3.png) 3px .5em no-repeat}ul li ul li ul li ul li{backgr

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/938539671?random=1713460613557&cv=11&fst=1713460613557&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	64670
Entropy (8bit):	5.445559151761842
Encrypted:	false
SSDEEP:	384:IaMapYA02vw93aR8HdCSzqZBkFL/Rvq/GI2s/6LYlpCglbiwQqyNMqpGiaq3l/v+:DpYAm3rCpBvGhsxpCObicq3JsJLPqjdi
MD5:	67EAFE0CA141B9B52080C52D281966C4
SHA1:	93308B43A6234C01123881A7B02E9B014B082294
SHA-256:	51DFBAD7E1A227D3935016E5C4190E5E46E03DAA4B249E5DED55F54235EFBD7A
SHA-512:	BB006F610699E0912464ADB609509FE9CDCF35088FED00331CB14A2B4A6FFB0684C2763E13EF2FAE6152665C662076CE506118D14B2897851BA039BD9BAB9B79
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcTab.json
Preview:	. {. "name": "otPcTab",. "html": "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

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14650
Entropy (8bit):	7.987283444852811
Encrypted:	false
SSDEEP:	384:ZZsRLEptN84x5g7LZsE0bNLyJt/A/Soul2kxsDPKdC:ZZ4k84cLZsByJl6mkz
MD5:	1B1485B5A77DB2F70CDB507836773CBF
SHA1:	AA0D52BD3BBCF718801FFD68A35369EB127F105C
SHA-256:	8645510767B0A9A6EAA13BB9E4E0F3E1899CFB0031FB8E9A30C6EF31173E2DF3
SHA-512:	E31D8FC4403D62504C22A20B3164D1FFFA26693C8D030A049258BA9DFD08EBEC060A38288F84D29B5E3A3208F1DAFF04B29FAB840ADB42073605790A6BF41EBB
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/government/le%20staffing%20wp/siu%20thumbnail%20jpg.jpg?h=170&iar=0&w=270&hash=6694AFD94C49271307817C41FFC6FE39
Preview:	RIFF29..WEBPVP8 &9..........>Q .D#.!..&.8...PUV......<.....\..Y?..}?E.......s.............Qo..K..~s..?...........(...G.....}.2..V..9.......^....o....._....(.....c.'.{sv?._.}B...........>w....U>......{...7...\|"..............1>............?......<...C.O.G.7..q......?d?.......n..A.)...)...H&._...R..............h.O.]........-.dR..m.....&\|.\.R;.F....v...F2K.).Y..W.t.\.g...W.Q!..\|.Z....Q.%...}7...x.%)......{.`..:....u.3.7."....VB...K.2]Z.m?(...x.F..7n.)....d6.Q....pP..AWl.....S.'....$D..]&...<......{...xGR....=..U].....<l$V7.v........E........ ..uP..Q.<."tm>....=..;...{.V,."...g.G1..]=.........'. .l'WC.....C..]....jgY....+W....L...'$Z.f.?pm..H.u+i.{\..D....f}4...3%.....c.8......,.DU..~?.....6P........y\|&k...y..lB.c<l.$.?\|1...q..^K...`ZlV....-.yG............~..42.^SQ..~..._.7...l.D)P.....O.4...(D....;g.g...8.=..O..5@.....w..W.F......uuX.......4.........)F.{...Am..U.*.4^....\|..Z..h..YC.gi..........15...^....A....d~....k.x.-..el..w..

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	5.739938373287495
Encrypted:	false
SSDEEP:	24:XmpX+IlfPkMOUb9uWG4Xza8hpziWutQlk+uI1ct8eiv/:Xm1+INPnOvWGqBZPHiG/
MD5:	0B6F5A3F21496E6B70B48BC1501515C1
SHA1:	BCA941205C54D00FDD2876203FA064DE0E4C760C
SHA-256:	92B2D95A0176DB539FD7B247521D73AD22AD4E8D09FD888CC50B0BEB577BBCAE
SHA-512:	6615E836B7E24276BF22D128B8990A9EBD10CF3E3BF78EA18B6DAC46281092A440307F349C50EC2F010701F5E74A6BF5774F4A2D4AACDFA0CEFF70F705468770
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... ............................................................................................................Z........iz..hw...........Z...........................7....Pd...#...5.................kp.........7...............9..../G...... 9..">..."..................JW.........9............H\...)...0..2L.. 9....... ..."...!... ......Yj............._.....$..%>.. 9..AX...2.......!...#..."...!................._....jz.......G..+@..G_...1.......#...$...#...#...#..................@U...5..;T..-C..Oe...5... ...%...%...$...$...%......Zm..........F[...9..D[..2K..Xl..&>..."...%...'...&...&...$......Zi..........z...$;..;R..J_..Qf..;U....../...7...6...0...&......................$;..8N..Pe..Uj..Vp..3I..8O..J`..Ja..6P...6.................[....H\..5L..Kd..Xl..n...p...l...{.......j...1H..]q.........[............Od..:S..Rg..w.......................m......................3........n...Qf..m..................................3.............../..............................

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14712, version 1.0
Category:	downloaded
Size (bytes):	14712
Entropy (8bit):	7.984524638079703
Encrypted:	false
SSDEEP:	384:J1xXvtvezpO6syafJ+CnNcxHGoY/7NazJq:dXvFysJfcqNqmFDNaM
MD5:	3AFEAE0D768769F5E5F30AC9805C5B70
SHA1:	3ADA17C2B462DB3E7A1FD85C3F4670DFE7704F4D
SHA-256:	0D0A6262C545E8BBC895116E5AFB22579C468D7ABB77E378F377D6FED57C1DCE
SHA-512:	71C361AC0D7B72B222D4F087B46D1BEA318ED6652C4D37EC3403F0B0616482B5040232E06F2FCF13109CDF6151DC209E882C0DB40B2C6ACE4E2E0292FCDCDAB5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3ig4vwlxdu.woff2
Preview:	wOF2......9x.......8..9..........................n..<....`..b...\|.@..d..6.$..D. ..\|..4..v%.m.... FO.#F"l.d..#......?t..'$.2..n..Ye.1$..]...$s..W.s9.<%.L.1}Yy.6...-. b..[......7!..<K.W\|.ij.f..?.\;.....N.$..T(.}.9."0n..........g)@.WE..@.....ZV..=U...;....}.:.t.H.B..H((2.E%$.@1...s.]..R]T..2..vQ.m.7....bm....T.....To.w..v)...H..).B!@..,.zB.ev.....3..L....[..z...\f[...BUV...^...0..8.....D.......\.$_e;.._../K.0.D..0.@..`...mn.....b......h..#.n?.A..}v.l..]yq.......].#=N..9p..9b.8i.!Hl......(.p.>.....{..`.^}W..Fc.O.~.....f..a.%..k.I..e9@Ov.dH.M......i.T.....K.x\|L1C..j..r.l..#.l/...=.Z...e...,k.<...A.A.I..]..@._...z.o.f2.....8,..?..qDUQ.S....a..L$V........K.d.F=~Ga..`.T.H......e{\...^..4cap...o!`9.-.d......._.k.Na..@.......`>.d..E...N....!.DE....`e.)P.R......Q.H....FA0..[U......I....d.......y{...J^...........]#...kH....0..}..C.\|b}.n.....7$c. ...........y....-.0...}..D..#...>}.Q.....*...=R...?.4....n...5.!93"/<9Ao.v.e..Jw.S..0..RK...L..k..)....-...M.

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	274330
Entropy (8bit):	5.252281086834985
Encrypted:	false
SSDEEP:	3072:61Vjy10hR62ihOmNHLDWVKboRJlSGWM9vn1+AXU/SlA14pT1XTuM78:gBXznCvW4boXl/t+AXU/SlA14pRuM78
MD5:	A5C0EE797B45D0E1563C5B2705B7BD4B
SHA1:	C030BE4A8F321BFB8CA445C0ECFEBF6ACA4779C9
SHA-256:	A3735D18FDE92E8A3A5DD579834843E37A0AC93D13CCF5985615BFC2CBE5A6AE
SHA-512:	53596C8EA7F93293D6E12348229E33F86D22A400FD650385D105ED40F76D4F8501C7AFF44469AAAB4C6CB7EDCDB62E8F95851011151FA3B4559FCB09A6E6F8AD
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsJs.min.js?v=2.0.769
Preview:	!function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?window:this,function(C,j){var h=[],m=C.document,c=h.slice,$=h.concat,M=h.push,F=h.indexOf,W={},R=W.toString,g=W.hasOwnProperty,v={},e="1.12.4",T=function(e,t){return new T.fn.init(e,t)},B=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,q=/^-ms-/,U=/-([\da-z])/gi,V=function(e,t){return t.toUpperCase()};function X(e){var t=!!e&&"length"in e&&e.length,i=T.type(e);return"function"!==i&&!T.isWindow(e)&&("array"===i\|\|0===t\|\|"number"==typeof t&&0<t&&t-1 in e)}T.fn=T.prototype={jquery:e,constructor:T,selector:"",length:0,toArray:function(){return c.call(this)},get:function(e){return null!=e?e<0?this[e+this.length]:this[e]:c.call(this)},pushStack:function(e){e=T.merge(this.constructor(),e);return e.prevObject=this,e.context=this.context,e},each:function(e){return T.each(t

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 17 x 17, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	249
Entropy (8bit):	6.2323518464862
Encrypted:	false
SSDEEP:	6:6v/lhP6DlPseFlFITvBk9KuF6Kv/Ahd0caKII3Tk/Iotjp:6v/7KWerFITvBYKuOhdHkIw/Hz
MD5:	C4970133DC4F3D752BE28B4D57A3B4F2
SHA1:	8DF31ED268FB36BEE7699B8A275FEF93A1960694
SHA-256:	EB62FC2C87CA78552EC5036135D2F1B7DF4CDB7E1E651A9DEB44007E7BABE451
SHA-512:	C0C7B08DF96574F987E803771299318E8A8DFB945577A53A1A2F4000B551C235F334308C8E9CDD479F90E047F65F748B6198C79E03CC1C6155820DD4EAF98EC3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................?PLTE.........fff...fffhhh...jjj...........................fffzzz.a.....tRNS..W.E....M...qoD....$P...VIDAT..u.Y..0........FK.........)..-#....oB.!e.T...C._D..............a....%...u...y....j...w....IEND.B`.

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32010)
Category:	downloaded
Size (bytes):	69800
Entropy (8bit):	5.291240476188174
Encrypted:	false
SSDEEP:	768:ZuYWgLvazABY1PXodnScguN+hC03wApe4NKxvnq1OTTbOA3rmho:ZLLvFBY+dnS3uN2CKwAwi1OTTbOA3yho
MD5:	E07475ADCA84AC447B7FF987B79551F3
SHA1:	1796B96F93FD8342A5D7DDD8165DE36FE1308E28
SHA-256:	4329EE5A90AFD8EE0DE17DF581B8ABABE5591352F8F0001E6E4698A74D6E5CE3
SHA-512:	DD275B1428111F62F9A9B01E7AEFCE7B58BCDC71AA53DBF8AC1E81C21436B782D76CBC6894165D1867493E244F6FC46F950ABC1FD8FF13602A2E6AFE8C2126AF
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/algoliasearch/3.33.0/algoliasearch.min.js?v=638484963592761859
Preview:	/! algoliasearch 3.33.0 \| . 2014, 2015 Algolia SAS \| github.com/algolia/algoliasearch-client-js /.!function(e){var t;"undefined"!=typeof window?t=window:"undefined"!=typeof self&&(t=self),t.ALGOLIA_MIGRATION_LAYER=e()}(function(){return function e(t,r,o){function n(s,a){if(!r[s]){if(!t[s]){var c="function"==typeof require&&require;if(!a&&c)return c(s,!0);if(i)return i(s,!0);var u=new Error("Cannot find module '"+s+"'");throw u.code="MODULE_NOT_FOUND",u}var l=r[s]={exports:{}};t[s][0].call(l.exports,function(e){var r=t[s][1][e];return n(r?r:e)},l,l.exports,e,t,r,o)}return r[s].exports}for(var i="function"==typeof require&&require,s=0;s<o.length;s++)n(o[s]);return n}({1:[function(e,t,r){function o(e,t){for(var r in t)e.setAttribute(r,t[r])}function n(e,t){e.onload=function(){this.onerror=this.onload=null,t(null,e)},e.onerror=function(){this.onerror=this.onload=null,t(new Error("Failed to load "+this.src),e)}}function i(e,t){e.onreadystatechange=function(){"complete"!=this.readyState&&

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	1.5097187856279355
Encrypted:	false
SSDEEP:	48:D4xTaGcwbEb5qJPyKppRyEM7lyTqqZbXyE1N7yC5uPISzKnZrEdV1:D49aebEkJPyKppfcl8yE1NP1Kj
MD5:	D5F830AAACF83FD8EAC047BB27942B1A
SHA1:	B2E8C9CDE5052F37B1E43552F9BE27158C7E90EE
SHA-256:	5168F9DF2238F1ED03D618EE373D4A06D69F5CBCBC4A567822109F708E33150A
SHA-512:	AF220D8EF1F6081CF59151AB657A6400B46BE57B4A8D5AECD2A53B75EAD25AC03EE461C6836564BBDCA9777CC3B004C7A00E368459AF4B79BF8C0503FFBBBFBE
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/favicon.ico?v2
Preview:	............ .h...6... .... .(.......00.... .h&......(....... ..... ........................................................................................................................................................................................*...................................................................\...............................................................b....................................................Gq.=...7hhcXhh^1............................................ggaYgg`m....mm[.hf`.hf`}mm[.................................kkc.hga.UUU.............hhaBhf`.did=.........../................gg`.llb.................qqc.he_SSm}1...........\................bvv.fff.ff`-ifa_hg`.hhb.gga.ff`ZiiZ....A...g.......R...............Dhg`.gga\|gg`Jaaa................................<..............."...................................................a.......N..........................................................................................................................

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32717)
Category:	downloaded
Size (bytes):	34341
Entropy (8bit):	5.322542967980155
Encrypted:	false
SSDEEP:	768:9wVYJFmNX/9Br7l0V+WGUgxtu2KD7DZVAJXgtmyO/:9IYJF+X/nfWVyTEYJJ/
MD5:	DFDD9E1F988805F0C2FBB10CD6B8F034
SHA1:	B6CD42821DD2E732919FD053A4665AF0E15E0335
SHA-256:	D6D01246A30E9D483531C27721F73F266FA4AF35EFFDB21683AC02A620AB8AAF
SHA-512:	30AD79F7D41D6F5736BA1F63982D85801CBC284C39C40682F5A483F3241DC44BDCC24E9437370EBBE420B011B5D2BA94BCB1413D742BDEBE1BB5ADDD149AC891
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement.js`..function AppMeasurement(e){var t=this;t.version="2.23.0";var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_c";var a=n.AppMeasurement.mc;a\|\|(a=null);var i,r,o,c=n;try{for(i=c.parent,r=c.location;i&&i.location&&r&&""+i.location!=""+r&&c.location&&""+i.location!=""+c.location&&i.location.host===r.host;)i=(c=i).parent}catch(e){}t.log=function(e){try{console.log(e)}catch(e){}},t.Sa=function(e){return""+parseInt(e)==""+e},t.replace=function(e,t,n){return!e\|\|0>e.indexOf(t)?e:e.split(t).join(n)},t.escape=function(e){var n,a;if(!e)return e;for(e=encodeURIComponent(e),n=0;7>n;n++)a="+~!*()'".substring(n,n+1),0<=e.indexOf(a)&&(e=t.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},t.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?t.replace(e,"+"," "):e;try{return decodeURIComponent(e

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386), with no line terminators
Category:	downloaded
Size (bytes):	2386
Entropy (8bit):	5.842470927684998
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08VEURFQP8oHK86:wsbSUtJfxrqLWWWdV6j1BZTYQ
MD5:	ED2FEA2C2F6AFA4B543FD92F7E324CA8
SHA1:	6BBDF5AD19926A0790F65A9F5146F2B8DD68AFD7
SHA-256:	EBA5F43AA0A29E603302A82E9494DD91A4E935974960AC903C3B0F1B8B8F0489
SHA-512:	F080BF03D5B09918F715752ECA60801479B2005D61A5ECF4302C6ADDB29540D12BD0706E23ADC07B414FF95DBEC827775814F579D50B63ED5686F45BB0707C95
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/940382430/?random=1713460610947&cv=11&fst=1713460610947&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2386), with no line terminators
Category:	downloaded
Size (bytes):	2386
Entropy (8bit):	5.862230916967129
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08+CVzTFQP8oHKha6:wsbSUtJfxrqLWWWdV6j1CCVhYMf
MD5:	7736580D524BFCAC63FBDEA420958B80
SHA1:	89C454C4FFEE0BD0E50A1F50A39EB0714FC095C5
SHA-256:	38D44999703439F48F60AA03B7E6AA4E2AD087E2D858D3103E80FDD2FF19DD86
SHA-512:	F0770637BD0EEB0528ACD3B188FD2CDD3207A27D15ED88E7B6F85F9FF7C625E05BA6231D1D349C89540AE239FFE533FB9B8254CCA5C461486247F6ED57516F81
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/938545461/?random=1713460611072&cv=11&fst=1713460611072&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	90905
Entropy (8bit):	7.977526750220135
Encrypted:	false
SSDEEP:	1536:/R9kd2EwNWmWjuKUmHVkyAf1lQmoncvake+4Uf3Ca3M7c9g67xxV30o65:pONmIuK2yAf1lQm6lQ3CeV7xxV30oI
MD5:	4DDE5F0962DA70DFEFAEF4FC46FD9838
SHA1:	F9C3623F2B525C08964C34A81A312F5A8144C279
SHA-256:	1B1CCD61B05D73A2993C86D190CA08B9D8A99BB027D7EBEA743A5B65051C07C3
SHA-512:	B5F6F68F78A9C55FD33AA2EDFA4C813E96E2433DDA00ED09D66D62C708831E310715C30B0387DEDFDD940827445F073D1227D791A4C0124B9E8EBFD99107193B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx.L.g...y..<....{......D#H.K$ER...Xc.r..q.L..M&..$...$..;..c...E...D.f.@.........o=..........)...<./,DPo..f.H..(...Q.R...A.H)..(.$(..L...H.N...(..T...x!...i....'....<......'.}...\...S...9......O}.\|..6..=..(....;.gs+&E@.r....__[$\G$...~`.......M.8....{.Z..........w.kk.?}......8........B1......W_.....?.t..SG...?.zckm.....\|.....C.lzeymdx..c..l..k.w.~....C........n.V)w[u.0..p=_.....X.4..x<....xZ(l..N.\.6;=....d&.\|0....@ ,.HU`0A@.B...Z..x.......;3+.=~...>..y....k..}7.K.m.U ._J..e.".....(..@DD.J..J)%.@H.....J).@.(@.BQ)..(..P..J)%.B.H..R....M.P.......'.\I.2......G..Y^[.J..TR..W..._:.........`~b.86\.d.V..t. A$.3..2J.cBH...n.......N..i.)RC#.T.TdR.D,.L'B... ...3.`1.....\.....}.......Y...k...Wl..:y.R`...eZ.H.oU.3}.^...e.;...G....y.x....V..pB...(..P.!. ....@ ..I.Q.#=)<.=OH....S1......N.P....T........?~....V.?..'.8>wo...w._oJ......\|.R.m.L..D.@.$...".RH....R$J. ..H)....R)A.DDJ.e....$.q.R~.#.L.N.....=.

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2553), with no line terminators
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	5.848746118341722
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08wpHFQPEDT8IodlKQ6:wsbSUtJfxrqLWWWdV6j1MplYiCE
MD5:	571B662A3A14D63168C427F8F1C81E7D
SHA1:	50BC29EC6513D97B33C1AB87BDCE8B3E0810497F
SHA-256:	1C397EBAE8EE023A4689E6F9A9CCC1DF6CA077AAFB1A7368B737BF4C7B43A4A0
SHA-512:	DC2F6033F61A86615F12775003253C11187220D08D42ED1BD9108ED63C9C62A2ECCF117A9774BCEAFE09EE0154B78BC6AF22C0F418E24D231493AC94B7D12257
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/978398205/?random=1713460613452&cv=11&fst=1713460613452&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	569
Entropy (8bit):	4.896633254731508
Encrypted:	false
SSDEEP:	12:Uc11FP/sO6ZRoT6pHAciJkSAx/s6ZmOHc9n+5cMK00k14enEPCedG:3F8OYsKuJXYmOOk4TfenEPCD
MD5:	71D6A57D21337114032CA39B294F3591
SHA1:	ADA1D867672276F16EF4D3B8A46A519FBA8E3D4E
SHA-256:	36B2057EB5EEF261A2CBB8C149DCF3A11EDAA15CCD8E3D462EB34999F5FF8F2A
SHA-512:	BC5F5B55C2741FED993D5D25A36030028C388C8888EA2D1D1F24970AEC4F856CDA366940B99D54FF2D4D9AF16DF8DE39AB847A7BA2BE0B649DE1CE2C9E70A330
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/icon?family=Material+Icons
Preview:	/* fallback */.@font-face {. font-family: 'Material Icons';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/materialicons/v142/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2) format('woff2');.}...material-icons {. font-family: 'Material Icons';. font-weight: normal;. font-style: normal;. font-size: 24px;. line-height: 1;. letter-spacing: normal;. text-transform: none;. display: inline-block;. white-space: nowrap;. word-wrap: normal;. direction: ltr;. -webkit-font-feature-settings: 'liga';. -webkit-font-smoothing: antialiased;.}.

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/950188369?random=1713460590852&cv=11&fst=1713460590852&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1
Preview:	<html></html>

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	14552
Entropy (8bit):	7.912307686588415
Encrypted:	false
SSDEEP:	384:ZCL+nLVuQKUQ0AfWSSdDfM+un76+8XavQycAs:A+nJuQKx0A+e7uavG
MD5:	5F1A6B0B0529B7CE8ED2903B3249D1F7
SHA1:	C3C11DE691E05AD34BB083ECDCF19F6CC8E9B221
SHA-256:	F55C3101D9C84BC283DE9729FE51C9809228C41A675E61A830BD942C248A3A80
SHA-512:	0AF37C4E3204CC3696805AC8A46211C46DCD3F69AB3A05157C2C5364C47E06B383D47E6F784EE47C2B30FCCEA61CB700A440BD0CB409EFB88B4DC7E26DA1DE25
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................G.........................!.1A."Qaq..2..#BRr..3b.....4s.......CS..$%cd..............................2......................!1..AQ."2aq...B..3R..CSb..............?.y........`.(.O1...Q].Aa.q68.....E.N.5..A.s.~.,.yc."F...QAff6..d..c7...YN..V.E.....

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	88882
Entropy (8bit):	7.9901374738994955
Encrypted:	true
SSDEEP:	1536:59aAidnt2Dq9qVTGvZBhIlnQS6kqRG8CB7VOYA5/j+9M8j2gFZ:59anG5V6VcnQmqROBMj+289
MD5:	B126F4A08D96A56004A3AAEB7ED5C5CE
SHA1:	7EF51862DE2FD79882F7775E654970F80605B81B
SHA-256:	2BB58C5075EB0ADC49E1CE6D6E5D42A9570E6CE9C1F6B79A6F2934F873A68C5F
SHA-512:	437A98190C659941AEB8F00FAE812AEAA0DFF1267ED79A899253C76790514CBF41C260F25C4DD376E4EFF66C3FFF14087CC093FE88E32F3F9E904BCEA0BCCBF5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx.T.i.e.u.....w.._.U]Cwu..f.I..8J.hK.d..lX....-;.. F....H.g...2....;p...a9.HF"e........k.Wo~w<.\|...qnQN.PU8..s.....^..S....^.qc;....?z......x~.7{..[.X....7.\O..M(..^.~u..s1}.....}.>.. ...En.m.....l...[..gsV..Oy...Y.s...8".0.'...._}.........k......#....?=..t...l...\a.s..\|8f.@..M?.E.I.JY....{.T.T.E..#.k.....W...+.^...?~g....g. .........5)..&..C..4..oU....l.Y.\..{.;.y\|.L.h..Q..../..l.9...............'6{2.?.QI.....q.......6..R.A...L.1j3.t.6.....J.w>..so\|.% (.,.'#..(..g..Q..$.q...OP.....?.E....n....A......Q.v....g9.8..@..d...s..N..$...3......{yv...Ie?6...L%rv...f.Fd.#.............P....<....X."....<#....r...(.s..ln..$a....fy..O....S..g..V2...ew.........!,.I.2.........~...&....N....xn&..jJ..[.].Xy..:>......e.9.(V..5.s&G..kz_.a..yS._..}.ptJ.._....[Zl~ox...L.x.Z.y....b.g.."."...Q......@T..%......wv..^.\|v%O.u.F..gfaH.:gw..B.O...g~...~...v.~iE.(..B.....]..Tx.....=...A....co.x,...'7m..)".l.A...*,.!

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	567
Entropy (8bit):	4.846877765360333
Encrypted:	false
SSDEEP:	6:5f2hZXc4s6c4XdF/42IIxYHB/IP/E2dWg//8E2WAH8RH/MEWE2xzoF9PAE2MoWXt:c06vN8h/rg8WAH8x/FRRJXChfB1do
MD5:	4DF41C737F0D25A08E0BDDE3FE5F628B
SHA1:	0DEBC3ACC04CFBF6AC7F636C466A4B662D11B7C3
SHA-256:	7980EDFEF2603B5F7F010C446665BFD9E3CC53EC566E9F682E2C9C28DD5476C8
SHA-512:	CB71D4D57520679B090EBDCBF147789070B4A9696804EB3D3469DE9340BAC4C09B487DB17DA9886821F11A651ABBD0221070B2F42B1F359835696C7FC69A79EE
Malicious:	false
Reputation:	low
Preview:	.<div class="masonry-resource-listing-item {{#isDownloadItem}}thumbnail-icon{{/isDownloadItem}}">.. <img class="masonry-resource-listing-item-thumbnail" src="{{thumbnail}}" />.. <span class="masonry-resource-listing-item-type" >{{_resource_type}}</span>.. <h2 class="masonry-resource-listing-item-title">{{default title}}</h2>.. <p class="masonry-resource-listing-item-description">{{meta description}}</p>.. <a href="{{url}}" class="masonry-resource-listing-item-link" {{#isDownloadItem}} target="_blank"{{/isDownloadItem}} >{{readMore}}</a>..</div>

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 30, 8-bit grayscale, non-interlaced
Category:	dropped
Size (bytes):	83
Entropy (8bit):	4.823617854342895
Encrypted:	false
SSDEEP:	3:yionv//thPlEht/laulNfhlfkw9+0T6Drp:6v/lhPIQulZhlfk4Qrp
MD5:	EF70342DDE6B6D5E92E5297ACF40B25A
SHA1:	5B9E936911D8EB836AC1BF9FE1E6B376BD76FC20
SHA-256:	93E28A3DAAA5A7C89943370D06ECF0794AB228CBE1F0B3A40BB0D7F3CA7D4D05
SHA-512:	9D40A7E933A93BDF57FDCE7E5A0E72AE0C42B5F7070A6F41D308D02646B5F3CEC481F5F2F0F623D67C01840DAD62B192A2A5B46850DEE46E4FF526B009B351C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............+.....IDAT..c........p.Abc.U3...A..6...z....IEND.B`.

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (24999)
Category:	downloaded
Size (bytes):	25152
Entropy (8bit):	5.307404148928694
Encrypted:	false
SSDEEP:	768:SoUjeU5luNgHP1g8fEHJNIdPJWt8f6U0Dd10WzsG8hJocld:ScNg13l6UMCJocr
MD5:	D220D501715E0484D0DDDEAC614F902C
SHA1:	2C97BB2F41FA88CA23907CAABC4C46BE586C31C1
SHA-256:	B01BD01687B15585B2740273C8C3C6674DD9F559CFE52EEFFDF43B1F93A12D05
SHA-512:	594D2B0A5820FCD6F025FFEDBB01E4931BE07A02E17496C1E7CA5CE7BABAC3DD9BD67059E529CCB119F6729CD42BA1EAF73949A67671A0141FE3ED81EBF80145
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_AudienceManagement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPbf7b42aa08bc4f10879b1484195e80d1/AppMeasurement_Module_AudienceManagement.js`..function AppMeasurement_Module_AudienceManagement(e){var t=this;t.s=e;var n=window;n.s_c_in\|\|(n.s_c_il=[],n.s_c_in=0),t._il=n.s_c_il,t._in=n.s_c_in,t._il[t._in]=t,n.s_c_in++,t._c="s_m",t.setup=function(e){n.DIL&&e&&(e.disableDefaultRequest=!0,e.disableCORS=!0,e.secureDataCollection=!1,t.instance=n.DIL.create(e),t.tools=n.DIL.tools)},t.isReady=function(){return!!t.instance},t.getEventCallConfigParams=function(){return t.instance&&t.instance.api&&t.instance.api.getEventCallConfigParams?t.instance.api.getEventCallConfigParams():{}},t.passData=function(e){t.instance&&t.instance.api&&t.instance.api.passData&&t.instance.api.passData(e)}}!function(){"use strict";var e,t,n;"function"!=typeof window.DIL&&(window.DIL=function(e){function t(e){return void 0===e\|\|!0===e}function n(){W\|\|(W=!0,q.registerRequest(),X())}var s,i,r,o,a,d,u,c,l,f,p,h,g,m

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	1.5219280948873621
Encrypted:	false
SSDEEP:	3:U8n:U8n
MD5:	83D24D4B43CC7EEF2B61E66C95F3D158
SHA1:	F0CAFC285EE23BB6C28C5166F305493C4331C84D
SHA-256:	1C0FF118A4290C99F39C90ABB38703A866E47251B23CCA20266C69C812CCAFEB
SHA-512:	E6E84563D3A55767F8E5F36C4E217A0768120D6E15CE4D01AA63D36AF7EC8D20B600CE96DCC56DE91EC7E55E83A8267BADDD68B61447069B82ABDB2E92C6ACB6
Malicious:	false
Reputation:	low
URL:	https://p.typekit.net/p.css?s=1&k=xkz1feq&ht=tk&f=6851.6852&a=681435&app=typekit&e=css
Preview:	/**/.

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1230x470, components 3
Category:	dropped
Size (bytes):	45825
Entropy (8bit):	7.954651169413707
Encrypted:	false
SSDEEP:	768:660n+W/1/5aktmIfzB/QcbbTLWBoP9JCpJCx6QezMUdO++gQbVsJw/jyOamejU:xCR/8kRLf6Kj/x4zMmctGrjU
MD5:	F9715864306D392D8D5AFA31CC23540E
SHA1:	FE2636476C912B8F84FCA9348A92B242FD5D1F07
SHA-256:	6AE1AFC9964DBF0ACC4DE6D9AB472290631BE7A0E962FA68E8D782EA08C43FF5
SHA-512:	3CD4B45A09C6CBC9E184D785AECD907E13F4C4118440176AC448BFA68B7E7BBD6793F16926F22580304DDAC19D367C1BD34D263853187CA05A59374F2B06588E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."...............................................................................F.....S...,.cWE2.QU.Q...F,..9.Y:.+3..Fu...kQ...]U...m.+F.6.b.7y.;...o..:.....H.V..t.H.N..u=l.r.B.....1...?VmC.V]#..sh5....1gD...$9T...!"=..Oh1..UV5F..'..Q0#Fn..r..........y.k....0...D.`N..1.y....f<Go.:

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	16832
Entropy (8bit):	7.984989388134104
Encrypted:	false
SSDEEP:	384:7jbmuINl6GV7Z3qRTVNssNE/14EBQcVAtH2IvMs:7HgfZ3qRzskS14EBQztH2O
MD5:	769A13B056A44FDA1C29AC292AF15A71
SHA1:	0F121D249787E5C453C45AC8CE2EB7F9638C4E51
SHA-256:	F5BEB38BB1B04F22BB3D56CF481E4312C0AD6176C9319E104D9D15E2F81C5EA0
SHA-512:	724A6C867287575747C06B34AFED21BC71321F8E5899B9C018F93041F5CED57EE39D2700086CDFEABAEB4194A9D37AFE93A4E43B2A990A86439D54FB6C43BDA7
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/8c790672c01448b9ae07187b79fe2079.png
Preview:	RIFF.A..WEBPVP8L.A../.A*...........}<.....d...b..d.N#.?.d.3.......e..?T..-G.k..C.Ry.L...@.].6.q4..."E.....(.....,..B... .&.....@@......,L.X.B8.S7..S..7...b.......V.$4..C........!...b.hD...p.Vr!.i..1..:74.aL....#(%..,..@.K....F.5.....'J.4...$.O g..S..~k..U.#..;:..`.......b........#.....YH.e ...l..uC-.e.@...?.IDqd.......7n./..Ju6..=.)8V...bN .C..4A%..\+.@.Z`U......................0..~...`.mv._v.t36.g..-r!]0s.......lvvNf.....^..R.t(j.....[6O..Y_....1.rd...3.n.....jM.-P...D0......].....mr,E[T....{...]..6E<......h...-...6.....;/.V..z4......=..Y=.eQ.m.......^.....h..x7......Q..r..,D.6.AR..\....m...%... .9.8W.Z...Y.q....Z.(.!@f.".8....~\|..<..%.....?D.V.F<M.....t.?.[.eo.....M7..@.Q..x........kM..2..._./tr...X...<..XJ..<.......}G...$.a...Hr.$.....m..+...]...c..."...k-Q......+B.%1..'.h.;.0....<}..ifR.h......_.(X'......./8...?D.V.F.AB..5jL.....m..4.. ..l.&.5.:.I ....L..j......M0..N.....`V9.a.p...di......>..}...$.............y...+n."9.g...Q

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3138)
Category:	downloaded
Size (bytes):	3284
Entropy (8bit):	5.453756164595937
Encrypted:	false
SSDEEP:	48:sY9+qw87WpFtuOXMfUFyJZAeNeMqOIDcgjHQ0jOpXSHVajXKCw1tngEo:s2+qJWpFtu4MvX0Mb0jOpXOCN
MD5:	F1E098A5DD836EA5FC9726C429C8D71D
SHA1:	9B9371EB2D68B1E71063CF9F848BAA07347511CA
SHA-256:	BC0BFC50D3FF4175132B7DA1EF0ADF7761DED5CB2782E55EDB1948DA3480ABD8
SHA-512:	0BAA423DE29F3AEAC738EFAF42CEA3A42EFA50B05B1952BF4370DA48363C5F9CC7E0D9284D0F82A60B6D8AA6A35CC62690EBB3E7F3E14A30CBB0A02E95261C6E
Malicious:	false
Reputation:	low
URL:	https://assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement_Module_ActivityMap.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPef068a8d6dd34a43866d9a80cc98baab/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(e){function t(){var e=s.pageYOffset+(s.innerHeight\|\|0);e&&e>+f&&(f=e)}function n(){if(l.scrollReachSelector){var t=e.d.querySelector&&e.d.querySelector(l.scrollReachSelector);t?(f=t.scrollTop\|\|0,t.addEventListener("scroll",(function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>f&&(f=e)}))):0<g--&&setTimeout(n,1e3)}}function r(e,t){var n,r,i;if(e&&t&&(n=l.c[t]\|\|(l.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function i(t,n,r,i,a){var c,o;if((t.dataset&&(o=t.dataset[n])\|\|t.getAttribute&&((o=t.getAttribute("data-"+r))\|\|(o=t.getAttribute(r))))&&(c=o),!c&&e.useForcedLinkTracking&&a){var l;if(t=t.onclick?""+t.onclick:"",n="",i&&t&&0<=(r=t.indexOf(i))){for(r+=i.length;r<t.length;)if(o=t.charAt(r++),0<="'\"".indexOf(o)){l=o;break}for(var s=!1;r<t.length&&l&&(o=t

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	12278
Entropy (8bit):	4.9230712717101035
Encrypted:	false
SSDEEP:	192:ma9xSUIekk+e8S1nZv0PlPrCFv4VvTtM5yxBJxkCLUakUvbOa0g3x:ma9xSekk+eBohW1Yg+BXkCLUakUyG3x
MD5:	7D36C6016ABE314394CC9E5CF8B3A381
SHA1:	235B19B8ED48FC4756AD77C9C6C1733DC6A82B87
SHA-256:	5B882F7960CD18533E59A6D7FDA0CC17D7E83C85E549E83A605BC6741CF36574
SHA-512:	9069436015D6F682211E4D84B43AF2A627518A77840D715A3F340A8F62527A53C36FA4ABDE132470D53A15194F28BA06E2B4755CA337F504C6A91563BD1DBFBE
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/headerfooterservice/v1/header/full
Preview:	{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Supported Browsers","urlSlug":"/help-and-support/supported-web-browsers/22658/"},{"text":"privacy policy (California)","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"}],"topicsMenu":{"topicNavigationContainers":{"topicNavigationSideContainer":{"containerHtmlId":"Container_TopicNavigationSide","containerCssClass":"container-one-col","contentModules":[{"parts":[{"header":{"title":"Trending Topics"},"links":[{"summary":null,"type":"Topic","url":"/topics/payroll/wage-payments/final-pay/","title":"Final Pay","id":250},{"summary":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/policies-and-procedures/","title":"Policies and Procedures","id":189},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/","title"

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1457), with no line terminators
Category:	downloaded
Size (bytes):	1457
Entropy (8bit):	5.64629426481657
Encrypted:	false
SSDEEP:	24:kHkw8tSyngFuVAOdIcNZfcEzHDaggOOJVAFxdBTuOqmgz8+Yg/PqjCC5zqinzYjr:YyLVkckEzjaggOsKF5DqrmlYnbuO
MD5:	91948E908A88B09F74F6E15D76C2BEFF
SHA1:	D9AAD77434C0FEED6457B00B78F14D081D00AD65
SHA-256:	B7222240673F424CC5D7E7888CBC85171FC839A01185AFD9B75CE52EAE754644
SHA-512:	A59B137321BDFE7270E053398753BE1989A20C2550FD68AADA0135C59F6C7ABE2C5D667035BF1A7EED9214FF516540AC7ECEA31B2EB3191A8ED58975C7FFAA29
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/936886275?random=1713460611056&cv=11&fst=1713460611056&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j8107391740","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j8107391740","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWG2Flg!2sZkjihA!3sAAptDV4s7_2g"],"userBiddingSignals":[null,null,1713460612781839],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested-sizes"}}]

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HOMkYn:uC
MD5:	EF3AAC6EC1447491543EC89D3C432788
SHA1:	3C09DD2F07AB196D9D0DFAD3A47A268D50668467
SHA-256:	E8717FA209314F90C05BE099966EEA00E9D7856E287EF9DAA0A2E48400BE1155
SHA-512:	FF76C693F0C11A34D48236EF05D18FACF47AD7918C2A16184759A2DF253F754788D6A705D1C115B68408A3E996AED332F31BD10CBD3F2230111D19671E4C47AD
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmmT14AM8EuMxIFDTJjoKE=?alt=proto
Preview:	CgkKBw0yY6ChGgA=

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9527)
Category:	downloaded
Size (bytes):	9528
Entropy (8bit):	5.092040089179453
Encrypted:	false
SSDEEP:	192:ppJ5r1JOphf45Yg4IoPW+pzaeolApeM40nDW2joeTDSVvI:ppjrrOr45Yg4DLol50ny2jo6SBI
MD5:	1F0BDC751D1146F06EDAAC776F30387C
SHA1:	9CB3545D3C1472C878B14E2F037CB399EB5666C9
SHA-256:	89AA9F3B9B9ED156D219C122427F8E797C67C4030ADBE4201D72030396D6B462
SHA-512:	7E6F6BF48546991B39CB52547FD8EA4C57FC3D00DADE620EAD11EB3E42B8D36E738A602B9E26D45EEDB6681F1CEE20F682805E64AD9FCCBDFAEB0CB63DFB4163
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/mustache.js/2.3.0/mustache.min.js?v=638484955464930367
Preview:	(function defineMustache(global,factory){if(typeof exports==="object"&&exports&&typeof exports.nodeName!=="string"){factory(exports)}else if(typeof define==="function"&&define.amd){define(["exports"],factory)}else{global.Mustache={};factory(global.Mustache)}})(this,function mustacheFactory(mustache){var objectToString=Object.prototype.toString;var isArray=Array.isArray\|\|function isArrayPolyfill(object){return objectToString.call(object)==="[object Array]"};function isFunction(object){return typeof object==="function"}function typeStr(obj){return isArray(obj)?"array":typeof obj}function escapeRegExp(string){return string.replace(/[\-\[\]{}()*+?.,\\\^$\|#\s]/g,"\\$&")}function hasProperty(obj,propName){return obj!=null&&typeof obj==="object"&&propName in obj}var regExpTest=RegExp.prototype.test;function testRegExp(re,string){return regExpTest.call(re,string)}var nonSpaceRe=/\S/;function isWhitespace(string){return!testRegExp(nonSpaceRe,string)}var entityMap={"&":"&","<":"<",">":"&g

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/1048135065?random=1713460598672&cv=11&fst=1713460598672&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 360, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	33656
Entropy (8bit):	7.984055867968139
Encrypted:	false
SSDEEP:	768:FSP6WEfvCrMZbdI3qe0GZ48wONAqfU9xUqb0/o:FS0fvC4ZbdJe0Ge6RUQ/o
MD5:	76AACFB0C0600EF0B4C1D4C036CEED75
SHA1:	B145E618CE34D8E1FF084C9CBC5D5ADA7AD76D5E
SHA-256:	168B6D76CED5E90DC0FD164C604590456A881FC3C8050D6BD2E6E881E4B7AA7B
SHA-512:	37E08EABA4C882B8EC02FEA9FD3EFDD9986079C92CA4F38995DE31E7BC8FD3CBFE87D3AC07948711BE7D0BF8C5C38BCB776FB95C84272A3881D3DC8387CBBBAE
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...h.....&o".....sRGB....... .IDATx..y\|.U.....&M..J.I[.rSK..&.".. ...../ .."B..W.U.}.Q.EDQp......h...JK.t.z..y.?fnss...YK.....3...7.9.9gDU.X,..3..X,..pa..b..Z..Z,.Q..@..2j..h.XF-V.-......b..X..X,..+...e.2..PD.D.).Y/".E$6.6....)"[E.MD.?..M..U"..a....l....k.@""7.H\DjDd.p.c...P..ky..E.=qFS.E......z...{.c..t..k.......s.i.......p..U..D`(......7....~.W...<......c.U...G.....2P.H.h..]....F.,G....a.E9.cnr..O7y..r.."..;...`...._..aL...\..Y......1.-.6.u...?=H.yt.I..t..._t...(...,.Ed.......g\|.l.(...(....^s,G....."'..;....N....xFiU....L.H..Yd._.{j9..;.6....E..b...-&..q........w.1....;.....P...}-#.U.........XIY.WDU...*{.QU#".._.......M...V......x.....>-.....q&M....q0....c..c....?...h".3f...J.@3..8Mu.L\|g.c..........L.~..!...IU?....U..a...R.....8B...@-.M....Q..._...\|GUGT;...........O;ky.{/...;.xq...../.V."^C#.q.L.Jt.t.3...... ...Y..P..aZZiyy...E...`.;...}....).]FP.U`.p..<.....5.......T...'p.p.e..%......'^x..O./-)l..._....o...h...

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x420, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	140804
Entropy (8bit):	7.99861388452635
Encrypted:	true
SSDEEP:	3072:ncYetQTsEcU17bkqS/9R82VGisC0KroPHUx7Ltbs8rTdX:S2TsOJhS/gAsC/ofUxdI8rTdX
MD5:	836E1DCA392A30D5A4D61035255DB315
SHA1:	ED11F26F87CB73884B017971635C40A8579BFD95
SHA-256:	4E06721234B242C46CE4128A91F4EA21CC91F239186C097A4894C3B2C839E98E
SHA-512:	5B62AA88707A304FBBFDC73C104B08BAFBB4196F45DF7B42DE6FD2E619E87A8BF542AEB93CDD079FFEB24994629A40775731B956E23693561B3F78A84071DE38
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg
Preview:	RIFF.%..WEBPVP8 .%..0O.......>Q .D#.!!...`p..M.6.....~7B....P.'..z,?G...._......u...4....^{^[..]?....x...-..9w..~?..........g.?...{W......T.......w.o.?....?......S..7...'.....?.?..N.........?....m.....u.9....7._.....................?.....v..\|=.....C..........7..........'._................C.......s...........x_....?..........[...7...?.'>......o......G.o`.l...g.g./.....>..7........'..._....`_..........._....~.[.....7.W.....?w............/.?....o......./...o.........O..............!.....Te@)...r...'k;...8...@{=......]..%.k...L......B.?..;#.w.zz.g...%.2....=h....c8.N;_..{..0.E.-....@..qg.~I..g..TA.4.......".k$.F.p.r'7....KO....T>....4........K].T.<\_.u..m.T..I.+.{.....K...m<.j...S)n.g..+T.(.g.Z...Oz...._..}0y...6"./....v.)...A.h...X....S..J.....oHt.a..R.k2.....N-.I..{..,....B...Db.^^e.D.mk...^....._~.S-^....%Zi/!...?!,U..........A...*.@x&-(}....\|D.....y+.y...?...L...8cX.j{z...4l...Y7.@+$.p...E....].>9.~d.....i..0....7...3.+c.!SP[.d.,+..9..[..:-........

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (24937), with no line terminators
Category:	downloaded
Size (bytes):	24937
Entropy (8bit):	5.235471215152053
Encrypted:	false
SSDEEP:	384:wNfTrBcXNHOa/wo5YAhxfUyUgIZ3GmN8N9jgU39fycF9M/yBAfXdT0yF7:wNfZ+NTKZ3rNqNfPFhwdvF7
MD5:	C2BFDCBC9AC0DFB6476E13DF36DB33BF
SHA1:	C117E8C6638AE7B63DFE85DFAD6F7BE55EE3CEBC
SHA-256:	BEA11FD44725B959D652E6E3CE0A17085DB4D83B9A418D3FB4655618A12EE0CC
SHA-512:	76678FE9869633827768194ED12A80D0B51274B6CE52231075B9191DA7A8A5DE8AC1FFDB8FF9AE8A503648E68E361BC5305B8DF81647135D05B21D64CF6A164C
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/analyticsJs.min.js?v=2.0.769
Preview:	function targetPageParams(){var o="";return $("meta[name^=gwa_]").each(function(t,e){o+=$(e).attr("name")+"="+encodeURIComponent($(e).attr("content"))+"&"}),o=o.slice(0,-1)}var mboxVersion,mboxFactories,mboxFactoryDefault,mboxCopyright="Copyright 1996-2014. Adobe Systems Incorporated. All rights reserved.",TNT=TNT\|\|{};function mboxLoadSCPlugin(t){return t?(t.m_tt=function(t){t=t.m_i("tt");t.O=!0,t.i="reedbusinessinternat",t._t=function(){var t,e;this.isEnabled()&&(t=this.Tc())&&(e=new mboxScPluginFetcher(this.i,this.s),t.setFetcher(e),t.load())},t.isEnabled=function(){return this.O&&mboxFactoryDefault.isEnabled()},t.Tc=function(){var t=this.Uc(),e=document.createElement("DIV");return mboxFactoryDefault.create(t,new Array,e)},t.Uc=function(){return"SiteCatalyst: "+(this.s.events&&-1!=this.s.events.indexOf("purchase")?"purchase":"event")}},t.loadModule("tt")):null}function aam_tnt_cb(){if("undefined"!=typeof arguments[0].stuff&&""!=arguments[0].stuff)for(var t,e=0;e<arguments[0].stuff.le

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	18606
Entropy (8bit):	7.989227831250419
Encrypted:	false
SSDEEP:	384:HTSYLFd1Si1xg+ubSKxKO9NYRPNczdGr+LVwhilWxypNIig:H/LzZHO9Ns1czdGSLWhiqoNIn
MD5:	EF291E3887CDFDAE074F561159620345
SHA1:	8AC16993BF1C7CE96339F046E01B8BB9D3F4D657
SHA-256:	D80B7BC07A2F749731BF4DA2718299B4F17C3C629A2877ABAD1D394E65C3A141
SHA-512:	F1EA69DA9586A87C8196DB7427CE225D1AD134FBD1AFDC29682C579465AEAD2F26F5E3FA5656939A6990FE8DA8104CEB5D22141B9D9F77017EF12FD7FE5DB71B
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/payment%20trends%202024_tile-image-270x170%20jpg.jpg?h=170&iar=0&w=270&hash=31A1E0E0236BBF7A98DD735B10DDF8E6
Preview:	RIFF.H..WEBPVP8 .H.......*....>I..D"....N.(......r....~a.n9...n]v..w.....o...o..Z.G..@?....Q......................P..........1.}.....?l..u..O@..}....?...?6........?...\|..W...?....z..k.m..~.{..C..._.?x..zq........=....W....._.^..........7........c...C......\|..:...O......_.o....u..{.....vIS.jz.\|...<..(.:....$.4g.M..>.....{>.....^.w.x.=.H[.sC.L.W/..?$..&... 1b...\|.6...\|..->?..md=..D........vQ..`.BK8..Y..I\|........:..5$.7.q.IB,.[{8.8[.-2.H.H.V[0..&...0dA.(.U.u>...LEB...X.-)....9.[......D.y.".mV...I..v..R...I...er[CM.N..C'.....V5.c........vA.U...._.H....L....]p.z..z...5.U.D.._..<)^....`"F..\|.K.I...e....;-=...s;......P...........t<..5.d__.2a.~......t;.8kqu.m0.#..!..@....J...`..F...Y....s.8D.V..p2.`.).-E..n...$]S.\..b.....jS.\|c$..mN5...o{F9..:L...o.f.3.7.P.%m....8..e..`y.}.Yx....\|a.@...ZH.+#z)......QG..4.b..).QqfQ._.bC}G..C.)V..!.k..h.!..u..`..g.-...d......J.........J......Fm.0.....(..,..{9....D...K.-.1i.S.....l..l.).P$7...<.Ip6.y.....d<x...//.

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2316), with no line terminators
Category:	downloaded
Size (bytes):	2316
Entropy (8bit):	5.85482433792851
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt080klFkFQ9XhKVD6:wsbSUtJfxrqLWWWdV6j14klYK
MD5:	4A1AC55DFAED7AD3FDAE3794B6AB2180
SHA1:	6E0EFB452FE2235DDCCCBBBABCAE3E1F681230BC
SHA-256:	EB4985E502058322631FB6FDAD7EB849D4F4C98E55FB871BD50ADA07906A5754
SHA-512:	06AA52CABCD9BC42C2C61FF877D0D2C7BC710C2D867DDECD32B315E5841A925C40016AF53FCBAC57FBCE6867687F96CA4992DF9FA6273749888B225F27BBD5B5
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/936886275/?random=1713460598639&cv=11&fst=1713460598639&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 46 x 105, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1574
Entropy (8bit):	7.702116001323687
Encrypted:	false
SSDEEP:	48:/MzArXi+3XA/b4rhwLkooo5aNafvHBxJMsxQ1I:kzArXhXzuL/n3Ssm1I
MD5:	E5F28BCDBF8A2507CE88BED330EC3797
SHA1:	C085D2990FF46531670A52F87542A0E1E38EC02A
SHA-256:	930F21E5ED9E8140823BE566022253BEA61857DDE32CB1078CB8BEB343013351
SHA-512:	CAC8A5E1E04F8280088F988C721BD93B782509FDE0C3299C86386B2856628F4B4F0A00AC90F337EB73304ECB747CA648F6A14C249D6807ACD2E8E9AF513E8CF5
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Shared/Content/Images/LocaleSelector/Flags.png
Preview:	.PNG........IHDR.......i.....r:......gAMA......a.....PLTE....-\|.....PP.bb.......XX.dd...&6.....HH....xx.[[....(t...w.....i...aj.js........}..+:......cn.....ff......ww!0..RR.``...ny....Zd..ii.!o....jj....QQ....(.......................w......."\|......LSw....*.do._i....%5....t~.v}........$z......R..j.......0................. z...}...<<......z......%~...LL....hh.....n.^^RXy...it.....ZZ.QQ.,~.oo......^^...[g.......(7.v.........nv.Zd......T.....t..&x...UU......@@...&5.....ff.WW.....``.CC.......+v-=...O............XX......oo...!0..............S..k..q.....h..f..........i............'{......"2.u.............P.......-......`.............!x............~... oy................l..d..o.................k........f..............y........x........u........m........g..r.....Q.................................<....tRNS.@..f....IDATX..UP.Q.....BK..........+..........K.......l.S:..{.....r_.9.g....F...4?....w.?.?d%..^..A$........R..hwb.J. ....zZ...KS...dD....F....u._.E$ ..WH.

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 20, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	772
Entropy (8bit):	7.131261905643775
Encrypted:	false
SSDEEP:	12:6v/7Mb3/ZWHfpbrLdbGn4UOkPhM8PcuW5EdjHKFSGanfz0+3NUb2laHaGmjPg+:RZW/5Ehlp7M29OiNUh6Gmc+
MD5:	1912564B32F4E86BCBC9F74B668E5B86
SHA1:	31A4E5DAF2E084486F274039D4788C54376CB239
SHA-256:	C0D5F81750B69682E492B4FFBD1E0375F8813DB05B4215A59DB93CC159EA1B1B
SHA-512:	D9201C7A42D8996824C39E8D49C6CAA892C56D984C1D4B2DB86CA6FB5C085A978ED3C467CFF626A8F5DA46C6D64A8829B335DAD1C4A7C823015310EFFB68FAC4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............W.?....sRGB........YPLTE..........y}.ty.gl.jo.ns.+2..'.$,.fk....8?.]c...........5.Z`................y}.TZ.......rw..........sx.RX....}..bg..........ns.OU.....di.fk.............w\|.y~.hm.UZ.......ag.kp..........w\|.RX......._e..........V].$,.......]b....ag..........[`....)1.......X^....ah.......V[....\b....uz./6.DJ................uz.(0.ci..........x~...................-.(...stRNS...........?.'2....+....%$..`..*...j.......s...........\|..3..=....3.D........q..............u_..........`:.6.f...V..Z.....IDAT..c`..F&f.V66v.N..tAn.^NtA>~.A!4Aa....Q.1q(...d......2..@.....2..........Z. 1.]=...........9H....,h-nckgb...stb..2:.....{..<......>.~ 1..6. c`P0P,$...., ...! ..."...........P.)1.i...Y(. .......H....EPA.... #...<.6cA4......IEND.B`.

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2387), with no line terminators
Category:	downloaded
Size (bytes):	2387
Entropy (8bit):	5.851041182386754
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08+tZ7hFQP8oHKt/M76:wsbSUtJfxrqLWWWdV6j1CtZ7DY4X
MD5:	012D4FF327036BBF47DF631150591262
SHA1:	1C6106DD8B7793EC6DCDC93D44A205167A2FEBF1
SHA-256:	529C0F564A18FEB58C30E327CA8E5137FEA1DF6D080CA7B9FB523F5234863C12
SHA-512:	C52EEC8DC73F580538018BC77518C526992D3671FFADA32B0A76F0908D86AB908CC00A4B390F5DED56652CF0DA74C302DC8A6E4C248A9A8C9F65877CBF89AAB7
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/10827142419/?random=1713460611030&cv=11&fst=1713460611030&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 624 x 8, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1633
Entropy (8bit):	7.217184302376083
Encrypted:	false
SSDEEP:	24:uiy1htZdWwjx82lY2T3pHEVYr7APyJ3Vu25kYGSqUisU2/y9Jd4xrt3/312msMD8:uiwqNn2SWrMaJ3ALYkUisR843/MxMRan
MD5:	B130EC4957CA67A8A673E20B1C4144F4
SHA1:	2EEBF5FCF4A94B1C120E2A15CBE4D88E0666A302
SHA-256:	DA7FA89E7E6AD95732B0B43C021D3E4A5E947E050000B941B0AE4CA209AB4A4A
SHA-512:	78A9CEF134F8AEA0108182D916E36CF702378CAB718EDDCD01CD39FF610EE043533A185D33F593820056433E2A143742225F37E2DE33D76E32419A1F48146813
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p.........y..&....tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:C2361935DF9E11E0AA53DE6A8D57B760" xmpMM:DocumentID="xmp.did:C2361936DF9E11E0AA53DE6A8D57B760"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C2361933DF9E11E0AA53DE6A8D57B760" stRef:documentID="xmp.did:C2361934DF9E11E0AA53DE6A8D57B760"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..R.....IDATx.....!..).U.......l2..-..U...4.C...KQ).....k?e;.Ey>.y.]wSl.QZ.gt....r.....}.j.......7...[.\..j..s`...

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36572), with no line terminators
Category:	downloaded
Size (bytes):	36572
Entropy (8bit):	5.510477462639081
Encrypted:	false
SSDEEP:	768:EyQroEvTXje7m20IcYooX4hZKZEttukVb5ksqzzDl62N8l5Bs:WBXje7BFooIFttukVWsq7l6j8
MD5:	9D6129B555ACE3EFEBF194D38A3E562D
SHA1:	04E5BB245DE240D885991E186C139837BE33812C
SHA-256:	85B9DFFD781E47C571A53AFC2F594C53F9C49EBEADC9ADC3FC720D4A6E3A688B
SHA-512:	914DAC450E8F370380BAB206C4B96A64A8C8CE5B796FEFE890ECE839DAE6EF735F506D96C397769AAF7E267274E0654C214D52E0970B074A9451782AAE25E4D6
Malicious:	false
Reputation:	low
URL:	https://tags.clickagy.com/data.js?rnd=62fe5c0e6ad95
Preview:	!function(t){var e={};function i(a){if(e[a])return e[a].exports;var n=e[a]={i:a,l:!1,exports:{}};return t[a].call(n.exports,n,n.exports,i),n.l=!0,n.exports}i.m=t,i.c=e,i.d=function(t,e,a){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},i.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},i.t=function(t,e){if(1&e&&(t=i(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var a=Object.create(null);if(i.r(a),Object.defineProperty(a,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var n in t)i.d(a,n,function(e){return t[e]}.bind(null,n));return a},i.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return i.d(e,"a",e),e},i.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},i.p="",i(i.s=1)}([function(t){t.exports=JSON.parse('{"debug":false,"url":{"domain":"clickagy.com","aorta":

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Global/Content/Fonts/ggl-roboto/roboto-v30-latin-regular.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=23114&time=1713460599314&url=https%3A%2F%2Frisk.lexisnexis.com%2F
Preview:	{}

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14824, version 1.0
Category:	downloaded
Size (bytes):	14824
Entropy (8bit):	7.984080702126934
Encrypted:	false
SSDEEP:	384:9FhwoaJnaNM4+g4PQPq2ORxaT108SURx1qA3VyI6UvrkBxLA0THRTe:ZKaNMQ4oPG4T1FLXzFyZU92Hs
MD5:	48598BAD30F08E1C3EB3D0E69B420BD5
SHA1:	28C2CF160273C2062F909A875C4B4C0541EE2F84
SHA-256:	CA57B79A870BBF54700730858603A70D79743779C1B059922EC401BFDDC5ADC9
SHA-512:	0033327198BD448927A53EADA9AED51ED4F8DA3C8619EDA3B10948F437213F20270C233F7FD403C8C192A05CAEED6905A02D8C62EC22B3885A6A7D6C018F737C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/sourcesanspro/v22/6xKydSBYKcSV-LCoeQqfX1RYOo3i54rwlxdu.woff2
Preview:	wOF2......9...........9..........................n..6....`..b...P.x..d..6.$..D. ..\|..4.gv%.m....B....y......sB.<....t..:S...@..\..w..x...8AMW.S......Z?.$.......mut....X..@.._.._$..Af'g...'.d.x.q&..T1Q_....n..z.._}...#v"......s.s......PiVBEW.2R.....8g....i...J.+Z.&..6trL.15.L.cn.D..!~N..WZ.DcJBB....$.<..T...ue.}...+..j..;:U..S...}.6a.iS.i.LId....K..`u.%.$...H..8<B.......a.`c.11..m=......l.B9;..?...w.Je^i.8p.5......#........v.Y:.b...,....L.....(........;_.IvQ.K.X"J...(.,...O....[D.\...\.........I.k.;+.....b........Z...)......P.u.(@P....pQ..]...e...6F..v.'.....;..hW.=.B,W..G....d... @...........(..9....R..\T.W)tvSz.4NU..rQu...\|....<B!....H.k.)..!.8..@...............qS...9.k.lE.....I..[.S.}....0...}?.U.......@....a$X......'N....!I. 5.e..(....V...].... ....AVUN..:.s.......5.W.H.I......>....d...b.G.h.##.......q.zu.f^...O..s.]H?....(`..O.,.N;oo...G.4.~.N...C.......'.T.,..0W....z+?w.../\..B{.ebz.....OI.."._...~.211S1...... ........s...N..pC.(.

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1 x 30, 8-bit grayscale, non-interlaced
Category:	downloaded
Size (bytes):	83
Entropy (8bit):	4.823617854342895
Encrypted:	false
SSDEEP:	3:yionv//thPlEht/laulNfhlfkw9+0T6Drp:6v/lhPIQulZhlfk4Qrp
MD5:	EF70342DDE6B6D5E92E5297ACF40B25A
SHA1:	5B9E936911D8EB836AC1BF9FE1E6B376BD76FC20
SHA-256:	93E28A3DAAA5A7C89943370D06ECF0794AB228CBE1F0B3A40BB0D7F3CA7D4D05
SHA-512:	9D40A7E933A93BDF57FDCE7E5A0E72AE0C42B5F7070A6F41D308D02646B5F3CEC481F5F2F0F623D67C01840DAD62B192A2A5B46850DEE46E4FF526B009B351C3
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Content/Images/Forms/fieldBackground.png
Preview:	.PNG........IHDR...............+.....IDAT..c........p.Abc.U3...A..6...z....IEND.B`.

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1230x420, components 3
Category:	dropped
Size (bytes):	75463
Entropy (8bit):	7.974302906394143
Encrypted:	false
SSDEEP:	1536:TajvwCME1GCT8MYwXTlJsRYoMaQF8JyG+e7i++Zznf59zNB7ESUwmY:Ojv52ClYOJsGoHQB1qi+u59JB7EFY
MD5:	FFA78A10A5DC61806E1AB93C444E80C0
SHA1:	FFEBA6F844E0BDFA62456E814C2D0E6D968B6EF4
SHA-256:	9ADB8F569A3B96BD25165875765D5A4AE40CBA3E82274FDC3A6534C8FA5FD5A5
SHA-512:	EDB5471656B0C09881C61D56EB6B941E2869B1DDD599C5FB5F69D510688C5924AA77DA6545997C6A9AF6B58A1BB4505716864E80F9644F36F0DE2970687C5E75
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}...........".........................................F.........................!1..AQa"q.2...#BR.3..b...$Cr..%4DS...c5T...................................=.......................!.1AQ."2aq...B..#3R.Cbr..$4.....DS.c............?..uN.+........[..z..;G.Y.I#K......?...we....D.....A.w0....h.:..n...K..

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	1.9182958340544893
Encrypted:	false
SSDEEP:	3:e:e
MD5:	2A7864FD30EA87A1919FFA2B8AC356E6
SHA1:	56D5BFFBED8BA669E11DC16078CCF1B8486D5C04
SHA-256:	1E5941238A72B1F89A5D4CFAD9164D5D37F08FAB209161841EBF39BF057083D4
SHA-512:	DF1B81266707CFFFBF25F0DE9A1A53FD97BA92A56528C583C9438CBDCFE1BB1B1A6E3573E097B3398C1320A7F72A5698B49C7B07F3F0F13EDCAE2C30DA51B687
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2
Preview:	"full"

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.725480556997868
Encrypted:	false
SSDEEP:	3:59LRqL:59Ly
MD5:	B031D22B559E320E553A27E63D55A52D
SHA1:	E81357B1D15DC0E64461F3908F197F5821DF1F82
SHA-256:	F35B6EBDF92787F1A83E6D3F1D364EB1F8DDB01EE32493B3201F51ED86AA9DCE
SHA-512:	4FC4C476476F213C6F390EAFC61746B8C0D4C1F60567E428947E43531DEEDAE4A2F39D9DF6E0B2131271B85059E6F99E361C364EC6AEE72E9253C4A47E61A521
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/layouts/system/VIChecker.aspx?tstamp=638490573626029594
Preview:	...sc_Contact {..}

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	13
Entropy (8bit):	2.7773627950641693
Encrypted:	false
SSDEEP:	3:qVZPV:qzd
MD5:	C83301425B2AD1D496473A5FF3D9ECCA
SHA1:	941EFB7368E46B27B937D34B07FC4D41DA01B002
SHA-256:	B633A587C652D02386C4F16F8C6F6AAB7352D97F16367C3C40576214372DD628
SHA-512:	83BAFE4C888008AFDD1B72C028C7F50DEE651CA9E7D8E1B332E0BF3AA1315884155A1458A304F6E5C5627E714BF5A855A8B8D7DB3F4EB2BB2789FE2F8F6A1D83
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/978398205?random=1713460598569&cv=11&fst=1713460598569&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html></html>

Chrome Cache Entry: 655

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 656

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32010)
Category:	downloaded
Size (bytes):	69800
Entropy (8bit):	5.291240476188174
Encrypted:	false
SSDEEP:	768:ZuYWgLvazABY1PXodnScguN+hC03wApe4NKxvnq1OTTbOA3rmho:ZLLvFBY+dnS3uN2CKwAwi1OTTbOA3yho
MD5:	E07475ADCA84AC447B7FF987B79551F3
SHA1:	1796B96F93FD8342A5D7DDD8165DE36FE1308E28
SHA-256:	4329EE5A90AFD8EE0DE17DF581B8ABABE5591352F8F0001E6E4698A74D6E5CE3
SHA-512:	DD275B1428111F62F9A9B01E7AEFCE7B58BCDC71AA53DBF8AC1E81C21436B782D76CBC6894165D1867493E244F6FC46F950ABC1FD8FF13602A2E6AFE8C2126AF
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/algoliasearch/3.33.0/algoliasearch.min.js?v=638484955464930367
Preview:	/! algoliasearch 3.33.0 \| . 2014, 2015 Algolia SAS \| github.com/algolia/algoliasearch-client-js /.!function(e){var t;"undefined"!=typeof window?t=window:"undefined"!=typeof self&&(t=self),t.ALGOLIA_MIGRATION_LAYER=e()}(function(){return function e(t,r,o){function n(s,a){if(!r[s]){if(!t[s]){var c="function"==typeof require&&require;if(!a&&c)return c(s,!0);if(i)return i(s,!0);var u=new Error("Cannot find module '"+s+"'");throw u.code="MODULE_NOT_FOUND",u}var l=r[s]={exports:{}};t[s][0].call(l.exports,function(e){var r=t[s][1][e];return n(r?r:e)},l,l.exports,e,t,r,o)}return r[s].exports}for(var i="function"==typeof require&&require,s=0;s<o.length;s++)n(o[s]);return n}({1:[function(e,t,r){function o(e,t){for(var r in t)e.setAttribute(r,t[r])}function n(e,t){e.onload=function(){this.onerror=this.onload=null,t(null,e)},e.onerror=function(){this.onerror=this.onload=null,t(new Error("Failed to load "+this.src),e)}}function i(e,t){e.onreadystatechange=function(){"complete"!=this.readyState&&

Chrome Cache Entry: 657

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2317), with no line terminators
Category:	downloaded
Size (bytes):	2317
Entropy (8bit):	5.857213431960969
Encrypted:	false
SSDEEP:	48:Ego2Y+iKasKEIzUtJQSIZyaQqe3q7SWWdCC6jykt08ZdFRFQ9XhKw6:wsbSUtJfxrqLWWWdV6j1tddP
MD5:	CEA8FBF64C337BBB2F933456A82A1FBA
SHA1:	C80F69410AFF0E9FDF99829B963C884EEBB65003
SHA-256:	CA5B2AFFAD2A6CDA04E1D72CD5A94CA452CA5F5D0684EFEE6116437D5EFC3893
SHA-512:	A929C9CD2E35C3AFDBDFE1D63C38681324C37B9ACEE1579C53717C1732648EE97EECC6F73B7BBC7E8ED67FED30B6E69C80D66FDE31D2DF80BA22FA30DB88BFF7
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/viewthroughconversion/1048135065/?random=1713460598672&cv=11&fst=1713460598672&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4
Preview:	(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/"))\|\|y()&&w("Opera");var A=/#\|$/;function B(d){var a=d.search(A),b;a:{for(b=0;0<=(b=d.indexOf("fmt",b))&&b<a;){var c=d.charCodeAt(b-1);if(38==c\|\|63==c)if(c=d.charCodeAt(b+3),!c\|\|61==c\|\|38==c\|\|35==c)br

Chrome Cache Entry: 658

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (316), with no line terminators
Category:	downloaded
Size (bytes):	316
Entropy (8bit):	4.995066929079968
Encrypted:	false
SSDEEP:	6:AtBASOeX0qoKhueR8GhDf0S2A5+oLLtRWDu7LvgO9lZ3BsPq3SmXZCLICi:AsmKK58kDf0S2bitRWoR5BxXOi
MD5:	0DADCE789811E5C4C5DAE30E42CD4494
SHA1:	3F71D5796D34481A0A176C469365B1BFAD529D27
SHA-256:	CBA64EB7A49268FD4A042563D82837D134AC7604172762B22D62905F08605997
SHA-512:	E2155D99C3195AF53B7D1F862BDC1563FCD1B6979314A7E5AF690E2DA9BC6B6675D1BAE8FF5CE438DAE97F5124488E86E1BBDFF35FDC6BEDEB3E3782CEA400BD
Malicious:	false
Reputation:	low
URL:	https://assets.us.brightmine.com/latest/Full/Bundle/googleTagManagerJs.min.js?v=2.0.769
Preview:	function includeGoogleTagManager(e){var t=window,a=document,n="script",g="dataLayer",e="GTM-"+e;t[g]=t[g]\|\|[],t[g].push({"gtm.start":(new Date).getTime(),event:"gtm.js"}),g=a.getElementsByTagName(n)[0],(t=a.createElement(n))["async"]=!0,t.src="//www.googletagmanager.com/gtm.js?id="+e,g.parentNode.insertBefore(t,g)}

Chrome Cache Entry: 659

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 845x403, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	20652
Entropy (8bit):	7.98882464872448
Encrypted:	false
SSDEEP:	384:PaDg56P3Qe6RVo7uu2OQeDaNVVLYDcnUF0GEDKqmVfN4lfmWRc1tH:iDg5Ve6fo7j2OQ5zVLYDFyGEfmV14lfA
MD5:	C0299FA0119D3EEE6E9237409D8BBB57
SHA1:	2CFAAA26AB8E3CBBAF936250DF0AEA6807AAFFF5
SHA-256:	1160D36FB685A15E98AD8863408E45E1A780E7EBB794E069B0068A559085E44D
SHA-512:	A4988D04CB52185F22F74C19EA510030CA0325D37A8FF2CCB74C0B1E63A3689966FB0C632EBFF42A5532F0BE099743A2CAB154D7C3000910B4FDAB7A59472649
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/healthcare/default_videomodal_image-v2-845x403.jpg?h=403&iar=0&w=845&hash=6B5C626A3B68E134F023C3930C5A6220
Preview:	RIFF.P..WEBPVP8 .P.......M...>Q&.E..,.9................u.r..T<.y.......w.k_X.\|..B.}...O2..`0k..a......c.......}.:.......z...e\|...&..?q9....w.....z....?.w.?.G..c}...3..^.>....r........\|t.[.J$......5%....X/i.CP....[_.t.S..jd%....u...D..,^..`......c...,.~.3/..8..Y..........HV.S...W....g..]...x<....-ck.."\...-..(....s.L.k.}<....sp~>..#FL.....I{.hu.....\|Y..01...@......-zZy.\.y..C.........8.J...O......1W.}.Y&.....Q...V...J..7........i.h...&._%.!.G...#....[.7....!v../.'..3j..k...?.#.!...Y~.$.-.S.Q....\|N.0.H.`.V..x...p.Q..d..o..j\|.zQ.Ir.....B......V.. .......E.A..T.O....U...)...&.....{.!@.Ez..}0C..)..Fk......srk..`Ha...,%...........@.dovt.;....Q(.eG......r........ sYj.`.X..4.(...7^.....GjO..UR.P....q.......<9.g...9..(.Dy.P. .+.....z8..H.._m.!a3...Hh....K.+.C.E.hy~.';......FL.M..E.....do..u..a.l......./........V..R....5F.d.CV.6V...k....J).....[O.b........q.Q.....q.......p...C{.7.h....c&jZ......s..sz.D.....\...}.q\.`J......l.\..8....m...:..

Chrome Cache Entry: 660

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1230x470, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.990233636419367
Encrypted:	true
SSDEEP:	384:SpuPlpOnSAykUi4OmML1bXqtNbYGFtwQd6JAUNtzA6HmQQqjTUQYoFfw1O1vs1ku:lPHmS72Zm0bMNMsbd6uUNlJjIr8fx0
MD5:	01056D51FB30F528BC78102AEF5248FA
SHA1:	5079642DB9A68811A36CBEE969A5E9F072C8FA35
SHA-256:	D780D4010352D3A726F9FD0302698B53A48848769F7672665776E552E897DF9D
SHA-512:	0F3141F4C0D519416DCA312F16C7CAB96CDB14290E8FC2A3D1B67F2C7C0363FBD7620F7856C9BDC9FADBBA411133C1F0BA16075420CB965552E10BF7E3153619
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/heroes/key_image%20jpg.jpg?h=470&iar=0&w=1230&hash=183D924018454C8F9F17F6FFD180EFF8
Preview:	RIFFpY..WEBPVP8 dY...........>Q(.F#..,$r.....gn-.d.../....~.......?~..c.w.?...qJ O.....zg~....W#.Ec.;..........m...O9......OG.'.W...1..{q .........;.....e..`..c.,..T.ldoY..:....@/.Bzqv.x.L.}....,..G...]...%T P.8u&..........8.Ft.`r;}..QI.T.z......a..m...x.....+..0i.C...}..C..9...~Q+(...2.U..+<.<.6g.J0..p>...{..7.vS..u.+Z0...M[kD....._.v.\|.B....ZrV..Z.C....$7.t...QWy8W..0.....d.#.vh..........}..$....\|.Oi.....u..x..D..]..I.'....Q...?!8.e...v.z......$^.......)..Uh......RU>.rs...Yx[p..b.f..Q.i...c...<xM\|Y...=....Y..NFq./..].;...sM.?..>.Y...C.....y..n$7..[m..]'S.....M....m......".6+..?.;7.. n$A?.W..k.:b.5>t...g.$az..d....j_..c.!...x.......~s3<"..@.Lt.[.@,.+...Y.3C.I...-.;..E...l..EOCb....y...i.^.......r!..rG...<...Q)..T..%a[Y............ ....:+...\|.+F...y...4..J/............NJ.@....J..{.E...C1.\.rq.m.G>............e..6..<.zj3.kP.{w-.w$+.PiV5..[.RA..xuB~.......K..i.n...+..b&5....R..6+zj......K.v.\......n...C.M......#.k......W.h..4..

Chrome Cache Entry: 661

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	82267
Entropy (8bit):	7.979047296066439
Encrypted:	false
SSDEEP:	1536:EIrd1yoQpRomYQrIbmQ4mHuLk9K2ktEcJT7ICtYPnL6C1Q8J+Q9yVXgfU:EW1QPombM94w62ktEcRIYfPeCZgs
MD5:	9D9085F1877B2189ABA9C3780E933519
SHA1:	C405FC48805A3825794A7AAA43F967C32EC76F46
SHA-256:	6D45BB90E6C9266061688444FAC011863AAC5D134B929B2FB37ED24E3C68FB59
SHA-512:	3CACA250C10288FAC6D78F1D915EA8F136F27EBAACD7C5039F3C8F25FEDEDF69823E6E167798F502AA1431BA9B87468F339D9FC0C0240D11E292A50CEAEAFEFA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx...Y.fGv&v......[.;.&.E."...g.%{d...c....0...y0l.....060.........h$Y....M..&.;Y.YY.Y...r.8..7.X$...@.......F......O^........q..f..X.ADn..-..... "..v..V.. ....7.L.A.TJ..B......[.....@d.nH_.~..pqsoDH.........7.[5..H,..{..e....y.B..B).L.(.......j....giD...k;....ub\....+.l.u.Y@D.".........(m.....n.y#?......2UZ..b..J.j1..Yq...>.;.........O.P..F.5..RZ..F...8.^..7.....\{....o`.2jo..sk........I...Aj.R.pE.h...w.....3g.7...?8:T....0s.EWo....a/..b...=.1......{...+.=.k./.\|..f.h....n....}.....o...y...6..5~z.....W.....O..._..WT...0sa....W...............O.o....P..V3v...4y./]Y........!O.t.y.v~...../^..w...R...]K...g..!!.2.st.$.....j.n4Y.y..Db.$1.RJ. ....".Q.$..Q....8.N......QYw.H......l.T.....m...k.....7...].g...1B...k........r;<HJ...Qo..y&.c.A.....~..i]..Ow.....q....Z.....8.."...?...?.......k..u.[.Z....:...%.q.v#mn..P...>........#$=.S......<...;<C..=s~......UXjQ...M. .2......rO....c& B$.Z5.V."...

Chrome Cache Entry: 662

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12573), with no line terminators
Category:	downloaded
Size (bytes):	12573
Entropy (8bit):	5.21221314007855
Encrypted:	false
SSDEEP:	384:mpXEHG8q7suoUYWQKcMJ9K5TFoZFao/3YWYOoMFmyKuJiNo1OXiko/vk:mpXEHG8qwqYWQKcMJ9K5enDY6FmyKuJI
MD5:	9AB04446BA0DB5967FAF4A2BD7CA7000
SHA1:	56F680F29373AEB33251AE6CB615FDC23FF5FE44
SHA-256:	A5D60D4C3605F846532C44721552E59BDF453197EFFA6EA6D18449EB53470597
SHA-512:	784E5596271DE656E5597E07A717F797A0A7500114077E671E87383B86188C878E09A87575E81E0AB1378A3E0C77AF14168593E6CEE5B60310F5FAF4727EBACF
Malicious:	false
Reputation:	low
URL:	https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/generic-standard-page.min.js?v=6951
Preview:	var AppFull;!function(a){var b;!function(a){var b;!function(a){var b=function(){function a(a,b){void 0===b&&(b=null),this.$localeSelector=a,this.$productsSelector=b,this.localeSelectorTabHandleDropDown=new AssetFull.TabsHandleDropDown.ViewModel(this.$localeSelector,{isDropDownFluid:!1}),null!==this.$productsSelector&&(this.productsSelectorDropDownViewModel=new AssetFull.TabsHandleDropDown.ViewModel(this.$productsSelector,{isDropDownFluid:!1}))}return a}();a.ViewModel=b}(b=a.GlobalNavigation\|\|(a.GlobalNavigation={}))}(b=a.Shared\|\|(a.Shared={}))}(AppFull\|\|(AppFull={}));var AppFull;!function(a){var b;!function(a){var b;!function(a){var b=function(){function a(a,b){var c=this;this.$container=a,this.cookieSet=ko.observable(!1),this.closePopUp=function(){c.setCookie(),c.$container.dialog("close"),$("body").css("overflow","visible")},this.setCookie=function(){var a={Name:"shrm",SeenMessage:!0},b=Cookies.withConverter({write:function(a){return decodeURI(a)}});b.set("partner",JSON.stringify(a))

Chrome Cache Entry: 663

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=1773394&time=1713460552281&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F
Preview:	{}

Chrome Cache Entry: 664

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	70126
Entropy (8bit):	5.448556489350698
Encrypted:	false
SSDEEP:	768:gbElE4VjBD+kLOBZGX3DB0OJwl3iwrnunOkUjtNwlP+O08KZa4BIkRxca3rucJlQ:gGEsCwwW0xiwbkW8wceruSlYRFwi7B
MD5:	F022F3AB88EAA703CCF5B9EB70D80BD5
SHA1:	24C37750D27FD45C850881495AEE2E6A3595C454
SHA-256:	9CDBAEADA5271E602DC4899140F70CCF1217BFA3309FCE36211F7045A23CE967
SHA-512:	4D786F94B9BC13EAA1EADD73AF5B6D7493FFFBB6BC2E916DC4A2EBECB33A468467353296235B18AE57A0608950E0776F24F8F1069D9BC3B0DF1C775221D7596D
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/018e86cb-0f61-72d5-abc5-660accde9ba2/en.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Preference Center","MainInfoText":"We use cookies that are necessary to make our site work. We may also use additional cookies to analyze, improve, and personalize our content and your digital experience. You can choose to reject some types of cookies. However, blocking some types may impact your experience of our site and the services we are able to offer. Click the category headings below to find out more or change your settings. For more information, see our <a href=\"https://risk.lexisnexis.com/corporate/cookie-policy\" target=\"_blank\">Cookie Policy</a>.<br /> <br />\nYou may also be able to exercise <a href=\"https://consumer.risk.lexisnexis.com/request\" target=\"_blank\">Your Privacy Choices</a> <img src=\"https://risk.lexisnexis.com/-/

Chrome Cache Entry: 665

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1230x291, components 3
Category:	dropped
Size (bytes):	11935
Entropy (8bit):	7.589071732692289
Encrypted:	false
SSDEEP:	192:tH6v7wB22iJO12M6aCRbC1Aqrjy3NLL33hjl9T1M/zz6qdvaAFrMTxbtg:gv0BmJO1SlRKnA7tlp1MLz6qdvag2Zg
MD5:	CE0B710C8DCDA3A2101169A12A26B019
SHA1:	5FBA7D25011F18AFCCA4BECFF8ABC798D09C6F75
SHA-256:	2635DFFCD847002300286F7EBCD3E0E6D1ABF33D9B722E3CD2EDD682AE428DB3
SHA-512:	14F03E53F0739E38B9CF2D32C6DF5D05CCFAD33CEBA772E0C768A6DD3E88B6244A83FF0FBD87CE1CBF3875F9F9C91D9F631F318BF854ECBFAB254D0C04FED753
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}......#....".......................................................................;.....g.l..............Ce!Y...........>\|........:....A.....V...}{..Pg..<.@.....{... ..k....k...[)%..@.d.y......C.}..7.8....t...t......<u..j......G.....9..r.s...dT.................;...9.9q..@.......I..0^S.p.

Chrome Cache Entry: 666

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	247597
Entropy (8bit):	5.083849285402853
Encrypted:	false
SSDEEP:	6144:6LEbhsnwcrC/Vuc5cyYOf1KwZOUL/p4vR+8I3JhI8f2AHUH:6CLYOfPZ2J288f2A0H
MD5:	107FBE9555BFC88EC5CAB524C790FE34
SHA1:	0FED45AD7A48ACE869BC725CA474AD86A1EF1562
SHA-256:	B2215CCE5830E2350B9D420271D9BD82340F664C3F60F0EA850F7E9C0392704E
SHA-512:	28C3EB3B22A8C59EB74DDAC7C989512B0197E9E5867BDF056018EFEB9056687F44D86A04F555D8F8C9A3DD6296C014DC8708FAE197839588C490DDC0EAE27229
Malicious:	false
Reputation:	low
URL:	https://auth.us.brightmine.com/lib/jquery/jquery.js
Preview:	/!. jQuery JavaScript Library v2.1.4. * http://jquery.com/. . Includes Sizzle.js. * http://sizzlejs.com/. . Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors. * Released under the MIT license. * http://jquery.org/license. . Date: 2015-04-28T16:01Z. */..(function( global, factory ) {...if ( typeof module === "object" && typeof module.exports === "object" ) {...// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return facto

Chrome Cache Entry: 667

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, AVIF Image
Category:	downloaded
Size (bytes):	1053
Entropy (8bit):	7.193682327627453
Encrypted:	false
SSDEEP:	24:+cKYj6Lez3yR4thBuk7+hGWAG5a9sTBSz6icCoBR:+cKYjweORIBukihLAfuBBCoBR
MD5:	C4FDD95B6D1A45D0CDD272A8C20E9BF4
SHA1:	D04B6C11FE23222FD9BE06AE729185CCDC10AD41
SHA-256:	FEEEF43DE988B49E6657B023FAB6E7CAFB318447FB9E2F82B844B679D500D9F9
SHA-512:	6FA84F1EBA2498D835F4BEE4C8111F7E07675DFAEA9C27B4059A49E384661B2AEA1A5D8110A7480179D3DF1D197509B22F216FBFD7D97643362D8BF189C1C065
Malicious:	false
Reputation:	low
URL:	https://i.vimeocdn.com/portrait/35637746_60x60
Preview:	... ftypavif....avifmif1miafMA1B....meta.......(hdlr........pict............libavif.....pitm..........iloc....D....................(iinf..........infe........av01Color....jiprp...Kipco....ispe.......<...<....pixi............av1C........colrnclx...........ipma...................mdat......{..2......0...+<....[..g$<"w...]3.J."=.n.q.Ci.RM..in.r....z.M.....VT4<dw9 [...Q9dv..0.H...._.'. 3Be...F.....&"..z.uD22..d. . .....o?.M+H`Bx.?yX.L..[.....th....83&4...4..6L.r...`....'.._.t..Dj{...M..}..]D.h.Aa:]....@.Gy......,8.PJ....tNe..."&...>L-DE...f.....%........R#E..6.a{..u...G..l'....... V......\|...\|j..<`..../.'..S.)....h..!.(..*..'....i.e..$.......>. .9&.Ile..)w....s..nD.6........)....z.5..]E..)<2...A..x..G.\...t.>2.Q..K.y....h..U._G.v6..1......Y.J..chS.tJ.z...9...`.=....>...v.........s..{...P&....F.3.}...03.3.u...rZb../....."..g}....:.%"\>..6..jnv.K.H..zX...("...\2..<.....a...0.z&BD.b...n7./..e..mR0.J..Y <6.H. T.G..@.../=..)5;.W.d{]..=... X....H.C....F.`Ov)

Chrome Cache Entry: 668

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 270x170, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	14218
Entropy (8bit):	7.9841447304689215
Encrypted:	false
SSDEEP:	384:C2U6LLfFb0Q5X1APQBg1zDAingJRHVhu6w:CSbJeP6gxDAx+
MD5:	4459D8A18626BEFE1A2F10F2605A4155
SHA1:	169390C7F089C89690866F020812C749807529F2
SHA-256:	ECF2B44C5E4F4C2F92DD40550F22B2F566F958D3B7CC0D48FF4710CDE4E64FB1
SHA-512:	B4017812C73D7C0EE52A9B8C30A141D3806E04F344DE3F08553EA659D1D6B0B5E27A573E23DEC87AF894BEF13D48610F3562E056E58DCD3CF9CF802D525F862D
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/financial%20services/celent%20tile%20img%20jpg.jpg?h=170&iar=0&w=270&hash=5C83B7E104E9151B0581F8CD10EA72E0
Preview:	RIFF.7..WEBPVP8 v7...........>Q..D#.....8......]6.C.{...U;...3Q..1.#..~....>..X..............a:.._...........^...C...'.........A.w~..U.W.=.?..`..7.'...{..Y.M.....o..................W....x?.o.....W.9.....M..&.^\.....6......{.q.....y....g]5.....w.C.o......5...2..p.v./.m.M....,.K.c$=.-v......CE.....u.B.tP....?o.gP.^.DA..p....Z...5Y...)jKh.=.X+......+..+.K.F.....O..\J..;J.TN.AD.....:.x..Q....o....z@DQH'u9~..G.E...)F....o......0I..P.d.'.G..Un...!....J..........\|..%....+...u...............n...[...ZSt.d..t\|+Y...w.;.IC0. ...t...h.<...j.F0.s..u....T4...]..p.z......b.E3C_..b......C.R.~\...Q....x...J..x..`p....!+Z..ke.......8I0../.v...........i^.u.!iY.O........~.k.y.g...._.Oig..5. .{%.@.E.7.l..+.7.U8...^...0...#%_=..ju...:2.e.UF..Ba.(kix..s..hc}Z4pC..n\|I..n.uB.m.a.Q...`..[..U.AP.`.Y.o.F...r#$\|.x...'.3.=..f+.@.f#.:..44....)l\....s`U..x......8.]u.I3..k...M......g..c.7vt]m.:G..0...P....]....j.aD........s....K2..a/Y.cIsb.0...r..4.. D.?2..z...\E/.0.

Chrome Cache Entry: 669

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2126), with no line terminators
Category:	downloaded
Size (bytes):	2126
Entropy (8bit):	5.577851949596894
Encrypted:	false
SSDEEP:	48:YyLVkckEz1gg82OIDqrm/EzUsaggzR1flvDqrmlYnbuO:YyRkcky1gB2OuqYyagM11qdnb3
MD5:	D5DF786BBF3590DC596C99D1B7CFF275
SHA1:	8FA22B20CEA794F5F5EAAB52411E8B2628AD096B
SHA-256:	F986B989F1919BB2E53785B497C092C28950C200EB60ED724FC36975D5D99F59
SHA-512:	1C4932D9E597B070C2C5F5BD55D248A00C99765FAD86011EE7461E614189B2ED663C2017AF183FB389704A3B0A1F62556D7E84A03A255A4991EC176FB7B03500
Malicious:	false
Reputation:	low
URL:	https://td.doubleclick.net/td/rul/940382430?random=1713460613414&cv=11&fst=1713460613414&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config
Preview:	<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwaXJ5IjoxNjk1MTY3OTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0="></head><body><script>var ig_list={"interestGroups":[{"action":0,"expirationTimeInSeconds":2592000,"interestGroupAttributes":{"owner":"https://td.doubleclick.net","name":"1j7859409331","biddingLogicUrl":"https://td.doubleclick.net/td/bjs","dailyUpdateUrl":"https://td.doubleclick.net/td/update?ig_name=1j7859409331","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sT5ZByw!2sZkjihg!3sAAptDV5z47K0"],"userBiddingSignals":[["7859872220"],null,1713460614865924],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://td.doubleclick.net/td/buyer.wasm","enableBiddingSignalsPrioritization":true,"trustedBiddingSignalsSlotSizeMode":"all-slots-requested

Chrome Cache Entry: 670

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1230x214, components 3
Category:	downloaded
Size (bytes):	23246
Entropy (8bit):	6.876428670045714
Encrypted:	false
SSDEEP:	384:YO77777hPS777VoKW59OGvbdbdbdbdbiPB+bdbdba:YYKWyGoV
MD5:	352AE92245CF7EF30B387592721B5E52
SHA1:	6D11F36BB878F30A2E21A50F35975D6CC6636D23
SHA-256:	3586AC70A24301C233904AEDA69F0E7F751291149674306D2C59B5506527825F
SHA-512:	8AE7B737EE627441242140887EE69E2D82C887A34E795C576743D7D84F4B6DC2E6AA9389E84558F26D80B3526AD3BEE5A8CE1046AE0312BB49231F0EF5B66A77
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/-/media/images/lnrs/heroes/pattern_hero%20jpg.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C............................................................................"......................................................................................,...@.......(..DQ.E.`..D...........`...............................(..(..P..........D..`..@..X....%.............................P............,............`..`..`.....................................@..(..(........Q.........%..................................,..P......................@.......................................@..(..(..........@..)....%..................................,..P...@..@.J............. ..`..@............................@..(..(.....T.......... ..@..X.......................................,...@......J...... ..X........`.............................(..P....,....P...... .........................................@..(..(..T....P....!`......X..X.................................J.....@........PT...... ....................

Chrome Cache Entry: 671

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 270x170, components 3
Category:	dropped
Size (bytes):	18550
Entropy (8bit):	7.926363288096275
Encrypted:	false
SSDEEP:	384:UDDhVjt+m+Qvie3TzG/01iy+T+2a1hS8HHSqlJwz/C2R1tODln2V+L+Nvc0:uhJt+m+Kie3Ta01iy+S51o8nSqITR1Gk
MD5:	26C392FE7954E08CC1F7F0F96FFD2003
SHA1:	3E2438C6ED0B13E1AEA5C9935D5D599A2B720392
SHA-256:	759C8177D2A149CE84828521DCB6F078603B464F325F7A46250735277C13B3FB
SHA-512:	CFF141D5FD55F9F8EB3B2B2367117512D7DB5E5C84A3D678D474F21BB3C082E856366E21F7311221E1EB74D7C392D468DAA44A944048C37B4391BE7B6B06B473
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE.......lcms....mntrRGB XYZ .........).9acspAPPL...................................-lcms................................................desc.......^cprt...\....wtpt...h....bkpt...\|....rXYZ........gXYZ........bXYZ........rTRC.......@gTRC.......@bTRC.......@desc........c2..................................................................................text....FB..XYZ ...............-XYZ ...........3....XYZ ......o...8.....XYZ ......b.........XYZ ......$.........curv...............c...k...?.Q.4!.).2.;.F.Qw].kpz....\|.i.}...0.....C............................................) .. )/'%'/9339GDG]]}...C............................................) .. )/'%'/9339GDG]]}..........."........................................@.........................!1.A."Qa.2q.#B...$R.34b...CSr......T................................4......................!.1.AQq."a.2.....B...#R...r.............?...O...q.>....B...K..J/.r....-o...7..\|...KR.[J..v....s..^..C......E.......a.s...'D..

Chrome Cache Entry: 672

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 270 x 170, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	78298
Entropy (8bit):	7.981357946324484
Encrypted:	false
SSDEEP:	1536:cPdl1qUnL4N8DsG83IWjcwxnXv4F3goPE9pxYy16T4wqWl2gweuT9BLFan2zA9:cPvBL4NiAI6VxnXwNgoOnYO6T4wqJF9W
MD5:	37EC8575B8C316BC84E56633100880B0
SHA1:	CD2AFED53772A3DC411B778B4826CE7FDC7C42A6
SHA-256:	643AD554290B90F8BFB373696ECDB3E1E4039A0AD295E64365FD0C7C38B9544E
SHA-512:	A3F28E9A77CF721FE860EE640D3E3A43A36B552FD20EFD501BC303E76615E26605C16A92B5DCA841E96B86FF8BCE20A6E8A907BA47017519519B0D66C589DA9E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............)6.....sRGB....... .IDATx.\|}w.$E..9...;7lda........T.DAT..".^..FPD.._>.,*. .....""..JX...{..TU.....{.....LwWW8.9.N.X..Q......................H.. "k........a..Y.l. ..@...;.....F...3.a. !..$..6.>.....Py.U.....:W}........R.....6..u.P.R)..B..B.........{I.6L...v..@....Z..l@kP.$)...G^.x.Wm..vX.h.W.........}.....<...W>....H.y.0.>..w........I.....`x...w.f...../.Y%.:..._zq...\.....?..s.k.B.A........3....z.3".3....1...f....03#;z(.S_2.ty...m..Z.df..6}n.z....#...:.FF....?...@"..F!H...D....;.a..J .."6.:Y..(.........p.. .3$..a...)". ."Ia.E.dc<A33D..afm.b@d`.......R(.........1@$)....V3.`..... .Z..@.$;.j....0..!.af.P....%.D;S...J+.C....."9&..,.^.Q.Y.p.W.l.}...U...M...._../..E~.c?t.'...o.R.....E(DQ.Q.....q+b....C..BH..c.c.. ......y.D....O.\|...V<.....p....}.n.,]...G.qdg..$.gV.x.......{y.JN.....@2J. J.S..J..:..5..?l.Zic..N1...+..@.5.Y.W2.0.(d.ua...4Z....M...f.C..=a. ....%.7.Xd.0.......Da.d....".q..A..4w........S..%.0.T^..K.-......a....A...tgG.V

Chrome Cache Entry: 673

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	21156
Entropy (8bit):	7.98204635310931
Encrypted:	false
SSDEEP:	384:/xYId8IoeiOV/YLT8aq/647Xoo84ci8pjgiM94MuzpNIPz2KDq+1il:/xYMrMO8TVqpoi8HvMgCz2yqC+
MD5:	17B6DB20C159486E51D38C92FE0DCEE8
SHA1:	9FAFD8F4845D1843F7D54CFEDF3C62093195EE64
SHA-256:	1D6DA5899EDA64433F3333872217CA6FC60FD76C451C2D3EAF55C19AA4E414B9
SHA-512:	876DC3CA026AA3EF75D702CEF4935EE4CD8C97EC3EF55B2BF1C1FA6C7FED0FE9B9935DB88A44344CAB65A9A7CABBC80AB1F7FF29C901E562C91BDE6F89423E09
Malicious:	false
Reputation:	low
URL:	https://risk.lexisnexis.com/Areas/LNRS/img/icon_sprites_4sept2020.png
Preview:	RIFF.R..WEBPVP8L.R../?.Y.MHr.I.......?8<.j.sD.'..x..l...j....3t........>.?.N'..!...'.`..S....PSJ.....4Q.y._S...C...r!.....T.C&..m.I.....[.;..x.....n...$...!V....Q..y^.......^tik..f..V=K..qa..v..W.. ..H@....]....p.jQ.........O...X.....3..9.0....U.Z.._8@..U.!..W...Z........@.j..@......y}......A.^.x..#.jU...4......6~..).\.Y...mU...ww...CJ!&:\|E.%.i[ym.p.m.o....{.......OU......,.i.S.f ~\|../..Z...S. y.l...b...9.9t..k?....a6..L..c...U:...F7..$_.....,....zh~.a......n]Es..1.a.....~..8^...Z..0.....Y......................j.....^?HM......if.....A..:.\t.j...Ts.h...Be.%.y..d0n..]Q~\|e...~...._...\|^.x...)...<c.?....=v......y...cl..~...M7.+0.....6..^.^...S..!?+.".'.?.AL.....`FV.W.WM........V@...~]....d...i.t..E....p..r..A.y :R.).=..A.q...u.k..&..46\0... O...zr..3..d...?.]=.....G.s.<.f..3g.(.......y.h.......fxfb..q.....w.\{q.ZM..b.Y...p.*n........x.pn.F...x%.a.Vaft........Z.n.........F.."0.B.E.R.....t.).p1E.Z....J.Xp.p.e.af.".p...p\.\...).q.p...)\.N.p...../[Z.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 18, 2024 19:15:33.370193005 CEST	192.168.2.4	1.1.1.1	0x7438	Standard query (0)	auth.us.brightmine.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:33.370378971 CEST	192.168.2.4	1.1.1.1	0xd986	Standard query (0)	auth.us.brightmine.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:33.969495058 CEST	192.168.2.4	1.1.1.1	0x4b6b	Standard query (0)	hrcenter.us.brightmine.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:33.969722033 CEST	192.168.2.4	1.1.1.1	0x6a48	Standard query (0)	hrcenter.us.brightmine.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:35.078545094 CEST	192.168.2.4	1.1.1.1	0x6fb1	Standard query (0)	hrcenter.us.brightmine.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:35.078816891 CEST	192.168.2.4	1.1.1.1	0xe1b3	Standard query (0)	hrcenter.us.brightmine.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:35.902798891 CEST	192.168.2.4	1.1.1.1	0x469	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:35.902798891 CEST	192.168.2.4	1.1.1.1	0xdb14	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:37.411688089 CEST	192.168.2.4	1.1.1.1	0x8e49	Standard query (0)	use.typekit.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:37.412519932 CEST	192.168.2.4	1.1.1.1	0x277e	Standard query (0)	use.typekit.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:37.415118933 CEST	192.168.2.4	1.1.1.1	0x282d	Standard query (0)	assets.us.brightmine.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:37.415277004 CEST	192.168.2.4	1.1.1.1	0x64ac	Standard query (0)	assets.us.brightmine.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:38.070332050 CEST	192.168.2.4	1.1.1.1	0x97c8	Standard query (0)	assets.us.brightmine.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:38.072269917 CEST	192.168.2.4	1.1.1.1	0xd848	Standard query (0)	assets.us.brightmine.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:38.157381058 CEST	192.168.2.4	1.1.1.1	0x9c06	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:38.157381058 CEST	192.168.2.4	1.1.1.1	0x5a74	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:40.246165037 CEST	192.168.2.4	1.1.1.1	0x3660	Standard query (0)	auth.us.brightmine.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:40.246314049 CEST	192.168.2.4	1.1.1.1	0x1613	Standard query (0)	auth.us.brightmine.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:47.084954023 CEST	192.168.2.4	1.1.1.1	0xb1c9	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.085618973 CEST	192.168.2.4	1.1.1.1	0x903	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 18, 2024 19:15:47.096813917 CEST	192.168.2.4	1.1.1.1	0x9859	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.097879887 CEST	192.168.2.4	1.1.1.1	0xc318	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:47.097879887 CEST	192.168.2.4	1.1.1.1	0x4f47	Standard query (0)	rbi.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.098263025 CEST	192.168.2.4	1.1.1.1	0x9e3a	Standard query (0)	rbi.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:48.777220011 CEST	192.168.2.4	1.1.1.1	0x241d	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:48.777683973 CEST	192.168.2.4	1.1.1.1	0xe684	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 18, 2024 19:15:49.380717993 CEST	192.168.2.4	1.1.1.1	0x3db6	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.380717993 CEST	192.168.2.4	1.1.1.1	0xad87	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:49.402707100 CEST	192.168.2.4	1.1.1.1	0x171d	Standard query (0)	addevent.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.402992964 CEST	192.168.2.4	1.1.1.1	0xf20b	Standard query (0)	addevent.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:49.429385900 CEST	192.168.2.4	1.1.1.1	0x1584	Standard query (0)	hrcenter.us.brightmine.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:49.429385900 CEST	192.168.2.4	1.1.1.1	0xd2e5	Standard query (0)	hrcenter.us.brightmine.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.106185913 CEST	192.168.2.4	1.1.1.1	0x8063	Standard query (0)	cdn.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.106859922 CEST	192.168.2.4	1.1.1.1	0x8387	Standard query (0)	cdn.tt.omtrdc.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:50.107386112 CEST	192.168.2.4	1.1.1.1	0x368c	Standard query (0)	reedbusinessinternat.tt.omtrdc.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.107690096 CEST	192.168.2.4	1.1.1.1	0xa84c	Standard query (0)	reedbusinessinternat.tt.omtrdc.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:50.135776997 CEST	192.168.2.4	1.1.1.1	0xe32c	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.136019945 CEST	192.168.2.4	1.1.1.1	0xb487	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:50.395944118 CEST	192.168.2.4	1.1.1.1	0x37e4	Standard query (0)	www.addevent.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.396224022 CEST	192.168.2.4	1.1.1.1	0x6165	Standard query (0)	www.addevent.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:52.344120026 CEST	192.168.2.4	1.1.1.1	0xea6c	Standard query (0)	cdn.addevent.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:52.344352961 CEST	192.168.2.4	1.1.1.1	0xd4dd	Standard query (0)	cdn.addevent.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:52.663886070 CEST	192.168.2.4	1.1.1.1	0x759b	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:52.664011002 CEST	192.168.2.4	1.1.1.1	0x88fc	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:53.252419949 CEST	192.168.2.4	1.1.1.1	0x246a	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.252789021 CEST	192.168.2.4	1.1.1.1	0xb09d	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:53.500124931 CEST	192.168.2.4	1.1.1.1	0x5a3a	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.500355005 CEST	192.168.2.4	1.1.1.1	0x8299	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:53.509380102 CEST	192.168.2.4	1.1.1.1	0x4c3c	Standard query (0)	p.typekit.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.509640932 CEST	192.168.2.4	1.1.1.1	0xaf8b	Standard query (0)	p.typekit.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:53.578635931 CEST	192.168.2.4	1.1.1.1	0x8432	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.578783989 CEST	192.168.2.4	1.1.1.1	0x487	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:53.585669994 CEST	192.168.2.4	1.1.1.1	0x2511	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.586277962 CEST	192.168.2.4	1.1.1.1	0xb87a	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:53.886950970 CEST	192.168.2.4	1.1.1.1	0x4026	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.887207985 CEST	192.168.2.4	1.1.1.1	0x9ce3	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:53.912120104 CEST	192.168.2.4	1.1.1.1	0xc35f	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.912121058 CEST	192.168.2.4	1.1.1.1	0x30eb	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:54.083375931 CEST	192.168.2.4	1.1.1.1	0x632c	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.083636045 CEST	192.168.2.4	1.1.1.1	0x3350	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:54.126676083 CEST	192.168.2.4	1.1.1.1	0xb2af	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.126924038 CEST	192.168.2.4	1.1.1.1	0xa43	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:54.443442106 CEST	192.168.2.4	1.1.1.1	0x1b14	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.443851948 CEST	192.168.2.4	1.1.1.1	0xe90d	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 19:15:54.455782890 CEST	192.168.2.4	1.1.1.1	0x1d0e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.455925941 CEST	192.168.2.4	1.1.1.1	0x2f81	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:15:54.699996948 CEST	192.168.2.4	1.1.1.1	0xddd6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.700424910 CEST	192.168.2.4	1.1.1.1	0x88c1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:01.998671055 CEST	192.168.2.4	1.1.1.1	0xeae4	Standard query (0)	risk.lexisnexis.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:01.998946905 CEST	192.168.2.4	1.1.1.1	0xa798	Standard query (0)	risk.lexisnexis.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:02.868776083 CEST	192.168.2.4	1.1.1.1	0xe858	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.868942976 CEST	192.168.2.4	1.1.1.1	0x6898	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:03.088113070 CEST	192.168.2.4	1.1.1.1	0xae95	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:03.088656902 CEST	192.168.2.4	1.1.1.1	0x999b	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:03.090981960 CEST	192.168.2.4	1.1.1.1	0x5531	Standard query (0)	img.en25.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:03.091233969 CEST	192.168.2.4	1.1.1.1	0x7478	Standard query (0)	img.en25.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:03.667720079 CEST	192.168.2.4	1.1.1.1	0x6e5b	Standard query (0)	risk.lexisnexis.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:03.668015957 CEST	192.168.2.4	1.1.1.1	0xd794	Standard query (0)	risk.lexisnexis.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:06.955375910 CEST	192.168.2.4	1.1.1.1	0xf9ab	Standard query (0)	s.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:06.955596924 CEST	192.168.2.4	1.1.1.1	0xd820	Standard query (0)	s.ytimg.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:09.894251108 CEST	192.168.2.4	1.1.1.1	0x1a3d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.894565105 CEST	192.168.2.4	1.1.1.1	0xb17d	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:09.896179914 CEST	192.168.2.4	1.1.1.1	0x88ce	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.896521091 CEST	192.168.2.4	1.1.1.1	0xe808	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 18, 2024 19:16:10.108452082 CEST	192.168.2.4	1.1.1.1	0x2e12	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.108586073 CEST	192.168.2.4	1.1.1.1	0x389f	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:10.109019995 CEST	192.168.2.4	1.1.1.1	0x2239	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.109287024 CEST	192.168.2.4	1.1.1.1	0x40f	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 18, 2024 19:16:10.705466032 CEST	192.168.2.4	1.1.1.1	0x4c3f	Standard query (0)	ws.zoominfo.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.705653906 CEST	192.168.2.4	1.1.1.1	0xe2bc	Standard query (0)	ws.zoominfo.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:11.430717945 CEST	192.168.2.4	1.1.1.1	0x4ebe	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.430991888 CEST	192.168.2.4	1.1.1.1	0xaf00	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:11.523341894 CEST	192.168.2.4	1.1.1.1	0xf465	Standard query (0)	lexisnexisrisksolutions.demdex.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.523578882 CEST	192.168.2.4	1.1.1.1	0xf259	Standard query (0)	lexisnexisrisksolutions.demdex.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:11.595046043 CEST	192.168.2.4	1.1.1.1	0x73ce	Standard query (0)	analytics.lexisnexisrisk.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.595295906 CEST	192.168.2.4	1.1.1.1	0xe7f8	Standard query (0)	analytics.lexisnexisrisk.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:12.045564890 CEST	192.168.2.4	1.1.1.1	0xdb61	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.045564890 CEST	192.168.2.4	1.1.1.1	0x4d3	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:12.061405897 CEST	192.168.2.4	1.1.1.1	0x9bbe	Standard query (0)	tags.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.061564922 CEST	192.168.2.4	1.1.1.1	0x5f01	Standard query (0)	tags.clickagy.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:12.127638102 CEST	192.168.2.4	1.1.1.1	0xbde1	Standard query (0)	js.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.127835989 CEST	192.168.2.4	1.1.1.1	0xa004	Standard query (0)	js.adsrvr.org	65	IN (0x0001)	false
Apr 18, 2024 19:16:12.261363983 CEST	192.168.2.4	1.1.1.1	0xee32	Standard query (0)	analytics.lexisnexisrisk.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.261523008 CEST	192.168.2.4	1.1.1.1	0x8ad9	Standard query (0)	analytics.lexisnexisrisk.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:12.707343102 CEST	192.168.2.4	1.1.1.1	0x81f2	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.707343102 CEST	192.168.2.4	1.1.1.1	0x31b2	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:12.766715050 CEST	192.168.2.4	1.1.1.1	0x8a7c	Standard query (0)	insight.adsrvr.org	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.767263889 CEST	192.168.2.4	1.1.1.1	0x69a2	Standard query (0)	insight.adsrvr.org	65	IN (0x0001)	false
Apr 18, 2024 19:16:12.824688911 CEST	192.168.2.4	1.1.1.1	0x3d8	Standard query (0)	hemsync.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.824690104 CEST	192.168.2.4	1.1.1.1	0x3ca1	Standard query (0)	hemsync.clickagy.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:13.313781023 CEST	192.168.2.4	1.1.1.1	0xf2bd	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.313911915 CEST	192.168.2.4	1.1.1.1	0x9d00	Standard query (0)	aa.agkn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:13.420263052 CEST	192.168.2.4	1.1.1.1	0x8e04	Standard query (0)	hemsync.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.420403004 CEST	192.168.2.4	1.1.1.1	0x2ed0	Standard query (0)	hemsync.clickagy.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:13.510734081 CEST	192.168.2.4	1.1.1.1	0xf2d0	Standard query (0)	aorta.clickagy.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.510922909 CEST	192.168.2.4	1.1.1.1	0xaa	Standard query (0)	aorta.clickagy.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:13.781766891 CEST	192.168.2.4	1.1.1.1	0x3388	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.782031059 CEST	192.168.2.4	1.1.1.1	0x63d	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:13.879571915 CEST	192.168.2.4	1.1.1.1	0xc880	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.879862070 CEST	192.168.2.4	1.1.1.1	0xd825	Standard query (0)	d.agkn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:14.352686882 CEST	192.168.2.4	1.1.1.1	0x1776	Standard query (0)	us-u.openx.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.352869987 CEST	192.168.2.4	1.1.1.1	0xae41	Standard query (0)	us-u.openx.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:14.353349924 CEST	192.168.2.4	1.1.1.1	0x9d58	Standard query (0)	tracking.risk.lexisnexis.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.353491068 CEST	192.168.2.4	1.1.1.1	0x8a1b	Standard query (0)	tracking.risk.lexisnexis.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:14.591363907 CEST	192.168.2.4	1.1.1.1	0x75fa	Standard query (0)	tracking.risk.lexisnexis.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.591525078 CEST	192.168.2.4	1.1.1.1	0xb295	Standard query (0)	tracking.risk.lexisnexis.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:14.913754940 CEST	192.168.2.4	1.1.1.1	0x86fb	Standard query (0)	pixel-sync.sitescout.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.914145947 CEST	192.168.2.4	1.1.1.1	0x3e07	Standard query (0)	pixel-sync.sitescout.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:15.335019112 CEST	192.168.2.4	1.1.1.1	0xf5f9	Standard query (0)	tracking.risk.lexisnexis.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:15.335522890 CEST	192.168.2.4	1.1.1.1	0x9b3	Standard query (0)	tracking.risk.lexisnexis.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:16.542040110 CEST	192.168.2.4	1.1.1.1	0xb042	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:16.542202950 CEST	192.168.2.4	1.1.1.1	0xd315	Standard query (0)	cm.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:17.576467037 CEST	192.168.2.4	1.1.1.1	0xf162	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:17.576761961 CEST	192.168.2.4	1.1.1.1	0xa7ea	Standard query (0)	idsync.rlcdn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:19.112550020 CEST	192.168.2.4	1.1.1.1	0x84f4	Standard query (0)	sync.crwdcntrl.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.113090992 CEST	192.168.2.4	1.1.1.1	0xf95f	Standard query (0)	sync.crwdcntrl.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:37.423692942 CEST	192.168.2.4	1.1.1.1	0x7456	Standard query (0)	js.qualified.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:37.423938036 CEST	192.168.2.4	1.1.1.1	0x1c1d	Standard query (0)	js.qualified.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:38.506448030 CEST	192.168.2.4	1.1.1.1	0x97b	Standard query (0)	ws.qualified.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:38.506793976 CEST	192.168.2.4	1.1.1.1	0xc2e8	Standard query (0)	ws.qualified.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:38.509346008 CEST	192.168.2.4	1.1.1.1	0xc9f1	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:38.509495020 CEST	192.168.2.4	1.1.1.1	0xe83f	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:39.200330019 CEST	192.168.2.4	1.1.1.1	0x6f56	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.200572014 CEST	192.168.2.4	1.1.1.1	0x757e	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 18, 2024 19:16:39.201028109 CEST	192.168.2.4	1.1.1.1	0x9457	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.201149940 CEST	192.168.2.4	1.1.1.1	0x94fd	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:39.531450033 CEST	192.168.2.4	1.1.1.1	0xb7a7	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.531912088 CEST	192.168.2.4	1.1.1.1	0x6153	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:39.549261093 CEST	192.168.2.4	1.1.1.1	0x5882	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.549451113 CEST	192.168.2.4	1.1.1.1	0x4910	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:39.700695992 CEST	192.168.2.4	1.1.1.1	0xc7	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.700828075 CEST	192.168.2.4	1.1.1.1	0x1f7e	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:39.799218893 CEST	192.168.2.4	1.1.1.1	0xd3c6	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.799459934 CEST	192.168.2.4	1.1.1.1	0x12f6	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 18, 2024 19:16:39.812378883 CEST	192.168.2.4	1.1.1.1	0x6736	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.812669039 CEST	192.168.2.4	1.1.1.1	0xa996	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:40.147665024 CEST	192.168.2.4	1.1.1.1	0x6008	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.147831917 CEST	192.168.2.4	1.1.1.1	0xf23b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:40.286494970 CEST	192.168.2.4	1.1.1.1	0x7568	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.286696911 CEST	192.168.2.4	1.1.1.1	0xa2dd	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:44.772402048 CEST	192.168.2.4	1.1.1.1	0x9a06	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:44.772550106 CEST	192.168.2.4	1.1.1.1	0xcf7a	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:45.512084007 CEST	192.168.2.4	1.1.1.1	0xaddd	Standard query (0)	fresnel.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.512485981 CEST	192.168.2.4	1.1.1.1	0x33e1	Standard query (0)	fresnel.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:45.513782024 CEST	192.168.2.4	1.1.1.1	0xd86b	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.513979912 CEST	192.168.2.4	1.1.1.1	0x7fe1	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:45.517784119 CEST	192.168.2.4	1.1.1.1	0x8985	Standard query (0)	f.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:45.517784119 CEST	192.168.2.4	1.1.1.1	0x3e7e	Standard query (0)	f.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:46.330218077 CEST	192.168.2.4	1.1.1.1	0x78b1	Standard query (0)	i.vimeocdn.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:46.330379963 CEST	192.168.2.4	1.1.1.1	0x84f0	Standard query (0)	i.vimeocdn.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:48.097184896 CEST	192.168.2.4	1.1.1.1	0xd012	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.097592115 CEST	192.168.2.4	1.1.1.1	0x7a34	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:48.135341883 CEST	192.168.2.4	1.1.1.1	0xcd20	Standard query (0)	player.vimeo.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.135644913 CEST	192.168.2.4	1.1.1.1	0x8822	Standard query (0)	player.vimeo.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:48.316807985 CEST	192.168.2.4	1.1.1.1	0xf867	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.316962004 CEST	192.168.2.4	1.1.1.1	0x3afc	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:48.592744112 CEST	192.168.2.4	1.1.1.1	0x3f22	Standard query (0)	vimeo.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.592998028 CEST	192.168.2.4	1.1.1.1	0x2a07	Standard query (0)	vimeo.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:50.161565065 CEST	192.168.2.4	1.1.1.1	0x8457	Standard query (0)	www.recaptcha.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:50.161772013 CEST	192.168.2.4	1.1.1.1	0x99de	Standard query (0)	www.recaptcha.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:51.239650011 CEST	192.168.2.4	1.1.1.1	0x11c8	Standard query (0)	km18szrxtm-dsn.algolia.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.239861012 CEST	192.168.2.4	1.1.1.1	0x3b00	Standard query (0)	km18szrxtm-dsn.algolia.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:51.830080032 CEST	192.168.2.4	1.1.1.1	0xaf9a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.830238104 CEST	192.168.2.4	1.1.1.1	0xc28c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:52.683058023 CEST	192.168.2.4	1.1.1.1	0xdf75	Standard query (0)	km18szrxtm-dsn.algolia.net	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:52.683176994 CEST	192.168.2.4	1.1.1.1	0xcd6e	Standard query (0)	km18szrxtm-dsn.algolia.net	65	IN (0x0001)	false
Apr 18, 2024 19:16:52.687905073 CEST	192.168.2.4	1.1.1.1	0xaadd	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:52.688196898 CEST	192.168.2.4	1.1.1.1	0x40d7	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 18, 2024 19:16:59.174420118 CEST	192.168.2.4	1.1.1.1	0x11cf	Standard query (0)	ws.zoominfo.com	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:59.174596071 CEST	192.168.2.4	1.1.1.1	0xae08	Standard query (0)	ws.zoominfo.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 18, 2024 19:15:33.478368998 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	auth.us.brightmine.com	bu2qu5g.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:33.478816986 CEST	1.1.1.1	192.168.2.4	0x7438	No error (0)	auth.us.brightmine.com	bu2qu5g.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:33.478816986 CEST	1.1.1.1	192.168.2.4	0x7438	No error (0)	bu2qu5g.ng.impervadns.net		107.154.193.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:34.077111959 CEST	1.1.1.1	192.168.2.4	0x4b6b	No error (0)	hrcenter.us.brightmine.com	isrlk46.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:34.077111959 CEST	1.1.1.1	192.168.2.4	0x4b6b	No error (0)	isrlk46.ng.impervadns.net		107.154.193.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:34.078730106 CEST	1.1.1.1	192.168.2.4	0x6a48	No error (0)	hrcenter.us.brightmine.com	isrlk46.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:35.186949015 CEST	1.1.1.1	192.168.2.4	0xe1b3	No error (0)	hrcenter.us.brightmine.com	isrlk46.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:35.189371109 CEST	1.1.1.1	192.168.2.4	0x6fb1	No error (0)	hrcenter.us.brightmine.com	isrlk46.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:35.189371109 CEST	1.1.1.1	192.168.2.4	0x6fb1	No error (0)	isrlk46.ng.impervadns.net		107.154.193.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:36.007289886 CEST	1.1.1.1	192.168.2.4	0x469	No error (0)	www.google.com		64.233.176.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:36.007289886 CEST	1.1.1.1	192.168.2.4	0x469	No error (0)	www.google.com		64.233.176.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:36.007289886 CEST	1.1.1.1	192.168.2.4	0x469	No error (0)	www.google.com		64.233.176.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:36.007289886 CEST	1.1.1.1	192.168.2.4	0x469	No error (0)	www.google.com		64.233.176.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:36.007289886 CEST	1.1.1.1	192.168.2.4	0x469	No error (0)	www.google.com		64.233.176.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:36.007289886 CEST	1.1.1.1	192.168.2.4	0x469	No error (0)	www.google.com		64.233.176.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:36.007661104 CEST	1.1.1.1	192.168.2.4	0xdb14	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:15:37.516355991 CEST	1.1.1.1	192.168.2.4	0x8e49	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:37.516988993 CEST	1.1.1.1	192.168.2.4	0x277e	No error (0)	use.typekit.net	use-stls.adobe.com.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:37.523684025 CEST	1.1.1.1	192.168.2.4	0x64ac	No error (0)	assets.us.brightmine.com	i5aarcp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:37.524457932 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	assets.us.brightmine.com	i5aarcp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:37.524457932 CEST	1.1.1.1	192.168.2.4	0x282d	No error (0)	i5aarcp.ng.impervadns.net		107.154.193.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:38.178319931 CEST	1.1.1.1	192.168.2.4	0x97c8	No error (0)	assets.us.brightmine.com	i5aarcp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:38.178319931 CEST	1.1.1.1	192.168.2.4	0x97c8	No error (0)	i5aarcp.ng.impervadns.net		107.154.193.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:38.181210041 CEST	1.1.1.1	192.168.2.4	0xd848	No error (0)	assets.us.brightmine.com	i5aarcp.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:38.262106895 CEST	1.1.1.1	192.168.2.4	0x5a74	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:38.262579918 CEST	1.1.1.1	192.168.2.4	0x9c06	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:40.354675055 CEST	1.1.1.1	192.168.2.4	0x3660	No error (0)	auth.us.brightmine.com	bu2qu5g.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:40.354675055 CEST	1.1.1.1	192.168.2.4	0x3660	No error (0)	bu2qu5g.ng.impervadns.net		107.154.193.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:40.354783058 CEST	1.1.1.1	192.168.2.4	0x1613	No error (0)	auth.us.brightmine.com	bu2qu5g.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.189531088 CEST	1.1.1.1	192.168.2.4	0xb1c9	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.189531088 CEST	1.1.1.1	192.168.2.4	0xb1c9	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.190118074 CEST	1.1.1.1	192.168.2.4	0x903	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 18, 2024 19:15:47.201627016 CEST	1.1.1.1	192.168.2.4	0x9859	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.202368021 CEST	1.1.1.1	192.168.2.4	0xc318	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	rbi.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.216.52.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.206.4.244	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.208.104.241	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.215.86.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.225.234.85	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		75.101.128.186	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.226.123.198	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.246725082 CEST	1.1.1.1	192.168.2.4	0x4f47	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.92.16.246	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:47.269020081 CEST	1.1.1.1	192.168.2.4	0x9e3a	No error (0)	rbi.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.269020081 CEST	1.1.1.1	192.168.2.4	0x9e3a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:47.269020081 CEST	1.1.1.1	192.168.2.4	0x9e3a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:48.058424950 CEST	1.1.1.1	192.168.2.4	0x1324	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:48.058424950 CEST	1.1.1.1	192.168.2.4	0x1324	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:48.881902933 CEST	1.1.1.1	192.168.2.4	0x241d	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:48.881902933 CEST	1.1.1.1	192.168.2.4	0x241d	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:48.882208109 CEST	1.1.1.1	192.168.2.4	0xe684	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 18, 2024 19:15:49.144705057 CEST	1.1.1.1	192.168.2.4	0x6cf9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:49.144705057 CEST	1.1.1.1	192.168.2.4	0x6cf9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.485830069 CEST	1.1.1.1	192.168.2.4	0x3db6	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.485830069 CEST	1.1.1.1	192.168.2.4	0x3db6	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.486323118 CEST	1.1.1.1	192.168.2.4	0xad87	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 18, 2024 19:15:49.508433104 CEST	1.1.1.1	192.168.2.4	0x171d	No error (0)	addevent.com		52.48.44.115	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.508433104 CEST	1.1.1.1	192.168.2.4	0x171d	No error (0)	addevent.com		54.220.164.64	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.508433104 CEST	1.1.1.1	192.168.2.4	0x171d	No error (0)	addevent.com		54.171.248.54	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.537405968 CEST	1.1.1.1	192.168.2.4	0xd2e5	No error (0)	hrcenter.us.brightmine.com	isrlk46.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:49.537405968 CEST	1.1.1.1	192.168.2.4	0xd2e5	No error (0)	isrlk46.ng.impervadns.net		107.154.193.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:49.537808895 CEST	1.1.1.1	192.168.2.4	0x1584	No error (0)	hrcenter.us.brightmine.com	isrlk46.ng.impervadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:50.211421013 CEST	1.1.1.1	192.168.2.4	0x8063	No error (0)	cdn.tt.omtrdc.net	cdn-origin-aws.tt.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:50.211421013 CEST	1.1.1.1	192.168.2.4	0x8063	No error (0)	cdn-origin-aws.tt.omtrdc.net	duerzc3hf5let.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:50.211421013 CEST	1.1.1.1	192.168.2.4	0x8063	No error (0)	duerzc3hf5let.cloudfront.net		18.160.46.11	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.211421013 CEST	1.1.1.1	192.168.2.4	0x8063	No error (0)	duerzc3hf5let.cloudfront.net		18.160.46.6	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.211421013 CEST	1.1.1.1	192.168.2.4	0x8063	No error (0)	duerzc3hf5let.cloudfront.net		18.160.46.118	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.211421013 CEST	1.1.1.1	192.168.2.4	0x8063	No error (0)	duerzc3hf5let.cloudfront.net		18.160.46.56	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.213769913 CEST	1.1.1.1	192.168.2.4	0x8387	No error (0)	cdn.tt.omtrdc.net	cdn-origin-aws.tt.omtrdc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:50.213769913 CEST	1.1.1.1	192.168.2.4	0x8387	No error (0)	cdn-origin-aws.tt.omtrdc.net	duerzc3hf5let.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229896069 CEST	1.1.1.1	192.168.2.4	0xa84c	No error (0)	reedbusinessinternat.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	reedbusinessinternat.tt.omtrdc.net	adobetarget.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.229947090 CEST	1.1.1.1	192.168.2.4	0x368c	No error (0)	adobetarget.data.adobedc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.240060091 CEST	1.1.1.1	192.168.2.4	0xe32c	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.240060091 CEST	1.1.1.1	192.168.2.4	0xe32c	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.240156889 CEST	1.1.1.1	192.168.2.4	0xb487	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 18, 2024 19:15:50.502867937 CEST	1.1.1.1	192.168.2.4	0x37e4	No error (0)	www.addevent.com		54.171.248.54	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.502867937 CEST	1.1.1.1	192.168.2.4	0x37e4	No error (0)	www.addevent.com		52.48.44.115	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:50.502867937 CEST	1.1.1.1	192.168.2.4	0x37e4	No error (0)	www.addevent.com		54.220.164.64	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:52.449570894 CEST	1.1.1.1	192.168.2.4	0xea6c	No error (0)	cdn.addevent.com		108.156.152.116	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:52.449570894 CEST	1.1.1.1	192.168.2.4	0xea6c	No error (0)	cdn.addevent.com		108.156.152.70	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:52.449570894 CEST	1.1.1.1	192.168.2.4	0xea6c	No error (0)	cdn.addevent.com		108.156.152.12	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:52.449570894 CEST	1.1.1.1	192.168.2.4	0xea6c	No error (0)	cdn.addevent.com		108.156.152.81	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:52.768157005 CEST	1.1.1.1	192.168.2.4	0x88fc	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:52.769551039 CEST	1.1.1.1	192.168.2.4	0x759b	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.356901884 CEST	1.1.1.1	192.168.2.4	0x246a	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.356901884 CEST	1.1.1.1	192.168.2.4	0x246a	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.357283115 CEST	1.1.1.1	192.168.2.4	0xb09d	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.357283115 CEST	1.1.1.1	192.168.2.4	0xb09d	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604464054 CEST	1.1.1.1	192.168.2.4	0x8299	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604464054 CEST	1.1.1.1	192.168.2.4	0x8299	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604464054 CEST	1.1.1.1	192.168.2.4	0x8299	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.216.52.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.204.18.67	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.71.118.196	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.224.27.195	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.156.43.25	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		107.23.169.28	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.206.98.23	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.604769945 CEST	1.1.1.1	192.168.2.4	0x5a3a	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.128.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.613609076 CEST	1.1.1.1	192.168.2.4	0x4c3c	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.613905907 CEST	1.1.1.1	192.168.2.4	0xaf8b	No error (0)	p.typekit.net	p.typekit.net-stls-v3.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.682735920 CEST	1.1.1.1	192.168.2.4	0x8432	No error (0)	googleads.g.doubleclick.net		64.233.185.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.682735920 CEST	1.1.1.1	192.168.2.4	0x8432	No error (0)	googleads.g.doubleclick.net		64.233.185.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.682735920 CEST	1.1.1.1	192.168.2.4	0x8432	No error (0)	googleads.g.doubleclick.net		64.233.185.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.682735920 CEST	1.1.1.1	192.168.2.4	0x8432	No error (0)	googleads.g.doubleclick.net		64.233.185.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.683259964 CEST	1.1.1.1	192.168.2.4	0x487	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 19:15:53.690109968 CEST	1.1.1.1	192.168.2.4	0x2511	No error (0)	td.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.690109968 CEST	1.1.1.1	192.168.2.4	0x2511	No error (0)	td.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.690109968 CEST	1.1.1.1	192.168.2.4	0x2511	No error (0)	td.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.690109968 CEST	1.1.1.1	192.168.2.4	0x2511	No error (0)	td.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:53.991693020 CEST	1.1.1.1	192.168.2.4	0x9ce3	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.991693020 CEST	1.1.1.1	192.168.2.4	0x9ce3	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.991734028 CEST	1.1.1.1	192.168.2.4	0x4026	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:53.991734028 CEST	1.1.1.1	192.168.2.4	0x4026	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.016537905 CEST	1.1.1.1	192.168.2.4	0xc35f	No error (0)	stats.g.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.016537905 CEST	1.1.1.1	192.168.2.4	0xc35f	No error (0)	stats.g.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.016537905 CEST	1.1.1.1	192.168.2.4	0xc35f	No error (0)	stats.g.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.016537905 CEST	1.1.1.1	192.168.2.4	0xc35f	No error (0)	stats.g.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.215.140.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.209.244.20	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.198.48.92	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.208.48.255	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.212.109.197	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.226.123.198	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.210.218.20	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.187675953 CEST	1.1.1.1	192.168.2.4	0x632c	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		35.168.188.46	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.188261986 CEST	1.1.1.1	192.168.2.4	0x3350	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.188261986 CEST	1.1.1.1	192.168.2.4	0x3350	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.188261986 CEST	1.1.1.1	192.168.2.4	0x3350	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.231122017 CEST	1.1.1.1	192.168.2.4	0xb2af	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.231122017 CEST	1.1.1.1	192.168.2.4	0xb2af	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.231122017 CEST	1.1.1.1	192.168.2.4	0xb2af	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.231122017 CEST	1.1.1.1	192.168.2.4	0xb2af	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.231122017 CEST	1.1.1.1	192.168.2.4	0xb2af	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.231122017 CEST	1.1.1.1	192.168.2.4	0xb2af	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.232170105 CEST	1.1.1.1	192.168.2.4	0xa43	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:15:54.548367023 CEST	1.1.1.1	192.168.2.4	0x1b14	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.549038887 CEST	1.1.1.1	192.168.2.4	0xe90d	No error (0)	www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:15:54.560301065 CEST	1.1.1.1	192.168.2.4	0x1d0e	No error (0)	stats.g.doubleclick.net		142.251.15.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.560301065 CEST	1.1.1.1	192.168.2.4	0x1d0e	No error (0)	stats.g.doubleclick.net		142.251.15.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.560301065 CEST	1.1.1.1	192.168.2.4	0x1d0e	No error (0)	stats.g.doubleclick.net		142.251.15.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.560301065 CEST	1.1.1.1	192.168.2.4	0x1d0e	No error (0)	stats.g.doubleclick.net		142.251.15.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.804898977 CEST	1.1.1.1	192.168.2.4	0x88c1	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:15:54.807293892 CEST	1.1.1.1	192.168.2.4	0xddd6	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.807293892 CEST	1.1.1.1	192.168.2.4	0xddd6	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.807293892 CEST	1.1.1.1	192.168.2.4	0xddd6	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.807293892 CEST	1.1.1.1	192.168.2.4	0xddd6	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.807293892 CEST	1.1.1.1	192.168.2.4	0xddd6	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:15:54.807293892 CEST	1.1.1.1	192.168.2.4	0xddd6	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.105398893 CEST	1.1.1.1	192.168.2.4	0xeae4	No error (0)	risk.lexisnexis.com		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.105398893 CEST	1.1.1.1	192.168.2.4	0xeae4	No error (0)	risk.lexisnexis.com		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.105398893 CEST	1.1.1.1	192.168.2.4	0xeae4	No error (0)	risk.lexisnexis.com		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.105398893 CEST	1.1.1.1	192.168.2.4	0xeae4	No error (0)	risk.lexisnexis.com		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.401899099 CEST	1.1.1.1	192.168.2.4	0xb171	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:02.401899099 CEST	1.1.1.1	192.168.2.4	0xb171	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.973478079 CEST	1.1.1.1	192.168.2.4	0xe858	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.973478079 CEST	1.1.1.1	192.168.2.4	0xe858	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:02.973711014 CEST	1.1.1.1	192.168.2.4	0x6898	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:03.192519903 CEST	1.1.1.1	192.168.2.4	0xae95	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:03.193263054 CEST	1.1.1.1	192.168.2.4	0x999b	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:03.195940018 CEST	1.1.1.1	192.168.2.4	0x5531	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:03.196819067 CEST	1.1.1.1	192.168.2.4	0x7478	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:03.774288893 CEST	1.1.1.1	192.168.2.4	0x6e5b	No error (0)	risk.lexisnexis.com		151.101.194.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:03.774288893 CEST	1.1.1.1	192.168.2.4	0x6e5b	No error (0)	risk.lexisnexis.com		151.101.66.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:03.774288893 CEST	1.1.1.1	192.168.2.4	0x6e5b	No error (0)	risk.lexisnexis.com		151.101.2.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:03.774288893 CEST	1.1.1.1	192.168.2.4	0x6e5b	No error (0)	risk.lexisnexis.com		151.101.130.133	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:07.060205936 CEST	1.1.1.1	192.168.2.4	0xf9ab	No error (0)	s.ytimg.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:07.060205936 CEST	1.1.1.1	192.168.2.4	0xf9ab	No error (0)	s.ytimg.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:07.060205936 CEST	1.1.1.1	192.168.2.4	0xf9ab	No error (0)	s.ytimg.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:07.060205936 CEST	1.1.1.1	192.168.2.4	0xf9ab	No error (0)	s.ytimg.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:07.060205936 CEST	1.1.1.1	192.168.2.4	0xf9ab	No error (0)	s.ytimg.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:07.060205936 CEST	1.1.1.1	192.168.2.4	0xf9ab	No error (0)	s.ytimg.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999488115 CEST	1.1.1.1	192.168.2.4	0xb17d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999488115 CEST	1.1.1.1	192.168.2.4	0xb17d	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999488115 CEST	1.1.1.1	192.168.2.4	0xb17d	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	gslb-2.demdex.net	edge-usw2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	edge-usw2.demdex.net	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.71.166.176	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.191.71.158	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.191.97.222	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		52.42.104.131	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.74.30	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		54.149.168.153	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		35.155.225.191	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:09.999558926 CEST	1.1.1.1	192.168.2.4	0x1a3d	No error (0)	dcs-public-edge-usw2-219535174.us-west-2.elb.amazonaws.com		34.215.200.243	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.000616074 CEST	1.1.1.1	192.168.2.4	0x88ce	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.000616074 CEST	1.1.1.1	192.168.2.4	0x88ce	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.001771927 CEST	1.1.1.1	192.168.2.4	0xe808	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 18, 2024 19:16:10.212798119 CEST	1.1.1.1	192.168.2.4	0x389f	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212798119 CEST	1.1.1.1	192.168.2.4	0x389f	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212798119 CEST	1.1.1.1	192.168.2.4	0x389f	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.156.60.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.192.104.176	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.81.240.237	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		44.216.52.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		35.169.212.254	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		52.206.51.60	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.202.38.219	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.212862968 CEST	1.1.1.1	192.168.2.4	0x2e12	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.197.93.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.213565111 CEST	1.1.1.1	192.168.2.4	0x40f	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 18, 2024 19:16:10.213830948 CEST	1.1.1.1	192.168.2.4	0x2239	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.213830948 CEST	1.1.1.1	192.168.2.4	0x2239	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.810762882 CEST	1.1.1.1	192.168.2.4	0x4c3f	No error (0)	ws.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.810762882 CEST	1.1.1.1	192.168.2.4	0x4c3f	No error (0)	ws.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:10.810790062 CEST	1.1.1.1	192.168.2.4	0xe2bc	No error (0)	ws.zoominfo.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:11.534874916 CEST	1.1.1.1	192.168.2.4	0x4ebe	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.534874916 CEST	1.1.1.1	192.168.2.4	0x4ebe	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.535573959 CEST	1.1.1.1	192.168.2.4	0xaf00	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	lexisnexisrisksolutions.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		35.169.212.254	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		23.22.152.140	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.197.93.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		18.210.186.228	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		54.147.4.223	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.208.104.241	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		3.81.240.237	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.673222065 CEST	1.1.1.1	192.168.2.4	0xf465	No error (0)	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		34.204.28.10	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.676791906 CEST	1.1.1.1	192.168.2.4	0xf259	No error (0)	lexisnexisrisksolutions.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.676791906 CEST	1.1.1.1	192.168.2.4	0xf259	No error (0)	gslb-2.demdex.net	edge-va6.demdex.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.676791906 CEST	1.1.1.1	192.168.2.4	0xf259	No error (0)	edge-va6.demdex.net	dcs-public-edge-va6-158015560.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.716141939 CEST	1.1.1.1	192.168.2.4	0xe7f8	No error (0)	analytics.lexisnexisrisk.com	wt83sydv1s.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	analytics.lexisnexisrisk.com	wt83sydv1s.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.65	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.9	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.82	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.38.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:11.718997002 CEST	1.1.1.1	192.168.2.4	0x73ce	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.149936914 CEST	1.1.1.1	192.168.2.4	0xdb61	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.151568890 CEST	1.1.1.1	192.168.2.4	0x4d3	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.186849117 CEST	1.1.1.1	192.168.2.4	0x5f01	No error (0)	tags.clickagy.com	d3i9xyriglxn0r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.189274073 CEST	1.1.1.1	192.168.2.4	0x9bbe	No error (0)	tags.clickagy.com	d3i9xyriglxn0r.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.189274073 CEST	1.1.1.1	192.168.2.4	0x9bbe	No error (0)	d3i9xyriglxn0r.cloudfront.net		99.84.208.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.189274073 CEST	1.1.1.1	192.168.2.4	0x9bbe	No error (0)	d3i9xyriglxn0r.cloudfront.net		99.84.208.7	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.189274073 CEST	1.1.1.1	192.168.2.4	0x9bbe	No error (0)	d3i9xyriglxn0r.cloudfront.net		99.84.208.37	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.189274073 CEST	1.1.1.1	192.168.2.4	0x9bbe	No error (0)	d3i9xyriglxn0r.cloudfront.net		99.84.208.73	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.231712103 CEST	1.1.1.1	192.168.2.4	0xbde1	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.231712103 CEST	1.1.1.1	192.168.2.4	0xbde1	No error (0)	dg2iu7dxxehbo.cloudfront.net		18.67.60.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.233310938 CEST	1.1.1.1	192.168.2.4	0xa004	No error (0)	js.adsrvr.org	dg2iu7dxxehbo.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	analytics.lexisnexisrisk.com	wt83sydv1s.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.150	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.38.112	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.38.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.224	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.248	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.130	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.72	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.38.210	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.38.111	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.387845039 CEST	1.1.1.1	192.168.2.4	0xee32	No error (0)	wt83sydv1s.data.adobedc.net		63.140.39.240	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.388062954 CEST	1.1.1.1	192.168.2.4	0x8ad9	No error (0)	analytics.lexisnexisrisk.com	wt83sydv1s.data.adobedc.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.813503027 CEST	1.1.1.1	192.168.2.4	0x81f2	No error (0)	aorta.clickagy.com		34.228.243.82	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.813503027 CEST	1.1.1.1	192.168.2.4	0x81f2	No error (0)	aorta.clickagy.com		34.198.78.192	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.813503027 CEST	1.1.1.1	192.168.2.4	0x81f2	No error (0)	aorta.clickagy.com		52.20.189.38	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.813503027 CEST	1.1.1.1	192.168.2.4	0x81f2	No error (0)	aorta.clickagy.com		34.195.172.166	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.871124983 CEST	1.1.1.1	192.168.2.4	0x8a7c	No error (0)	insight.adsrvr.org		52.223.40.198	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.871124983 CEST	1.1.1.1	192.168.2.4	0x8a7c	No error (0)	insight.adsrvr.org		3.33.220.150	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.871124983 CEST	1.1.1.1	192.168.2.4	0x8a7c	No error (0)	insight.adsrvr.org		35.71.131.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.871124983 CEST	1.1.1.1	192.168.2.4	0x8a7c	No error (0)	insight.adsrvr.org		15.197.193.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.932588100 CEST	1.1.1.1	192.168.2.4	0x3ca1	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.935594082 CEST	1.1.1.1	192.168.2.4	0x3d8	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:12.935594082 CEST	1.1.1.1	192.168.2.4	0x3d8	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		35.174.21.144	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.935594082 CEST	1.1.1.1	192.168.2.4	0x3d8	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		3.219.1.223	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.935594082 CEST	1.1.1.1	192.168.2.4	0x3d8	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		18.210.220.232	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:12.935594082 CEST	1.1.1.1	192.168.2.4	0x3d8	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		34.199.102.5	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.418226957 CEST	1.1.1.1	192.168.2.4	0xf2bd	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.418226957 CEST	1.1.1.1	192.168.2.4	0xf2bd	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.80	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.418226957 CEST	1.1.1.1	192.168.2.4	0xf2bd	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.418226957 CEST	1.1.1.1	192.168.2.4	0xf2bd	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.78	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.418226957 CEST	1.1.1.1	192.168.2.4	0xf2bd	No error (0)	d20qwf0wrdtevy.cloudfront.net		3.161.188.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.418302059 CEST	1.1.1.1	192.168.2.4	0x9d00	No error (0)	aa.agkn.com	d20qwf0wrdtevy.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.525588036 CEST	1.1.1.1	192.168.2.4	0x8e04	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.525588036 CEST	1.1.1.1	192.168.2.4	0x8e04	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		34.199.102.5	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.525588036 CEST	1.1.1.1	192.168.2.4	0x8e04	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		18.210.220.232	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.525588036 CEST	1.1.1.1	192.168.2.4	0x8e04	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		3.219.1.223	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.525588036 CEST	1.1.1.1	192.168.2.4	0x8e04	No error (0)	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		35.174.21.144	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.525803089 CEST	1.1.1.1	192.168.2.4	0x2ed0	No error (0)	hemsync.clickagy.com	hem-sync-prod-lb-7374702.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.616977930 CEST	1.1.1.1	192.168.2.4	0xf2d0	No error (0)	aorta.clickagy.com		34.228.243.82	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.616977930 CEST	1.1.1.1	192.168.2.4	0xf2d0	No error (0)	aorta.clickagy.com		34.195.172.166	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.616977930 CEST	1.1.1.1	192.168.2.4	0xf2d0	No error (0)	aorta.clickagy.com		52.20.189.38	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.616977930 CEST	1.1.1.1	192.168.2.4	0xf2d0	No error (0)	aorta.clickagy.com		34.198.78.192	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.886349916 CEST	1.1.1.1	192.168.2.4	0x3388	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.886349916 CEST	1.1.1.1	192.168.2.4	0x3388	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984149933 CEST	1.1.1.1	192.168.2.4	0xd825	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984149933 CEST	1.1.1.1	192.168.2.4	0xd825	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984448910 CEST	1.1.1.1	192.168.2.4	0xc880	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984448910 CEST	1.1.1.1	192.168.2.4	0xc880	No error (0)	data.agkn.com	d2ctznuk6ro1vp.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984448910 CEST	1.1.1.1	192.168.2.4	0xc880	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.20	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984448910 CEST	1.1.1.1	192.168.2.4	0xc880	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.41	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984448910 CEST	1.1.1.1	192.168.2.4	0xc880	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:13.984448910 CEST	1.1.1.1	192.168.2.4	0xc880	No error (0)	d2ctznuk6ro1vp.cloudfront.net		3.163.101.129	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.456819057 CEST	1.1.1.1	192.168.2.4	0x1776	No error (0)	us-u.openx.net		34.98.64.218	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.456819057 CEST	1.1.1.1	192.168.2.4	0x1776	No error (0)	us-u.openx.net		35.244.159.8	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.600282907 CEST	1.1.1.1	192.168.2.4	0x8a1b	No error (0)	tracking.risk.lexisnexis.com	s903.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:14.600282907 CEST	1.1.1.1	192.168.2.4	0x8a1b	No error (0)	s903.hs.eloqua.com	p01b.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:14.650511980 CEST	1.1.1.1	192.168.2.4	0x9d58	No error (0)	tracking.risk.lexisnexis.com	s903.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:14.650511980 CEST	1.1.1.1	192.168.2.4	0x9d58	No error (0)	s903.hs.eloqua.com	p01b.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:14.650511980 CEST	1.1.1.1	192.168.2.4	0x9d58	No error (0)	p01b.hs.eloqua.com		192.29.70.228	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.835105896 CEST	1.1.1.1	192.168.2.4	0x75fa	No error (0)	tracking.risk.lexisnexis.com	s903.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:14.835105896 CEST	1.1.1.1	192.168.2.4	0x75fa	No error (0)	s903.hs.eloqua.com	p01b.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:14.835105896 CEST	1.1.1.1	192.168.2.4	0x75fa	No error (0)	p01b.hs.eloqua.com		192.29.70.228	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:14.855402946 CEST	1.1.1.1	192.168.2.4	0xb295	No error (0)	tracking.risk.lexisnexis.com	s903.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:14.855402946 CEST	1.1.1.1	192.168.2.4	0xb295	No error (0)	s903.hs.eloqua.com	p01b.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:15.018549919 CEST	1.1.1.1	192.168.2.4	0x86fb	No error (0)	pixel-sync.sitescout.com		34.36.216.150	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:15.442466974 CEST	1.1.1.1	192.168.2.4	0xf5f9	No error (0)	tracking.risk.lexisnexis.com	s903.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:15.442466974 CEST	1.1.1.1	192.168.2.4	0xf5f9	No error (0)	s903.hs.eloqua.com	p01b.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:15.442466974 CEST	1.1.1.1	192.168.2.4	0xf5f9	No error (0)	p01b.hs.eloqua.com		192.29.70.228	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:15.477494955 CEST	1.1.1.1	192.168.2.4	0x9b3	No error (0)	tracking.risk.lexisnexis.com	s903.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:15.477494955 CEST	1.1.1.1	192.168.2.4	0x9b3	No error (0)	s903.hs.eloqua.com	p01b.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:16.646708965 CEST	1.1.1.1	192.168.2.4	0xb042	No error (0)	cm.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:16.646708965 CEST	1.1.1.1	192.168.2.4	0xb042	No error (0)	cm.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:16.646708965 CEST	1.1.1.1	192.168.2.4	0xb042	No error (0)	cm.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:16.646708965 CEST	1.1.1.1	192.168.2.4	0xb042	No error (0)	cm.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:17.681909084 CEST	1.1.1.1	192.168.2.4	0xf162	No error (0)	idsync.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		3.227.94.68	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		54.87.122.38	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		52.3.114.66	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		44.196.251.236	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		44.195.233.246	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		44.206.188.238	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		54.159.210.141	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:19.217566013 CEST	1.1.1.1	192.168.2.4	0x84f4	No error (0)	sync.crwdcntrl.net		52.44.103.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:21.287683010 CEST	1.1.1.1	192.168.2.4	0x70d5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:21.287683010 CEST	1.1.1.1	192.168.2.4	0x70d5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:37.529006958 CEST	1.1.1.1	192.168.2.4	0x7456	No error (0)	js.qualified.com		104.18.16.5	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:37.529006958 CEST	1.1.1.1	192.168.2.4	0x7456	No error (0)	js.qualified.com		104.18.17.5	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:37.531478882 CEST	1.1.1.1	192.168.2.4	0x1c1d	No error (0)	js.qualified.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:38.612037897 CEST	1.1.1.1	192.168.2.4	0x97b	No error (0)	ws.qualified.com	lit-wildwood-9179.fathomless-lake-7710.herokuspace.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:38.612037897 CEST	1.1.1.1	192.168.2.4	0x97b	No error (0)	lit-wildwood-9179.fathomless-lake-7710.herokuspace.com		52.5.243.19	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:38.612037897 CEST	1.1.1.1	192.168.2.4	0x97b	No error (0)	lit-wildwood-9179.fathomless-lake-7710.herokuspace.com		54.166.2.36	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:38.612037897 CEST	1.1.1.1	192.168.2.4	0x97b	No error (0)	lit-wildwood-9179.fathomless-lake-7710.herokuspace.com		35.170.238.135	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:38.613821983 CEST	1.1.1.1	192.168.2.4	0xc9f1	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:38.613821983 CEST	1.1.1.1	192.168.2.4	0xc9f1	No error (0)	platform.twitter.map.fastly.net		151.101.12.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:38.614013910 CEST	1.1.1.1	192.168.2.4	0xe83f	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:38.615502119 CEST	1.1.1.1	192.168.2.4	0xc2e8	No error (0)	ws.qualified.com	lit-wildwood-9179.fathomless-lake-7710.herokuspace.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.305145979 CEST	1.1.1.1	192.168.2.4	0x6f56	No error (0)	t.co		104.244.42.69	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.305598021 CEST	1.1.1.1	192.168.2.4	0x9457	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.305598021 CEST	1.1.1.1	192.168.2.4	0x9457	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.305598021 CEST	1.1.1.1	192.168.2.4	0x9457	No error (0)	s.twitter.com		104.244.42.131	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.305651903 CEST	1.1.1.1	192.168.2.4	0x94fd	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.305651903 CEST	1.1.1.1	192.168.2.4	0x94fd	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.636116982 CEST	1.1.1.1	192.168.2.4	0xb7a7	No error (0)	googleads.g.doubleclick.net		74.125.138.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.636116982 CEST	1.1.1.1	192.168.2.4	0xb7a7	No error (0)	googleads.g.doubleclick.net		74.125.138.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.636116982 CEST	1.1.1.1	192.168.2.4	0xb7a7	No error (0)	googleads.g.doubleclick.net		74.125.138.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.636116982 CEST	1.1.1.1	192.168.2.4	0xb7a7	No error (0)	googleads.g.doubleclick.net		74.125.138.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.636317968 CEST	1.1.1.1	192.168.2.4	0x6153	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 18, 2024 19:16:39.653517008 CEST	1.1.1.1	192.168.2.4	0x5882	No error (0)	td.doubleclick.net		142.250.105.156	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.653517008 CEST	1.1.1.1	192.168.2.4	0x5882	No error (0)	td.doubleclick.net		142.250.105.154	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.653517008 CEST	1.1.1.1	192.168.2.4	0x5882	No error (0)	td.doubleclick.net		142.250.105.155	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.653517008 CEST	1.1.1.1	192.168.2.4	0x5882	No error (0)	td.doubleclick.net		142.250.105.157	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.805367947 CEST	1.1.1.1	192.168.2.4	0x1f7e	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.806338072 CEST	1.1.1.1	192.168.2.4	0xc7	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.904069901 CEST	1.1.1.1	192.168.2.4	0xd3c6	No error (0)	t.co		104.244.42.5	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.916850090 CEST	1.1.1.1	192.168.2.4	0x6736	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.916850090 CEST	1.1.1.1	192.168.2.4	0x6736	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.916850090 CEST	1.1.1.1	192.168.2.4	0x6736	No error (0)	s.twitter.com		104.244.42.3	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:39.917258978 CEST	1.1.1.1	192.168.2.4	0xa996	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:39.917258978 CEST	1.1.1.1	192.168.2.4	0xa996	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:40.252119064 CEST	1.1.1.1	192.168.2.4	0x6008	No error (0)	www.google.com		142.250.105.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.252119064 CEST	1.1.1.1	192.168.2.4	0x6008	No error (0)	www.google.com		142.250.105.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.252119064 CEST	1.1.1.1	192.168.2.4	0x6008	No error (0)	www.google.com		142.250.105.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.252119064 CEST	1.1.1.1	192.168.2.4	0x6008	No error (0)	www.google.com		142.250.105.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.252119064 CEST	1.1.1.1	192.168.2.4	0x6008	No error (0)	www.google.com		142.250.105.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.252119064 CEST	1.1.1.1	192.168.2.4	0x6008	No error (0)	www.google.com		142.250.105.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:40.252139091 CEST	1.1.1.1	192.168.2.4	0xf23b	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:40.390837908 CEST	1.1.1.1	192.168.2.4	0xa2dd	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:40.390837908 CEST	1.1.1.1	192.168.2.4	0xa2dd	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:40.391319036 CEST	1.1.1.1	192.168.2.4	0x7568	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:40.391319036 CEST	1.1.1.1	192.168.2.4	0x7568	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:42.445099115 CEST	1.1.1.1	192.168.2.4	0xd214	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:42.445099115 CEST	1.1.1.1	192.168.2.4	0xd214	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:44.877115011 CEST	1.1.1.1	192.168.2.4	0x9a06	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:44.877578020 CEST	1.1.1.1	192.168.2.4	0xcf7a	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:45.617005110 CEST	1.1.1.1	192.168.2.4	0xaddd	No error (0)	fresnel.vimeocdn.com		34.120.202.204	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.618328094 CEST	1.1.1.1	192.168.2.4	0x7fe1	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:45.619380951 CEST	1.1.1.1	192.168.2.4	0xd86b	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:45.619380951 CEST	1.1.1.1	192.168.2.4	0xd86b	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.619380951 CEST	1.1.1.1	192.168.2.4	0xd86b	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.619380951 CEST	1.1.1.1	192.168.2.4	0xd86b	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.619380951 CEST	1.1.1.1	192.168.2.4	0xd86b	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.622457981 CEST	1.1.1.1	192.168.2.4	0x3e7e	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:45.622457981 CEST	1.1.1.1	192.168.2.4	0x3e7e	No error (0)	vimeo-video.map.fastly.net		151.101.14.109	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:45.623497009 CEST	1.1.1.1	192.168.2.4	0x8985	No error (0)	f.vimeocdn.com	vimeo-video.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:46.435465097 CEST	1.1.1.1	192.168.2.4	0x78b1	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:46.435465097 CEST	1.1.1.1	192.168.2.4	0x78b1	No error (0)	vimeo.map.fastly.net		151.101.0.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:46.435465097 CEST	1.1.1.1	192.168.2.4	0x78b1	No error (0)	vimeo.map.fastly.net		151.101.128.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:46.435465097 CEST	1.1.1.1	192.168.2.4	0x78b1	No error (0)	vimeo.map.fastly.net		151.101.64.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:46.435465097 CEST	1.1.1.1	192.168.2.4	0x78b1	No error (0)	vimeo.map.fastly.net		151.101.192.217	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:46.436250925 CEST	1.1.1.1	192.168.2.4	0x84f0	No error (0)	i.vimeocdn.com	vimeo.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.176.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.176.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.177.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		142.250.105.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.177.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		173.194.219.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.176.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.177.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.176.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		142.250.105.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		172.253.124.91	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		142.250.105.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		142.250.105.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		172.253.124.136	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		172.253.124.93	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.201801062 CEST	1.1.1.1	192.168.2.4	0xd012	No error (0)	youtube-ui.l.google.com		64.233.177.190	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.202200890 CEST	1.1.1.1	192.168.2.4	0x7a34	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:48.202200890 CEST	1.1.1.1	192.168.2.4	0x7a34	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:48.239725113 CEST	1.1.1.1	192.168.2.4	0xcd20	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:48.241059065 CEST	1.1.1.1	192.168.2.4	0x8822	No error (0)	player.vimeo.com	player.vimeo.com.cdn.cloudflare.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:48.421175957 CEST	1.1.1.1	192.168.2.4	0xf867	No error (0)	www.recaptcha.net		173.194.219.94	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.699208021 CEST	1.1.1.1	192.168.2.4	0x3f22	No error (0)	vimeo.com		162.159.138.60	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:48.699208021 CEST	1.1.1.1	192.168.2.4	0x3f22	No error (0)	vimeo.com		162.159.128.61	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:50.265892029 CEST	1.1.1.1	192.168.2.4	0x8457	No error (0)	www.recaptcha.net		64.233.185.94	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.349354982 CEST	1.1.1.1	192.168.2.4	0x11c8	No error (0)	km18szrxtm-dsn.algolia.net	dsn.km18szrxtm.api.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:51.349354982 CEST	1.1.1.1	192.168.2.4	0x11c8	No error (0)	dsn.km18szrxtm.api.algolia.net	c9-use-1.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:51.349354982 CEST	1.1.1.1	192.168.2.4	0x11c8	No error (0)	c9-use-1.algolia.net		192.96.201.45	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.350198030 CEST	1.1.1.1	192.168.2.4	0x3b00	No error (0)	km18szrxtm-dsn.algolia.net	dsn.km18szrxtm.api.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:51.350198030 CEST	1.1.1.1	192.168.2.4	0x3b00	No error (0)	dsn.km18szrxtm.api.algolia.net	c9-use-3.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:51.934562922 CEST	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	www.google.com		74.125.138.104	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.934562922 CEST	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	www.google.com		74.125.138.105	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.934562922 CEST	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	www.google.com		74.125.138.106	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.934562922 CEST	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	www.google.com		74.125.138.99	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.934562922 CEST	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	www.google.com		74.125.138.103	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.934562922 CEST	1.1.1.1	192.168.2.4	0xaf9a	No error (0)	www.google.com		74.125.138.147	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:51.934883118 CEST	1.1.1.1	192.168.2.4	0xc28c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:52.792126894 CEST	1.1.1.1	192.168.2.4	0xaadd	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:52.792126894 CEST	1.1.1.1	192.168.2.4	0xaadd	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:52.792759895 CEST	1.1.1.1	192.168.2.4	0x40d7	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 18, 2024 19:16:52.792777061 CEST	1.1.1.1	192.168.2.4	0xcd6e	No error (0)	km18szrxtm-dsn.algolia.net	dsn.km18szrxtm.api.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:52.792777061 CEST	1.1.1.1	192.168.2.4	0xcd6e	No error (0)	dsn.km18szrxtm.api.algolia.net	c9-use-3.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:52.795953035 CEST	1.1.1.1	192.168.2.4	0xdf75	No error (0)	km18szrxtm-dsn.algolia.net	dsn.km18szrxtm.api.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:52.795953035 CEST	1.1.1.1	192.168.2.4	0xdf75	No error (0)	dsn.km18szrxtm.api.algolia.net	c9-use-2.algolia.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 18, 2024 19:16:52.795953035 CEST	1.1.1.1	192.168.2.4	0xdf75	No error (0)	c9-use-2.algolia.net		162.210.193.238	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:59.279890060 CEST	1.1.1.1	192.168.2.4	0x11cf	No error (0)	ws.zoominfo.com		104.16.117.43	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:59.279890060 CEST	1.1.1.1	192.168.2.4	0x11cf	No error (0)	ws.zoominfo.com		104.16.118.43	A (IP address)	IN (0x0001)	false
Apr 18, 2024 19:16:59.280155897 CEST	1.1.1.1	192.168.2.4	0xae08	No error (0)	ws.zoominfo.com			65	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:33 UTC	665	OUT	GET / HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:33 UTC	1068	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:15:33 GMT Content-Length: 0 Connection: close Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Location: https://hrcenter.us.brightmine.com/ Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-2 Set-Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; expires=Fri, 18 Apr 2025 06:39:24 GMT; HttpOnly; path=/; Domain=.us.brightmine.com Set-Cookie: nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; path=/; Domain=.us.brightmine.com Set-Cookie: incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; path=/; Domain=.us.brightmine.com X-CDN: Imperva X-Iinfo: 55-23599678-23599756 NNNN CT(19 22 0) RT(1713460532916 212) q(0 0 0 0) r(0 0) U24

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:34 UTC	907	OUT	GET / HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==
2024-04-18 17:15:34 UTC	822	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:15:34 GMT Content-Type: text/html; charset=utf-8 Content-Length: 123 Connection: close Cache-Control: private Location: /login Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-2 Set-Cookie: visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; expires=Fri, 18 Apr 2025 06:39:24 GMT; HttpOnly; path=/; Domain=.us.brightmine.com Set-Cookie: nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; path=/; Domain=.us.brightmine.com Set-Cookie: incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; path=/; Domain=.us.brightmine.com X-CDN: Imperva X-Iinfo: 57-29353269-29353365 NNNN CT(15 28 0) RT(1713460533512 216) q(0 0 0 0) r(0 1) U24
2024-04-18 17:15:34 UTC	123	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/login">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:34 UTC	1149	OUT	GET /login HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==
2024-04-18 17:15:35 UTC	366	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 18 Apr 2024 17:15:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 163 Connection: close Location: http://hrcenter.us.brightmine.com/login/ Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 51-12300124-12300137 NNNY CT(15 19 0) RT(1713460534059 214) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:35 UTC	163	IN	Data Raw: 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 6d 65 6e 74 20 4d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 31 3e 4f 62 6a 65 63 74 20 4d 6f 76 65 64 3c 2f 68 31 3e 54 68 69 73 20 64 6f 63 75 6d 65 6e 74 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 3c 61 20 48 52 45 46 3d 22 68 74 74 70 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 6f 67 69 6e 2f 22 3e 68 65 72 65 3c 2f 61 3e 3c 2f 62 6f 64 79 3e Data Ascii: <head><title>Document Moved</title></head><body><h1>Object Moved</h1>This document may be found <a HREF="http://hrcenter.us.brightmine.com/login/">here</a></body>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49742	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:35 UTC	1150	OUT	GET /login/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==
2024-04-18 17:15:35 UTC	367	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:15:35 GMT Content-Type: text/html; charset=utf-8 Content-Length: 146 Connection: close Cache-Control: private Location: /login/Gateway/?returnUrl=%2F Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 60-39155951-39156011 NNNY CT(15 18 0) RT(1713460534843 222) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:35 UTC	146	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 2f 6c 6f 67 69 6e 2f 47 61 74 65 77 61 79 2f 3f 72 65 74 75 72 6e 55 72 6c 3d 25 32 46 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 68 32 3e 0d 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="/login/Gateway/?returnUrl=%2F">here</a>.</h2></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:36 UTC	1172	OUT	GET /login/Gateway/?returnUrl=%2F HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==
2024-04-18 17:15:36 UTC	1380	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:15:36 GMT Content-Length: 0 Connection: close Cache-Control: private Location: https://auth.us.brightmine.com/connect/authorize?client_id=core_consumer&redirect_uri=https%3A%2F%2Fhrcenter.us.brightmine.com%2F&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fcorecms_content_bridge%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fhotline_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fuserinsight_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Feventtrack_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fheaderfooter_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fuserpersonalisation_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fcustom_claims&state=OpenIdConnect.AuthenticationProperties%3DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww&response_mode=form_post&nonce=638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0 Server: Microsoft-IIS/10.0 Set-Cookie: xhr_gateway_theme=core; domain=us.brightmine.com; path=/; secure; SameSite=Lax
2024-04-18 17:15:36 UTC	571	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 4f 70 65 6e 49 64 43 6f 6e 6e 65 63 74 2e 6e 6f 6e 63 65 2e 50 58 78 31 52 42 42 43 65 25 32 46 31 48 72 71 48 48 45 55 6a 70 65 68 47 38 69 54 77 61 70 50 50 58 6d 25 32 46 4e 37 74 54 4f 57 74 66 34 25 33 44 3d 56 45 46 33 65 6e 68 33 62 32 52 33 56 48 42 4d 55 58 4e 57 4f 54 6c 6c 58 32 30 74 5a 6a 56 4e 58 31 42 32 54 58 46 52 64 55 78 61 56 6d 78 42 4f 58 5a 35 61 32 70 30 59 33 70 42 52 30 78 4c 64 6a 68 6b 51 6b 4d 74 52 7a 4a 75 51 7a 4e 79 57 56 39 48 4e 58 52 4a 64 48 63 31 5a 6c 70 34 64 6e 4d 34 51 58 64 55 4e 6e 46 7a 51 6b 64 58 63 47 5a 43 4e 6d 5a 51 54 33 6c 53 53 57 5a 56 64 45 70 30 63 46 6f 35 53 55 77 74 4d 30 46 35 56 55 56 32 62 47 74 71 4c 54 52 44 4f 47 4e 33 64 48 70 70 55 31 4a 4b 4d 6b 56 47 Data Ascii: Set-Cookie: OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:36 UTC	2255	OUT	GET /connect/authorize?client_id=core_consumer&redirect_uri=https%3A%2F%2Fhrcenter.us.brightmine.com%2F&response_type=code%20id_token&scope=openid%20profile%20email%20offline_access%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fcorecms_content_bridge%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fhotline_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fuserinsight_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Feventtrack_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fheaderfooter_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fuserpersonalisation_api%20https%3A%2F%2Fxperthr.systems%2Fscopes%2Fcustom_claims&state=OpenIdConnect.AuthenticationProperties%3DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww&response_mode=form_post&nonce=638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh&x-client-SKU=ID_NET461&x-client-ver=5.3.0.0 HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
2024-04-18 17:15:36 UTC	415	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:15:36 GMT Content-Length: 0 Connection: close Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com;
2024-04-18 17:15:36 UTC	1507	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 61 75 74 68 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 41 63 63 6f 75 6e 74 2f 4c 6f 67 69 6e 3f 52 65 74 75 72 6e 55 72 6c 3d 25 32 46 63 6f 6e 6e 65 63 74 25 32 46 61 75 74 68 6f 72 69 7a 65 25 32 46 63 61 6c 6c 62 61 63 6b 25 33 46 63 6c 69 65 6e 74 5f 69 64 25 33 44 63 6f 72 65 5f 63 6f 6e 73 75 6d 65 72 25 32 36 72 65 64 69 72 65 63 74 5f 75 72 69 25 33 44 68 74 74 70 73 25 32 35 33 41 25 32 35 32 46 25 32 35 32 46 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 25 32 35 32 46 25 32 36 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 25 33 44 63 6f 64 65 25 32 35 32 30 69 64 5f 74 6f 6b 65 6e 25 32 36 73 63 6f 70 65 25 33 44 6f 70 65 6e 69 64 25 32 35 32 30 70 72 Data Ascii: Location: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:36 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 17:15:36 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/073D) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=222463 Date: Thu, 18 Apr 2024 17:15:36 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:36 UTC	2433	OUT	GET /Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
2024-04-18 17:15:37 UTC	1327	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, no-store Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Pragma: no-cache Server: Microsoft-IIS/10.0 Set-Cookie: .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; expires=Fri, 18 Apr 2025 17:15:37 GMT; path=/ Set-Cookie: xhr_gateway_loggedin=removed; expires=Mon, 01 Jan 0001 00:00:00 GMT; domain=us.brightmine.com; path=/; secure; samesite=lax Set-Cookie: .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; path=/; samesite=strict; httponly X-Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline'; X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Powered-By: ASP.NET X-Web-Server: Gateway-2 X-CDN: Imperva X-Iinfo: 60-39156362-39156446 NNNY CT(13 18 0) RT(1713460536127 225) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 62 34 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0a 4c 6f 67 20 49 6e 20 7c 20 42 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e Data Ascii: b4b<!DOCTYPE html><html><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>Log In \| Brightmine.com </title> <lin
2024-04-18 17:15:37 UTC	1446	IN	Data Raw: 73 73 3d 22 74 61 62 73 2d 70 61 6e 65 6c 20 74 61 62 73 2d 68 69 64 65 22 20 69 64 3d 22 6c 6f 63 61 6c 65 4f 70 74 69 6f 6e 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 6f 63 61 6c 65 2d 67 62 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 72 65 2e 75 6b 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 22 3e 3c 73 70 61 6e 3e 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6c 6f 63 61 6c 65 2d 6e 6c 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 6e 6c 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f Data Ascii: ss="tabs-panel tabs-hide" id="localeOptions"> <li class="locale-gb"><a href="https://hrcentre.uk.brightmine.com/"><span>United Kingdom</span></a></li> <li class="locale-nl"><a href="https://hrcenter.nl.brightmine.co
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 32 30 30 30 0d 0a 69 57 53 42 6e 31 39 44 71 36 71 74 78 51 4c 4c 59 72 4e 6c 77 69 42 56 6c 38 31 79 49 34 4a 74 4f 52 6e 5a 75 2d 42 35 4e 67 5a 68 45 76 46 6c 32 41 48 52 55 34 52 54 54 52 53 77 4d 62 37 54 6e 68 39 6c 6a 70 7a 75 78 79 2d 69 74 30 38 5f 5f 75 61 7a 4e 77 53 75 31 67 74 70 69 74 56 6d 66 45 77 53 78 43 78 73 4d 6e 45 51 50 6e 4e 42 6f 57 71 75 62 5a 67 6b 6a 6e 39 4d 33 69 48 48 38 70 7a 69 78 45 43 5a 59 6b 39 68 65 67 67 79 31 66 61 4e 77 77 26 61 6d 70 3b 72 65 73 70 6f 6e 73 65 5f 6d 6f 64 65 3d 66 6f 72 6d 5f 70 6f 73 74 26 61 6d 70 3b 6e 6f 6e 63 65 3d 36 33 38 34 39 30 35 37 33 33 36 34 33 31 34 38 31 38 2e 4d 32 45 79 4d 6a 52 68 4d 54 51 74 4f 57 51 33 4e 69 30 30 59 6a 6b 33 4c 54 6b 78 59 54 45 74 4d 7a 42 68 4f 54 55 33 59 Data Ascii: 2000iWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww&response_mode=form_post&nonce=638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3Y
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6e 6f 74 63 68 65 64 2d 6f 75 74 6c 69 6e 65 5f 5f 74 72 61 69 6c 69 6e 67 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 6d 64 63 2d 74 65 78 74 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 22 20 72 65 71 75 69 72 65 64 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 6d 79 2d 75 73 65 72 6e 61 6d 65 2d 69 64 Data Ascii: <span class="mdc-notched-outline__trailing"></span> </span> <input type="text" class="mdc-text-field__input" required aria-labelledby="my-username-id
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 67 2d 6c 61 62 65 6c 22 20 69 64 3d 22 6d 79 2d 70 61 73 73 77 6f 72 64 2d 69 64 22 3e 50 61 73 73 77 6f 72 64 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 64 63 2d 6e 6f 74 63 68 65 64 2d 6f 75 74 6c 69 6e 65 5f 5f 74 72 61 69 6c 69 6e 67 20 6d 64 63 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 77 69 74 68 2d 74 72 61 69 6c 69 6e 67 2d 69 63 6f 6e 22 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: g-label" id="my-password-id">Password</span> </span> <span class="mdc-notched-outline__trailing mdc-text-field--with-trailing-icon"></span>
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 63 6c 61 73 73 3d 22 63 68 6b 62 6f 78 5f 64 66 6c 74 22 20 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 20 64 61 74 61 2d 76 61 6c 3d 22 74 72 75 65 22 20 64 61 74 61 2d 76 61 6c 2d 72 65 71 75 69 72 65 64 3d 22 54 68 65 20 52 65 6d 65 6d 62 65 72 4c 6f 67 69 6e 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 2e 22 20 69 64 3d 22 52 65 6d 65 6d 62 65 72 4c 6f 67 69 6e 22 20 6e 61 6d 65 3d 22 52 65 6d 65 6d 62 65 72 4c 6f 67 69 6e 22 20 76 61 6c 75 65 3d 22 74 72 75 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <input class="chkbox_dflt" type="checkbox" data-val="true" data-val-required="The RememberLogin field is required." id="RememberLogin" name="RememberLogin" value="true">
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 20 20 20 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 5f 5f 52 65 71 75 65 73 74 56 65 72 69 66 69 63 61 74 69 6f 6e 54 6f 6b 65 6e 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 43 66 44 4a 38 45 41 68 6d 76 34 4d 41 7a 56 4d 6c 34 34 39 52 41 6f 43 63 4d 64 58 68 58 42 4e 30 2d 65 68 4b 62 45 65 41 77 38 6b 69 53 39 35 4a 52 67 5f 48 62 75 4c 5f 77 53 36 44 66 72 31 45 41 5a 50 4d 54 38 43 48 59 52 6e 4d 4c 34 55 66 7a 59 35 65 4d 46 2d 70 6b 4d 6c 63 68 64 62 47 4c 36 39 62 44 4b 36 69 5f 53 68 62 59 4d 4b 71 6d 54 6a 6d 31 6f 65 4d 69 4f 77 4f 4d 38 38 42 74 4d 51 53 72 50 75 4c 49 36 61 64 57 51 76 6e 63 41 49 37 64 6f 6b 38 78 77 22 20 2f 3e 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 22 52 65 6d 65 6d 62 65 72 4c 6f 67 69 6e 22 20 74 79 70 Data Ascii: <input name="__RequestVerificationToken" type="hidden" value="CfDJ8EAhmv4MAzVMl449RAoCcMdXhXBN0-ehKbEeAw8kiS95JRg_HbuL_wS6Dfr1EAZPMT8CHYRnML4UfzY5eMF-pkMlchdbGL69bDK6i_ShbYMKqmTjm1oeMiOwOM88BtMQSrPuLI6adWQvncAI7dok8xw" /><input name="RememberLogin" typ
2024-04-18 17:15:37 UTC	940	IN	Data Raw: 56 33 31 63 30 20 2e 39 2d 2e 36 20 31 2e 34 2d 31 2e 34 20 31 2e 34 68 2d 34 33 2e 31 63 2d 2e 36 20 30 2d 2e 39 2e 33 2d 2e 39 2e 39 76 32 33 2e 39 63 30 20 2e 36 2e 33 2e 39 2e 39 2e 39 68 33 34 2e 36 63 2e 39 20 30 20 31 2e 34 2e 36 20 31 2e 34 20 31 2e 34 76 31 32 2e 34 63 30 20 2e 39 2d 2e 36 20 31 2e 34 2d 31 2e 34 20 31 2e 34 68 2d 33 34 2e 36 63 2d 2e 36 20 30 2d 2e 39 2e 33 2d 2e 39 2e 39 56 39 39 63 30 20 2e 36 2e 33 2e 39 2e 39 2e 39 48 33 33 37 63 2e 39 20 30 20 31 2e 34 2e 36 20 31 2e 34 20 31 2e 34 76 31 32 2e 34 63 30 20 2e 39 2d 2e 36 20 31 2e 34 2d 31 2e 34 20 31 2e 34 68 2d 35 39 2e 35 63 2d 2e 39 20 30 2d 31 2e 34 2d 2e 36 2d 31 2e 34 2d 31 2e 34 56 31 38 2e 36 68 2d 2e 31 5a 4d 33 35 34 2e 33 20 31 38 2e 36 63 30 2d 2e 39 2e 36 2d 31 Data Ascii: V31c0 .9-.6 1.4-1.4 1.4h-43.1c-.6 0-.9.3-.9.9v23.9c0 .6.3.9.9.9h34.6c.9 0 1.4.6 1.4 1.4v12.4c0 .9-.6 1.4-1.4 1.4h-34.6c-.6 0-.9.3-.9.9V99c0 .6.3.9.9.9H337c.9 0 1.4.6 1.4 1.4v12.4c0 .9-.6 1.4-1.4 1.4h-59.5c-.9 0-1.4-.6-1.4-1.4V18.6h-.1ZM354.3 18.6c0-.9.6-1
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 61 38 66 0d 0a 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 68 65 20 6d 61 74 65 72 69 61 6c 73 20 61 6e 64 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 65 20 42 72 69 67 68 74 6d 69 6e 65 20 73 65 72 76 69 63 65 20 61 72 65 20 70 72 6f 76 69 64 65 64 20 66 6f 72 20 72 65 66 65 72 65 6e 63 65 20 70 75 72 70 6f 73 65 73 20 6f 6e 6c 79 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 54 68 65 79 20 61 72 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 74 20 69 6e 74 65 6e 64 65 64 20 65 69 74 68 65 72 20 61 73 20 61 20 73 75 Data Ascii: a8f </p> <p> The materials and information included in the Brightmine service are provided for reference purposes only. They are not intended either as a su
2024-04-18 17:15:37 UTC	1263	IN	Data Raw: 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 6f 74 65 72 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6c 69 62 2f 6a 71 75 65 72 79 2f 6a 71 75 65 72 79 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6a 73 2f 61 70 70 2f 64 65 66 61 75 6c 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 6c 69 62 2f 6d 61 74 65 72 69 61 6c 2f 6a 73 2f 6d 61 74 65 72 69 61 6c 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 77 65 62 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a Data Ascii: </div> </footer> </div> </div></div> <script src="/lib/jquery/jquery.js"></script> <script src="/js/app/default.js"></script> <script src="/lib/material/js/material-components-web.min.js"></script> <script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	23.201.212.130	443

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-18 17:15:37 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=222371 Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-18 17:15:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49750	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	2643	OUT	GET /lib/material/css/material-components-web.min.css?v=PXXfdSPiOxM3WNImwuAvCQPN09U46MGonkGuVRS905g HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:37 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: text/css Content-Length: 566981 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b89510545" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-1 X-CDN: Imperva X-Iinfo: 52-14554811-14554824 NNNY CT(13 16 0) RT(1713460536857 154) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:37 UTC	731	IN	Data Raw: 2f 2a 2a 20 2a 20 40 6c 69 63 65 6e 73 65 20 2a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 20 2a 20 2a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 20 2a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 74 65 72 69 61 6c 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 6d 61 74 65 72 69 61 6c 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 77 65 62 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 20 2a 2f 0a 2e 6d 64 Data Ascii: /** * @license * Copyright Google LLC All Rights Reserved. * * Use of this source code is governed by an MIT-style license that can be * found in the LICENSE file at https://github.com/material-components/material-components-web/blob/master/LICENSE */.md
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 0a 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 20 30 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 0a 7d 0a 0a 40 6d 65 64 69 61 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 7b 0a 20 20 20 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 5f 5f 66 69 78 65 64 20 7b 0a 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 0a 20 20 20 20 7d 0a 0a 20 20 20 20 Data Ascii: bottom-style: solid; box-sizing: border-box; display: none; flex-shrink: 0; height: 0; position: relative; width: 100%}@media(max-width: 480px) { .mdc-banner .mdc-banner__fixed { left: 0; right: 0 }
2024-04-18 17:15:37 UTC	1320	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 33 30 30 6d 73 20 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 74 72 61 6e 73 66 6f 72 6d 20 33 30 30 6d 73 20 65 61 73 65 2c 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 33 30 30 6d 73 20 65 61 73 65 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 0a 20 20 20 20 7d 0a 0a 2e 6d 64 63 2d 62 61 6e 6e 65 72 2d 2d 63 6c 6f 73 69 6e 67 20 7b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 68 65 69 67 68 74 20 32 35 30 6d 73 20 65 61 73 65 0a 7d 0a 0a 20 20 20 20 2e 6d 64 Data Ascii: transition: transform 300ms ease; transition: transform 300ms ease, -webkit-transform 300ms ease; -webkit-transform: translateY(0); transform: translateY(0) }.mdc-banner--closing { transition: height 250ms ease} .md
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 0a 7d 0a 0a 2e 6d 64 63 2d 62 61 6e 6e 65 72 5f 5f 74 65 78 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 34 70 78 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 39 30 70 78 3b 0a 20 20 20 20 61 6c 69 67 6e 2d 73 65 6c 66 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 66 6c 65 78 2d 67 72 6f 77 3a 20 31 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 36 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 0a 7d 0a 0a 20 20 20 20 5b 64 69 72 3d Data Ascii: top: 50%; -webkit-transform: translateY(-50%); transform: translateY(-50%)}.mdc-banner__text { margin-left: 24px; margin-right: 90px; align-self: center; flex-grow: 1; padding-top: 16px; padding-bottom: 16px} [dir=
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 20 77 69 64 74 68 3a 20 34 30 70 78 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 5f 5f 66 69 78 65 64 20 7b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 5f 5f 66 69 78 65 64 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 5f 5f 66 69 78 65 64 20 7b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 31 Data Ascii: width: 40px } .mdc-banner .mdc-banner__fixed { background-color: #fff } .mdc-banner .mdc-banner__fixed { border-bottom-color: rgba(0, 0, 0, 0.12) } .mdc-banner .mdc-banner__fixed { border-bottom-width: 1
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 3a 20 37 35 6d 73 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 31 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 74 65 78 74 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 2d 73 74 61 74 65 2d 6c 61 79 65 72 2d 6f 70 61 63 69 74 79 2c 20 30 2e 31 29 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6d 64 63 2d 62 61 6e 6e 65 72 20 2e 6d 64 63 2d 62 75 74 74 6f 6e 2e 6d 64 63 2d 72 69 70 70 6c 65 2d 75 70 67 72 61 64 65 64 20 7b 0a 20 20 20 20 20 20 20 20 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 6f 70 61 63 69 74 79 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 74 65 78 74 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 2d 73 74 61 74 65 2d 6c 61 79 65 72 2d 6f 70 61 63 69 74 79 2c 20 30 2e 31 29 0a 20 20 20 20 7d 0a Data Ascii: : 75ms; opacity: 0.1; opacity: var(--mdc-text-button-pressed-state-layer-opacity, 0.1) } .mdc-banner .mdc-button.mdc-ripple-upgraded { --mdc-ripple-fg-opacity: var(--mdc-text-button-pressed-state-layer-opacity, 0.1) }
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 63 75 73 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 62 6f 72 64 65 72 3a 20 30 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 20 7b 0a 20 20 20 20 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 6d 64 63 2d 62 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 20 20 20 20 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 0a 20 20 20 20 7d 0a 0a 20 Data Ascii: cus-inner { padding: 0; border: 0 } .mdc-button:active { outline: none } .mdc-button:hover { cursor: pointer } .mdc-button:disabled { cursor: default; pointer-events: none }
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 2d 6d 64 63 2d 74 79 70 6f 67 72 61 70 68 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2c 20 52 6f 62 6f 74 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 29 29 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2c 20 6e 6f 6e 65 29 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 74 79 70 6f 67 72 61 70 68 79 2d 62 75 74 74 6f 6e 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2c 20 6e 6f 6e 65 29 0a 7d 0a 0a 2e 6d 64 63 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 20 20 70 61 64 Data Ascii: -mdc-typography-font-family, Roboto, sans-serif)); text-decoration: none; -webkit-text-decoration: var(--mdc-typography-button-text-decoration, none); text-decoration: var(--mdc-typography-button-text-decoration, none)}.mdc-button { pad
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 30 29 29 20 73 63 61 6c 65 28 31 29 0a 20 20 20 20 7d 0a 0a 20 20 20 20 74 6f 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 65 6e 64 2c 20 30 29 29 20 73 63 61 6c 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 63 61 6c 65 2c 20 31 29 29 3b 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 74 72 61 6e 73 6c 61 74 65 2d 65 6e 64 2c 20 30 29 29 20 73 63 61 6c 65 28 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 73 63 61 6c 65 2c 20 31 29 29 0a 20 20 20 20 7d 0a 7d Data Ascii: 0)) scale(1) } to { -webkit-transform: translate(var(--mdc-ripple-fg-translate-end, 0)) scale(var(--mdc-ripple-fg-scale, 1)); transform: translate(var(--mdc-ripple-fg-translate-end, 0)) scale(var(--mdc-ripple-fg-scale, 1)) }}
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 76 61 72 28 2d 2d 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 6f 70 61 63 69 74 79 2c 20 30 29 0a 20 20 20 20 7d 0a 0a 20 20 20 20 74 6f 20 7b 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 0a 20 20 20 20 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 6d 64 63 2d 72 69 70 70 6c 65 2d 66 67 2d 6f 70 61 63 69 74 79 2d 6f 75 74 20 7b 0a 20 20 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 6c 69 6e 65 61 72 3b 0a 20 20 20 20 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 Data Ascii: nimation-timing-function: linear; opacity: var(--mdc-ripple-fg-opacity, 0) } to { opacity: 0 }}@keyframes mdc-ripple-fg-opacity-out { from { -webkit-animation-timing-function: linear; animation-timing-fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	2614	OUT	GET /css/custom_site.css?v=aJorWfNIR3ggUCXMiS10jSg3fhJeMPZHUa8gWgyHP9I HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:37 UTC	720	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: text/css Content-Length: 17208 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b8959e0b8" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-1 X-CDN: Imperva X-Iinfo: 57-29354483-29354555 NNNN CT(16 17 0) RT(1713460536860 156) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:37 UTC	732	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 6d 64 63 2d 74 68 65 6d 65 2d 70 72 69 6d 61 72 79 3a 20 23 31 33 32 39 34 45 3b 0a 20 20 2d 2d 6d 64 63 2d 74 68 65 6d 65 2d 73 65 63 6f 6e 64 61 72 79 3a 20 23 31 33 32 39 34 45 3b 0a 20 20 2d 2d 6d 64 63 2d 74 68 65 6d 65 2d 6f 6e 2d 70 72 69 6d 61 72 79 3a 20 23 31 33 32 39 34 45 3b 0a 20 20 2d 2d 6d 64 63 2d 74 68 65 6d 65 2d 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 3a 20 23 31 33 32 39 34 45 3b 0a 7d 0a 0a 23 66 6f 72 6d 43 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 30 2e 35 72 65 6d 0a 7d 0a 0a 2e 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 Data Ascii: @charset "UTF-8";:root { --mdc-theme-primary: #13294E; --mdc-theme-secondary: #13294E; --mdc-theme-on-primary: #13294E; --mdc-theme-on-secondary: #13294E;}#formContainer .form-group{ margin-bottom: 0.5rem}.border-bottom { border-bot
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 2e 2f 69 6d 67 2f 49 63 6f 6e 2d 65 79 65 2d 6f 66 66 2d 66 69 6c 6c 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 32 30 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 20 20 7a 6f 6f 6d 3a 20 31 3b 0a 7d 0a 0a 69 6e 70 75 74 3a 3a 2d 6d 73 2d 72 65 76 65 61 6c 2c 0a 69 6e 70 75 74 3a 3a 2d 6d 73 2d 63 6c 65 61 72 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6d 64 63 2d 74 65 78 74 2d 66 69 65 6c 64 3a 6e 6f 74 28 2e 6d 64 63 2d 74 65 78 74 2d 66 69 65 6c 64 2d 2d 64 69 73 61 62 6c 65 64 29 20 2b 20 2e 6d 64 63 2d 74 65 78 74 2d 66 69 65 6c 64 2d 68 65 6c 70 65 72 2d 6c 69 6e 65 20 2e 6d Data Ascii: ./img/Icon-eye-off-fill.png) no-repeat; display: inline-block; height: 20px; width: 24px; zoom: 1;}input::-ms-reveal,input::-ms-clear { display: none;}.mdc-text-field:not(.mdc-text-field--disabled) + .mdc-text-field-helper-line .m
2024-04-18 17:15:37 UTC	1320	IN	Data Raw: 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 72 69 67 68 74 20 74 6f 70 2c 20 6c 65 66 74 20 74 6f 70 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 7d 0a 0a 2e 6c 6f 67 6f 75 74 2d 73 65 63 74 69 6f 6e 20 61 20 7b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 6c 6f 67 6f 75 74 2d 73 65 63 74 69 6f 6e 20 61 3a 68 6f 76 65 72 2c 20 2e 6c 6f 67 6f 75 74 2d 73 65 63 74 69 6f 6e 20 61 3a 61 63 74 69 76 65 2c 20 2e 6c 6f 67 6f 75 74 2d 73 65 63 74 69 6f 6e 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b Data Ascii: 0px; background-position: right top, left top; background-color: transparent; background-repeat: no-repeat;}.logout-section a {text-decoration: none;}.logout-section a:hover, .logout-section a:active, .logout-section a:focus { outline: 0;
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 20 73 6f 6c 69 64 20 23 30 30 30 30 30 30 33 33 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 61 6c 6c 6f 75 74 20 2e 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 61 6c 6c 6f 75 74 20 2e 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 68 32 2c 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 68 32 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 38 70 78 3b 0a 7d 0a 2e 66 6f 72 6d 2d 63 61 6c 6c 6f 75 74 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 2c 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d Data Ascii: solid #00000033;}.form-callout .form-container, .login-section form .form-container { padding: 2px;}.form-callout .form-container h2, .login-section form .form-container h2 { font-size: 28px;}.form-callout .form-group, .login-section form .form
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 62 6f 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 62 6f 72 64 65 72 2d 62 6f 78 2c 20 62 6f 72 64 65 72 2d 62 6f 78 2c 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 7d 0a 20 20 2e 66 6f 72 6d 2d 63 61 6c 6c 6f 75 74 20 2e 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 2c 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 70 78 3b 0a 20 20 7d 0a 20 20 2e 66 6f 72 6d 2d 63 61 6c 6c 6f 75 74 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 2c 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 Data Ascii: box; background-clip: border-box, border-box, content-box; } .form-callout .form-container, .login-section form .form-container { padding: 2px; } .form-callout .form-group, .login-section form .form-group { margin-right: 0; }}@medi
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 6e 3b 0a 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 77 72 61 70 3b 0a 7d 0a 2e 6c 73 75 2d 75 73 65 72 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 68 31 20 73 70 61 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 0a 7d 0a 2e 6c 73 75 2d 75 73 65 72 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 68 31 20 73 70 61 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 32 70 78 3b 0a 7d 0a 2e 6c 73 75 2d 75 73 65 72 20 2e 6c 6f 67 69 6e 2d 73 65 63 74 69 6f 6e 20 68 31 20 73 70 61 6e 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 32 70 78 Data Ascii: n; flex-wrap: wrap;}.lsu-user .login-section h1 span { display: block; margin: 0 auto; max-width: 600px;}.lsu-user .login-section h1 span:first-child { padding-bottom: 12px;}.lsu-user .login-section h1 span:last-child { font-size: 22px
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 61 67 65 20 61 20 7b 0a 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 65 72 72 6f 72 2d 70 61 67 65 20 61 3a 68 6f 76 65 72 2c 20 2e 75 6e 61 75 74 68 6f 72 69 7a 65 64 2d 70 61 67 65 20 61 3a 68 6f 76 65 72 2c 20 2e 65 72 72 6f 72 2d 70 61 67 65 20 61 3a 61 63 74 69 76 65 2c 20 2e 75 6e 61 75 74 68 6f 72 69 7a 65 64 2d 70 61 67 65 20 61 3a 61 63 74 69 76 65 2c 20 2e 65 72 72 6f 72 2d 70 61 67 65 20 61 3a 66 6f 63 75 73 2c 20 2e 75 6e 61 75 74 68 6f 72 69 7a 65 64 2d 70 61 67 65 20 61 3a 66 6f 63 75 73 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 65 72 72 Data Ascii: age a {text-decoration: none;}.error-page a:hover, .unauthorized-page a:hover, .error-page a:active, .unauthorized-page a:active, .error-page a:focus, .unauthorized-page a:focus { outline: 0; text-decoration: none; box-shadow: none;}.err
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 65 63 74 6f 72 20 2e 74 61 62 73 2d 68 61 6e 64 6c 65 2d 6c 69 6e 6b 20 2e 64 72 6f 70 64 6f 77 6e 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 7d 0a 0a 5b 63 6c 61 73 73 5e 3d 63 6f 6c 5d 2e 6e 6f 2d 67 75 74 74 65 72 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 30 3b 0a 7d 0a 0a 23 67 6c 6f 62 61 6c 48 65 61 64 65 72 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 23 64 62 64 62 64 62 20 73 6f 6c 69 64 20 31 70 78 3b 0a 7d 0a 23 67 6c 6f 62 61 6c 48 65 61 64 65 72 20 2e 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 2d 63 6f 6e 74 65 6e 74 3a 61 66 74 65 72 20 7b 0a 20 20 63 6f 6e 74 65 6e 74 3a 20 22 2e 22 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c Data Ascii: ector .tabs-handle-link .dropdown { font-size: 12px;}[class^=col].no-gutter { padding-left: 0; padding-right: 0;}#globalHeader { border-bottom: #dbdbdb solid 1px;}#globalHeader .global-header-content:after { content: "."; display: bl
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 20 20 20 20 6c 65 66 74 3a 20 35 70 78 3b 0a 20 20 7d 0a 20 20 2e 78 68 72 2d 68 65 61 64 65 72 20 2e 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 2d 61 6e 64 2d 73 65 61 72 63 68 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 2e 70 61 67 65 2d 6c 6f 67 6f 73 20 23 6c 66 4c 6f 67 6f 20 7b 0a 20 20 20 20 72 69 67 68 74 3a 20 35 70 78 3b 0a 20 20 7d 0a 7d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 35 37 30 70 78 29 20 7b 0a 20 20 2e 78 68 72 2d 68 65 61 64 65 72 20 2e 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 2d 61 6e 64 2d 73 65 61 72 63 68 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 20 2e 70 61 67 65 2d 6c 6f 67 6f 73 2e 75 73 20 23 78 68 72 4c 6f 67 6f 20 7b 0a 20 20 20 20 6c 65 66 74 Data Ascii: left: 5px; } .xhr-header .site-branding-and-search-container .site-branding .page-logos #lfLogo { right: 5px; }}@media (max-width: 570px) { .xhr-header .site-branding-and-search-container .site-branding .page-logos.us #xhrLogo { left
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 6e 29 3a 61 63 74 69 76 65 2c 20 2e 70 61 67 65 2d 6c 6f 67 6f 73 20 61 3a 6e 6f 74 28 2e 62 74 6e 29 3a 66 6f 63 75 73 2c 20 2e 70 61 67 65 2d 6c 6f 67 6f 73 20 61 3a 6e 6f 74 28 2e 62 74 6e 29 3a 68 6f 76 65 72 20 7b 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 3b 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 73 65 63 6f 6e 64 61 72 79 4c 6f 67 6f 20 64 69 76 5b 63 6c 61 73 73 5e 3d 73 65 63 5d 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 7d 0a 0a 2e 73 65 63 6f 6e 64 61 72 79 4c 6f 67 6f 20 64 69 76 5b 63 6c 61 73 73 5e 3d 73 65 63 5d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 Data Ascii: n):active, .page-logos a:not(.btn):focus, .page-logos a:not(.btn):hover { outline: 0; text-decoration: none; box-shadow: none;}.secondaryLogo div[class^=sec] { padding-top: 10px;}.secondaryLogo div[class^=sec]:last-child { text-a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49749	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	2555	OUT	GET /lib/jquery/jquery.js HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:37 UTC	735	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: application/javascript Content-Length: 247597 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b895a64ad" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-2 X-CDN: Imperva X-Iinfo: 55-23600542-23600582 NNNY CT(14 16 0) RT(1713460536857 159) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:37 UTC	717	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 32 2e 31 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v2.1.4 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2014 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 65 2e 67 2e 20 76 61 72 20 6a 51 75 65 72 79 20 3d 20 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 28 77 69 6e 64 6f 77 29 3b 0a 09 09 2f 2f 20 53 65 65 20 74 69 63 6b 65 74 20 23 31 34 35 34 39 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 2e 0a 09 09 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 20 3d 20 67 6c 6f 62 61 6c 2e 64 6f 63 75 6d 65 6e 74 20 3f 0a 09 09 09 66 61 63 74 6f 72 79 28 20 67 6c 6f 62 61 6c 2c 20 74 72 75 65 20 29 20 3a 0a 09 09 09 66 75 6e 63 74 69 6f 6e 28 20 77 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 21 77 2e 64 6f 63 75 6d 65 6e 74 20 29 20 7b 0a 09 09 09 09 09 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 20 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e Data Ascii: e.g. var jQuery = require("jquery")(window);// See ticket #14549 for more info.module.exports = global.document ?factory( global, true ) :function( w ) {if ( !w.document ) {throw new Error( "jQuery requires a window with a documen
2024-04-18 17:15:37 UTC	1320	IN	Data Raw: 69 6e 67 20 66 6f 72 20 63 61 6d 65 6c 69 7a 69 6e 67 0a 09 72 6d 73 50 72 65 66 69 78 20 3d 20 2f 5e 2d 6d 73 2d 2f 2c 0a 09 72 64 61 73 68 41 6c 70 68 61 20 3d 20 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 0a 0a 09 2f 2f 20 55 73 65 64 20 62 79 20 6a 51 75 65 72 79 2e 63 61 6d 65 6c 43 61 73 65 20 61 73 20 63 61 6c 6c 62 61 63 6b 20 74 6f 20 72 65 70 6c 61 63 65 28 29 0a 09 66 63 61 6d 65 6c 43 61 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 6c 6c 2c 20 6c 65 74 74 65 72 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6c 65 74 74 65 72 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 09 7d 3b 0a 0a 6a 51 75 65 72 79 2e 66 6e 20 3d 20 6a 51 75 65 72 79 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 7b 0a 09 2f 2f 20 54 68 65 20 63 75 72 72 65 6e 74 20 76 65 72 73 Data Ascii: ing for camelizingrmsPrefix = /^-ms-/,rdashAlpha = /-([\da-z])/gi,// Used by jQuery.camelCase as callback to replace()fcamelCase = function( all, letter ) {return letter.toUpperCase();};jQuery.fn = jQuery.prototype = {// The current vers
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 6d 65 6e 74 73 20 77 69 74 68 20 61 6e 20 61 72 72 61 79 20 6f 66 20 61 72 67 73 2c 20 62 75 74 20 74 68 69 73 20 69 73 0a 09 2f 2f 20 6f 6e 6c 79 20 75 73 65 64 20 69 6e 74 65 72 6e 61 6c 6c 79 2e 29 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 63 61 6c 6c 62 61 63 6b 2c 20 61 72 67 73 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6a 51 75 65 72 79 2e 65 61 63 68 28 20 74 68 69 73 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 61 72 67 73 20 29 3b 0a 09 7d 2c 0a 0a 09 6d 61 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 20 6a 51 75 65 72 79 2e 6d 61 70 28 74 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 69 20 29 20 7b 0a 09 09 09 72 65 74 75 Data Ascii: ments with an array of args, but this is// only used internally.)each: function( callback, args ) {return jQuery.each( this, callback, args );},map: function( callback ) {return this.pushStack( jQuery.map(this, function( elem, i ) {retu
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 74 61 72 67 65 74 20 3d 20 74 68 69 73 3b 0a 09 09 69 2d 2d 3b 0a 09 7d 0a 0a 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 2f 2f 20 4f 6e 6c 79 20 64 65 61 6c 20 77 69 74 68 20 6e 6f 6e 2d 6e 75 6c 6c 2f 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 28 6f 70 74 69 6f 6e 73 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 69 20 5d 29 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 2f 2f 20 45 78 74 65 6e 64 20 74 68 65 20 62 61 73 65 20 6f 62 6a 65 63 74 0a 09 09 09 66 6f 72 20 28 20 6e 61 6d 65 20 69 6e 20 6f 70 74 69 6f 6e 73 20 29 20 7b 0a 09 09 09 09 73 72 63 20 3d 20 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 3b 0a 09 09 09 09 63 6f 70 79 20 3d 20 6f 70 74 69 6f 6e 73 5b 20 6e 61 6d 65 Data Ascii: target = this;i--;}for ( ; i < length; i++ ) {// Only deal with non-null/undefined valuesif ( (options = arguments[ i ]) != null ) {// Extend the base objectfor ( name in options ) {src = target[ name ];copy = options[ name
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 63 74 69 6f 6e 28 20 6f 62 6a 20 29 20 7b 0a 09 09 2f 2f 20 70 61 72 73 65 46 6c 6f 61 74 20 4e 61 4e 73 20 6e 75 6d 65 72 69 63 2d 63 61 73 74 20 66 61 6c 73 65 20 70 6f 73 69 74 69 76 65 73 20 28 6e 75 6c 6c 7c 74 72 75 65 7c 66 61 6c 73 65 7c 22 22 29 0a 09 09 2f 2f 20 2e 2e 2e 62 75 74 20 6d 69 73 69 6e 74 65 72 70 72 65 74 73 20 6c 65 61 64 69 6e 67 2d 6e 75 6d 62 65 72 20 73 74 72 69 6e 67 73 2c 20 70 61 72 74 69 63 75 6c 61 72 6c 79 20 68 65 78 20 6c 69 74 65 72 61 6c 73 20 28 22 30 78 2e 2e 2e 22 29 0a 09 09 2f 2f 20 73 75 62 74 72 61 63 74 69 6f 6e 20 66 6f 72 63 65 73 20 69 6e 66 69 6e 69 74 69 65 73 20 74 6f 20 4e 61 4e 0a 09 09 2f 2f 20 61 64 64 69 6e 67 20 31 20 63 6f 72 72 65 63 74 73 20 6c 6f 73 73 20 6f 66 20 70 72 65 63 69 73 69 6f 6e 20 Data Ascii: ction( obj ) {// parseFloat NaNs numeric-cast false positives (null\|true\|false\|"")// ...but misinterprets leading-number strings, particularly hex literals ("0x...")// subtraction forces infinities to NaN// adding 1 corrects loss of precision
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 74 68 65 20 63 6f 64 65 20 69 6e 63 6c 75 64 65 73 20 61 20 76 61 6c 69 64 2c 20 70 72 6f 6c 6f 67 75 65 20 70 6f 73 69 74 69 6f 6e 0a 09 09 09 2f 2f 20 73 74 72 69 63 74 20 6d 6f 64 65 20 70 72 61 67 6d 61 2c 20 65 78 65 63 75 74 65 20 63 6f 64 65 20 62 79 20 69 6e 6a 65 63 74 69 6e 67 20 61 0a 09 09 09 2f 2f 20 73 63 72 69 70 74 20 74 61 67 20 69 6e 74 6f 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 2e 0a 09 09 09 69 66 20 28 20 63 6f 64 65 2e 69 6e 64 65 78 4f 66 28 22 75 73 65 20 73 74 72 69 63 74 22 29 20 3d 3d 3d 20 31 20 29 20 7b 0a 09 09 09 09 73 63 72 69 70 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0a 09 09 09 09 73 63 72 69 70 74 2e 74 65 78 74 20 3d 20 63 6f 64 65 3b 0a 09 09 09 09 Data Ascii: the code includes a valid, prologue position// strict mode pragma, execute code by injecting a// script tag into the document.if ( code.indexOf("use strict") === 1 ) {script = document.createElement("script");script.text = code;
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 6f 62 6a 20 29 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 Data Ascii: ) {value = callback.call( obj[ i ], i, obj[ i ] );if ( value === false ) {break;}}} else {for ( i in obj ) {value = callback.call( obj[ i ], i, obj[ i ] );if ( value === false ) {break;}
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 68 65 73 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 61 72 67 20 69 73 20 66 6f 72 20 69 6e 74 65 72 6e 61 6c 20 75 73 61 67 65 20 6f 6e 6c 79 0a 09 6d 61 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 61 72 67 20 29 20 7b 0a 09 09 76 61 72 20 76 61 6c 75 65 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 65 6c 65 6d 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 09 69 73 41 72 72 61 79 20 3d 20 69 73 41 72 72 61 79 6c 69 6b 65 28 20 65 6c 65 6d 73 20 29 2c 0a 09 09 09 72 65 74 20 3d 20 5b 5d 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 74 72 61 6e 73 6c 61 74 69 6e 67 20 65 61 63 68 20 6f 66 20 74 68 65 20 69 74 65 6d 73 20 74 6f 20 74 68 65 69 72 20 6e 65 77 20 76 Data Ascii: hes;},// arg is for internal usage onlymap: function( elems, callback, arg ) {var value,i = 0,length = elems.length,isArray = isArraylike( elems ),ret = [];// Go through the array, translating each of the items to their new v
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 65 72 79 2e 67 75 69 64 2b 2b 3b 0a 0a 09 09 72 65 74 75 72 6e 20 70 72 6f 78 79 3b 0a 09 7d 2c 0a 0a 09 6e 6f 77 3a 20 44 61 74 65 2e 6e 6f 77 2c 0a 0a 09 2f 2f 20 6a 51 75 65 72 79 2e 73 75 70 70 6f 72 74 20 69 73 20 6e 6f 74 20 75 73 65 64 20 69 6e 20 43 6f 72 65 20 62 75 74 20 6f 74 68 65 72 20 70 72 6f 6a 65 63 74 73 20 61 74 74 61 63 68 20 74 68 65 69 72 0a 09 2f 2f 20 70 72 6f 70 65 72 74 69 65 73 20 74 6f 20 69 74 20 73 6f 20 69 74 20 6e 65 65 64 73 20 74 6f 20 65 78 69 73 74 2e 0a 09 73 75 70 70 6f 72 74 3a 20 73 75 70 70 6f 72 74 0a 7d 29 3b 0a 0a 2f 2f 20 50 6f 70 75 6c 61 74 65 20 74 68 65 20 63 6c 61 73 73 32 74 79 70 65 20 6d 61 70 0a 6a 51 75 65 72 79 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 Data Ascii: ery.guid++;return proxy;},now: Date.now,// jQuery.support is not used in Core but other projects attach their// properties to it so it needs to exist.support: support});// Populate the class2type mapjQuery.each("Boolean Number String F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49748	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	2552	OUT	GET /js/app/default.js HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:37 UTC	732	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: application/javascript Content-Length: 383 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da9169d4e19dff" Last-Modified: Thu, 18 Apr 2024 08:24:29 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-1 X-CDN: Imperva X-Iinfo: 59-35327853-35327936 NNNN CT(14 18 0) RT(1713460536858 158) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:37 UTC	383	IN	Data Raw: 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 24 6c 6f 63 61 6c 65 4f 70 74 69 6f 6e 73 20 3d 20 24 28 27 23 6c 6f 63 61 6c 65 4f 70 74 69 6f 6e 73 27 29 3b 0d 0a 20 20 20 20 76 61 72 20 24 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 20 3d 20 24 28 27 23 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 27 29 3b 0d 0a 20 20 20 20 24 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 2e 6f 6e 28 27 6d 6f 75 73 65 65 6e 74 65 72 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 24 6c 6f 63 61 6c 65 4f 70 74 69 6f 6e 73 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 24 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 2e 6f 6e 28 27 6d 6f 75 73 65 6c 65 61 76 Data Ascii: $(document).ready(function () { var $localeOptions = $('#localeOptions'); var $localeSelector = $('#localeSelector'); $localeSelector.on('mouseenter', function () { $localeOptions.show(); }); $localeSelector.on('mouseleav

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49752	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	2581	OUT	GET /lib/material/js/material-components-web.min.js HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:37 UTC	735	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: application/javascript Content-Length: 470679 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b895e8d17" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-2 X-CDN: Imperva X-Iinfo: 56-26196677-26196717 NNNN CT(13 16 0) RT(1713460536859 162) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:37 UTC	717	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 6d 61 74 65 72 69 61 6c 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 77 65 62 22 2c 5b 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 6d 64 63 3d 65 28 29 3a 74 2e 6d 64 63 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 3d 7b 7d 2c 72 2e 6d 3d 6e 3d 5b 66 75 6e 63 74 69 6f Data Ascii: !function(t,e){"object"==typeof exports&&"object"==typeof module?module.exports=e():"function"==typeof define&&define.amd?define("material-components-web",[],e):"object"==typeof exports?exports.mdc=e():t.mdc=e()}(this,function(){return i={},r.m=n=[functio
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 72 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 26 26 28 74 3d 7b 7d 29 2c 74 68 69 73 2e 61 64 61 70 74 65 72 3d 74 7d 65 2e 4d 44 43 46 6f 75 6e 64 61 74 69 6f 6e 3d 69 2c 65 2e 64 65 66 61 75 6c 74 3d 69 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 72 65 61 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: onfigurable:!0}),r.prototype.init=function(){},r.prototype.destroy=function(){},r);function r(t){void 0===t&&(t={}),this.adapter=t}e.MDCFoundation=i,e.default=i},function(t,e,n){"use strict";var r=this&&this.__read\|\|function(t,e){var n="function"==typeof
2024-04-18 17:15:37 UTC	1320	IN	Data Raw: 2e 72 6f 6f 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 69 29 7d 2c 61 29 3b 66 75 6e 63 74 69 6f 6e 20 61 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 69 3d 32 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 69 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 74 68 69 73 2e 72 6f 6f 74 3d 74 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 6f 28 5b 5d 2c 72 28 6e 29 29 29 2c 74 68 69 73 2e 66 6f 75 6e 64 61 74 69 6f 6e 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 74 68 69 73 2e 67 65 74 44 65 66 61 75 6c 74 46 6f 75 6e 64 61 74 69 6f 6e 28 29 3a 65 2c 74 68 69 73 2e 66 6f 75 6e 64 61 74 69 6f 6e 2e 69 6e 69 74 28 29 2c 74 68 69 73 2e 69 6e 69 74 69 61 6c 53 79 6e 63 57 69 74 68 44 Data Ascii: .root.dispatchEvent(i)},a);function a(t,e){for(var n=[],i=2;i<arguments.length;i++)n[i-2]=arguments[i];this.root=t,this.initialize.apply(this,o([],r(n))),this.foundation=void 0===e?this.getDefaultFoundation():e,this.foundation.init(),this.initialSyncWithD
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 75 72 6e 20 73 28 65 2c 74 29 2c 65 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 4d 44 43 52 69 70 70 6c 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 63 2c 75 3d 6e 28 31 29 2c 6c 3d 6e 28 35 29 2c 64 3d 6e 28 33 29 2c 70 3d 6e 28 34 29 2c 68 3d 61 28 6e 28 31 39 29 29 2c 66 3d 28 63 3d 75 2e 4d 44 43 43 6f 6d 70 6f 6e 65 6e 74 2c 72 28 79 2c 63 29 2c 79 2e 61 74 74 61 63 68 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 7b 69 73 55 6e 62 6f 75 6e 64 65 64 3a 76 6f 69 64 20 30 7d 29 3b 76 61 72 20 6e 3d 6e 65 77 20 79 28 74 29 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 2e 69 73 55 6e 62 6f Data Ascii: urn s(e,t),e};Object.defineProperty(e,"__esModule",{value:!0}),e.MDCRipple=void 0;var c,u=n(1),l=n(5),d=n(3),p=n(4),h=a(n(19)),f=(c=u.MDCComponent,r(y,c),y.attachTo=function(t,e){void 0===e&&(e={isUnbounded:void 0});var n=new y(t);return void 0!==e.isUnbo
2024-04-18 17:15:37 UTC	8	IN	Data Raw: 66 75 6e 63 74 69 6f 6e Data Ascii: function
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 28 74 29 7b 72 65 74 75 72 6e 20 6e 2e 72 6f 6f 74 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 74 29 7d 2c 75 70 64 61 74 65 43 73 73 56 61 72 69 61 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 2e 72 6f 6f 74 2e 73 74 79 6c 65 2e 73 65 74 50 72 6f 70 65 72 74 79 28 74 2c 65 29 7d 7d 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 75 6e 62 6f 75 6e 64 65 64 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 74 68 69 73 2e 69 73 55 6e 62 6f 75 6e 64 65 64 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 69 73 55 6e 62 6f 75 6e 64 65 64 3d 42 6f 6f 6c 65 61 6e 28 74 29 2c 74 68 69 73 Data Ascii: (t){return n.root.classList.remove(t)},updateCssVariable:function(t,e){return n.root.style.setProperty(t,e)}}},Object.defineProperty(y.prototype,"unbounded",{get:function(){return Boolean(this.isUnbounded)},set:function(t){this.isUnbounded=Boolean(t),this
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 78 29 22 29 2c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 3b 76 61 72 20 69 3d 6e 2e 73 63 72 6f 6c 6c 57 69 64 74 68 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 2c 69 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 7c 7c 28 69 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 69 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 Data Ascii: x)"),document.documentElement.appendChild(n);var i=n.scrollWidth;return document.documentElement.removeChild(n),i}},function(t,e,n){"use strict";var i,r=this&&this.__extends\|\|(i=function(t,e){return(i=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 63 73 73 43 6c 61 73 73 65 73 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 79 2c 22 73 74 72 69 6e 67 73 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 73 74 72 69 6e 67 73 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 79 2c 22 6e 75 6d 62 65 72 73 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 2e 6e 75 6d 62 65 72 73 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e Data Ascii: ,{get:function(){return u.cssClasses},enumerable:!1,configurable:!0}),Object.defineProperty(y,"strings",{get:function(){return u.strings},enumerable:!1,configurable:!0}),Object.defineProperty(y,"numbers",{get:function(){return u.numbers},enumerable:!1,con
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 2c 74 68 69 73 2e 61 64 61 70 74 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 79 2e 63 73 73 43 6c 61 73 73 65 73 2e 46 47 5f 41 43 54 49 56 41 54 49 4f 4e 29 29 2c 74 68 69 73 2e 66 67 44 65 61 63 74 69 76 61 74 69 6f 6e 52 65 6d 6f 76 61 6c 54 69 6d 65 72 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 66 67 44 65 61 63 74 69 76 61 74 69 6f 6e 52 65 6d 6f 76 61 6c 54 69 6d 65 72 29 2c 74 68 69 73 2e 66 67 44 65 61 63 74 69 76 61 74 69 6f 6e 52 65 6d 6f 76 61 6c 54 69 6d 65 72 3d 30 2c 74 68 69 73 2e 61 64 61 70 74 65 72 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 79 2e 63 73 73 43 6c 61 73 73 65 73 2e 46 47 5f 44 45 41 43 54 49 56 41 54 49 4f 4e 29 29 3b 76 61 72 20 65 3d 79 2e 63 73 73 43 6c 61 73 73 65 73 2c 6e 3d 65 2e 52 4f 4f 54 2c 69 3d Data Ascii: ,this.adapter.removeClass(y.cssClasses.FG_ACTIVATION)),this.fgDeactivationRemovalTimer&&(clearTimeout(this.fgDeactivationRemovalTimer),this.fgDeactivationRemovalTimer=0,this.adapter.removeClass(y.cssClasses.FG_DEACTIVATION));var e=y.cssClasses,n=e.ROOT,i=
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 3b 69 66 28 74 29 7b 74 72 79 7b 66 6f 72 28 76 61 72 20 69 3d 73 28 64 29 2c 72 3d 69 2e 6e 65 78 74 28 29 3b 21 72 2e 64 6f 6e 65 3b 72 3d 69 2e 6e 65 78 74 28 29 29 7b 76 61 72 20 6f 3d 72 2e 76 61 6c 75 65 3b 74 68 69 73 2e 61 64 61 70 74 65 72 2e 72 65 67 69 73 74 65 72 49 6e 74 65 72 61 63 74 69 6f 6e 48 61 6e 64 6c 65 72 28 6f 2c 74 68 69 73 2e 61 63 74 69 76 61 74 65 48 61 6e 64 6c 65 72 29 7d 7d 63 61 74 63 68 28 74 29 7b 65 3d 7b 65 72 72 6f 72 3a 74 7d 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 72 26 26 21 72 2e 64 6f 6e 65 26 26 28 6e 3d 69 2e 72 65 74 75 72 6e 29 26 26 6e 2e 63 61 6c 6c 28 69 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 65 29 74 68 72 6f 77 20 65 2e 65 72 72 6f 72 7d 7d 74 68 69 73 2e 61 64 61 70 74 65 72 2e 69 73 55 6e 62 6f 75 6e 64 Data Ascii: ;if(t){try{for(var i=s(d),r=i.next();!r.done;r=i.next()){var o=r.value;this.adapter.registerInteractionHandler(o,this.activateHandler)}}catch(t){e={error:t}}finally{try{r&&!r.done&&(n=i.return)&&n.call(i)}finally{if(e)throw e.error}}this.adapter.isUnbound

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49753	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	2555	OUT	GET /js/app/login-page.js HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:37 UTC	733	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: application/javascript Content-Length: 3325 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da9169d4e1907d" Last-Modified: Thu, 18 Apr 2024 08:24:29 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-2 X-CDN: Imperva X-Iinfo: 55-23600544-23600584 NNNN CT(15 18 0) RT(1713460536862 155) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:37 UTC	719	IN	Data Raw: 76 61 72 20 4c 6f 67 69 6e 50 61 67 65 3b 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 4c 6f 67 69 6e 50 61 67 65 29 20 7b 0d 0a 20 20 20 20 76 61 72 20 56 69 65 77 4d 6f 64 65 6c 20 3d 20 2f 2a 2a 20 40 63 6c 61 73 73 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 56 69 65 77 4d 6f 64 65 6c 28 6d 6f 64 65 6c 44 61 74 61 2c 20 73 74 61 6e 64 61 72 64 4c 6f 67 69 6e 46 6f 72 6d 49 64 2c 20 75 6b 46 65 64 46 6f 72 6d 49 64 2c 20 69 64 53 75 66 66 69 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 5f 74 68 69 73 20 3d 20 74 68 69 73 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 74 61 6e 64 61 72 64 4c 6f 67 69 6e 46 6f 72 6d 49 64 20 3d 3d 3d 20 76 6f 69 64 20 30 29 20 Data Ascii: var LoginPage;(function (LoginPage) { var ViewModel = /** @class */ (function () { function ViewModel(modelData, standardLoginFormId, ukFedFormId, idSuffix) { var _this = this; if (standardLoginFormId === void 0)
2024-04-18 17:15:37 UTC	1452	IN	Data Raw: 46 6f 72 6d 49 64 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 73 68 6f 77 55 6b 46 65 64 65 72 61 74 69 6f 6e 4c 6f 67 69 6e 46 6f 72 6d 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 73 65 20 27 23 27 20 2b 20 5f 74 68 69 73 2e 73 74 61 6e 64 61 72 64 4c 6f 67 69 6e 46 6f 72 6d 49 64 3a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 74 68 69 73 2e 73 68 6f 77 53 74 61 6e 64 61 72 64 4c 6f 67 69 6e 46 6f 72 6d 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 72 65 61 6b 3b 0d 0a 20 20 20 20 20 20 20 Data Ascii: FormId: _this.showUkFederationLoginForm(); break; case '#' + _this.standardLoginFormId: _this.showStandardLoginForm(); break;
2024-04-18 17:15:37 UTC	1154	IN	Data Raw: 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 56 69 65 77 4d 6f 64 65 6c 2e 70 72 6f 74 6f 74 79 70 65 2e 61 6e 69 6d 61 74 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 24 65 6c 65 6d 65 6e 74 2c 20 73 68 6f 77 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 73 68 6f 77 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 65 6c 65 6d 65 6e 74 2e 73 68 6f 77 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 65 6c 65 6d 65 6e 74 2e 61 6e 69 6d 61 74 65 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 66 74 3a 20 30 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 35 30 Data Ascii: }; ViewModel.prototype.animate = function ($element, show) { if (show) { $element.show(); $element.animate({ opacity: 1, left: 0 }, 50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	1068	OUT	GET /latest/Gateway/Bundle/Gateway.css HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://auth.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
2024-04-18 17:15:38 UTC	927	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:38 GMT Content-Type: text/css Content-Length: 385007 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 Set-Cookie: visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; expires=Fri, 18 Apr 2025 06:39:23 GMT; HttpOnly; path=/; Domain=.us.brightmine.com Set-Cookie: nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; path=/; Domain=.us.brightmine.com x-incap-sess-cookie-hdr: BLrDRoUPej/QAEXq5iwwGTlVIWYAAAAApC8JOadgDHHi4N1dq1Dj8g== Set-Cookie: incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; path=/; Domain=.us.brightmine.com X-CDN: Imperva X-Iinfo: 61-43373743-43373864 NNNN CT(20 19 0) RT(1713460537007 224) q(0 0 0 2) r(0 0) U24
2024-04-18 17:15:38 UTC	525	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e Data Ascii: @charset "UTF-8";/! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.
2024-04-18 17:15:38 UTC	638	IN	Data Raw: 67 6e 3a 62 61 73 65 6c 69 6e 65 7d 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 68 65 69 67 68 74 3a 30 7d 5b 68 69 64 64 65 6e 5d 2c 74 65 6d 70 6c 61 74 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 Data Ascii: gn:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:700}dfn{font-style:italic}h1{font-size:2em;margin:.6
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 78 74 61 72 65 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 7b 63 75 72 73 6f 72 3a Data Ascii: xtarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-transform:none}button,html input[type=button],input[type=reset],input[type=submit]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 68 32 2c 68 33 2c 70 7b 6f 72 70 68 61 6e 73 3a 33 3b 77 69 64 6f 77 73 3a 33 7d 68 32 2c 68 33 7b 70 61 67 65 2d 62 72 65 61 6b 2d 61 66 74 65 72 3a 61 76 6f 69 64 7d 2e 6e 61 76 62 61 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 74 6e 3e 2e 63 61 72 65 74 2c 2e 64 72 6f 70 75 70 3e 2e 62 74 6e 3e 2e 63 61 72 65 74 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6c 61 62 65 6c 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 30 30 30 7d 2e 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 Data Ascii: 0%!important}h2,h3,p{orphans:3;widows:3}h2,h3{page-break-after:avoid}.navbar{display:none}.btn>.caret,.dropup>.btn>.caret{border-top-color:#000!important}.label{border:1px solid #000}.table{border-collapse:collapse!important}}*{-webkit-box-sizing:border-b
2024-04-18 17:15:38 UTC	16	IN	Data Raw: 66 6f 63 75 73 61 62 6c 65 3a 61 63 74 69 76 65 Data Ascii: focusable:active
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 2c 2e 73 72 2d 6f 6e 6c 79 2d 66 6f 63 75 73 61 62 6c 65 3a 66 6f 63 75 73 7b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 63 6c 69 70 3a 61 75 74 6f 7d 5b 72 6f 6c 65 3d 62 75 74 74 6f 6e 5d 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 68 31 2c 68 32 2c 68 33 2c 68 34 2c 68 35 2c 68 36 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 20 2e 73 6d 61 6c 6c 2c 2e 68 31 20 73 6d Data Ascii: ,.sr-only-focusable:focus{position:static;width:auto;height:auto;margin:0;overflow:visible;clip:auto}[role=button]{cursor:pointer}.h1,.h2,.h3,.h4,.h5,.h6,h1,h2,h3,h4,h5,h6{font-family:inherit;font-weight:500;line-height:1.1;color:inherit}.h1 .small,.h1 sm
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 6c 69 73 6d 2c 2e 74 65 78 74 2d 75 70 70 65 72 63 61 73 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 70 70 65 72 63 61 73 65 7d 2e 74 65 78 74 2d 63 61 70 69 74 61 6c 69 7a 65 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 63 61 70 69 74 61 6c 69 7a 65 7d 2e 74 65 78 74 2d 6d 75 74 65 64 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 7b 63 6f 6c 6f 72 3a 23 30 65 37 32 38 62 7d 61 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 3a 66 6f 63 75 73 2c 61 2e 74 65 78 74 2d 70 72 69 6d 61 72 79 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 39 34 63 35 64 7d 2e 74 65 78 74 2d 73 75 63 63 65 73 73 7b 63 6f 6c 6f 72 3a 23 32 35 33 66 31 65 7d 61 2e 74 65 78 74 2d 73 75 63 63 65 73 73 3a 66 6f 63 75 73 2c 61 2e 74 65 78 74 2d 73 75 63 Data Ascii: lism,.text-uppercase{text-transform:uppercase}.text-capitalize{text-transform:capitalize}.text-muted{color:#777}.text-primary{color:#0e728b}a.text-primary:focus,a.text-primary:hover{color:#094c5d}.text-success{color:#253f1e}a.text-success:focus,a.text-suc
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 74 3a 30 7d 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 61 66 74 65 72 2c 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 33 36 70 78 29 7b 2e 64 6c 2d 68 6f 72 69 7a 6f 6e 74 61 6c 20 64 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 36 30 70 78 3b 63 6c 65 61 72 3a 6c 65 66 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 Data Ascii: t:0}.dl-horizontal dd:after,.dl-horizontal dd:before{content:" ";display:table}.dl-horizontal dd:after{clear:both}@media (min-width:736px){.dl-horizontal dt{float:left;width:160px;clear:left;text-align:right;overflow:hidden;text-overflow:ellipsis;white-sp
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 63 37 32 35 34 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 39 66 32 66 34 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 32 70 78 20 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 2d 31 70 78 Data Ascii: {font-family:Menlo,Monaco,Consolas,"Courier New",monospace}code{padding:2px 4px;font-size:90%;color:#c7254e;background-color:#f9f2f4;border-radius:0}kbd{padding:2px 4px;font-size:90%;color:#fff;background-color:#333;border-radius:0;box-shadow:inset 0 -1px
2024-04-18 17:15:38 UTC	32	IN	Data Raw: 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 Data Ascii: ,.col-md-1,.col-md-10,.col-md-11

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49756	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:37 UTC	1129	OUT	GET /latest//Shared/Content/Images/Global/bm_logo.svg HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core
2024-04-18 17:15:38 UTC	930	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:37 GMT Content-Type: image/svg+xml Content-Length: 5426 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 Set-Cookie: visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; expires=Fri, 18 Apr 2025 06:39:23 GMT; HttpOnly; path=/; Domain=.us.brightmine.com Set-Cookie: nlbi_3085445=abktQocod1QD3Gqy6DoT2QAAAADveYpFcoKpd66NZBK+EWD1; path=/; Domain=.us.brightmine.com x-incap-sess-cookie-hdr: z92KVBR81FfQAEXq5iwwGTlVIWYAAAAA7UFjYYCyQDPmFOIKMwpfzA== Set-Cookie: incap_ses_1815_3085445=FAjBCseDYDzQAEXq5iwwGTlVIWYAAAAA4JYDPSIsffo+miwrKbu8LA==; path=/; Domain=.us.brightmine.com X-CDN: Imperva X-Iinfo: 54-20752090-20752114 NNNN CT(13 16 0) RT(1713460537008 214) q(0 0 0 2) r(0 0) U24
2024-04-18 17:15:38 UTC	522	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 7d 0a 09 2e 73 74 35 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 32 2e 31 30 36 38 2c 31 32 2e 31 30 36 38 3b 7d 0a 09 2e 73 74 36 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 32 3b 7d 0a 09 Data Ascii: ;stroke-width:0.75;stroke-miterlimit:10;}.st5{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12.1068,12.1068;}.st6{display:inline;fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12;}
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 36 63 32 2e 33 2c 34 2e 34 2c 36 2e 39 2c 37 2e 35 2c 31 32 2e 33 2c 37 2e 35 63 37 2e 37 2c 30 2c 31 33 2e 39 2d 36 2e 32 2c 31 33 2e 39 2d 31 33 2e 39 53 38 32 38 2e 32 2c 33 35 2e 36 2c 38 32 30 2e 34 2c 33 35 2e 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 3d 22 4d 37 30 34 2e 31 2c 34 30 2e 32 63 39 2e 36 2c 31 31 2c 32 30 2e 38 2c 32 35 2c 32 39 2e 31 2c 34 30 2e 36 63 31 2e 33 2d 30 2e 38 2c 32 2e 39 2d 31 2e 35 2c 34 2e 34 2d 31 2e 39 63 2d 38 2e 33 2d 31 35 2e 38 2d 31 39 2e 33 2d 32 39 2e 38 2d 33 30 2d 34 32 0a 09 09 43 37 30 36 2e 36 2c 33 38 2e 33 2c 37 30 35 2e 34 2c 33 39 2e 32 2c 37 30 34 2e 31 2c 34 30 2e 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 3d 22 4d 37 31 33 Data Ascii: 6c2.3,4.4,6.9,7.5,12.3,7.5c7.7,0,13.9-6.2,13.9-13.9S828.2,35.6,820.4,35.6z"/><path class="st12" d="M704.1,40.2c9.6,11,20.8,25,29.1,40.6c1.3-0.8,2.9-1.5,4.4-1.9c-8.3-15.8-19.3-29.8-30-42C706.6,38.3,705.4,39.2,704.1,40.2z"/><path class="st12" d="M713
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 2e 39 2c 31 34 2c 31 33 2e 39 73 31 34 2d 36 2e 32 2c 31 34 2d 31 33 2e 39 43 32 31 37 2e 36 2c 38 39 2e 34 2c 32 31 31 2e 35 2c 38 32 2e 39 2c 32 30 33 2e 36 2c 38 32 2e 39 7a 22 2f 3e 0a 09 3c 72 65 63 74 20 78 3d 22 31 39 32 2e 31 22 20 79 3d 22 31 32 32 2e 34 22 20 63 6c 61 73 73 3d 22 73 74 37 22 20 77 69 64 74 68 3d 22 32 32 2e 39 22 20 68 65 69 67 68 74 3d 22 31 30 33 2e 32 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 33 34 34 2e 32 2c 31 37 34 76 33 38 2e 31 63 30 2c 33 30 2e 32 2d 32 35 2e 32 2c 35 34 2e 37 2d 35 36 2e 32 2c 35 34 2e 37 63 2d 32 35 2c 30 2d 34 36 2e 32 2d 31 35 2e 38 2d 35 33 2e 35 2d 33 37 2e 37 68 32 34 2e 36 63 35 2e 36 2c 31 30 2e 34 2c 31 36 2e 34 2c 31 37 2e 31 2c 32 38 2e 39 2c 31 37 2e Data Ascii: .9,14,13.9s14-6.2,14-13.9C217.6,89.4,211.5,82.9,203.6,82.9z"/><rect x="192.1" y="122.4" class="st7" width="22.9" height="103.2"/><path class="st7" d="M344.2,174v38.1c0,30.2-25.2,54.7-56.2,54.7c-25,0-46.2-15.8-53.5-37.7h24.6c5.6,10.4,16.4,17.1,28.9,17.
2024-04-18 17:15:38 UTC	548	IN	Data Raw: 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 3d 22 4d 39 39 39 2c 31 39 33 2e 36 63 2d 38 2e 33 2c 32 30 2e 34 2d 32 38 2e 39 2c 33 35 2d 35 32 2e 39 2c 33 35 63 2d 33 31 2e 32 2c 30 2d 35 36 2e 36 2d 32 34 2e 35 2d 35 36 2e 36 2d 35 34 2e 37 73 32 35 2e 34 2d 35 34 2e 37 2c 35 36 2e 36 2d 35 34 2e 37 0a 09 09 63 33 31 2e 32 2c 30 2c 35 36 2e 36 2c 32 34 2e 35 2c 35 36 2e 36 2c 35 34 2e 37 63 30 2c 32 2e 37 2d 30 2e 32 2c 35 2e 32 2d 30 2e 36 2c 37 2e 37 68 2d 38 38 2e 36 63 33 2e 35 2c 31 35 2c 31 36 2e 37 2c 32 36 2e 34 2c 33 32 2e 37 2c 32 36 2e 34 63 31 31 2e 36 2c 30 2c 32 31 2e 36 2d 35 2e 38 2c 32 37 2e 35 2d 31 34 2e 32 4c 39 39 39 2c 31 39 33 2e 36 0a 09 09 4c 39 39 39 2c 31 39 33 2e 36 4c 39 39 39 2c 31 39 33 2e 36 Data Ascii: "/><path class="st12" d="M999,193.6c-8.3,20.4-28.9,35-52.9,35c-31.2,0-56.6-24.5-56.6-54.7s25.4-54.7,56.6-54.7c31.2,0,56.6,24.5,56.6,54.7c0,2.7-0.2,5.2-0.6,7.7h-88.6c3.5,15,16.7,26.4,32.7,26.4c11.6,0,21.6-5.8,27.5-14.2L999,193.6L999,193.6L999,193.6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49757	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:38 UTC	2562	OUT	GET /js/app/login-page-loader.js HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:38 UTC	732	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:38 GMT Content-Type: application/javascript Content-Length: 234 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da9169d4e19c6a" Last-Modified: Thu, 18 Apr 2024 08:24:29 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-2 X-CDN: Imperva X-Iinfo: 59-35328034-35328122 NNNY CT(14 18 0) RT(1713460537357 118) q(1 1 1 -1) r(1 2) U24
2024-04-18 17:15:38 UTC	234	IN	Data Raw: 76 61 72 20 74 68 69 73 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6c 6f 67 69 6e 50 61 67 65 4c 6f 61 64 65 72 53 63 72 69 70 74 27 29 3b 0d 0a 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 6e 65 77 20 4c 6f 67 69 6e 50 61 67 65 2e 56 69 65 77 4d 6f 64 65 6c 28 74 68 69 73 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 27 64 61 74 61 2d 6d 6f 64 65 6c 27 29 29 3b 0d 0a 7d 29 3b 0d 0a 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 6c 6f 67 69 6e 2d 70 61 67 65 2d 6c 6f 61 64 65 72 2e 6a 73 2e 6d 61 70 Data Ascii: var thisScriptElement = document.getElementById('loginPageLoaderScript');$(document).ready(function () { new LoginPage.ViewModel(thisScriptElement.getAttribute('data-model'));});//# sourceMappingURL=login-page-loader.js.map

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:38 UTC	2615	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=3&cb=1490197904 HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw
2024-04-18 17:15:38 UTC	139	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 152994
2024-04-18 17:15:38 UTC	1313	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 76 61 72 20 7a 3d 22 22 3b 76 61 72 20 62 3d 22 37 36 36 31 37 32 32 30 35 66 33 30 37 38 33 37 33 35 33 39 33 34 33 64 35 62 32 37 35 63 37 38 33 34 33 38 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 37 33 33 35 63 37 38 33 35 36 31 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 35 33 33 35 63 37 38 33 35 33 38 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 32 35 63 37 38 33 34 36 33 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 30 35 63 37 38 33 37 33 36 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 35 35 63 37 38 33 37 33 38 35 63 37 38 33 36 36 36 35 63 37 38 33 36 36 31 35 63 37 38 33 35 33 34 35 63 37 38 33 37 33 39 35 63 37 38 33 33 33 35 35 63 37 38 33 34 36 33 35 63 37 38 33 Data Ascii: (function() { var z="";var b="766172205f3078373539343d5b275c7834385c7833385c7834665c7837335c7835615c7836335c7834625c7835335c7835385c7834645c7834625c7834635c7837375c7837305c7837365c7834345c7837355c7837385c7836665c7836615c7835345c7837395c7833355c7834635c783
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 38 33 33 33 36 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 34 35 63 37 38 33 36 36 32 35 63 37 38 33 34 36 31 35 63 37 38 33 36 33 31 35 63 37 38 33 34 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 34 36 35 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 34 33 36 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 30 35 63 37 38 33 36 33 34 35 63 37 38 33 35 36 31 35 63 37 38 33 35 33 31 35 63 37 38 33 35 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 34 33 34 35 63 37 38 33 33 33 33 35 63 37 38 33 35 33 38 35 63 37 38 33 34 33 33 35 63 37 38 33 36 36 31 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 33 33 31 35 63 37 38 33 37 33 37 35 63 37 38 33 33 Data Ascii: 833365c7837375c7833345c7836625c7834615c7836315c7834315c7833645c783364272c275c7834655c7837335c7834665c7834365c7837375c7837305c7836345c7835615c7835315c7835315c7833645c783364272c275c7834345c7833335c7835385c7834335c7836615c7833385c7834665c7833315c7837375c7833
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 63 37 38 33 33 33 34 35 63 37 38 33 36 33 37 35 63 37 38 33 35 33 39 35 63 37 38 33 35 33 38 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 35 33 35 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 34 35 63 37 38 33 36 33 32 35 63 37 38 33 34 33 34 35 63 37 38 33 36 33 37 35 63 37 38 33 34 33 37 35 63 37 38 33 34 36 35 35 63 37 38 33 37 33 30 35 63 37 38 33 34 36 34 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 35 33 30 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 33 33 33 35 63 37 38 33 34 33 33 35 63 37 38 33 36 36 34 35 63 37 38 33 37 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 37 36 31 35 63 37 38 33 34 33 33 35 63 Data Ascii: c7833345c7836375c7835395c7835385c7836335c7834625c7835355c7837375c7833345c7836325c7834345c7836375c7834375c7834655c7837305c7834645c7837335c7834665c7835305c7837375c7837325c7833335c7834335c7836645c7837375c7833645c783364272c275c7837375c7837325c7837615c7834335c
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 34 33 38 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 35 33 34 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 35 33 35 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 34 33 34 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 30 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 33 33 35 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 36 36 32 35 63 37 38 33 33 33 35 35 63 37 38 33 35 33 37 35 63 37 38 33 34 33 35 35 63 37 38 33 36 33 33 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 35 35 63 37 38 33 36 36 31 Data Ascii: c7833645c783364272c275c7834385c7836335c7834625c7835345c7837375c7837325c7835355c783364272c275c7837375c7836665c7834345c7834345c7837305c7837335c7834665c783335272c275c7837375c7836665c7836625c7833355c7835375c7834355c7836335c783364272c275c7837375c7833355c783661
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 37 33 37 35 63 37 38 33 33 33 35 35 63 37 38 33 34 36 33 35 63 37 38 33 34 33 33 35 63 37 38 33 36 36 36 35 63 37 38 33 35 33 37 35 63 37 38 33 33 33 35 35 63 37 38 33 37 33 38 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 37 33 33 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 38 35 63 37 38 33 35 33 33 35 63 37 38 33 32 36 36 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 38 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 32 35 63 37 38 33 36 36 34 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 37 33 37 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 32 36 36 35 63 37 38 33 34 33 33 35 63 37 38 33 36 36 31 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 36 Data Ascii: 7375c7833355c7834635c7834335c7836665c7835375c7833355c7837385c7837375c7836665c7837335c783364272c275c7835385c7835335c7832665c7834335c7836385c7834645c7834625c7836645c7837375c7836665c7837375c783364272c275c7837375c7833365c7832665c7834335c7836615c7837335c783466
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 36 36 32 35 63 37 38 33 34 33 33 35 63 37 38 33 34 36 35 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 32 35 63 37 38 33 33 33 37 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 31 35 63 37 38 33 33 33 35 35 63 37 38 33 34 33 32 35 63 37 38 33 35 33 35 35 63 37 38 33 37 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 35 35 63 37 38 33 35 33 34 35 63 37 38 33 37 36 31 35 63 37 38 33 34 33 34 35 63 37 38 33 36 33 38 35 63 37 38 33 35 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 33 35 63 37 38 33 35 33 36 35 63 37 38 33 36 33 36 35 63 37 38 33 34 33 34 35 63 37 38 33 36 33 39 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 35 36 31 32 37 Data Ascii: 6625c7834335c7834655c7833385c7834625c783337272c275c7837375c7837315c7833355c7834325c7835355c7837375c7833645c783364272c275c7835355c7835345c7837615c7834345c7836385c7835315c7833645c783364272c275c7835335c7835365c7836365c7834345c7836395c7833385c7834665c78356127
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 38 33 34 36 34 35 63 37 38 33 34 36 36 35 63 37 38 33 37 33 39 32 37 32 63 32 37 35 63 37 38 33 34 33 36 35 63 37 38 33 36 36 32 35 63 37 38 33 36 33 36 35 63 37 38 33 34 33 34 35 63 37 38 33 36 36 31 35 63 37 38 33 37 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 34 33 31 35 63 37 38 33 36 36 35 35 63 37 38 33 34 33 34 35 63 37 38 33 34 33 33 35 63 37 38 33 37 33 34 35 63 37 38 33 37 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 34 33 37 35 63 37 38 33 36 33 39 35 63 37 38 33 37 33 36 35 63 37 38 33 34 33 33 35 63 37 38 33 37 33 31 35 63 37 38 33 34 33 34 35 63 37 38 33 36 36 36 35 63 37 38 33 36 33 37 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 34 33 36 Data Ascii: 834645c7834665c783739272c275c7834365c7836625c7836365c7834345c7836615c7837375c7833645c783364272c275c7834315c7836655c7834345c7834335c7837345c7837375c7833645c783364272c275c7834375c7836395c7837365c7834335c7837315c7834345c7836665c7836375c7837375c7836665c783436
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 33 33 39 35 63 37 38 33 35 33 30 35 63 37 38 33 34 33 35 35 63 37 38 33 37 33 37 35 63 37 38 33 35 33 38 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 39 35 63 37 38 33 35 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 36 33 31 35 63 37 38 33 36 36 31 35 63 37 38 33 37 36 31 35 63 37 38 33 34 33 34 35 63 37 38 33 36 36 31 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 34 36 34 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 37 33 30 35 63 37 38 33 33 33 30 35 63 37 38 33 35 33 31 35 63 37 38 33 35 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 34 33 38 35 63 37 38 33 35 33 33 35 63 37 38 33 35 33 35 35 63 37 38 33 32 36 36 32 37 32 63 32 37 35 63 Data Ascii: 3395c7835305c7834355c7837375c7835385c7834335c7836395c7835315c7833645c783364272c275c7836315c7836615c7837615c7834345c7836615c7833385c7834665c7834645c7837375c7837325c7837305c7833305c7835315c7835315c7833645c783364272c275c7834385c7835335c7835355c783266272c275c
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 33 33 30 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 36 36 32 35 63 37 38 33 37 33 35 35 63 37 38 33 35 33 38 35 63 37 38 33 34 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 35 33 38 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 38 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 34 33 33 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 36 33 38 35 63 37 38 33 36 33 39 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 34 33 35 35 63 37 38 33 36 33 32 35 63 37 38 33 35 33 35 35 63 37 38 33 33 33 31 35 63 37 38 33 36 33 32 35 63 37 38 33 34 Data Ascii: 836335c7834625c783330272c275c7837375c7833365c7836625c7837355c7835385c7834315c7833645c783364272c275c7837375c7837325c7835385c7834335c7836385c7837335c7834625c7834335c7837375c7836665c7836385c7836395c7837375c7836665c7834355c7836325c7835355c7833315c7836325c7834
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 37 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 32 35 63 37 38 33 34 33 31 35 63 37 38 33 35 33 30 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 38 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 32 35 63 37 38 33 36 33 31 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 35 35 63 37 38 33 33 33 39 35 63 37 38 33 34 33 38 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 30 35 63 37 38 33 37 36 31 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 38 35 63 37 38 33 37 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 33 35 63 37 38 33 34 33 33 35 63 37 38 33 33 33 37 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 32 35 63 37 38 33 34 33 31 35 63 37 38 33 35 33 30 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 38 35 63 37 38 33 37 33 33 Data Ascii: 75c7834345c7837325c7834315c7835305c7834335c7836385c7834645c7834625c7836315c7837375c7833355c7833395c7834385c7837375c7837305c7837615c7834335c7836385c7837375c7833645c783364272c275c7835335c7834335c7833375c7834345c7837325c7834315c7835305c7834335c7836385c783733
2024-04-18 17:15:39 UTC	1635	OUT	GET /img/Icon-eye-fill.png HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.us.brightmine.com/css/custom_site.css?v=aJorWfNIR3ggUCXMiS10jSg3fhJeMPZHUa8gWgyHP9I Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:38 UTC	1118	OUT	GET /latest//Shared/Content/Images/Global/bm_logo.svg HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=abktQocod1QD3Gqy6DoT2QAAAADveYpFcoKpd66NZBK+EWD1; incap_ses_1815_3085445=FAjBCseDYDzQAEXq5iwwGTlVIWYAAAAA4JYDPSIsffo+miwrKbu8LA==
2024-04-18 17:15:38 UTC	428	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:38 GMT Content-Type: image/svg+xml Content-Length: 5426 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 X-CDN: Imperva X-Iinfo: 59-35328146-35328238 NNNY CT(13 18 0) RT(1713460537620 231) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:38 UTC	1024	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 31 2e 38 37 34 39 2c 31 31 2e 38 37 34 39 3b 7d 0a 09 2e 73 74 31 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 32 2e 32 31 35 38 2c 31 32 2e 32 31 35 38 3b 7d 0a 09 2e 73 74 31 32 7b 66 69 6c 6c 3a 23 36 30 36 36 36 37 3b 7d 0a 09 2e 73 74 31 33 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 Data Ascii: stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.8749,11.8749;}.st11{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12.2158,12.2158;}.st12{fill:#606667;}.st13{fill:none;stroke:#606667;stroke
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 2d 30 2e 32 2c 32 2e 35 2d 30 2e 32 2c 33 2e 36 0a 09 09 63 30 2e 32 2c 31 32 2e 32 2c 31 31 2c 32 31 2e 36 2c 32 33 2e 37 2c 31 39 2e 37 63 33 2e 33 2d 30 2e 36 2c 36 2e 35 2d 31 2e 39 2c 39 2d 33 2e 38 63 31 2e 33 2d 31 2c 32 2e 35 2d 32 2e 31 2c 33 2e 35 2d 33 2e 33 63 31 2e 37 2d 32 2e 31 2c 33 2e 31 2d 34 2e 36 2c 33 2e 39 2d 37 2e 35 63 30 2e 32 2d 30 2e 38 2c 30 2e 34 2d 31 2e 35 2c 30 2e 36 2d 32 2e 33 0a 09 09 63 30 2e 32 2d 30 2e 38 2c 30 2e 32 2d 31 2e 37 2c 30 2e 32 2d 32 2e 35 43 37 30 39 2e 35 2c 38 2e 35 2c 36 39 38 2e 35 2d 31 2e 37 2c 36 38 35 2e 34 2c 30 2e 32 4c 36 38 35 2e 34 2c 30 2e 32 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 31 31 32 2e 32 2c 31 37 34 63 30 2c 33 30 2e 32 2d 32 35 2e 32 2c Data Ascii: -0.2,2.5-0.2,3.6c0.2,12.2,11,21.6,23.7,19.7c3.3-0.6,6.5-1.9,9-3.8c1.3-1,2.5-2.1,3.5-3.3c1.7-2.1,3.1-4.6,3.9-7.5c0.2-0.8,0.4-1.5,0.6-2.3c0.2-0.8,0.2-1.7,0.2-2.5C709.5,8.5,698.5-1.7,685.4,0.2L685.4,0.2z"/><path class="st7" d="M112.2,174c0,30.2-25.2,
2024-04-18 17:15:38 UTC	1452	IN	Data Raw: 34 4c 33 32 31 2e 39 2c 31 37 34 0a 09 09 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 34 36 34 2c 32 32 35 2e 36 68 2d 32 32 2e 39 76 2d 35 36 2e 38 63 30 2d 31 35 2e 38 2d 31 32 2e 35 2d 32 38 2e 39 2d 32 37 2e 39 2d 32 38 2e 39 73 2d 32 37 2e 39 2c 31 33 2e 31 2d 32 37 2e 39 2c 32 38 2e 39 76 35 36 2e 38 68 2d 32 32 2e 39 56 38 38 2e 31 68 32 32 2e 39 76 34 31 2e 38 0a 09 09 63 37 2e 35 2d 36 2e 37 2c 31 37 2e 31 2d 31 30 2e 38 2c 32 37 2e 39 2d 31 30 2e 38 63 32 38 2e 31 2c 30 2c 35 30 2e 38 2c 32 32 2e 37 2c 35 30 2e 38 2c 35 30 2e 38 56 32 32 35 2e 36 4c 34 36 34 2c 32 32 35 2e 36 7a 22 2f 3e 0a 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 35 33 31 2e 34 2c 32 32 38 2e 35 68 2d 32 2e 39 Data Ascii: 4L321.9,174z"/><path class="st7" d="M464,225.6h-22.9v-56.8c0-15.8-12.5-28.9-27.9-28.9s-27.9,13.1-27.9,28.9v56.8h-22.9V88.1h22.9v41.8c7.5-6.7,17.1-10.8,27.9-10.8c28.1,0,50.8,22.7,50.8,50.8V225.6L464,225.6z"/><path class="st7" d="M531.4,228.5h-2.9
2024-04-18 17:15:38 UTC	46	IN	Data Raw: 39 6c 2d 33 2e 35 2d 31 30 2e 38 76 31 30 2e 38 48 31 30 30 37 2e 35 7a 22 2f 3e 0a 09 3c 2f 67 3e 0a 3c 2f 67 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: 9l-3.5-10.8v10.8H1007.5z"/></g></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49761	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:39 UTC	1399	OUT	GET /latest/Shared/Content/Images/LocaleSelector/Flags.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets.us.brightmine.com/latest/Gateway/Bundle/Gateway.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:39 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:39 GMT Content-Type: image/png Content-Length: 1574 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: XAcFQLqbF1/QAEXq5iwwGTpVIWYAAAAATQSjIrATwrooJ10N6xDQ1g== X-CDN: Imperva X-Iinfo: 59-35328521-35328606 NNNY CT(14 18 0) RT(1713460538679 222) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:39 UTC	945	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 69 08 03 00 00 00 72 3a e1 d1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 03 00 50 4c 54 45 00 00 00 1d 2d 7c dc de e8 a0 a7 cb ce 50 50 e4 62 62 86 8c af fb e4 e4 d8 58 58 e3 64 64 da 0f 0f 26 36 84 d6 c7 c7 e3 48 48 bb c0 d8 ea 78 78 9c 5b 5b cd cf dd 19 28 74 ed 8a 8a 0b 1c 77 aa b0 cf 0c 1b 69 e9 c6 c6 61 6a 97 6a 73 aa a6 ad ce df e1 ec 98 9f c6 7d 85 ab 2b 3a 8a ed df df a7 9f 9f 63 6e a8 f8 e1 e1 c6 66 66 f9 d8 d8 db b7 b7 e4 77 77 21 30 81 d8 52 52 e7 60 60 8a 91 b1 6e 79 ac fc ed ed 5a 64 99 d6 69 69 12 21 6f e8 e9 eb e4 6a 6a f8 cf cf e4 51 51 e8 c0 c0 16 28 7f c8 ca d9 d4 d5 d8 e2 e3 ea b7 0d 0d 8b 92 b6 ac b2 d1 c8 c9 d0 0e 1f 77 d4 11 11 d3 0c 0c 11 22 7c f6 c3 c3 Data Ascii: PNGIHDR.ir:gAMAaPLTE-\|PPbbXXdd&6HHxx[[(twiajjs}+:cnffww!0RR``nyZdii!ojjQQ(w"\|
2024-04-18 17:15:39 UTC	629	IN	Data Raw: 80 f5 bc f3 b2 fb dd 52 88 0e 68 77 62 1d 4a d4 20 96 c8 8a f2 c0 7a 5a fa a5 d5 4b 53 b7 05 06 64 44 04 1e d0 fc 46 a5 96 17 83 75 19 5f e9 45 24 20 bb c8 57 48 02 f9 07 02 c7 4a 64 40 dd 26 2d dd 2a 25 20 75 c0 46 c3 8c 95 de 31 3a d3 6d 80 7a d5 28 ec 09 ea 4d be 40 66 93 fd 10 dd e9 55 40 bd 20 2d dd 17 5d 90 1a 81 4c cd 38 82 68 74 a6 17 00 f5 ac 22 99 44 4c d0 a0 36 93 05 d4 33 9d f2 e5 22 35 0d ed de 9d 32 81 3a ce 73 e3 ca 30 1a 32 ae 1b 0f 07 ea 85 e1 91 02 d7 32 1a ae 82 c8 f0 42 a0 9e 1d 14 9c c8 2b a7 c1 4b 0c 0e ca 06 ea b9 9e ee 15 00 dc 3d 73 81 7a 4e 35 84 1c e6 b6 32 30 d4 63 aa a0 80 23 f5 9d c5 c0 26 bd e7 4a b5 e0 6a 35 4e 9d f1 a3 67 dc 1a b7 16 1c a9 98 fe c5 b0 89 7a df 06 a3 28 4a a8 54 04 8a ee 39 d7 f7 47 eb b0 0f 57 c0 7a 4e 8b Data Ascii: RhwbJ zZKSdDFu_E$ WHJd@&-*% uF1:mz(M@fU@ -]L8ht"DL63"52:s022B+K=szN520c#&Jj5Ngz(JT9GWzN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:39 UTC	1123	OUT	GET /latest/Shared/Content/Images/LocaleSelector/Flags.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:40 UTC	422	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:40 GMT Content-Type: image/png Content-Length: 1574 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 X-CDN: Imperva X-Iinfo: 47-4816163-4816174 NNNY CT(14 17 0) RT(1713460539164 217) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:40 UTC	1030	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2e 00 00 00 69 08 03 00 00 00 72 3a e1 d1 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 03 00 50 4c 54 45 00 00 00 1d 2d 7c dc de e8 a0 a7 cb ce 50 50 e4 62 62 86 8c af fb e4 e4 d8 58 58 e3 64 64 da 0f 0f 26 36 84 d6 c7 c7 e3 48 48 bb c0 d8 ea 78 78 9c 5b 5b cd cf dd 19 28 74 ed 8a 8a 0b 1c 77 aa b0 cf 0c 1b 69 e9 c6 c6 61 6a 97 6a 73 aa a6 ad ce df e1 ec 98 9f c6 7d 85 ab 2b 3a 8a ed df df a7 9f 9f 63 6e a8 f8 e1 e1 c6 66 66 f9 d8 d8 db b7 b7 e4 77 77 21 30 81 d8 52 52 e7 60 60 8a 91 b1 6e 79 ac fc ed ed 5a 64 99 d6 69 69 12 21 6f e8 e9 eb e4 6a 6a f8 cf cf e4 51 51 e8 c0 c0 16 28 7f c8 ca d9 d4 d5 d8 e2 e3 ea b7 0d 0d 8b 92 b6 ac b2 d1 c8 c9 d0 0e 1f 77 d4 11 11 d3 0c 0c 11 22 7c f6 c3 c3 Data Ascii: PNGIHDR.ir:gAMAaPLTE-\|PPbbXXdd&6HHxx[[(twiajjs}+:cnffww!0RR``nyZdii!ojjQQ(w"\|
2024-04-18 17:15:40 UTC	544	IN	Data Raw: 09 ea 4d be 40 66 93 fd 10 dd e9 55 40 bd 20 2d dd 17 5d 90 1a 81 4c cd 38 82 68 74 a6 17 00 f5 ac 22 99 44 4c d0 a0 36 93 05 d4 33 9d f2 e5 22 35 0d ed de 9d 32 81 3a ce 73 e3 ca 30 1a 32 ae 1b 0f 07 ea 85 e1 91 02 d7 32 1a ae 82 c8 f0 42 a0 9e 1d 14 9c c8 2b a7 c1 4b 0c 0e ca 06 ea b9 9e ee 15 00 dc 3d 73 81 7a 4e 35 84 1c e6 b6 32 30 d4 63 aa a0 80 23 f5 9d c5 c0 26 bd e7 4a b5 e0 6a 35 4e 9d f1 a3 67 dc 1a b7 16 1c a9 98 fe c5 b0 89 7a df 06 a3 28 4a a8 54 04 8a ee 39 d7 f7 47 eb b0 0f 57 c0 7a 4e 8b 2d e6 cd 63 47 0e f5 b9 81 90 1a 0d 89 2c bb 37 e9 42 ec 09 f3 09 fd c1 39 93 c5 7f 7b 77 6b cb cb 31 93 8f 6f a0 74 9f 85 ed db 74 3c bb 7d 77 63 3e 38 b0 25 7c a5 d4 b0 0f 39 e6 59 9c 1e a5 5f 8d eb ba 63 67 d3 db 52 25 5f 02 ce f7 12 0c 27 6a 3a 46 ab Data Ascii: M@fU@ -]L8ht"DL63"52:s022B+K=szN520c#&Jj5Ngz(JT9GWzN-cG,7B9{wk1ott<}wc>8%\|9Y_cgR%_'j:F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49763	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:39 UTC	1635	OUT	GET /img/Icon-eye-fill.png HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.us.brightmine.com/css/custom_site.css?v=aJorWfNIR3ggUCXMiS10jSg3fhJeMPZHUa8gWgyHP9I Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:40 UTC	719	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:40 GMT Content-Type: image/png Content-Length: 850 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b8959a0d2" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-1 X-CDN: Imperva X-Iinfo: 58-31083886-31083974 NNNY CT(14 15 0) RT(1713460539186 234) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:40 UTC	733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 e7 49 44 41 54 78 01 ed 54 4f 4f 13 41 14 7f 6f b6 a5 da 96 3f ba 6d 53 95 aa 94 4a 9b 48 22 09 17 7a 55 8e 70 f0 e2 41 af 9e 3c e8 c1 8b 5f c1 03 57 bd f8 09 bc 96 8b 89 7a f1 b0 26 40 52 22 c6 ee 82 10 69 2b 31 d9 45 4c 49 a1 65 77 c6 37 bb dd b2 a8 80 7a e1 c2 4b 26 33 f9 e5 bd df 9b f7 17 e0 54 4e 5a f0 38 85 f1 f1 f1 e8 e6 f6 76 86 21 aa dc 06 55 62 0e e3 4d 05 b1 b6 a6 eb fa 7f 3b 28 14 0a ea 2e e7 93 20 70 02 40 44 0f 31 6f 02 f0 c5 33 8a 52 aa 54 2a d6 5f 3b b8 9c cb df 61 28 6e ed 2b 61 4d 00 Data Ascii: PNGIHDRw=pHYssRGBgAMAaIDATxTOOAo?mSJH"zUpA<_Wz&@R"i+1ELIew7zK&3TNZ8v!UbM;(. p@D1o3RT*_;a(n+aM
2024-04-18 17:15:40 UTC	117	IN	Data Raw: c3 99 10 86 8a fe d4 cb 41 6b d3 a0 05 1b e2 8f ab 22 7b ad 30 c5 c1 eb 02 df 50 30 30 d1 c1 9a 57 12 47 45 60 99 e0 aa 90 53 4f d3 fd f2 57 ae 43 97 dd fe 1a 10 37 8e 5c 76 28 de d3 60 be ae ff cb b2 fb 2d 22 4a 8f 4d fd ae 74 5a 52 09 81 c9 01 ac dd 58 ac f6 75 61 e1 d8 56 3e 95 93 95 9f e8 64 61 ae a1 ba 21 95 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Ak"{0P00WGE`SOWC7\v(`-"JMtZRXuaV>da!IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49765	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:40 UTC	2840	OUT	GET /favicon.ico?v=2 HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://auth.us.brightmine.com/Account/Login?ReturnUrl=%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dcore_consumer%26redirect_uri%3Dhttps%253A%252F%252Fhrcenter.us.brightmine.com%252F%26response_type%3Dcode%2520id_token%26scope%3Dopenid%2520profile%2520email%2520offline_access%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcorecms_content_bridge%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fhotline_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserinsight_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Feventtrack_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fheaderfooter_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fuserpersonalisation_api%2520https%253A%252F%252Fxperthr.systems%252Fscopes%252Fcustom_claims%26state%3DOpenIdConnect.AuthenticationProperties%253DoKlym39r0V2SYWy7EZTP_jBXrU4heqYMYQNXyhFCYAOCy4kuKyzwW9vzugfMVn_Y757hLbjirUlq6tJADEniTVdEIYn7sWq4TWfEB0SEWuGvk1IUiWSBn19Dq6qtxQLLYrNlwiBVl81yI4JtORnZu-B5NgZhEvFl2AHRU4RTTRSwMb7Tnh9ljpzuxy-it08__uazNwSu1gtpitVmfEwSxCxsMnEQPnNBoWqubZgkjn9M3iHH8pzixECZYk9heggy1faNww%26response_mode%3Dform_post%26nonce%3D638490573364314818.M2EyMjRhMTQtOWQ3Ni00Yjk3LTkxYTEtMzBhOTU3YzVkOTZiYzgwZTZiMzctZjUwMS00YTdiLWIyYzctNTNkMDJiYjU5Y2Jh%26x-client-SKU%3DID_NET461%26x-client-ver%3D5.3.0.0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:40 UTC	724	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:40 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b89599fae" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-1 X-CDN: Imperva X-Iinfo: 62-46602197-46602273 NNNY CT(13 20 0) RT(1713460539673 115) q(1 1 1 -1) r(1 2) U24
2024-04-18 17:15:40 UTC	728	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ff 0c 00 80 ff 2a 00 Data Ascii: h6 (00 h&( *
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: ff 67 00 80 ff 04 00 83 ff 52 00 82 ff ff 00 82 ff ff 00 82 ff ff 13 80 e5 44 68 67 60 a4 67 67 61 7c 67 67 60 4a 61 61 61 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 ff 3c 00 82 ff ff 00 82 ff ff 00 82 ff fb 00 87 ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 61 00 83 ff a6 00 83 ff 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: gRDhg`gga\|gg`Jaaa<"aN
2024-04-18 17:15:40 UTC	1320	IN	Data Raw: ff ff 00 83 ff f2 00 80 ff 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ff db 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff f6 00 99 ff 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 6d 00 82 ff ff 00 82 ff ff 00 Data Ascii: m
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: ff 05 00 82 ff e4 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff 9b 00 00 00 00 00 00 00 00 00 00 00 00 00 86 ff 28 00 83 ff b3 00 83 ff f1 00 82 ff eb 00 83 ff 9a 00 86 ff 13 67 67 61 2a 66 66 66 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6b 5e 5e 13 69 65 62 49 67 67 61 83 68 66 61 c0 68 67 60 f6 67 66 60 fe 67 66 60 d5 68 66 61 91 67 67 5f 43 00 00 00 00 00 82 ff 37 00 82 ff ce 00 82 ff f1 00 83 ff ab 00 87 ff 11 00 00 00 00 00 00 00 00 00 84 ff 1d 00 82 ff eb 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff cd 00 80 ff 06 00 00 00 00 00 00 00 01 66 66 66 14 6a 66 62 41 67 67 60 72 68 67 60 a4 68 67 61 d8 67 66 60 fd 67 66 60 fc 68 66 60 d1 68 67 60 95 65 65 60 58 66 66 66 19 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: (gga*fffk^^iebIggahfahg`gf`gf`hfagg_C7fffjfbAgg`rhg`hgagf`gf`hf`hg`ee`Xfff
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ff d0 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff fe 00 82 ff 83 00 55 ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: U
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6a 65 60 35 67 66 60 df 67 66 60 f1 68 65 60 5d 80 80 80 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 55 55 03 68 65 5f 5b 67 66 60 cf 67 66 60 fd 67 66 60 d9 68 66 60 78 66 66 5d 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6d 6d 5b 0e 68 66 62 a2 67 66 60 fd 68 67 61 ae 74 5d 5d 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 Data Ascii: je`5gf`gf`he`]UUUhe_[gf`gf`gf`hf`xff]mm[hfbgf`hgat]]U
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: ff 03 00 82 ff b9 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff cb 00 80 ff 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 99 ff 05 00 84 ff 38 00 83 ff 9e 00 83 ff e2 00 83 ff f0 00 83 ff d3 00 84 ff 7c 00 83 ff 21 00 80 ff 02 6a 61 61 1d 69 65 62 49 55 55 55 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 40 40 04 66 66 66 0f 64 64 5b 1c 67 67 62 2f 66 66 61 64 68 66 62 a7 68 67 61 e7 67 66 60 fe 67 66 60 fe 67 66 60 f4 67 66 60 e6 67 67 61 d0 68 68 61 8c 69 69 62 22 00 00 00 00 00 86 ff 26 00 82 ff c6 00 82 ff f4 00 82 ff fb 00 82 ff f3 00 83 ff d3 00 85 ff 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ff 02 00 82 ff 6e 00 83 ff e4 00 82 ff ff 00 Data Ascii: 8\|!jaaiebIUUU@@@fffdd[ggb/ffadhfbhgagf`gf`gf`gf`ggahhaiib"&.n
2024-04-18 17:15:40 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 50 00 82 ff fd 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff d8 00 87 ff 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49766	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:40 UTC	1327	OUT	GET /img/Icon-eye-fill.png HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:40 UTC	719	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:40 GMT Content-Type: image/png Content-Length: 850 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b8959a0d2" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-2 X-CDN: Imperva X-Iinfo: 60-39157656-39157755 NNNY CT(13 19 0) RT(1713460539792 225) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:40 UTC	733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 02 e7 49 44 41 54 78 01 ed 54 4f 4f 13 41 14 7f 6f b6 a5 da 96 3f ba 6d 53 95 aa 94 4a 9b 48 22 09 17 7a 55 8e 70 f0 e2 41 af 9e 3c e8 c1 8b 5f c1 03 57 bd f8 09 bc 96 8b 89 7a f1 b0 26 40 52 22 c6 ee 82 10 69 2b 31 d9 45 4c 49 a1 65 77 c6 37 bb dd b2 a8 80 7a e1 c2 4b 26 33 f9 e5 bd df 9b f7 17 e0 54 4e 5a f0 38 85 f1 f1 f1 e8 e6 f6 76 86 21 aa dc 06 55 62 0e e3 4d 05 b1 b6 a6 eb fa 7f 3b 28 14 0a ea 2e e7 93 20 70 02 40 44 0f 31 6f 02 f0 c5 33 8a 52 aa 54 2a d6 5f 3b b8 9c cb df 61 28 6e ed 2b 61 4d 00 Data Ascii: PNGIHDRw=pHYssRGBgAMAaIDATxTOOAo?mSJH"zUpA<_Wz&@R"i+1ELIew7zK&3TNZ8v!UbM;(. p@D1o3RT*_;a(n+aM
2024-04-18 17:15:40 UTC	117	IN	Data Raw: c3 99 10 86 8a fe d4 cb 41 6b d3 a0 05 1b e2 8f ab 22 7b ad 30 c5 c1 eb 02 df 50 30 30 d1 c1 9a 57 12 47 45 60 99 e0 aa 90 53 4f d3 fd f2 57 ae 43 97 dd fe 1a 10 37 8e 5c 76 28 de d3 60 be ae ff cb b2 fb 2d 22 4a 8f 4d fd ae 74 5a 52 09 81 c9 01 ac dd 58 ac f6 75 61 e1 d8 56 3e 95 93 95 9f e8 64 61 ae a1 ba 21 95 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Ak"{0P00WGE`SOWC7\v(`-"JMtZRXuaV>da!IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49767	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:41 UTC	1321	OUT	GET /favicon.ico?v=2 HTTP/1.1 Host: auth.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; .AspNetCore.Culture=c%3Den-US%7Cuic%3Den-US; .AspNetCore.Antiforgery.VCfN2glCGW0=CfDJ8EAhmv4MAzVMl449RAoCcMdkDRfBB7Nd0rmBZmwN3MS9UBuNwchfBRF4MvkIprgss69fGGyL2RRlNoKylEF6DBbNYGo-sTzsM8OJYdR2PDpEJA-SMdFI87R9fdZhOqWzrp19BeBTnJabNX7czuTf5Bw; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:41 UTC	724	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:41 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Accept-Ranges: bytes Content-Security-Policy: default-src 'self' 'unsafe-inline'; style-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net 'unsafe-inline';font-src 'self' assets.us.brightmine.com use.typekit.net p.typekit.net;img-src 'self' data: assets.us.brightmine.com;frame-src 'self' https://hrcenter.us.brightmine.com; Etag: "1da8f5b89599fae" Last-Modified: Mon, 15 Apr 2024 17:37:07 GMT Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-Web-Server: Gateway-1 X-CDN: Imperva X-Iinfo: 59-35329085-35329166 NNNY CT(13 18 0) RT(1713460540247 213) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:41 UTC	728	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ff 0c 00 80 ff 2a 00 Data Ascii: h6 (00 h&( *
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: ff 67 00 80 ff 04 00 83 ff 52 00 82 ff ff 00 82 ff ff 00 82 ff ff 13 80 e5 44 68 67 60 a4 67 67 61 7c 67 67 60 4a 61 61 61 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 ff 3c 00 82 ff ff 00 82 ff ff 00 82 ff fb 00 87 ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 61 00 83 ff a6 00 83 ff 4e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: gRDhg`gga\|gg`Jaaa<"aN
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: ff ff 00 83 ff f2 00 80 ff 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ff db 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff f6 00 99 ff 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 6d 00 82 ff ff 00 82 ff ff 00 Data Ascii: m
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: ff 37 00 82 ff ce 00 82 ff f1 00 83 ff ab 00 87 ff 11 00 00 00 00 00 00 00 00 00 84 ff 1d 00 82 ff eb 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff cd 00 80 ff 06 00 00 00 00 00 00 00 01 66 66 66 14 6a 66 62 41 67 67 60 72 68 67 60 a4 68 67 61 d8 67 66 60 fd 67 66 60 fc 68 66 60 d1 68 67 60 95 65 65 60 58 66 66 66 19 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ff 8d 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff 58 65 65 5e 26 68 66 60 e5 67 66 60 fe 67 66 60 fe 67 66 60 df 67 67 61 ad 69 67 61 79 65 65 62 44 66 66 66 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 7fffjfbAgg`rhg`hgagf`gf`hf`hg`ee`XfffXee^&hf`gf`gf`gf`ggaigayeebDfff
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: 00 00 00 82 ff d0 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff fe 00 82 ff 83 00 55 ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 86 00 83 ff fe 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff f1 00 82 ff 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: UV
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6d 6d 5b 0e 68 66 62 a2 67 66 60 fd 68 67 61 ae 74 5d 5d 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 55 55 03 67 67 60 25 68 68 61 a0 67 66 60 fe 67 66 60 f7 67 67 60 da 66 66 60 7a 68 68 5d 16 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff 01 00 92 ff 07 00 80 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: mm[hfbgf`hgat]]UUUgg`%hhagf`gf`gg`ff`zhh]
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: 00 00 40 40 40 04 66 66 66 0f 64 64 5b 1c 67 67 62 2f 66 66 61 64 68 66 62 a7 68 67 61 e7 67 66 60 fe 67 66 60 fe 67 66 60 f4 67 66 60 e6 67 67 61 d0 68 68 61 8c 69 69 62 22 00 00 00 00 00 86 ff 26 00 82 ff c6 00 82 ff f4 00 82 ff fb 00 82 ff f3 00 83 ff d3 00 85 ff 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ff 02 00 82 ff 6e 00 83 ff e4 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff fd 00 82 ff ca 00 84 ff 3c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 55 55 03 6a 6a 61 1d 69 65 61 3f 68 65 60 62 66 66 60 87 68 66 60 ac 67 66 60 d2 67 66 60 f4 67 66 60 ff 67 66 60 fd 67 66 60 e1 67 67 60 b7 67 67 60 8d 68 68 60 60 67 67 62 34 74 5d 5d 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @@@fffdd[ggb/ffadhfbhgagf`gf`gf`gf`ggahhaiib"&.n<UUUjjaiea?he`bff`hf`gf`gf`gf`gf`gf`gg`gg`hh``ggb4t]]
2024-04-18 17:15:41 UTC	1452	IN	Data Raw: ff 50 00 82 ff fd 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff d8 00 87 ff 11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 84 ff 78 00 82 ff ee 00 83 ff fe 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff fc 00 82 ff d5 00 82 ff 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: Px3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49769	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:46 UTC	1784	OUT	GET /help-and-support/keep-me-logged-in/16393/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:46 UTC	387	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:46 GMT Content-Type: text/html; charset=utf-8 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-1 X-CDN: Imperva Transfer-Encoding: chunked X-Iinfo: 47-4816570-4816636 NNNY CT(15 16 0) RT(1713460545584 215) q(0 1 1 -1) r(1 3) U24
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 35 34 38 34 0d 0a 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 0d 0a 20 20 20 20 63 6c 61 73 73 3d 22 6e 6f 2d 73 63 72 69 70 74 20 61 72 74 69 63 6c 65 2d 70 61 67 65 20 6e 6f 2d 73 69 64 65 62 61 72 20 78 68 72 2d 68 65 6c 70 20 63 68 72 6f 6d 65 2d 62 74 20 31 32 33 2d 62 76 20 22 0d 0a 20 20 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 20 64 61 74 61 2d 78 70 65 72 74 68 72 2d 70 61 67 65 6e 61 6d 65 3d 22 41 72 74 69 63 6c 65 50 61 67 65 22 3e 0d 0a 20 20 20 20 0a 20 20 20 20 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 Data Ascii: 5484<!DOCTYPE html><html class="no-script article-page no-sidebar xhr-help chrome-bt 123-bv " lang="en-US"><head id="head" data-xperthr-pagename="ArticlePage"> <meta charset="utf-8"><meta http-equiv="X-UA-Compa
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 6c 6c 2f 42 75 6e 64 6c 65 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 66 75 6c 6c 2e 6d 69 6e 2e 63 73 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 74 68 65 6d 65 2d 66 75 6c 6c 2e 6d 69 6e 2e 63 73 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 21 49 45 5d 3e 3c Data Ascii: ll/Bundle/bootstrap/css/bootstrap-full.min.css?v=2.0.769" /> <link rel="stylesheet" type="text/css" href="//assets.us.brightmine.com/latest/Full/Bundle/bootstrap/css/bootstrap-theme-full.min.css?v=2.0.769" /> <![endif]--> ...[if !IE]><
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 74 73 2f 53 68 61 72 65 64 2f 43 6c 69 65 6e 74 53 69 64 65 43 6f 6e 66 69 67 2f 6e 67 2d 61 70 70 2d 73 65 74 74 69 6e 67 73 2e 6a 73 3f 76 3d 36 39 35 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 73 68 61 72 65 41 73 73 65 74 73 4a 73 2e 6d 69 6e 2e 6a 73 3f 76 3d 32 2e 30 2e 37 36 39 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e Data Ascii: ts/Shared/ClientSideConfig/ng-app-settings.js?v=6951"></script> <script type="text/javascript" src="//assets.us.brightmine.com/latest/Full/Bundle/shareAssetsJs.min.js?v=2.0.769"></script> <script type="text/javascript" src="//assets.us.brightmin
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 22 2f 73 65 61 72 63 68 2f 41 75 74 6f 73 75 67 67 65 73 74 2f 3f 50 61 67 65 53 69 7a 65 3d 31 30 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6d 6f 76 65 55 73 65 72 53 65 61 72 63 68 42 61 73 65 55 72 6c 3a 20 22 2f 73 65 61 72 63 68 2f 54 72 79 52 65 6d 6f 76 65 52 65 63 65 6e 74 53 65 61 72 63 68 2f 3f 50 61 67 65 53 69 7a 65 3d 31 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 61 72 63 68 52 65 6d 6f 76 65 49 74 65 6d 54 65 78 74 3a 20 22 52 65 6d 6f 76 65 22 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 73 65 74 28 27 46 65 61 74 75 72 65 46 6c 61 67 73 27 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 Data Ascii: "/search/Autosuggest/?PageSize=10", removeUserSearchBaseUrl: "/search/TryRemoveRecentSearch/?PageSize=1", searchRemoveItemText: "Remove" }); AssetShared.Helpers.modelDataLibrary.set('FeatureFlags', {
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 20 20 20 27 49 73 49 6e 74 65 72 73 74 69 74 69 61 6c 42 72 65 61 64 63 72 75 6d 62 27 3a 20 66 61 6c 73 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 73 65 74 28 27 51 75 69 63 6b 46 65 65 64 62 61 63 6b 27 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 46 72 6f 6d 53 65 61 72 63 68 27 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 54 68 61 6e 6b 73 54 65 78 74 27 3a Data Ascii: 'IsInterstitialBreadcrumb': false }); </script> <script> AssetShared.Helpers.modelDataLibrary.set('QuickFeedback', { 'FromSearch': false, 'ThanksText':
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 70 75 62 44 61 74 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 31 38 2d 30 35 2d 31 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 6c 6f 63 61 6c 56 61 72 34 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 31 34 2d 31 31 2d 32 36 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 61 62 6f 75 74 6e 65 73 73 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 6c 6f 63 61 6c 56 61 72 32 22 20 63 6f 6e 74 65 6e 74 3d 22 75 6e 6c 6f 63 6b 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 Data Ascii: ent="" /> <meta name="gwa_pubDate" content="2018-05-10" /> <meta name="gwa_localVar4" content="2014-11-26" /> <meta name="gwa_aboutness" content="" /> <meta name="gwa_localVar2" content="unlocked" /> <meta name
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 68 65 61 64 65 72 2d 63 6f 6d 70 6f 6e 65 6e 74 20 73 68 6f 75 6c 64 2d 64 69 73 70 6c 61 79 2d 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 3d 22 74 72 75 65 22 3e 3c 2f 78 68 72 2d 68 65 61 64 65 72 2d 63 6f 6d 70 6f 6e 65 6e 74 3e 0a 0a 0a 0d 0a 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 6c 6f 63 61 6c 4e 61 76 69 67 61 74 69 6f 6e 22 3e 0a 0d 0a 20 20 20 20 0a 3c 64 69 76 20 69 64 3d 22 74 6f 6f 6c 49 6e 66 6f 22 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 74 6f 6f 6c 49 63 6f 6e 41 6e 64 4e 61 6d 65 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 33 20 69 64 3d 22 74 6f 6f 6c 4e 61 6d 65 22 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 2d 6e 61 6d 65 20 22 3e 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 3c 2f 68 33 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 73 Data Ascii: header-component should-display-global-search="true"></xhr-header-component> <div id="localNavigation"> <div id="toolInfo"> <div id="toolIconAndName"> <h3 id="toolName" class="tool-name ">Help and Support</h3> </div><s
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 74 3c 73 70 61 6e 3e 20 26 67 74 3b 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 62 72 65 61 64 63 72 75 6d 62 20 61 63 74 69 76 65 20 6e 6f 74 2d 64 72 6f 70 2d 64 6f 77 6e 22 20 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4b 65 65 70 20 4d 65 20 4c 6f 67 67 65 64 20 69 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: t<span> ></span></a> </p> </li> <li class="breadcrumb active not-drop-down" > <p> Keep Me Logged in </p>
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 64 69 76 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 0d 0a 3c 64 69 76 20 69 64 3d 22 61 72 74 69 63 6c 65 41 63 74 69 6f 6e 53 68 61 72 65 4c 69 6e 6b 73 22 20 63 6c 61 73 73 3d 22 73 68 61 72 65 6c 69 6e 6b 73 22 3e 0d 0a 20 20 20 20 3c 78 68 72 2d 73 6f 63 69 61 6c 2d 6d 65 64 69 61 2d 73 68 61 72 65 2d 6d 65 6e 75 2d 69 6d 61 67 65 2d 62 75 74 74 6f 6e 20 6c 61 62 65 6c 3d 22 53 68 61 72 65 22 20 65 6e 63 6f 64 65 64 75 72 6c 3d 22 68 74 74 70 25 33 61 25 32 66 25 32 66 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 25 32 66 68 65 6c 70 2d 61 6e 64 2d 73 Data Ascii: div class="article-header"> <div> <div id="articleActionShareLinks" class="sharelinks"> <xhr-social-media-share-menu-image-button label="Share" encodedurl="http%3a%2f%2fhrcenter.us.brightmine.com%2fhelp-and-s
2024-04-18 17:15:46 UTC	1452	IN	Data Raw: 20 69 6e 74 65 72 65 73 74 65 64 20 69 6e 20 74 68 69 73 3a 68 74 74 70 25 33 61 25 32 66 25 32 66 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 25 32 66 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 25 32 66 6b 65 65 70 2d 6d 65 2d 6c 6f 67 67 65 64 2d 69 6e 25 32 66 31 36 33 39 33 25 32 66 60 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 6d 61 69 6c 68 72 65 66 2e 72 65 70 6c 61 63 65 28 22 26 61 6d 70 3b 22 2c 20 22 26 22 29 2c 20 27 5f 62 6c 61 6e 6b 27 29 3b 0d 0a 20 20 20 20 7d 29 3b 0d 0a 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 0a 3c 64 69 76 Data Ascii: interested in this:http%3a%2f%2fhrcenter.us.brightmine.com%2fhelp-and-support%2fkeep-me-logged-in%2f16393%2f`; return window.open(mailhref.replace("&", "&"), '_blank'); });</script> </div> </div></div><div

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49770	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1727	OUT	GET /Web/Assets/Full/Bundle/default.css?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	377	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 3396 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 47-4816571-4816682 NNNN CT(14 14 0) RT(1713460545584 835) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	1075	IN	Data Raw: 23 63 61 73 65 53 65 63 74 69 6f 6e 2c 2e 65 78 70 61 6e 64 69 6e 67 2d 61 72 65 61 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 23 63 61 73 65 53 65 63 74 69 6f 6e 20 68 32 2c 2e 65 78 70 61 6e 64 69 6e 67 2d 61 72 65 61 20 68 32 7b 62 6f 72 64 65 72 3a 30 7d 23 63 61 73 65 53 65 63 74 69 6f 6e 20 75 6c 20 6c 69 2c 2e 65 78 70 61 6e 64 69 6e 67 2d 61 72 65 61 20 75 6c 20 6c 69 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 23 63 61 73 65 53 65 63 74 69 6f 6e 20 75 6c 20 6c 69 3a 61 66 74 65 72 2c 2e 65 78 70 61 6e 64 69 6e 67 2d 61 72 65 61 20 75 6c 20 6c 69 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 2e 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 30 3b 63 6c 65 61 72 3a 62 6f 74 68 3b 76 69 73 69 62 69 6c 69 Data Ascii: #caseSection,.expanding-area{margin-bottom:12px}#caseSection h2,.expanding-area h2{border:0}#caseSection ul li,.expanding-area ul li{padding-left:0}#caseSection ul li:after,.expanding-area ul li:after{content:".";display:block;height:0;clear:both;visibili
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 2e 65 78 70 61 6e 64 69 6e 67 2d 61 72 65 61 20 75 6c 20 6c 69 20 61 2e 69 63 6f 6e 2d 65 78 70 61 6e 64 2e 63 6f 6c 6c 61 70 73 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 65 78 70 61 6e 64 2d 63 6f 6c 6c 61 70 73 65 2d 61 72 74 69 63 6c 65 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 20 30 7d 23 63 61 73 65 53 65 63 74 69 6f 6e 20 75 6c 20 6c 69 20 61 2e 69 63 6f 6e 2d 65 78 70 61 6e 64 2e 65 78 70 61 6e 64 65 64 2c 2e 65 78 70 61 6e 64 69 6e 67 2d 61 72 65 61 20 75 6c 20 6c 69 20 61 2e 69 63 6f 6e 2d 65 78 70 61 6e 64 2e 65 78 70 61 6e 64 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2e 2e 2f 43 6f 6e 74 Data Ascii: .expanding-area ul li a.icon-expand.collapsed{background:transparent url(../Content/Images/expand-collapse-article.png) no-repeat 0 0}#caseSection ul li a.icon-expand.expanded,.expanding-area ul li a.icon-expand.expanded{background:transparent url(../Cont
2024-04-18 17:15:47 UTC	869	IN	Data Raw: 65 53 65 63 74 69 6f 6e 20 75 6c 20 6c 69 2e 63 61 73 65 2d 77 69 74 68 2d 72 65 70 6f 72 74 73 20 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 6c 69 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 31 70 78 7d 64 69 76 2e 6e 61 76 69 67 61 74 69 6f 6e 46 65 64 65 72 61 6c 4c 69 6e 6b 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 7d 23 53 48 52 4d 50 6f 70 55 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 23 53 48 52 4d 50 6f 70 55 70 20 68 65 61 64 65 72 7b 77 69 64 74 68 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 23 53 48 52 4d 50 6f 70 55 70 20 68 65 61 64 65 72 3e 2a 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 53 48 52 4d 50 6f 70 55 70 20 61 Data Ascii: eSection ul li.case-with-reports .case-report-list li{padding-left:41px}div.navigationFederalLink{margin-top:10px}#SHRMPopUp{margin-bottom:0}#SHRMPopUp header{width:auto;margin-top:0;margin-bottom:24px}#SHRMPopUp header>*{display:inline-block}#SHRMPopUp a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49774	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1311	OUT	GET /latest/Full/Bundle/bootstrap.css?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	508	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 328068 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: JoCYRnf9CzTQAEXq5iwwGUJVIWYAAAAA0o33IBo9qrBQngz8Rs6JTQ== X-CDN: Imperva X-Iinfo: 58-31085587-31085647 NNNN CT(41 23 0) RT(1713460546524 262) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:47 UTC	944	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f Data Ascii: /! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */html{fo
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 72 3a 30 7d 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 3a 30 7d 62 75 74 74 6f 6e Data Ascii: r:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button
2024-04-18 17:15:47 UTC	1403	IN	Data Raw: 29 20 22 29 22 7d 61 5b 68 72 65 66 5e 3d 22 23 22 5d 3a 61 66 74 65 72 2c 61 5b 68 72 65 66 5e 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 22 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 7d 62 6c 6f 63 6b 71 75 6f 74 65 2c 70 72 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 70 61 67 65 2d 62 72 65 61 6b 2d 69 6e 73 69 64 65 3a 61 76 6f 69 64 7d 74 68 65 61 64 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 2d 68 65 61 64 65 72 2d 67 72 6f 75 70 7d 69 6d 67 2c 74 72 7b 70 61 67 65 2d 62 72 65 61 6b 2d 69 6e 73 69 64 65 3a 61 76 6f 69 64 7d 69 6d 67 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 68 32 2c 68 33 2c 70 7b 6f 72 70 68 61 6e 73 3a 33 3b 77 69 64 6f 77 73 3a 33 7d 68 32 2c 68 33 7b 70 61 67 Data Ascii: ) ")"}a[href^="#"]:after,a[href^="javascript:"]:after{content:""}blockquote,pre{border:1px solid #999;page-break-inside:avoid}thead{display:table-header-group}img,tr{page-break-inside:avoid}img{max-width:100%!important}h2,h3,p{orphans:3;widows:3}h2,h3{pag
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 69 6d 67 2d 63 69 72 63 6c 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 7d 68 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 32 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 7d 2e 73 72 2d 6f 6e 6c 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 6c 69 70 3a 72 65 63 74 28 30 2c 30 2c 30 2c 30 29 3b 62 6f 72 64 65 72 3a 30 7d 2e 73 72 2d 6f 6e 6c Data Ascii: ock;max-width:100%;height:auto}.img-circle{border-radius:50%}hr{margin-top:22px;margin-bottom:22px;border:0;border-top:1px solid #eee}.sr-only{position:absolute;width:1px;height:1px;margin:-1px;padding:0;overflow:hidden;clip:rect(0,0,0,0);border:0}.sr-onl
2024-04-18 17:15:47 UTC	8	IN	Data Raw: 74 2d 73 69 7a 65 3a 32 Data Ascii: t-size:2
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 34 70 78 7d 7d 2e 73 6d 61 6c 6c 2c 73 6d 61 6c 6c 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 25 7d 2e 6d 61 72 6b 2c 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 30 63 35 3b 70 61 64 64 69 6e 67 3a 2e 32 65 6d 7d 2e 74 65 78 74 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 74 65 78 74 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 74 65 78 74 2d 6a 75 73 74 69 66 79 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6a 75 73 74 69 66 79 7d 2e 74 65 78 74 2d 6e 6f 77 72 61 70 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 74 65 78 74 2d 6c 6f 77 65 72 63 61 73 65 7b 74 65 78 74 2d 74 Data Ascii: 4px}}.small,small{font-size:87%}.mark,mark{background-color:#f8f0c5;padding:.2em}.text-left{text-align:left}.text-right{text-align:right}.text-center{text-align:center}.text-justify{text-align:justify}.text-nowrap{white-space:nowrap}.text-lowercase{text-t
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 74 74 6f 6d 3a 30 7d 2e 6c 69 73 74 2d 75 6e 73 74 79 6c 65 64 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 2e 6c 69 73 74 2d 69 6e 6c 69 6e 65 3e 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 7d 64 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 7d 64 64 2c 64 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 37 35 7d 64 74 7b 66 6f 6e 74 2d 77 65 Data Ascii: ttom:0}.list-unstyled{padding-left:0;list-style:none}.list-inline{padding-left:0;list-style:none;margin-left:-5px}.list-inline>li{display:inline-block;padding-left:5px;padding-right:5px}dl{margin-top:0;margin-bottom:22px}dd,dt{line-height:1.375}dt{font-we
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 66 6f 6f 74 65 72 3a 61 66 74 65 72 2c 2e 62 6c 6f 63 6b 71 75 6f 74 65 2d 72 65 76 65 72 73 65 20 73 6d 61 6c 6c 3a 61 66 74 65 72 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 2e 73 6d 61 6c 6c 3a 61 66 74 65 72 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 66 6f 6f 74 65 72 3a 61 66 74 65 72 2c 62 6c 6f 63 6b 71 75 6f 74 65 2e 70 75 6c 6c 2d 72 69 67 68 74 20 73 6d 61 6c 6c 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 5c 30 30 41 30 20 5c 32 30 31 34 27 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 37 35 7d 63 Data Ascii: .blockquote-reverse footer:after,.blockquote-reverse small:after,blockquote.pull-right .small:after,blockquote.pull-right footer:after,blockquote.pull-right small:after{content:'\00A0 \2014'}address{margin-bottom:22px;font-style:normal;line-height:1.375}c
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 79 3a 74 61 62 6c 65 7d 2e 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 37 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 37 70 78 7d 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 63 6f 6c 2d 6c 67 2d 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 63 6f 6c 2d 6c 67 2d 31 32 2c 2e 63 6f 6c 2d 6c 67 2d 32 2c 2e 63 6f 6c 2d 6c 67 2d 33 2c 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 63 6f 6c 2d 6c 67 2d 37 Data Ascii: y:table}.container-fluid:after{clear:both}.row{margin-left:-7px;margin-right:-7px}.row:after,.row:before{content:" ";display:table}.row:after{clear:both}.col-lg-1,.col-lg-10,.col-lg-11,.col-lg-12,.col-lg-2,.col-lg-3,.col-lg-4,.col-lg-5,.col-lg-6,.col-lg-7
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 74 3a 36 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 6c 6c 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 32 7b 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 33 7b 6c 65 66 Data Ascii: t:66.6666666667%}.col-xs-pull-9{right:75%}.col-xs-pull-10{right:83.3333333333%}.col-xs-pull-11{right:91.6666666667%}.col-xs-pull-12{right:100%}.col-xs-push-0{left:auto}.col-xs-push-1{left:8.3333333333%}.col-xs-push-2{left:16.6666666667%}.col-xs-push-3{lef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49772	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1328	OUT	GET /latest/Global/Bundle/sharedAssetFontCss-en-US.css?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	506	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 2006 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: /MJ+XgerSwnQAEXq5iwwGUJVIWYAAAAAndwT4R/q2/hiTrtzugPAPg== X-CDN: Imperva X-Iinfo: 60-39160105-39160196 NNNY CT(14 16 0) RT(1713460546523 223) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	946	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 67 67 6c 2d 72 6f 62 6f 74 6f 2f 72 6f 62 6f 74 6f 2d 76 33 30 2d 6c 61 74 69 6e 2d 33 30 30 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 67 67 6c 2d 72 6f 62 6f 74 6f 2f 72 6f 62 6f 74 6f 2d 76 33 30 2d 6c 61 74 69 6e 2d 33 30 30 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 Data Ascii: @font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:300;src:url("../Content/Fonts/ggl-roboto/roboto-v30-latin-300.woff2") format("woff2"),url("../Content/Fonts/ggl-roboto/roboto-v30-latin-300.woff") format("woff")}@font-face{font
2024-04-18 17:15:47 UTC	1060	IN	Data Raw: 2d 76 33 30 2d 6c 61 74 69 6e 2d 69 74 61 6c 69 63 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 67 67 6c 2d 72 6f 62 6f 74 6f 2f 72 6f 62 6f 74 6f 2d 76 33 30 2d 6c 61 74 69 6e 2d 35 30 30 2e 77 6f 66 66 32 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 22 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 67 67 6c 2d 72 6f 62 6f 74 6f 2f 72 6f 62 6f 74 6f 2d 76 33 30 2d 6c 61 74 69 6e 2d 35 Data Ascii: -v30-latin-italic.woff") format("woff")}@font-face{font-display:swap;font-family:Roboto;font-style:normal;font-weight:500;src:url("../Content/Fonts/ggl-roboto/roboto-v30-latin-500.woff2") format("woff2"),url("../Content/Fonts/ggl-roboto/roboto-v30-latin-5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49776	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1322	OUT	GET /latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	508	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 314605 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: NOVAejUfeSnQAEXq5iwwGUJVIWYAAAAALxUClPGk28pa0hSeDtmbKQ== X-CDN: Imperva X-Iinfo: 57-29357341-29357418 NNNN CT(17 18 0) RT(1713460546526 240) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:47 UTC	944	IN	Data Raw: 64 64 2c 64 69 76 2c 64 6c 2c 64 74 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 69 6e 70 75 74 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 72 2c 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 66 65 66 65 66 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 73 63 72 6f 6c 6c 62 61 72 7d 62 75 74 74 6f 6e 2c 64 64 2c 64 74 2c 6c 65 67 65 6e 64 2c 6c 69 2c 70 2c 74 61 62 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 Data Ascii: dd,div,dl,dt,fieldset,form,input,label,legend,p,table,tbody,td,tfoot,th,thead,tr,ul{margin:0;padding:0}html{background:#efefef;-ms-overflow-style:scrollbar}button,dd,dt,legend,li,p,table{font-size:16px;font-size:1rem;line-height:1.6}body{font-family:Robot
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 33 2e 70 6e 67 29 20 33 70 78 20 2e 35 65 6d 20 6e 6f 2d 72 65 70 65 61 74 7d 75 6c 20 6c 69 20 75 6c 20 6c 69 20 75 6c 20 6c 69 20 75 6c 20 6c 69 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 47 6c 6f 62 61 6c 2f 62 75 6c 6c 65 74 34 2e 70 6e 67 29 20 33 70 78 20 2e 35 65 6d 20 6e 6f 2d 72 65 70 65 61 74 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 78 68 72 73 79 6d 62 6f 6c 73 52 65 67 75 6c 61 72 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 22 29 3b 73 72 63 3a 75 72 6c 28 Data Ascii: 3.png) 3px .5em no-repeat}ul li ul li ul li ul li{background:url(../../Shared/Content/Images/Global/bullet4.png) 3px .5em no-repeat}@font-face{font-family:xhrsymbolsRegular;src:url("../../Shared/Content/Fonts/xhr-symbols/xhr-symbols-webfont.eot");src:url(
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 78 68 72 73 79 6d 62 6f 6c 73 52 65 67 75 6c 61 72 3b 63 6f 6e 74 65 6e 74 3a 22 5c 30 30 61 30 3e 22 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 68 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 64 65 64 65 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 63 6f 6c 6f 72 3a 23 64 65 64 65 64 65 3b 68 65 69 67 68 74 3a 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 3a 31 65 6d 20 30 20 31 65 6d 20 30 3b 70 61 67 65 2d 62 72 65 61 6b 2d 61 66 74 65 72 3a 61 6c 77 61 79 73 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 68 72 3a Data Ascii: {font-family:xhrsymbolsRegular;content:"\00a0>";display:inline;white-space:nowrap}.display-none{display:none}hr{background-color:#dedede;border-width:0;color:#dedede;height:1px;line-height:0;margin:1em 0 1em 0;page-break-after:always;text-align:center}hr:
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 72 65 64 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 32 70 78 7d 2e 62 61 73 69 63 2d 6c 61 79 6f 75 74 20 2e 73 69 6d 70 6c 65 2d 70 61 67 65 73 20 2e 62 75 74 74 6f 6e 2d 73 70 61 63 69 6e 67 2d 6c 65 66 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 36 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 62 61 73 69 63 2d 6c 61 79 6f 75 74 20 2e 73 69 6d 70 6c 65 2d 70 61 67 65 73 20 2e 62 75 74 74 6f 6e 2d 66 75 6c 6c 2d 77 69 64 74 68 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 62 61 73 69 63 2d 6c 61 79 6f 75 74 20 2e 73 69 6d 70 6c 65 2d 70 61 67 65 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 70 61 67 65 2d 6e 65 77 20 68 31 7b 63 6f 6c Data Ascii: red{padding-top:0;padding-bottom:22px}.basic-layout .simple-pages .button-spacing-left{padding-left:156px;margin-top:14px;margin-bottom:10px}.basic-layout .simple-pages .button-full-width{width:100%}.basic-layout .simple-pages.confirmation-page-new h1{col
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 69 7a 65 3a 32 72 65 6d 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2e 74 77 6f 2d 63 6f 6c 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2e 74 77 6f 2d 63 6f 6c 3e 75 6c 7b 77 69 64 74 68 3a 33 31 37 70 78 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 65 67 61 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 2e Data Ascii: ize:2rem}.article-list.two-col{overflow:hidden}.article-list.two-col>ul{width:317px;float:left}.article-list .article-list-item-legal{background:transparent none;padding:0;width:100%}.article-list .article-list-item{background:transparent none;padding:0}.
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 74 69 74 6c 65 2d 61 6e 64 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 63 74 69 6f 6e 73 20 6c 69 20 73 70 61 6e 7b 63 6f 6c 6f 72 3a 67 72 65 79 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 33 70 78 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 74 69 74 6c 65 20 61 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 72 74 Data Ascii: .article-list .article-list-item .title-and-actions-container .actions li span{color:grey}.article-list .article-list-item .title{font-size:1.2rem;display:block;min-height:23px}.article-list .article-list-item .title a:after{content:none;display:none}.art
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 3a 31 34 70 78 20 30 20 30 20 30 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 64 64 2c 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 64 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 31 30 70 78 20 30 20 30 3b 63 6f 6c 6f 72 3a 67 72 65 79 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 2c 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 Data Ascii: ont-size:1rem;margin:14px 0 0 0}.article-list dd,.case-report-list dd{font-size:12px;padding:0 10px 0 0;color:grey}.article-list .case-report-list .article-list-item,.case-report-list .case-report-list .article-list-item{box-shadow:none;background-color:t
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6c 69 73 74 2d 63 6f 6c 75 6d 6e 73 2d 66 6f 75 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 6c 69 73 74 2d 63 6f 6c 75 6d 6e 73 2d 66 6f 75 72 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 2c 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2e 6c 69 73 74 2d 63 6f 6c 75 6d 6e 73 2d 66 6f 75 72 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 35 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 38 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 3b 7a 6f 6f 6d 3a 31 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 6c 69 73 74 2d 63 6f 6c 75 6d 6e 73 2d 66 6f 75 72 20 2e 6e 65 77 2d 72 Data Ascii: list-columns-four{overflow:hidden}.article-list .list-columns-four .article-list-item,.article-list.list-columns-four .article-list-item{float:left;width:150px;padding-left:8px;margin-bottom:11px;background:0;zoom:1}.article-list .list-columns-four .new-r
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 74 3a 37 37 35 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 4c 69 73 74 69 6e 67 42 79 54 6f 6f 6c 54 61 62 6c 65 20 2e 61 72 74 69 63 6c 65 4c 69 73 74 69 6e 67 42 79 54 6f 6f 6c 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 2e 34 70 78 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 4c 69 73 74 69 6e 67 42 79 54 6f 6f 6c 54 61 62 6c 65 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 2d 6c 65 67 61 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 4c 69 73 74 69 6e 67 42 79 54 6f 6f 6c 54 61 62 6c 65 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d Data Ascii: t:775px;display:block;width:100%}.article-list .articleListingByToolTable .articleListingByTool h3{font-size:14.4px}.article-list .articleListingByToolTable .article-list-item-legal{display:block}.article-list .articleListingByToolTable .article-list-item
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6f 6e 74 65 6e 74 20 2e 78 68 72 2d 70 6c 61 79 2d 76 69 64 65 6f 20 69 6d 67 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 37 70 78 7d 2e 66 72 65 65 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 78 74 2d 61 6c 69 67 6e 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 66 72 65 65 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 78 74 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 72 65 65 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 2e 74 65 78 74 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 66 72 65 65 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 6f 6c 20 6f 6c 2c 2e 66 72 65 65 2d 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 20 6f 6c 20 Data Ascii: ontent .xhr-play-video img{margin-bottom:-7px}.free-form-content .text-align-left{text-align:left}.free-form-content .text-align-center{text-align:center}.free-form-content .text-align-right{text-align:right}.free-form-content ol ol,.free-form-content ol

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49775	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1315	OUT	GET /latest/Full/Bundle/legacyFormCss.css?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 22296 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: PXtQJYqT+UjQAEXq5iwwGUJVIWYAAAAA2ecDhzyHhWwIylxZ3cCCgw== X-CDN: Imperva X-Iinfo: 55-23603011-23603067 NNNY CT(14 16 0) RT(1713460546526 221) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	945	IN	Data Raw: 2e 65 64 69 74 6f 72 69 61 6c 2d 62 6f 64 79 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 65 64 69 74 6f 72 69 61 6c 2d 62 6f 64 79 20 68 31 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 7d 2e 65 64 69 74 6f 72 69 61 6c 2d 62 6f 64 79 20 68 31 23 66 6f 72 6d 54 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 36 30 36 36 36 37 7d 2e 65 64 69 74 6f 72 69 61 6c 2d 62 6f 64 79 20 2e 65 64 69 74 6f 72 69 61 6c 2d 66 6f 72 6d 7b 63 6f 6c 6f 72 3a 23 36 30 36 36 36 37 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 65 64 69 74 6f 72 69 61 6c 2d 62 6f 64 79 20 2e 65 64 69 74 6f 72 69 61 6c 2d 66 6f 72 6d 20 23 66 6f 72 6d 49 6e 74 72 6f 54 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 65 64 69 74 6f 72 69 61 6c 2d 62 6f 64 79 20 2e 65 64 69 74 6f 72 69 61 6c 2d Data Ascii: .editorial-body{border:none}.editorial-body h1{border:none}.editorial-body h1#formTitle{color:#606667}.editorial-body .editorial-form{color:#606667;position:relative}.editorial-body .editorial-form #formIntroText{font-size:15px}.editorial-body .editorial-
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 63 6f 6c 6f 72 3a 23 37 34 37 34 37 34 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 79 72 69 61 64 2d 70 72 6f 2c 41 72 69 61 6c 2c 73 61 6e 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 35 70 78 20 30 20 31 34 70 78 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 65 72 72 6f 72 7b 63 6f 6c 6f 72 3a 23 63 30 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 65 72 72 6f 72 20 61 7b 63 6f 6c 6f 72 3a 23 63 30 30 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 78 68 72 2d 66 6f 72 6d Data Ascii: color:#747474;font-size:20px;font-size:1.25rem;font-family:myriad-pro,Arial,san-serif;font-weight:400;display:block;width:100%;padding:5px 0 14px}.xhr-form .error{color:#c00;font-weight:700}.xhr-form .error a{color:#c00;text-decoration:underline}.xhr-form
2024-04-18 17:15:47 UTC	1403	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 20 75 72 6c 28 22 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 46 6f 72 6d 73 2f 66 69 65 6c 64 42 61 63 6b 67 72 6f 75 6e 64 2e 70 6e 67 22 29 20 30 20 30 20 72 65 70 65 61 74 2d 78 3b 63 6f 6c 6f 72 3a 23 34 64 34 64 34 64 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 76 61 6c 75 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 76 61 6c 75 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 76 61 6c 75 65 20 74 65 Data Ascii: ;background:#fff url("../Content/Images/Forms/fieldBackground.png") 0 0 repeat-x;color:#4d4d4d}.xhr-form .form-field .form-field-value input[type=password],.xhr-form .form-field .form-field-value input[type=text],.xhr-form .form-field .form-field-value te
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 2d 76 61 6c 75 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 36 38 38 72 65 6d 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 64 70 61 6c 6f 67 67 65 64 69 6e 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 76 61 6c 75 65 20 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 64 70 61 6c 6f 67 67 65 64 69 6e 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 2d 6c 69 73 74 2d 77 69 64 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 6f 6f 6d 3a 31 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 64 70 61 6c 6f 67 67 65 64 69 6e 20 2e 63 68 65 63 Data Ascii: -value{width:100%;font-size:11px;font-size:.688rem}.xhr-form .dpaloggedin .checkbox-list .form-field-value label{padding-right:10px}.xhr-form .dpaloggedin .checkbox-list .checkbox-in-list-wide{width:100%;overflow:hidden;zoom:1}.xhr-form .dpaloggedin .chec
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 3a 34 70 78 3b 63 6f 6c 6f 72 3a 23 63 30 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 6d 65 73 73 61 67 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 30 30 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 6d 65 73 73 61 67 65 2e 62 65 6e 63 68 6d 61 72 6b 69 6e 67 2d 69 63 6f 6e 2d 32 34 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 31 70 78 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 76 61 6c 75 65 2d 72 65 70 6c 61 63 65 6d 65 6e 74 2d 6d 65 73 73 61 67 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 35 65 6d 3b 63 6f 6c 6f 72 3a 67 72 61 79 7d 2e 78 68 72 2d 66 Data Ascii: :4px;color:#c00;font-weight:700}.xhr-form .form-field-message{display:block;width:300px;padding-top:4px}.xhr-form .form-field-message.benchmarking-icon-24{padding-left:31px}.xhr-form .form-field-value-replacement-message{padding-top:.5em;color:gray}.xhr-f
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6e 2d 6c 69 73 74 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 76 61 6c 75 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2e 6f 6e 65 2d 63 6f 6c 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 2d 6c 69 73 74 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2e 6f 6e 65 2d 63 6f 6c 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 2d 6c 69 73 74 7b 77 69 64 74 68 3a 36 30 35 70 78 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2e 6f 6e 65 2d 63 6f 6c 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 2d 6c 69 73 74 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 74 74 72 69 Data Ascii: n-list .form-field-value{float:left;width:auto;height:auto}.xhr-form .checkbox-list-column.one-col .checkbox-in-list,.xhr-form .checkbox-list.one-col .checkbox-in-list{width:605px}.xhr-form .checkbox-list-column.one-col .checkbox-in-list .form-field-attri
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 7b 77 69 64 74 68 3a 33 31 37 70 78 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2e 74 68 72 65 65 2d 63 6f 6c 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2e 74 68 72 65 65 2d 63 6f 6c 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 7b 77 69 64 74 68 3a 32 31 31 70 78 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2e 66 6f 75 72 2d 63 6f 6c 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2e 66 6f Data Ascii: heckbox-list-column{width:317px}.xhr-form .checkbox-list-column.three-col .checkbox-list-column,.xhr-form .checkbox-list.three-col .checkbox-list-column{width:211px}.xhr-form .checkbox-list-column.four-col .checkbox-list-column,.xhr-form .checkbox-list.fo
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 68 65 63 6b 62 6f 78 2d 69 6e 2d 6c 69 73 74 2d 77 69 64 65 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 74 74 72 69 62 75 74 65 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 31 35 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 32 36 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 2d 6c 69 73 74 2d 77 69 64 65 20 2e 66 6f 72 6d 2d 66 69 65 6c 64 2d 61 74 74 72 69 62 75 74 65 20 6c 61 62 65 6c 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 Data Ascii: heckbox-in-list-wide .form-field-attribute{float:left;width:115px;height:auto;padding:0 0 0 4px;font-weight:400;text-align:left;width:260px;line-height:1.1}.xhr-form .checkbox-list .checkbox-in-list-wide .form-field-attribute label,.xhr-form .checkbox-lis
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2e 66 6c 65 78 2e 74 77 6f 2d 63 6f 6c 3e 2e 63 68 65 63 6b 62 6f 78 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2e 66 6c 65 78 2e 74 77 6f 2d 63 6f 6c 3e 2e 63 68 65 63 6b 62 6f 78 7b 77 69 64 74 68 3a 35 30 25 3b 6d 61 72 67 69 6e 3a 30 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2d 63 6f 6c 75 6d 6e 2e 66 6c 65 78 2e 74 68 72 65 65 2d 63 6f 6c 3e 2e 63 68 65 63 6b 62 6f 78 2c 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 2d 6c 69 73 74 2e 66 6c 65 78 2e 74 68 72 65 65 2d 63 6f 6c 3e 2e 63 68 65 63 6b 62 6f 78 7b 77 69 64 74 68 3a 33 33 25 3b 6d 61 72 67 69 6e 3a 30 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 63 68 65 Data Ascii: rm .checkbox-list-column.flex.two-col>.checkbox,.xhr-form .checkbox-list.flex.two-col>.checkbox{width:50%;margin:0}.xhr-form .checkbox-list-column.flex.three-col>.checkbox,.xhr-form .checkbox-list.flex.three-col>.checkbox{width:33%;margin:0}.xhr-form .che
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 65 6d 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 6c 61 62 65 6c 65 73 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 31 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 32 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 34 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 78 68 72 2d 66 6f 72 6d 20 2e 6c 61 62 65 6c 65 73 73 2d 66 6f 72 6d 2d 66 69 65 6c 64 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 72 61 64 69 6f 62 75 74 74 6f 6e 2d 6c 69 73 74 20 2e 72 61 64 69 6f 62 75 74 74 6f 6e Data Ascii: 4px;padding-top:.5em;margin-bottom:5px;padding-top:.2em}.xhr-form .labeless-form-fields-container{font-size:13px;font-size:.8125rem;margin-left:12em;padding-left:14px;overflow:hidden}.xhr-form .labeless-form-fields-container .radiobutton-list .radiobutton

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49780	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1731	OUT	GET /Web/Assets/Full/Bundle/article.min.css?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	380	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 63499 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 57-29357342-29357420 NNNN CT(18 14 0) RT(1713460546531 240) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:47 UTC	1072	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 75 6c 2e 74 72 65 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 67 72 65 65 6e 7d 2e 6e 6f 2d 73 63 72 69 70 74 20 2e 64 79 6e 61 74 72 65 65 20 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 75 6c 2e 64 79 6e 61 74 72 65 65 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 74 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 70 61 64 64 69 6e 67 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 75 6c 2e 64 79 6e 61 74 72 65 65 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 7b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 Data Ascii: @charset "UTF-8";ul.tree{background-color:green}.no-script .dynatree ul ul{margin-top:12px}ul.dynatree-container{font-size:10pt;white-space:nowrap;padding:3px;margin:0;background-color:#fff;overflow:auto;height:100%}ul.dynatree-container ul{padding:0 0 0
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 6c 65 66 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 43 73 73 2f 41 72 74 69 63 6c 65 2f 64 79 6e 61 74 72 65 65 2f 69 63 6f 6e 73 2e 67 69 66 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 75 6c 2e 64 79 6e 61 74 72 65 65 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6d 67 7b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 76 65 72 74 69 63 61 Data Ascii: x;display:inline-block;vertical-align:top;background-repeat:no-repeat;background-position:left;background-image:url(../Content/Css/Article/dynatree/icons.gif);background-position:0 0}ul.dynatree-container img{width:24px;height:24px;margin-left:3px;vertica
2024-04-18 17:15:47 UTC	1320	IN	Data Raw: 79 6e 61 74 72 65 65 2d 72 61 64 69 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 34 38 70 78 7d 73 70 61 6e 2e 64 79 6e 61 74 72 65 65 2d 72 61 64 69 6f 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 70 78 20 2d 34 38 70 78 7d 2e 64 79 6e 61 74 72 65 65 2d 70 61 72 74 73 65 6c 20 73 70 61 6e 2e 64 79 6e 61 74 72 65 65 2d 72 61 64 69 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 34 70 78 20 2d 34 38 70 78 7d 2e 64 79 6e 61 74 72 65 65 2d 70 61 72 74 73 65 6c 20 73 70 61 6e 2e 64 79 6e 61 74 72 65 65 2d 72 61 64 69 6f 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 30 70 78 Data Ascii: ynatree-radio{margin-left:3px;background-position:0 -48px}span.dynatree-radio:hover{background-position:-16px -48px}.dynatree-partsel span.dynatree-radio{background-position:-64px -48px}.dynatree-partsel span.dynatree-radio:hover{background-position:-80px
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 38 66 30 66 61 7d 64 69 76 2e 64 79 6e 61 74 72 65 65 2d 64 72 61 67 2d 68 65 6c 70 65 72 20 61 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 67 72 61 79 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 2e 38 7d 64 69 76 2e 64 79 6e 61 74 72 65 65 2d 64 72 6f 70 2d 61 63 63 65 70 74 20 73 70 61 6e 2e 64 79 6e 61 74 72 65 65 2d 64 72 61 67 2d 68 65 6c 70 65 72 2d 69 6d 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 32 70 78 20 2d 31 31 32 70 78 7d 64 69 76 2e 64 79 6e 61 74 72 65 65 2d 64 72 61 67 2d 68 65 6c 70 65 72 2e 64 79 6e 61 74 72 Data Ascii: ound-color:#d8f0fa}div.dynatree-drag-helper a{border:1px solid gray;background-color:#fff;padding-left:5px;padding-right:5px;opacity:.8}div.dynatree-drop-accept span.dynatree-drag-helper-img{background-position:-32px -112px}div.dynatree-drag-helper.dynatr
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 69 6e 67 5f 61 73 63 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 69 6e 67 5f 61 73 63 5f 64 69 73 61 62 6c 65 64 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 69 6e 67 5f 64 65 73 63 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 69 6e 67 5f 64 65 73 63 5f 64 69 73 61 62 6c 65 64 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 20 72 69 67 68 74 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 65 61 64 20 2e 73 6f 72 74 Data Ascii: taTable thead .sorting_asc,table.dataTable thead .sorting_asc_disabled,table.dataTable thead .sorting_desc,table.dataTable thead .sorting_desc_disabled{cursor:pointer;background-repeat:no-repeat;background-position:center right}table.dataTable thead .sort
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 72 64 65 72 2d 74 6f 70 3a 6e 6f 6e 65 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 65 6c 6c 2d 62 6f 72 64 65 72 20 74 62 6f 64 79 20 74 64 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 65 6c 6c 2d 62 6f 72 64 65 72 20 74 62 6f 64 79 20 74 68 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 65 6c 6c 2d 62 6f 72 64 65 72 20 74 62 6f 64 79 20 74 72 20 74 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 65 6c 6c 2d 62 6f 72 64 65 72 20 74 62 6f 64 79 20 74 72 20 74 68 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 6c 65 Data Ascii: rder-top:none}table.dataTable.cell-border tbody td,table.dataTable.cell-border tbody th{border-top:1px solid #ddd;border-right:1px solid #ddd}table.dataTable.cell-border tbody tr td:first-child,table.dataTable.cell-border tbody tr th:first-child{border-le
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 3e 2e 73 6f 72 74 69 6e 67 5f 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 63 62 61 64 35 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 64 69 73 70 6c 61 79 20 74 62 6f 64 79 20 74 72 2e 6f 64 64 3e 2e 73 6f 72 74 69 6e 67 5f 31 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 6f 72 64 65 72 2d 63 6f 6c 75 6d 6e 2e 73 74 72 69 70 65 20 74 62 6f 64 79 20 74 72 2e 6f 64 64 3e 2e 73 6f 72 74 69 6e 67 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 31 66 31 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 64 69 73 70 6c 61 79 20 74 62 6f 64 79 20 74 72 2e 6f 64 64 3e 2e 73 6f 72 74 69 6e 67 5f 32 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 6f 72 64 65 72 2d 63 6f 6c 75 6d 6e 2e 73 74 72 69 70 65 20 74 Data Ascii: >.sorting_3{background-color:#acbad5}table.dataTable.display tbody tr.odd>.sorting_1,table.dataTable.order-column.stripe tbody tr.odd>.sorting_1{background-color:#f1f1f1}table.dataTable.display tbody tr.odd>.sorting_2,table.dataTable.order-column.stripe t
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 2e 64 61 74 61 54 61 62 6c 65 2e 64 69 73 70 6c 61 79 20 74 62 6f 64 79 20 74 72 2e 65 76 65 6e 2e 73 65 6c 65 63 74 65 64 3e 2e 73 6f 72 74 69 6e 67 5f 32 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 6f 72 64 65 72 2d 63 6f 6c 75 6d 6e 2e 73 74 72 69 70 65 20 74 62 6f 64 79 20 74 72 2e 65 76 65 6e 2e 73 65 6c 65 63 74 65 64 3e 2e 73 6f 72 74 69 6e 67 5f 32 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 65 62 63 64 36 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 64 69 73 70 6c 61 79 20 74 62 6f 64 79 20 74 72 2e 65 76 65 6e 2e 73 65 6c 65 63 74 65 64 3e 2e 73 6f 72 74 69 6e 67 5f 33 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 6f 72 64 65 72 2d 63 6f 6c 75 6d 6e 2e 73 74 72 69 70 65 20 74 62 6f 64 79 20 74 72 2e 65 76 65 6e Data Ascii: .dataTable.display tbody tr.even.selected>.sorting_2,table.dataTable.order-column.stripe tbody tr.even.selected>.sorting_2{background-color:#aebcd6}table.dataTable.display tbody tr.even.selected>.sorting_3,table.dataTable.order-column.stripe tbody tr.even
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 68 7b 70 61 64 64 69 6e 67 3a 34 70 78 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 6f 6d 70 61 63 74 20 74 62 6f 64 79 20 74 64 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 2e 63 6f 6d 70 61 63 74 20 74 62 6f 64 79 20 74 68 7b 70 61 64 64 69 6e 67 3a 34 70 78 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 64 2e 64 74 2d 6c 65 66 74 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 2e 64 74 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 64 2e 64 61 74 61 54 61 62 6c 65 73 5f 65 6d 70 74 79 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 64 2e 64 74 2d 63 65 6e 74 65 72 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 68 2e 64 74 2d 63 65 6e 74 65 72 Data Ascii: h{padding:4px}table.dataTable.compact tbody td,table.dataTable.compact tbody th{padding:4px}table.dataTable td.dt-left,table.dataTable th.dt-left{text-align:left}table.dataTable td.dataTables_empty,table.dataTable td.dt-center,table.dataTable th.dt-center
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 64 79 2d 6c 65 66 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 62 6f 64 79 20 74 64 2e 64 74 2d 62 6f 64 79 2d 63 65 6e 74 65 72 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 62 6f 64 79 20 74 68 2e 64 74 2d 62 6f 64 79 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 62 6f 64 79 20 74 64 2e 64 74 2d 62 6f 64 79 2d 72 69 67 68 74 2c 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 62 6f 64 79 20 74 68 2e 64 74 2d 62 6f 64 79 2d 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 74 61 62 6c 65 2e 64 61 74 61 54 61 62 6c 65 20 74 62 6f 64 79 20 74 64 2e 64 74 2d 62 6f 64 79 2d 6a 75 73 74 69 Data Ascii: dy-left{text-align:left}table.dataTable tbody td.dt-body-center,table.dataTable tbody th.dt-body-center{text-align:center}table.dataTable tbody td.dt-body-right,table.dataTable tbody th.dt-body-right{text-align:right}table.dataTable tbody td.dt-body-justi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49778	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1728	OUT	GET /Web/Assets/Shared/AngularBundle/styles.css HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 86915 Connection: close Accept-Ranges: bytes Etag: "090db16dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:56 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 59-35330937-35331000 NNNY CT(13 14 0) RT(1713460546531 225) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	1073	IN	Data Raw: 40 69 6d 70 6f 72 74 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 69 63 6f 6e 3f 66 61 6d 69 6c 79 3d 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 7c 4d 61 74 65 72 69 61 6c 2b 49 63 6f 6e 73 2b 4f 75 74 6c 69 6e 65 64 22 3b 2e 6d 61 74 2d 72 69 70 70 6c 65 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 61 74 2d 72 69 70 70 6c 65 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 7d 2e 6d 61 74 2d 72 69 70 70 6c 65 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 75 6e 62 6f 75 6e 64 65 64 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 6d 61 74 2d 72 69 70 70 6c 65 2d 65 6c 65 6d 65 6e 74 7b 70 6f Data Ascii: @import"https://fonts.googleapis.com/icon?family=Material+Icons\|Material+Icons+Outlined";.mat-ripple{overflow:hidden;position:relative}.mat-ripple:not(:empty){transform:translateZ(0)}.mat-ripple.mat-ripple-unbounded{overflow:visible}.mat-ripple-element{po
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 63 64 6b 2d 6f 76 65 72 6c 61 79 2d 62 61 63 6b 64 72 6f 70 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 69 6e 73 65 74 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 30 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 34 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 35 2c 2e 38 2c 2e 32 35 2c 31 29 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 63 64 6b 2d 6f 76 65 72 6c 61 79 2d 62 61 63 6b 64 72 6f 70 2e 63 64 6b 2d 6f 76 65 72 6c 61 79 2d 62 Data Ascii: ay:flex;max-width:100%;max-height:100%}.cdk-overlay-backdrop{position:absolute;inset:0;z-index:1000;pointer-events:auto;-webkit-tap-highlight-color:transparent;transition:opacity .4s cubic-bezier(.25,.8,.25,1);opacity:0}.cdk-overlay-backdrop.cdk-overlay-b
2024-04-18 17:15:47 UTC	1320	IN	Data Raw: 3a 63 64 6b 2d 74 65 78 74 2d 66 69 65 6c 64 2d 61 75 74 6f 66 69 6c 6c 2d 65 6e 64 20 30 73 20 31 6d 73 7d 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 3a 62 65 66 6f 72 65 7b 69 6e 73 65 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 2d 64 69 73 70 6c 61 79 2c 20 6e 6f 6e 65 29 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 6d 61 74 2d 66 6f 63 75 73 2d 69 6e 64 69 63 61 74 6f 72 2d 62 6f Data Ascii: :cdk-text-field-autofill-end 0s 1ms}.mat-focus-indicator{position:relative}.mat-focus-indicator:before{inset:0;position:absolute;box-sizing:border-box;pointer-events:none;display:var(--mat-focus-indicator-display, none);border:var(--mat-focus-indicator-bo
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 2d 6c 61 79 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 30 34 29 3b 2d 2d 6d 61 74 2d 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 2d 73 74 61 74 65 2d 6c 61 79 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 30 34 29 7d 2e 6d 61 74 2d 61 63 63 65 6e 74 7b 2d 2d 6d 61 74 2d 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 2d 73 74 61 74 65 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 63 34 62 66 62 36 7d 2e 6d 61 74 2d 77 61 72 6e 7b 2d 2d 6d 61 74 2d 6f 70 74 69 6f 6e 2d 73 65 6c 65 63 74 65 64 2d 73 74 61 74 65 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 62 30 30 30 32 30 7d 68 74 6d 6c 7b 2d 2d 6d 61 74 2d 6f 70 74 67 72 6f 75 70 2d 6c 61 62 65 6c 2d 74 65 78 74 2d 63 Data Ascii: -layer-color: rgba(0, 0, 0, .04);--mat-option-selected-state-layer-color: rgba(0, 0, 0, .04)}.mat-accent{--mat-option-selected-state-label-text-color: #c4bfb6}.mat-warn{--mat-option-selected-state-label-text-color: #b00020}html{--mat-optgroup-label-text-c
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6d 69 6e 69 6d 61 6c 3a 61 66 74 65 72 7b 63 6f 6c 6f 72 3a 23 63 34 62 66 62 36 7d 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 61 74 2d 70 73 65 75 64 6f 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 65 64 2e 6d 61 74 2d 70 73 65 75 64 6f 2d 63 68 65 63 6b 62 6f 78 2d 66 75 6c 6c 2c 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 61 74 2d 70 73 65 75 64 6f 2d 63 68 65 63 6b 62 6f 78 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2e 6d 61 74 2d 70 73 65 75 64 6f 2d 63 68 65 63 6b 62 6f 78 2d 66 75 6c 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 63 34 62 66 62 36 7d 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 61 74 2d 70 73 65 75 64 6f 2d 63 68 65 63 6b 62 6f 78 2d 63 68 65 63 6b 65 64 2e 6d 61 74 2d 70 73 65 75 64 6f 2d 63 68 65 63 6b 62 6f 78 2d 66 75 6c 6c 3a 61 66 74 65 Data Ascii: minimal:after{color:#c4bfb6}.mat-accent .mat-pseudo-checkbox-checked.mat-pseudo-checkbox-full,.mat-accent .mat-pseudo-checkbox-indeterminate.mat-pseudo-checkbox-full{background:#c4bfb6}.mat-accent .mat-pseudo-checkbox-checked.mat-pseudo-checkbox-full:afte
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 69 6f 6e 2d 7a 31 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 31 70 78 20 2d 31 70 78 20 23 30 30 30 33 2c 30 20 31 70 78 20 31 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 31 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 32 2c 2e 6d 61 74 2d 6d 64 63 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 63 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 32 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 31 70 78 20 2d 32 70 78 20 23 30 30 30 33 2c 30 20 32 70 78 20 32 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 31 70 78 20 35 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 33 2c 2e 6d 61 74 2d 6d 64 63 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 70 65 63 Data Ascii: ion-z1{box-shadow:0 2px 1px -1px #0003,0 1px 1px #00000024,0 1px 3px #0000001f}.mat-elevation-z2,.mat-mdc-elevation-specific.mat-elevation-z2{box-shadow:0 3px 1px -2px #0003,0 2px 2px #00000024,0 1px 5px #0000001f}.mat-elevation-z3,.mat-mdc-elevation-spec
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 34 70 78 20 32 30 70 78 20 33 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 31 32 2c 2e 6d 61 74 2d 6d 64 63 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 63 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 31 32 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 37 70 78 20 38 70 78 20 2d 34 70 78 20 23 30 30 30 33 2c 30 20 31 32 70 78 20 31 37 70 78 20 32 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 35 70 78 20 32 32 70 78 20 34 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 31 33 2c 2e 6d 61 74 2d 6d 64 63 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 63 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 31 33 7b 62 6f 78 2d 73 Data Ascii: x #00000024,0 4px 20px 3px #0000001f}.mat-elevation-z12,.mat-mdc-elevation-specific.mat-elevation-z12{box-shadow:0 7px 8px -4px #0003,0 12px 17px 2px #00000024,0 5px 22px 4px #0000001f}.mat-elevation-z13,.mat-mdc-elevation-specific.mat-elevation-z13{box-s
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 20 31 30 70 78 20 31 33 70 78 20 2d 36 70 78 20 23 30 30 30 33 2c 30 20 32 31 70 78 20 33 33 70 78 20 33 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 38 70 78 20 34 30 70 78 20 37 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 32 32 2c 2e 6d 61 74 2d 6d 64 63 2d 65 6c 65 76 61 74 69 6f 6e 2d 73 70 65 63 69 66 69 63 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 32 32 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 30 70 78 20 31 34 70 78 20 2d 36 70 78 20 23 30 30 30 33 2c 30 20 32 32 70 78 20 33 35 70 78 20 33 70 78 20 23 30 30 30 30 30 30 32 34 2c 30 20 38 70 78 20 34 32 70 78 20 37 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 6d 61 74 2d 65 6c 65 76 61 74 69 6f 6e 2d 7a 32 33 2c 2e 6d 61 74 2d 6d 64 63 2d 65 6c 65 76 Data Ascii: 10px 13px -6px #0003,0 21px 33px 3px #00000024,0 8px 40px 7px #0000001f}.mat-elevation-z22,.mat-mdc-elevation-specific.mat-elevation-z22{box-shadow:0 10px 14px -6px #0003,0 22px 35px 3px #00000024,0 8px 42px 7px #0000001f}.mat-elevation-z23,.mat-mdc-elev
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 33 32 2c 20 33 37 2c 20 33 38 2c 20 2e 35 34 29 7d 2e 6d 61 74 2d 6d 64 63 2d 63 61 72 64 7b 2d 2d 6d 61 74 2d 63 61 72 64 2d 74 69 74 6c 65 2d 74 65 78 74 2d 66 6f 6e 74 3a 20 52 6f 62 6f 74 6f 3b 2d 2d 6d 61 74 2d 63 61 72 64 2d 74 69 74 6c 65 2d 74 65 78 74 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 35 36 70 78 3b 2d 2d 6d 61 74 2d 63 61 72 64 2d 74 69 74 6c 65 2d 74 65 78 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 2d 2d 6d 61 74 2d 63 61 72 64 2d 74 69 74 6c 65 2d 74 65 78 74 2d 74 72 61 63 6b 69 6e 67 3a 20 6e 6f 72 6d 61 6c 3b 2d 2d 6d 61 74 2d 63 61 72 64 2d 74 69 74 6c 65 2d 74 65 78 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 2d 2d 6d 61 74 2d 63 61 72 64 2d 73 75 62 74 69 74 6c 65 2d 74 65 78 74 2d 66 6f 6e 74 3a 20 52 6f 62 6f 74 6f 3b 2d 2d 6d 61 74 Data Ascii: 32, 37, 38, .54)}.mat-mdc-card{--mat-card-title-text-font: Roboto;--mat-card-title-text-line-height: 56px;--mat-card-title-text-size: 16px;--mat-card-title-text-tracking: normal;--mat-card-title-text-weight: 700;--mat-card-subtitle-text-font: Roboto;--mat
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6f 6c 6f 72 2c 20 72 67 62 61 28 31 34 2c 20 31 31 34 2c 20 31 33 39 2c 20 2e 32 35 29 29 7d 2e 6d 61 74 2d 6d 64 63 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2e 6d 61 74 2d 61 63 63 65 6e 74 7b 2d 2d 6d 64 63 2d 6c 69 6e 65 61 72 2d 70 72 6f 67 72 65 73 73 2d 61 63 74 69 76 65 2d 69 6e 64 69 63 61 74 6f 72 2d 63 6f 6c 6f 72 3a 20 23 63 34 62 66 62 36 3b 2d 2d 6d 64 63 2d 6c 69 6e 65 61 72 2d 70 72 6f 67 72 65 73 73 2d 74 72 61 63 6b 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 39 36 2c 20 31 39 31 2c 20 31 38 32 2c 20 2e 32 35 29 7d 2e 6d 61 74 2d 6d 64 63 2d 70 72 6f 67 72 65 73 73 2d 62 61 72 2e 6d 61 74 2d 61 63 63 65 6e 74 20 2e 6d 64 63 2d 6c 69 6e 65 61 72 2d 70 72 6f 67 72 65 73 73 5f 5f 62 75 66 66 65 72 2d 64 6f 74 73 7b 62 61 63 6b 67 72 6f 75 6e 64 Data Ascii: olor, rgba(14, 114, 139, .25))}.mat-mdc-progress-bar.mat-accent{--mdc-linear-progress-active-indicator-color: #c4bfb6;--mdc-linear-progress-track-color: rgba(196, 191, 182, .25)}.mat-mdc-progress-bar.mat-accent .mdc-linear-progress__buffer-dots{background

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49777	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1317	OUT	GET /latest/Full/Bundle/toolIcons-en-US.css?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	506	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: text/css Content-Length: 3252 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: byFbJ7TZs37QAEXq5iwwGUJVIWYAAAAAFQsgjl7G0uVtQcYBiBn9iQ== X-CDN: Imperva X-Iinfo: 55-23603012-23603071 NNNN CT(14 16 0) RT(1713460546528 231) q(0 0 0 -1) r(1 1) U24
2024-04-18 17:15:47 UTC	946	IN	Data Raw: 2e 64 6f 63 2d 70 64 66 2d 69 63 6f 6e 2d 32 34 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 67 41 41 41 41 59 43 41 49 41 41 41 42 76 46 61 71 76 41 41 41 43 51 6b 6c 45 51 56 51 34 79 36 32 55 79 36 75 68 59 52 7a 48 7a 7a 38 34 47 79 75 52 52 6d 6f 57 51 6d 36 52 6c 4a 57 56 6b 76 73 6c 4a 57 77 73 72 42 51 32 6c 4c 41 59 52 48 4a 4c 78 2f 31 75 33 48 4c 4c 6e 48 4e 63 5a 2b 59 37 4e 48 4a 35 6e 58 50 55 66 46 62 76 38 37 37 66 35 2f 76 38 62 73 2f 37 39 50 73 2f 38 58 53 2b 2b 50 45 75 2f 58 35 2f 4d 70 6c 73 4e 70 75 37 52 74 76 74 39 74 73 6e 67 4e 46 67 4d 4b 68 55 4b Data Ascii: .doc-pdf-icon-24{background:transparent url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYCAIAAABvFaqvAAACQklEQVQ4y62Uy6uhYRzHzz84GyuRRmoWQm6RlJWVkvslJWwsrBQ2lLAYRHJLx/1u3HLLnHNcZ+Y7NHJ5nXPUfFbv877f5/v8bs/79Ps/8XS++PEu/X5/MplsNpu7Rtvt9tsngNFgMKhUK
2024-04-18 17:15:47 UTC	219	IN	Data Raw: 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 51 41 41 41 41 58 43 41 59 41 41 41 41 4c 48 57 2b 6a 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 32 5a 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d Data Ascii: kground:transparent url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAXCAYAAAALHW+jAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAA2ZpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNM
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 77 64 47 73 39 49 6b 46 6b 62 32 4a 6c 49 46 68 4e 55 43 42 44 62 33 4a 6c 49 44 55 75 4d 43 31 6a 4d 44 59 78 49 44 59 30 4c 6a 45 30 4d 44 6b 30 4f 53 77 67 4d 6a 41 78 4d 43 38 78 4d 69 38 77 4e 79 30 78 4d 44 6f 31 4e 7a 6f 77 4d 53 41 67 49 43 41 67 49 43 41 67 49 6a 34 67 50 48 4a 6b 5a 6a 70 53 52 45 59 67 65 47 31 73 62 6e 4d 36 63 6d 52 6d 50 53 4a 6f 64 48 52 77 4f 69 38 76 64 33 64 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 78 4f 54 6b 35 4c 7a 41 79 4c 7a 49 79 4c 58 4a 6b 5a 69 31 7a 65 57 35 30 Data Ascii: E1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1wdGs9IkFkb2JlIFhNUCBDb3JlIDUuMC1jMDYxIDY0LjE0MDk0OSwgMjAxMC8xMi8wNy0xMDo1NzowMSAgICAgICAgIj4gPHJkZjpSREYgeG1sbnM6cmRmPSJodHRwOi8vd3d3LnczLm9yZy8xOTk5LzAyLzIyLXJkZi1zeW50
2024-04-18 17:15:47 UTC	635	IN	Data Raw: 4f 6a 4c 45 76 37 59 32 74 72 36 76 4c 4b 79 41 73 50 68 45 42 71 4e 42 73 36 4a 54 43 41 51 55 48 69 52 53 41 51 47 67 77 47 46 32 2b 2f 33 59 57 64 6e 68 31 53 65 6e 35 2f 44 78 63 55 46 58 46 31 64 6f 51 41 37 77 2f 47 64 70 78 43 42 68 4f 67 73 46 6f 74 70 58 69 71 56 53 41 30 4c 31 6b 36 6a 30 59 42 57 71 36 55 4e 6b 4c 7a 54 36 53 77 78 59 58 2b 64 45 44 4c 78 67 31 41 6f 42 49 2f 48 4d 79 46 44 32 47 77 32 79 47 51 79 55 4b 76 56 4a 6f 53 6f 66 48 56 31 46 52 51 4b 42 66 6d 67 37 39 72 61 47 6b 61 6a 46 6e 49 56 34 72 6b 5a 6a 55 5a 79 50 44 30 39 70 64 33 52 77 65 76 31 30 68 47 77 64 73 78 39 68 58 71 39 44 74 56 71 46 53 71 56 43 6d 32 47 70 46 4e 5a 50 6a 34 2b 70 73 61 69 31 57 72 42 37 75 34 75 4b 63 45 62 45 49 31 47 79 57 35 6a 59 34 4e 43 Data Ascii: OjLEv7Y2tr6vLKyAsPhEBqNBs6JTCAQUHiRSAQGgwGF2+/3YWdnh1Sen5/DxcUFXF1doQA7w/GdpxCBhOgsFotpXiqVSA0L1k6j0YBWq6UNkLzT6SwxYX+dEDLxg1AoBI/HMyFD2Gw2yGQyUKvVJoSofHV1FRQKBfmg79raGkajFnIV4rkZjUZyPD09pd3Rwev10hGwdsx9hXq9DtVqFSqVCm2GpFNZPj4+psai1WrB7u4uKcEbEI1GyW5jY4NC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49781	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1732	OUT	GET /Web/Assets/Shared/ClientSideConfig/ng-app-settings.js?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	392	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 1131 Connection: close Accept-Ranges: bytes Etag: "090db16dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:56 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 60-39160114-39160209 NNNY CT(13 14 0) RT(1713460546533 229) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	1060	IN	Data Raw: 76 61 72 20 6f 52 65 71 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 28 29 3b 0d 0a 76 61 72 20 63 6f 6e 66 69 67 3b 0d 0a 76 61 72 20 61 6e 63 68 6f 72 45 6c 65 6d 65 6e 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 61 27 29 3b 0d 0a 6c 65 74 20 77 69 6e 64 6f 77 45 78 69 73 74 73 41 6e 64 4e 6f 74 4c 6f 63 61 6c 68 6f 73 74 20 3d 20 28 77 69 6e 64 6f 77 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 21 3d 3d 20 27 6c 6f 63 61 6c 68 6f 73 74 27 29 3b 0d 0a 76 61 72 20 63 75 72 72 65 6e 74 50 72 6f 74 6f 63 6f 6c 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 3b 0d 0a 0d 0a 2f 2a 2a 0d 0a 20 2a 20 52 65 70 6c 61 63 65 73 20 74 68 65 20 68 6f 73 74 Data Ascii: var oReq = new XMLHttpRequest();var config;var anchorElement = document.createElement('a');let windowExistsAndNotLocalhost = (window && location.hostname !== 'localhost');var currentProtocol = window.location.protocol;/** * Replaces the host
2024-04-18 17:15:47 UTC	71	IN	Data Raw: 2f 73 68 61 72 65 64 2f 43 6c 69 65 6e 74 53 69 64 65 43 6f 6e 66 69 67 2f 6e 67 2d 61 70 70 2d 73 65 74 74 69 6e 67 73 2e 6a 73 6f 6e 22 2c 20 66 61 6c 73 65 29 3b 0d 0a 6f 52 65 71 2e 73 65 6e 64 28 29 3b 0d 0a Data Ascii: /shared/ClientSideConfig/ng-app-settings.json", false);oReq.send();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49782	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1716	OUT	GET /Web/Assets/Full/Bundle/helpers.min.js?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	391	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 1030 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 31-2080166-2080168 NNNY CT(13 14 0) RT(1713460546529 227) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	1030	IN	Data Raw: 76 61 72 20 41 70 70 53 68 61 72 65 64 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 61 29 7b 69 66 28 24 2e 69 73 41 72 72 61 79 28 61 29 29 7b 66 6f 72 28 76 61 72 20 62 3d 21 30 2c 63 3d 30 3b 63 3c 61 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 5b 63 5d 26 26 6e 75 6c 6c 21 3d 3d 61 5b 63 5d 7c 7c 28 62 3d 21 31 29 3b 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 7d 61 2e 69 73 44 65 66 69 6e 65 64 41 6e 64 4e 6f 74 4e 75 6c 6c 3d 62 7d 28 62 3d 61 2e 43 6f 6d 6d 6f Data Ascii: var AppShared;!function(a){var b;!function(a){var b;!function(a){function b(a){if($.isArray(a)){for(var b=!0,c=0;c<a.length;c++)"undefined"!=typeof a[c]&&null!==a[c]\|\|(b=!1);return b}return"undefined"!=typeof a&&null!==a}a.isDefinedAndNotNull=b}(b=a.Commo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49783	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1715	OUT	GET /web/Assets/Full/Bundle/sitejs.min.js?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	394	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 16345 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 60-39160113-39160199 NNNY CT(13 14 0) RT(1713460546532 221) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	1058	IN	Data Raw: 76 61 72 20 41 70 70 53 68 61 72 65 64 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 2c 63 3d 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 67 65 74 28 22 43 6f 6e 73 75 6d 65 72 53 65 74 74 69 6e 67 73 22 29 3b 69 66 28 61 2e 48 65 6c 70 65 72 73 2e 43 6f 6d 6d 6f 6e 2e 69 73 44 65 66 69 6e 65 64 41 6e 64 4e 6f 74 4e 75 6c 6c 28 63 2e 43 75 72 72 65 6e 74 43 75 6c 74 75 72 65 29 29 73 77 69 74 63 68 28 63 2e 43 75 72 72 65 6e 74 43 75 6c 74 75 72 65 29 7b 63 61 73 65 22 65 6e 2d 55 53 22 3a 62 3d 61 2e 43 6f 6d 6d 6f 6e 2e 43 75 6c 74 75 72 65 5b 22 65 6e 2d 55 53 22 5d 3b 62 72 65 61 Data Ascii: var AppShared;!function(a){var b;!function(b){function c(){var b,c=AssetShared.Helpers.modelDataLibrary.get("ConsumerSettings");if(a.Helpers.Common.isDefinedAndNotNull(c.CurrentCulture))switch(c.CurrentCulture){case"en-US":b=a.Common.Culture["en-US"];brea
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 41 70 70 53 68 61 72 65 64 7c 7c 28 41 70 70 53 68 61 72 65 64 3d 7b 7d 29 29 3b 76 61 72 20 41 70 70 53 68 61 72 65 64 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 53 6c 69 64 65 53 70 65 65 64 3d 33 30 30 2c 74 68 69 73 2e 75 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 76 61 72 20 65 3d 61 2e 67 65 74 56 61 6c 75 65 46 72 6f 6d 41 63 63 65 73 73 6f 72 28 63 29 3b 61 2e 73 6c 69 64 65 55 70 44 75 72 61 74 69 6f 6e 3d 64 2e 67 65 74 28 22 73 6c 69 64 65 55 70 44 75 72 61 74 69 6f 6e 22 29 7c 7c 61 2e 64 65 66 61 75 6c 74 53 Data Ascii: AppShared\|\|(AppShared={}));var AppShared;!function(a){var b;!function(a){var b=function(){function a(){var a=this;this.defaultSlideSpeed=300,this.update=function(b,c,d){var e=a.getValueFromAccessor(c);a.slideUpDuration=d.get("slideUpDuration")\|\|a.defaultS
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 2e 24 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 6d 61 72 67 69 6e 54 6f 70 3a 61 2e 24 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 74 6f 70 22 29 2c 6d 61 72 67 69 6e 67 42 6f 74 74 6f 6d 3a 61 2e 24 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 22 29 7d 3b 61 2e 24 74 61 72 67 65 74 45 6c 65 6d 65 6e 74 2e 63 73 73 28 7b 77 69 64 74 68 3a 63 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 63 2e 68 65 69 67 68 74 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 7d 29 2c 61 2e 24 77 72 61 70 70 65 72 45 6c 65 6d 65 6e 74 2e 63 73 73 28 7b 68 65 69 67 68 74 3a 63 2e 68 65 69 67 68 74 2c 64 69 73 70 6c 61 79 3a 22 62 6c 6f 63 6b 22 2c 22 6d Data Ascii: .$targetElement.outerHeight(),marginTop:a.$targetElement.css("margin-top"),margingBottom:a.$targetElement.css("margin-bottom")};a.$targetElement.css({width:c.width,height:c.height,display:"block"}),a.$wrapperElement.css({height:c.height,display:"block","m
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 3b 61 2e 52 65 73 74 72 69 63 74 54 6f 57 69 6e 64 6f 77 3d 62 7d 28 62 3d 61 2e 43 75 73 74 6f 6d 4b 6e 6f 63 6b 6f 75 74 48 61 6e 64 6c 65 72 73 7c 7c 28 61 2e 43 75 73 74 6f 6d 4b 6e 6f 63 6b 6f 75 74 48 61 6e 64 6c 65 72 73 3d 7b 7d 29 29 7d 28 41 70 70 53 68 61 72 65 64 7c 7c 28 41 70 70 53 68 61 72 65 64 3d 7b 7d 29 29 3b 76 61 72 20 41 70 70 53 68 61 72 65 64 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 53 6c 69 64 65 53 70 65 65 64 3d 33 30 30 2c 74 68 69 73 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 61 2e 73 6c 69 Data Ascii: ;a.RestrictToWindow=b}(b=a.CustomKnockoutHandlers\|\|(a.CustomKnockoutHandlers={}))}(AppShared\|\|(AppShared={}));var AppShared;!function(a){var b;!function(a){var b=function(){function a(){var a=this;this.defaultSlideSpeed=300,this.init=function(b,c,d){a.sli
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 6f 6d 6d 6f 6e 2c 68 28 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 41 70 70 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 43 6f 6d 6d 6f 6e 2e 69 73 44 65 66 69 6e 65 64 41 6e 64 4e 6f 74 4e 75 6c 6c 28 61 2e 63 61 63 68 65 29 7c 7c 62 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 65 72 6e 69 7a 72 2e 6a 73 6f 6e 7d 66 75 6e 63 74 69 6f 6e 20 65 28 62 29 7b 76 61 72 20 65 3d 2d 31 3b 69 66 28 64 28 29 29 7b 76 61 72 20 66 3d 62 2b 61 2e 65 78 70 69 72 61 74 69 6f 6e 4b 65 79 53 75 66 66 69 78 3b 63 28 29 3b 66 6f 72 28 76 61 72 20 67 3d 61 2e 63 61 63 68 65 2e 6c 65 6e 67 74 68 2d 31 3b 67 3e 3d 30 3b 67 2d 2d 29 69 66 28 61 2e 63 61 63 68 65 5b 67 5d 2e 6b 65 79 3d 3d 3d 62 29 65 3d 61 2e 63 61 63 68 65 5b 67 5d 2e 76 61 Data Ascii: ommon,h()}function c(){AppShared.Helpers.Common.isDefinedAndNotNull(a.cache)\|\|b()}function d(){return Modernizr.json}function e(b){var e=-1;if(d()){var f=b+a.expirationKeySuffix;c();for(var g=a.cache.length-1;g>=0;g--)if(a.cache[g].key===b)e=a.cache[g].va
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 74 68 69 73 2e 6b 65 79 3d 61 2c 74 68 69 73 2e 76 61 6c 75 65 3d 62 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 61 2e 49 6e 69 74 3d 62 2c 61 2e 67 65 74 56 61 6c 75 65 3d 65 2c 61 2e 73 65 74 56 61 6c 75 65 3d 66 2c 61 2e 72 65 6d 6f 76 65 56 61 6c 75 65 3d 67 2c 61 2e 70 6f 70 75 6c 61 74 65 43 61 63 68 65 3d 68 2c 61 2e 70 75 73 68 43 61 63 68 65 54 6f 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 69 2c 61 2e 70 72 75 6e 65 45 78 70 69 72 65 64 4c 6f 63 61 6c 53 74 6f 72 61 67 65 49 74 65 6d 73 3d 6a 7d 28 62 3d 61 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 7c 7c 28 61 2e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 3d 7b 7d 29 29 7d 28 62 3d 61 2e 53 68 61 72 65 64 7c 7c 28 61 2e 53 68 61 72 65 64 3d 7b 7d 29 29 7d 28 41 70 70 46 Data Ascii: unction a(a,b){this.key=a,this.value=b}return a}();a.Init=b,a.getValue=e,a.setValue=f,a.removeValue=g,a.populateCache=h,a.pushCacheToLocalStorage=i,a.pruneExpiredLocalStorageItems=j}(b=a.LocalStorage\|\|(a.LocalStorage={}))}(b=a.Shared\|\|(a.Shared={}))}(AppF
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 7d 2c 63 29 7d 2c 62 7d 28 62 29 3b 61 2e 54 65 78 74 49 6e 70 75 74 57 69 74 68 49 6e 69 74 3d 64 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 61 26 26 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 5f 5f 65 78 74 65 6e 64 73 28 62 2c 61 29 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 45 6c 65 6d 65 6e 74 56 61 6c 75 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 28 62 2e 63 68 65 63 6b 65 64 29 7d 2c 62 2e 70 72 6f 74 6f 74 79 70 65 2e 77 69 72 69 6e 67 56 61 6c 75 65 42 69 6e 64 69 6e 67 73 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6b 6f 2e 61 70 70 6c 79 42 69 6e 64 69 6e 67 73 54 Data Ascii: },c)},b}(b);a.TextInputWithInit=d;var e=function(a){function b(){return null!==a&&a.apply(this,arguments)\|\|this}return __extends(b,a),b.prototype.setElementValue=function(a,b){a(b.checked)},b.prototype.wiringValueBindings=function(a,b,c){ko.applyBindingsT
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 7b 69 66 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 62 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 61 2e 69 6e 64 65 78 4f 66 28 22 23 22 29 2b 31 29 2c 64 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 5f 22 2b 62 29 3b 64 26 26 24 28 22 2e 75 69 2d 64 69 61 6c 6f 67 22 29 2e 63 73 73 28 22 74 6f 70 22 2c 64 2e 6f 66 66 73 65 74 54 6f 70 2b 63 2e 6f 66 66 73 65 74 54 6f 70 29 7d 7d 2c 74 68 69 73 2e 65 76 65 6e 74 42 72 6f 61 64 63 61 73 74 65 72 3d 62 2c 74 68 69 73 2e 6f 66 66 73 65 74 54 6f 70 3d 4d 61 74 68 2e 72 6f 75 6e 64 28 28 24 28 77 69 6e 64 6f 77 29 2e 68 65 69 67 68 74 28 29 2d 61 2e 68 65 69 67 68 74 28 29 29 Data Ascii: {if(window.location.hash){var a=window.location.href,b=a.substring(a.indexOf("#")+1),d=document.getElementById("_"+b);d&&$(".ui-dialog").css("top",d.offsetTop+c.offsetTop)}},this.eventBroadcaster=b,this.offsetTop=Math.round(($(window).height()-a.height())
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 7d 2c 61 7d 28 29 3b 61 2e 56 69 65 77 4d 6f 64 65 6c 42 75 69 6c 64 65 72 3d 62 3b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 61 26 26 28 61 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 62 26 26 28 62 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 63 26 26 28 63 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 64 26 26 28 64 3d 6e 75 6c 6c 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 24 6d 79 58 70 65 72 74 68 72 3d 61 2c 74 68 69 73 2e 24 73 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 54 61 73 6b 73 3d 62 2c 74 68 69 73 2e 24 73 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 54 6f 70 69 63 73 3d 63 2c 74 68 69 73 2e 24 73 69 Data Ascii: },a}();a.ViewModelBuilder=b;var c=function(){function a(a,b,c,d,e){void 0===a&&(a=null),void 0===b&&(b=null),void 0===c&&(c=null),void 0===d&&(d=null),void 0===e&&(e=null),this.$myXperthr=a,this.$siteNavigationTasks=b,this.$siteNavigationTopics=c,this.$si
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 65 77 4d 6f 64 65 6c 3d 6e 65 77 20 41 73 73 65 74 46 75 6c 6c 2e 54 61 62 73 48 61 6e 64 6c 65 44 72 6f 70 44 6f 77 6e 2e 56 69 65 77 4d 6f 64 65 6c 28 74 68 69 73 2e 24 70 72 6f 64 75 63 74 73 53 65 6c 65 63 74 6f 72 2c 7b 69 73 44 72 6f 70 44 6f 77 6e 46 6c 75 69 64 3a 21 31 7d 29 29 7d 72 65 74 75 72 6e 20 61 7d 28 29 3b 61 2e 56 69 65 77 4d 6f 64 65 6c 3d 62 7d 28 62 3d 61 2e 47 6c 6f 62 61 6c 4e 61 76 69 67 61 74 69 6f 6e 7c 7c 28 61 2e 47 6c 6f 62 61 6c 4e 61 76 69 67 61 74 69 6f 6e 3d 7b 7d 29 29 7d 28 62 3d 61 2e 53 68 61 72 65 64 7c 7c 28 61 2e 53 68 61 72 65 64 3d 7b 7d 29 29 7d 28 41 70 70 46 75 6c 6c 7c 7c 28 41 70 70 46 75 6c 6c 3d 7b 7d 29 29 3b 76 61 72 20 41 70 70 46 75 6c 6c 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 Data Ascii: ewModel=new AssetFull.TabsHandleDropDown.ViewModel(this.$productsSelector,{isDropDownFluid:!1}))}return a}();a.ViewModel=b}(b=a.GlobalNavigation\|\|(a.GlobalNavigation={}))}(b=a.Shared\|\|(a.Shared={}))}(AppFull\|\|(AppFull={}));var AppFull;!function(a){var b;!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49779	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1322	OUT	GET /latest/Shared/Scripts/Libs/OneTrust/one-trust-init.min.js?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	520	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 2418 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: 5EYzW++D/xzQAEXq5iwwGUJVIWYAAAAAEKlrYMfjyp+3T5CU55dOqQ== X-CDN: Imperva X-Iinfo: 60-39160112-39160200 NNNN CT(14 17 0) RT(1713460546529 227) q(0 0 0 -1) r(1 1) U24
2024-04-18 17:15:47 UTC	932	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 4f 70 74 61 6e 6f 6e 57 72 61 70 70 65 72 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 47 65 74 49 6e 69 74 69 61 6c 47 72 70 73 28 29 7b 4f 70 74 61 6e 6f 6e 57 72 61 70 70 65 72 43 6f 75 6e 74 3d 22 22 2c 6f 74 49 6e 69 47 72 70 73 3d 4f 6e 65 74 72 75 73 74 41 63 74 69 76 65 47 72 6f 75 70 73 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 44 65 6c 65 74 65 43 6f 6f 6b 69 65 28 65 29 7b 76 61 72 20 74 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 4f 70 74 61 6e 6f 6e 2e 47 65 74 44 6f 6d 61 69 6e 44 61 74 61 28 29 2e 47 72 6f 75 70 73 29 29 2c 6e 3d 6f 74 47 65 74 49 6e 61 63 74 69 76 65 49 64 28 65 2c 4f 6e 65 74 72 75 73 74 41 63 74 69 76 65 47 72 6f 75 70 73 29 3b 69 66 28 30 21 3d 6e 2e 6c 65 6e 67 Data Ascii: function OptanonWrapper(){}function otGetInitialGrps(){OptanonWrapperCount="",otIniGrps=OnetrustActiveGroups}function otDeleteCookie(e){var t=JSON.parse(JSON.stringify(Optanon.GetDomainData().Groups)),n=otGetInactiveId(e,OnetrustActiveGroups);if(0!=n.leng
2024-04-18 17:15:47 UTC	1452	IN	Data Raw: 65 28 22 77 77 77 22 2c 22 22 29 2c 6f 3d 5b 74 2c 6e 2c 22 2e 22 2b 74 2c 22 2e 22 2b 6e 2c 22 61 73 73 65 74 2e 22 2b 6e 5d 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 3b 20 4d 61 78 2d 41 67 65 3d 2d 39 39 39 39 39 39 39 39 3b 20 50 61 74 68 3d 2f 22 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6f 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 2b 22 3d 3b 20 4d 61 78 2d 41 67 65 3d 2d 39 39 39 39 39 39 39 39 3b 20 50 61 74 68 3d 2f 3b 20 64 6f 6d 61 69 6e 3d 22 2b 6f 5b 72 5d 2b 22 3b 22 3b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 65 29 2c 70 61 74 68 41 72 72 61 79 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 22 Data Ascii: e("www",""),o=[t,n,"."+t,"."+n,"asset."+n];document.cookie=e+"=; Max-Age=-99999999; Path=/";for(var r=0;r<o.length;r++)document.cookie=e+"=; Max-Age=-99999999; Path=/; domain="+o[r]+";";localStorage.removeItem(e),pathArray=window.location.pathname.split("
2024-04-18 17:15:47 UTC	34	IN	Data Raw: 6e 66 69 72 6d 42 74 6e 44 69 73 63 6f 76 65 72 79 49 6e 74 65 72 76 61 6c 29 29 7d 2c 31 30 30 29 3b Data Ascii: nfirmBtnDiscoveryInterval))},100);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49784	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	555	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:47 UTC	859	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Wed, 17 Apr 2024 06:40:28 GMT x-ms-request-id: 4732fd52-501e-0032-7de1-9039f4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 9 Expires: Fri, 19 Apr 2024 17:15:47 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664c868a4053cd-ATL
2024-04-18 17:15:47 UTC	510	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d Data Ascii: T","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d Data Ascii: (!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!=
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b Data Ascii: er,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 Data Ascii: t("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 Data Ascii: ,this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptEleme
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 Data Ascii: ocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],th
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b Data Ascii: er"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 Data Ascii: gionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Rule
2024-04-18 17:15:47 UTC	1369	IN	Data Raw: 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 Data Ascii: asIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49788	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1755	OUT	GET /Web/Assets/Shared/AngularBundle/runtime.js HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hrcenter.us.brightmine.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	475	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 1107 Connection: close Accept-Ranges: bytes Etag: "090db16dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:56 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 x-incap-sess-cookie-hdr: i863JFP3l1jZ80Tq5iwwGUJVIWYAAAAA5S9N8WSJZo/gPZ/e8r/S0g== X-CDN: Imperva X-Iinfo: 57-29357394-29357462 NNNY CT(13 15 0) RT(1713460546688 231) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:47 UTC	977	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 76 3d 7b 7d 2c 62 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 61 3d 62 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 62 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6e 29 2c 72 2e 65 78 70 6f 72 74 73 7d 6e 2e 6d 3d 76 2c 65 3d 5b 5d 2c 6e 2e 4f 3d 28 61 2c 72 2c 6f 2c 74 29 3d 3e 7b 69 66 28 21 72 29 7b 76 61 72 20 63 3d 31 2f 30 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 65 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 72 2c 6f 2c 74 5d 3d 65 5b 6c 5d 2c Data Ascii: (()=>{"use strict";var e,v={},b={};function n(e){var a=b[e];if(void 0!==a)return a.exports;var r=b[e]={exports:{}};return v[e].call(r.exports,r,r.exports,n),r.exports}n.m=v,e=[],n.O=(a,r,o,t)=>{if(!r){var c=1/0;for(l=0;l<e.length;l++){for(var[r,o,t]=e[l],
2024-04-18 17:15:47 UTC	130	IN	Data Raw: 63 6f 6d 70 6f 6e 65 6e 74 5f 62 75 69 6c 64 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 63 6f 6d 70 6f 6e 65 6e 74 5f 62 75 69 6c 64 65 72 7c 7c 5b 5d 3b 72 2e 66 6f 72 45 61 63 68 28 61 2e 62 69 6e 64 28 6e 75 6c 6c 2c 30 29 29 2c 72 2e 70 75 73 68 3d 61 2e 62 69 6e 64 28 6e 75 6c 6c 2c 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 29 7d 29 28 29 7d 29 28 29 3b Data Ascii: component_builder=self.webpackChunkweb_component_builder\|\|[];r.forEach(a.bind(null,0)),r.push=a.bind(null,r.push.bind(r))})()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49789	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	583	OUT	GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1 Host: rbi.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:47 UTC	764	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Length: 0 Connection: close X-TID: qITRQaB2SJs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://rbi.demdex.net/firstevent?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb DCS: dcs-prod-va6-1-v059-0845fb33f.edge-va6.demdex.com 0 ms set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:15:47 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49790	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1302	OUT	GET /latest/Full/Bundle/checkScript.min.js?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:47 UTC	517	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 116 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: HWSpHHZqiD7QAEXq5iwwGUNVIWYAAAAA5rVyw2BDozcUFlOpVVsHGg== X-CDN: Imperva X-Iinfo: 39-2135277-2135286 NNNY CT(14 16 0) RT(1713460546986 211) q(0 0 0 -1) r(1 1) U24
2024-04-18 17:15:47 UTC	116	IN	Data Raw: 76 61 72 20 64 6f 63 45 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 64 6f 63 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 3d 64 6f 63 45 6c 65 6d 65 6e 74 2e 63 6c 61 73 73 4e 61 6d 65 2e 72 65 70 6c 61 63 65 28 2f 5c 62 6e 6f 2d 73 63 72 69 70 74 5c 62 2f 2c 22 73 63 72 69 70 74 22 29 3b Data Ascii: var docElement=document.documentElement;docElement.className=docElement.className.replace(/\bno-script\b/,"script");

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49792	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1757	OUT	GET /Web/Assets/Shared/AngularBundle/polyfills.js HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hrcenter.us.brightmine.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:48 UTC	476	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 95054 Connection: close Accept-Ranges: bytes Etag: "090db16dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:56 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 x-incap-sess-cookie-hdr: VUV3flYsIBvZ80Tq5iwwGUNVIWYAAAAAFFW69P6SefP9BzRff7sw6Q== X-CDN: Imperva X-Iinfo: 55-23603140-23603223 NNNY CT(13 14 0) RT(1713460547001 222) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:48 UTC	976	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 63 6f 6d 70 6f 6e 65 6e 74 5f 62 75 69 6c 64 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 63 6f 6d 70 6f 6e 65 6e 74 5f 62 75 69 6c 64 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 39 5d 2c 7b 35 33 32 31 3a 28 61 2c 69 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 28 32 34 32 29 2c 74 28 34 32 34 34 29 2c 74 28 37 36 35 37 29 2c 74 28 38 38 31 33 29 2c 74 28 35 33 31 30 29 2c 74 28 31 37 37 31 29 2c 74 28 32 33 31 34 29 2c 74 28 36 33 34 33 29 2c 74 28 38 31 34 38 29 2c 74 28 37 36 37 37 29 2c 74 28 32 36 39 31 29 2c 74 28 39 31 33 32 29 2c 74 28 37 38 37 38 29 2c 74 28 36 30 38 31 29 2c 74 28 32 32 39 38 29 2c 74 28 33 34 39 39 29 2c 77 69 6e Data Ascii: (self.webpackChunkweb_component_builder=self.webpackChunkweb_component_builder\|\|[]).push([[429],{5321:(a,i,t)=>{"use strict";t(242),t(4244),t(7657),t(8813),t(5310),t(1771),t(2314),t(6343),t(8148),t(7677),t(2691),t(9132),t(7878),t(6081),t(2298),t(3499),win
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 45 2c 74 68 69 73 2e 5f 6e 61 6d 65 3d 50 3f 50 2e 6e 61 6d 65 7c 7c 22 75 6e 6e 61 6d 65 64 22 3a 22 3c 72 6f 6f 74 3e 22 2c 74 68 69 73 2e 5f 70 72 6f 70 65 72 74 69 65 73 3d 50 26 26 50 2e 70 72 6f 70 65 72 74 69 65 73 7c 7c 7b 7d 2c 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 3d 6e 65 77 20 51 28 74 68 69 73 2c 74 68 69 73 2e 5f 70 61 72 65 6e 74 26 26 74 68 69 73 2e 5f 70 61 72 65 6e 74 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2c 50 29 7d 72 65 74 75 72 6e 20 55 2e 61 73 73 65 72 74 5a 6f 6e 65 50 61 74 63 68 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 64 2e 50 72 6f 6d 69 73 65 21 3d 3d 4c 74 2e 5a 6f 6e 65 41 77 61 72 65 50 72 6f 6d 69 73 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5a 6f 6e 65 2e 6a 73 20 68 61 73 20 Data Ascii: E,this._name=P?P.name\|\|"unnamed":"<root>",this._properties=P&&P.properties\|\|{},this._zoneDelegate=new Q(this,this._parent&&this._parent._zoneDelegate,P)}return U.assertZonePatched=function(){if(d.Promise!==Lt.ZoneAwarePromise)throw new Error("Zone.js has
2024-04-18 17:15:48 UTC	1403	IN	Data Raw: 29 29 72 65 74 75 72 6e 20 50 3b 50 3d 50 2e 5f 70 61 72 65 6e 74 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 69 66 28 21 45 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5a 6f 6e 65 53 70 65 63 20 72 65 71 75 69 72 65 64 21 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 6f 6e 65 44 65 6c 65 67 61 74 65 2e 66 6f 72 6b 28 74 68 69 73 2c 45 29 7d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 61 70 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 50 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 45 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 69 6e 67 20 66 75 6e 63 74 69 6f 6e 20 67 6f 74 3a 20 22 2b 45 29 3b 76 61 72 20 52 Data Ascii: ))return P;P=P._parent}return null},U.prototype.fork=function(E){if(!E)throw new Error("ZoneSpec required!");return this._zoneDelegate.fork(this,E)},U.prototype.wrap=function(E,P){if("function"!=typeof E)throw new Error("Expecting function got: "+E);var R
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 74 3d 43 74 7d 7d 7d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 68 65 64 75 6c 65 54 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 69 66 28 45 2e 7a 6f 6e 65 26 26 45 2e 7a 6f 6e 65 21 3d 3d 74 68 69 73 29 66 6f 72 28 76 61 72 20 50 3d 74 68 69 73 3b 50 3b 29 7b 69 66 28 50 3d 3d 3d 45 2e 7a 6f 6e 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 63 61 6e 20 6e 6f 74 20 72 65 73 63 68 65 64 75 6c 65 20 74 61 73 6b 20 74 6f 20 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6e 61 6d 65 2c 22 20 77 68 69 63 68 20 69 73 20 64 65 73 63 65 6e 64 61 6e 74 73 20 6f 66 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 7a 6f 6e 65 20 22 29 2e 63 6f 6e 63 61 74 28 45 2e 7a 6f 6e 65 2e 6e 61 6d 65 29 29 3b 50 3d 50 2e 70 61 72 65 6e 74 7d 45 2e 5f 74 72 61 6e 73 69 74 69 6f 6e 54 Data Ascii: t=Ct}}},U.prototype.scheduleTask=function(E){if(E.zone&&E.zone!==this)for(var P=this;P;){if(P===E.zone)throw Error("can not reschedule task to ".concat(this.name," which is descendants of the original zone ").concat(E.zone.name));P=P.parent}E._transitionT
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 2c 59 3d 7b 6e 61 6d 65 3a 22 22 2c 6f 6e 48 61 73 54 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 55 2c 45 2c 50 2c 52 29 7b 72 65 74 75 72 6e 20 55 2e 68 61 73 54 61 73 6b 28 50 2c 52 29 7d 2c 6f 6e 53 63 68 65 64 75 6c 65 54 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 55 2c 45 2c 50 2c 52 29 7b 72 65 74 75 72 6e 20 55 2e 73 63 68 65 64 75 6c 65 54 61 73 6b 28 50 2c 52 29 7d 2c 6f 6e 49 6e 76 6f 6b 65 54 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 55 2c 45 2c 50 2c 52 2c 4a 2c 43 74 29 7b 72 65 74 75 72 6e 20 55 2e 69 6e 76 6f 6b 65 54 61 73 6b 28 50 2c 52 2c 4a 2c 43 74 29 7d 2c 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3a 66 75 6e 63 74 69 6f 6e 28 55 2c 45 2c 50 2c 52 29 7b 72 65 74 75 72 6e 20 55 2e 63 61 6e 63 65 6c 54 61 73 6b 28 50 2c 52 29 7d 7d 2c 51 3d 66 75 6e 63 Data Ascii: ,Y={name:"",onHasTask:function(U,E,P,R){return U.hasTask(P,R)},onScheduleTask:function(U,E,P,R){return U.scheduleTask(P,R)},onInvokeTask:function(U,E,P,R,J,Ct){return U.invokeTask(P,R,J,Ct)},onCancelTask:function(U,E,P,R){return U.cancelTask(P,R)}},Q=func
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6e 76 6f 6b 65 54 61 73 6b 43 75 72 72 5a 6f 6e 65 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 5a 53 3d 52 26 26 28 52 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 52 3a 50 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 5a 53 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 3d 52 26 26 28 52 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 50 3a 50 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 44 6c 67 74 29 2c 74 68 69 73 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 3d 52 26 26 28 52 2e 6f 6e 43 61 6e 63 65 6c 54 61 73 6b 3f 74 68 69 73 2e 7a 6f 6e 65 3a 50 2e 5f 63 61 6e 63 65 6c 54 61 73 6b 43 75 72 72 5a 6f 6e 65 29 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 5a 53 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 68 61 73 54 61 73 6b 44 6c 67 74 3d 6e 75 Data Ascii: nvokeTaskCurrZone),this._cancelTaskZS=R&&(R.onCancelTask?R:P._cancelTaskZS),this._cancelTaskDlgt=R&&(R.onCancelTask?P:P._cancelTaskDlgt),this._cancelTaskCurrZone=R&&(R.onCancelTask?this.zone:P._cancelTaskCurrZone),this._hasTaskZS=null,this._hasTaskDlgt=nu
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6e 65 72 29 2c 28 52 3d 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 54 61 73 6b 5a 53 2e 6f 6e 53 63 68 65 64 75 6c 65 54 61 73 6b 28 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 54 61 73 6b 44 6c 67 74 2c 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 54 61 73 6b 43 75 72 72 5a 6f 6e 65 2c 45 2c 50 29 29 7c 7c 28 52 3d 50 29 3b 65 6c 73 65 20 69 66 28 50 2e 73 63 68 65 64 75 6c 65 46 6e 29 50 2e 73 63 68 65 64 75 6c 65 46 6e 28 50 29 3b 65 6c 73 65 7b 69 66 28 50 2e 74 79 70 65 21 3d 61 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 54 61 73 6b 20 69 73 20 6d 69 73 73 69 6e 67 20 73 63 68 65 64 75 6c 65 46 6e 2e 22 29 3b 4f 74 28 50 29 7d 72 65 74 75 72 6e 20 52 7d 2c 55 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 76 6f 6b 65 54 61 73 6b 3d 66 75 6e 63 74 69 Data Ascii: ner),(R=this._scheduleTaskZS.onScheduleTask(this._scheduleTaskDlgt,this._scheduleTaskCurrZone,E,P))\|\|(R=P);else if(P.scheduleFn)P.scheduleFn(P);else{if(P.type!=at)throw new Error("Task is missing scheduleFn.");Ot(P)}return R},U.prototype.invokeTask=functi
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6e 20 55 2e 69 6e 76 6f 6b 65 54 61 73 6b 3d 66 75 6e 63 74 69 6f 6e 28 45 2c 50 2c 52 29 7b 45 7c 7c 28 45 3d 74 68 69 73 29 2c 5f 74 2b 2b 3b 74 72 79 7b 72 65 74 75 72 6e 20 45 2e 72 75 6e 43 6f 75 6e 74 2b 2b 2c 45 2e 7a 6f 6e 65 2e 72 75 6e 54 61 73 6b 28 45 2c 50 2c 52 29 7d 66 69 6e 61 6c 6c 79 7b 31 3d 3d 5f 74 26 26 58 28 29 2c 5f 74 2d 2d 7d 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 55 2e 70 72 6f 74 6f 74 79 70 65 2c 22 7a 6f 6e 65 22 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 7a 6f 6e 65 7d 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 55 2e 70 72 6f Data Ascii: n U.invokeTask=function(E,P,R){E\|\|(E=this),_t++;try{return E.runCount++,E.zone.runTask(E,P,R)}finally{1==_t&&X(),_t--}},Object.defineProperty(U.prototype,"zone",{get:function(){return this._zone},enumerable:!1,configurable:!0}),Object.defineProperty(U.pro
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 48 74 3d 7b 6e 61 6d 65 3a 22 4e 4f 20 5a 4f 4e 45 22 7d 2c 4d 74 3d 22 6e 6f 74 53 63 68 65 64 75 6c 65 64 22 2c 41 74 3d 22 73 63 68 65 64 75 6c 69 6e 67 22 2c 52 74 3d 22 73 63 68 65 64 75 6c 65 64 22 2c 4b 3d 22 72 75 6e 6e 69 6e 67 22 2c 4e 74 3d 22 63 61 6e 63 65 6c 69 6e 67 22 2c 6c 74 3d 22 75 6e 6b 6e 6f 77 6e 22 2c 61 74 3d 22 6d 69 63 72 6f 54 61 73 6b 22 2c 54 74 3d 22 6d 61 63 72 6f 54 61 73 6b 22 2c 73 74 3d 22 65 76 65 6e 74 54 61 73 6b 22 2c 4c 74 3d 7b 7d 2c 6b 74 3d 7b 73 79 6d 62 6f 6c 3a 57 2c 63 75 72 72 65 6e 74 5a 6f 6e 65 46 72 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5a 74 7d 2c 6f 6e 55 6e 68 61 6e 64 6c 65 64 45 72 72 6f 72 3a 24 74 2c 6d 69 63 72 6f 74 61 73 6b 44 72 61 69 6e 44 6f 6e 65 3a 24 74 2c 73 Data Ascii: Ht={name:"NO ZONE"},Mt="notScheduled",At="scheduling",Rt="scheduled",K="running",Nt="canceling",lt="unknown",at="microTask",Tt="macroTask",st="eventTask",Lt={},kt={symbol:W,currentZoneFrame:function(){return Zt},onUnhandledError:$t,microtaskDrainDone:$t,s
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 65 2e 5f 5f 73 79 6d 62 6f 6c 5f 5f 28 22 22 29 3b 66 75 6e 63 74 69 6f 6e 20 78 28 64 2c 70 29 7b 72 65 74 75 72 6e 20 5a 6f 6e 65 2e 63 75 72 72 65 6e 74 2e 77 72 61 70 28 64 2c 70 29 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 64 2c 70 2c 49 2c 4d 2c 4e 29 7b 72 65 74 75 72 6e 20 5a 6f 6e 65 2e 63 75 72 72 65 6e 74 2e 73 63 68 65 64 75 6c 65 4d 61 63 72 6f 54 61 73 6b 28 64 2c 70 2c 49 2c 4d 2c 4e 29 7d 76 61 72 20 53 3d 5a 6f 6e 65 2e 5f 5f 73 79 6d 62 6f 6c 5f 5f 2c 41 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 2c 54 3d 41 3f 77 69 6e 64 6f 77 3a 76 6f 69 64 20 30 2c 79 3d 41 26 26 54 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 7c 7c 67 6c 6f 62 61 6c 2c 6a 3d 22 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 Data Ascii: e.__symbol__("");function x(d,p){return Zone.current.wrap(d,p)}function O(d,p,I,M,N){return Zone.current.scheduleMacroTask(d,p,I,M,N)}var S=Zone.__symbol__,A=typeof window<"u",T=A?window:void 0,y=A&&T\|\|"object"==typeof self&&self\|\|global,j="removeAttribut

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49791	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1752	OUT	GET /Web/Assets/Shared/AngularBundle/main.js HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hrcenter.us.brightmine.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:48 UTC	478	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:47 GMT Content-Type: application/javascript Content-Length: 3624310 Connection: close Accept-Ranges: bytes Etag: "0f2697dec8fda1:0" Last-Modified: Tue, 16 Apr 2024 10:54:44 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 x-incap-sess-cookie-hdr: XoaFfPKWiTTZ80Tq5iwwGUNVIWYAAAAAc75Gnasei1LdvBrlDV2Wwg== X-CDN: Imperva X-Iinfo: 51-12301800-12301821 NNNY CT(13 15 0) RT(1713460546999 214) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:48 UTC	974	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 63 6f 6d 70 6f 6e 65 6e 74 5f 62 75 69 6c 64 65 72 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 77 65 62 5f 63 6f 6d 70 6f 6e 65 6e 74 5f 62 75 69 6c 64 65 72 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 35 37 36 3a 28 71 72 2c 74 65 2c 49 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 57 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 59 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 28 6e 3d 3e 7b 45 72 72 6f 72 2e 63 61 6c 6c 28 6e 29 2c 6e 2e 73 74 61 63 6b 3d 28 6e 65 77 20 45 72 72 6f 72 29 2e 73 74 61 63 6b 7d 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 Data Ascii: (self.webpackChunkweb_component_builder=self.webpackChunkweb_component_builder\|\|[]).push([[179],{9576:(qr,te,It)=>{"use strict";function W(e){return"function"==typeof e}function Y(e){const t=e(n=>{Error.call(n),n.stack=(new Error).stack});return t.prototy
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 3d 74 68 69 73 3b 69 66 28 61 29 7b 74 68 69 73 2e 5f 66 69 6e 61 6c 69 7a 65 72 73 3d 6e 75 6c 6c 3b 66 6f 72 28 63 6f 6e 73 74 20 6f 20 6f 66 20 61 29 74 72 79 7b 4e 28 6f 29 7d 63 61 74 63 68 28 72 29 7b 69 3d 69 3f 3f 5b 5d 2c 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 3f 69 3d 5b 2e 2e 2e 69 2c 2e 2e 2e 72 2e 65 72 72 6f 72 73 5d 3a 69 2e 70 75 73 68 28 72 29 7d 7d 69 66 28 69 29 74 68 72 6f 77 20 6e 65 77 20 52 28 69 29 7d 7d 61 64 64 28 69 29 7b 76 61 72 20 74 3b 69 66 28 69 26 26 69 21 3d 3d 74 68 69 73 29 69 66 28 74 68 69 73 2e 63 6c 6f 73 65 64 29 4e 28 69 29 3b 65 6c 73 65 7b 69 66 28 69 20 69 6e 73 74 61 6e 63 65 6f 66 20 58 29 7b 69 66 28 69 2e 63 6c 6f 73 65 64 7c 7c 69 2e 5f 68 61 73 50 61 72 65 6e 74 28 74 68 69 73 29 29 72 65 74 75 72 6e Data Ascii: =this;if(a){this._finalizers=null;for(const o of a)try{N(o)}catch(r){i=i??[],r instanceof R?i=[...i,...r.errors]:i.push(r)}}if(i)throw new R(i)}}add(i){var t;if(i&&i!==this)if(this.closed)N(i);else{if(i instanceof X){if(i.closed\|\|i._hasParent(this))return
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6c 3b 66 75 6e 63 74 69 6f 6e 20 4b 74 28 65 29 7b 69 66 28 4f 74 2e 75 73 65 44 65 70 72 65 63 61 74 65 64 53 79 6e 63 68 72 6f 6e 6f 75 73 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 29 7b 63 6f 6e 73 74 20 69 3d 21 73 74 3b 69 66 28 69 26 26 28 73 74 3d 7b 65 72 72 6f 72 54 68 72 6f 77 6e 3a 21 31 2c 65 72 72 6f 72 3a 6e 75 6c 6c 7d 29 2c 65 28 29 2c 69 29 7b 63 6f 6e 73 74 7b 65 72 72 6f 72 54 68 72 6f 77 6e 3a 74 2c 65 72 72 6f 72 3a 6e 7d 3d 73 74 3b 69 66 28 73 74 3d 6e 75 6c 6c 2c 74 29 74 68 72 6f 77 20 6e 7d 7d 65 6c 73 65 20 65 28 29 7d 63 6c 61 73 73 20 68 6e 20 65 78 74 65 6e 64 73 20 58 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 69 29 7b 73 75 70 65 72 28 29 2c 74 68 69 73 2e 69 73 53 74 6f 70 70 65 64 3d 21 31 2c 69 3f 28 74 68 69 73 2e 64 65 73 74 Data Ascii: l;function Kt(e){if(Ot.useDeprecatedSynchronousErrorHandling){const i=!st;if(i&&(st={errorThrown:!1,error:null}),e(),i){const{errorThrown:t,error:n}=st;if(st=null,t)throw n}}else e()}class hn extends X{constructor(i){super(),this.isStopped=!1,i?(this.dest
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 63 72 69 62 65 3d 28 29 3d 3e 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 2c 61 3d 7b 6e 65 78 74 3a 69 2e 6e 65 78 74 26 26 63 65 28 69 2e 6e 65 78 74 2c 6f 29 2c 65 72 72 6f 72 3a 69 2e 65 72 72 6f 72 26 26 63 65 28 69 2e 65 72 72 6f 72 2c 6f 29 2c 63 6f 6d 70 6c 65 74 65 3a 69 2e 63 6f 6d 70 6c 65 74 65 26 26 63 65 28 69 2e 63 6f 6d 70 6c 65 74 65 2c 6f 29 7d 29 3a 61 3d 69 7d 74 68 69 73 2e 64 65 73 74 69 6e 61 74 69 6f 6e 3d 6e 65 77 20 76 74 28 61 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 65 28 65 29 7b 4f 74 2e 75 73 65 44 65 70 72 65 63 61 74 65 64 53 79 6e 63 68 72 6f 6e 6f 75 73 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 3f 66 75 6e 63 74 69 6f 6e 20 4c 65 28 65 29 7b 4f 74 2e 75 73 65 44 65 70 72 65 63 61 74 65 64 53 79 6e 63 68 72 6f 6e 6f Data Ascii: cribe=()=>this.unsubscribe(),a={next:i.next&&ce(i.next,o),error:i.error&&ce(i.error,o),complete:i.complete&&ce(i.complete,o)}):a=i}this.destination=new vt(a)}}function ne(e){Ot.useDeprecatedSynchronousErrorHandling?function Le(e){Ot.useDeprecatedSynchrono
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 63 72 69 62 65 28 72 3d 3e 6f 3d 72 2c 72 3d 3e 61 28 72 29 2c 28 29 3d 3e 6e 28 6f 29 29 7d 29 7d 7d 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 3d 69 3d 3e 6e 65 77 20 65 28 69 29 2c 65 7d 29 28 29 3b 66 75 6e 63 74 69 6f 6e 20 43 6f 28 65 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 69 3d 65 3f 3f 4f 74 2e 50 72 6f 6d 69 73 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 69 3f 69 3a 50 72 6f 6d 69 73 65 7d 63 6f 6e 73 74 20 56 63 3d 59 28 65 3d 3e 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 74 68 69 73 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 4f 62 6a 65 63 74 55 6e 73 75 62 73 63 72 69 62 65 64 45 72 72 6f 72 22 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 6f 62 6a 65 63 74 20 75 6e 73 75 62 73 63 72 69 62 65 64 22 7d 29 3b 6c 65 74 20 79 74 Data Ascii: cribe(r=>o=r,r=>a(r),()=>n(o))})}}return e.create=i=>new e(i),e})();function Co(e){var i;return null!==(i=e??Ot.Promise)&&void 0!==i?i:Promise}const Vc=Y(e=>function(){e(this),this.name="ObjectUnsubscribedError",this.message="object unsubscribed"});let yt
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 72 76 65 72 73 3d 6e 75 6c 6c 2c 6f 2e 70 75 73 68 28 74 29 2c 6e 65 77 20 58 28 28 29 3d 3e 7b 74 68 69 73 2e 63 75 72 72 65 6e 74 4f 62 73 65 72 76 65 72 73 3d 6e 75 6c 6c 2c 51 28 6f 2c 74 29 7d 29 29 7d 5f 63 68 65 63 6b 46 69 6e 61 6c 69 7a 65 64 53 74 61 74 75 73 65 73 28 74 29 7b 63 6f 6e 73 74 7b 68 61 73 45 72 72 6f 72 3a 6e 2c 74 68 72 6f 77 6e 45 72 72 6f 72 3a 61 2c 69 73 53 74 6f 70 70 65 64 3a 6f 7d 3d 74 68 69 73 3b 6e 3f 74 2e 65 72 72 6f 72 28 61 29 3a 6f 26 26 74 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 61 73 4f 62 73 65 72 76 61 62 6c 65 28 29 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 4c 74 3b 72 65 74 75 72 6e 20 74 2e 73 6f 75 72 63 65 3d 74 68 69 73 2c 74 7d 7d 72 65 74 75 72 6e 20 65 2e 63 72 65 61 74 65 3d 28 69 2c 74 29 3d 3e 6e 65 77 20 Data Ascii: rvers=null,o.push(t),new X(()=>{this.currentObservers=null,Q(o,t)}))}_checkFinalizedStatuses(t){const{hasError:n,thrownError:a,isStopped:o}=this;n?t.error(a):o&&t.complete()}asObservable(){const t=new Lt;return t.source=this,t}}return e.create=(i,t)=>new
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 73 2e 73 68 6f 75 6c 64 55 6e 73 75 62 73 63 72 69 62 65 28 29 29 7b 63 6f 6e 73 74 7b 63 6c 6f 73 65 64 3a 74 7d 3d 74 68 69 73 3b 73 75 70 65 72 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 2c 21 74 26 26 28 6e 75 6c 6c 3d 3d 3d 28 69 3d 74 68 69 73 2e 6f 6e 46 69 6e 61 6c 69 7a 65 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 7c 7c 69 2e 63 61 6c 6c 28 74 68 69 73 29 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 74 28 65 2c 69 29 7b 72 65 74 75 72 6e 20 72 6e 28 28 74 2c 6e 29 3d 3e 7b 6c 65 74 20 61 3d 30 3b 74 2e 73 75 62 73 63 72 69 62 65 28 6c 65 28 6e 2c 6f 3d 3e 7b 6e 2e 6e 65 78 74 28 65 2e 63 61 6c 6c 28 69 2c 6f 2c 61 2b 2b 29 29 7d 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 Data Ascii: s.shouldUnsubscribe()){const{closed:t}=this;super.unsubscribe(),!t&&(null===(i=this.onFinalize)\|\|void 0===i\|\|i.call(this))}}}function Ft(e,i){return rn((t,n)=>{let a=0;t.subscribe(le(n,o=>{n.next(e.call(i,o,a++))}))})}function qn(e){return this instanceof
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 61 64 61 62 6c 65 53 74 72 65 61 6d 2c 20 41 72 72 61 79 2c 20 41 73 79 6e 63 49 74 65 72 61 62 6c 65 2c 20 6f 72 20 49 74 65 72 61 62 6c 65 2e 60 29 7d 63 6f 6e 73 74 20 4b 63 3d 66 75 6e 63 74 69 6f 6e 20 59 63 28 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 54 64 28 65 29 7b 72 65 74 75 72 6e 20 57 28 65 3f 2e 5b 4b 63 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 58 63 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 78 69 28 65 2c 69 2c 74 29 7b 69 66 28 21 53 79 6d 62 6f 6c 2e 61 73 79 6e 63 49 74 65 72 61 74 6f 72 29 74 Data Ascii: adableStream, Array, AsyncIterable, or Iterable.`)}const Kc=function Yc(){return"function"==typeof Symbol&&Symbol.iterator?Symbol.iterator:"@@iterator"}();function Td(e){return W(e?.[Kc])}function Xc(e){return function xi(e,i,t){if(!Symbol.asyncIterator)t
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 7c 28 69 2e 6e 65 78 74 28 74 29 2c 69 2e 63 6f 6d 70 6c 65 74 65 28 29 29 7d 2c 74 3d 3e 69 2e 65 72 72 6f 72 28 74 29 29 2e 74 68 65 6e 28 6e 75 6c 6c 2c 74 74 29 7d 29 7d 28 65 29 3b 69 66 28 68 61 28 65 29 29 72 65 74 75 72 6e 20 50 64 28 65 29 3b 69 66 28 54 64 28 65 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 45 75 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 4c 74 28 69 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 74 20 6f 66 20 65 29 69 66 28 69 2e 6e 65 78 74 28 74 29 2c 69 2e 63 6c 6f 73 65 64 29 72 65 74 75 72 6e 3b 69 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 29 7d 28 65 29 3b 69 66 28 67 61 28 65 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 58 73 28 65 29 7b 72 65 74 75 72 6e 20 50 64 28 58 63 28 65 29 29 7d 28 65 29 7d 74 68 72 6f 77 Data Ascii: \|(i.next(t),i.complete())},t=>i.error(t)).then(null,tt)})}(e);if(ha(e))return Pd(e);if(Td(e))return function Eu(e){return new Lt(i=>{for(const t of e)if(i.next(t),i.closed)return;i.complete()})}(e);if(ga(e))return function Xs(e){return Pd(Xc(e))}(e)}throw
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 69 2c 72 2c 28 29 3d 3e 54 28 63 74 29 29 3a 54 28 63 74 29 7d 76 28 29 7d 63 61 74 63 68 28 63 74 29 7b 69 2e 65 72 72 6f 72 28 63 74 29 7d 7d 29 29 7d 3b 72 65 74 75 72 6e 20 65 2e 73 75 62 73 63 72 69 62 65 28 6c 65 28 69 2c 41 2c 28 29 3d 3e 7b 66 3d 21 30 2c 76 28 29 7d 29 29 2c 28 29 3d 3e 7b 73 3f 2e 28 29 7d 7d 28 6e 2c 61 2c 65 2c 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 48 6f 28 65 3d 31 2f 30 29 7b 72 65 74 75 72 6e 20 7a 65 28 4a 6e 2c 65 29 7d 63 6f 6e 73 74 20 57 65 3d 6e 65 77 20 4c 74 28 65 3d 3e 65 2e 63 6f 6d 70 6c 65 74 65 28 29 29 3b 66 75 6e 63 74 69 6f 6e 20 65 6c 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 57 28 65 2e 73 63 68 65 64 75 6c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 65 2e 6c 65 6e Data Ascii: i,r,()=>T(ct)):T(ct)}v()}catch(ct){i.error(ct)}}))};return e.subscribe(le(i,A,()=>{f=!0,v()})),()=>{s?.()}}(n,a,e,t)))}function Ho(e=1/0){return ze(Jn,e)}const We=new Lt(e=>e.complete());function el(e){return e&&W(e.schedule)}function Zo(e){return e[e.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49793	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1304	OUT	GET /latest/Full/Bundle/shareAssetsJs.min.js?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:48 UTC	522	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:48 GMT Content-Type: application/javascript Content-Length: 274330 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: p/KdVyeGW3nQAEXq5iwwGUNVIWYAAAAA5Iu2FR4Hd0x6ka/yYtTRHQ== X-CDN: Imperva X-Iinfo: 62-46604695-46604774 NNNY CT(13 16 0) RT(1713460547032 233) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:48 UTC	930	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 2e 64 6f 63 75 6d 65 6e 74 29 72 65 74 75 72 6e 20 74 28 65 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 69 73 2c 66 75 6e 63 74 Data Ascii: !function(e,t){"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(e.document)return t(e);throw new Error("jQuery requires a window with a document")}:t(e)}("undefined"!=typeof window?window:this,funct
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 4f 62 6a 65 63 74 3d 74 68 69 73 2c 65 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 65 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 54 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 69 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 54 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: Object=this,e.context=this.context,e},each:function(e){return T.each(this,e)},map:function(i){return this.pushStack(T.map(this,function(e,t){return i.call(e,t,e)}))},slice:function(){return this.pushStack(c.apply(this,arguments))},first:function(){return
2024-04-18 17:15:48 UTC	1403	IN	Data Raw: 28 65 29 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 69 66 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 67 2e 63 61 6c 6c 28 65 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 21 67 2e 63 61 6c 6c 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 29 72 65 74 75 72 6e 21 31 7d 63 61 74 63 68 28 69 29 7b 72 65 74 75 72 6e 21 31 7d 69 66 28 21 76 2e 6f 77 6e 46 69 72 73 74 29 66 6f 72 28 76 61 72 20 74 20 69 6e 20 65 29 72 65 74 75 72 6e 20 67 2e 63 61 6c 6c 28 65 2c 74 29 3b 66 6f 72 28 74 20 69 6e 20 65 29 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 7c 7c 67 2e 63 61 6c 6c 28 65 2c 74 29 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 Data Ascii: (e))return!1;try{if(e.constructor&&!g.call(e,"constructor")&&!g.call(e.constructor.prototype,"isPrototypeOf"))return!1}catch(i){return!1}if(!v.ownFirst)for(var t in e)return g.call(e,t);for(t in e);return t===undefined\|\|g.call(e,t)},type:function(e){retur
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 20 65 29 6e 75 6c 6c 21 3d 28 6f 3d 74 28 65 5b 73 5d 2c 73 2c 69 29 29 26 26 72 2e 70 75 73 68 28 6f 29 3b 72 65 74 75 72 6e 20 24 2e 61 70 70 6c 79 28 5b 5d 2c 72 29 7d 2c 67 75 69 64 3a 31 2c 70 72 6f 78 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 2c 6e 3b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 6e 3d 65 5b 74 5d 2c 74 3d 65 2c 65 3d 6e 29 2c 54 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 3f 28 69 3d 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 2c 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 7c 7c 74 68 69 73 2c 69 2e 63 6f 6e 63 61 74 28 63 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 29 2e 67 75 69 64 3d 65 2e 67 75 69 64 3d Data Ascii: e)null!=(o=t(e[s],s,i))&&r.push(o);return $.apply([],r)},guid:1,proxy:function(e,t){var i,n;return"string"==typeof t&&(n=e[t],t=e,e=n),T.isFunction(e)?(i=c.call(arguments,2),(n=function(){return e.apply(t\|\|this,i.concat(c.call(arguments)))}).guid=e.guid=
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 5c 5d 27 5c 22 5d 2a 3f 29 22 2b 72 2b 22 2a 5c 5c 5d 22 2c 22 67 22 29 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 47 29 2c 69 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 61 2b 22 24 22 29 2c 68 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 61 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 61 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 61 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 59 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 47 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 Data Ascii: \]'\"]?)"+r+"\\]","g"),te=new RegExp(G),ie=new RegExp("^"+a+"$"),h={ID:new RegExp("^#("+a+")"),CLASS:new RegExp("^\\.("+a+")"),TAG:new RegExp("^("+a+"\|[*])"),ATTR:new RegExp("^"+Y),PSEUDO:new RegExp("^"+G),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-la
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 72 65 74 75 72 6e 20 69 2e 70 75 73 68 28 72 29 2c 69 7d 65 6c 73 65 7b 69 66 28 75 5b 32 5d 29 72 65 74 75 72 6e 20 4e 2e 61 70 70 6c 79 28 69 2c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 29 2c 69 3b 69 66 28 28 6f 3d 75 5b 33 5d 29 26 26 6d 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 4e 2e 61 70 70 6c 79 28 69 2c 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 6f 29 29 2c 69 7d 69 66 28 6d 2e 71 73 61 26 26 21 44 5b 65 2b 22 20 22 5d 26 26 28 21 67 7c 7c 21 67 2e 74 65 73 74 28 65 29 29 29 7b 69 66 28 31 21 3d 3d 70 29 64 3d 74 2c 68 3d 65 3b 65 6c 73 65 20 69 66 28 22 Data Ascii: return i.push(r),i}else{if(u[2])return N.apply(i,t.getElementsByTagName(e)),i;if((o=u[3])&&m.getElementsByClassName&&t.getElementsByClassName)return N.apply(i,t.getElementsByClassName(o)),i}if(m.qsa&&!D[e+" "]&&(!g\|\|!g.test(e))){if(1!==p)d=t,h=e;else if("
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 21 65 26 26 22 48 54 4d 4c 22 21 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 7d 2c 43 3d 49 2e 73 65 74 44 6f 63 75 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 65 3d 65 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 3a 62 3b 72 65 74 75 72 6e 20 65 21 3d 3d 54 26 26 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 74 3d 28 54 3d 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 6a 28 54 29 2c 28 65 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 65 2e 74 6f 70 21 3d 3d 65 26 26 28 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 Data Ascii: documentElement;return!!e&&"HTML"!==e.nodeName},C=I.setDocument=function(e){var e=e?e.ownerDocument\|\|e:b;return e!==T&&9===e.nodeType&&e.documentElement&&(t=(T=e).documentElement,E=!j(T),(e=T.defaultView)&&e.top!==e&&(e.addEventListener?e.addEventListener
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 6e 3d 5b 5d 2c 67 3d 5b 5d 2c 28 6d 2e 71 73 61 3d 63 2e 74 65 73 74 28 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 66 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b Data Ascii: sName&&E)return t.getElementsByClassName(e)},n=[],g=[],(m.qsa=c.test(T.querySelectorAll))&&(f(function(e){t.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selected=''></option></select>",e.querySelectorAll("[
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 72 65 6e 74 4e 6f 64 65 3b 29 69 66 28 74 3d 3d 3d 65 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 69 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 3f 28 75 3d 21 30 2c 30 29 3a 28 69 3d 21 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 7c 7c 28 31 26 28 69 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 6d 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 Data Ascii: rentNode;)if(t===e)return!0;return!1},B=e?function(e,t){var i;return e===t?(u=!0,0):(i=!e.compareDocumentPosition-!t.compareDocumentPosition)\|\|(1&(i=(e.ownerDocument\|\|e)===(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!m.sortDetached&&t.compareDoc
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6f 6e 3a 20 22 2b 65 29 7d 2c 49 2e 75 6e 69 71 75 65 53 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 69 66 28 75 3d 21 6d 2e 64 65 74 65 63 74 44 75 70 6c 69 63 61 74 65 73 2c 6c 3d 21 6d 2e 73 6f 72 74 53 74 61 62 6c 65 26 26 65 2e 73 6c 69 63 65 28 30 29 2c 65 2e 73 6f 72 74 28 42 29 2c 75 29 7b 66 6f 72 28 3b 74 3d 65 5b 6f 2b 2b 5d 3b 29 74 3d 3d 3d 65 5b 6f 5d 26 26 28 6e 3d 69 2e 70 75 73 68 28 6f 29 29 3b 66 6f 72 28 3b 6e 2d 2d 3b 29 65 2e 73 70 6c 69 63 65 28 69 5b 6e 5d 2c 31 29 7d 72 65 74 75 72 6e 20 6c 3d 6e 75 6c 6c 2c 65 7d 2c 73 3d 49 2e 67 65 74 54 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 69 3d 22 22 2c 6e 3d 30 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b Data Ascii: on: "+e)},I.uniqueSort=function(e){var t,i=[],n=0,o=0;if(u=!m.detectDuplicates,l=!m.sortStable&&e.slice(0),e.sort(B),u){for(;t=e[o++];)t===e[o]&&(n=i.push(o));for(;n--;)e.splice(i[n],1)}return l=null,e},s=I.getText=function(e){var t,i="",n=0,o=e.nodeType;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49795	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1307	OUT	GET /latest/Full/Bundle/sharedKnockoutJs.min.js?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:48 UTC	521	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:48 GMT Content-Type: application/javascript Content-Length: 53041 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: 5QpwXXvS1nbQAEXq5iwwGUNVIWYAAAAANQHEVFBsO9w2Tjrk9R7kAg== X-CDN: Imperva X-Iinfo: 60-39160352-39160426 NNNY CT(14 17 0) RT(1713460547097 216) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:48 UTC	931	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 52 65 29 7b 76 61 72 20 65 2c 49 65 3d 74 68 69 73 7c 7c 28 30 2c 65 76 61 6c 29 28 22 74 68 69 73 22 29 2c 46 65 3d 49 65 2e 64 6f 63 75 6d 65 6e 74 2c 4c 65 3d 49 65 2e 6e 61 76 69 67 61 74 6f 72 2c 71 65 3d 49 65 2e 6a 51 75 65 72 79 2c 56 65 3d 49 65 2e 4a 53 4f 4e 3b 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 52 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 74 79 70 65 6f 66 20 65 20 69 6e 20 50 29 26 26 65 3d 3d 3d 6e 7d 66 75 6e 63 74 69 6f 6e 20 49 28 65 2c 6e 29 7b 76 61 72 20 74 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 74 7c 7c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 52 65 2c 65 28 29 7d 2c 6e 29 7d 7d 66 75 Data Ascii: !function(Re){var e,Ie=this\|\|(0,eval)("this"),Fe=Ie.document,Le=Ie.navigator,qe=Ie.jQuery,Ve=Ie.JSON;e=function(e,R){function t(e,n){return(null===e\|\|typeof e in P)&&e===n}function I(e,n){var t;return function(){t=t\|\|setTimeout(function(){t=Re,e()},n)}}fu
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 74 68 2d 31 5d 5d 3d 6e 7d 2c 53 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 65 5b 6e 5d 3d 74 7d 2c 53 2e 76 65 72 73 69 6f 6e 3d 22 33 2e 32 2e 30 22 2c 53 2e 62 28 22 76 65 72 73 69 6f 6e 22 2c 53 2e 76 65 72 73 69 6f 6e 29 2c 53 2e 61 3d 28 65 3d 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 2c 72 3d 7b 7d 2c 28 6c 3d 7b 7d 29 5b 4c 65 26 26 2f 46 69 72 65 66 6f 78 5c 2f 32 2f 69 2e 74 65 73 74 28 4c 65 2e 75 73 65 72 41 67 65 6e 74 29 3f 22 4b 65 79 62 6f 61 72 64 45 76 65 6e 74 22 3a 22 55 49 45 76 65 6e 74 73 22 5d 3d 5b 22 6b 65 79 75 70 22 2c 22 6b 65 79 64 6f 77 6e 22 2c 22 6b 65 79 70 72 65 73 73 22 5d 2c 6c 2e 4d 6f 75 73 65 45 76 65 6e 74 73 3d 22 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 Data Ascii: th-1]]=n},S.A=function(e,n,t){e[n]=t},S.version="3.2.0",S.b("version",S.version),S.a=(e={__proto__:[]}instanceof Array,r={},(l={})[Le&&/Firefox\/2/i.test(Le.userAgent)?"KeyboardEvent":"UIEvents"]=["keyup","keydown","keypress"],l.MouseEvents="click dblclic
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 65 7d 2c 65 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 76 61 72 20 61 3d 53 2e 61 2e 6d 28 53 2e 61 2e 58 61 28 65 29 2c 6e 29 3b 61 3c 30 3f 74 26 26 65 2e 70 75 73 68 28 6e 29 3a 74 7c 7c 65 2e 73 70 6c 69 63 65 28 61 2c 31 29 7d 2c 78 61 3a 65 2c 65 78 74 65 6e 64 3a 71 2c 7a 61 3a 6f 2c 41 61 3a 65 3f 6f 3a 71 2c 47 3a 66 2c 6e 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 74 2c 61 3d 7b 7d 3b 66 6f 72 28 74 20 69 6e 20 65 29 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 26 26 28 61 5b 74 5d 3d 6e 28 65 5b 74 5d 2c 74 2c 65 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 4b 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 3b 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 53 2e 72 Data Ascii: e},ea:function(e,n,t){var a=S.a.m(S.a.Xa(e),n);a<0?t&&e.push(n):t\|\|e.splice(a,1)},xa:e,extend:q,za:o,Aa:e?o:q,G:f,na:function(e,n){if(!e)return e;var t,a={};for(t in e)e.hasOwnProperty(t)&&(a[t]=n(e[t],t,e));return a},Ka:function(e){for(;e.firstChild;)S.r
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 65 29 29 3b 66 6f 72 28 3b 65 26 26 65 21 3d 6e 3b 29 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 21 21 65 7d 2c 4a 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 63 63 28 65 2c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 7d 2c 6f 62 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 53 2e 61 2e 71 62 28 65 2c 53 2e 61 2e 4a 61 29 7d 2c 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 61 67 4e 61 6d 65 26 26 65 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 6e 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 76 61 72 20 61 3d 69 26 26 4c 5b 65 5d 3b 69 66 28 21 61 26 26 71 65 29 71 65 28 Data Ascii: e));for(;e&&e!=n;)e=e.parentNode;return!!e},Ja:function(e){return S.a.cc(e,e.ownerDocument.documentElement)},ob:function(e){return!!S.a.qb(e,S.a.Ja)},t:function(e){return e&&e.tagName&&e.tagName.toLowerCase()},n:function(n,e,t){var a=i&&L[e];if(!a&&qe)qe(
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 52 65 7c 7c 28 6e 3d 22 22 29 2c 53 2e 66 2e 66 69 72 73 74 43 68 69 6c 64 28 65 29 29 3b 21 74 7c 7c 33 21 3d 74 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 66 2e 6e 65 78 74 53 69 62 6c 69 6e 67 28 74 29 3f 53 2e 66 2e 54 28 65 2c 5b 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 6e 29 5d 29 3a 74 2e 64 61 74 61 3d 6e 2c 53 2e 61 2e 66 63 28 65 29 7d 2c 4d 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 2e 6e 61 6d 65 3d 6e 2c 69 3c 3d 37 29 74 72 79 7b 65 2e 6d 65 72 67 65 41 74 74 72 69 62 75 74 65 73 28 46 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 3c 69 6e 70 75 74 20 6e 61 6d 65 3d 27 22 2b 65 2e 6e 61 6d 65 2b 22 27 2f 3e 22 29 2c 21 31 29 7d 63 61 74 63 68 28 6f 29 7b 7d 7d 2c 66 63 3a Data Ascii: Re\|\|(n=""),S.f.firstChild(e));!t\|\|3!=t.nodeType\|\|S.f.nextSibling(t)?S.f.T(e,[e.ownerDocument.createTextNode(n)]):t.data=n,S.a.fc(e)},Mb:function(e,n){if(e.name=n,i<=7)try{e.mergeAttributes(Fe.createElement("<input name='"+e.name+"'/>"),!1)}catch(o){}},fc:
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 65 6e 67 74 68 2d 31 3b 30 3c 3d 63 3b 63 2d 2d 29 61 5b 75 5b 63 5d 2e 6e 61 6d 65 5d 3d 75 5b 63 5d 2e 76 61 6c 75 65 3b 6e 3d 53 2e 61 2e 63 28 6e 29 3b 76 61 72 20 73 2c 6c 3d 46 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 66 6f 72 28 73 20 69 6e 20 6c 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 2c 6c 2e 61 63 74 69 6f 6e 3d 6f 2c 6c 2e 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 2c 6e 29 65 3d 46 65 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 65 2e 74 79 70 65 3d 22 68 69 64 64 65 6e 22 2c 65 2e 6e 61 6d 65 3d 73 2c 65 2e 76 61 6c 75 65 3d 53 2e 61 2e 65 62 28 53 2e 61 2e 63 28 6e 5b 73 5d 29 29 2c 6c 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 3b 66 28 61 2c 66 75 6e 63 74 69 6f Data Ascii: ength-1;0<=c;c--)a[u[c].name]=u[c].value;n=S.a.c(n);var s,l=Fe.createElement("form");for(s in l.style.display="none",l.action=o,l.method="post",n)e=Fe.createElement("input"),e.type="hidden",e.name=s,e.value=S.a.eb(S.a.c(n[s])),l.appendChild(e);f(a,functio
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 28 61 72 67 75 6d 65 6e 74 73 29 29 29 7d 7d 29 2c 53 2e 61 2e 65 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 65 2c 6e 29 7b 76 61 72 20 74 3d 65 5b 6f 5d 3b 69 66 28 21 74 7c 7c 22 6e 75 6c 6c 22 3d 3d 3d 74 7c 7c 21 69 5b 74 5d 29 7b 69 66 28 21 6e 29 72 65 74 75 72 6e 20 52 65 3b 74 3d 65 5b 6f 5d 3d 22 6b 6f 22 2b 72 2b 2b 2c 69 5b 74 5d 3d 7b 7d 7d 72 65 74 75 72 6e 20 69 5b 74 5d 7d 76 61 72 20 72 3d 30 2c 6f 3d 22 5f 5f 6b 6f 5f 5f 22 2b 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 69 3d 7b 7d 3b 72 65 74 75 72 6e 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 65 3d 61 28 65 2c 21 31 29 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 52 65 3f 52 65 3a 65 5b 6e 5d 7d 2c 73 65 74 3a 66 75 6e 63 74 Data Ascii: (arguments)))}}),S.a.e=new function(){function a(e,n){var t=e[o];if(!t\|\|"null"===t\|\|!i[t]){if(!n)return Re;t=e[o]="ko"+r++,i[t]={}}return i[t]}var r=0,o="__ko__"+(new Date).getTime(),i={};return{get:function(e,n){e=a(e,!1);return e===Re?Re:e[n]},set:funct
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6f 64 65 44 69 73 70 6f 73 61 6c 2e 61 64 64 44 69 73 70 6f 73 65 43 61 6c 6c 62 61 63 6b 22 2c 53 2e 61 2e 77 2e 64 61 29 2c 53 2e 62 28 22 75 74 69 6c 73 2e 64 6f 6d 4e 6f 64 65 44 69 73 70 6f 73 61 6c 2e 72 65 6d 6f 76 65 44 69 73 70 6f 73 65 43 61 6c 6c 62 61 63 6b 22 2c 53 2e 61 2e 77 2e 4b 62 29 2c 53 2e 61 2e 62 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 71 65 29 7b 69 66 28 71 65 2e 70 61 72 73 65 48 54 4d 4c 29 74 3d 71 65 2e 70 61 72 73 65 48 54 4d 4c 28 65 29 7c 7c 5b 5d 3b 65 6c 73 65 20 69 66 28 28 74 3d 71 65 2e 63 6c 65 61 6e 28 5b 65 5d 29 29 26 26 74 5b 30 5d 29 7b 66 6f 72 28 65 3d 74 5b 30 5d 3b 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 31 31 21 3d 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 3b 29 65 3d 65 Data Ascii: odeDisposal.addDisposeCallback",S.a.w.da),S.b("utils.domNodeDisposal.removeDisposeCallback",S.a.w.Kb),S.a.ba=function(e){if(qe){if(qe.parseHTML)t=qe.parseHTML(e)\|\|[];else if((t=qe.clean([e]))&&t[0]){for(e=t[0];e.parentNode&&11!==e.parentNode.nodeType;)e=e
2024-04-18 17:15:48 UTC	1451	IN	Data Raw: 6e 20 74 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 6e 7c 7c 5b 5d 29 2c 21 30 7d 66 69 6e 61 6c 6c 79 7b 64 65 6c 65 74 65 20 61 5b 65 5d 7d 7d 2c 53 62 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 74 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 6e 29 7b 69 66 28 65 29 69 66 28 38 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 6e 75 6c 6c 21 3d 28 74 3d 53 2e 44 2e 47 62 28 65 2e 6e 6f 64 65 56 61 6c 75 65 29 29 26 26 6e 2e 70 75 73 68 28 7b 62 63 3a 65 2c 6d 63 3a 74 7d 29 3b 65 6c 73 65 20 69 66 28 31 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 66 6f 72 28 76 61 72 20 74 3d 30 2c 61 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 72 3d 61 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 75 28 61 5b 74 5d 2c 6e 29 7d 28 65 2c 74 29 3b 66 6f 72 28 76 61 72 20 Data Ascii: n t.apply(null,n\|\|[]),!0}finally{delete a[e]}},Sb:function(e,n){var t=[];!function u(e,n){if(e)if(8==e.nodeType)null!=(t=S.D.Gb(e.nodeValue))&&n.push({bc:e,mc:t});else if(1==e.nodeType)for(var t=0,a=e.childNodes,r=a.length;t<r;t++)u(a[t],n)}(e,t);for(var
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 74 5d 2e 70 75 73 68 28 72 29 2c 72 7d 2c 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 74 68 69 73 2e 41 62 28 6e 3d 6e 7c 7c 73 29 29 74 72 79 7b 53 2e 6b 2e 45 61 28 29 3b 66 6f 72 28 76 61 72 20 74 2c 61 3d 74 68 69 73 2e 4d 5b 6e 5d 2e 73 6c 69 63 65 28 30 29 2c 72 3d 30 3b 74 3d 61 5b 72 5d 3b 2b 2b 72 29 74 2e 43 62 7c 7c 74 2e 77 61 28 65 29 7d 66 69 6e 61 6c 6c 79 7b 53 2e 6b 2e 65 6e 64 28 29 7d 7d 2c 54 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 2c 74 2c 61 2c 72 3d 74 68 69 73 2c 6f 3d 53 2e 43 28 72 29 2c 69 3d 28 72 2e 71 61 7c 7c 28 72 2e 71 61 3d 72 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 2c 72 2e 6e 6f 74 69 66 79 53 75 62 73 63 72 69 62 65 72 73 3d 66 Data Ascii: t].push(r),r},notifySubscribers:function(e,n){if(this.Ab(n=n\|\|s))try{S.k.Ea();for(var t,a=this.M[n].slice(0),r=0;t=a[r];++r)t.Cb\|\|t.wa(e)}finally{S.k.end()}},Ta:function(e){var n,t,a,r=this,o=S.C(r),i=(r.qa\|\|(r.qa=r.notifySubscribers,r.notifySubscribers=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49794	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1302	OUT	GET /latest/Full/Bundle/analyticsJs.min.js?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:48 UTC	521	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:48 GMT Content-Type: application/javascript Content-Length: 24937 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: 5KC4d0FcTivQAEXq5iwwGUNVIWYAAAAAKvn/jUvtOvJVjfX1vrxJsA== X-CDN: Imperva X-Iinfo: 62-46604710-46604783 NNNY CT(14 18 0) RT(1713460547078 215) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:48 UTC	931	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 61 72 67 65 74 50 61 67 65 50 61 72 61 6d 73 28 29 7b 76 61 72 20 6f 3d 22 22 3b 72 65 74 75 72 6e 20 24 28 22 6d 65 74 61 5b 6e 61 6d 65 5e 3d 67 77 61 5f 5d 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 6f 2b 3d 24 28 65 29 2e 61 74 74 72 28 22 6e 61 6d 65 22 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 24 28 65 29 2e 61 74 74 72 28 22 63 6f 6e 74 65 6e 74 22 29 29 2b 22 26 22 7d 29 2c 6f 3d 6f 2e 73 6c 69 63 65 28 30 2c 2d 31 29 7d 76 61 72 20 6d 62 6f 78 56 65 72 73 69 6f 6e 2c 6d 62 6f 78 46 61 63 74 6f 72 69 65 73 2c 6d 62 6f 78 46 61 63 74 6f 72 79 44 65 66 61 75 6c 74 2c 6d 62 6f 78 43 6f 70 79 72 69 67 68 74 3d 22 43 6f 70 79 72 69 67 68 74 20 31 39 39 36 2d 32 30 31 Data Ascii: function targetPageParams(){var o="";return $("meta[name^=gwa_]").each(function(t,e){o+=$(e).attr("name")+"="+encodeURIComponent($(e).attr("content"))+"&"}),o=o.slice(0,-1)}var mboxVersion,mboxFactories,mboxFactoryDefault,mboxCopyright="Copyright 1996-201
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 5d 2e 73 74 75 66 66 26 26 22 22 21 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 73 74 75 66 66 29 66 6f 72 28 76 61 72 20 74 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 73 74 75 66 66 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 22 61 61 6d 5f 74 6e 74 22 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 73 74 75 66 66 5b 65 5d 2e 63 6e 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 73 74 75 66 66 5b 30 5d 2e 63 76 2e 73 70 6c 69 74 28 22 2c 22 29 26 26 28 74 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2e 73 74 75 66 66 5b 65 5d 2e 63 76 2e 73 70 6c 69 74 28 22 2c 22 29 2c 6d 62 6f 78 46 61 63 74 6f 72 79 44 65 66 61 75 6c 74 2e 67 65 74 55 72 6c 42 75 69 6c 64 65 72 28 29 2e 61 64 64 50 61 72 61 6d 65 74 65 72 73 28 74 29 29 7d 54 4e 54 2e 61 3d 54 4e 54 2e 61 Data Ascii: ].stuff&&""!=arguments[0].stuff)for(var t,e=0;e<arguments[0].stuff.length;e++)"aam_tnt"==arguments[0].stuff[e].cn&&arguments[0].stuff[0].cv.split(",")&&(t=arguments[0].stuff[e].cv.split(","),mboxFactoryDefault.getUrlBuilder().addParameters(t))}TNT.a=TNT.a
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 67 74 68 29 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 6d 62 6f 78 55 72 6c 42 75 69 6c 64 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 53 65 72 76 65 72 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 74 3d 74 7d 2c 6d 62 6f 78 55 72 6c 42 75 69 6c 64 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 42 61 73 65 50 61 74 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 6d 3d 74 7d 2c 6d 62 6f 78 55 72 6c 42 75 69 6c 64 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 55 72 6c 50 72 6f 63 65 73 73 41 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 6b 3d 74 7d 2c 6d 62 6f 78 55 72 6c 42 75 69 6c 64 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 62 75 69 6c 64 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 Data Ascii: gth))}return this},mboxUrlBuilder.prototype.setServerType=function(t){this.t=t},mboxUrlBuilder.prototype.setBasePath=function(t){this.m=t},mboxUrlBuilder.prototype.setUrlProcessAction=function(t){this.k=t},mboxUrlBuilder.prototype.buildUrl=function(){for(
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 7d 2c 28 6d 62 6f 78 41 6a 61 78 46 65 74 63 68 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 54 79 70 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 61 6a 61 78 22 7d 2c 6d 62 6f 78 41 6a 61 78 46 65 74 63 68 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 73 65 74 53 65 72 76 65 72 54 79 70 65 28 74 68 69 73 2e 67 65 74 54 79 70 65 28 29 29 3b 74 3d 74 2e 62 75 69 6c 64 55 72 6c 28 29 3b 74 68 69 73 2e 44 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 2c 74 68 69 73 2e 44 2e 73 72 63 3d 74 2c 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 Data Ascii: ction(){},(mboxAjaxFetcher=function(){}).prototype.getType=function(){return"ajax"},mboxAjaxFetcher.prototype.fetch=function(t){t.setServerType(this.getType());t=t.buildUrl();this.D=document.createElement("script"),this.D.src=t,document.body.appendChild(t
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6d 62 6f 78 53 63 72 65 65 6e 48 65 69 67 68 74 28 29 2c 74 68 69 73 2e 55 3d 6d 62 6f 78 53 63 72 65 65 6e 57 69 64 74 68 28 29 2c 74 68 69 73 2e 56 3d 6d 62 6f 78 42 72 6f 77 73 65 72 57 69 64 74 68 28 29 2c 74 68 69 73 2e 57 3d 6d 62 6f 78 42 72 6f 77 73 65 72 48 65 69 67 68 74 28 29 2c 74 68 69 73 2e 58 3d 6d 62 6f 78 53 63 72 65 65 6e 43 6f 6c 6f 72 44 65 70 74 68 28 29 2c 74 68 69 73 2e 59 3d 6d 62 6f 78 42 72 6f 77 73 65 72 54 69 6d 65 4f 66 66 73 65 74 28 29 2c 74 68 69 73 2e 5a 3d 6e 65 77 20 6d 62 6f 78 53 65 73 73 69 6f 6e 28 74 68 69 73 2e 53 2c 22 6d 62 6f 78 53 65 73 73 69 6f 6e 22 2c 22 73 65 73 73 69 6f 6e 22 2c 31 38 36 30 2c 74 68 69 73 2e 51 29 2c 74 68 69 73 2e 5f 3d 6e 65 77 20 6d 62 6f 78 50 43 28 22 50 43 22 2c 31 32 30 39 36 30 30 Data Ascii: mboxScreenHeight(),this.U=mboxScreenWidth(),this.V=mboxBrowserWidth(),this.W=mboxBrowserHeight(),this.X=mboxScreenColorDepth(),this.Y=mboxBrowserTimeOffset(),this.Z=new mboxSession(this.S,"mboxSession","session",1860,this.Q),this._=new mboxPC("PC",1209600
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 73 65 64 54 69 6d 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 62 2d 74 68 69 73 2e 62 62 7d 2c 6d 62 6f 78 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 45 6c 6c 61 70 73 65 64 54 69 6d 65 55 6e 74 69 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2d 74 68 69 73 2e 62 62 7d 2c 6d 62 6f 78 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 4d 62 6f 78 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 7d 2c 6d 62 6f 78 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 2e 67 65 74 28 74 29 2e 67 65 74 42 79 49 64 28 65 7c 7c 30 29 7d 2c 6d 62 6f 78 46 Data Ascii: sedTime=function(){return this.cb-this.bb},mboxFactory.prototype.getEllapsedTimeUntil=function(t){return t-this.bb},mboxFactory.prototype.getMboxes=function(){return this.M},mboxFactory.prototype.get=function(t,e){return this.M.get(t).getById(e\|\|0)},mboxF
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 65 65 6e 20 6c 6f 61 64 65 64 2c 20 63 61 6e 27 74 20 77 72 69 74 65 20 6d 61 72 6b 65 72 22 3b 6e 3d 6e 65 77 20 6d 62 6f 78 4c 6f 63 61 74 6f 72 44 65 66 61 75 6c 74 28 72 29 7d 74 72 79 7b 76 61 72 20 61 3d 74 68 69 73 2c 73 3d 6e 65 77 20 6d 62 6f 78 28 74 2c 65 2c 69 2c 6e 2c 22 6d 62 6f 78 49 6d 70 6f 72 74 65 64 2d 22 2b 72 29 3b 74 68 69 73 2e 4f 26 26 73 2e 73 65 74 46 65 74 63 68 65 72 28 6e 65 77 28 74 68 69 73 2e 4c 3f 6d 62 6f 78 41 6a 61 78 46 65 74 63 68 65 72 3a 6d 62 6f 78 53 74 61 6e 64 61 72 64 46 65 74 63 68 65 72 29 29 2c 73 2e 73 65 74 4f 6e 45 72 72 6f 72 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 73 2e 73 65 74 4d 65 73 73 61 67 65 28 74 29 2c 73 2e 61 63 74 69 76 61 74 65 28 29 2c 73 2e 69 73 41 63 74 69 76 61 74 65 64 28 29 7c Data Ascii: een loaded, can't write marker";n=new mboxLocatorDefault(r)}try{var a=this,s=new mbox(t,e,i,n,"mboxImported-"+r);this.O&&s.setFetcher(new(this.L?mboxAjaxFetcher:mboxStandardFetcher)),s.setOnError(function(t,e){s.setMessage(t),s.activate(),s.isActivated()\|
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 3b 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 2b 65 2e 6c 65 6e 67 74 68 3c 32 65 33 26 26 28 74 2b 3d 22 26 6d 62 6f 78 52 65 66 65 72 72 65 72 3d 22 2b 65 29 2c 74 2b 3d 22 26 6d 62 6f 78 56 65 72 73 69 6f 6e 3d 22 2b 6d 62 6f 78 56 65 72 73 69 6f 6e 7d 29 7d 2c 6d 62 6f 78 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 41 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 7d 2c 6d 62 6f 78 46 61 63 74 6f 72 79 2e 70 72 6f 74 6f 74 79 70 65 2e 67 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 22 3c 73 74 79 6c 65 3e 2e 6d 62 6f 78 44 65 66 61 75 6c 74 20 7b 20 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 Data Ascii: URIComponent(document.referrer);return t.length+e.length<2e3&&(t+="&mboxReferrer="+e),t+="&mboxVersion="+mboxVersion})},mboxFactory.prototype.Ab=function(){return""},mboxFactory.prototype.gb=function(){document.write("<style>.mboxDefault { visibility:hidd
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 2e 4d 2e 6c 65 6e 67 74 68 5d 3d 74 29 7d 2c 6d 62 6f 78 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 65 77 20 6d 62 6f 78 4c 69 73 74 2c 6f 3d 30 3b 6f 3c 74 68 69 73 2e 4d 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 4d 5b 6f 5d 3b 6e 2e 67 65 74 4e 61 6d 65 28 29 3d 3d 74 26 26 65 2e 61 64 64 28 6e 29 7d 72 65 74 75 72 6e 20 65 7d 2c 6d 62 6f 78 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 42 79 49 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 4d 5b 74 5d 7d 2c 6d 62 6f 78 4c 69 73 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 65 6e 67 74 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: .M.length]=t)},mboxList.prototype.get=function(t){for(var e=new mboxList,o=0;o<this.M.length;o++){var n=this.M[o];n.getName()==t&&e.add(n)}return e},mboxList.prototype.getById=function(t){return this.M[t]},mboxList.prototype.length=function(){return this.
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 68 69 73 2e 54 62 3d 30 2c 74 68 69 73 2e 75 62 3d 6e 2c 74 68 69 73 2e 76 62 3d 69 2c 74 68 69 73 2e 55 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 56 62 3d 6e 65 77 20 6d 62 6f 78 4f 66 66 65 72 43 6f 6e 74 65 6e 74 2c 74 68 69 73 2e 4e 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 43 3d 6f 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 22 22 2c 74 68 69 73 2e 57 62 3d 6e 65 77 20 4f 62 6a 65 63 74 2c 74 68 69 73 2e 58 62 3d 30 2c 74 68 69 73 2e 51 62 3d 65 2c 74 68 69 73 2e 6e 3d 74 2c 74 68 69 73 2e 59 62 28 29 2c 6f 2e 61 64 64 50 61 72 61 6d 65 74 65 72 28 22 6d 62 6f 78 22 2c 74 29 2e 61 64 64 50 61 72 61 6d 65 74 65 72 28 22 6d 62 6f 78 49 64 22 2c 65 29 2c 74 68 69 73 2e 5a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 74 68 69 73 2e 5f 62 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: his.Tb=0,this.ub=n,this.vb=i,this.Ub=null,this.Vb=new mboxOfferContent,this.Nb=null,this.C=o,this.message="",this.Wb=new Object,this.Xb=0,this.Qb=e,this.n=t,this.Yb(),o.addParameter("mbox",t).addParameter("mboxId",e),this.Zb=function(){},this._b=function(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49796	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	1716	OUT	GET /Web/Assets/Full/Bundle/article.min.js?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:48 UTC	395	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:48 GMT Content-Type: application/javascript Content-Length: 221441 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 60-39160359-39160431 NNNY CT(13 14 0) RT(1713460547113 216) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:48 UTC	1057	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 41 6e 69 6d 61 74 6f 72 28 29 7b 74 68 69 73 2e 41 6e 69 6d 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 26 26 6e 75 6c 6c 21 3d 3d 61 26 26 61 2e 6c 65 6e 67 74 68 3e 30 29 7b 62 3d 62 7c 7c 30 3b 76 61 72 20 64 3d 61 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 62 3b 24 28 22 68 74 6d 6c 2c 62 6f 64 79 22 29 2e 73 74 6f 70 28 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 64 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 35 30 30 2c 63 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 72 6f 77 73 65 72 48 69 73 74 6f 72 79 28 29 7b 74 68 69 73 2e 61 64 64 48 61 73 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e Data Ascii: function Animator(){this.Animate=function(a,b,c){if("undefined"!=typeof a&&null!==a&&a.length>0){b=b\|\|0;var d=a.offset().top-b;$("html,body").stop().animate({scrollTop:d.toString()},500,c)}}}function BrowserHistory(){this.addHash=function(a,b){if("undefin
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 45 78 70 61 6e 73 69 6f 6e 53 74 61 74 65 29 7b 76 61 72 20 64 3d 62 2e 61 72 74 69 63 6c 65 45 78 70 61 6e 73 69 6f 6e 53 74 61 74 65 5b 61 5d 3b 64 26 26 63 2e 70 75 73 68 28 61 29 7d 72 65 74 75 72 6e 20 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 78 70 61 6e 64 43 6f 6c 6c 61 70 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 28 61 2c 62 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 61 62 6c 65 41 72 65 61 43 6c 69 63 6b 65 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 75 70 64 61 74 65 28 63 29 2c 62 2e 72 65 6e 64 65 72 28 61 2e 67 65 74 49 73 45 78 70 61 6e 64 65 64 42 79 49 64 28 63 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 78 70 61 6e 64 43 6f 6c 6c 61 70 73 65 56 69 65 77 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 30 2c 67 3d 74 68 69 73 3b 67 2e 65 61 73 Data Ascii: ExpansionState){var d=b.articleExpansionState[a];d&&c.push(a)}return c}}function ExpandCollapseController(a,b){this.expandableAreaClicked=function(c){a.update(c),b.render(a.getIsExpandedById(c))}}function ExpandCollapseView(a,b,c,d,e){var f=0,g=this;g.eas
2024-04-18 17:15:48 UTC	1320	IN	Data Raw: 2e 68 61 73 68 3d 22 23 5f 6f 70 65 6e 41 72 74 69 63 6c 65 73 3d 22 2b 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 6c 6f 61 74 69 6e 67 48 65 61 64 69 6e 67 4f 66 66 73 65 74 50 72 6f 70 65 72 74 69 65 73 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2c 62 3d 22 2e 70 65 72 73 69 73 74 65 6e 74 2d 68 65 61 64 69 6e 67 2d 63 6f 6e 74 61 69 6e 65 72 22 3b 61 2e 70 61 67 65 43 6f 6e 74 65 6e 74 73 54 6f 70 4f 66 66 73 65 74 3d 30 2c 61 2e 67 65 74 46 6c 6f 61 74 69 6e 67 48 65 61 64 69 6e 67 4f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 63 3d 24 28 62 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3b 72 65 74 75 72 6e 20 61 2e 70 61 67 65 43 6f 6e 74 65 6e 74 73 54 6f 70 4f 66 66 73 65 74 2b 63 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 72 74 69 63 6c 65 Data Ascii: .hash="#_openArticles="+c)}}function FloatingHeadingOffsetProperties(){var a=this,b=".persistent-heading-container";a.pageContentsTopOffset=0,a.getFloatingHeadingOffset=function(){var c=$(b).outerHeight();return a.pageContentsTopOffset+c}}function article
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6e 28 29 7b 6b 2e 73 61 76 65 28 6d 29 7d 29 3b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 24 28 61 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 61 2c 63 29 7b 76 61 72 20 64 3d 24 28 63 29 2c 65 3d 64 2e 61 74 74 72 28 22 69 64 22 29 2c 66 3d 6d 2e 67 65 74 49 73 45 78 70 61 6e 64 65 64 42 79 49 64 28 65 29 3b 66 7c 7c 64 2e 66 69 6e 64 28 22 2e 74 6f 67 67 6c 65 2d 62 6f 64 79 22 29 2e 68 69 64 65 28 29 3b 76 61 72 20 67 3d 6e 65 77 20 45 78 70 61 6e 64 43 6f 6c 6c 61 70 73 65 56 69 65 77 28 69 2c 64 2c 62 29 3b 67 2e 72 65 6e 64 65 72 28 6d 2e 67 65 74 49 73 45 78 70 61 6e 64 65 64 42 79 49 64 28 65 29 29 3b 76 61 72 20 68 3d 6e 65 77 20 45 78 70 61 6e 64 43 6f 6c 6c 61 70 73 65 43 6f 6e 74 72 6f 6c 6c 65 72 28 6d 2c 67 29 3b 64 2e Data Ascii: n(){k.save(m)});var n=function(a,b){$(a).each(function(a,c){var d=$(c),e=d.attr("id"),f=m.getIsExpandedById(e);f\|\|d.find(".toggle-body").hide();var g=new ExpandCollapseView(i,d,b);g.render(m.getIsExpandedById(e));var h=new ExpandCollapseController(m,g);d.
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6f 73 65 44 6f 77 6e 6c 6f 61 64 54 65 6d 70 6c 61 74 65 44 69 61 6c 6f 67 42 6f 78 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 23 64 6f 77 6e 6c 6f 61 64 54 65 6d 70 6c 61 74 65 44 69 61 6c 6f 67 42 6f 78 22 29 2e 64 69 61 6c 6f 67 28 22 63 6c 6f 73 65 22 29 7d 29 2c 24 28 22 23 63 6c 6f 73 65 44 6f 77 6e 6c 6f 61 64 54 65 6d 70 6c 61 74 65 44 69 61 6c 6f 67 42 6f 78 41 66 74 65 72 53 61 76 69 6e 67 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 24 28 22 23 64 6f 77 6e 6c 6f 61 64 54 65 6d 70 6c 61 74 65 44 69 61 6c 6f 67 42 6f 78 22 29 2e 64 69 61 6c 6f 67 28 22 63 6c 6f 73 65 22 29 7d 29 7d 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 74 72 79 7b 76 61 72 20 63 3d 61 28 77 69 6e 64 6f 77 Data Ascii: oseDownloadTemplateDialogBox").click(function(){$("#downloadTemplateDialogBox").dialog("close")}),$("#closeDownloadTemplateDialogBoxAfterSaving").click(function(){$("#downloadTemplateDialogBox").dialog("close")})}!function(a){var b=null;try{var c=a(window
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 28 62 2e 68 61 73 54 72 69 67 67 65 72 65 64 3d 22 75 70 22 2c 61 28 77 69 6e 64 6f 77 29 2e 74 72 69 67 67 65 72 28 22 77 61 79 70 6f 69 6e 74 48 69 74 22 2c 62 29 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 61 2e 66 6e 2e 73 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 2e 75 70 64 61 74 65 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 6c 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 67 28 61 2e 66 6e 2e 73 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 2e 67 65 74 28 29 2c 6c 5b 62 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 6c 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 68 28 6c 5b 61 5d 29 7d 76 61 72 20 6b 3d 7b 6c 61 73 74 3a 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 61 73 74 Data Ascii: (b.hasTriggered="up",a(window).trigger("waypointHit",b))}function i(){a.fn.scrollDirection.update();for(var b=0;b<l.length;b++)g(a.fn.scrollDirection.get(),l[b])}function j(){for(var a=0;a<l.length;a++)h(l[a])}var k={last:0,get:function(){return this.last
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 20 62 3d 61 28 74 68 69 73 29 3b 66 3d 66 2e 6e 6f 74 28 62 29 2c 62 2e 72 65 6d 6f 76 65 44 61 74 61 28 6a 29 2c 66 2e 6c 65 6e 67 74 68 7c 7c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 62 2c 64 2c 66 29 7b 76 61 72 20 67 3d 61 28 74 68 69 73 29 2c 68 3d 61 2e 64 61 74 61 28 74 68 69 73 2c 6a 29 3b 68 2e 77 3d 64 21 3d 3d 63 3f 64 3a 67 2e 77 69 64 74 68 28 29 2c 68 2e 68 3d 66 21 3d 3d 63 3f 66 3a 67 2e 68 65 69 67 68 74 28 29 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 69 66 28 21 67 5b 6c 5d 26 26 74 68 69 73 5b 68 5d 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3b 72 65 74 75 72 6e 20 61 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 29 3f Data Ascii: b=a(this);f=f.not(b),b.removeData(j),f.length\|\|clearTimeout(e)},add:function(b){function d(b,d,f){var g=a(this),h=a.data(this,j);h.w=d!==c?d:g.width(),h.h=f!==c?f:g.height(),e.apply(this,arguments)}if(!g[l]&&this[h])return!1;var e;return a.isFunction(b)?
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 28 65 3d 22 5c 5c 62 22 2b 65 2b 22 5c 5c 62 22 29 3b 76 61 72 20 66 3d 6e 65 77 20 52 65 67 45 78 70 28 65 2c 64 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6a 51 75 65 72 79 2e 68 69 67 68 6c 69 67 68 74 28 74 68 69 73 2c 66 2c 63 2e 65 6c 65 6d 65 6e 74 2c 63 2e 63 6c 61 73 73 4e 61 6d 65 29 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 28 62 2c 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 7d 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f Data Ascii: (e="\\b"+e+"\\b");var f=new RegExp(e,d);return this.each(function(){jQuery.highlight(this,f,c.element,c.className)})},function(a){"function"==typeof define&&define.amd?define(["jquery"],function(b){return a(b,window,document)}):"object"==typeof exports?mo
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 67 22 2c 22 62 50 61 67 69 6e 61 74 65 22 29 2c 6a 62 28 61 2c 22 70 61 67 69 6e 67 54 79 70 65 22 2c 22 73 50 61 67 69 6e 61 74 69 6f 6e 54 79 70 65 22 29 2c 6a 62 28 61 2c 22 70 61 67 65 4c 65 6e 67 74 68 22 2c 22 69 44 69 73 70 6c 61 79 4c 65 6e 67 74 68 22 29 2c 6a 62 28 61 2c 22 73 65 61 72 63 68 69 6e 67 22 2c 22 62 46 69 6c 74 65 72 22 29 2c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 73 53 63 72 6f 6c 6c 58 26 26 28 61 2e 73 53 63 72 6f 6c 6c 58 3d 61 2e 73 53 63 72 6f 6c 6c 58 3f 22 31 30 30 25 22 3a 22 22 29 2c 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 61 2e 73 63 72 6f 6c 6c 58 26 26 28 61 2e 73 63 72 6f 6c 6c 58 3d 61 2e 73 63 72 6f 6c 6c 58 3f 22 31 30 30 25 22 3a 22 22 29 2c 61 3d 61 2e 61 6f 53 65 61 72 63 68 43 Data Ascii: g","bPaginate"),jb(a,"pagingType","sPaginationType"),jb(a,"pageLength","iDisplayLength"),jb(a,"searching","bFilter"),"boolean"==typeof a.sScrollX&&(a.sScrollX=a.sScrollX?"100%":""),"boolean"==typeof a.scrollX&&(a.scrollX=a.scrollX?"100%":""),a=a.aoSearchC
2024-04-18 17:15:48 UTC	1452	IN	Data Raw: 6c 65 3f 65 2e 73 54 69 74 6c 65 3a 64 3f 64 2e 69 6e 6e 65 72 48 54 4d 4c 3a 22 22 2c 61 44 61 74 61 53 6f 72 74 3a 65 2e 61 44 61 74 61 53 6f 72 74 3f 65 2e 61 44 61 74 61 53 6f 72 74 3a 5b 66 5d 2c 6d 44 61 74 61 3a 65 2e 6d 44 61 74 61 3f 65 2e 6d 44 61 74 61 3a 66 2c 69 64 78 3a 66 7d 29 3b 62 2e 61 6f 43 6f 6c 75 6d 6e 73 2e 70 75 73 68 28 65 29 2c 65 3d 62 2e 61 6f 50 72 65 53 65 61 72 63 68 43 6f 6c 73 2c 65 5b 66 5d 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 55 61 2e 6d 6f 64 65 6c 73 2e 6f 53 65 61 72 63 68 2c 65 5b 66 5d 29 2c 6d 28 62 2c 66 2c 61 28 64 29 2e 64 61 74 61 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 62 2c 63 2c 65 29 7b 76 61 72 20 63 3d 62 2e 61 6f 43 6f 6c 75 6d 6e 73 5b 63 5d 2c 67 3d 62 2e 6f 43 6c 61 73 73 65 73 2c 68 3d 61 28 Data Ascii: le?e.sTitle:d?d.innerHTML:"",aDataSort:e.aDataSort?e.aDataSort:[f],mData:e.mData?e.mData:f,idx:f});b.aoColumns.push(e),e=b.aoPreSearchCols,e[f]=a.extend({},Ua.models.oSearch,e[f]),m(b,f,a(d).data())}function m(b,c,e){var c=b.aoColumns[c],g=b.oClasses,h=a(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49797	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	653	OUT	GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:48 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:48 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664c89cb99b032-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 81281 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:15:48 GMT Last-Modified: Tue, 16 Apr 2024 08:28:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: vxvIZer7Yf/zLX5bsA7dMA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: ae67ad11-301e-0079-38f6-8fc5a7000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:15:48 UTC	467	IN	Data Raw: 31 32 33 62 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 30 31 38 64 66 39 Data Ascii: 123b{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"018df9
2024-04-18 17:15:48 UTC	1369	IN	Data Raw: 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 31 65 32 32 2d 35 36 63 31 2d 37 62 30 37 2d 38 35 38 33 2d 66 64 37 66 61 35 66 62 65 64 62 66 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 44 61 74 61 20 50 72 69 76 61 63 79 20 41 63 74 73 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 63 61 22 2c 22 76 61 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 65 6e 2d 55 53 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 22 3a 22 70 74 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 66 72 22 3a 22 66 72 22 2c 22 7a 68 2d 43 4e 22 3a 22 7a 68 2d 43 4e 22 2c 22 65 73 22 3a 22 65 73 22 2c 22 63 Data Ascii: :[{"Id":"018e1e22-56c1-7b07-8583-fd7fa5fbedbf","Name":"US Data Privacy Acts","Countries":[],"States":{"us":["ca","va"]},"LanguageSwitcherPlaceholder":{"de":"de","ru":"ru","en-US":"en-US","pt":"pt","ko":"ko","it":"it","fr":"fr","zh-CN":"zh-CN","es":"es","c
2024-04-18 17:15:48 UTC	1369	IN	Data Raw: 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d Data Ascii: ","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","me","mg","mh","mk","ml","mm
2024-04-18 17:15:48 UTC	1369	IN	Data Raw: 30 32 34 2d 30 34 2d 31 36 54 30 38 3a 32 38 3a 34 33 2e 39 33 38 38 37 39 36 30 37 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b Data Ascii: 024-04-16T08:28:43.938879607","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cook
2024-04-18 17:15:48 UTC	101	IN	Data Raw: 6c 73 65 2c 22 57 65 62 46 6f 72 6d 53 72 63 55 72 6c 22 3a 22 22 2c 22 57 65 62 46 6f 72 6d 57 6f 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: lse,"WebFormSrcUrl":"","WebFormWorkerUrl":"","GppData":{"cmpId":"28"},"AuthenticatedConsent":false}
2024-04-18 17:15:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49798	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:47 UTC	643	OUT	GET /firstevent?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1 Host: rbi.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623
2024-04-18 17:15:48 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:48 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 108 Connection: close X-TID: Y9FPbg1/QTE= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v059-0e0b6288b.edge-va6.demdex.com 4 ms set-cookie: rbi=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:15:48 GMT; Path=/; Domain=.rbi.demdex.net; Secure; SameSite=None set-cookie: DST=; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:15:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:15:48 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:15:48 UTC	108	IN	Data Raw: 61 61 6d 5f 74 6e 74 5f 63 62 28 7b 22 73 74 75 66 66 22 3a 5b 5d 2c 22 75 75 69 64 22 3a 22 37 32 34 38 37 31 33 32 37 37 34 34 38 32 37 36 30 35 38 32 35 37 39 32 33 31 35 33 35 35 33 31 32 30 36 36 32 33 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 59 39 46 50 62 67 31 2f 51 54 45 3d 22 7d 29 Data Ascii: aam_tnt_cb({"stuff":[],"uuid":"72487132774482760582579231535531206623","dcs_region":7,"tid":"Y9FPbg1/QTE="})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49800	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:48 UTC	1309	OUT	GET /latest/Full/Bundle/googleTagManagerJs.min.js?v=2.0.769 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:48 UTC	519	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:48 GMT Content-Type: application/javascript Content-Length: 316 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: 8ZWtNFSHrg7QAEXq5iwwGUNVIWYAAAAAFRlx6/Io/P1l8FYzIBaHcQ== X-CDN: Imperva X-Iinfo: 55-23603282-23603331 NNNY CT(14 16 0) RT(1713460547448 220) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:48 UTC	316	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 69 6e 63 6c 75 64 65 47 6f 6f 67 6c 65 54 61 67 4d 61 6e 61 67 65 72 28 65 29 7b 76 61 72 20 74 3d 77 69 6e 64 6f 77 2c 61 3d 64 6f 63 75 6d 65 6e 74 2c 6e 3d 22 73 63 72 69 70 74 22 2c 67 3d 22 64 61 74 61 4c 61 79 65 72 22 2c 65 3d 22 47 54 4d 2d 22 2b 65 3b 74 5b 67 5d 3d 74 5b 67 5d 7c 7c 5b 5d 2c 74 5b 67 5d 2e 70 75 73 68 28 7b 22 67 74 6d 2e 73 74 61 72 74 22 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 65 76 65 6e 74 3a 22 67 74 6d 2e 6a 73 22 7d 29 2c 67 3d 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 6e 29 5b 30 5d 2c 28 74 3d 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6e 29 29 5b 22 61 73 79 6e 63 22 5d 3d 21 30 2c 74 2e 73 72 63 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c Data Ascii: function includeGoogleTagManager(e){var t=window,a=document,n="script",g="dataLayer",e="GTM-"+e;t[g]=t[g]\|\|[],t[g].push({"gtm.start":(new Date).getTime(),event:"gtm.js"}),g=a.getElementsByTagName(n)[0],(t=a.createElement(n))["async"]=!0,t.src="//www.googl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49803	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:48 UTC	1723	OUT	GET /web/assets/shared/ClientSideConfig/ng-app-settings.json HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:49 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:49 GMT Content-Type: application/json Content-Length: 2197 Connection: close Accept-Ranges: bytes Etag: "090db16dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:56 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 61-43377512-43377625 NNNN CT(18 19 0) RT(1713460548167 219) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:49 UTC	1066	IN	Data Raw: 7b 0d 0a 09 22 65 76 65 6e 74 54 72 61 63 6b 41 70 69 48 6f 73 74 4e 61 6d 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 65 76 65 6e 74 74 72 61 63 6b 2f 76 31 22 2c 0d 0a 09 22 75 73 65 72 49 6e 73 69 67 68 74 41 70 69 48 6f 73 74 4e 61 6d 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 69 6e 73 69 67 68 74 2f 76 31 22 2c 0d 0a 09 22 75 73 65 72 50 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 41 70 69 48 6f 73 74 4e 61 6d 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 70 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 2f 61 70 69 Data Ascii: {"eventTrackApiHostName": "https://hrcenter.us.brightmine.com/eventtrack/v1","userInsightApiHostName" : "https://hrcenter.us.brightmine.com/insight/v1","userPersonalisationApiHostName" : "https://hrcenter.us.brightmine.com/userpersonalisation/api
2024-04-18 17:15:49 UTC	1131	IN	Data Raw: 6f 74 65 72 53 65 72 76 69 63 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 68 65 61 64 65 72 66 6f 6f 74 65 72 73 65 72 76 69 63 65 2f 76 31 2f 22 2c 0d 0a 20 20 20 20 22 64 69 73 70 6c 61 79 4d 6f 64 65 53 65 72 76 69 63 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 64 69 73 70 6c 61 79 6d 6f 64 65 73 65 72 76 69 63 65 2f 76 31 2f 22 2c 0d 0a 20 20 20 20 22 67 61 74 65 77 61 79 41 75 74 68 6f 72 69 74 79 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 75 74 68 2e 25 4e 65 77 43 6f 50 61 72 65 6e 74 44 6f 6d 61 69 6e 25 2f 22 2c 0d 0a 20 20 20 20 22 66 65 61 74 75 72 65 46 6c 61 67 22 3a 20 Data Ascii: oterServiceUrl": "https://hrcenter.us.brightmine.com/headerfooterservice/v1/", "displayModeServiceUrl": "https://hrcenter.us.brightmine.com/displaymodeservice/v1/", "gatewayAuthorityUrl": "https://auth.%NewCoParentDomain%/", "featureFlag":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49804	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:49 UTC	427	OUT	GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:49 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:49 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664c9118c71807-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 83004 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:15:49 GMT Last-Modified: Tue, 16 Apr 2024 08:28:44 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: vxvIZer7Yf/zLX5bsA7dMA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 13175b33-701e-0057-67dd-9097b0000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:15:49 UTC	467	IN	Data Raw: 31 32 33 62 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 30 31 38 64 66 39 Data Ascii: 123b{"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":true,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"018df9
2024-04-18 17:15:49 UTC	1369	IN	Data Raw: 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 31 65 32 32 2d 35 36 63 31 2d 37 62 30 37 2d 38 35 38 33 2d 66 64 37 66 61 35 66 62 65 64 62 66 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 44 61 74 61 20 50 72 69 76 61 63 79 20 41 63 74 73 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 63 61 22 2c 22 76 61 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 22 3a 22 64 65 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 65 6e 2d 55 53 22 3a 22 65 6e 2d 55 53 22 2c 22 70 74 22 3a 22 70 74 22 2c 22 6b 6f 22 3a 22 6b 6f 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 66 72 22 3a 22 66 72 22 2c 22 7a 68 2d 43 4e 22 3a 22 7a 68 2d 43 4e 22 2c 22 65 73 22 3a 22 65 73 22 2c 22 63 Data Ascii: :[{"Id":"018e1e22-56c1-7b07-8583-fd7fa5fbedbf","Name":"US Data Privacy Acts","Countries":[],"States":{"us":["ca","va"]},"LanguageSwitcherPlaceholder":{"de":"de","ru":"ru","en-US":"en-US","pt":"pt","ko":"ko","it":"it","fr":"fr","zh-CN":"zh-CN","es":"es","c
2024-04-18 17:15:49 UTC	1369	IN	Data Raw: 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 75 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d Data Ascii: ","gs","gt","gu","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","me","mg","mh","mk","ml","mm
2024-04-18 17:15:49 UTC	1369	IN	Data Raw: 30 32 34 2d 30 34 2d 31 36 54 30 38 3a 32 38 3a 34 33 2e 39 33 38 38 37 39 36 30 37 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 53 63 72 65 65 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 49 61 62 32 56 32 44 61 74 61 22 3a 7b 22 63 6f 6f 6b Data Ascii: 024-04-16T08:28:43.938879607","cmpId":"28","cmpVersion":"1","consentScreen":"1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2Data.json"},"Iab2V2Data":{"cook
2024-04-18 17:15:49 UTC	101	IN	Data Raw: 6c 73 65 2c 22 57 65 62 46 6f 72 6d 53 72 63 55 72 6c 22 3a 22 22 2c 22 57 65 62 46 6f 72 6d 57 6f 72 6b 65 72 55 72 6c 22 3a 22 22 2c 22 47 70 70 44 61 74 61 22 3a 7b 22 63 6d 70 49 64 22 3a 22 32 38 22 7d 2c 22 41 75 74 68 65 6e 74 69 63 61 74 65 64 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 7d 0d 0a Data Ascii: lse,"WebFormSrcUrl":"","WebFormWorkerUrl":"","GppData":{"cmpId":"28"},"AuthenticatedConsent":false}
2024-04-18 17:15:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49806	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:49 UTC	698	OUT	GET /latest/Global/Content/Fonts/ggl-roboto/roboto-v30-latin-regular.woff2 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hrcenter.us.brightmine.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://assets.us.brightmine.com/latest/Global/Bundle/sharedAssetFontCss-en-US.css?v=2.0.769 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:49 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:49 GMT Content-Type: application/font-woff2 Content-Length: 15744 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 Set-Cookie: visid_incap_3085445=KZIrY2QHRwecOjlyTmlm/UVVIWYAAAAAQUIPAAAAAACMYEcMSJwvCW3OTUvkUSRG; expires=Fri, 18 Apr 2025 06:39:24 GMT; HttpOnly; path=/; Domain=.us.brightmine.com Set-Cookie: nlbi_3085445=Ek7geAuXqROobmZN6DoT2QAAAACLtBOxz5hhU4ISGksU/cUh; path=/; Domain=.us.brightmine.com x-incap-sess-cookie-hdr: /KHJIP7U6E6pLkXq5iwwGUVVIWYAAAAAkq89Amnkd9AeuI2KwMArpw== Set-Cookie: incap_ses_1815_3085445=TbT/UtgyWVKpLkXq5iwwGUVVIWYAAAAA+rVmPdik0rk9jdT8SPW7RQ==; path=/; Domain=.us.brightmine.com X-CDN: Imperva X-Iinfo: 57-29358090-29358148 NNNY CT(14 16 0) RT(1713460548836 223) q(0 0 0 0) r(0 0) U24
2024-04-18 17:15:49 UTC	512	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3d 80 00 12 00 00 00 00 8e 74 00 00 3d 1a 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 99 64 1c 85 5e 06 60 00 83 20 08 54 09 83 3c 11 0c 0a 81 dc 7c 81 c4 7b 0b 84 0a 00 12 82 10 01 36 02 24 03 88 10 04 20 05 82 74 07 20 0c 82 49 1b 33 7f 25 ec d8 8b 02 ba 03 38 a1 a9 26 aa 91 08 fb 34 5a e5 7c 74 20 f6 38 90 b8 ee 17 fc ff e7 04 cd 44 06 b9 f9 24 ad 75 4e 45 85 50 84 45 9d 41 6b 14 db eb 3d ca 78 0e 39 58 7a f5 60 03 49 f1 a6 9c eb 52 ad 94 c1 fa 23 46 2b 42 60 ad bb 7d da 52 50 7c 45 fd d0 c2 5a 5c 7f 57 5b bc 1a eb fa 9f e0 8f 05 e0 a2 ff d1 ed 08 43 94 88 12 51 42 81 03 e8 99 18 6d bf a3 ec 63 6d bb 3f a3 46 f4 84 67 f4 b4 d0 0e da d8 e8 51 8a 95 ba ab 33 c0 9d 1c d1 88 93 87 70 ed 1f Data Ascii: wOF2=t=dd^` T<\|{6$ t I3%8&4Z\|t 8D$uNEPEAk=x9Xz`IR#F+B`}RP\|EZ\W[CQBmcm?FgQ3p
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: 48 a7 35 23 4b 86 19 ad 74 0f 04 35 b7 77 d5 03 ad 76 65 3b 17 20 27 d1 03 0b a6 91 e2 4e 4a 8a e6 09 8a f6 be 27 28 25 3b f0 cf f7 3f a7 05 97 44 e8 ba ca 1a 4d fa 43 71 2c 3c aa 3d 3f a7 66 14 c1 1d 97 00 be ff 5f ba b7 e9 9d 56 8a c2 62 41 f9 28 8b f0 33 37 ff ac 76 f8 ff e9 ec 2b d5 75 59 8d 43 1a 62 0d 77 38 41 46 b4 e0 33 9b 6e 10 2d 87 a5 27 e9 cb 55 25 d9 32 0c d8 9f 1a cf 6f d9 9f 6c 7f 22 bb 07 dc 5e 62 6a f7 00 61 6f 46 10 21 60 0a 14 a7 cc 41 98 af ff a5 6a b6 ff 81 27 de 89 3a 5a da 75 2e 1a 8f 5b 17 dd 82 70 10 47 57 3a 55 25 f5 45 6a 71 80 92 09 3a 49 17 15 9c 43 e5 fb d8 0b c4 d2 09 a4 53 a0 43 08 ad af 73 4a 65 e3 a2 36 44 ed d2 9b 05 3c c1 55 4d 2c 0d a8 26 68 a6 80 7a 7d 00 79 7c 1d c3 39 8c bf 0d 44 e4 e1 9b af 6a 1e a8 e1 6e d9 14 42 Data Ascii: H5#Kt5wve; 'NJ'(%;?DMCq,<=?f_VbA(37v+uYCbw8AF3n-'U%2ol"^bjaoF!`Aj':Zu.[pGW:U%Ejq:ICSCsJe6D<UM,&hz}y\|9DjnB
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: 28 44 44 94 45 8a 44 13 25 0a 4b b4 68 34 31 62 28 aa 52 85 a2 81 84 aa 46 8d 34 35 69 a6 aa 45 0b 4d db 6d a7 e9 a6 9b 90 5b ee c3 3c f0 00 d3 43 4f 90 b4 eb 86 f4 e8 27 67 c0 00 79 83 46 90 8d 1a a5 62 cc 24 aa f7 de 23 7c f0 05 ee a7 5f 68 7e fb 4b d5 4f c6 64 4c c1 a6 e9 4c 1c 57 19 5b 91 a9 80 31 ad 0c 0c df 50 65 63 60 ec 0c cc ff 52 d1 c3 5e 72 8c c6 54 98 32 53 62 74 c6 20 f7 22 4f 88 37 29 e4 1b c3 19 51 c0 85 c2 40 c2 0c 79 11 92 e4 e1 41 51 19 55 29 bc 40 29 60 6a c8 c0 d4 d6 22 5b 6c c5 71 95 31 19 9b 31 19 bb c0 76 03 8a 03 46 56 98 9f 0c 63 34 46 07 85 ee 20 c9 49 86 d7 12 be fa 81 44 8c 9a 66 be d4 d1 13 58 0e cb 61 39 4f b9 80 dc 89 67 e7 66 43 d9 ff ad b3 12 d4 9c 99 9e 1a 0f 5b 23 d6 d2 fe e0 99 39 c5 d9 20 3d 33 37 31 0b ce f6 06 0b e0 Data Ascii: (DDED%Kh41b(RF45iEMm[<CO'gyFb$#\|_h~KOdLLW[1Pec`R^rT2Sbt "O7)Q@yAQU)@)`j"[lq11vFVc4F IDfXa9OgfC[#9 =371
2024-04-18 17:15:49 UTC	370	IN	Data Raw: 52 0d 50 e2 bf 6b 45 09 1a 08 e7 92 4c fd dc b0 98 39 cb 20 98 e1 f2 90 ea 95 45 21 e2 43 ab 4b e6 33 ea 58 8d 3b 52 a4 71 74 dd 48 34 35 49 6b 8c 60 08 bc a0 77 96 c3 69 84 88 4c 0b 54 6f 37 9a bc fb 84 ed 45 8a 32 da 25 03 d8 7b 79 fe af 55 7e 6e a3 56 62 7d 38 ea a2 5e a4 b3 db 52 4e b4 59 fa 14 2b 3b 33 b6 d3 53 d9 b4 1b 13 8e b7 a2 f5 b1 9e c4 46 14 f8 0e f5 7c 54 3d 1e 9b fd 15 4a 48 e7 a5 45 49 42 77 ca 11 09 cb a1 50 6d 13 9c 3b 37 6a b7 4d e7 b4 e3 c1 49 da 90 46 eb f8 06 5f 73 01 93 4d 0d 01 55 bb 5b 74 b3 1d 0a 27 d5 5c 79 9e d9 a8 e5 8f b6 88 d1 da 73 6b 48 18 c8 a1 5e 80 c2 99 f2 1e 5d 5b 0b 21 88 f3 34 ad 15 aa c9 70 b7 84 cc ac 15 9e 15 a0 16 f4 ac 93 3a 22 ce 4f 5b 2b 35 68 00 0e 25 8b 43 17 f0 2a 31 ea c6 62 5d 7c 65 16 0f 7b 8d 2a e2 c8 Data Ascii: RPkEL9 E!CK3X;RqtH45Ik`wiLTo7E2%{yU~nVb}8^RNY+;3SF\|T=JHEIBwPm;7jMIF_sMU[t'\yskH^][!4p:"O[+5h%C1b]\|e{
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: 5e 6d aa 40 4d e2 4b bb a6 a3 63 0f 2b b8 d1 43 44 0b ca 25 01 28 55 2b 81 5c ca cd 69 04 a5 fc a3 8b 21 37 8e 58 99 91 c0 0d e1 82 5c 05 81 13 72 3e 7d b3 0a d2 b6 76 34 38 3f 29 8e f0 ac 0a f1 b8 ff 95 9e 8f b6 2c 79 6b aa d8 0d 3d 56 7c c9 f3 30 e4 3e 73 a4 98 6a 67 56 55 ca ef e6 b4 65 a7 c8 92 fb 52 e1 ad 65 54 5c 56 48 4a 2b 87 de cd 1b b1 94 62 d3 af 50 18 05 33 37 ca 4c 17 dc 26 59 c9 70 3c 02 e5 9a fc d5 0c 7f fb 08 e9 0d bd d9 ae 37 8f dd a6 7e 4c 2d 01 7a 1f e8 fd 9f 32 3d 70 2b af 71 32 93 33 ee 1f 22 c7 f9 f1 73 12 1f af 91 7e bb d7 17 eb a3 19 70 7f ca a9 e1 e0 0d e1 8c 0a 9e 45 56 38 3f a1 de ac d1 43 97 41 12 de db a7 83 3d 4a 0e 38 4d 38 73 c9 2b 78 eb 2a b8 1a f9 b3 22 08 e5 0c be 28 44 f6 28 2a f7 91 a5 3a a6 84 f7 29 e7 d6 22 b4 cb 57 Data Ascii: ^m@MKc+CD%(U+\i!7X\r>}v48?),yk=V\|0>sjgVUeReT\VHJ+bP37L&Yp<7~L-z2=p+q23"s~pEV8?CA=J8M8s+x"(D(:)"W
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: ae 3f b1 5c d7 38 b2 42 87 3e 26 6d 35 8b b0 5f 2d 0c 16 64 37 21 13 d3 92 23 6f 67 a1 e4 03 5a 13 ec 28 61 0c ce 42 bf e0 68 d9 28 8b 7f f5 e9 0c 8b 50 4c ca c1 92 d2 42 79 ca 2a b0 74 06 36 bb b1 15 67 96 45 a7 67 62 18 74 42 1e 8f 8d 2b 1c 66 e6 e2 ef 6c 61 e3 1c 54 e6 1c e4 70 a9 e7 16 96 de c2 d3 dc 4c 30 23 c9 2d ed 86 d8 fe 01 64 ee 1c e0 0c b3 75 09 b4 30 73 0b 70 fa fe 25 cd e0 bf 38 64 88 41 2a 3c 27 34 ae b3 31 ce 2f de 80 68 46 9f 1c 6a 21 4f de c9 76 73 2b 8b b4 0f b3 31 c2 18 65 d2 9a ff 15 07 96 be 0f c6 21 2d 0c 66 8c 83 37 40 af 36 61 a5 49 51 01 2d bc f4 64 4c 42 45 01 d7 a5 27 7e f1 c4 78 07 a3 5b 0a 2e ba 46 81 6e 56 0e be 91 b9 67 36 8a 85 a2 32 81 9d 2d fc 59 36 07 28 da 3b 47 b4 89 4c 52 71 14 7b 8e 4f 0b 08 c1 e4 4b 3a 31 e2 7c 65 Data Ascii: ?\8B>&m5_-d7!#ogZ(aBh(PLByt6gEgbtB+flaTpL0#-du0sp%8dA<'41/hFj!Ovs+1e!-f7@6aIQ-dLBE'~x[.FnVg62-Y6(;GLRq{OK:1\|e
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: 62 6d f0 0f 99 83 af d4 a1 4d 5c c9 7d 8c 82 73 e8 c9 c5 e2 17 57 88 2d a5 a9 b9 b5 c4 72 40 36 d0 19 f7 d5 74 6f b1 a2 5d 70 6f 8b fc 32 16 3d 97 34 9e d5 4c ae 2c a4 a6 46 b9 93 93 c3 82 e6 93 03 1a a2 ba a0 eb cf c8 60 64 fe 6c c6 78 d6 44 45 43 45 5d ca 26 29 0e 6e 11 2f b8 0e 40 58 a3 00 84 b5 46 bd 7d 0b d6 c4 dc 01 16 00 d2 77 46 e7 9d 24 08 f4 6a 6f e4 7f 6a c7 9d ba 86 f6 0e ea 63 1d fc 5f 09 a2 6b 55 6a 9a d9 2a d5 c7 5c 51 3f e0 48 8e 5e 6d 17 04 7f df 2d 50 fa fd ca 89 f3 93 a7 f5 8e c6 45 84 99 9d 82 53 32 22 91 22 91 d0 38 99 4e 11 08 73 cc fd aa 11 c6 4b ee 60 6e 65 73 fb 28 48 2d 58 ed f0 c1 f6 fc ca 7e 38 7c 3d e5 ff ff 2f 04 16 5f 18 bb c0 a6 74 4b 41 bd c6 80 72 b9 48 e1 08 23 40 fd 56 60 7a b1 ef f9 28 c0 53 31 5a 91 04 50 ce 27 5d e6 Data Ascii: bmM\}sW-r@6to]po2=4L,F`dlxDECE]&)n/@XF}wF$jojc_kUj*\Q?H^m-PES2""8NsK`nes(H-X~8\|=/_tKArH#@V`z(S1ZP']
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: 5c 7a 18 53 72 4a 94 2d 7a 8f fd 95 2d 66 56 dc 39 cc 72 32 96 37 cb 85 b7 80 67 8e a2 ef a9 99 a8 e3 a3 17 58 20 4c 0f b9 06 d7 14 e7 e7 5e 10 b2 ac d3 77 6b 34 d2 ab 2a 8a dd e7 6a 20 6f 9a 0b a7 1f 9f dd 79 0e 7e b5 c0 4a 6b ae 22 14 d6 22 03 4c d4 6c 73 f4 cf db b6 98 45 fb 69 a0 cf b7 ba 8b c2 24 6c 05 61 70 13 53 15 db 2c 03 49 7b a6 35 d4 11 6e e2 86 47 64 f1 38 7b 86 34 c4 d9 23 3a ae f3 f8 12 9f 37 f9 18 5a d9 5e 4b a5 dc 5d ed 8f 64 8e ac 56 d7 b6 35 90 4a 02 7d 9c 3c 7d c2 f3 52 62 50 cd 8f 27 7c bc bc 1c 83 fe ae 69 a7 5d 16 6c d2 17 68 a2 5d 6e 6f a5 48 09 d2 eb 6a a1 8d d4 4b 48 06 87 ed 0e 9b 41 5b cc b0 dd 39 d3 3d ae b0 e5 99 69 d8 62 9f 6b 65 e8 58 97 b3 a5 33 3a 31 33 25 38 8a 9e d8 8e 50 ce 4d 35 b1 51 51 aa 3d 11 dc 96 99 97 5d 59 98 Data Ascii: \zSrJ-z-fV9r27gX L^wk4*j oy~Jk""LlsEi$lapS,I{5nGd8{4#:7Z^K]dV5J}<}RbP'\|i]lh]noHjKHA[9=ibkeX3:13%8PM5QQ=]Y
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: 8d 8c f2 f2 8c 41 78 cb b8 46 44 f8 78 47 46 ba 89 9e 93 01 e5 17 c8 62 a1 b2 59 05 fc a7 63 fb 5a 4b 58 b1 10 54 00 2a e4 af 8f 08 26 5f 78 f3 32 7d 0c aa 22 78 0e 0d 9e e8 59 69 8a 0b 92 82 d2 12 cf a1 be 6b e9 43 4e b4 a6 76 e7 75 a7 75 1f 83 68 9d ff 14 96 73 1e 5a 87 90 8e 6c 64 72 20 97 32 d2 d0 79 68 82 ce 13 29 42 9e 32 01 97 e7 21 1e 4d 2c 24 16 46 8b 7b 7c be bb e9 9e e7 bd 32 7b 4c a4 6e 37 c1 a8 dc e8 2c 27 ce 7c 8e 78 f5 2d de 1f 8e 6e d5 3e 5f 9d aa 10 93 18 12 16 ee b3 4d dc 6e b3 60 6b b2 b3 95 20 81 29 50 ab 7b ab e1 b1 a7 64 5d f4 2e 4e 00 8e 5e 1b e8 0a ba ae 0d 90 ba 59 3e 71 ea b8 a2 86 35 64 45 28 c2 67 87 b8 f3 cd 13 a2 a8 ad 84 a5 c9 a2 5d 5c df c2 38 a0 7b 6a a0 1a 61 90 e3 a0 f5 69 e9 ef 73 61 72 49 ff fd 67 41 8f 9a 85 ac 67 0e Data Ascii: AxFDxGFbYcZKXT*&_x2}"xYikCNvuuhsZldr 2yh)B2!M,$F{\|2{Ln7,'\|x-n>_Mn`k )P{d].N^Y>q5dE(g]\8{jaisarIgAg
2024-04-18 17:15:49 UTC	1452	IN	Data Raw: 09 e6 46 45 d9 7e bb 7d 59 29 c3 c0 9c aa 13 37 94 93 9f ad 6e fa d3 89 47 a2 bc 1a 06 68 cd 5a 27 01 09 11 63 49 29 08 db 61 11 65 9c f5 d6 d2 13 3a 74 45 c6 b6 7c bb f1 98 b9 46 cc 0c 66 dd 35 78 d0 98 26 11 99 71 03 4b 51 6c 56 f2 64 28 8b 25 a5 c5 72 aa 62 40 da 24 56 0f 3f 19 54 55 61 4d d6 f5 15 dd ae df 47 8a 65 25 0a e2 61 e7 7a 2d f6 a9 bf 9d 8f 57 2b 4d f3 0c c7 d6 8c 71 b5 b8 22 58 95 61 c3 c6 bf a4 58 bf bc 40 c3 a9 e5 4b 9f ee 66 3e de ac 34 ae 8d e8 b4 74 f3 3a 1e bd f1 b4 f1 db 8e 54 f4 ef f3 06 de cd a3 67 f4 3b 76 8b 01 c3 c2 0d 4d d2 78 5e 5b 17 9b 5c c7 e3 b3 66 db c7 3a 1e 6f 2f a5 83 4b f9 d4 a5 f6 43 55 83 a5 cf d1 c0 9e b4 33 6a 59 f7 19 35 e3 69 91 1d 13 8e fb 6f f6 10 7e 61 1d 06 56 f0 51 b2 34 00 d4 a4 62 52 3c af d5 66 82 78 98 Data Ascii: FE~}Y)7nGhZ'cI)ae:tE\|Ff5x&qKQlVd(%rb@$V?TUaMGe%az-W+Mq"XaX@Kf>4t:Tg;vMx^[\f:o/KCU3jY5io~aVQ4bR<fx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49808	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:49 UTC	619	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:49 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:49 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664c94de8153f9-ATL
2024-04-18 17:15:49 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49810	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:49 UTC	1499	OUT	GET /web/assets/shared/ClientSideConfig/ng-app-settings.json HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==
2024-04-18 17:15:50 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:49 GMT Content-Type: application/json Content-Length: 2197 Connection: close Accept-Ranges: bytes Etag: "090db16dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:56 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 62-46605271-46605325 NNNY CT(14 14 0) RT(1713460548972 244) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:50 UTC	1066	IN	Data Raw: 7b 0d 0a 09 22 65 76 65 6e 74 54 72 61 63 6b 41 70 69 48 6f 73 74 4e 61 6d 65 22 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 65 76 65 6e 74 74 72 61 63 6b 2f 76 31 22 2c 0d 0a 09 22 75 73 65 72 49 6e 73 69 67 68 74 41 70 69 48 6f 73 74 4e 61 6d 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 69 6e 73 69 67 68 74 2f 76 31 22 2c 0d 0a 09 22 75 73 65 72 50 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 41 70 69 48 6f 73 74 4e 61 6d 65 22 20 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 75 73 65 72 70 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 2f 61 70 69 Data Ascii: {"eventTrackApiHostName": "https://hrcenter.us.brightmine.com/eventtrack/v1","userInsightApiHostName" : "https://hrcenter.us.brightmine.com/insight/v1","userPersonalisationApiHostName" : "https://hrcenter.us.brightmine.com/userpersonalisation/api
2024-04-18 17:15:50 UTC	1131	IN	Data Raw: 6f 74 65 72 53 65 72 76 69 63 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 68 65 61 64 65 72 66 6f 6f 74 65 72 73 65 72 76 69 63 65 2f 76 31 2f 22 2c 0d 0a 20 20 20 20 22 64 69 73 70 6c 61 79 4d 6f 64 65 53 65 72 76 69 63 65 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 64 69 73 70 6c 61 79 6d 6f 64 65 73 65 72 76 69 63 65 2f 76 31 2f 22 2c 0d 0a 20 20 20 20 22 67 61 74 65 77 61 79 41 75 74 68 6f 72 69 74 79 55 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 61 75 74 68 2e 25 4e 65 77 43 6f 50 61 72 65 6e 74 44 6f 6d 61 69 6e 25 2f 22 2c 0d 0a 20 20 20 20 22 66 65 61 74 75 72 65 46 6c 61 67 22 3a 20 Data Ascii: oterServiceUrl": "https://hrcenter.us.brightmine.com/headerfooterservice/v1/", "displayModeServiceUrl": "https://hrcenter.us.brightmine.com/displaymodeservice/v1/", "gatewayAuthorityUrl": "https://auth.%NewCoParentDomain%/", "featureFlag":

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49809	52.48.44.115	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:50 UTC	547	OUT	GET /libs/atc/1.6.1/atc.min.js HTTP/1.1 Host: addevent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:50 UTC	222	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Thu, 18 Apr 2024 17:15:50 GMT Content-Type: text/html Content-Length: 134 Connection: close Location: https://www.addevent.com:443/libs/atc/1.6.1/atc.min.js
2024-04-18 17:15:50 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49814	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:50 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:50 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:50 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664c999a131386-ATL
2024-04-18 17:15:50 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49812	18.160.46.11	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:50 UTC	628	OUT	GET /cdn/target.js HTTP/1.1 Host: cdn.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:50 UTC	539	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Content-Length: 43693 Connection: close Date: Thu, 18 Apr 2024 17:15:51 GMT Last-Modified: Tue, 27 Oct 2020 11:37:15 GMT ETag: "d94f7f548dc11d731f4f5949913bec75" Cache-Control: must-revalidate, max-age=3600 x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 94d91ef74fd7aa50877163a89eadc42c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD55-P2 X-Amz-Cf-Id: KlnWvkqOlLx9HF-a585qWSmKOaeKpVZdECkIEwajhV6svdR-M0eruA==
2024-04-18 17:15:50 UTC	6396	IN	Data Raw: 2f 2a 21 0a 20 2a 20 53 69 7a 7a 6c 65 20 43 53 53 20 53 65 6c 65 63 74 6f 72 20 45 6e 67 69 6e 65 20 76 31 2e 39 2e 34 2d 70 72 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 33 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 33 2d 30 34 2d 32 34 0a 20 2a 2f 0a 77 69 6e 64 6f 77 2e 67 65 74 53 69 7a 7a 6c 65 46 6f 72 54 61 72 67 65 74 3d 66 75 Data Ascii: /! Sizzle CSS Selector Engine v1.9.4-pre * http://sizzlejs.com/ * * Copyright 2013 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2013-04-24 */window.getSizzleForTarget=fu
2024-04-18 17:15:50 UTC	16384	IN	Data Raw: 6c 28 61 48 2c 22 64 69 76 22 29 3b 6c 2e 63 61 6c 6c 28 61 48 2c 22 5b 73 21 3d 27 27 5d 3a 78 22 29 3b 61 42 2e 70 75 73 68 28 22 21 3d 22 2c 74 29 7d 29 7d 61 6e 3d 61 6e 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 61 6e 2e 6a 6f 69 6e 28 22 7c 22 29 29 3b 61 42 3d 61 42 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 61 42 2e 6a 6f 69 6e 28 22 7c 22 29 29 3b 50 3d 4f 28 78 2e 63 6f 6e 74 61 69 6e 73 29 7c 7c 78 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3f 66 75 6e 63 74 69 6f 6e 28 61 49 2c 61 48 29 7b 76 61 72 20 61 4b 3d 61 49 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 39 3f 61 49 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 61 49 2c 61 4a 3d 61 48 26 26 61 48 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: l(aH,"div");l.call(aH,"[s!='']:x");aB.push("!=",t)})}an=an.length&&new RegExp(an.join("\|"));aB=aB.length&&new RegExp(aB.join("\|"));P=O(x.contains)\|\|x.compareDocumentPosition?function(aI,aH){var aK=aI.nodeType===9?aI.documentElement:aI,aJ=aH&&aH.parentNode
2024-04-18 17:15:50 UTC	12661	IN	Data Raw: 73 65 29 3b 77 69 6e 64 6f 77 5b 61 64 64 5d 28 70 72 65 2b 22 6c 6f 61 64 22 2c 69 6e 69 74 2c 66 61 6c 73 65 29 7d 3b 76 61 72 20 61 64 64 4c 69 73 74 65 6e 65 72 3d 5f 41 54 2e 61 64 64 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 2c 74 79 70 65 2c 68 61 6e 64 6c 65 72 29 7b 76 61 72 20 65 76 65 6e 74 48 61 6e 64 6c 65 72 3d 68 61 6e 64 6c 65 72 3b 69 66 28 65 6c 2e 61 74 74 61 63 68 45 76 65 6e 74 29 7b 65 76 65 6e 74 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 61 6e 64 6c 65 72 2e 63 61 6c 6c 28 65 6c 2c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 7d 3b 65 6c 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 74 79 70 65 2c 68 61 6e 64 6c 65 72 29 7d 65 6c 73 65 7b 69 66 28 65 6c 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 Data Ascii: se);window[add](pre+"load",init,false)};var addListener=_AT.addListener=function(el,type,handler){var eventHandler=handler;if(el.attachEvent){eventHandler=function(){handler.call(el,window.event)};el.attachEvent("on"+type,handler)}else{if(el.addEventListe
2024-04-18 17:15:50 UTC	8252	IN	Data Raw: 43 6c 69 63 6b 28 73 65 6c 65 63 74 6f 72 2c 70 61 72 61 6d 73 29 7d 3b 61 64 64 4c 69 73 74 65 6e 65 72 28 65 6c 65 6d 2c 22 63 6c 69 63 6b 22 2c 68 61 6e 64 6c 65 72 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 3b 76 61 72 20 61 64 64 49 6e 63 6c 75 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 29 7b 76 61 72 20 70 61 72 65 6e 74 3d 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 7c 7c 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 29 5b 30 5d 3b 70 61 72 65 6e 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 6c 29 7d 3b 76 61 72 20 67 65 74 4e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 65 6c 65 Data Ascii: Click(selector,params)};addListener(elem,"click",handler);return false};var addInclude=function(el){var parent=(document.getElementsByTagName("head")\|\|document.getElementsByTagName("body"))[0];parent.appendChild(el)};var getNextElementSibling=function(ele

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49813	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:50 UTC	1772	OUT	GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460549104-847971&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=16393&gwa_contentTitle=Keep%20Me%20Logged%20in&gwa_contentType=Article&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_author=&gwa_pubDate=2018-05-10&gwa_localVar4=2014-11-26&gwa_aboutness=&gwa_localVar2=unlocked&gwa_localVar1=&gwa_localVar3=&gwa_siteSection1=tools-and-services&gwa_siteSection2=help-and-support&gwa_siteSection3=Keep%20Me%20Logged%20in&gwa_siteSection4=&gwa_pageName=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_contentHierarchy=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_server=desktop%20platform&mboxMCSDID=4119095A45114079-47347D76165FC6B7&mbox=target-global-mbox&mboxId=0&mboxTime=1713467749114&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1 Host: reedbusinessinternat.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:50 UTC	418	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:15:50 GMT content-type: application/javascript; charset=utf-8 referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-18 17:15:50 UTC	759	IN	Data Raw: 32 65 62 0d 0a 20 2f 2a 20 44 49 53 41 42 4c 45 44 3a 20 46 6f 6c 6c 6f 77 69 6e 67 20 6d 62 6f 78 2e 6a 73 20 64 65 70 72 65 63 61 74 69 6f 6e 2c 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 20 69 73 20 64 69 73 61 62 6c 65 64 2e 20 2a 2f 0a 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 33 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 6f 72 69 65 73 2e 67 65 74 28 27 64 65 66 61 75 6c 74 27 29 2e 67 65 74 4d 62 6f 78 65 73 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 73 65 74 4f 66 66 65 72 28 6e 65 77 20 6d 62 6f 78 4f 66 66 65 72 44 65 66 61 75 6c 74 28 29 29 2e 6c 6f 61 64 65 64 28 29 3b 7d 29 3b 0a 7d 20 65 6c 73 65 20 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 31 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 Data Ascii: 2eb /* DISABLED: Following mbox.js deprecation, this endpoint is disabled. */if (mboxVersion >= 33) { mboxFactories.get('default').getMboxes().each(function(m){m.setOffer(new mboxOfferDefault()).loaded();});} else if (mboxVersion >= 31) { mboxFact

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49815	54.171.248.54	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:51 UTC	551	OUT	GET /libs/atc/1.6.1/atc.min.js HTTP/1.1 Host: www.addevent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:51 UTC	233	IN	HTTP/1.1 301 Moved Permanently Server: awselb/2.0 Date: Thu, 18 Apr 2024 17:15:51 GMT Content-Type: text/html Content-Length: 134 Connection: close Location: https://cdn.addevent.com:443/legacy2000/libs/atc/1.6.1/atc.min.js
2024-04-18 17:15:51 UTC	134	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49816	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:51 UTC	1819	OUT	GET /_Incapsula_Resource?SWJIYLWA=719d34d31c8e3a6e6fffd425f7e032f3&ns=5&cb=456564548 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:51 UTC	139	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: application/javascript X-Robots-Tag: noindex Content-Length: 150130
2024-04-18 17:15:51 UTC	1313	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 76 61 72 20 7a 3d 22 22 3b 76 61 72 20 62 3d 22 37 36 36 31 37 32 32 30 35 66 33 30 37 38 33 36 33 39 33 31 33 31 33 64 35 62 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 37 36 31 35 63 37 38 33 34 33 34 35 63 37 38 33 36 33 39 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 37 33 35 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 36 33 37 35 63 37 38 33 34 33 32 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 37 33 32 35 63 37 38 33 34 33 33 35 63 37 38 33 36 36 34 35 63 37 38 33 35 33 35 35 63 37 38 33 37 33 30 35 63 37 38 33 36 33 36 35 63 37 38 33 36 33 32 35 63 37 38 33 37 36 31 35 63 37 38 33 34 33 34 35 63 37 38 33 34 33 33 35 63 37 38 33 Data Ascii: (function() { var z="";var b="766172205f3078363931313d5b275c7837375c7836665c7837615c7834345c7836395c7836335c7834625c7837355c7837375c7836665c7836375c7834325c7837375c7833365c7837325c7834335c7836645c7835355c7837305c7836365c7836325c7837615c7834345c7834335c783
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 38 33 35 33 31 35 63 37 38 33 36 33 39 35 63 37 38 33 37 33 32 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 37 35 63 37 38 33 34 33 33 35 63 37 38 33 34 33 35 35 63 37 38 33 35 33 35 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 37 35 63 37 38 33 34 33 35 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 38 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 35 33 34 35 63 37 38 33 35 33 36 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 36 33 39 35 63 37 38 33 34 33 35 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 37 36 31 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 34 36 31 35 63 37 38 33 37 33 36 35 63 37 38 33 36 33 36 35 63 37 38 33 37 33 33 35 63 37 38 33 34 Data Ascii: 835315c7836395c7837325c7834335c7836375c7834335c7834355c7835355c7837375c7833375c7834355c783364272c275c7835385c7836335c7834665c7835345c7835365c7836335c7834625c7836395c7834355c7833385c7834665c783761272c275c7837375c7837325c7834615c7837365c7836365c7837335c7834
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 63 37 38 33 35 33 39 35 63 37 38 33 36 36 34 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 37 33 36 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 39 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 36 36 35 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 33 33 30 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 37 33 38 35 63 37 38 33 34 33 36 35 63 37 38 33 35 33 33 35 63 37 38 33 36 36 32 35 63 37 38 33 35 33 30 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 36 35 63 37 38 33 34 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 35 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 36 35 63 37 38 33 37 33 35 35 63 37 38 Data Ascii: c7835395c7836645c7837375c7833365c7837365c7834335c7836395c7836335c7834665c7836655c7837375c7833365c7833305c783364272c275c7837375c7837325c7837385c7834365c7835335c7836625c7835305c7834345c7837365c7834315c7833645c783364272c275c7835355c7834645c7834665c7837355c78
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 34 35 63 37 38 33 37 33 35 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 36 35 63 37 38 33 36 33 33 35 63 37 38 33 35 33 33 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 36 33 32 35 63 37 38 33 35 33 33 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 33 33 36 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 37 35 63 37 38 33 37 33 34 35 63 37 38 33 37 33 30 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 30 35 63 37 38 33 35 33 34 35 63 37 38 33 34 33 33 35 63 37 38 33 37 33 31 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 35 33 32 35 63 37 38 33 34 33 37 35 63 37 38 33 36 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 32 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 36 Data Ascii: 45c7837355c7834645c7834665c7836335c7835335c7833385c7834665c7836325c7835335c7837335c7834665c7833365c7837375c7833375c7837345c7837305c7837375c7837305c7835345c7834335c7837315c7837335c7834625c7835325c7834375c7836375c7833645c783364272c275c7835325c7834645c783466
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 63 37 38 33 37 33 34 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 34 35 63 37 38 33 34 36 35 35 63 37 38 33 33 33 38 35 63 37 38 33 36 33 35 35 63 37 38 33 34 33 33 35 63 37 38 33 34 33 32 35 63 37 38 33 35 33 37 35 63 37 38 33 34 33 31 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 36 35 63 37 38 33 34 33 33 35 63 37 38 33 37 33 37 35 63 37 38 33 36 36 36 35 63 37 38 33 34 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 34 33 35 35 63 37 38 33 36 33 39 35 63 37 38 33 34 33 34 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 36 36 34 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 35 35 63 37 38 33 36 33 37 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 35 33 38 35 63 37 38 Data Ascii: c7837345c7837375c7833345c7834655c7833385c7836355c7834335c7834325c7835375c7834315c7834645c7834665c7834335c7837375c7836665c7834645c783364272c275c7837375c7837325c7834355c7836395c7834345c7833385c7834665c7836645c7837375c7833355c7836375c783364272c275c7835385c78
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 33 35 63 37 38 33 34 33 31 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 36 33 33 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 37 33 31 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 36 36 32 35 63 37 38 33 34 33 38 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 32 36 36 35 63 37 38 33 34 33 34 35 63 37 38 33 36 33 39 35 63 37 38 33 37 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 35 33 31 35 63 37 38 33 34 33 36 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 33 33 39 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 35 35 63 37 38 33 35 33 39 35 63 37 38 33 33 33 36 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 32 36 36 35 63 37 38 33 34 33 33 Data Ascii: 35c7834315c7833645c783364272c275c7836335c7836335c7834625c7837315c7837375c7833365c7836625c7834385c7837375c7833365c7832665c7834345c7836395c7837335c7834625c7835315c7834365c7836335c7834665c7833395c7837375c7833355c7835395c7833365c7837375c7833365c7832665c783433
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 33 33 33 35 63 37 38 33 34 33 33 35 63 37 38 33 36 36 34 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 32 35 63 37 38 33 33 33 30 35 63 37 38 33 36 33 32 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 36 36 33 32 37 32 63 32 37 35 63 37 38 33 35 33 31 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 36 35 63 37 38 33 33 33 39 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 35 33 34 35 63 37 38 33 34 33 33 35 63 37 38 33 36 36 35 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 36 33 37 32 37 32 63 32 37 35 63 37 38 33 35 33 34 35 63 37 38 33 35 33 36 35 63 37 38 33 37 33 33 35 63 37 38 33 37 36 31 35 63 37 38 33 35 33 33 35 63 37 38 33 36 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 Data Ascii: 3335c7834335c7836645c7833385c7834625c7833305c7836325c7836335c7834625c783663272c275c7835315c7836335c7834665c7833395c7837375c7833365c7835345c7834335c7836655c7836335c7834625c783637272c275c7835345c7835365c7837335c7837615c7835335c7836375c7833645c783364272c275c
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 38 33 36 36 35 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 31 35 63 37 38 33 35 33 31 35 63 37 38 33 36 33 33 35 63 37 38 33 37 33 33 35 63 37 38 33 36 33 33 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 37 36 31 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 35 33 34 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 36 35 63 37 38 33 34 33 37 35 63 37 38 33 34 33 34 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 38 35 63 37 38 33 33 33 38 35 63 37 38 33 34 36 36 35 63 37 38 33 33 33 39 35 63 37 38 33 34 33 34 35 63 37 38 33 35 33 37 35 63 37 38 33 36 36 31 35 63 37 38 33 34 33 34 35 63 37 38 33 36 33 37 35 63 37 38 33 36 36 31 35 63 37 38 33 35 33 32 35 63 37 38 33 35 33 35 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 37 35 63 Data Ascii: 836655c7834345c7837315c7835315c7836335c7837335c7836335c7836335c7834625c7837615c7837375c7833365c7835345c7834345c7837365c7834375c7834345c7834335c7836385c7833385c7834665c7833395c7834345c7835375c7836615c7834345c7836375c7836615c7835325c7835355c7837375c7833375c
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 38 33 36 33 33 35 63 37 38 33 36 33 33 35 63 37 38 33 34 33 36 35 63 37 38 33 36 33 32 35 63 37 38 33 34 33 33 35 63 37 38 33 37 33 36 35 63 37 38 33 36 33 33 35 63 37 38 33 34 36 32 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 36 33 37 35 63 37 38 33 34 33 35 35 63 37 38 33 34 36 33 35 63 37 38 33 35 33 38 35 63 37 38 33 36 36 32 35 63 37 38 33 33 33 37 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 32 36 36 35 63 37 38 33 34 33 33 35 63 37 38 33 36 33 39 35 63 37 38 33 35 33 36 35 63 37 38 33 36 36 36 35 63 37 38 33 35 33 37 35 63 37 38 33 34 36 34 35 63 37 38 33 33 33 31 35 63 37 38 33 34 36 35 35 63 37 38 33 37 33 33 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 31 35 63 37 38 33 35 36 31 35 63 Data Ascii: 836335c7836335c7834365c7836325c7834335c7837365c7836335c7834625c7834345c7837375c7833365c7836375c7834355c7834635c7835385c7836625c7833375c7837375c7833365c7832665c7834335c7836395c7835365c7836665c7835375c7834645c7833315c7834655c7837335c7837375c7837315c7835615c
2024-04-18 17:15:51 UTC	1452	IN	Data Raw: 34 35 63 37 38 33 36 36 33 35 63 37 38 33 36 36 36 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 34 35 63 37 38 33 33 33 30 35 63 37 38 33 36 36 34 32 37 32 63 32 37 35 63 37 38 33 34 36 32 35 63 37 38 33 34 33 35 35 63 37 38 33 35 33 32 35 63 37 38 33 33 33 33 32 37 32 63 32 37 35 63 37 38 33 35 33 36 35 63 37 38 33 33 33 30 35 63 37 38 33 36 36 35 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 35 35 63 37 38 33 36 33 37 35 63 37 38 33 33 36 34 35 63 37 38 33 33 36 34 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 37 33 32 35 63 37 38 33 32 36 36 35 63 37 38 33 34 33 34 35 63 37 38 33 37 33 31 35 63 37 38 33 34 36 34 35 63 37 38 33 34 36 32 35 63 37 38 33 33 33 32 32 37 32 63 32 37 35 63 37 38 33 37 33 37 35 63 37 38 33 33 33 36 35 63 37 38 33 36 Data Ascii: 45c7836635c7836665c7837375c7833345c7833305c783664272c275c7834625c7834355c7835325c783333272c275c7835365c7833305c7836655c7834345c7837355c7836375c7833645c783364272c275c7837375c7837325c7832665c7834345c7837315c7834645c7834625c783332272c275c7837375c7833365c7836
2024-04-18 17:15:51 UTC	1793	OUT	GET /Web/Assets/Full/Bundle/print.css?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49821	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:51 UTC	1976	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:51 UTC	384	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:51 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 50-9278289-9278328 NNNY CT(13 15 0) RT(1713460550688 220) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:51 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49820	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:51 UTC	568	OUT	GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:51 UTC	814	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:51 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: s7qm2vbmUNglr6Jt5k9KHA== Last-Modified: Thu, 21 Mar 2024 07:04:35 GMT x-ms-request-id: 09dec6d6-901e-0084-36c2-7b4b82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 4522 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664c9fefbeaddd-ATL
2024-04-18 17:15:51 UTC	555	IN	Data Raw: 37 63 37 30 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 33 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c70/** * onetrust-banner-sdk * v202403.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 77 Data Ascii: type,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 67 Data Ascii: .label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function F(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=arg
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 65 6f 66 20 6a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 58 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 57 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d Data Ascii: eof j)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void X((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){W(t,e)}var n,r}function W(e,t){e._state=2,e._value=t,J(e)}function J(e){2===e._state&&0===
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 6a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6a 3f 74 3a 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 6a 2e 72 61 63 65 3d 66 75 6e 63 74 Data Ascii: turn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},j.resolve=function(t){return t&&"object"==typeof t&&t.constructor===j?t:new j(function(e){e(t)})},j.reject=function(o){return new j(function(e,t){t(o)})},j.race=funct
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 51 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 3a Data Ascii: :!0,configurable:!0})},Q.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable:
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 Data Ascii: initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max(
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 5a 3d 5a 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 5d 3d 22 Data Ascii: [e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=Z=Z\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=ee=ee\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=te=te\|\|{})[e.Purpose=1]="
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 70 65 3d 70 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 5b 65 Data Ascii: =5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=pe=pe\|\|{}).Active="1",e.InActive="0",(e=he=he\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ge=ge\|\|{})[e
2024-04-18 17:15:51 UTC	1369	IN	Data Raw: 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e 45 Data Ascii: nted="granted",e.denied="denied",0,(e=Ae=Ae\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Ie=Ie\|\|{}).cookies="cookies",e.vendors="vendors",(e=Le=Le\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GENE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49824	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:51 UTC	1874	OUT	GET /Web/Assets/Full/Content/Images/Article/persistentHeadingBackground.png HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/Web/Assets/Full/Bundle/article.min.css?v=6951 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:51 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:51 GMT Content-Type: image/png Content-Length: 932 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 62-46605754-46605897 NNNY CT(13 14 0) RT(1713460550902 248) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:51 UTC	932	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 05 08 06 00 00 00 8d 6f 26 e5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRo&tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49823	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:51 UTC	1478	OUT	GET /latest/Shared/Content/Images/ajax-loader.gif HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	508	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: image/gif Content-Length: 1690 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: VdLHQgP3HQHQAEXq5iwwGUhVIWYAAAAAdUIbw8wGM2SKnyxcsAAFig== X-CDN: Imperva X-Iinfo: 58-31086629-31086687 NNNY CT(14 15 0) RT(1713460550885 1019) q(0 0 0 -1) r(1 1) U24
2024-04-18 17:15:52 UTC	944	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 a2 06 00 c2 e4 ee 42 ac ce 92 cf e2 82 c8 de 62 ba d6 00 90 be ff ff ff 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 Data Ascii: GIF89aBb!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="h
2024-04-18 17:15:52 UTC	746	IN	Data Raw: a6 a5 a4 a3 a2 a1 a0 9f 9e 9d 9c 9b 9a 99 98 97 96 95 94 93 92 91 90 8f 8e 8d 8c 8b 8a 89 88 87 86 85 84 83 82 81 80 7f 7e 7d 7c 7b 7a 79 78 77 76 75 74 73 72 71 70 6f 6e 6d 6c 6b 6a 69 68 67 66 65 64 63 62 61 60 5f 5e 5d 5c 5b 5a 59 58 57 56 55 54 53 52 51 50 4f 4e 4d 4c 4b 4a 49 48 47 46 45 44 43 42 41 40 3f 3e 3d 3c 3b 3a 39 38 37 36 35 34 33 32 31 30 2f 2e 2d 2c 2b 2a 29 28 27 26 25 24 23 22 21 20 1f 1e 1d 1c 1b 1a 19 18 17 16 15 14 13 12 11 10 0f 0e 0d 0c 0b 0a 09 08 07 06 05 04 03 02 01 00 00 21 f9 04 09 0a 00 06 00 2c 00 00 00 00 10 00 10 00 00 03 33 68 ba dc fe 30 ca 49 6b 03 21 00 1a 4a 09 9c 07 4e 98 66 01 04 b1 31 c0 ba 10 d9 c0 b6 ae 31 c4 80 20 d0 2d 4b 0c 39 dd a6 07 11 0c 06 02 4a 6b e7 48 00 00 21 f9 04 09 0a 00 06 00 2c 00 00 00 00 10 00 Data Ascii: ~}\|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-,+*)('&%$#"! !,3h0Ik!JNf11 -K9JkH!,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49825	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:51 UTC	1976	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 61-43378706-43378795 NNNY CT(13 14 0) RT(1713460551061 220) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:52 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49828	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	1382	OUT	GET /latest/Full/Bundle/webComponentDefaultCss.css HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: text/css Content-Length: 18689 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: aMzWbPW1BybQAEXq5iwwGUdVIWYAAAAAOHyM+dSXg/6rinFqHm+PVw== X-CDN: Imperva X-Iinfo: 61-43378789-43378962 NNNY CT(14 16 0) RT(1713460551264 424) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:52 UTC	945	IN	Data Raw: 64 64 2c 64 69 76 2c 64 6c 2c 64 74 2c 66 69 65 6c 64 73 65 74 2c 66 6f 72 6d 2c 69 6e 70 75 74 2c 6c 61 62 65 6c 2c 6c 65 67 65 6e 64 2c 70 2c 74 61 62 6c 65 2c 74 62 6f 64 79 2c 74 64 2c 74 66 6f 6f 74 2c 74 68 2c 74 68 65 61 64 2c 74 72 2c 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 65 66 65 66 65 66 3b 2d 6d 73 2d 6f 76 65 72 66 6c 6f 77 2d 73 74 79 6c 65 3a 73 63 72 6f 6c 6c 62 61 72 7d 62 75 74 74 6f 6e 2c 64 64 2c 64 74 2c 6c 65 67 65 6e 64 2c 6c 69 2c 70 2c 74 61 62 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 36 7d 62 6f 64 79 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 Data Ascii: dd,div,dl,dt,fieldset,form,input,label,legend,p,table,tbody,td,tfoot,th,thead,tr,ul{margin:0;padding:0}html{background:#efefef;-ms-overflow-style:scrollbar}button,dd,dt,legend,li,p,table{font-size:16px;font-size:1rem;line-height:1.6}body{font-family:Robot
2024-04-18 17:15:52 UTC	219	IN	Data Raw: 2e 70 6e 67 29 20 33 70 78 20 2e 35 65 6d 20 6e 6f 2d 72 65 70 65 61 74 7d 75 6c 20 6c 69 20 75 6c 20 6c 69 20 75 6c 20 6c 69 20 75 6c 20 6c 69 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 47 6c 6f 62 61 6c 2f 62 75 6c 6c 65 74 34 2e 70 6e 67 29 20 33 70 78 20 2e 35 65 6d 20 6e 6f 2d 72 65 70 65 61 74 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 78 68 72 73 79 6d 62 6f 6c 73 52 65 67 75 6c 61 72 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 Data Ascii: .png) 3px .5em no-repeat}ul li ul li ul li ul li{background:url(../../Shared/Content/Images/Global/bullet4.png) 3px .5em no-repeat}@font-face{font-family:xhrsymbolsRegular;src:url("../../Shared/Content/Fonts/xhr-symbols
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 2f 78 68 72 2d 73 79 6d 62 6f 6c 73 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 22 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 46 6f 6e 74 73 2f 78 Data Ascii: /xhr-symbols-webfont.eot");src:url("../../Shared/Content/Fonts/xhr-symbols/xhr-symbols-webfont.eot?#iefix") format("embedded-opentype"),url("../../Shared/Content/Fonts/xhr-symbols/xhr-symbols-webfont.woff") format("woff"),url("../../Shared/Content/Fonts/x
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 2d 61 66 74 65 72 3a 61 6c 77 61 79 73 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 68 72 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 65 6d 7d 2e 78 68 72 2d 70 72 69 6e 74 2d 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 6f 72 65 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 6e 65 77 2d 72 6f 77 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 74 6d 70 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 62 61 62 61 62 7d 2e 6e 6f 2d 73 63 72 69 70 74 20 2e 68 69 64 64 65 6e 2d 77 68 65 6e 2d 73 63 72 69 70 74 2d 64 69 73 61 62 6c 65 64 2c 2e 73 63 72 69 70 74 20 2e 68 69 64 64 65 6e 2d 77 68 Data Ascii: -after:always;text-align:center}hr:after{content:" ";font-size:1.25em}.xhr-print-footer{display:none}.more{clear:both;text-align:right}.new-row{clear:both}.tmp-placeholder{border:1px solid #ababab}.no-script .hidden-when-script-disabled,.script .hidden-wh
2024-04-18 17:15:52 UTC	16	IN	Data Raw: 2d 70 61 67 65 73 2e 63 6f 6e 66 69 72 6d 61 74 Data Ascii: -pages.confirmat
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 69 6f 6e 2d 70 61 67 65 2d 6e 65 77 20 68 31 7b 63 6f 6c 6f 72 3a 23 31 33 32 39 34 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 62 61 73 69 63 2d 6c 61 79 6f 75 74 20 2e 73 69 6d 70 6c 65 2d 70 61 67 65 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 70 61 67 65 2d 6e 65 77 20 68 31 2c 2e 62 61 73 69 63 2d 6c 61 79 6f 75 74 20 2e 73 69 6d 70 6c 65 2d 70 61 67 65 73 2e 63 6f 6e 66 69 72 6d 61 74 69 6f 6e 2d 70 61 67 65 2d 6e 65 77 20 70 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 68 31 2c 2e 68 32 2c 2e 68 33 2c 2e 68 34 2c 2e 68 35 2c 2e 68 36 2c 2e 68 65 61 64 69 6e 67 31 2c 2e 68 65 61 64 69 6e 67 32 2c 2e 68 65 61 64 69 6e 67 33 2c 2e 68 65 61 64 69 6e 67 34 2c 2e 68 65 61 64 69 6e 67 35 2c 2e 68 65 61 64 69 6e 67 36 2c 68 31 Data Ascii: ion-page-new h1{color:#13294e;font-weight:700}.basic-layout .simple-pages.confirmation-page-new h1,.basic-layout .simple-pages.confirmation-page-new p{text-align:center}.h1,.h2,.h3,.h4,.h5,.h6,.heading1,.heading2,.heading3,.heading4,.heading5,.heading6,h1
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 6e 74 20 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 2e 68 61 73 2d 6d 65 74 61 2c 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 2e 68 61 73 2d 73 75 6d 6d 61 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 37 70 78 20 32 70 78 20 23 62 66 62 66 62 66 3b 70 61 64 64 69 6e 67 3a 31 34 70 78 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 2e 68 61 73 2d 6d 65 74 61 20 2e 74 69 74 6c 65 2c 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 Data Ascii: nt none;padding:0}.article-list .article-list-item.has-meta,.article-list .article-list-item.has-summary{background:#fff;margin-bottom:2rem;box-shadow:0 2px 7px 2px #bfbfbf;padding:14px}.article-list .article-list-item.has-meta .title,.article-list .artic
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 74 69 74 6c 65 2e 6c 69 76 65 66 6c 6f 2d 73 74 65 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 20 27 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 32 34 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 22 2e 2e 2f 2e 2e 2f 53 68 61 72 65 64 2f 43 6f 6e 74 65 6e 74 2f 49 6d Data Ascii: e;display:none}.article-list .article-list-item .title.liveflo-step:before{content:' ';background-repeat:no-repeat;position:absolute;background-size:cover;display:block;width:24px;height:24px;margin-left:-30px;background-image:url("../../Shared/Content/Im
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 74 69 74 6c 65 2c 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 2d 69 74 65 6d 20 2e 74 69 74 6c 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 61 72 74 69 63 6c 65 2d 6c 69 73 74 20 2e 63 61 73 65 2d 72 65 70 6f 72 74 73 2d 6c 69 73 74 2d 69 74 65 6d 2c 2e 63 61 73 65 2d 72 65 70 6f 72 74 2d 6c 69 73 74 20 2e 63 61 73 65 2d 72 65 70 6f 72 74 73 2d 6c 69 73 74 2d 69 74 65 6d 7b 70 61 64 64 69 6e 67 2d 6c Data Ascii: ;background-color:transparent}.article-list .case-report-list .article-list-item .title,.case-report-list .case-report-list .article-list-item .title{font-weight:400}.article-list .case-reports-list-item,.case-report-list .case-reports-list-item{padding-l
2024-04-18 17:15:52 UTC	32	IN	Data Raw: 63 6f 6c 75 6d 6e 73 2d 66 6f 75 72 20 2e 6e 65 77 2d 72 6f 77 2c 2e 61 72 74 69 63 6c 65 2d 6c Data Ascii: columns-four .new-row,.article-l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49829	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	1828	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 53-16546955-16547056 NNNN CT(13 16 0) RT(1713460551281 409) q(0 0 1 -1) r(2 2) U24
2024-04-18 17:15:52 UTC	1142	IN	Data Raw: 32 66 66 36 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 Data Ascii: 2ff6{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Su
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f Data Ascii: ary":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}],"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigatio
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 68 2d 63 61 72 65 2d 62 65 6e 65 66 69 74 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 43 61 72 65 20 42 65 6e 65 66 69 74 73 22 2c 22 69 64 22 3a 31 34 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 77 61 67 65 2d 61 6e 64 2d 68 6f 75 72 2f 6d 69 6e 69 6d 75 6d 2d 77 61 67 65 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c Data Ascii: h-care-benefits/","title":"Health Care Benefits","id":14},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/minimum-wage/","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/",
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 65 65 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 65 61 6c 74 68 20 61 6e 64 20 53 61 66 65 74 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 65 61 6c 74 68 2d 61 6e 64 2d 73 61 66 65 74 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 69 72 69 6e 67 20 61 6e 64 20 4f 6e 62 6f 61 72 64 69 6e 67 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 69 72 69 6e 67 2d 61 6e 64 2d 6f 6e 62 6f 61 72 64 69 6e 67 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 52 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 72 2d 61 64 6d 69 6e 69 73 74 72 61 Data Ascii: ee Relations","urlSlug":"/tasks/employee-relations/"},{"text":"Health and Safety","urlSlug":"/tasks/health-and-safety/"},{"text":"Hiring and Onboarding","urlSlug":"/tasks/hiring-and-onboarding/"},{"text":"HR Administration","urlSlug":"/tasks/hr-administra
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 6e 61 6c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 6d 61 6e 75 61 6c 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 62 65 73 74 2d 70 72 61 63 74 69 63 65 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 4c 65 61 64 69 6e 67 20 50 72 61 63 74 69 63 65 20 47 75 69 64 65 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6c 65 61 64 69 6e 67 2d 70 72 61 63 74 69 63 65 2d 67 75 69 64 65 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 6d 70 6c 61 74 65 73 20 61 6e 64 20 50 6f 73 74 65 72 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 74 65 6d 70 6c 61 74 65 73 2d 61 6e 64 2d 70 6f 73 74 65 72 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 Data Ascii: nal","urlSlug":"/international-manual/"},{"cssClass":"best-practice-manual","text":"Leading Practice Guides","urlSlug":"/leading-practice-guides/"}]},{"name":"Templates and Posters","cssClass":"templates-and-posters","dropDownPosition":1,"toolLinks":[{"cs
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 78 74 22 3a 22 45 64 69 74 6f 72 27 73 20 43 68 6f 69 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 22 2c 22 74 65 78 74 22 3a 22 4e 65 77 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6e 65 77 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 51 75 69 63 6b 20 52 65 66 65 72 65 6e 63 65 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 71 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 34 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 66 61 71 73 22 2c 22 74 65 78 74 22 3a 22 46 41 51 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 66 61 71 2f 22 7d 2c 7b 22 63 73 73 43 6c Data Ascii: xt":"Editor's Choice","urlSlug":"/editors-choice/"},{"cssClass":"news","text":"News","urlSlug":"/news/"}]},{"name":"Quick Reference","cssClass":"quick-reference","dropDownPosition":4,"toolLinks":[{"cssClass":"faqs","text":"FAQs","urlSlug":"/faq/"},{"cssCl
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 43 6f 6c 75 6d 62 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 69 73 74 72 69 63 74 2d 6f 66 2d 63 6f 6c 75 6d 62 69 61 2f 55 53 57 44 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 46 6c 6f 72 69 64 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 46 4c 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 67 65 6f 72 67 69 61 2f 47 41 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 61 77 61 69 69 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 68 61 77 61 69 69 2f 48 49 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 64 61 68 6f 22 2c 22 Data Ascii: Columbia","urlSlug":"/jurisdictions/district-of-columbia/USWDC/"},{"text":"Florida","urlSlug":"/jurisdictions/florida/FL/"},{"text":"Georgia","urlSlug":"/jurisdictions/georgia/GA/"},{"text":"Hawaii","urlSlug":"/jurisdictions/hawaii/HI/"},{"text":"Idaho","
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 22 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 4e 59 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 63 61 72 6f 6c 69 6e 61 2f 4e 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 64 61 6b 6f 74 61 2f 4e 44 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 68 69 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6f 68 69 6f 2f 4f 48 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 6b Data Ascii: "New York","urlSlug":"/jurisdictions/new-york/NY/"},{"text":"North Carolina","urlSlug":"/jurisdictions/north-carolina/NC/"},{"text":"North Dakota","urlSlug":"/jurisdictions/north-dakota/ND/"},{"text":"Ohio","urlSlug":"/jurisdictions/ohio/OH/"},{"text":"Ok
2024-04-18 17:15:52 UTC	980	IN	Data Raw: 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 61 6c 69 66 6f 72 6e 69 61 2f 6c 6f 73 2d 61 6e 67 65 6c 65 73 2f 43 41 31 31 34 36 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4d 69 61 6d 69 2d 44 61 64 65 20 43 6f 75 6e 74 79 2c 20 46 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 6d 69 61 6d 69 2d 64 61 64 65 2d 63 6f 75 6e 74 79 2f 46 4c 30 34 30 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 2c 20 4e 59 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 6e 65 77 2d 79 6f 72 6b 2d 63 69 74 79 2f 4e 59 31 30 33 37 22 7d 2c 7b 22 74 65 78 74 22 3a 22 50 68 69 6c 61 64 65 6c 70 68 69 61 2c 20 50 41 22 2c 22 Data Ascii: :"/jurisdictions/california/los-angeles/CA1146"},{"text":"Miami-Dade County, FL","urlSlug":"/jurisdictions/florida/miami-dade-county/FL040"},{"text":"New York City, NY","urlSlug":"/jurisdictions/new-york/new-york-city/NY1037"},{"text":"Philadelphia, PA","
2024-04-18 17:15:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49826	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	1500	OUT	GET /latest/Shared/Content/Images/ContentModule/cmCalloutBackground.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	505	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: image/png Content-Length: 2810 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: jOPKLX2WezTQAEXq5iwwGUdVIWYAAAAAQX9Lpb1Xjj/Tqy8HqBT/fQ== X-CDN: Imperva X-Iinfo: 35-1725649-1725654 NNNY CT(14 16 0) RT(1713460551264 425) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:52 UTC	947	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 1b 08 02 00 00 00 32 3a 72 23 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR2:r#pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 48 2c 23 d6 12 8f 13 2f 10 7b 88 43 c4 37 24 12 89 43 32 27 b9 90 02 49 b1 a4 54 d2 12 d2 46 d2 6e 52 23 e9 2c a9 9b 34 48 1a 23 93 c9 da 64 6b b2 07 39 94 2c 20 2b c8 85 e4 9d e4 c3 e4 33 e4 1b e4 21 f2 5b 0a 9d 62 40 71 a4 f8 53 e2 28 52 ca 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f 5a 42 ad a1 b6 52 af 51 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba 11 dd 95 1e 4e 97 d0 57 d2 cb e9 47 e8 97 e8 03 f4 77 0c 0d 86 15 83 c7 88 67 28 19 9b 18 07 18 67 19 77 18 af 98 4c a6 19 d3 8b 19 c7 54 30 37 31 eb 98 e7 99 0f 99 6f 55 58 2a b6 2a 7c 15 91 ca 0a 95 4a 95 26 95 1b 2a 2f 54 a9 aa a6 aa de aa 0b 55 f3 55 cb 54 8f a9 5e 53 7d ae 46 55 33 53 e3 a9 09 d4 96 ab 55 aa 9d 50 eb 53 1b 53 67 a9 3b a8 Data Ascii: H,#/{C7$C2'ITFnR#,4H#dk9, +3![b@qS(RjJ4e2AURT5ZBRQ4u9IKhhitNWGwg(gwLT071oUX*\|J&/TUUT^S}FU3SUPSSg;
2024-04-18 17:15:52 UTC	411	IN	Data Raw: 5b 62 5b ba 4f cc 3e d1 d6 ea de 7a fc 47 db 1f 0f 9c 34 3c 59 79 4a f3 54 c9 69 da e9 82 d3 93 67 f2 cf 8c 9d 95 9d 7d 7e 2e f9 dc 60 db a2 b6 7b e7 63 ce df 6a 0f 6f ef ba 10 74 e1 d2 45 ff 8b e7 3b bc 3b ce 5c f2 b8 74 f2 b2 db e5 13 57 b8 57 9a af 3a 5f 6d ea 74 ea 3c fe 93 d3 4f c7 bb 9c bb 9a ae b9 5c 6b b9 ee 7a bd b5 7b 66 f7 e9 1b 9e 37 ce dd f4 bd 79 f1 16 ff d6 d5 9e 39 3d dd bd f3 7a 6f f7 c5 f7 f5 df 16 dd 7e 72 27 fd ce cb bb d9 77 27 ee ad bc 4f bc 5f f4 40 ed 41 d9 43 dd 87 d5 3f 5b fe dc d8 ef dc 7f 6a c0 77 a0 f3 d1 dc 47 f7 06 85 83 cf fe 91 f5 8f 0f 43 05 8f 99 8f cb 86 0d 86 eb 9e 38 3e 39 39 e2 3f 72 fd e9 fc a7 43 cf 64 cf 26 9e 17 fe a2 fe cb ae 17 16 2f 7e f8 d5 eb d7 ce d1 98 d1 a1 97 f2 97 93 bf 6d 7c a5 fd ea c0 eb 19 af db c6 Data Ascii: [b[O>zG4<YyJTig}~.`{cjotE;;\tWW:_mt<O\kz{f7y9=zo~r'w'O_@AC?[jwGC8>99?rCd&/~m\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49827	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	1477	OUT	GET /latest/Full/Content/Images/Icons/remove.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: image/png Content-Length: 1541 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: tbBJEklH8ALQAEXq5iwwGUdVIWYAAAAA35m2fHi872ZQG5g+2ixtVQ== X-CDN: Imperva X-Iinfo: 62-46605947-46606146 NNNY CT(14 15 0) RT(1713460551262 429) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:52 UTC	945	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 de 08 06 00 00 00 09 83 e1 c3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01
2024-04-18 17:15:52 UTC	596	IN	Data Raw: 45 ba 14 16 13 56 48 23 ac 85 29 02 01 65 10 94 28 42 14 15 c5 c1 9f dc 2b 33 c3 44 67 31 9b 2a 84 7b e1 30 6f de 9c 6f de bb cf b1 38 cc 76 bb 65 f2 f9 fc 25 e8 1c c7 5a 82 67 1c e8 35 8e 0d d3 e9 f4 95 d9 6c be 81 9b e7 b5 5a ed 63 28 14 9a 32 aa ca e5 72 1c 3c e3 41 2f e0 f9 0f 7d ab d5 6a 40 0d d7 eb b5 1b c4 67 b3 d9 73 d9 0c 63 0e e7 56 ab 95 63 b1 58 08 f3 f9 fc 93 0e 97 89 44 22 1c ac c2 fb 7c 3e 07 f8 be 83 a2 20 3b 08 df ec 18 8d 46 02 5c 83 a5 52 a9 b7 03 b0 c2 e1 30 0b d0 ad d7 eb 45 a8 05 3a 53 9b cb e5 72 0f 7d 0a 80 15 8f c7 59 9b cd 76 eb 72 b9 1c d2 94 00 0a 16 0a 85 9e ec 31 aa 1b 74 3a 9d 06 8b c5 c2 88 a2 c8 18 0c 06 9c 12 41 6b b5 47 59 21 9d 4e 73 f2 9e 07 83 81 30 9b cd ac 6e b7 fb 91 d4 53 b8 58 2c f6 15 20 95 4a 29 e6 c9 64 22 0c Data Ascii: EVH#)e(B+3Dg1*{0oo8ve%Zg5lZc(2r<A/}j@gscVcXD"\|> ;F\R0E:Sr}Yvr1t:AkGY!Ns0nSX, J)d"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49830	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	4826	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.2987047014654294 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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
2024-04-18 17:15:52 UTC	122	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1
2024-04-18 17:15:52 UTC	1	IN	Data Raw: 31 Data Ascii: 1
2024-04-18 17:15:56 UTC	2616	OUT	GET /favicon.ico?v2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49837	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	1793	OUT	GET /Web/Assets/Full/Bundle/print.css?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: text/css Content-Length: 9567 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 56-26201170-26201239 NNNY CT(13 16 0) RT(1713460551797 214) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:52 UTC	1073	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 78 68 72 6f 62 2d 67 6c 6f 62 61 6c 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 78 68 72 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 78 68 72 2d 70 72 69 6e 74 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 78 68 72 2d 70 72 69 6e 74 2d 68 65 61 64 65 72 20 68 32 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f 72 64 65 72 3a 30 20 6e 6f 6e 65 7d 2e 78 68 72 2d 66 6f 6f 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 78 68 72 2d 66 6f 6f 74 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 78 68 72 2d 66 6f 6f 74 65 72 7b 64 69 73 70 6c 61 Data Ascii: @charset "UTF-8";body{background:0 0}.xhrob-global-header{display:none}.xhr-header{display:none}.xhr-print-header{display:block}.xhr-print-header h2{margin:0;padding:0;border:0 none}.xhr-footer-container{width:100%}.xhr-footer-container .xhr-footer{displa
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 6c 69 2c 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 74 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 74 61 62 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 74 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 Data Ascii: e .article-content-container #articleContent.article-body li,.page-article .article-content-container #articleContent.article-body p{font-size:16pt}.page-article .article-content-container #articleContent.article-body table{font-size:10pt}.page-article .a
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 61 5b 68 72 65 66 2a 3d 22 2e 78 6c 73 78 22 5d 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 20 34 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 6e 6f 6e 65 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 61 2e 70 70 74 2d 6c 69 6e 6b 2c 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 61 5b 68 72 65 66 Data Ascii: ner #articleContent.article-body a[href*=".xlsx"]{padding:4px 0 4px 0;background:transparent none}.page-article .article-content-container #articleContent.article-body a.ppt-link,.page-article .article-content-container #articleContent.article-body a[href
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 62 6f 64 79 20 2e 61 72 74 69 63 6c 65 2d 62 6f 78 2e 67 72 69 64 2d 77 69 64 74 68 2d 33 20 69 6d 67 7b 77 69 64 74 68 3a 39 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 2e 61 72 74 69 63 6c 65 2d 62 6f 78 2e 67 72 69 64 2d 77 69 64 74 68 2d 34 7b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 2e 61 72 74 69 63 6c 65 2d 62 6f Data Ascii: body .article-box.grid-width-3 img{width:90%;height:auto}.page-article .article-content-container #articleContent.article-body .article-box.grid-width-4{width:33.3333333333%}.page-article .article-content-container #articleContent.article-body .article-bo
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 3a 39 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 2e 61 72 74 69 63 6c 65 2d 62 6f 78 2e 67 72 69 64 2d 77 69 64 74 68 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 33 33 33 33 25 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 2e 61 72 74 69 63 6c 65 2d 62 6f 78 2e 67 72 69 64 2d 77 69 64 74 68 2d 31 30 20 69 6d 67 7b 77 69 64 74 68 3a 39 30 25 3b 68 65 69 67 68 74 3a 61 75 Data Ascii: :90%;height:auto}.page-article .article-content-container #articleContent.article-body .article-box.grid-width-10{width:83.3333333333%}.page-article .article-content-container #articleContent.article-body .article-box.grid-width-10 img{width:90%;height:au
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 6e 73 4c 69 73 74 20 75 6c 20 6c 69 7b 77 69 64 74 68 3a 32 37 25 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 2e 66 6f 75 72 43 6f 6c 75 6d 6e 73 4c 69 73 74 20 75 6c 20 6c 69 7b 77 69 64 74 68 3a 31 37 25 7d 2e 70 61 67 65 2d 61 72 74 69 63 6c 65 20 2e 61 72 74 69 63 6c 65 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 23 61 72 74 69 63 6c 65 43 6f 6e 74 65 6e 74 2e 61 72 74 69 63 6c 65 2d 62 6f 64 79 20 2e 61 72 74 69 63 6c 65 2d 62 6f 78 2e 66 69 6c 6c 2e 70 6f 64 63 61 73 74 20 68 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 70 61 67 65 2d 61 72 74 69 63 Data Ascii: nsList ul li{width:27%}.page-article .article-content-container #articleContent.article-body .fourColumnsList ul li{width:17%}.page-article .article-content-container #articleContent.article-body .article-box.fill.podcast h3{margin-bottom:12px}.page-artic
2024-04-18 17:15:52 UTC	1234	IN	Data Raw: 79 3a 6e 6f 6e 65 7d 23 6c 69 76 65 66 6c 6f 42 65 74 61 53 69 67 6e 75 70 4d 65 73 73 61 67 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 70 72 69 6e 74 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 61 72 74 69 63 6c 65 2d 68 65 61 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 61 72 74 69 63 6c 65 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 68 69 6c 64 41 72 74 69 63 6c 65 53 65 63 74 69 6f 6e 2c 23 73 74 61 74 65 52 65 71 75 69 72 65 6d 65 6e 74 73 53 65 63 74 69 6f 6e 2c 2e 61 72 74 69 63 6c 65 2d 66 6f 6f 74 65 72 2c 2e 70 61 67 65 2d 61 73 69 64 65 2c 2e 73 74 61 74 65 52 65 71 75 69 72 65 6d 65 6e 74 73 73 74 61 74 65 52 65 71 75 69 72 65 6d 65 6e 74 73 49 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 Data Ascii: y:none}#livefloBetaSignupMessage{display:none}.print{display:none}.article-header-container .article-header{display:none}#childArticleSection,#stateRequirementsSection,.article-footer,.page-aside,.stateRequirementsstateRequirementsInfo{display:none!import

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49831	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	694	OUT	GET /latest/Global/Content/Fonts/ggl-roboto/roboto-v30-latin-700.woff2 HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://hrcenter.us.brightmine.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://assets.us.brightmine.com/latest/Global/Bundle/sharedAssetFontCss-en-US.css?v=2.0.769 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:52 UTC	940	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: application/font-woff2 Content-Length: 15860 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 Set-Cookie: visid_incap_3085445=KZIrY2QHRwecOjlyTmlm/UVVIWYAAAAAQUIPAAAAAACMYEcMSJwvCW3OTUvkUSRG; expires=Fri, 18 Apr 2025 06:39:23 GMT; HttpOnly; path=/; Domain=.us.brightmine.com Set-Cookie: nlbi_3085445=w8rJYJ7xG0jdVu1p6DoT2QAAAAAi9UPCg+4bs1rrGi5ALQ2E; path=/; Domain=.us.brightmine.com x-incap-sess-cookie-hdr: Xp0SLvN7OV+pLkXq5iwwGUhVIWYAAAAA5YYUjXIa3zofOSBMhJZAAg== Set-Cookie: incap_ses_1815_3085445=/wN1BkdcIHWpLkXq5iwwGUhVIWYAAAAAblEvZu8L7BQwLO/CsiFEHA==; path=/; Domain=.us.brightmine.com X-CDN: Imperva X-Iinfo: 60-39162032-39162136 NNNN CT(13 15 0) RT(1713460551795 225) q(0 0 0 4) r(0 0) U24
2024-04-18 17:15:52 UTC	512	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 3d f4 00 12 00 00 00 00 8d b0 00 00 3d 8e 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 9a 1e 1c 85 5e 06 60 00 83 20 08 48 09 83 3c 11 0c 0a 81 db 1c 81 c2 38 0b 84 0a 00 12 82 10 01 36 02 24 03 88 10 04 20 05 82 7e 07 20 0c 82 29 1b 08 7e 45 07 f2 ae 93 de ae 1e 89 10 36 0e 00 4a d8 e5 91 81 60 e3 00 20 3a 97 05 ff 9f 0e 38 19 3b b7 c1 35 ab e8 10 1a bb 92 21 8a 6c 1f 6a e6 25 53 58 b6 53 44 6d b7 c8 01 52 58 68 a8 eb ba e5 26 f2 8d 58 a6 bc fb b4 ee 18 35 8b 97 d5 5f 8c 98 8d 1f ba 9b b5 d0 86 c7 0e 0b c1 85 fe b7 40 b8 15 e3 8a 38 c8 89 04 a1 47 69 de a5 ad 67 80 3b 39 a2 11 27 0f 51 7f f5 fd c9 c8 c8 8b 31 fb c1 35 f3 85 55 cf b7 b0 16 b1 14 77 90 2b 86 68 6e f7 db 88 92 c1 90 c8 0d b4 Data Ascii: wOF2==d^` H<86$ ~ )~E6J` :8;5!lj%SXSDmRXh&X5_@8Gig;9'Q15Uw+hn
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 98 9a a1 36 55 16 9c 25 57 5b 74 03 52 da 94 8b ce 9d 8b 6a f0 06 e4 9f 99 0f 80 e4 80 d4 12 10 69 53 00 a5 25 84 0d 4c 1b b8 d2 f1 72 66 c8 3d 98 01 37 10 0e 39 69 1d 49 d1 89 bb 8e 31 15 4d 6a bd bd 43 e5 ce 75 99 42 15 8a b6 db ce 10 df 9f c9 7f 76 4a a1 05 2e d0 17 2b e2 75 24 b7 3d ad 05 33 c1 b2 54 83 99 52 a7 f0 5f 2e 67 73 fb f2 a9 dd 36 29 e2 24 ad 2d a7 50 55 48 06 e5 90 48 6c 0c 9b 87 c4 b2 57 44 64 cc f2 cd d7 15 cf c9 66 4b 0b 28 42 11 46 31 3e 8f 86 35 a5 7f 5f 5b 86 d3 5d 7d 56 41 23 58 80 f2 2e 63 b3 cb df bf 0d a4 25 16 28 73 35 30 07 bc fc 6d bb 19 18 5e 87 9d 06 31 e1 06 12 27 0e 24 55 2a 48 ba 74 10 16 16 48 8e 1c 90 73 f2 41 5a 75 80 b9 e3 27 08 04 06 38 01 70 0a 08 d0 40 e2 40 80 e3 1c a2 08 71 9d eb 59 d8 83 23 f7 8e 0b a7 83 23 f7 Data Ascii: 6U%W[tRjiS%Lrf=79iI1MjCuBvJ.+u$=3TR_.gs6)$-PUHHlWDdfK(BF1>5_[]}VA#X.c%(s50m^1'$U*HtHsAZu'8p@@qY##
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 10 3d 45 5d 2d 88 94 9c 21 60 4e 92 30 4a 8a c1 09 83 17 46 e3 79 c0 c3 02 2f 3c 1c 04 85 20 7c 20 8f ee 8d 64 10 73 2a 21 df 80 83 08 38 2a 84 9c 91 9f e3 93 c3 c3 5d dc 70 97 02 f7 36 01 93 47 c2 e4 cf 21 e5 2a 88 ba 8a 10 22 08 21 12 22 6e a3 14 05 9c 25 cc 4f 60 f0 c0 97 b8 8e c7 d6 a3 93 c0 f7 b4 dd f3 1d 07 dc ad d0 5d d2 c6 0b 06 0c 18 9f c3 f1 de e7 61 a1 21 80 f5 1f ef bc 81 bc 87 04 fa 7b 82 0a c2 85 e5 f6 87 30 a2 42 00 fb 21 a1 de 74 30 34 7b 85 83 9b 8f 10 86 db 6f 58 9f c6 ab 48 95 7a ed d8 ae 1a c5 f4 91 97 66 01 2c 70 5d 76 27 13 34 24 7a 6d 3b 7b b3 76 3d 3b 03 34 58 bf 67 81 86 60 37 bb cc c1 78 ab 9b 5b c6 6d 6e 65 9e fa 0a 68 b8 01 1d 27 2e 3c 7c 82 95 49 4f dc 0d 7b 81 03 00 0f 70 eb e6 28 80 e2 00 44 e8 d4 97 0c c5 a6 63 ef bb be e0 Data Ascii: =E]-!`N0JFy/< \| ds!8]p6G!*"!"n%O`]a!{0B!t04{oXHzf,p]v'4$zm;{v=;4Xg`7x[mneh'.<\|IO{p(Dc
2024-04-18 17:15:52 UTC	370	IN	Data Raw: 69 47 a1 5c 6a bb 30 4d 7c 59 db 20 53 2b c3 bd a0 db 10 b5 be e9 d4 75 a3 66 59 39 52 91 4b ca ac 27 b9 b8 83 74 8a 47 cb e8 07 1b 61 e4 39 d5 10 0b 7e 49 3a 07 ea 86 fb b2 d9 53 f5 de e4 79 ed 14 fb 32 82 aa 2c 75 f0 a0 b8 b2 22 83 85 28 93 64 af cd b8 de f0 d9 f1 90 23 4f f6 cd 3c 1f 65 5f 2a 3f 5f 75 8c 3c 62 01 e4 48 b7 6c 59 8d 95 77 4f bb 5d 85 72 2d 0e 8a 2d 1a 99 5b b5 dd b7 ea 21 8a 77 30 50 8a 7a da 0b ff b9 18 99 4b 41 2b c6 07 20 9c 7e 17 3c 96 5c c6 2b 59 b3 39 e3 85 28 cb b1 73 e9 59 b9 f5 53 3a 0f 70 ca 43 1a 7d 59 6d 65 e0 a5 cb 1d 8d 2f 5c 6a b4 5d 0f e3 d5 6b 0e f7 3b 53 64 87 2b 58 cd cd cf 1b 1d 70 27 30 76 07 b1 a9 82 18 a5 7e 89 84 a9 5b f9 86 8d 48 1c 9d 12 73 4e 25 19 db fa 55 08 16 46 5b 86 17 5b 29 9d 6b 9c fa c9 f8 b1 d4 cb af Data Ascii: iG\j0M\|Y S+ufY9RK'tGa9~I:Sy2,u"(d#O<e_*?_u<bHlYwO]r--[!w0PzKA+ ~<\+Y9(sYS:pC}Yme/\j]k;Sd+Xp'0v~[HsN%UF[[)k
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: c8 c5 91 76 ae 9b 19 0c d4 b1 89 ec eb d2 b3 f6 04 cc 34 b7 3d a6 e9 da a8 12 cb 69 1e de a3 14 14 87 52 af ce c3 2b 48 bb 26 98 35 cc 49 f6 13 e0 79 d9 bb 2f 70 2b 63 1f 57 6d 74 ef fb e5 ce 88 1e d2 b4 ed dd 01 39 8d 28 ce ee d1 8b 76 ce bb eb 3d 67 12 95 3f ad 60 fb 6a c8 a2 2c 49 bc 92 f3 e1 47 c6 3f 5b 50 79 0d eb 34 0b 47 59 8d e5 54 f1 6f 3e f1 12 26 2c 78 a0 b6 77 e4 d6 86 1c ee 9e a0 e1 48 4e 7a bc bf ef c3 15 18 97 b3 80 69 22 80 2e 39 09 a9 89 f2 ea 10 d7 68 28 76 68 52 c1 2a d3 96 f2 3f 8b 45 0b c7 6d 98 28 ae 49 27 03 38 40 07 dc 8f 14 57 af 0b 59 89 3a 44 d3 cc 59 21 1d ff 9d aa 13 a2 c1 45 f7 73 97 4a 8b c4 fa 9b f4 b2 08 18 69 47 a6 95 c1 53 93 0a 93 d7 7d 5e 2d 57 65 76 b6 08 a5 51 5a 84 72 76 fe 06 4d 8a d3 18 b5 c2 39 17 05 42 91 49 23 Data Ascii: v4=iR+H&5Iy/p+cWmt9(v=g?`j,IG?[Py4GYTo>&,xwHNzi".9h(vhR*?Em(I'8@WY:DY!EsJiGS}^-WevQZrvM9BI#
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: bf 8f 89 61 26 05 d1 7c 5d c2 39 be 56 b1 ba 5a f3 0b bb 9a f3 49 59 5d 4d f9 05 dd cd 79 23 1c 3a c6 24 a6 01 f9 b4 99 8e 01 99 a0 61 44 32 90 4b 57 ce ea 69 ce 2b e8 6e 2c 24 b1 2e 37 17 16 75 b5 e4 8c c0 35 88 96 ea 67 b3 2c 74 8c 48 4c 23 92 1e f4 35 cf 5c 31 32 3c cf 3c cb 34 cb 97 79 b9 22 40 df 81 5c 45 b9 f4 7c 6e a8 e9 d1 58 71 77 4f 46 a8 cd 6f 05 42 44 de 77 e9 b4 9e 57 7f 48 66 d4 fa c0 c7 2f e1 f3 2b 88 00 17 2d 59 73 2b 9a b9 ff 19 06 1d 42 45 99 9f 09 b3 50 6d 51 24 fa 90 c9 84 d3 66 d6 91 42 f8 10 e9 d2 2b 47 e7 c4 e2 ad 17 e2 2e 6e 9c ce d5 d5 a8 29 0e 6e ba a3 24 a7 dc 30 51 1a aa 51 95 a5 b3 aa 16 5f 0a 7f 83 f4 d0 9c 4f 6d d8 d3 cb d5 d6 a8 ca 0f 6a ba 05 c3 e0 4f 36 4e 15 87 bd ff 03 4d d8 c6 67 d4 c0 de 22 0f 52 6e 6b d1 08 03 ea 09 Data Ascii: a&\|]9VZIY]My#:$aD2KWi+n,$.7u5g,tHL#5\12<<4y"@\E\|nXqwOFoBDwWHf/+-Ys+BEPmQ$fB+G.n)n$0QQ_OmjO6NMg"Rnk
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: f9 39 3a e3 ea 4f ff 9a 0b 7b 4c d6 fd 74 45 9f 44 46 38 23 ce c5 82 58 e0 9e 7b fc bf c5 ca e7 4b b7 64 9e ef b6 a3 ce 16 3d cb 3f b5 83 0e 8e 71 f0 b3 68 be 35 7c 4b f1 d6 d5 bd 46 65 4b 0e f6 c8 d6 89 83 f0 ff 71 05 5b 9b 55 1c 2b cc 4e 8b fb 0b e7 99 d1 ad 09 10 69 26 5a c9 0d b2 b5 e4 ca d9 96 9a d6 50 33 bf 31 ff 49 11 3c 5b e9 c0 d3 07 bd a5 34 7b 25 4f f2 db f3 0a 22 78 ff 79 1c eb bf 8e fc e6 d8 f6 b8 ef 9d ab d8 df 87 e9 6a 75 6f 03 47 ca d1 74 b4 52 21 49 e6 73 3d 52 05 69 de 93 64 95 91 ed f7 3b 54 f6 29 84 c0 c3 3d e3 4e 53 f9 cc 91 02 c0 89 2b f8 c0 06 5c 3b ec 43 60 b0 8f 1e e1 3c 75 0c 05 be 57 2b 0c 7e 28 4c ad 56 78 54 1a d1 d8 35 bd 78 e2 f9 93 7e ca c2 51 2d f0 93 42 fe ef 90 a4 82 fd ec 06 0a af 2d 3a af 9e 13 10 d9 5e f7 e8 4a 5e e7 Data Ascii: 9:O{LtEDF8#X{Kd=?qh5\|KFeKq[U+Ni&ZP31I<[4{%O"xyjuoGtR!Is=Rid;T)=NS+\;C`<uW+~(LVxT5x~Q-B-:^J^
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 70 c9 f2 bb 76 59 fc f1 d6 0f c1 4f 33 98 33 67 83 82 19 31 96 c6 64 06 39 cc f3 76 88 6b d5 e3 70 b3 e3 de 26 76 66 f1 47 df 19 da 2a b9 9e 76 b2 8a 3a ca 12 c3 53 f1 96 24 dd d3 e6 e4 00 73 b3 04 0b b3 c7 38 75 1b 12 41 db 8a 8c 57 e3 3f 59 64 4d 9e d8 57 75 37 e8 df 9c 1b 08 eb 1e 9e ab 6d ea 6c 2e bf e0 e1 6c 47 73 f1 61 01 66 7c 94 2f cb c5 d1 d1 c6 ab 25 a3 b5 5c 5a e8 52 53 1d b2 a9 46 ce be 5a 0e d9 aa 2f dc 51 29 67 8b 6c 9b bd ee 68 36 99 d2 eb e3 ef 14 66 ef dd 72 22 4d 8c 8c 91 a6 6e 38 96 3b 8f 56 07 58 d8 26 44 a7 9d 0d 64 b4 c5 76 f9 e1 92 23 0d 48 aa d8 4e 81 80 ee 94 ec ac 9a c2 4c 1d 4f 09 1b f7 d4 63 94 43 ed d9 41 e6 80 aa ad 42 63 ea 08 45 4f 23 e2 2f 1b 49 51 5f 9a df 77 5b e4 dd cd f9 bf 8b d7 4e b6 95 76 12 95 5d d9 49 4c a6 ee 03 Data Ascii: pvYO33g1d9vkp&vfG*v:S$s8uAW?YdMWu7ml.lGsaf\|/%\ZRSFZ/Q)glh6fr"Mn8;VX&Ddv#HNLOcCABcEO#/IQ_w[Nv]IL
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 06 97 aa 24 d7 7e 47 55 47 82 fe b0 5e 46 ee eb 88 72 06 a6 c9 2a ec ba ca 39 4b 49 a2 2d ab ac 13 ac 4b f5 32 76 19 ee 24 86 87 67 8a 6c 6d 64 68 62 68 b9 6c ca 7a 6f 6a 4f 41 4f 36 bd 92 a1 27 6f ef be ee 2e 3c 78 2d f9 ee 51 85 ee 7e 7f fb 29 6b 94 70 7c d3 53 3a 18 79 7a b6 5f f1 d9 dc 33 bf 2c 79 82 7c a6 9a 09 9a ca 63 36 de 46 be c2 b4 e5 a3 7e 82 f6 d0 8d a5 d9 b9 4a 3b 39 30 be c9 bb 5d 8c 66 7c d6 dc c1 ba dd 4c 4f fd e6 d9 f7 f1 b3 79 04 e4 09 f2 63 ab 1f 60 0b 86 57 67 9f 16 39 26 98 03 06 9a ca 63 be 01 86 c1 cc 5a 03 96 9d f6 de c3 fe 3b f7 ce 43 fd ed 1d c2 2b 0d f2 11 67 96 59 4a 6b 45 79 51 5d 2e 94 74 57 b8 f4 a4 56 b2 9a bb 8b b6 93 be 92 b3 c5 8c d3 ec a5 59 b3 7e 84 14 c0 89 5a 73 f7 d0 06 0f e6 39 e4 01 f4 c6 32 f5 5e 7c 75 7d 6b 69 Data Ascii: $~GUG^Fr*9KI-K2v$glmdhbhlzojOAO6'o.<x-Q~)kp\|S:yz_3,y\|c6F~J;90]f\|LOyc`Wg9&cZ;C+gYJkEyQ].tWVY~Zs92^\|u}ki
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 2a b7 0f a7 35 c9 3c af fb 6c c2 01 87 92 e4 30 00 83 cc 9c 22 5b 9b fd e8 bd 44 44 9d 26 79 6b c7 b9 07 cf 59 f6 6a b9 79 c8 68 6e 67 9c a9 f8 f2 f4 70 d9 7e 09 80 9d a3 97 74 98 92 72 e2 79 9a d6 49 a1 c0 39 ce 99 d8 43 98 8c 49 51 13 ad 0f 4a 7d f4 c7 ed 73 78 7a 33 d3 44 8f b5 77 e6 7e 1e 79 22 ec 51 ab c7 17 76 b5 8c ff 64 6f 58 82 6e d6 e8 c2 bb b0 14 bd 6e 12 4a 09 63 ff b9 b1 03 a9 27 9a 16 79 f5 fb d1 d1 3e 1e 30 50 90 3b e9 98 89 f1 d4 f2 2e 19 26 4b 45 82 9d ee 46 a5 dd 03 8b b2 79 79 9e 0d 69 0e 4d 49 f3 34 7d 4c 89 ac 57 23 1c 28 cf aa 36 21 a3 57 87 27 f2 48 82 c4 41 b4 b5 8b ba 58 60 c2 59 a0 a1 86 5d c1 54 8c bc b8 6d 5a 62 a6 ea 7a 3c 41 41 d9 56 78 57 08 5b b0 0f 30 78 1d 5e e4 6d c0 1f 15 96 82 22 af 10 6a eb 7f 38 cf 7a 5c 74 1f 75 68 Data Ascii: *5<l0"[DD&ykYjyhngp~tryI9CIQJ}sxz3Dw~y"QvdoXnnJc'y>0P;.&KEFyyiMI4}LW#(6!W'HAX`Y]TmZbz<AAVxW[0x^m"j8z\tuh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49836	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	1495	OUT	GET /latest/Full/Content/Images/ContentModule/DropShadowTwoCol.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets.us.brightmine.com/latest/Full/Bundle/shareAssetsCss-en-US.css?v=2.0.769 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410
2024-04-18 17:15:52 UTC	507	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: image/png Content-Length: 1633 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: LliRKTFhsRzQAEXq5iwwGUhVIWYAAAAA+XI+kauWpvnmp3f4ZSQyFw== X-CDN: Imperva X-Iinfo: 60-39162033-39162137 NNNN CT(13 15 0) RT(1713460551801 225) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:52 UTC	945	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 70 00 00 00 08 08 06 00 00 00 79 fd c2 26 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDRpy&tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01
2024-04-18 17:15:52 UTC	688	IN	Data Raw: 3e cb 79 7f 5d 77 53 6c f2 51 5a d7 67 74 8e a5 1c cf 9b 72 8f ec c3 ab 89 03 7d e3 6a 8c 96 1f b5 d7 c9 f1 37 8b 92 1c 5b a4 5c f7 ec 6a ed 97 e0 bc 73 60 8d b0 b0 ab cd b5 e6 3f 79 bf a5 d1 be 7a f3 d1 3b 46 4f fb cf c3 ed 76 e3 04 7d bc ae d7 2b 39 fb 5f 44 54 15 ef 7d b9 1f b4 ea 49 1b 39 b8 a7 93 88 33 de 3e 9e 83 b6 b3 32 86 c8 78 b3 51 7f 64 8c 9e bf a2 73 40 1d 75 1e 29 72 e2 ec aa 98 68 c5 c5 dd 88 ff 2b c6 d4 c3 2e 7b 15 2b ea 18 f3 55 95 5d 79 3e eb 15 c5 e6 dd 35 1a 00 b8 1a e4 e4 eb 2c 16 8d b7 80 2c 27 f4 04 48 6a c0 41 0b cc 78 c1 42 e2 c5 c1 d7 1a 7b 11 8b 92 8d 09 ae c7 cc c7 62 e0 60 3b ad be 6b 40 42 86 5d 1e f4 9f d7 c7 19 c8 07 cc 40 d0 e7 88 3a ee a3 49 3b 51 f8 8c 42 58 6e 80 82 ec 5b 76 a0 6f ab 6c 79 6d c9 fd 98 14 10 ef f1 8b 07 Data Ascii: >y]wSlQZgtr}j7[\js`?yz;FOv}+9_DT}I93>2xQds@u)rh+.{+U]y>5,,'HjAxB{b`;k@B]@:I;QBXn[volym

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49838	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	4837	OUT	GET /jurisdiction/getalljurisdictions/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:52 UTC	473	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: application/json; charset=utf-8 Content-Length: 49755 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-1 Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 15 Apr 2024 06:33:23 GMT X-CDN: Imperva X-Iinfo: 62-46606191-46606261 NNNY CT(13 16 0) RT(1713460551805 226) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:52 UTC	979	IN	Data Raw: 7b 22 4a 75 72 69 73 64 69 63 74 69 6f 6e 44 61 74 61 22 3a 5b 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 4b 31 34 35 32 22 2c 22 4e 61 6d 65 22 3a 22 41 64 61 2c 20 50 6f 6e 74 6f 74 6f 63 2c 20 4f 6b 6c 61 68 6f 6d 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 64 61 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 4b 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 64 61 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 37 Data Ascii: {"JurisdictionData":[{"Selected":false,"TaggingCode":"OK1452","Name":"Ada, Pontotoc, Oklahoma","SimplifiedName":"Ada","Country":"","State":"","StateCode":"OK","County":null,"Municipality":"Ada","Level":"municipality"},{"Selected":false,"TaggingCode":"OH17
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 30 30 31 22 2c 22 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 20 43 6f 75 6e 74 79 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 59 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 31 30 30 30 22 2c 22 4e 61 6d 65 22 3a 22 Data Ascii: ":false,"TaggingCode":"NY001","Name":"Albany County, New York","SimplifiedName":"Albany County","Country":"","State":"","StateCode":"NY","County":null,"Municipality":"Albany County","Level":"municipality"},{"Selected":false,"TaggingCode":"NY1000","Name":"
2024-04-18 17:15:52 UTC	1402	IN	Data Raw: 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6e 63 68 6f 72 61 67 65 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4d 49 32 33 35 36 22 2c 22 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 2c 20 57 61 73 68 74 65 6e 61 77 2c 20 4d 69 63 68 69 67 61 6e 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 49 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 4c 65 76 65 6c 22 3a 22 Data Ascii: ll,"Municipality":"Anchorage","Level":"municipality"},{"Selected":false,"TaggingCode":"MI2356","Name":"Ann Arbor, Washtenaw, Michigan","SimplifiedName":"Ann Arbor","Country":"","State":"","StateCode":"MI","County":null,"Municipality":"Ann Arbor","Level":"
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 69 70 61 6c 69 74 79 22 3a 22 42 61 6c 74 69 6d 6f 72 65 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4d 44 31 30 39 35 22 2c 22 4e 61 6d 65 22 3a 22 42 61 6c 74 69 6d 6f 72 65 2c 20 4d 61 72 79 6c 61 6e 64 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 61 6c 74 69 6d 6f 72 65 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 44 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 61 6c 74 69 6d 6f 72 65 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 Data Ascii: ipality":"Baltimore County","Level":"municipality"},{"Selected":false,"TaggingCode":"MD1095","Name":"Baltimore, Maryland","SimplifiedName":"Baltimore","Country":"","State":"","StateCode":"MD","County":null,"Municipality":"Baltimore","Level":"municipality"
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 4d 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 65 72 6e 61 6c 69 6c 6c 6f 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 31 30 33 39 22 2c 22 4e 61 6d 65 22 3a 22 42 69 6e 67 68 61 6d 74 6f 6e 2c 20 42 72 6f 6f 6d 65 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 69 6e 67 68 61 6d 74 6f 6e 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 Data Ascii: ","Country":"","State":"","StateCode":"NM","County":null,"Municipality":"Bernalillo County","Level":"municipality"},{"Selected":false,"TaggingCode":"NY1039","Name":"Binghamton, Broome, New York","SimplifiedName":"Binghamton","Country":"","State":"","State
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 67 69 6e 67 43 6f 64 65 22 3a 22 43 4f 30 30 37 22 2c 22 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 2c 20 43 6f 6c 6f 72 61 64 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 43 4f 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 43 4f 31 30 32 37 22 2c 22 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 2c 20 Data Ascii: gingCode":"CO007","Name":"Boulder County, Colorado","SimplifiedName":"Boulder County","Country":"","State":"","StateCode":"CO","County":null,"Municipality":"Boulder County","Level":"municipality"},{"Selected":false,"TaggingCode":"CO1027","Name":"Boulder,
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 37 32 34 22 2c 22 4e 61 6d 65 22 3a 22 43 61 6e 74 6f 6e 2c 20 53 74 61 72 6b 2c 20 4f 68 69 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 61 6e 74 6f 6e 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 48 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 61 6e 74 6f 6e 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 30 30 35 22 2c 22 4e 61 6d 65 22 3a 22 43 61 74 74 61 72 61 75 67 75 73 20 43 6f 75 6e 74 79 2c 20 4e 65 77 20 59 6f 72 6b Data Ascii: aggingCode":"OH1724","Name":"Canton, Stark, Ohio","SimplifiedName":"Canton","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Canton","Level":"municipality"},{"Selected":false,"TaggingCode":"NY005","Name":"Cattaraugus County, New York
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 69 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 31 35 33 22 2c 22 4e 61 6d 65 22 3a 22 43 6c 65 76 65 6c 61 6e 64 2c 20 43 75 79 61 68 6f 67 61 2c 20 4f 68 69 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 6c 65 76 65 6c 61 6e 64 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 48 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 6c 65 76 65 6c 61 6e 64 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 Data Ascii: i","Level":"municipality"},{"Selected":false,"TaggingCode":"OH1153","Name":"Cleveland, Cuyahoga, Ohio","SimplifiedName":"Cleveland","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Cleveland","Level":"municipality"},{"Selected":false
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 49 4c 30 34 35 22 2c 22 4e 61 6d 65 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 2c 20 49 6c 6c 69 6e 6f 69 73 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 49 4c 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 54 58 31 36 38 35 22 2c 22 4e 61 6d 65 22 3a 22 43 6f 72 70 Data Ascii: ed":false,"TaggingCode":"IL045","Name":"Cook County, Illinois","SimplifiedName":"Cook County","Country":"","State":"","StateCode":"IL","County":null,"Municipality":"Cook County","Level":"municipality"},{"Selected":false,"TaggingCode":"TX1685","Name":"Corp
2024-04-18 17:15:52 UTC	1452	IN	Data Raw: 79 22 3a 22 44 61 79 74 6f 6e 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 44 45 22 2c 22 4e 61 6d 65 22 3a 22 44 65 6c 61 77 61 72 65 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 44 65 6c 61 77 61 72 65 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 44 45 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 6e 75 6c 6c 2c 22 4c 65 76 65 6c 22 3a 22 73 74 61 74 65 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 43 4f 31 30 31 31 22 2c 22 4e 61 Data Ascii: y":"Dayton","Level":"municipality"},{"Selected":false,"TaggingCode":"DE","Name":"Delaware","SimplifiedName":"Delaware","Country":"","State":"","StateCode":"DE","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode":"CO1011","Na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49839	108.156.152.116	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	562	OUT	GET /legacy2000/libs/atc/1.6.1/atc.min.js HTTP/1.1 Host: cdn.addevent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:52 UTC	797	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 32972 Connection: close Date: Sun, 24 Mar 2024 00:53:25 GMT Last-Modified: Thu, 16 Jun 2022 09:22:36 GMT Accept-Ranges: bytes Server: AmazonS3 ETag: "d4881a6054da56bd933dff9367745f8c" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 dd10bff59855ee1d8fb0e180408d8530.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P3 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: qaSHYWFSXDBqFetmApcH045jTkOk55mpTLzzYOmiZnX289hy1X3U-A== Age: 2218948 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; preload Cache-Control: max-age=8380800, public, must-revalidate Vary: Origin
2024-04-18 17:15:52 UTC	15587	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 24 64 28 65 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 7d 76 61 72 20 61 64 64 65 76 65 6e 74 61 74 63 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 2c 75 2c 69 2c 62 2c 74 2c 65 3d 21 31 2c 73 3d 31 2c 6c 3d 21 31 2c 72 3d 21 30 2c 76 3d 21 31 2c 6d 3d 21 31 2c 67 3d 21 31 2c 68 3d 22 22 2c 66 3d 21 30 2c 78 3d 21 30 2c 77 3d 21 30 2c 6b 3d 21 30 2c 79 3d 21 30 2c 5f 3d 21 30 2c 54 3d 21 30 2c 4e 3d 22 41 70 70 6c 65 22 2c 45 3d 22 47 6f 6f 67 6c 65 20 3c 65 6d 3e 28 6f 6e 6c 69 6e 65 29 3c 2f 65 6d 3e 22 2c 7a 3d 22 4f 66 66 69 63 65 20 33 36 35 20 3c 65 6d 3e 28 6f 6e 6c 69 6e 65 29 3c 2f 65 6d 3e 22 2c 41 3d 22 4f 75 74 6c 6f 6f 6b 22 2c 49 3d 22 4f 75 74 6c Data Ascii: function $d(e){return document.getElementById(e)}var addeventatc=function(){var p,u,i,b,t,e=!1,s=1,l=!1,r=!0,v=!1,m=!1,g=!1,h="",f=!0,x=!0,w=!0,k=!0,y=!0,_=!0,T=!0,N="Apple",E="Google <em>(online)</em>",z="Office 365 <em>(online)</em>",A="Outlook",I="Outl
2024-04-18 17:15:52 UTC	16384	IN	Data Raw: 6c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 7d 61 64 64 65 76 65 6e 74 61 74 63 2e 74 72 61 63 6b 28 7b 74 79 70 3a 22 6a 73 69 6e 69 74 22 2c 63 61 6c 3a 22 22 7d 29 7d 7d 2c 61 70 70 6c 79 63 73 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3b 24 64 28 22 61 74 65 5f 63 73 73 22 29 26 26 21 24 64 28 22 61 74 65 5f 63 73 73 5f 70 6c 76 22 29 26 26 28 24 64 28 22 61 74 65 5f 63 73 73 22 29 2e 69 64 3d 24 64 28 22 61 74 65 5f 63 73 73 22 29 2e 69 64 2e 72 65 70 6c 61 63 65 28 2f 61 74 65 5f 63 73 73 2f 67 69 2c 22 61 74 65 5f 63 73 73 5f 70 6c 76 22 29 29 2c 24 64 28 22 61 74 65 5f 63 73 73 22 29 7c 7c 28 65 3d 22 22 2c 65 2b 3d 27 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 Data Ascii: ld(t)}catch(e){}addeventatc.track({typ:"jsinit",cal:""})}},applycss:function(){var e,t;$d("ate_css")&&!$d("ate_css_plv")&&($d("ate_css").id=$d("ate_css").id.replace(/ate_css/gi,"ate_css_plv")),$d("ate_css")\|\|(e="",e+='@import url("https://fonts.googleapis
2024-04-18 17:15:52 UTC	1001	IN	Data Raw: 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 64 2c 21 31 29 29 3a 28 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 63 29 2c 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 64 29 29 2c 6f 3d 21 30 29 29 7d 7d 28 77 69 6e 64 6f 77 29 3b 76 61 72 20 61 74 65 5f 74 6f 75 63 68 5f 63 61 70 61 62 6c 65 3d 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 7c 7c 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 26 26 64 6f 63 75 6d 65 6e 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 77 69 6e 64 6f 77 2e 44 6f 63 75 6d 65 6e 74 54 6f 75 63 68 7c 7c 30 3c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 Data Ascii: entListener("load",d,!1)):(document.attachEvent("onreadystatechange",c),window.attachEvent("onload",d)),o=!0))}}(window);var ate_touch_capable="ontouchstart"in window\|\|window.DocumentTouch&&document instanceof window.DocumentTouch\|\|0<navigator.maxTouchPoi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49840	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	659	OUT	GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018e1e0f-938a-75cb-b9e9-d78ab7e6535a/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:52 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:52 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664ca7abb9ad6b-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 81285 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:15:52 GMT Last-Modified: Tue, 16 Apr 2024 08:28:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: WZXIic6ivrMcfPeglkYf5A== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 25dd5f8f-b01e-0077-6301-90ec17000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:15:52 UTC	467	IN	Data Raw: 37 63 31 39 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 72 65 66 Data Ascii: 7c19{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Pref
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 72 76 69 63 65 20 75 73 61 67 65 3b 20 61 6e 64 2f 6f 72 20 61 63 63 65 73 73 69 6e 67 20 6f 72 20 73 74 6f 72 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 64 65 76 69 63 65 73 20 66 6f 72 20 74 68 61 74 20 70 75 72 70 6f 73 65 2e 5c 6e 3c 62 72 3e 3c 62 72 3e 5c 6e 59 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 48 6f 77 65 76 65 72 2c 20 62 6c 6f 63 6b 69 6e 67 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 20 6d 61 79 20 69 6d 70 61 63 74 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 6f 66 20 74 68 65 20 73 69 74 65 20 61 6e 64 20 74 68 65 20 73 65 72 76 69 63 65 73 20 77 65 20 61 72 65 20 61 62 6c 65 20 74 6f 20 Data Ascii: rvice usage; and/or accessing or storing information on devices for that purpose.\n<br><br>\nYou can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 73 22 2c 22 43 6c 6f 73 65 53 68 6f 75 6c 64 41 63 63 65 70 74 41 6c 6c 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a Data Ascii: s","CloseShouldAcceptAllCookies":false,"LastReconsentDate":null,"BannerTitle":"","ForceConsent":true,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":true,"LifespanText":
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 Data Ascii: ","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to act
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 69 65 73 20 74 68 65 20 73 69 74 65 20 75 73 65 73 20 61 6e 64 20 77 68 65 74 68 65 72 20 76 69 73 69 74 6f 72 73 20 68 61 76 65 20 67 69 76 65 6e 20 6f 72 20 77 69 74 68 64 72 61 77 6e 20 63 6f 6e 73 65 6e 74 20 66 6f 72 20 74 68 65 20 75 73 65 20 6f 66 20 65 61 63 68 20 63 61 74 65 67 6f 72 79 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 69 74 65 20 6f 77 6e 65 72 73 20 74 6f 20 70 72 65 76 65 6e 74 20 63 6f 6f 6b 69 65 73 20 69 6e 20 65 61 63 68 20 63 61 74 65 67 6f 72 79 20 66 72 6f 6d 20 62 65 69 6e 67 20 73 65 74 20 69 6e 20 74 68 65 20 75 73 65 72 73 20 62 72 6f 77 73 65 72 2c 20 77 68 65 6e 20 63 6f 6e 73 65 6e 74 20 69 73 20 6e 6f 74 20 67 69 76 65 6e 2e 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6e 6f 72 6d 61 6c 20 6c 69 66 65 73 Data Ascii: ies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifes
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 63 61 70 73 75 6c 61 20 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 61 20 61 6e 64 20 57 65 62 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 46 69 72 65 77 61 6c 6c 3a 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 69 6e 6b 69 6e 67 20 63 65 72 74 61 69 6e 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 69 73 69 74 6f 72 20 28 76 69 73 69 74 6f 72 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 61 20 73 70 65 63 69 66 69 63 20 63 6f 6d 70 75 74 65 72 29 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 68 61 76 65 20 61 6c 72 65 61 64 79 20 76 69 73 69 74 65 64 20 49 6e 63 61 70 73 75 6c 61 2e 20 Data Ascii: ,"Length":"364","description":"Incapsula DDoS Protectiona and Web Application Firewall:cookie for linking certain sessions to a specific visitor (visitor representing a specific computer). In order to identify clients that have already visited Incapsula.
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 6f 75 6e 74 20 76 69 73 69 74 73 20 61 6e 64 20 74 72 61 66 66 69 63 20 73 6f 75 72 63 65 73 20 73 6f 20 77 65 20 63 61 6e 20 6d 65 61 73 75 72 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 66 20 6f 75 72 20 73 69 74 65 2e 20 54 68 65 79 20 68 65 6c 70 20 75 73 20 74 6f 20 6b 6e 6f 77 20 77 68 69 63 68 20 70 61 67 65 73 20 61 72 65 20 74 68 65 20 6d 6f 73 74 20 61 6e 64 20 6c 65 61 73 74 20 70 6f 70 75 6c 61 72 20 61 6e 64 20 73 65 65 20 68 6f 77 20 76 69 73 69 74 6f 72 73 20 6d 6f 76 65 20 61 72 6f 75 6e 64 20 74 68 65 20 73 69 74 65 2e 20 22 2c 22 47 72 6f Data Ascii: lse,"GroupDescription":"These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. ","Gro
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 68 65 72 65 64 20 66 72 6f 6d 20 6d 6f 73 74 20 6f 66 20 74 68 65 73 65 20 73 65 72 76 69 63 65 73 20 74 6f 20 70 72 6f 66 69 6c 65 20 74 68 65 20 69 6e 74 65 72 65 73 74 73 20 6f 66 20 77 65 62 20 75 73 65 72 73 20 61 6e 64 20 73 65 6c 6c 20 61 64 76 65 72 74 69 73 69 6e 67 20 73 70 61 63 65 20 74 6f 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 73 75 63 68 20 69 6e 74 65 72 65 73 74 20 70 72 6f 66 69 6c 65 73 20 61 73 20 77 65 6c 6c 20 61 73 20 61 6c 69 67 6e 69 6e 67 20 61 64 76 65 72 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 74 68 65 20 70 61 67 65 73 20 77 68 65 72 65 20 69 74 73 20 63 75 73 74 6f 6d 65 72 27 73 20 61 64 76 65 72 74 73 20 61 70 70 65 61 72 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 Data Ascii: hered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages where its customer's adverts appear.","DurationType
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 20 6f 72 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 73 65 72 76 69 63 65 73 20 6d 61 79 20 6e 6f 74 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 70 65 72 6c 79 2e 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4d 6f 62 69 6c 65 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 20 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 4f 54 54 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 20 43 6f 6f 6b 69 65 73 22 2c 22 47 72 6f 75 70 4e 61 6d 65 22 3a 22 46 75 6e 63 74 69 6f 6e 61 6c 20 43 6f 6f 6b 69 65 73 22 2c 22 49 73 49 61 62 50 75 72 70 6f 73 65 22 3a 66 61 6c 73 65 2c 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 30 31 38 65 31 64 66 66 2d 35 33 36 39 2d 37 64 62 35 2d 39 66 Data Ascii: or all of these services may not function properly.","GroupNameMobile":"Functional Cookies","GroupNameOTT":"Functional Cookies","GroupName":"Functional Cookies","IsIabPurpose":false,"GeneralVendorsIds":[],"FirstPartyCookies":[{"id":"018e1dff-5369-7db5-9f
2024-04-18 17:15:52 UTC	1369	IN	Data Raw: 63 65 73 22 3a 6e 75 6c 6c 2c 22 54 72 61 63 6b 69 6e 67 54 65 63 68 22 3a 6e 75 6c 6c 7d 2c 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 34 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 34 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 Data Ascii: ces":null,"TrackingTech":null},{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"4","OptanonGroupId":"4","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49842	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:52 UTC	1469	OUT	GET //Full//Content//Images//Logos//core_consumer_us.svg HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	512	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: image/svg+xml Content-Length: 16152 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: cQAIZvJJLkjQAEXq5iwwGUhVIWYAAAAAmKl7cx2+vPQ5Lf9OwFTQ2A== X-CDN: Imperva X-Iinfo: 57-29359151-29359206 NNNY CT(15 15 0) RT(1713460552154 211) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:53 UTC	940	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 31 2e 37 38 39 35 2c 31 31 2e 37 38 39 35 3b 7d 0a 09 2e 73 74 31 30 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 31 2e 38 37 34 39 2c 31 31 2e 38 37 34 39 3b 7d 0a 09 2e 73 74 31 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 Data Ascii: e-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.7895,11.7895;}.st10{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.8749,11.8749;}.st11{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-da
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 31 2c 30 2e 34 2c 30 2e 34 2c 30 2e 39 2c 30 2e 38 2c 31 2e 34 63 30 2e 34 2c 30 2e 36 2c 30 2e 39 2c 31 2e 33 2c 31 2e 37 2c 32 2e 33 63 30 2e 37 2c 30 2e 39 2c 31 2e 37 2c 32 2e 32 2c 33 2c 33 2e 37 63 31 2e 32 2c 31 2e 35 2c 32 2e 33 2c 32 2e 37 2c 33 2e 31 2c 33 2e 36 0a 09 09 09 63 30 2e 38 2c 30 2e 39 2c 31 2e 36 2c 31 2e 36 2c 32 2e 32 2c 32 2e 31 63 30 2e 36 2c 30 2e 35 2c 31 2e 32 2c 30 2e 38 2c 31 2e 37 2c 30 2e 39 63 30 2e 35 2c 30 2e 31 2c 31 2e 31 2c 30 2e 32 2c 31 2e 37 2c 30 2e 32 6c 2d 30 2e 36 2c 32 2e 37 63 2d 30 2e 37 2c 30 2d 31 2e 34 2d 30 2e 31 2d 32 2d 30 2e 32 63 2d 30 2e 36 2d 30 2e 31 2d 31 2e 33 2d 30 2e 35 2d 32 2d 31 0a 09 09 09 73 2d 31 2e 36 2d 31 2e 33 2d 32 2e 35 2d 32 2e 33 63 2d 31 2d 31 2d 32 2e 32 2d 32 2e 34 2d 33 2e Data Ascii: 1,0.4,0.4,0.9,0.8,1.4c0.4,0.6,0.9,1.3,1.7,2.3c0.7,0.9,1.7,2.2,3,3.7c1.2,1.5,2.3,2.7,3.1,3.6c0.8,0.9,1.6,1.6,2.2,2.1c0.6,0.5,1.2,0.8,1.7,0.9c0.5,0.1,1.1,0.2,1.7,0.2l-0.6,2.7c-0.7,0-1.4-0.1-2-0.2c-0.6-0.1-1.3-0.5-2-1s-1.6-1.3-2.5-2.3c-1-1-2.2-2.4-3.
2024-04-18 17:15:53 UTC	1411	IN	Data Raw: 34 36 2e 31 2c 38 34 2e 36 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 3d 22 4d 37 35 37 2e 38 2c 37 33 63 31 2e 37 2c 30 2c 33 2e 32 2c 30 2e 34 2c 34 2e 34 2c 31 2e 31 63 31 2e 33 2c 30 2e 37 2c 32 2e 33 2c 31 2e 37 2c 33 2c 33 2e 31 63 30 2e 37 2c 31 2e 33 2c 31 2e 31 2c 32 2e 39 2c 31 2e 31 2c 34 2e 38 63 30 2c 31 2e 39 2d 30 2e 34 2c 33 2e 35 2d 31 2e 31 2c 34 2e 38 0a 09 09 09 73 2d 31 2e 37 2c 32 2e 34 2d 33 2c 33 2e 31 73 2d 32 2e 38 2c 31 2e 31 2d 34 2e 34 2c 31 2e 31 63 2d 31 2e 37 2c 30 2d 33 2e 32 2d 30 2e 34 2d 34 2e 34 2d 31 2e 31 63 2d 31 2e 33 2d 30 2e 37 2d 32 2e 33 2d 31 2e 37 2d 33 2d 33 2e 31 63 2d 30 2e 37 2d 31 2e 33 2d 31 2e 31 2d 32 2e 39 2d 31 2e 31 2d 34 2e 38 63 30 2d 31 2e 39 2c 30 2e 34 2d Data Ascii: 46.1,84.6z"/><path class="st12" d="M757.8,73c1.7,0,3.2,0.4,4.4,1.1c1.3,0.7,2.3,1.7,3,3.1c0.7,1.3,1.1,2.9,1.1,4.8c0,1.9-0.4,3.5-1.1,4.8s-1.7,2.4-3,3.1s-2.8,1.1-4.4,1.1c-1.7,0-3.2-0.4-4.4-1.1c-1.3-0.7-2.3-1.7-3-3.1c-0.7-1.3-1.1-2.9-1.1-4.8c0-1.9,0.4-
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 38 2c 33 2e 31 0a 09 09 09 63 2d 31 2e 32 2c 30 2e 37 2d 32 2e 35 2c 31 2e 31 2d 33 2e 39 2c 31 2e 31 63 2d 31 2e 35 2c 30 2d 32 2e 37 2d 30 2e 34 2d 33 2e 38 2d 31 2e 32 63 2d 31 2d 30 2e 38 2d 31 2e 38 2d 31 2e 38 2d 32 2e 32 2d 32 2e 39 6c 30 2e 34 2d 30 2e 36 76 31 31 2e 36 48 38 30 33 2e 36 7a 20 4d 38 31 32 2c 38 37 2e 39 63 31 2e 35 2c 30 2c 32 2e 37 2d 30 2e 35 2c 33 2e 35 2d 31 2e 36 0a 09 09 09 63 30 2e 38 2d 31 2e 31 2c 31 2e 33 2d 32 2e 35 2c 31 2e 33 2d 34 2e 34 63 30 2d 31 2e 39 2d 30 2e 34 2d 33 2e 33 2d 31 2e 32 2d 34 2e 34 63 2d 30 2e 38 2d 31 2e 31 2d 32 2d 31 2e 36 2d 33 2e 34 2d 31 2e 36 63 2d 31 2c 30 2d 31 2e 38 2c 30 2e 32 2d 32 2e 35 2c 30 2e 37 63 2d 30 2e 37 2c 30 2e 35 2d 31 2e 33 2c 31 2e 32 2d 31 2e 37 2c 32 2e 31 0a 09 09 09 Data Ascii: 8,3.1c-1.2,0.7-2.5,1.1-3.9,1.1c-1.5,0-2.7-0.4-3.8-1.2c-1-0.8-1.8-1.8-2.2-2.9l0.4-0.6v11.6H803.6z M812,87.9c1.5,0,2.7-0.5,3.5-1.6c0.8-1.1,1.3-2.5,1.3-4.4c0-1.9-0.4-3.3-1.2-4.4c-0.8-1.1-2-1.6-3.4-1.6c-1,0-1.8,0.2-2.5,0.7c-0.7,0.5-1.3,1.2-1.7,2.1
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 31 63 2d 31 2c 30 2e 32 2d 31 2e 37 2c 30 2e 34 2d 32 2e 32 2c 30 2e 38 0a 09 09 09 63 2d 30 2e 35 2c 30 2e 33 2d 30 2e 37 2c 30 2e 38 2d 30 2e 37 2c 31 2e 35 63 30 2c 30 2e 36 2c 30 2e 32 2c 31 2e 32 2c 30 2e 37 2c 31 2e 35 73 31 2e 32 2c 30 2e 36 2c 32 2c 30 2e 36 63 30 2e 36 2c 30 2c 31 2e 31 2d 30 2e 31 2c 31 2e 37 2d 30 2e 32 63 30 2e 35 2d 30 2e 31 2c 31 2d 30 2e 34 2c 31 2e 35 2d 30 2e 37 0a 09 09 09 63 30 2e 34 2d 30 2e 33 2c 30 2e 38 2d 30 2e 37 2c 31 2d 31 2e 32 63 30 2e 32 2d 30 2e 35 2c 30 2e 34 2d 31 2e 31 2c 30 2e 34 2d 31 2e 38 56 37 39 2e 35 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 3d 22 4d 38 36 35 2c 39 30 2e 36 56 37 33 2e 34 68 33 2e 33 6c 30 2e 32 2c 34 2e 35 6c 2d 30 2e 35 2d 30 2e 35 63 30 2e Data Ascii: 1c-1,0.2-1.7,0.4-2.2,0.8c-0.5,0.3-0.7,0.8-0.7,1.5c0,0.6,0.2,1.2,0.7,1.5s1.2,0.6,2,0.6c0.6,0,1.1-0.1,1.7-0.2c0.5-0.1,1-0.4,1.5-0.7c0.4-0.3,0.8-0.7,1-1.2c0.2-0.5,0.4-1.1,0.4-1.8V79.5z"/><path class="st12" d="M865,90.6V73.4h3.3l0.2,4.5l-0.5-0.5c0.
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 33 2d 33 2e 32 2d 31 2e 33 0a 09 09 09 63 2d 31 2c 30 2d 31 2e 38 2c 30 2e 32 2d 32 2e 36 2c 30 2e 37 63 2d 30 2e 37 2c 30 2e 35 2d 31 2e 33 2c 31 2e 31 2d 31 2e 37 2c 32 63 2d 30 2e 34 2c 30 2e 39 2d 30 2e 36 2c 32 2d 30 2e 36 2c 33 2e 33 63 30 2c 31 2e 33 2c 30 2e 32 2c 32 2e 34 2c 30 2e 36 2c 33 2e 33 63 30 2e 34 2c 30 2e 39 2c 31 2c 31 2e 36 2c 31 2e 38 2c 32 0a 09 09 09 63 30 2e 38 2c 30 2e 35 2c 31 2e 37 2c 30 2e 37 2c 32 2e 37 2c 30 2e 37 63 31 2e 31 2c 30 2c 32 2e 31 2d 30 2e 32 2c 32 2e 38 2d 30 2e 37 63 30 2e 37 2d 30 2e 34 2c 31 2e 33 2d 31 2c 31 2e 37 2d 31 2e 38 6c 32 2e 39 2c 31 2e 34 63 2d 30 2e 34 2c 30 2e 38 2d 31 2c 31 2e 35 2d 31 2e 37 2c 32 2e 32 63 2d 30 2e 37 2c 30 2e 36 2d 31 2e 35 2c 31 2e 31 2d 32 2e 35 2c 31 2e 34 0a 09 09 09 53 Data Ascii: 3-3.2-1.3c-1,0-1.8,0.2-2.6,0.7c-0.7,0.5-1.3,1.1-1.7,2c-0.4,0.9-0.6,2-0.6,3.3c0,1.3,0.2,2.4,0.6,3.3c0.4,0.9,1,1.6,1.8,2c0.8,0.5,1.7,0.7,2.7,0.7c1.1,0,2.1-0.2,2.8-0.7c0.7-0.4,1.3-1,1.7-1.8l2.9,1.4c-0.4,0.8-1,1.5-1.7,2.2c-0.7,0.6-1.5,1.1-2.5,1.4S
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 35 2c 31 2e 34 0a 09 09 09 09 53 36 36 36 2e 35 2c 31 32 38 2e 37 2c 36 36 35 2e 33 2c 31 32 38 2e 37 7a 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 3d 22 4d 36 37 37 2e 37 2c 31 32 38 2e 33 76 2d 31 37 2e 32 68 33 2e 33 6c 30 2e 32 2c 34 2e 35 6c 2d 30 2e 35 2d 30 2e 35 63 30 2e 33 2d 31 2c 30 2e 38 2d 31 2e 38 2c 31 2e 34 2d 32 2e 35 73 31 2e 33 2d 31 2e 31 2c 32 2e 32 2d 31 2e 34 63 30 2e 38 2d 30 2e 33 2c 31 2e 37 2d 30 2e 34 2c 32 2e 37 2d 30 2e 34 0a 09 09 09 09 63 31 2e 32 2c 30 2c 32 2e 33 2c 30 2e 32 2c 33 2e 33 2c 30 2e 37 63 31 2c 30 2e 35 2c 31 2e 38 2c 31 2e 32 2c 32 2e 33 2c 32 2e 31 63 30 2e 36 2c 30 2e 39 2c 30 2e 39 2c 32 2e 31 2c 30 2e 39 2c 33 2e 36 76 31 31 2e 32 68 2d 33 2e 37 76 2d 31 30 63 30 2d Data Ascii: 5,1.4S666.5,128.7,665.3,128.7z"/><path class="st12" d="M677.7,128.3v-17.2h3.3l0.2,4.5l-0.5-0.5c0.3-1,0.8-1.8,1.4-2.5s1.3-1.1,2.2-1.4c0.8-0.3,1.7-0.4,2.7-0.4c1.2,0,2.3,0.2,3.3,0.7c1,0.5,1.8,1.2,2.3,2.1c0.6,0.9,0.9,2.1,0.9,3.6v11.2h-3.7v-10c0-
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 09 63 30 2e 33 2c 30 2e 31 2c 30 2e 36 2c 30 2e 31 2c 30 2e 39 2c 30 2e 33 6c 2d 30 2e 35 2c 33 2e 32 63 2d 30 2e 33 2d 30 2e 31 2d 30 2e 35 2d 30 2e 32 2d 30 2e 38 2d 30 2e 32 63 2d 30 2e 33 2d 30 2e 31 2d 30 2e 37 2d 30 2e 31 2d 31 2e 33 2d 30 2e 31 63 2d 30 2e 37 2c 30 2d 31 2e 34 2c 30 2e 32 2d 32 2e 31 2c 30 2e 36 73 2d 31 2e 33 2c 30 2e 39 2d 31 2e 37 2c 31 2e 37 0a 09 09 09 09 63 2d 30 2e 34 2c 30 2e 38 2d 30 2e 37 2c 31 2e 37 2d 30 2e 37 2c 32 2e 39 76 39 2e 31 48 37 33 33 2e 33 7a 22 2f 3e 0a 09 09 3c 2f 67 3e 0a 09 3c 2f 67 3e 0a 09 3c 67 20 69 64 3d 22 50 72 69 6d 61 72 79 5f 6c 6f 67 6f 5f 30 30 30 30 30 30 37 34 34 32 34 35 36 35 33 36 35 34 34 35 39 36 36 38 37 30 30 30 30 30 30 32 32 37 33 32 36 32 38 31 38 32 31 35 37 31 34 31 39 30 5f 22 Data Ascii: c0.3,0.1,0.6,0.1,0.9,0.3l-0.5,3.2c-0.3-0.1-0.5-0.2-0.8-0.2c-0.3-0.1-0.7-0.1-1.3-0.1c-0.7,0-1.4,0.2-2.1,0.6s-1.3,0.9-1.7,1.7c-0.4,0.8-0.7,1.7-0.7,2.9v9.1H733.3z"/></g></g><g id="Primary_logo_00000074424565365445966870000002273262818215714190_"
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 30 2e 31 2d 31 2e 34 43 34 30 33 2e 35 2c 34 2e 38 2c 33 39 37 2e 33 2d 31 2c 33 38 39 2e 38 2c 30 2e 31 4c 33 38 39 2e 38 2c 30 2e 31 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 36 33 2e 38 2c 39 39 63 30 2c 31 37 2e 32 2d 31 34 2e 33 2c 33 31 2e 31 2d 33 32 2c 33 31 2e 31 63 2d 37 2e 38 2c 30 2d 31 34 2e 39 2d 33 2e 36 2d 31 39 2e 36 2d 39 2e 31 76 37 2e 33 48 30 56 35 30 2e 31 68 31 33 56 37 36 63 34 2e 38 2d 34 2e 39 2c 31 31 2e 35 2d 38 2c 31 38 2e 39 2d 38 0a 09 09 09 43 34 39 2e 35 2c 36 37 2e 39 2c 36 33 2e 38 2c 38 31 2e 38 2c 36 33 2e 38 2c 39 39 4c 36 33 2e 38 2c 39 39 7a 20 4d 35 30 2e 38 2c 39 39 63 30 2d 31 30 2e 36 2d 38 2e 35 2d 31 39 2e 34 2d 31 39 2e 32 2d 31 39 2e 34 53 31 32 2e 35 2c 38 38 2e Data Ascii: 0.1-1.4C403.5,4.8,397.3-1,389.8,0.1L389.8,0.1z"/><path class="st7" d="M63.8,99c0,17.2-14.3,31.1-32,31.1c-7.8,0-14.9-3.6-19.6-9.1v7.3H0V50.1h13V76c4.8-4.9,11.5-8,18.9-8C49.5,67.9,63.8,81.8,63.8,99L63.8,99z M50.8,99c0-10.6-8.5-19.4-19.2-19.4S12.5,88.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49847	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	4704	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	466	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 15 Apr 2024 06:33:23 GMT X-CDN: Imperva X-Iinfo: 48-6330901-6330902 NNNY CT(13 16 0) RT(1713460552228 212) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:53 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49846	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	4592	OUT	GET /Web/Assets/Full/Content/Images/Article/persistentHeadingBackground.png HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; ___utmvc=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; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	461	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: image/png Content-Length: 932 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 Set-Cookie: ___utmvc=a; Max-Age=0; path=/; expires=Mon, 15 Apr 2024 06:33:23 GMT X-CDN: Imperva X-Iinfo: 51-12302569-12302629 NNNY CT(13 15 0) RT(1713460552224 224) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:53 UTC	932	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 05 00 00 00 05 08 06 00 00 00 8d 6f 26 e5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRo&tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49850	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1239	OUT	GET /latest/Shared/Content/Images/ContentModule/cmCalloutBackground.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	424	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: image/png Content-Length: 2810 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 X-CDN: Imperva X-Iinfo: 62-46606331-46606388 NNNY CT(15 15 0) RT(1713460552413 211) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:53 UTC	1028	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 1b 08 02 00 00 00 32 3a 72 23 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR2:r#pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 6a 4a 19 e5 10 e5 34 e5 06 65 98 32 41 55 a3 9a 52 dd a8 a1 54 11 35 8f 5a 42 ad a1 b6 52 af 51 87 a8 13 34 75 9a 39 cd 83 16 49 4b a5 ad a2 95 d3 1a 68 17 68 f7 69 af e8 74 ba 11 dd 95 1e 4e 97 d0 57 d2 cb e9 47 e8 97 e8 03 f4 77 0c 0d 86 15 83 c7 88 67 28 19 9b 18 07 18 67 19 77 18 af 98 4c a6 19 d3 8b 19 c7 54 30 37 31 eb 98 e7 99 0f 99 6f 55 58 2a b6 2a 7c 15 91 ca 0a 95 4a 95 26 95 1b 2a 2f 54 a9 aa a6 aa de aa 0b 55 f3 55 cb 54 8f a9 5e 53 7d ae 46 55 33 53 e3 a9 09 d4 96 ab 55 aa 9d 50 eb 53 1b 53 67 a9 3b a8 87 aa 67 a8 6f 54 3f a4 7e 59 fd 89 06 59 c3 4c c3 4f 43 a4 51 a0 b1 5f e3 bc c6 20 0b 63 19 b3 78 2c 21 6b 0d ab 86 75 81 35 c4 26 b1 cd d9 7c 76 2a bb 98 fd 1d bb 8b 3d aa a9 a1 39 43 33 4a 33 57 b3 52 f3 94 66 3f 07 e3 98 71 f8 9c 74 4e 09 Data Ascii: jJ4e2AURT5ZBRQ4u9IKhhitNWGwg(gwLT071oUX*\|J&/TUUT^S}FU3SUPSSg;goT?~YYLOCQ_ cx,!ku5&\|v*=9C3J3WRf?qtN
2024-04-18 17:15:53 UTC	330	IN	Data Raw: 57 9a af 3a 5f 6d ea 74 ea 3c fe 93 d3 4f c7 bb 9c bb 9a ae b9 5c 6b b9 ee 7a bd b5 7b 66 f7 e9 1b 9e 37 ce dd f4 bd 79 f1 16 ff d6 d5 9e 39 3d dd bd f3 7a 6f f7 c5 f7 f5 df 16 dd 7e 72 27 fd ce cb bb d9 77 27 ee ad bc 4f bc 5f f4 40 ed 41 d9 43 dd 87 d5 3f 5b fe dc d8 ef dc 7f 6a c0 77 a0 f3 d1 dc 47 f7 06 85 83 cf fe 91 f5 8f 0f 43 05 8f 99 8f cb 86 0d 86 eb 9e 38 3e 39 39 e2 3f 72 fd e9 fc a7 43 cf 64 cf 26 9e 17 fe a2 fe cb ae 17 16 2f 7e f8 d5 eb d7 ce d1 98 d1 a1 97 f2 97 93 bf 6d 7c a5 fd ea c0 eb 19 af db c6 c2 c6 1e be c9 78 33 31 5e f4 56 fb ed c1 77 dc 77 1d ef a3 df 0f 4f e4 7c 20 7f 28 ff 68 f9 b1 f5 53 d0 a7 fb 93 19 93 93 ff 04 03 98 f3 fc 63 33 2d db 00 00 00 20 63 48 52 4d 00 00 7a 25 00 00 80 83 00 00 f9 ff 00 00 80 e9 00 00 75 30 00 00 Data Ascii: W:_mt<O\kz{f7y9=zo~r'w'O_@AC?[jwGC8>99?rCd&/~m\|x31^VwwO\| (hSc3- cHRMz%u0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49851	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1216	OUT	GET /latest/Full/Content/Images/Icons/remove.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	424	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: image/png Content-Length: 1541 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 X-CDN: Imperva X-Iinfo: 57-29359227-29359290 NNNY CT(15 14 0) RT(1713460552421 217) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:53 UTC	1028	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 de 08 06 00 00 00 09 83 e1 c3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01
2024-04-18 17:15:53 UTC	513	IN	Data Raw: ca e5 72 1c 3c e3 41 2f e0 f9 0f 7d ab d5 6a 40 0d d7 eb b5 1b c4 67 b3 d9 73 d9 0c 63 0e e7 56 ab 95 63 b1 58 08 f3 f9 fc 93 0e 97 89 44 22 1c ac c2 fb 7c 3e 07 f8 be 83 a2 20 3b 08 df ec 18 8d 46 02 5c 83 a5 52 a9 b7 03 b0 c2 e1 30 0b d0 ad d7 eb 45 a8 05 3a 53 9b cb e5 72 0f 7d 0a 80 15 8f c7 59 9b cd 76 eb 72 b9 1c d2 94 00 0a 16 0a 85 9e ec 31 aa 1b 74 3a 9d 06 8b c5 c2 88 a2 c8 18 0c 06 9c 12 41 6b b5 47 59 21 9d 4e 73 f2 9e 07 83 81 30 9b cd ac 6e b7 fb 91 d4 53 b8 58 2c f6 15 20 95 4a 29 e6 c9 64 22 0c 87 c3 e0 78 3c 3e b3 5a ad bc c7 e3 51 20 68 ba af 4b 26 93 dc 66 b3 e1 4d 26 d3 ce 8c 0d 56 2a 95 dd 9e fd 7e 3f 0b f3 3c cb b2 0a a4 ef 74 3a 4f da ed b6 a3 db ed 0a 70 e6 8a 19 ab 5e af 7f 5b 2e 97 d1 66 b3 d9 87 1f f8 02 9e 3f dd fd f4 81 40 e0 Data Ascii: r<A/}j@gscVcXD"\|> ;F\R0E:Sr}Yvr1t:AkGY!Ns0nSX, J)d"x<>ZQ hK&fM&V*~?<t:Op^[.f?@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49852	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1581	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 57-29359228-29359291 NNNN CT(22 36 0) RT(1713460552422 226) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:53 UTC	1142	IN	Data Raw: 32 66 66 36 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 Data Ascii: 2ff6{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Su
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f Data Ascii: ary":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}],"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigatio
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 68 2d 63 61 72 65 2d 62 65 6e 65 66 69 74 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 43 61 72 65 20 42 65 6e 65 66 69 74 73 22 2c 22 69 64 22 3a 31 34 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 77 61 67 65 2d 61 6e 64 2d 68 6f 75 72 2f 6d 69 6e 69 6d 75 6d 2d 77 61 67 65 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c Data Ascii: h-care-benefits/","title":"Health Care Benefits","id":14},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/minimum-wage/","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/",
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 65 65 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 65 61 6c 74 68 20 61 6e 64 20 53 61 66 65 74 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 65 61 6c 74 68 2d 61 6e 64 2d 73 61 66 65 74 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 69 72 69 6e 67 20 61 6e 64 20 4f 6e 62 6f 61 72 64 69 6e 67 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 69 72 69 6e 67 2d 61 6e 64 2d 6f 6e 62 6f 61 72 64 69 6e 67 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 52 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 72 2d 61 64 6d 69 6e 69 73 74 72 61 Data Ascii: ee Relations","urlSlug":"/tasks/employee-relations/"},{"text":"Health and Safety","urlSlug":"/tasks/health-and-safety/"},{"text":"Hiring and Onboarding","urlSlug":"/tasks/hiring-and-onboarding/"},{"text":"HR Administration","urlSlug":"/tasks/hr-administra
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 6e 61 6c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 6d 61 6e 75 61 6c 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 62 65 73 74 2d 70 72 61 63 74 69 63 65 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 4c 65 61 64 69 6e 67 20 50 72 61 63 74 69 63 65 20 47 75 69 64 65 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6c 65 61 64 69 6e 67 2d 70 72 61 63 74 69 63 65 2d 67 75 69 64 65 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 6d 70 6c 61 74 65 73 20 61 6e 64 20 50 6f 73 74 65 72 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 74 65 6d 70 6c 61 74 65 73 2d 61 6e 64 2d 70 6f 73 74 65 72 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 Data Ascii: nal","urlSlug":"/international-manual/"},{"cssClass":"best-practice-manual","text":"Leading Practice Guides","urlSlug":"/leading-practice-guides/"}]},{"name":"Templates and Posters","cssClass":"templates-and-posters","dropDownPosition":1,"toolLinks":[{"cs
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 78 74 22 3a 22 45 64 69 74 6f 72 27 73 20 43 68 6f 69 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 22 2c 22 74 65 78 74 22 3a 22 4e 65 77 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6e 65 77 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 51 75 69 63 6b 20 52 65 66 65 72 65 6e 63 65 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 71 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 34 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 66 61 71 73 22 2c 22 74 65 78 74 22 3a 22 46 41 51 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 66 61 71 2f 22 7d 2c 7b 22 63 73 73 43 6c Data Ascii: xt":"Editor's Choice","urlSlug":"/editors-choice/"},{"cssClass":"news","text":"News","urlSlug":"/news/"}]},{"name":"Quick Reference","cssClass":"quick-reference","dropDownPosition":4,"toolLinks":[{"cssClass":"faqs","text":"FAQs","urlSlug":"/faq/"},{"cssCl
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 43 6f 6c 75 6d 62 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 69 73 74 72 69 63 74 2d 6f 66 2d 63 6f 6c 75 6d 62 69 61 2f 55 53 57 44 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 46 6c 6f 72 69 64 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 46 4c 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 67 65 6f 72 67 69 61 2f 47 41 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 61 77 61 69 69 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 68 61 77 61 69 69 2f 48 49 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 64 61 68 6f 22 2c 22 Data Ascii: Columbia","urlSlug":"/jurisdictions/district-of-columbia/USWDC/"},{"text":"Florida","urlSlug":"/jurisdictions/florida/FL/"},{"text":"Georgia","urlSlug":"/jurisdictions/georgia/GA/"},{"text":"Hawaii","urlSlug":"/jurisdictions/hawaii/HI/"},{"text":"Idaho","
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 22 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 4e 59 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 63 61 72 6f 6c 69 6e 61 2f 4e 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 64 61 6b 6f 74 61 2f 4e 44 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 68 69 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6f 68 69 6f 2f 4f 48 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 6b Data Ascii: "New York","urlSlug":"/jurisdictions/new-york/NY/"},{"text":"North Carolina","urlSlug":"/jurisdictions/north-carolina/NC/"},{"text":"North Dakota","urlSlug":"/jurisdictions/north-dakota/ND/"},{"text":"Ohio","urlSlug":"/jurisdictions/ohio/OH/"},{"text":"Ok
2024-04-18 17:15:53 UTC	980	IN	Data Raw: 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 61 6c 69 66 6f 72 6e 69 61 2f 6c 6f 73 2d 61 6e 67 65 6c 65 73 2f 43 41 31 31 34 36 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4d 69 61 6d 69 2d 44 61 64 65 20 43 6f 75 6e 74 79 2c 20 46 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 6d 69 61 6d 69 2d 64 61 64 65 2d 63 6f 75 6e 74 79 2f 46 4c 30 34 30 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 2c 20 4e 59 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 6e 65 77 2d 79 6f 72 6b 2d 63 69 74 79 2f 4e 59 31 30 33 37 22 7d 2c 7b 22 74 65 78 74 22 3a 22 50 68 69 6c 61 64 65 6c 70 68 69 61 2c 20 50 41 22 2c 22 Data Ascii: :"/jurisdictions/california/los-angeles/CA1146"},{"text":"Miami-Dade County, FL","urlSlug":"/jurisdictions/florida/miami-dade-county/FL040"},{"text":"New York City, NY","urlSlug":"/jurisdictions/new-york/new-york-city/NY1037"},{"text":"Philadelphia, PA","
2024-04-18 17:15:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49854	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1234	OUT	GET /latest/Full/Content/Images/ContentModule/DropShadowTwoCol.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	424	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: image/png Content-Length: 1633 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 X-CDN: Imperva X-Iinfo: 57-29359235-29359293 NNNN CT(35 27 0) RT(1713460552442 230) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:15:53 UTC	1028	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 70 00 00 00 08 08 06 00 00 00 79 fd c2 26 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 30 2d 63 30 36 31 20 36 34 2e 31 34 30 39 34 39 2c 20 32 30 31 30 2f 31 32 2f 30 37 2d 31 30 3a 35 37 3a 30 31 20 20 Data Ascii: PNGIHDRpy&tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01
2024-04-18 17:15:53 UTC	605	IN	Data Raw: 39 fb 5f 44 54 15 ef 7d b9 1f b4 ea 49 1b 39 b8 a7 93 88 33 de 3e 9e 83 b6 b3 32 86 c8 78 b3 51 7f 64 8c 9e bf a2 73 40 1d 75 1e 29 72 e2 ec aa 98 68 c5 c5 dd 88 ff 2b c6 d4 c3 2e 7b 15 2b ea 18 f3 55 95 5d 79 3e eb 15 c5 e6 dd 35 1a 00 b8 1a e4 e4 eb 2c 16 8d b7 80 2c 27 f4 04 48 6a c0 41 0b cc 78 c1 42 e2 c5 c1 d7 1a 7b 11 8b 92 8d 09 ae c7 cc c7 62 e0 60 3b ad be 6b 40 42 86 5d 1e f4 9f d7 c7 19 c8 07 cc 40 d0 e7 88 3a ee a3 49 3b 51 f8 8c 42 58 6e 80 82 ec 5b 76 a0 6f ab 6c 79 6d c9 fd 98 14 10 ef f1 8b 07 a2 3d fe 9f 99 6b 8b 03 46 e0 92 44 ec e5 c0 18 d8 28 45 80 da ae bc 0e 01 dc 25 90 d9 a9 61 81 04 1c 94 63 81 d4 ef 47 a8 bf 1e 8c bc b7 37 38 5b 10 95 8c 0c 51 9a 6c 2b 52 5f 66 97 22 70 da 9b 8d e9 81 a4 b2 00 62 22 7e 9e f1 6d 8f cf 5b 7d 78 c5 Data Ascii: 9_DT}I93>2xQds@u)rh+.{+U]y>5,,'HjAxB{b`;k@B]@:I;QBXn[volym=kFD(E%acG78[Ql+R_f"pb"~m[}x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49855	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1365	OUT	GET /latest/Shared/Content/Images/ajax-loader.gif HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0
2024-04-18 17:15:53 UTC	424	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: image/gif Content-Length: 1690 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "801305ad18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:55 GMT Server: Microsoft-IIS/10.0 X-CDN: Imperva X-Iinfo: 60-39162259-39162327 NNNY CT(15 14 0) RT(1713460552446 220) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:53 UTC	1028	IN	Data Raw: 47 49 46 38 39 61 10 00 10 00 a2 06 00 c2 e4 ee 42 ac ce 92 cf e2 82 c8 de 62 ba d6 00 90 be ff ff ff 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 30 36 37 20 37 39 2e 31 35 37 37 34 37 2c 20 32 30 31 35 2f 30 33 2f 33 30 2d 32 33 3a 34 30 3a 34 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d 6c 6e 73 3a 72 64 66 3d 22 68 Data Ascii: GIF89aBb!NETSCAPE2.0!XMP DataXMP<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="h
2024-04-18 17:15:53 UTC	662	IN	Data Raw: 52 51 50 4f 4e 4d 4c 4b 4a 49 48 47 46 45 44 43 42 41 40 3f 3e 3d 3c 3b 3a 39 38 37 36 35 34 33 32 31 30 2f 2e 2d 2c 2b 2a 29 28 27 26 25 24 23 22 21 20 1f 1e 1d 1c 1b 1a 19 18 17 16 15 14 13 12 11 10 0f 0e 0d 0c 0b 0a 09 08 07 06 05 04 03 02 01 00 00 21 f9 04 09 0a 00 06 00 2c 00 00 00 00 10 00 10 00 00 03 33 68 ba dc fe 30 ca 49 6b 03 21 00 1a 4a 09 9c 07 4e 98 66 01 04 b1 31 c0 ba 10 d9 c0 b6 ae 31 c4 80 20 d0 2d 4b 0c 39 dd a6 07 11 0c 06 02 4a 6b e7 48 00 00 21 f9 04 09 0a 00 06 00 2c 00 00 00 00 10 00 10 00 00 03 34 68 ba dc fe 0e 84 00 20 0b a5 04 bb b0 e6 8a 44 71 00 41 54 20 31 0d a0 31 4c 44 5b 0e a8 2c 08 b5 75 df ad 30 0c 02 03 20 d7 18 e2 86 43 19 b2 25 24 2a 12 00 21 f9 04 09 0a 00 06 00 2c 00 00 00 00 10 00 10 00 00 03 36 68 ba 10 01 2b ca Data Ascii: RQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-,+)('&%$#"! !,3h0Ik!JNf11 -K9JkH!,4h DqAT 11LD[,u0 C%$!,6h+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49853	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1598	OUT	GET /_Incapsula_Resource?SWKMTFSR=1&e=0.2987047014654294 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	122	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: text/plain X-Robots-Tag: noindex Content-Length: 1
2024-04-18 17:15:53 UTC	1	IN	Data Raw: 31 Data Ascii: 1
2024-04-18 17:15:53 UTC	1729	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49856	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	433	OUT	GET /consent/018df9b4-0bb4-7c4d-8c6a-9bf9cb2815e0/018e1e0f-938a-75cb-b9e9-d78ab7e6535a/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:53 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664caaee277bb8-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 83006 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:15:53 GMT Last-Modified: Tue, 16 Apr 2024 08:28:50 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: WZXIic6ivrMcfPeglkYf5A== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: bffd7ce2-e01e-008e-2edd-90ef35000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:15:53 UTC	467	IN	Data Raw: 31 66 35 37 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 72 65 66 Data Ascii: 1f57{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Pref
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 72 76 69 63 65 20 75 73 61 67 65 3b 20 61 6e 64 2f 6f 72 20 61 63 63 65 73 73 69 6e 67 20 6f 72 20 73 74 6f 72 69 6e 67 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 6f 6e 20 64 65 76 69 63 65 73 20 66 6f 72 20 74 68 61 74 20 70 75 72 70 6f 73 65 2e 5c 6e 3c 62 72 3e 3c 62 72 3e 5c 6e 59 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 48 6f 77 65 76 65 72 2c 20 62 6c 6f 63 6b 69 6e 67 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 20 6d 61 79 20 69 6d 70 61 63 74 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 6f 66 20 74 68 65 20 73 69 74 65 20 61 6e 64 20 74 68 65 20 73 65 72 76 69 63 65 73 20 77 65 20 61 72 65 20 61 62 6c 65 20 74 6f 20 Data Ascii: rvice usage; and/or accessing or storing information on devices for that purpose.\n<br><br>\nYou can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 73 22 2c 22 43 6c 6f 73 65 53 68 6f 75 6c 64 41 63 63 65 70 74 41 6c 6c 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 50 61 67 65 22 3a 66 61 6c 73 65 2c 22 49 6e 61 63 74 69 76 65 54 65 78 74 22 3a 22 49 6e 61 63 74 69 76 65 22 2c 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a Data Ascii: s","CloseShouldAcceptAllCookies":false,"LastReconsentDate":null,"BannerTitle":"","ForceConsent":true,"BannerPushesDownPage":false,"InactiveText":"Inactive","CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":true,"LifespanText":
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 72 65 20 6e 65 63 65 73 73 61 72 79 20 66 6f 72 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 Data Ascii: ","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to act
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 69 65 73 20 74 68 65 20 73 69 74 65 20 75 73 65 73 20 61 6e 64 20 77 68 65 74 68 65 72 20 76 69 73 69 74 6f 72 73 20 68 61 76 65 20 67 69 76 65 6e 20 6f 72 20 77 69 74 68 64 72 61 77 6e 20 63 6f 6e 73 65 6e 74 20 66 6f 72 20 74 68 65 20 75 73 65 20 6f 66 20 65 61 63 68 20 63 61 74 65 67 6f 72 79 2e 20 54 68 69 73 20 65 6e 61 62 6c 65 73 20 73 69 74 65 20 6f 77 6e 65 72 73 20 74 6f 20 70 72 65 76 65 6e 74 20 63 6f 6f 6b 69 65 73 20 69 6e 20 65 61 63 68 20 63 61 74 65 67 6f 72 79 20 66 72 6f 6d 20 62 65 69 6e 67 20 73 65 74 20 69 6e 20 74 68 65 20 75 73 65 72 73 20 62 72 6f 77 73 65 72 2c 20 77 68 65 6e 20 63 6f 6e 73 65 6e 74 20 69 73 20 6e 6f 74 20 67 69 76 65 6e 2e 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6e 6f 72 6d 61 6c 20 6c 69 66 65 73 Data Ascii: ies the site uses and whether visitors have given or withdrawn consent for the use of each category. This enables site owners to prevent cookies in each category from being set in the users browser, when consent is not given. The cookie has a normal lifes
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 49 6e 63 61 70 73 75 6c 61 20 44 44 6f 53 20 50 72 6f 74 65 63 74 69 6f 6e 61 20 61 6e 64 20 57 65 62 20 41 70 70 6c 69 63 61 74 69 6f 6e 20 46 69 72 65 77 61 6c 6c 3a 63 6f 6f 6b 69 65 20 66 6f 72 20 6c 69 6e 6b 69 6e 67 20 63 65 72 74 61 69 6e 20 73 65 73 73 69 6f 6e 73 20 74 6f 20 61 20 73 70 65 63 69 66 69 63 20 76 69 73 69 74 6f 72 20 28 76 69 73 69 74 6f 72 20 72 65 70 72 65 73 65 6e 74 69 6e 67 20 61 20 73 70 65 63 69 66 69 63 20 63 6f 6d 70 75 74 65 72 29 2e 20 49 6e 20 6f 72 64 65 72 20 74 6f 20 69 64 65 6e 74 69 66 79 20 63 6c 69 65 6e 74 73 20 74 68 61 74 20 68 61 76 65 20 61 6c 72 65 61 64 79 20 76 69 73 69 74 65 64 20 49 6e 63 61 70 73 75 6c 61 2e 20 Data Ascii: ,"Length":"364","description":"Incapsula DDoS Protectiona and Web Application Firewall:cookie for linking certain sessions to a specific visitor (visitor representing a specific computer). In order to identify clients that have already visited Incapsula.
2024-04-18 17:15:53 UTC	719	IN	Data Raw: 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 61 6c 6c 6f 77 20 75 73 20 74 6f 20 63 6f 75 6e 74 20 76 69 73 69 74 73 20 61 6e 64 20 74 72 61 66 66 69 63 20 73 6f 75 72 63 65 73 20 73 6f 20 77 65 20 63 61 6e 20 6d 65 61 73 75 72 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 74 68 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 6f 66 20 6f 75 72 20 73 69 74 65 2e 20 54 68 65 79 20 68 65 6c 70 20 75 73 20 74 6f 20 6b 6e 6f 77 20 77 68 69 63 68 20 70 61 67 65 73 20 61 72 65 20 74 68 65 20 6d 6f 73 74 20 61 6e 64 20 6c 65 61 73 74 20 70 6f 70 75 6c 61 72 20 61 6e 64 20 73 65 65 20 68 6f 77 20 76 69 73 69 74 6f 72 73 20 6d 6f 76 65 20 61 72 6f 75 6e 64 20 74 68 65 20 73 69 74 65 2e 20 22 2c 22 47 72 6f Data Ascii: lse,"GroupDescription":"These cookies allow us to count visits and traffic sources so we can measure and improve the performance of our site. They help us to know which pages are the most and least popular and see how visitors move around the site. ","Gro
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 70 6c 61 79 4e 61 6d 65 22 3a 22 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 34 33 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 68 74 74 70 73 3a 2f 2f 70 6f 6c 69 63 69 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 30 31 38 65 31 64 66 65 2d 38 35 62 66 2d 37 34 35 35 2d 61 36 32 38 2d 64 38 66 37 36 32 38 33 31 66 66 61 22 2c 22 4e 61 6d 65 22 3a 22 54 65 73 74 50 65 72 66 72 6f 6d 61 6e 63 65 43 6f 6f 6b 69 65 30 30 31 22 2c 22 48 6f 73 74 22 3a 22 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 30 Data Ascii: 7ffaplayName":"google.com","HostId":"H43","Description":"","PrivacyPolicy":"https://policies.google.com/privacy","Cookies":[{"id":"018e1dfe-85bf-7455-a628-d8f762831ffa","Name":"TestPerfromanceCookie001","Host":"google.com","IsSession":false,"Length":"30
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 33 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 65 6e 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 7a 61 74 69 6f 6e 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 73 65 74 20 62 79 20 75 73 20 6f 72 20 62 79 20 74 68 69 72 64 20 Data Ascii: ","OptanonGroupId":"3","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDescription":"These cookies enable the website to provide enhanced functionality and personalization. They may be set by us or by third
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 77 65 62 73 69 74 65 73 20 61 72 6f 75 6e 64 20 74 68 65 20 77 6f 72 6c 64 2e 20 49 74 20 75 73 65 73 20 74 68 65 20 64 61 74 61 20 67 61 74 68 65 72 65 64 20 66 72 6f 6d 20 6d 6f 73 74 20 6f 66 20 74 68 65 73 65 20 73 65 72 76 69 63 65 73 20 74 6f 20 70 72 6f 66 69 6c 65 20 74 68 65 20 69 6e 74 65 72 65 73 74 73 20 6f 66 20 77 65 62 20 75 73 65 72 73 20 61 6e 64 20 73 65 6c 6c 20 61 64 76 65 72 74 69 73 69 6e 67 20 73 70 61 63 65 20 74 6f 20 6f 72 67 61 6e 69 73 61 74 69 6f 6e 73 20 62 61 73 65 64 20 6f 6e 20 73 75 63 68 20 69 6e 74 65 72 65 73 74 20 70 72 6f 66 69 6c 65 73 20 61 73 20 77 65 6c 6c 20 61 73 20 61 6c 69 67 6e 69 6e 67 20 61 64 76 65 72 74 73 20 74 6f 20 74 68 65 20 63 6f 6e 74 65 6e 74 20 6f 6e 20 74 68 65 20 70 61 67 65 73 20 77 68 65 72 Data Ascii: websites around the world. It uses the data gathered from most of these services to profile the interests of web users and sell advertising space to organisations based on such interest profiles as well as aligning adverts to the content on the pages wher

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49857	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	612	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:53 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: f4fef959-c01e-0020-6f27-8f4224000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81286 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664caafac4b074-ATL
2024-04-18 17:15:53 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49858	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	616	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcTab.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:53 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: JqD83lHxEjWNdmDqKd9lzA== Last-Modified: Thu, 21 Mar 2024 07:04:31 GMT x-ms-request-id: 88913105-501e-006f-6627-8f3370000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81286 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cab0d55675b-ATL
2024-04-18 17:15:53 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 54 61 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 31 52 68 59 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 68 4c 53 30 67 63 47 Data Ascii: 7c76 { "name": "otPcTab", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1RhYiBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjwhLS0gcG
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 6a 62 47 39 7a 5a 53 31 77 59 79 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 4e 73 62 33 4e 6c 4c 57 6c 6a 62 32 34 69 49 47 46 79 61 57 45 74 62 47 46 69 5a 57 77 39 49 6b 4e 73 62 33 4e 6c 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 47 4e 76 62 6e 52 6c 62 6e 51 67 4c 53 30 2b 50 43 45 74 4c 53 42 48 63 6d 39 31 63 48 4d 67 4c 79 42 54 64 57 49 67 5a 33 4a 76 64 58 42 7a 49 48 64 70 64 47 67 67 59 32 39 76 61 32 6c 6c 63 79 41 74 4c 54 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6a 62 32 35 30 5a 57 35 30 49 69 42 6a 62 47 46 7a 63 7a Data Ascii: yIj48YnV0dG9uIGlkPSJjbG9zZS1wYy1idG4taGFuZGxlciIgY2xhc3M9Im90LWNsb3NlLWljb24iIGFyaWEtbGFiZWw9IkNsb3NlIj48L2J1dHRvbj48L2Rpdj48L2Rpdj48L2Rpdj48IS0tIGNvbnRlbnQgLS0+PCEtLSBHcm91cHMgLyBTdWIgZ3JvdXBzIHdpdGggY29va2llcyAtLT48ZGl2IGlkPSJvdC1wYy1jb250ZW50IiBjbGFzcz
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 63 32 56 73 5a 57 4e 30 5a 57 51 39 49 6d 5a 68 62 48 4e 6c 49 6a 34 38 61 44 4d 2b 55 47 56 79 63 32 39 75 59 57 78 70 65 6d 46 30 61 57 39 75 49 45 4e 76 62 32 74 70 5a 58 4d 38 4c 32 67 7a 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 6c 63 32 4d 74 59 32 35 30 63 69 42 76 64 43 31 6f 61 57 52 6c 49 69 42 79 62 32 78 6c 50 53 4a 30 59 57 4a 77 59 57 35 6c 62 43 49 67 64 47 46 69 61 57 35 6b 5a 58 67 39 49 6a 41 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 73 61 53 31 6f 5a 48 49 69 50 6a 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 30 61 58 52 73 5a 53 49 2b 51 32 39 75 63 32 56 75 64 44 77 76 63 33 42 68 62 6a 34 67 50 48 4e 77 59 57 34 67 59 32 78 Data Ascii: c2VsZWN0ZWQ9ImZhbHNlIj48aDM+UGVyc29uYWxpemF0aW9uIENvb2tpZXM8L2gzPjwvZGl2PjxkaXYgY2xhc3M9Im90LWRlc2MtY250ciBvdC1oaWRlIiByb2xlPSJ0YWJwYW5lbCIgdGFiaW5kZXg9IjAiPjxkaXYgY2xhc3M9Im90LXBsaS1oZHIiPjxzcGFuIGNsYXNzPSJvdC1saS10aXRsZSI+Q29uc2VudDwvc3Bhbj4gPHNwYW4gY2x
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 73 4c 54 49 78 4c 6a 51 77 4f 53 30 79 4d 53 34 30 4d 54 5a 44 4d 7a 49 7a 4c 6a 51 7a 4d 69 77 7a 4c 6a 55 79 4d 53 77 7a 4d 54 51 75 4f 44 45 33 4c 44 41 73 4d 7a 41 30 4c 6a 59 7a 4e 79 77 77 63 79 30 78 4f 43 34 33 4f 54 45 73 4d 79 34 31 4d 6a 45 74 4d 6a 55 75 4f 44 51 78 4c 44 45 77 4c 6a 55 32 4d 55 77 35 4d 69 34 32 4e 44 6b 73 4d 54 6b 32 4c 6a 51 79 4e 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 6a 4c 54 63 75 4d 44 51 30 4c 44 63 75 4d 44 51 7a 4c 54 45 77 4c 6a 55 32 4e 69 77 78 4e 53 34 32 4e 54 59 74 4d 54 41 75 4e 54 59 32 4c 44 49 31 4c 6a 67 30 4d 58 4d 7a 4c 6a 55 79 4d 53 77 78 4f 43 34 33 4f 54 45 73 4d 54 41 75 4e 54 59 32 4c 44 49 31 Data Ascii: CAgICAgICAgICAgICAgICBsLTIxLjQwOS0yMS40MTZDMzIzLjQzMiwzLjUyMSwzMTQuODE3LDAsMzA0LjYzNywwcy0xOC43OTEsMy41MjEtMjUuODQxLDEwLjU2MUw5Mi42NDksMTk2LjQyNQogICAgICAgICAgICAgICAgICBjLTcuMDQ0LDcuMDQzLTEwLjU2NiwxNS42NTYtMTAuNTY2LDI1Ljg0MXMzLjUyMSwxOC43OTEsMTAuNTY2LDI1
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 41 67 49 47 4d 77 4c 6a 63 33 4f 53 77 77 4c 44 45 75 4e 54 45 34 4c 54 41 75 4d 6a 6b 33 4c 44 49 75 4d 44 63 35 4c 54 41 75 4f 44 4d 33 51 7a 55 32 4c 6a 49 31 4e 53 77 31 4e 43 34 35 4f 44 49 73 4e 54 59 75 4d 6a 6b 7a 4c 44 55 7a 4c 6a 41 34 4c 44 55 31 4c 6a 45 30 4e 69 77 31 4d 53 34 34 4f 44 64 36 49 45 30 79 4d 79 34 35 4f 44 51 73 4e 6d 4d 35 4c 6a 4d 33 4e 43 77 77 4c 44 45 33 4c 44 63 75 4e 6a 49 32 4c 44 45 33 4c 44 45 33 63 79 30 33 4c 6a 59 79 4e 69 77 78 4e 79 30 78 4e 79 77 78 4e 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 4d 74 4d 54 63 74 4e 79 34 32 4d 6a 59 74 4d 54 63 74 4d 54 64 54 4d 54 51 75 4e 6a 45 73 4e 69 77 79 4d 79 34 35 4f 44 51 73 4e 6e 6f 69 4c 7a 34 38 4c 33 4e 32 5a 7a 34 38 4c 32 52 70 64 6a 34 38 5a Data Ascii: AgIGMwLjc3OSwwLDEuNTE4LTAuMjk3LDIuMDc5LTAuODM3QzU2LjI1NSw1NC45ODIsNTYuMjkzLDUzLjA4LDU1LjE0Niw1MS44ODd6IE0yMy45ODQsNmM5LjM3NCwwLDE3LDcuNjI2LDE3LDE3cy03LjYyNiwxNy0xNywxNwogICAgICAgICAgICAgIHMtMTctNy42MjYtMTctMTdTMTQuNjEsNiwyMy45ODQsNnoiLz48L3N2Zz48L2Rpdj48Z
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 32 50 6a 77 76 5a 47 6c 32 50 6a 78 7a 5a 57 4e 30 61 57 39 75 49 47 6c 6b 50 53 4a 76 64 43 31 73 63 33 51 74 59 32 35 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 47 4d 74 63 32 4e 79 62 32 78 73 59 6d 46 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 63 6d 39 33 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 59 32 39 73 64 57 31 75 49 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 6d 78 72 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 68 6b 63 69 49 2b 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 Data Ascii: 2PjwvZGl2PjxzZWN0aW9uIGlkPSJvdC1sc3QtY250IiBjbGFzcz0ib3QtcGMtc2Nyb2xsYmFyIj48ZGl2IGNsYXNzPSJvdC1zZGstcm93Ij48ZGl2IGNsYXNzPSJvdC1zZGstY29sdW1uIj48ZGl2IGlkPSJvdC1zZWwtYmxrIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWhkciI+PHNwYW4gY2xhc3
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 59 6d 39 34 49 69 42 68 63 6d 6c 68 4c 57 56 34 63 47 46 75 5a 47 56 6b 50 53 4a 6d 59 57 78 7a 5a 53 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 48 4e 6c 59 33 52 70 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6f 5a 48 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 6f 5a 48 49 69 50 6a 78 6f 4d 79 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 35 68 62 57 55 69 50 6a 77 76 61 44 4d 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 46 42 79 61 58 5a 68 59 33 6b 67 54 6d 39 30 61 57 4e 6c 50 43 39 Data Ascii: YnV0dG9uIGNsYXNzPSJvdC12ZW4tYm94IiBhcmlhLWV4cGFuZGVkPSJmYWxzZSI+PC9idXR0b24+PHNlY3Rpb24gY2xhc3M9Im90LWFjYy1oZHIiPjxkaXYgY2xhc3M9Im90LXZlbi1oZHIiPjxoMyBjbGFzcz0ib3QtdmVuLW5hbWUiPjwvaDM+PGEgY2xhc3M9Im90LXZlbi1saW5rIiBocmVmPSIjIj5WaWV3IFByaXZhY3kgTm90aWNlPC9
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 4e 68 64 6d 55 67 55 32 56 30 64 47 6c 75 5a 33 4d 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 69 64 47 34 74 63 33 56 69 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 47 4d 74 63 6d 56 6d 64 58 4e 6c 4c 57 46 73 62 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 53 5a 57 70 6c 59 33 51 67 51 57 78 73 50 43 39 69 64 58 52 30 62 32 34 2b 49 44 78 69 64 58 52 30 62 32 34 67 61 57 51 39 49 6d 46 6a 59 32 56 77 64 43 31 79 5a 57 4e 76 62 57 31 6c 62 6d 52 6c 5a 43 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 51 57 78 73 62 33 63 67 51 57 78 73 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b Data Ascii: nRuLWhhbmRsZXIiPlNhdmUgU2V0dGluZ3M8L2J1dHRvbj48ZGl2IGNsYXNzPSJvdC1idG4tc3ViY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtcGMtcmVmdXNlLWFsbC1oYW5kbGVyIj5SZWplY3QgQWxsPC9idXR0b24+IDxidXR0b24gaWQ9ImFjY2VwdC1yZWNvbW1lbmRlZC1idG4taGFuZGxlciI+QWxsb3cgQWxsPC9idXR0b24+PC9kaXY+
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 33 61 58 52 6a 61 43 31 75 62 32 49 69 49 47 46 79 61 57 45 74 59 32 68 6c 59 32 74 6c 5a 44 30 69 5a 6d 46 73 63 32 55 69 49 48 4a 76 62 47 55 39 49 6e 4e 33 61 58 52 6a 61 43 49 2b 50 43 39 7a 63 47 46 75 50 69 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 46 69 5a 57 77 74 64 48 68 30 49 6a 35 54 64 32 6c 30 59 32 67 67 54 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 73 59 57 4a 6c 62 44 34 67 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 68 59 6d 56 73 4c 58 4e 30 59 58 52 31 63 79 49 2b 62 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 61 47 56 6a 61 32 4a 76 65 43 42 49 56 45 31 4d 49 43 30 74 50 6a 78 6b 61 Data Ascii: xhc3M9Im90LXN3aXRjaC1ub2IiIGFyaWEtY2hlY2tlZD0iZmFsc2UiIHJvbGU9InN3aXRjaCI+PC9zcGFuPiA8c3BhbiBjbGFzcz0ib3QtbGFiZWwtdHh0Ij5Td2l0Y2ggTGFiZWw8L3NwYW4+PC9sYWJlbD4gPHNwYW4gY2xhc3M9Im90LWxhYmVsLXN0YXR1cyI+bGFiZWw8L3NwYW4+PC9kaXY+PCEtLSBDaGVja2JveCBIVE1MIC0tPjxka
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 68 59 32 4d 74 64 48 68 30 49 6a 34 38 49 53 30 74 49 45 46 6a 59 32 39 79 61 57 52 76 62 69 42 6a 62 32 35 30 5a 57 35 30 49 43 30 74 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 59 33 4a 75 4c 58 4a 6b 63 69 49 67 59 58 4a 70 59 53 31 68 64 47 39 74 61 57 4d 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 62 47 6c 32 5a 54 30 69 63 47 39 73 61 58 52 6c 49 6a 34 38 4c 33 4e 77 59 57 34 2b 50 43 45 74 4c 53 42 57 5a 57 35 6b 62 33 49 67 55 32 56 79 64 6d 6c 6a 5a 53 42 6a 62 32 35 30 59 57 6c 75 5a 58 49 67 59 57 35 6b 49 47 6c 30 5a 57 30 67 64 47 56 74 63 47 78 68 64 47 55 67 4c 53 30 2b 50 48 4e 6c 59 33 52 70 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 Data Ascii: hY2MtdHh0Ij48IS0tIEFjY29yaWRvbiBjb250ZW50IC0tPjwvZGl2PjwvZGl2PjxzcGFuIGNsYXNzPSJvdC1zY3JuLXJkciIgYXJpYS1hdG9taWM9InRydWUiIGFyaWEtbGl2ZT0icG9saXRlIj48L3NwYW4+PCEtLSBWZW5kb3IgU2VydmljZSBjb250YWluZXIgYW5kIGl0ZW0gdGVtcGxhdGUgLS0+PHNlY3Rpb24gY2xhc3M9Im90LXNkay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49859	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	619	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:53 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: e178add0-601e-0006-5227-8f0a3c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81286 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cab099b672d-ATL
2024-04-18 17:15:53 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-04-18 17:15:53 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49861	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1935	OUT	GET /jurisdiction/getalljurisdictions/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F
2024-04-18 17:15:53 UTC	391	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/json; charset=utf-8 Content-Length: 49755 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 53-16547245-16547311 NNNY CT(13 14 0) RT(1713460552543 211) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:53 UTC	1061	IN	Data Raw: 7b 22 4a 75 72 69 73 64 69 63 74 69 6f 6e 44 61 74 61 22 3a 5b 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 4b 31 34 35 32 22 2c 22 4e 61 6d 65 22 3a 22 41 64 61 2c 20 50 6f 6e 74 6f 74 6f 63 2c 20 4f 6b 6c 61 68 6f 6d 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 64 61 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 4b 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 64 61 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 37 Data Ascii: {"JurisdictionData":[{"Selected":false,"TaggingCode":"OK1452","Name":"Ada, Pontotoc, Oklahoma","SimplifiedName":"Ada","Country":"","State":"","StateCode":"OK","County":null,"Municipality":"Ada","Level":"municipality"},{"Selected":false,"TaggingCode":"OH17
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 59 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 31 30 30 30 22 2c 22 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 2c 20 41 6c 62 61 6e 79 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 Data Ascii: lbany County","Country":"","State":"","StateCode":"NY","County":null,"Municipality":"Albany County","Level":"municipality"},{"Selected":false,"TaggingCode":"NY1000","Name":"Albany, Albany, New York","SimplifiedName":"Albany","Country":"","State":"","State
2024-04-18 17:15:53 UTC	1320	IN	Data Raw: 64 65 22 3a 22 4d 49 32 33 35 36 22 2c 22 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 2c 20 57 61 73 68 74 65 6e 61 77 2c 20 4d 69 63 68 69 67 61 6e 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 49 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 41 5a 22 2c 22 4e 61 6d 65 22 3a 22 41 72 69 7a 6f 6e 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 Data Ascii: de":"MI2356","Name":"Ann Arbor, Washtenaw, Michigan","SimplifiedName":"Ann Arbor","Country":"","State":"","StateCode":"MI","County":null,"Municipality":"Ann Arbor","Level":"municipality"},{"Selected":false,"TaggingCode":"AZ","Name":"Arizona","SimplifiedNa
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 69 70 61 6c 69 74 79 22 3a 22 42 61 6c 74 69 6d 6f 72 65 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4d 44 31 30 39 35 22 2c 22 4e 61 6d 65 22 3a 22 42 61 6c 74 69 6d 6f 72 65 2c 20 4d 61 72 79 6c 61 6e 64 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 61 6c 74 69 6d 6f 72 65 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 44 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 61 6c 74 69 6d 6f 72 65 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 Data Ascii: ipality":"Baltimore County","Level":"municipality"},{"Selected":false,"TaggingCode":"MD1095","Name":"Baltimore, Maryland","SimplifiedName":"Baltimore","Country":"","State":"","StateCode":"MD","County":null,"Municipality":"Baltimore","Level":"municipality"
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 4d 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 65 72 6e 61 6c 69 6c 6c 6f 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 31 30 33 39 22 2c 22 4e 61 6d 65 22 3a 22 42 69 6e 67 68 61 6d 74 6f 6e 2c 20 42 72 6f 6f 6d 65 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 69 6e 67 68 61 6d 74 6f 6e 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 Data Ascii: ","Country":"","State":"","StateCode":"NM","County":null,"Municipality":"Bernalillo County","Level":"municipality"},{"Selected":false,"TaggingCode":"NY1039","Name":"Binghamton, Broome, New York","SimplifiedName":"Binghamton","Country":"","State":"","State
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 67 69 6e 67 43 6f 64 65 22 3a 22 43 4f 30 30 37 22 2c 22 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 2c 20 43 6f 6c 6f 72 61 64 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 43 4f 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 43 4f 31 30 32 37 22 2c 22 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 2c 20 Data Ascii: gingCode":"CO007","Name":"Boulder County, Colorado","SimplifiedName":"Boulder County","Country":"","State":"","StateCode":"CO","County":null,"Municipality":"Boulder County","Level":"municipality"},{"Selected":false,"TaggingCode":"CO1027","Name":"Boulder,
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 37 32 34 22 2c 22 4e 61 6d 65 22 3a 22 43 61 6e 74 6f 6e 2c 20 53 74 61 72 6b 2c 20 4f 68 69 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 61 6e 74 6f 6e 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 48 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 61 6e 74 6f 6e 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 30 30 35 22 2c 22 4e 61 6d 65 22 3a 22 43 61 74 74 61 72 61 75 67 75 73 20 43 6f 75 6e 74 79 2c 20 4e 65 77 20 59 6f 72 6b Data Ascii: aggingCode":"OH1724","Name":"Canton, Stark, Ohio","SimplifiedName":"Canton","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Canton","Level":"municipality"},{"Selected":false,"TaggingCode":"NY005","Name":"Cattaraugus County, New York
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 69 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 31 35 33 22 2c 22 4e 61 6d 65 22 3a 22 43 6c 65 76 65 6c 61 6e 64 2c 20 43 75 79 61 68 6f 67 61 2c 20 4f 68 69 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 6c 65 76 65 6c 61 6e 64 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 48 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 6c 65 76 65 6c 61 6e 64 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 Data Ascii: i","Level":"municipality"},{"Selected":false,"TaggingCode":"OH1153","Name":"Cleveland, Cuyahoga, Ohio","SimplifiedName":"Cleveland","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Cleveland","Level":"municipality"},{"Selected":false
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 49 4c 30 34 35 22 2c 22 4e 61 6d 65 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 2c 20 49 6c 6c 69 6e 6f 69 73 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 49 4c 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 54 58 31 36 38 35 22 2c 22 4e 61 6d 65 22 3a 22 43 6f 72 70 Data Ascii: ed":false,"TaggingCode":"IL045","Name":"Cook County, Illinois","SimplifiedName":"Cook County","Country":"","State":"","StateCode":"IL","County":null,"Municipality":"Cook County","Level":"municipality"},{"Selected":false,"TaggingCode":"TX1685","Name":"Corp
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 79 22 3a 22 44 61 79 74 6f 6e 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 44 45 22 2c 22 4e 61 6d 65 22 3a 22 44 65 6c 61 77 61 72 65 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 44 65 6c 61 77 61 72 65 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 44 45 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 6e 75 6c 6c 2c 22 4c 65 76 65 6c 22 3a 22 73 74 61 74 65 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 43 4f 31 30 31 31 22 2c 22 4e 61 Data Ascii: y":"Dayton","Level":"municipality"},{"Selected":false,"TaggingCode":"DE","Name":"Delaware","SimplifiedName":"Delaware","Country":"","State":"","StateCode":"DE","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode":"CO1011","Na

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49863	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1579	OUT	GET //Full//Content//Images//Logos//core_consumer_us.svg HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F
2024-04-18 17:15:53 UTC	457	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 Vary: Accept-Encoding X-CDN: Imperva X-Iinfo: 56-26201499-26201559 NNNY CT(14 15 0) RT(1713460552722 210) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:53 UTC	995	IN	Data Raw: 31 34 36 35 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 38 2e 31 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 Data Ascii: 1465<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0p
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 79 3a 31 31 2e 37 38 39 35 2c 31 31 2e 37 38 39 35 3b 7d 0a 09 2e 73 74 31 30 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 31 2e 38 37 34 39 2c 31 31 2e 38 37 34 39 3b 7d 0a 09 2e 73 74 31 31 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 73 74 72 6f 6b 65 3a 23 36 30 36 36 36 37 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 30 2e 37 35 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 32 2e 32 31 35 38 2c 31 32 2e 32 31 35 38 3b 7d 0a 09 2e 73 74 31 32 7b 66 69 6c 6c 3a 23 36 30 36 36 36 37 3b 7d 0a 09 Data Ascii: y:11.7895,11.7895;}.st10{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:11.8749,11.8749;}.st11{fill:none;stroke:#606667;stroke-width:0.75;stroke-miterlimit:10;stroke-dasharray:12.2158,12.2158;}.st12{fill:#606667;}
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 2c 30 2e 39 2c 31 2e 37 2c 32 2e 32 2c 33 2c 33 2e 37 63 31 2e 32 2c 31 2e 35 2c 32 2e 33 2c 32 2e 37 2c 33 2e 31 2c 33 2e 36 0a 09 09 09 63 30 2e 38 2c 30 2e 39 2c 31 2e 36 2c 31 2e 36 2c 32 2e 32 2c 32 2e 31 63 30 2e 36 2c 30 2e 35 2c 31 2e 32 2c 30 2e 38 2c 31 2e 37 2c 30 2e 39 63 30 2e 35 2c 30 2e 31 2c 31 2e 31 2c 30 2e 32 2c 31 2e 37 2c 30 2e 32 6c 2d 30 2e 36 2c 32 2e 37 63 2d 30 2e 37 2c 30 2d 31 2e 34 2d 30 2e 31 2d 32 2d 30 2e 32 63 2d 30 2e 36 2d 30 2e 31 2d 31 2e 33 2d 30 2e 35 2d 32 2d 31 0a 09 09 09 73 2d 31 2e 36 2d 31 2e 33 2d 32 2e 35 2d 32 2e 33 63 2d 31 2d 31 2d 32 2e 32 2d 32 2e 34 2d 33 2e 36 2d 34 63 2d 31 2e 33 2d 31 2e 36 2d 32 2e 34 2d 32 2e 39 2d 33 2e 33 2d 33 2e 39 73 2d 31 2e 36 2d 32 2d 32 2e 31 2d 32 2e 37 63 2d 30 2e 35 2d Data Ascii: ,0.9,1.7,2.2,3,3.7c1.2,1.5,2.3,2.7,3.1,3.6c0.8,0.9,1.6,1.6,2.2,2.1c0.6,0.5,1.2,0.8,1.7,0.9c0.5,0.1,1.1,0.2,1.7,0.2l-0.6,2.7c-0.7,0-1.4-0.1-2-0.2c-0.6-0.1-1.3-0.5-2-1s-1.6-1.3-2.5-2.3c-1-1-2.2-2.4-3.6-4c-1.3-1.6-2.4-2.9-3.3-3.9s-1.6-2-2.1-2.7c-0.5-
2024-04-18 17:15:53 UTC	1330	IN	Data Raw: 2e 37 2c 30 2c 33 2e 32 2c 30 2e 34 2c 34 2e 34 2c 31 2e 31 63 31 2e 33 2c 30 2e 37 2c 32 2e 33 2c 31 2e 37 2c 33 2c 33 2e 31 63 30 2e 37 2c 31 2e 33 2c 31 2e 31 2c 32 2e 39 2c 31 2e 31 2c 34 2e 38 63 30 2c 31 2e 39 2d 30 2e 34 2c 33 2e 35 2d 31 2e 31 2c 34 2e 38 0a 09 09 09 73 2d 31 2e 37 2c 32 2e 34 2d 33 2c 33 2e 31 73 2d 32 2e 38 2c 31 2e 31 2d 34 2e 34 2c 31 2e 31 63 2d 31 2e 37 2c 30 2d 33 2e 32 2d 30 2e 34 2d 34 2e 34 2d 31 2e 31 63 2d 31 2e 33 2d 30 2e 37 2d 32 2e 33 2d 31 2e 37 2d 33 2d 33 2e 31 63 2d 30 2e 37 2d 31 2e 33 2d 31 2e 31 2d 32 2e 39 2d 31 2e 31 2d 34 2e 38 63 30 2d 31 2e 39 2c 30 2e 34 2d 33 2e 35 2c 31 2e 31 2d 34 2e 38 0a 09 09 09 63 30 2e 37 2d 31 2e 33 2c 31 2e 37 2d 32 2e 34 2c 33 2d 33 2e 31 43 37 35 34 2e 36 2c 37 33 2e 34 2c Data Ascii: .7,0,3.2,0.4,4.4,1.1c1.3,0.7,2.3,1.7,3,3.1c0.7,1.3,1.1,2.9,1.1,4.8c0,1.9-0.4,3.5-1.1,4.8s-1.7,2.4-3,3.1s-2.8,1.1-4.4,1.1c-1.7,0-3.2-0.4-4.4-1.1c-1.3-0.7-2.3-1.7-3-3.1c-0.7-1.3-1.1-2.9-1.1-4.8c0-1.9,0.4-3.5,1.1-4.8c0.7-1.3,1.7-2.4,3-3.1C754.6,73.4,
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 32 61 62 33 0d 0a 2e 38 63 30 2c 31 2e 39 2d 30 2e 33 2c 33 2e 35 2d 31 2c 34 2e 38 73 2d 31 2e 36 2c 32 2e 34 2d 32 2e 38 2c 33 2e 31 0a 09 09 09 63 2d 31 2e 32 2c 30 2e 37 2d 32 2e 35 2c 31 2e 31 2d 33 2e 39 2c 31 2e 31 63 2d 31 2e 35 2c 30 2d 32 2e 37 2d 30 2e 34 2d 33 2e 38 2d 31 2e 32 63 2d 31 2d 30 2e 38 2d 31 2e 38 2d 31 2e 38 2d 32 2e 32 2d 32 2e 39 6c 30 2e 34 2d 30 2e 36 76 31 31 2e 36 48 38 30 33 2e 36 7a 20 4d 38 31 32 2c 38 37 2e 39 63 31 2e 35 2c 30 2c 32 2e 37 2d 30 2e 35 2c 33 2e 35 2d 31 2e 36 0a 09 09 09 63 30 2e 38 2d 31 2e 31 2c 31 2e 33 2d 32 2e 35 2c 31 2e 33 2d 34 2e 34 63 30 2d 31 2e 39 2d 30 2e 34 2d 33 2e 33 2d 31 2e 32 2d 34 2e 34 63 2d 30 2e 38 2d 31 2e 31 2d 32 2d 31 2e 36 2d 33 2e 34 2d 31 2e 36 63 2d 31 2c 30 2d 31 2e 38 2c Data Ascii: 2ab3.8c0,1.9-0.3,3.5-1,4.8s-1.6,2.4-2.8,3.1c-1.2,0.7-2.5,1.1-3.9,1.1c-1.5,0-2.7-0.4-3.8-1.2c-1-0.8-1.8-1.8-2.2-2.9l0.4-0.6v11.6H803.6z M812,87.9c1.5,0,2.7-0.5,3.5-1.6c0.8-1.1,1.3-2.5,1.3-4.4c0-1.9-0.4-3.3-1.2-4.4c-0.8-1.1-2-1.6-3.4-1.6c-1,0-1.8,
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 2e 33 2d 33 2e 32 73 32 2d 31 2e 34 2c 33 2e 36 2d 31 2e 37 6c 36 2e 37 2d 31 2e 33 6c 30 2c 32 2e 36 6c 2d 34 2e 39 2c 31 63 2d 31 2c 30 2e 32 2d 31 2e 37 2c 30 2e 34 2d 32 2e 32 2c 30 2e 38 0a 09 09 09 63 2d 30 2e 35 2c 30 2e 33 2d 30 2e 37 2c 30 2e 38 2d 30 2e 37 2c 31 2e 35 63 30 2c 30 2e 36 2c 30 2e 32 2c 31 2e 32 2c 30 2e 37 2c 31 2e 35 73 31 2e 32 2c 30 2e 36 2c 32 2c 30 2e 36 63 30 2e 36 2c 30 2c 31 2e 31 2d 30 2e 31 2c 31 2e 37 2d 30 2e 32 63 30 2e 35 2d 30 2e 31 2c 31 2d 30 2e 34 2c 31 2e 35 2d 30 2e 37 0a 09 09 09 63 30 2e 34 2d 30 2e 33 2c 30 2e 38 2d 30 2e 37 2c 31 2d 31 2e 32 63 30 2e 32 2d 30 2e 35 2c 30 2e 34 2d 31 2e 31 2c 30 2e 34 2d 31 2e 38 56 37 39 2e 35 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 Data Ascii: .3-3.2s2-1.4,3.6-1.7l6.7-1.3l0,2.6l-4.9,1c-1,0.2-1.7,0.4-2.2,0.8c-0.5,0.3-0.7,0.8-0.7,1.5c0,0.6,0.2,1.2,0.7,1.5s1.2,0.6,2,0.6c0.6,0,1.1-0.1,1.7-0.2c0.5-0.1,1-0.4,1.5-0.7c0.4-0.3,0.8-0.7,1-1.2c0.2-0.5,0.4-1.1,0.4-1.8V79.5z"/><path class="st12" d
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 2e 36 63 30 2d 31 2e 36 2d 30 2e 34 2d 32 2e 38 2d 31 2e 32 2d 33 2e 36 63 2d 30 2e 38 2d 30 2e 38 2d 31 2e 38 2d 31 2e 33 2d 33 2e 32 2d 31 2e 33 0a 09 09 09 63 2d 31 2c 30 2d 31 2e 38 2c 30 2e 32 2d 32 2e 36 2c 30 2e 37 63 2d 30 2e 37 2c 30 2e 35 2d 31 2e 33 2c 31 2e 31 2d 31 2e 37 2c 32 63 2d 30 2e 34 2c 30 2e 39 2d 30 2e 36 2c 32 2d 30 2e 36 2c 33 2e 33 63 30 2c 31 2e 33 2c 30 2e 32 2c 32 2e 34 2c 30 2e 36 2c 33 2e 33 63 30 2e 34 2c 30 2e 39 2c 31 2c 31 2e 36 2c 31 2e 38 2c 32 0a 09 09 09 63 30 2e 38 2c 30 2e 35 2c 31 2e 37 2c 30 2e 37 2c 32 2e 37 2c 30 2e 37 63 31 2e 31 2c 30 2c 32 2e 31 2d 30 2e 32 2c 32 2e 38 2d 30 2e 37 63 30 2e 37 2d 30 2e 34 2c 31 2e 33 2d 31 2c 31 2e 37 2d 31 2e 38 6c 32 2e 39 2c 31 2e 34 63 2d 30 2e 34 2c 30 2e 38 2d 31 2c 31 Data Ascii: .6c0-1.6-0.4-2.8-1.2-3.6c-0.8-0.8-1.8-1.3-3.2-1.3c-1,0-1.8,0.2-2.6,0.7c-0.7,0.5-1.3,1.1-1.7,2c-0.4,0.9-0.6,2-0.6,3.3c0,1.3,0.2,2.4,0.6,3.3c0.4,0.9,1,1.6,1.8,2c0.8,0.5,1.7,0.7,2.7,0.7c1.1,0,2.1-0.2,2.8-0.7c0.7-0.4,1.3-1,1.7-1.8l2.9,1.4c-0.4,0.8-1,1
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 2e 34 2c 30 2e 38 2d 31 2c 31 2e 35 2d 31 2e 37 2c 32 2e 32 63 2d 30 2e 37 2c 30 2e 36 2d 31 2e 35 2c 31 2e 31 2d 32 2e 35 2c 31 2e 34 0a 09 09 09 09 53 36 36 36 2e 35 2c 31 32 38 2e 37 2c 36 36 35 2e 33 2c 31 32 38 2e 37 7a 22 2f 3e 0a 09 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 31 32 22 20 64 3d 22 4d 36 37 37 2e 37 2c 31 32 38 2e 33 76 2d 31 37 2e 32 68 33 2e 33 6c 30 2e 32 2c 34 2e 35 6c 2d 30 2e 35 2d 30 2e 35 63 30 2e 33 2d 31 2c 30 2e 38 2d 31 2e 38 2c 31 2e 34 2d 32 2e 35 73 31 2e 33 2d 31 2e 31 2c 32 2e 32 2d 31 2e 34 63 30 2e 38 2d 30 2e 33 2c 31 2e 37 2d 30 2e 34 2c 32 2e 37 2d 30 2e 34 0a 09 09 09 09 63 31 2e 32 2c 30 2c 32 2e 33 2c 30 2e 32 2c 33 2e 33 2c 30 2e 37 63 31 2c 30 2e 35 2c 31 2e 38 2c 31 2e 32 2c 32 2e 33 2c 32 2e 31 63 Data Ascii: .4,0.8-1,1.5-1.7,2.2c-0.7,0.6-1.5,1.1-2.5,1.4S666.5,128.7,665.3,128.7z"/><path class="st12" d="M677.7,128.3v-17.2h3.3l0.2,4.5l-0.5-0.5c0.3-1,0.8-1.8,1.4-2.5s1.3-1.1,2.2-1.4c0.8-0.3,1.7-0.4,2.7-0.4c1.2,0,2.3,0.2,3.3,0.7c1,0.5,1.8,1.2,2.3,2.1c
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 2d 30 2e 36 2c 32 2d 30 2e 39 2c 33 2e 34 2d 30 2e 39 63 30 2e 33 2c 30 2c 30 2e 37 2c 30 2c 31 2c 30 2e 31 0a 09 09 09 09 63 30 2e 33 2c 30 2e 31 2c 30 2e 36 2c 30 2e 31 2c 30 2e 39 2c 30 2e 33 6c 2d 30 2e 35 2c 33 2e 32 63 2d 30 2e 33 2d 30 2e 31 2d 30 2e 35 2d 30 2e 32 2d 30 2e 38 2d 30 2e 32 63 2d 30 2e 33 2d 30 2e 31 2d 30 2e 37 2d 30 2e 31 2d 31 2e 33 2d 30 2e 31 63 2d 30 2e 37 2c 30 2d 31 2e 34 2c 30 2e 32 2d 32 2e 31 2c 30 2e 36 73 2d 31 2e 33 2c 30 2e 39 2d 31 2e 37 2c 31 2e 37 0a 09 09 09 09 63 2d 30 2e 34 2c 30 2e 38 2d 30 2e 37 2c 31 2e 37 2d 30 2e 37 2c 32 2e 39 76 39 2e 31 48 37 33 33 2e 33 7a 22 2f 3e 0a 09 09 3c 2f 67 3e 0a 09 3c 2f 67 3e 0a 09 3c 67 20 69 64 3d 22 50 72 69 6d 61 72 79 5f 6c 6f 67 6f 5f 30 30 30 30 30 30 37 34 34 32 34 35 Data Ascii: -0.6,2-0.9,3.4-0.9c0.3,0,0.7,0,1,0.1c0.3,0.1,0.6,0.1,0.9,0.3l-0.5,3.2c-0.3-0.1-0.5-0.2-0.8-0.2c-0.3-0.1-0.7-0.1-1.3-0.1c-0.7,0-1.4,0.2-2.1,0.6s-1.3,0.9-1.7,1.7c-0.4,0.8-0.7,1.7-0.7,2.9v9.1H733.3z"/></g></g><g id="Primary_logo_000000744245
2024-04-18 17:15:53 UTC	1452	IN	Data Raw: 31 2d 30 2e 34 2c 30 2e 32 2d 30 2e 39 2c 30 2e 33 2d 31 2e 33 0a 09 09 09 63 30 2e 31 2d 30 2e 34 2c 30 2e 31 2d 31 2c 30 2e 31 2d 31 2e 34 43 34 30 33 2e 35 2c 34 2e 38 2c 33 39 37 2e 33 2d 31 2c 33 38 39 2e 38 2c 30 2e 31 4c 33 38 39 2e 38 2c 30 2e 31 7a 22 2f 3e 0a 09 09 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 73 74 37 22 20 64 3d 22 4d 36 33 2e 38 2c 39 39 63 30 2c 31 37 2e 32 2d 31 34 2e 33 2c 33 31 2e 31 2d 33 32 2c 33 31 2e 31 63 2d 37 2e 38 2c 30 2d 31 34 2e 39 2d 33 2e 36 2d 31 39 2e 36 2d 39 2e 31 76 37 2e 33 48 30 56 35 30 2e 31 68 31 33 56 37 36 63 34 2e 38 2d 34 2e 39 2c 31 31 2e 35 2d 38 2c 31 38 2e 39 2d 38 0a 09 09 09 43 34 39 2e 35 2c 36 37 2e 39 2c 36 33 2e 38 2c 38 31 2e 38 2c 36 33 2e 38 2c 39 39 4c 36 33 2e 38 2c 39 39 7a 20 4d 35 30 Data Ascii: 1-0.4,0.2-0.9,0.3-1.3c0.1-0.4,0.1-1,0.1-1.4C403.5,4.8,397.3-1,389.8,0.1L389.8,0.1z"/><path class="st7" d="M63.8,99c0,17.2-14.3,31.1-32,31.1c-7.8,0-14.9-3.6-19.6-9.1v7.3H0V50.1h13V76c4.8-4.9,11.5-8,18.9-8C49.5,67.9,63.8,81.8,63.8,99L63.8,99z M50

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49862	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1729	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552
2024-04-18 17:15:53 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 51-12302652-12302688 NNNY CT(13 14 0) RT(1713460552678 210) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:53 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49870	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	386	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:54 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 8bb19052-c01e-006d-0924-7c8dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 24508 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cae2fd353aa-ATL
2024-04-18 17:15:54 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49871	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:54 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:53 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: fc145aa7-801e-000e-2a26-7c1033000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 47853 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cae3f2212ea-ATL
2024-04-18 17:15:54 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49874	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	390	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcTab.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:54 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:54 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: JqD83lHxEjWNdmDqKd9lzA== Last-Modified: Thu, 21 Mar 2024 07:04:31 GMT x-ms-request-id: a28f2be9-401e-0063-6a08-7ca478000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 23870 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664caebce67ba5-ATL
2024-04-18 17:15:54 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 54 61 62 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 31 52 68 59 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 68 4c 53 30 67 63 47 Data Ascii: 7c76 { "name": "otPcTab", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY1RhYiBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjwhLS0gcG
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 6a 62 47 39 7a 5a 53 31 77 59 79 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 4e 73 62 33 4e 6c 4c 57 6c 6a 62 32 34 69 49 47 46 79 61 57 45 74 62 47 46 69 5a 57 77 39 49 6b 4e 73 62 33 4e 6c 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 47 4e 76 62 6e 52 6c 62 6e 51 67 4c 53 30 2b 50 43 45 74 4c 53 42 48 63 6d 39 31 63 48 4d 67 4c 79 42 54 64 57 49 67 5a 33 4a 76 64 58 42 7a 49 48 64 70 64 47 67 67 59 32 39 76 61 32 6c 6c 63 79 41 74 4c 54 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6a 62 32 35 30 5a 57 35 30 49 69 42 6a 62 47 46 7a 63 7a Data Ascii: yIj48YnV0dG9uIGlkPSJjbG9zZS1wYy1idG4taGFuZGxlciIgY2xhc3M9Im90LWNsb3NlLWljb24iIGFyaWEtbGFiZWw9IkNsb3NlIj48L2J1dHRvbj48L2Rpdj48L2Rpdj48L2Rpdj48IS0tIGNvbnRlbnQgLS0+PCEtLSBHcm91cHMgLyBTdWIgZ3JvdXBzIHdpdGggY29va2llcyAtLT48ZGl2IGlkPSJvdC1wYy1jb250ZW50IiBjbGFzcz
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 63 32 56 73 5a 57 4e 30 5a 57 51 39 49 6d 5a 68 62 48 4e 6c 49 6a 34 38 61 44 4d 2b 55 47 56 79 63 32 39 75 59 57 78 70 65 6d 46 30 61 57 39 75 49 45 4e 76 62 32 74 70 5a 58 4d 38 4c 32 67 7a 50 6a 77 76 5a 47 6c 32 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 52 6c 63 32 4d 74 59 32 35 30 63 69 42 76 64 43 31 6f 61 57 52 6c 49 69 42 79 62 32 78 6c 50 53 4a 30 59 57 4a 77 59 57 35 6c 62 43 49 67 64 47 46 69 61 57 35 6b 5a 58 67 39 49 6a 41 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 73 61 53 31 6f 5a 48 49 69 50 6a 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 30 61 58 52 73 5a 53 49 2b 51 32 39 75 63 32 56 75 64 44 77 76 63 33 42 68 62 6a 34 67 50 48 4e 77 59 57 34 67 59 32 78 Data Ascii: c2VsZWN0ZWQ9ImZhbHNlIj48aDM+UGVyc29uYWxpemF0aW9uIENvb2tpZXM8L2gzPjwvZGl2PjxkaXYgY2xhc3M9Im90LWRlc2MtY250ciBvdC1oaWRlIiByb2xlPSJ0YWJwYW5lbCIgdGFiaW5kZXg9IjAiPjxkaXYgY2xhc3M9Im90LXBsaS1oZHIiPjxzcGFuIGNsYXNzPSJvdC1saS10aXRsZSI+Q29uc2VudDwvc3Bhbj4gPHNwYW4gY2x
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 73 4c 54 49 78 4c 6a 51 77 4f 53 30 79 4d 53 34 30 4d 54 5a 44 4d 7a 49 7a 4c 6a 51 7a 4d 69 77 7a 4c 6a 55 79 4d 53 77 7a 4d 54 51 75 4f 44 45 33 4c 44 41 73 4d 7a 41 30 4c 6a 59 7a 4e 79 77 77 63 79 30 78 4f 43 34 33 4f 54 45 73 4d 79 34 31 4d 6a 45 74 4d 6a 55 75 4f 44 51 78 4c 44 45 77 4c 6a 55 32 4d 55 77 35 4d 69 34 32 4e 44 6b 73 4d 54 6b 32 4c 6a 51 79 4e 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 6a 4c 54 63 75 4d 44 51 30 4c 44 63 75 4d 44 51 7a 4c 54 45 77 4c 6a 55 32 4e 69 77 78 4e 53 34 32 4e 54 59 74 4d 54 41 75 4e 54 59 32 4c 44 49 31 4c 6a 67 30 4d 58 4d 7a 4c 6a 55 79 4d 53 77 78 4f 43 34 33 4f 54 45 73 4d 54 41 75 4e 54 59 32 4c 44 49 31 Data Ascii: CAgICAgICAgICAgICAgICBsLTIxLjQwOS0yMS40MTZDMzIzLjQzMiwzLjUyMSwzMTQuODE3LDAsMzA0LjYzNywwcy0xOC43OTEsMy41MjEtMjUuODQxLDEwLjU2MUw5Mi42NDksMTk2LjQyNQogICAgICAgICAgICAgICAgICBjLTcuMDQ0LDcuMDQzLTEwLjU2NiwxNS42NTYtMTAuNTY2LDI1Ljg0MXMzLjUyMSwxOC43OTEsMTAuNTY2LDI1
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 41 67 49 47 4d 77 4c 6a 63 33 4f 53 77 77 4c 44 45 75 4e 54 45 34 4c 54 41 75 4d 6a 6b 33 4c 44 49 75 4d 44 63 35 4c 54 41 75 4f 44 4d 33 51 7a 55 32 4c 6a 49 31 4e 53 77 31 4e 43 34 35 4f 44 49 73 4e 54 59 75 4d 6a 6b 7a 4c 44 55 7a 4c 6a 41 34 4c 44 55 31 4c 6a 45 30 4e 69 77 31 4d 53 34 34 4f 44 64 36 49 45 30 79 4d 79 34 35 4f 44 51 73 4e 6d 4d 35 4c 6a 4d 33 4e 43 77 77 4c 44 45 33 4c 44 63 75 4e 6a 49 32 4c 44 45 33 4c 44 45 33 63 79 30 33 4c 6a 59 79 4e 69 77 78 4e 79 30 78 4e 79 77 78 4e 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 4d 74 4d 54 63 74 4e 79 34 32 4d 6a 59 74 4d 54 63 74 4d 54 64 54 4d 54 51 75 4e 6a 45 73 4e 69 77 79 4d 79 34 35 4f 44 51 73 4e 6e 6f 69 4c 7a 34 38 4c 33 4e 32 5a 7a 34 38 4c 32 52 70 64 6a 34 38 5a Data Ascii: AgIGMwLjc3OSwwLDEuNTE4LTAuMjk3LDIuMDc5LTAuODM3QzU2LjI1NSw1NC45ODIsNTYuMjkzLDUzLjA4LDU1LjE0Niw1MS44ODd6IE0yMy45ODQsNmM5LjM3NCwwLDE3LDcuNjI2LDE3LDE3cy03LjYyNiwxNy0xNywxNwogICAgICAgICAgICAgIHMtMTctNy42MjYtMTctMTdTMTQuNjEsNiwyMy45ODQsNnoiLz48L3N2Zz48L2Rpdj48Z
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 32 50 6a 77 76 5a 47 6c 32 50 6a 78 7a 5a 57 4e 30 61 57 39 75 49 47 6c 6b 50 53 4a 76 64 43 31 73 63 33 51 74 59 32 35 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 47 4d 74 63 32 4e 79 62 32 78 73 59 6d 46 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 63 6d 39 33 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 47 73 74 59 32 39 73 64 57 31 75 49 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 6d 78 72 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 68 6b 63 69 49 2b 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 Data Ascii: 2PjwvZGl2PjxzZWN0aW9uIGlkPSJvdC1sc3QtY250IiBjbGFzcz0ib3QtcGMtc2Nyb2xsYmFyIj48ZGl2IGNsYXNzPSJvdC1zZGstcm93Ij48ZGl2IGNsYXNzPSJvdC1zZGstY29sdW1uIj48ZGl2IGlkPSJvdC1zZWwtYmxrIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsIj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWhkciI+PHNwYW4gY2xhc3
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 59 6d 39 34 49 69 42 68 63 6d 6c 68 4c 57 56 34 63 47 46 75 5a 47 56 6b 50 53 4a 6d 59 57 78 7a 5a 53 49 2b 50 43 39 69 64 58 52 30 62 32 34 2b 50 48 4e 6c 59 33 52 70 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6f 5a 48 49 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 6f 5a 48 49 69 50 6a 78 6f 4d 79 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 56 75 4c 57 35 68 62 57 55 69 50 6a 77 76 61 44 4d 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 46 42 79 61 58 5a 68 59 33 6b 67 54 6d 39 30 61 57 4e 6c 50 43 39 Data Ascii: YnV0dG9uIGNsYXNzPSJvdC12ZW4tYm94IiBhcmlhLWV4cGFuZGVkPSJmYWxzZSI+PC9idXR0b24+PHNlY3Rpb24gY2xhc3M9Im90LWFjYy1oZHIiPjxkaXYgY2xhc3M9Im90LXZlbi1oZHIiPjxoMyBjbGFzcz0ib3QtdmVuLW5hbWUiPjwvaDM+PGEgY2xhc3M9Im90LXZlbi1saW5rIiBocmVmPSIjIj5WaWV3IFByaXZhY3kgTm90aWNlPC9
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 4e 68 64 6d 55 67 55 32 56 30 64 47 6c 75 5a 33 4d 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 69 64 47 34 74 63 33 56 69 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 47 4d 74 63 6d 56 6d 64 58 4e 6c 4c 57 46 73 62 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 35 53 5a 57 70 6c 59 33 51 67 51 57 78 73 50 43 39 69 64 58 52 30 62 32 34 2b 49 44 78 69 64 58 52 30 62 32 34 67 61 57 51 39 49 6d 46 6a 59 32 56 77 64 43 31 79 5a 57 4e 76 62 57 31 6c 62 6d 52 6c 5a 43 31 69 64 47 34 74 61 47 46 75 5a 47 78 6c 63 69 49 2b 51 57 78 73 62 33 63 67 51 57 78 73 50 43 39 69 64 58 52 30 62 32 34 2b 50 43 39 6b 61 58 59 2b Data Ascii: nRuLWhhbmRsZXIiPlNhdmUgU2V0dGluZ3M8L2J1dHRvbj48ZGl2IGNsYXNzPSJvdC1idG4tc3ViY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtcGMtcmVmdXNlLWFsbC1oYW5kbGVyIj5SZWplY3QgQWxsPC9idXR0b24+IDxidXR0b24gaWQ9ImFjY2VwdC1yZWNvbW1lbmRlZC1idG4taGFuZGxlciI+QWxsb3cgQWxsPC9idXR0b24+PC9kaXY+
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 33 61 58 52 6a 61 43 31 75 62 32 49 69 49 47 46 79 61 57 45 74 59 32 68 6c 59 32 74 6c 5a 44 30 69 5a 6d 46 73 63 32 55 69 49 48 4a 76 62 47 55 39 49 6e 4e 33 61 58 52 6a 61 43 49 2b 50 43 39 7a 63 47 46 75 50 69 41 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 46 69 5a 57 77 74 64 48 68 30 49 6a 35 54 64 32 6c 30 59 32 67 67 54 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 73 59 57 4a 6c 62 44 34 67 50 48 4e 77 59 57 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 78 68 59 6d 56 73 4c 58 4e 30 59 58 52 31 63 79 49 2b 62 47 46 69 5a 57 77 38 4c 33 4e 77 59 57 34 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 44 61 47 56 6a 61 32 4a 76 65 43 42 49 56 45 31 4d 49 43 30 74 50 6a 78 6b 61 Data Ascii: xhc3M9Im90LXN3aXRjaC1ub2IiIGFyaWEtY2hlY2tlZD0iZmFsc2UiIHJvbGU9InN3aXRjaCI+PC9zcGFuPiA8c3BhbiBjbGFzcz0ib3QtbGFiZWwtdHh0Ij5Td2l0Y2ggTGFiZWw8L3NwYW4+PC9sYWJlbD4gPHNwYW4gY2xhc3M9Im90LWxhYmVsLXN0YXR1cyI+bGFiZWw8L3NwYW4+PC9kaXY+PCEtLSBDaGVja2JveCBIVE1MIC0tPjxka
2024-04-18 17:15:54 UTC	1369	IN	Data Raw: 68 59 32 4d 74 64 48 68 30 49 6a 34 38 49 53 30 74 49 45 46 6a 59 32 39 79 61 57 52 76 62 69 42 6a 62 32 35 30 5a 57 35 30 49 43 30 74 50 6a 77 76 5a 47 6c 32 50 6a 77 76 5a 47 6c 32 50 6a 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 59 33 4a 75 4c 58 4a 6b 63 69 49 67 59 58 4a 70 59 53 31 68 64 47 39 74 61 57 4d 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 62 47 6c 32 5a 54 30 69 63 47 39 73 61 58 52 6c 49 6a 34 38 4c 33 4e 77 59 57 34 2b 50 43 45 74 4c 53 42 57 5a 57 35 6b 62 33 49 67 55 32 56 79 64 6d 6c 6a 5a 53 42 6a 62 32 35 30 59 57 6c 75 5a 58 49 67 59 57 35 6b 49 47 6c 30 5a 57 30 67 64 47 56 74 63 47 78 68 64 47 55 67 4c 53 30 2b 50 48 4e 6c 59 33 52 70 62 32 34 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 Data Ascii: hY2MtdHh0Ij48IS0tIEFjY29yaWRvbiBjb250ZW50IC0tPjwvZGl2PjwvZGl2PjxzcGFuIGNsYXNzPSJvdC1zY3JuLXJkciIgYXJpYS1hdG9taWM9InRydWUiIGFyaWEtbGl2ZT0icG9saXRlIj48L3NwYW4+PCEtLSBWZW5kb3IgU2VydmljZSBjb250YWluZXIgYW5kIGl0ZW0gdGVtcGxhdGUgLS0+PHNlY3Rpb24gY2xhc3M9Im90LXNkay

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49872	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	794	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460552529 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:15:54 UTC	661	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:54 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: oKs3PLl+R9o= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://hrcenter.us.brightmine.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v059-0d7e0f1b7.edge-va6.demdex.com 1 ms
2024-04-18 17:15:54 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49875	64.233.185.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1284	OUT	GET /pagead/viewthroughconversion/950188369/?random=1713460552602&cv=11&fst=1713460552602&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:54 UTC	842	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:15:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 17:30:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:15:54 UTC	413	IN	Data Raw: 39 33 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 931(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:15:54 UTC	1255	IN	Data Raw: 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b 61 3d 22 22 7d 72 65 74 75 72 6e 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 29 7b 72 65 74 75 72 6e 20 67 3f 21 21 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b Data Ascii: a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;a=""}return-1!=a.indexOf(d)};function y(){return g?!!t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk
2024-04-18 17:15:54 UTC	692	IN	Data Raw: 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4e 6a 41 31 4e 54 49 32 4d 44 49 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 74 2f 39 35 30 31 38 38 33 36 39 2f 3f 72 61 6e 64 6f 6d 5c 78 33 64 31 37 31 33 34 36 30 35 35 32 36 30 32 5c 78 32 36 63 76 5c 78 33 64 31 31 5c 78 32 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 39 31 32 33 35 37 36 39 31 30 7a 38 38 35 38 30 38 30 30 30 32 7a 61 32 30 31 5c 78 32 36 67 63 64 Data Ascii: (this);;s.ss_(window,'OjE3MTM0NjA1NTI2MDI',['https://www.google.com/pagead/1p-user-list/950188369/?random\x3d1713460552602\x26cv\x3d11\x26fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v9123576910z8858080002za201\x26gcd
2024-04-18 17:15:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49876	142.250.105.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:53 UTC	1408	OUT	GET /td/rul/950188369?random=1713460552602&cv=11&fst=1713460552602&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:54 UTC	785	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:15:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 18-Apr-2024 17:30:54 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:15:54 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:15:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49881	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:54 UTC	519	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460552529 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:15:54 UTC	542	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:54 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: +FNqPmmxTuQ= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-028c3b55a.edge-va6.demdex.com 1 ms
2024-04-18 17:15:54 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49882	108.177.122.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:54 UTC	1171	OUT	GET /pagead/1p-user-list/950188369/?random=1713460552602&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqaUeMBiijcwlPkVMK4yctatlKv2lLIA&random=4055244565&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:54 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:15:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:15:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49883	108.177.122.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:54 UTC	829	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-135618937-1&cid=1717981528.1713460552&jid=1492948423&_u=YEBAAEAAAAAAACAAI~&z=1401109685 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:54 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:15:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:15:54 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49884	142.251.15.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:54 UTC	656	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-135618937-1&cid=1717981528.1713460552&jid=1492948423&gjid=159953432&_gid=1780739987.1713460552&_u=YEBAAEAAAAAAACAAI~&z=17192609 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 17:15:55 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 18 Apr 2024 17:15:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:15:55 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49886	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:55 UTC	925	OUT	GET /pagead/1p-user-list/950188369/?random=1713460552602&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSGwB7FLtqaUeMBiijcwlPkVMK4yctatlKv2lLIA&random=4055244565&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:15:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:15:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49887	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:55 UTC	583	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-135618937-1&cid=1717981528.1713460552&jid=1492948423&_u=YEBAAEAAAAAAACAAI~&z=1401109685 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:55 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:15:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:15:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49891	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:55 UTC	597	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:56 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:56 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Wed, 17 Apr 2024 06:40:30 GMT ETag: 0x8DC5EA9463EC821 x-ms-request-id: d3cf98cb-201e-0028-04d8-90582b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 81288 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cbb78755080-ATL
2024-04-18 17:15:56 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49892	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:55 UTC	723	OUT	GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/018e1e11-08a1-7636-85ca-4577d898aaa6/7e637ca4-577a-48f6-bdf8-17957e2bfcc4/brightmine-logo.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:56 UTC	827	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:56 GMT Content-Type: image/png Content-Length: 20560 Connection: close Content-MD5: UFBGE+8cXcsx1FoWo1mwTQ== Last-Modified: Mon, 18 Mar 2024 15:42:09 GMT ETag: 0x8DC4761F9008F0F x-ms-request-id: 26a1e926-901e-003d-225a-794f98000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 11685 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cbb99cf1d6a-ATL
2024-04-18 17:15:56 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 fc 00 00 01 0b 08 06 00 00 00 64 a9 8d 73 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 4f e5 49 44 41 54 78 5e ed 9d 2b 70 1c bb 12 86 87 1d 18 18 78 60 60 60 e0 81 81 81 61 d9 03 bc 3b a7 42 02 c3 ae cb 49 95 a1 61 60 a0 61 a0 61 a0 a1 a1 61 a0 a1 a1 a1 7d bb b5 bd f6 7a dd fb 1c 49 23 cd 7c 5f d5 5f e7 de d8 1e 69 34 af fe f5 68 35 00 00 00 00 00 a5 f2 70 dc fc 7d ff ad f9 f8 70 d2 1c ab ee 4f 9a 0b f9 ff bf 17 0a ff fe ad f9 a0 bf 67 7f 02 00 00 00 00 00 00 00 25 62 26 ff 54 74 23 66 fe 61 57 c9 ef df ea df c9 df bf b6 43 01 00 00 00 00 00 00 40 df 04 a3 7f d2 fc f2 cc fc be 92 e3 fc 94 Data Ascii: PNGIHDRdssRGBgAMAapHYsodOIDATx^+px```a;BIa`aaa}zI#\|__i4h5p}pOg%b&Tt#faWC@
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: e8 7e 90 d4 e9 d4 aa 08 00 00 00 00 00 30 4e 26 9f 3f bf 7e 34 9c bb 1a f4 e9 ec 8f 6b 7c 51 1a 79 1d 0a d3 f6 d7 f3 6b 35 fd f8 78 1d e5 9a da e5 4d 4e 29 6b f7 57 25 86 ff 8f 55 11 00 00 00 00 00 60 18 7c fa f4 e9 d5 a3 f1 53 13 b8 30 ee 6d fb 63 c9 2c 8a 81 74 8c 25 1a 9e 9e 77 16 fc 7c ec 20 d0 ce 9d c5 7d d2 b6 7f db ed b3 37 62 f8 2f 3c c3 5d 84 8e 9b b7 56 4d 00 00 00 00 00 80 f2 78 66 e0 67 b3 0f 8f 06 7e da 9e 3d 19 b9 ca a6 c0 a3 72 35 9d dd 2c dd 57 e7 8f 1d 04 72 ef d9 2d f9 48 a9 d3 f9 1f 75 d2 1c 5b 55 01 00 00 00 00 00 f2 f2 7c 34 fe d1 c8 5f 04 b3 15 8c 97 63 c8 d0 7e 0a cb 0f 16 06 76 93 da db 17 7f 8b 9e 34 6d 5f ac 89 bf ff de bc 77 8d 76 21 ba ff d6 5c 5a 55 01 00 00 00 00 00 e2 21 66 fe af a5 91 f9 af c1 cc cf da f3 60 2e 87 bd 06 fe Data Ascii: ~0N&?~4k\|Qyk5xMN)kW%U`\|S0mc,t%w\| }7b/<]VMxfg~=r5,Wr-Hu[U\|4_c~v4m_wv!\ZU!f`.
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 00 50 13 6a ba 93 4c 17 9d eb 4a 82 cf 9f 12 30 7e d1 72 ac 48 00 80 b5 88 e9 7f 2b a6 3f 5b 12 bf 5a 46 f6 f7 25 bc db 35 af 4a d4 a4 a9 8f 5b 02 be a7 b3 16 00 00 00 a0 30 6c 5b bc 0f 36 15 34 ee da 7b 0d 28 35 2b 34 23 f7 00 d0 11 31 fd 6f c4 88 a7 5f d3 7f d2 1c 5b 91 83 47 de cd f3 dc 2b 21 b1 6a ac d9 5b 21 11 e0 69 df 1d ba 3a 33 44 ae e5 57 b9 67 7e 8b ae 56 af b3 fc db b5 e8 54 3b 93 ec 4f 00 00 00 00 ea e7 79 80 17 3b 73 7e c8 96 7f aa 1d 08 64 7c 06 80 14 04 93 b6 62 de 62 28 98 c2 ef cd 5a 93 6a 26 76 d0 89 ec 42 07 f0 3c 17 c0 99 bc d3 63 6c 0b 78 27 c7 d2 4e df 2f fa ed b1 62 92 72 7f dc bc d3 6d 14 bd 6b bc 4e 72 ed 2f 37 5d 7b 00 00 00 80 62 99 1b fc c7 f5 f7 31 f7 bd 9f 4f cd 27 99 13 00 64 c6 4c dd 85 67 de f6 95 98 bd 1b dd 02 d0 0e ed Data Ascii: PjLJ0~rH+?[ZF%5J[0l[64{(5+4#1o_[G+!j[!i:3DWg~VT;Oy;s~d\|bb(Zj&vB<clx'N/brmkNr/7]{b1O'dLg
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 75 ff ad f9 6d 45 01 00 00 40 49 68 a2 24 1d 51 e9 b0 1e 5f a7 f8 9f 93 51 1f 00 00 f6 41 f3 b7 ac f9 f6 dc 8e fd 7b 12 72 1d 4c db d3 79 be 9b 17 ed b3 5e 9a 0b 61 36 7b 6f 87 79 c6 fd 49 73 ee 99 f5 ae 0a 6b f7 8f 1b 96 ea 01 00 00 94 82 8e 9e 58 d2 bd fd 02 89 85 9e a6 ea bb 41 05 00 00 c0 2e e8 6c 30 f9 ae bc cc 0d 33 6d 47 b9 1e 5c bf ab eb 66 3e 6c d0 6d f8 26 6f d9 e9 40 b7 e8 4b 31 b5 5f 8e f9 d1 8a 00 00 00 80 3e d0 f5 f3 9a 0d 5f 82 82 f3 10 18 f8 01 c3 36 5d 49 20 42 c2 3d 00 00 88 ca e4 68 d6 3a df 9c 07 fd 77 fb 95 41 13 be d1 9a 33 67 bf 99 76 f2 2d 9f fd 94 bf db 6b f9 83 8e c4 47 35 fd 27 cd b1 1d 1a 00 00 00 72 b2 62 f2 0f cc ac 3f fb ad 01 97 b7 1e 10 00 00 20 16 3a a2 ef 7c 87 ee 86 fc fd 59 32 fa fb cc b6 3b b7 ed 6c 0f 4e 84 2b a6 ff Data Ascii: umE@Ih$Q_QA{rLy^a6{oyIskXA.l03mG\f>lm&o@K1_>_6]I B=h:wA3gv-kG5'rb? :\|Y2;lN+
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: df 87 6d 92 df bb 15 9d 6d fb 18 6f 42 8d 7a 48 e6 a3 c6 7d d5 cc 6f d2 b4 bd 60 ca 3e 00 00 40 7d 3c fc af f9 4b e2 88 9d e2 0d f9 9d 3b 31 fe 3f 75 20 c2 fe fc 05 6a fa 31 fb 00 00 00 1b 78 f8 de fc 23 1f d5 3f de c7 76 9b 82 f1 3f 69 be d8 a1 b6 f2 98 80 cf dd 9b 77 83 a6 b3 3f 3a d5 9f 2c fb 00 00 00 75 22 31 c3 a9 c6 0d 5e 3c b1 4d 66 fc 59 b6 07 00 00 b0 0f f2 11 d5 5e f6 bb d5 0f eb be 92 0f f1 b9 f6 da db 61 5f 30 39 fa ef 9d 6e 91 23 e6 7d 9f 04 7c f2 bb b3 9f 9a bc cf 0e 03 00 00 00 95 a1 46 5d 62 8d df 5e fc b0 8f e4 18 37 72 ac b7 76 58 00 00 00 d8 44 58 1f e7 7c 50 0f 95 1c ef 62 d5 f4 ab 59 df 7b 3b bd d9 ec 52 a7 e7 91 80 0f 00 00 a0 6e 74 3a be 18 f5 83 66 11 7a 0a 33 04 30 fd 00 b0 0b da d3 98 4a 56 04 40 b1 68 e2 3d ef 43 da 55 72 ff 9f Data Ascii: mmoBzH}o`>@}<K;1?u j1x#?v?iw?:,u"1^<MfY^a_09n#}\|F]b^7rvXDX\|PbY{;Rnt:fz30JV@h=CUr
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 80 21 96 ac 08 00 00 e8 00 86 7f 58 60 f8 01 00 00 20 1b 5e c0 10 4b 56 04 00 00 74 00 c3 3f 2c 30 fc 00 00 00 90 0d 2f 60 88 25 2b 02 00 00 3a 80 e1 1f 16 18 7e 00 00 00 c8 86 17 30 c4 92 15 01 00 00 1d c0 f0 0f 0b 0c 3f 00 00 00 64 c3 0b 18 62 c9 8a 00 00 80 0e 60 f8 87 05 86 1f 00 00 00 b2 e1 05 0c b1 64 45 00 00 40 07 30 fc c3 02 c3 0f 00 00 00 d9 f0 02 86 58 b2 22 b2 21 41 d4 9b 87 ef cd 3f bb c8 fe 04 2a 41 ae ed 2b ef 3a ca 7d 86 59 29 9c 60 6e ec 7a 89 19 f9 18 cc ab 27 b9 96 8f d7 55 9e 65 fb 73 10 ac 7d dc f7 6c 04 25 79 86 ee 8f 9b 77 f7 df 9b f7 2f ae b3 a7 c5 b5 ff 5f f3 97 fd f9 a0 c1 f0 d7 c9 e4 f3 e7 d7 93 b6 fd 67 a3 8e fe 7b 67 bf 3e 5a b4 0d dc b6 59 d2 a7 4f 9f 5e d9 af 03 44 61 a7 e7 d3 64 7f 02 95 f0 ec da ce 66 1f 26 d3 f6 d8 d5 d1 Data Ascii: !X` ^KVt?,0/`%+:~0?db`dE@0X"!A?*A+:}Y)`nz'Ues}l%yw/_g{g>ZYO^Dadf&
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 59 5f a5 dc fe a6 4e 1f 22 ed 1c a9 6c c4 df 3d 8f 18 aa d4 f0 db 28 e4 f9 8b f3 a9 43 ba 0e fc 6c 48 c9 38 63 f1 38 53 a3 b6 77 ca 3a 69 5e 87 8c 6b fd 97 47 fc ed 9f 9e f1 64 e6 43 27 59 f8 af fd e8 11 f9 b7 79 be 0b 9b a9 d5 ab e1 97 a0 47 93 3e 15 3f 4d 78 17 59 a0 f9 95 11 7f b9 ae d2 06 da 16 6a b6 bc b6 8a 29 29 03 c3 1f 89 a5 eb 56 bd d1 f7 24 e7 75 a6 9d 19 76 ba 55 91 d3 f0 6b 1b d5 fe 5e 96 6b 7d ad 49 57 ed 94 8a 03 c3 9f 07 5b 7f 9e 3a c9 57 62 cd 7e a7 5c 57 aa cb 08 ea 1d 7d 5b 28 24 42 ac 62 8d b5 5f ff 08 aa cc f0 eb 88 a6 19 42 ff 7c ea d2 ad 76 2a da a9 8d 9a d0 79 38 37 a3 35 cc d4 d8 5f ba f4 2a c3 bb 66 57 c3 6f ff d5 e5 69 b7 f6 a3 40 e8 70 09 7f 1f 76 8a 09 bb cc f4 62 f8 73 1a c2 dc 2a 3d d0 4c 8d 9e bb b6 81 d7 36 29 24 65 61 f8 Data Ascii: Y_N"l=(ClH8c8Sw:i^kGdC'YyG>?MxYj))V$uvUk^k}IW[:Wb~\W}[($Bb_B\|vy875_fWoi@pvbs*=L6)$ea
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: d7 a4 58 4a 36 8e 18 fe f5 c8 35 63 49 4d 47 95 62 fa 31 fc 69 25 ef 81 ac 89 fc 30 fc 87 23 c1 f2 99 13 54 a1 85 d4 70 61 ba 36 4a d7 21 db ed 94 1d af 3e 51 d4 b3 e1 c7 18 ee ab f2 d7 f4 ab 69 94 7a 92 87 a1 bb ee 16 09 f4 7a c5 f9 68 a3 cc 12 53 51 f4 83 2f f5 fb e5 d5 bb 04 61 f8 7d e4 bc 7e 78 75 42 fb ab 84 e7 13 c3 9f 5e 6a fa 1f be 37 6e 6f 7a 6c 30 fc 87 a1 db ac 39 c1 14 42 7b 4b 4c 7f 2f db a5 79 75 89 a2 1e 0d 7f 30 86 cc ba d9 5f 85 ed 20 b1 0c d7 34 ba dc 3c 2b 59 71 3e da a8 07 49 b0 59 64 22 bf d2 8d 06 86 ff 25 98 c3 f8 d2 0e 14 6b de 5e e0 9a e6 91 5c e7 1b 31 e3 5b b7 39 eb 0a 86 7f 7f 48 40 87 22 eb ae 8f 00 dc a9 47 1c f5 68 f8 75 b4 da ad 13 da aa c9 51 9b 75 39 d9 ae 88 d9 1f fd 76 8a 09 74 bb 3a 05 3f 2b ce 47 1b f5 a4 fb 93 e6 8b Data Ascii: XJ65cIMGb1i%0#Tpa6J!>QizzhSQ/a}~xuB^j7nozl09B{KL/yu0_ 4<+Yq>IYd"%k^\1[9H@"GhuQu9vt:?+G
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: c5 ae 2f dd a0 69 7b aa 23 81 76 1a c9 50 d3 a3 65 b9 75 48 a8 1c 59 fb bd 72 a3 28 a3 e1 ff 37 ff fa f7 5b 79 1f 7c cd 69 86 e7 23 de 3d cc 62 e8 61 aa 77 bf db 9d ce 7e e6 78 a7 ac c3 ae 73 f6 77 cd a3 a6 ed 85 55 25 3d 5e c0 d0 a7 34 c0 12 9d 69 30 6f 55 ec 1d 1d e5 c9 1d 68 aa a4 cc 2b ab 42 16 ee bf 37 ef bd 7a a4 92 b6 69 df 49 0a a5 0e 55 1b 7e b9 37 b3 2f 41 b1 36 eb 6d ea d9 2a 6a c8 a4 1d 7e ae d6 33 b5 f4 f9 cc d5 21 59 8a e1 97 73 be d3 f7 84 55 2b 3b da de b9 3b 25 b5 73 c3 8a 8f 06 86 7f 3b 12 0c 65 4c d4 37 bb cc 1d 74 5a a0 59 cb 3e d7 77 3a dd d9 aa 9e 0d eb f4 c9 b7 a4 63 da 46 7f d6 57 71 cb 8d a1 4c 86 5f 67 77 b8 e5 a7 d3 55 9f 86 70 be d4 24 eb 54 f7 ac db 45 ce df 43 3d cc a8 d1 99 42 11 97 04 75 a5 cf 4e 58 ed 70 b1 6a a4 c5 0b 18 Data Ascii: /i{#vPeuHYr(7[y\|i#=baw~xswU%=^4i0oUh+B7ziIU~7/A6m*j~3!YsU+;;%s;eL7tZY>w:cFWqL_gwUp$TEC=BuNXpj
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 23 b8 06 b0 5e 59 b1 24 c7 2f 3a 47 43 ca f3 b7 22 a2 61 f7 59 f2 cc fc 43 99 7d b3 8c 3c 37 6f c3 f3 e3 9c 6f 54 25 ca d8 9f d3 f0 4b 3b 55 61 8a 3c a4 fe e9 77 1b 89 90 d3 02 c3 ff 12 9b 3a e9 06 40 b1 54 83 99 55 b2 18 5a 5f d5 3c fb 19 3a 45 92 8c ae 3a e5 c4 51 22 c3 3f 9f 51 91 76 24 5b 9e cb e2 f2 45 ec 4a fa fb 70 16 f5 7d 9e 65 b6 86 aa b0 5d 16 62 a0 1d 18 ee b9 c6 56 aa 8c fd 5e c0 90 58 83 98 26 bc 8a 06 fa 29 cd e3 42 62 c6 a2 bd 18 53 27 eb 0b 06 2b 91 01 8a 45 ca 6b 66 45 44 43 8e 99 dc cc 48 7b 5c 97 98 6b 21 06 72 6e e9 93 bb 25 1a 19 cf 3c c2 5f f5 3b 5a ae 73 d2 ce 57 79 07 77 de ca 0d c3 ff 92 0c a3 65 55 75 64 f5 31 ca 5f 4b 87 88 92 a3 53 44 cd 91 15 17 0d af 9c 28 4a 64 f8 93 9b 9c 84 f9 12 72 20 cf 4c f2 dd 23 62 ae 81 cf b2 cb 40 Data Ascii: #^Y$/:GC"aYC}<7ooT%K;Ua<w:@TUZ_<:E:Q"?Qv$[EJp}e]bV^X&)BbS'+EkfEDCH{\k!rn%<_;ZsWyweUud1_KSD(Jdr L#b@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49893	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:55 UTC	619	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:56 UTC	830	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:56 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Wed, 17 Apr 2024 06:40:30 GMT ETag: 0x8DC5EA946CA59A3 x-ms-request-id: 3bc77349-c01e-006d-2ffa-908dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 72220 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cbba91569e9-ATL
2024-04-18 17:15:56 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-18 17:15:56 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49895	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:56 UTC	371	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:56 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:56 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Wed, 17 Apr 2024 02:07:28 GMT ETag: 0x8DC5E832222975D x-ms-request-id: ea01ee7d-c01e-0020-3978-904224000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 67430 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cbe7bc5b0e7-ATL
2024-04-18 17:15:56 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49896	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:56 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:56 UTC	830	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:56 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Wed, 17 Apr 2024 06:40:30 GMT ETag: 0x8DC5EA946CA59A3 x-ms-request-id: 3bc77349-c01e-006d-2ffa-908dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 72220 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cbeb84953bd-ATL
2024-04-18 17:15:56 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-18 17:15:56 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49897	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:56 UTC	477	OUT	GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/018e1e11-08a1-7636-85ca-4577d898aaa6/7e637ca4-577a-48f6-bdf8-17957e2bfcc4/brightmine-logo.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:56 UTC	827	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:56 GMT Content-Type: image/png Content-Length: 20560 Connection: close Content-MD5: UFBGE+8cXcsx1FoWo1mwTQ== Last-Modified: Mon, 18 Mar 2024 15:42:09 GMT ETag: 0x8DC4761F9008F0F x-ms-request-id: 26a1e926-901e-003d-225a-794f98000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 11685 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664cbf7a01136d-ATL
2024-04-18 17:15:56 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 fc 00 00 01 0b 08 06 00 00 00 64 a9 8d 73 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 4f e5 49 44 41 54 78 5e ed 9d 2b 70 1c bb 12 86 87 1d 18 18 78 60 60 60 e0 81 81 81 61 d9 03 bc 3b a7 42 02 c3 ae cb 49 95 a1 61 60 a0 61 a0 61 a0 a1 a1 61 a0 a1 a1 a1 7d bb b5 bd f6 7a dd fb 1c 49 23 cd 7c 5f d5 5f e7 de d8 1e 69 34 af fe f5 68 35 00 00 00 00 00 a5 f2 70 dc fc 7d ff ad f9 f8 70 d2 1c ab ee 4f 9a 0b f9 ff bf 17 0a ff fe ad f9 a0 bf 67 7f 02 00 00 00 00 00 00 00 25 62 26 ff 54 74 23 66 fe 61 57 c9 ef df ea df c9 df bf b6 43 01 00 00 00 00 00 00 40 df 04 a3 7f d2 fc f2 cc fc be 92 e3 fc 94 Data Ascii: PNGIHDRdssRGBgAMAapHYsodOIDATx^+px```a;BIa`aaa}zI#\|__i4h5p}pOg%b&Tt#faWC@
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: e8 7e 90 d4 e9 d4 aa 08 00 00 00 00 00 30 4e 26 9f 3f bf 7e 34 9c bb 1a f4 e9 ec 8f 6b 7c 51 1a 79 1d 0a d3 f6 d7 f3 6b 35 fd f8 78 1d e5 9a da e5 4d 4e 29 6b f7 57 25 86 ff 8f 55 11 00 00 00 00 00 60 18 7c fa f4 e9 d5 a3 f1 53 13 b8 30 ee 6d fb 63 c9 2c 8a 81 74 8c 25 1a 9e 9e 77 16 fc 7c ec 20 d0 ce 9d c5 7d d2 b6 7f db ed b3 37 62 f8 2f 3c c3 5d 84 8e 9b b7 56 4d 00 00 00 00 00 80 f2 78 66 e0 67 b3 0f 8f 06 7e da 9e 3d 19 b9 ca a6 c0 a3 72 35 9d dd 2c dd 57 e7 8f 1d 04 72 ef d9 2d f9 48 a9 d3 f9 1f 75 d2 1c 5b 55 01 00 00 00 00 00 f2 f2 7c 34 fe d1 c8 5f 04 b3 15 8c 97 63 c8 d0 7e 0a cb 0f 16 06 76 93 da db 17 7f 8b 9e 34 6d 5f ac 89 bf ff de bc 77 8d 76 21 ba ff d6 5c 5a 55 01 00 00 00 00 00 e2 21 66 fe af a5 91 f9 af c1 cc cf da f3 60 2e 87 bd 06 fe Data Ascii: ~0N&?~4k\|Qyk5xMN)kW%U`\|S0mc,t%w\| }7b/<]VMxfg~=r5,Wr-Hu[U\|4_c~v4m_wv!\ZU!f`.
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 00 50 13 6a ba 93 4c 17 9d eb 4a 82 cf 9f 12 30 7e d1 72 ac 48 00 80 b5 88 e9 7f 2b a6 3f 5b 12 bf 5a 46 f6 f7 25 bc db 35 af 4a d4 a4 a9 8f 5b 02 be a7 b3 16 00 00 00 a0 30 6c 5b bc 0f 36 15 34 ee da 7b 0d 28 35 2b 34 23 f7 00 d0 11 31 fd 6f c4 88 a7 5f d3 7f d2 1c 5b 91 83 47 de cd f3 dc 2b 21 b1 6a ac d9 5b 21 11 e0 69 df 1d ba 3a 33 44 ae e5 57 b9 67 7e 8b ae 56 af b3 fc db b5 e8 54 3b 93 ec 4f 00 00 00 00 ea e7 79 80 17 3b 73 7e c8 96 7f aa 1d 08 64 7c 06 80 14 04 93 b6 62 de 62 28 98 c2 ef cd 5a 93 6a 26 76 d0 89 ec 42 07 f0 3c 17 c0 99 bc d3 63 6c 0b 78 27 c7 d2 4e df 2f fa ed b1 62 92 72 7f dc bc d3 6d 14 bd 6b bc 4e 72 ed 2f 37 5d 7b 00 00 00 80 62 99 1b fc c7 f5 f7 31 f7 bd 9f 4f cd 27 99 13 00 64 c6 4c dd 85 67 de f6 95 98 bd 1b dd 02 d0 0e ed Data Ascii: PjLJ0~rH+?[ZF%5J[0l[64{(5+4#1o_[G+!j[!i:3DWg~VT;Oy;s~d\|bb(Zj&vB<clx'N/brmkNr/7]{b1O'dLg
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 75 ff ad f9 6d 45 01 00 00 40 49 68 a2 24 1d 51 e9 b0 1e 5f a7 f8 9f 93 51 1f 00 00 f6 41 f3 b7 ac f9 f6 dc 8e fd 7b 12 72 1d 4c db d3 79 be 9b 17 ed b3 5e 9a 0b 61 36 7b 6f 87 79 c6 fd 49 73 ee 99 f5 ae 0a 6b f7 8f 1b 96 ea 01 00 00 94 82 8e 9e 58 d2 bd fd 02 89 85 9e a6 ea bb 41 05 00 00 c0 2e e8 6c 30 f9 ae bc cc 0d 33 6d 47 b9 1e 5c bf ab eb 66 3e 6c d0 6d f8 26 6f d9 e9 40 b7 e8 4b 31 b5 5f 8e f9 d1 8a 00 00 00 80 3e d0 f5 f3 9a 0d 5f 82 82 f3 10 18 f8 01 c3 36 5d 49 20 42 c2 3d 00 00 88 ca e4 68 d6 3a df 9c 07 fd 77 fb 95 41 13 be d1 9a 33 67 bf 99 76 f2 2d 9f fd 94 bf db 6b f9 83 8e c4 47 35 fd 27 cd b1 1d 1a 00 00 00 72 b2 62 f2 0f cc ac 3f fb ad 01 97 b7 1e 10 00 00 20 16 3a a2 ef 7c 87 ee 86 fc fd 59 32 fa fb cc b6 3b b7 ed 6c 0f 4e 84 2b a6 ff Data Ascii: umE@Ih$Q_QA{rLy^a6{oyIskXA.l03mG\f>lm&o@K1_>_6]I B=h:wA3gv-kG5'rb? :\|Y2;lN+
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: df 87 6d 92 df bb 15 9d 6d fb 18 6f 42 8d 7a 48 e6 a3 c6 7d d5 cc 6f d2 b4 bd 60 ca 3e 00 00 40 7d 3c fc af f9 4b e2 88 9d e2 0d f9 9d 3b 31 fe 3f 75 20 c2 fe fc 05 6a fa 31 fb 00 00 00 1b 78 f8 de fc 23 1f d5 3f de c7 76 9b 82 f1 3f 69 be d8 a1 b6 f2 98 80 cf dd 9b 77 83 a6 b3 3f 3a d5 9f 2c fb 00 00 00 75 22 31 c3 a9 c6 0d 5e 3c b1 4d 66 fc 59 b6 07 00 00 b0 0f f2 11 d5 5e f6 bb d5 0f eb be 92 0f f1 b9 f6 da db 61 5f 30 39 fa ef 9d 6e 91 23 e6 7d 9f 04 7c f2 bb b3 9f 9a bc cf 0e 03 00 00 00 95 a1 46 5d 62 8d df 5e fc b0 8f e4 18 37 72 ac b7 76 58 00 00 00 d8 44 58 1f e7 7c 50 0f 95 1c ef 62 d5 f4 ab 59 df 7b 3b bd d9 ec 52 a7 e7 91 80 0f 00 00 a0 6e 74 3a be 18 f5 83 66 11 7a 0a 33 04 30 fd 00 b0 0b da d3 98 4a 56 04 40 b1 68 e2 3d ef 43 da 55 72 ff 9f Data Ascii: mmoBzH}o`>@}<K;1?u j1x#?v?iw?:,u"1^<MfY^a_09n#}\|F]b^7rvXDX\|PbY{;Rnt:fz30JV@h=CUr
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 80 21 96 ac 08 00 00 e8 00 86 7f 58 60 f8 01 00 00 20 1b 5e c0 10 4b 56 04 00 00 74 00 c3 3f 2c 30 fc 00 00 00 90 0d 2f 60 88 25 2b 02 00 00 3a 80 e1 1f 16 18 7e 00 00 00 c8 86 17 30 c4 92 15 01 00 00 1d c0 f0 0f 0b 0c 3f 00 00 00 64 c3 0b 18 62 c9 8a 00 00 80 0e 60 f8 87 05 86 1f 00 00 00 b2 e1 05 0c b1 64 45 00 00 40 07 30 fc c3 02 c3 0f 00 00 00 d9 f0 02 86 58 b2 22 b2 21 41 d4 9b 87 ef cd 3f bb c8 fe 04 2a 41 ae ed 2b ef 3a ca 7d 86 59 29 9c 60 6e ec 7a 89 19 f9 18 cc ab 27 b9 96 8f d7 55 9e 65 fb 73 10 ac 7d dc f7 6c 04 25 79 86 ee 8f 9b 77 f7 df 9b f7 2f ae b3 a7 c5 b5 ff 5f f3 97 fd f9 a0 c1 f0 d7 c9 e4 f3 e7 d7 93 b6 fd 67 a3 8e fe 7b 67 bf 3e 5a b4 0d dc b6 59 d2 a7 4f 9f 5e d9 af 03 44 61 a7 e7 d3 64 7f 02 95 f0 ec da ce 66 1f 26 d3 f6 d8 d5 d1 Data Ascii: !X` ^KVt?,0/`%+:~0?db`dE@0X"!A?*A+:}Y)`nz'Ues}l%yw/_g{g>ZYO^Dadf&
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 59 5f a5 dc fe a6 4e 1f 22 ed 1c a9 6c c4 df 3d 8f 18 aa d4 f0 db 28 e4 f9 8b f3 a9 43 ba 0e fc 6c 48 c9 38 63 f1 38 53 a3 b6 77 ca 3a 69 5e 87 8c 6b fd 97 47 fc ed 9f 9e f1 64 e6 43 27 59 f8 af fd e8 11 f9 b7 79 be 0b 9b a9 d5 ab e1 97 a0 47 93 3e 15 3f 4d 78 17 59 a0 f9 95 11 7f b9 ae d2 06 da 16 6a b6 bc b6 8a 29 29 03 c3 1f 89 a5 eb 56 bd d1 f7 24 e7 75 a6 9d 19 76 ba 55 91 d3 f0 6b 1b d5 fe 5e 96 6b 7d ad 49 57 ed 94 8a 03 c3 9f 07 5b 7f 9e 3a c9 57 62 cd 7e a7 5c 57 aa cb 08 ea 1d 7d 5b 28 24 42 ac 62 8d b5 5f ff 08 aa cc f0 eb 88 a6 19 42 ff 7c ea d2 ad 76 2a da a9 8d 9a d0 79 38 37 a3 35 cc d4 d8 5f ba f4 2a c3 bb 66 57 c3 6f ff d5 e5 69 b7 f6 a3 40 e8 70 09 7f 1f 76 8a 09 bb cc f4 62 f8 73 1a c2 dc 2a 3d d0 4c 8d 9e bb b6 81 d7 36 29 24 65 61 f8 Data Ascii: Y_N"l=(ClH8c8Sw:i^kGdC'YyG>?MxYj))V$uvUk^k}IW[:Wb~\W}[($Bb_B\|vy875_fWoi@pvbs*=L6)$ea
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: d7 a4 58 4a 36 8e 18 fe f5 c8 35 63 49 4d 47 95 62 fa 31 fc 69 25 ef 81 ac 89 fc 30 fc 87 23 c1 f2 99 13 54 a1 85 d4 70 61 ba 36 4a d7 21 db ed 94 1d af 3e 51 d4 b3 e1 c7 18 ee ab f2 d7 f4 ab 69 94 7a 92 87 a1 bb ee 16 09 f4 7a c5 f9 68 a3 cc 12 53 51 f4 83 2f f5 fb e5 d5 bb 04 61 f8 7d e4 bc 7e 78 75 42 fb ab 84 e7 13 c3 9f 5e 6a fa 1f be 37 6e 6f 7a 6c 30 fc 87 a1 db ac 39 c1 14 42 7b 4b 4c 7f 2f db a5 79 75 89 a2 1e 0d 7f 30 86 cc ba d9 5f 85 ed 20 b1 0c d7 34 ba dc 3c 2b 59 71 3e da a8 07 49 b0 59 64 22 bf d2 8d 06 86 ff 25 98 c3 f8 d2 0e 14 6b de 5e e0 9a e6 91 5c e7 1b 31 e3 5b b7 39 eb 0a 86 7f 7f 48 40 87 22 eb ae 8f 00 dc a9 47 1c f5 68 f8 75 b4 da ad 13 da aa c9 51 9b 75 39 d9 ae 88 d9 1f fd 76 8a 09 74 bb 3a 05 3f 2b ce 47 1b f5 a4 fb 93 e6 8b Data Ascii: XJ65cIMGb1i%0#Tpa6J!>QizzhSQ/a}~xuB^j7nozl09B{KL/yu0_ 4<+Yq>IYd"%k^\1[9H@"GhuQu9vt:?+G
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: c5 ae 2f dd a0 69 7b aa 23 81 76 1a c9 50 d3 a3 65 b9 75 48 a8 1c 59 fb bd 72 a3 28 a3 e1 ff 37 ff fa f7 5b 79 1f 7c cd 69 86 e7 23 de 3d cc 62 e8 61 aa 77 bf db 9d ce 7e e6 78 a7 ac c3 ae 73 f6 77 cd a3 a6 ed 85 55 25 3d 5e c0 d0 a7 34 c0 12 9d 69 30 6f 55 ec 1d 1d e5 c9 1d 68 aa a4 cc 2b ab 42 16 ee bf 37 ef bd 7a a4 92 b6 69 df 49 0a a5 0e 55 1b 7e b9 37 b3 2f 41 b1 36 eb 6d ea d9 2a 6a c8 a4 1d 7e ae d6 33 b5 f4 f9 cc d5 21 59 8a e1 97 73 be d3 f7 84 55 2b 3b da de b9 3b 25 b5 73 c3 8a 8f 06 86 7f 3b 12 0c 65 4c d4 37 bb cc 1d 74 5a a0 59 cb 3e d7 77 3a dd d9 aa 9e 0d eb f4 c9 b7 a4 63 da 46 7f d6 57 71 cb 8d a1 4c 86 5f 67 77 b8 e5 a7 d3 55 9f 86 70 be d4 24 eb 54 f7 ac db 45 ce df 43 3d cc a8 d1 99 42 11 97 04 75 a5 cf 4e 58 ed 70 b1 6a a4 c5 0b 18 Data Ascii: /i{#vPeuHYr(7[y\|i#=baw~xswU%=^4i0oUh+B7ziIU~7/A6m*j~3!YsU+;;%s;eL7tZY>w:cFWqL_gwUp$TEC=BuNXpj
2024-04-18 17:15:56 UTC	1369	IN	Data Raw: 23 b8 06 b0 5e 59 b1 24 c7 2f 3a 47 43 ca f3 b7 22 a2 61 f7 59 f2 cc fc 43 99 7d b3 8c 3c 37 6f c3 f3 e3 9c 6f 54 25 ca d8 9f d3 f0 4b 3b 55 61 8a 3c a4 fe e9 77 1b 89 90 d3 02 c3 ff 12 9b 3a e9 06 40 b1 54 83 99 55 b2 18 5a 5f d5 3c fb 19 3a 45 92 8c ae 3a e5 c4 51 22 c3 3f 9f 51 91 76 24 5b 9e cb e2 f2 45 ec 4a fa fb 70 16 f5 7d 9e 65 b6 86 aa b0 5d 16 62 a0 1d 18 ee b9 c6 56 aa 8c fd 5e c0 90 58 83 98 26 bc 8a 06 fa 29 cd e3 42 62 c6 a2 bd 18 53 27 eb 0b 06 2b 91 01 8a 45 ca 6b 66 45 44 43 8e 99 dc cc 48 7b 5c 97 98 6b 21 06 72 6e e9 93 bb 25 1a 19 cf 3c c2 5f f5 3b 5a ae 73 d2 ce 57 79 07 77 de ca 0d c3 ff 92 0c a3 65 55 75 64 f5 31 ca 5f 4b 87 88 92 a3 53 44 cd 91 15 17 0d af 9c 28 4a 64 f8 93 9b 9c 84 f9 12 72 20 cf 4c f2 dd 23 62 ae 81 cf b2 cb 40 Data Ascii: #^Y$/:GC"aYC}<7ooT%K;Ua<w:@TUZ_<:E:Q"?Qv$[EJp}e]bV^X&)BbS'+EkfEDCH{\k!rn%<_;ZsWyweUud1_KSD(Jdr L#b@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49898	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:56 UTC	2616	OUT	GET /favicon.ico?v2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
2024-04-18 17:15:56 UTC	384	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:56 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Accept-Ranges: bytes Etag: "80267417dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:57 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 57-29360312-29360398 NNNY CT(13 14 0) RT(1713460555870 214) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:56 UTC	1068	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ff 0c 00 80 ff 2a 00 Data Ascii: h6 (00 h&( *
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @
2024-04-18 17:15:56 UTC	1320	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 48 00 82 ff 87 00 82 ff 56 00 80 ff 02 67 67 60 45 55 55 55 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 67 67 61 83 66 66 60 28 00 00 00 00 00 00 00 00 6a 6a 63 24 67 66 60 f4 67 67 60 b0 66 66 66 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HVgg`EUUUggaff`(jjc$gf`gg`fff
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: 61 ad 69 67 61 79 65 65 62 44 66 66 66 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ff bc 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff 88 74 74 5d 0b 68 68 61 6c 68 68 60 40 71 71 63 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff a8 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff 6f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: aigayeebDffftt]hhalhh`@qqco
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: ff ff 00 82 ff ff 00 82 ff ff 00 82 ff f1 00 82 ff 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 21 00 82 ff c8 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff a5 00 76 ff 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: V!v
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 67 67 62 5e 67 66 60 f9 67 66 61 e3 6d 6d 64 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 67 67 60 48 67 67 60 c4 67 66 60 f2 67 66 60 ff 67 66 60 e6 68 66 61 89 63 63 5e 31 5d 5d 5d 0b 00 00 00 00 00 8e ff 09 00 82 ff 5e 00 83 ff d3 00 83 ff fa 00 82 ff da 00 83 ff 69 00 76 ff 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 69 65 61 3f 67 66 60 e9 68 Data Ascii: ggb^gf`gfammdgg`Hgg`gf`gf`gf`hfacc^1]]]^iviea?gf`h
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: 60 f4 67 66 60 ff 67 66 60 fd 67 66 60 e1 67 67 60 b7 67 67 60 8d 68 68 60 60 67 67 62 34 74 5d 5d 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 00 84 ff 1f 00 82 ff 5e 00 83 ff 75 00 82 ff 5e 00 80 ff 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 4e 00 82 ff f4 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff fe 00 82 ff da 00 87 ff 11 00 00 00 00 00 00 00 00 00 00 00 00 71 71 55 09 66 66 60 2d 69 66 61 5f 67 67 60 94 67 67 61 c6 68 67 61 dd 67 66 60 e9 67 66 60 f5 67 66 60 fe 67 66 60 ff 68 67 60 f6 68 67 60 c2 69 67 61 81 68 68 61 42 62 62 5a 22 6b 6b 5e 13 66 66 66 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: `gf`gf`gf`gg`gg`hh``ggb4t]]^u^NqqUff`-ifa_gg`ggahgagf`gf`gf`gf`hg`hg`igahhaBbbZ"kk^fff
2024-04-18 17:15:56 UTC	1452	IN	Data Raw: ff ff 00 82 ff ff 00 82 ff ff 00 83 ff fc 00 82 ff d5 00 82 ff 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 92 ff 07 00 83 ff 52 00 82 ff a3 00 82 ff cc 00 82 ff d4 00 82 ff c0 00 82 ff 89 00 85 ff 30 00 80 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3R0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49899	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:57 UTC	2328	OUT	GET /favicon.ico?v2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
2024-04-18 17:15:57 UTC	384	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:57 GMT Content-Type: image/x-icon Content-Length: 15406 Connection: close Accept-Ranges: bytes Etag: "80267417dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:57 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 55-23605597-23605654 NNNY CT(13 14 0) RT(1713460556487 219) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:57 UTC	1068	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 ff 0c 00 80 ff 2a 00 Data Ascii: h6 (00 h&( *
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ( @
2024-04-18 17:15:57 UTC	1320	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 48 00 82 ff 87 00 82 ff 56 00 80 ff 02 67 67 60 45 55 55 55 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 01 67 67 61 83 66 66 60 28 00 00 00 00 00 00 00 00 6a 6a 63 24 67 66 60 f4 67 67 60 b0 66 66 66 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: HVgg`EUUUggaff`(jjc$gf`gg`fff
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: 61 ad 69 67 61 79 65 65 62 44 66 66 66 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 82 ff bc 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff 88 74 74 5d 0b 68 68 61 6c 68 68 60 40 71 71 63 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff a8 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff 6f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: aigayeebDffftt]hhalhh`@qqco
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: ff ff 00 82 ff ff 00 82 ff ff 00 82 ff f1 00 82 ff 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 21 00 82 ff c8 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff a5 00 76 ff 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: V!v
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 67 67 62 5e 67 66 60 f9 67 66 61 e3 6d 6d 64 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 67 67 60 48 67 67 60 c4 67 66 60 f2 67 66 60 ff 67 66 60 e6 68 66 61 89 63 63 5e 31 5d 5d 5d 0b 00 00 00 00 00 8e ff 09 00 82 ff 5e 00 83 ff d3 00 83 ff fa 00 82 ff da 00 83 ff 69 00 76 ff 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 69 65 61 3f 67 66 60 e9 68 Data Ascii: ggb^gf`gfammdgg`Hgg`gf`gf`gf`hfacc^1]]]^iviea?gf`h
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: 60 f4 67 66 60 ff 67 66 60 fd 67 66 60 e1 67 67 60 b7 67 67 60 8d 68 68 60 60 67 67 62 34 74 5d 5d 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 01 00 84 ff 1f 00 82 ff 5e 00 83 ff 75 00 82 ff 5e 00 80 ff 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 ff 4e 00 82 ff f4 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 82 ff ff 00 83 ff fe 00 82 ff da 00 87 ff 11 00 00 00 00 00 00 00 00 00 00 00 00 71 71 55 09 66 66 60 2d 69 66 61 5f 67 67 60 94 67 67 61 c6 68 67 61 dd 67 66 60 e9 67 66 60 f5 67 66 60 fe 67 66 60 ff 68 67 60 f6 68 67 60 c2 69 67 61 81 68 68 61 42 62 62 5a 22 6b 6b 5e 13 66 66 66 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: `gf`gf`gf`gg`gg`hh``ggb4t]]^u^NqqUff`-ifa_gg`ggahgagf`gf`gf`gf`hg`hg`igahhaBbbZ"kk^fff
2024-04-18 17:15:57 UTC	1452	IN	Data Raw: ff ff 00 82 ff ff 00 82 ff ff 00 83 ff fc 00 82 ff d5 00 82 ff 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 92 ff 07 00 83 ff 52 00 82 ff a3 00 82 ff cc 00 82 ff d4 00 82 ff c0 00 82 ff 89 00 85 ff 30 00 80 ff 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 3R0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49901	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:58 UTC	2631	OUT	GET /forgottenpassword/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
2024-04-18 17:15:58 UTC	384	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:58 GMT Content-Type: text/html; charset=utf-8 Content-Length: 13629 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 62-46607933-46608017 NNNN CT(20 14 0) RT(1713460557382 219) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:15:58 UTC	1068	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 0d 0a 20 20 20 20 63 6c 61 73 73 3d 22 6e 6f 2d 73 63 72 69 70 74 20 20 63 68 72 6f 6d 65 2d 62 74 20 31 32 33 2d 62 76 20 22 0d 0a 20 20 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 20 64 61 74 61 2d 78 70 65 72 74 68 72 2d 70 61 67 65 6e 61 6d 65 3d 22 46 6f 72 67 6f 74 74 65 6e 50 61 73 73 77 6f 72 64 50 61 67 65 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e Data Ascii: <!DOCTYPE html><html class="no-script chrome-bt 123-bv " lang="en-US"><head id="head" data-xperthr-pagename="ForgottenPasswordPage"> <meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta n
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 72 79 20 7b 20 54 79 70 65 6b 69 74 2e 6c 6f 61 64 28 29 3b 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 7d 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 66 75 6c 6c 2e 6d 69 6e 2e 63 73 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 Data Ascii: ry { Typekit.load(); } catch (e) { }</script> ...[if IE]> <link rel="stylesheet" type="text/css" href="//assets.us.brightmine.com/latest/Full/Bundle/bootstrap/css/bootstrap-full.min.css?v=2.0.769" /> <link rel="stylesheet" type="te
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 76 3d 32 2e 30 2e 37 36 39 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 63 68 65 63 6b 53 63 72 69 70 74 2e 6d 69 6e 2e 6a 73 3f 76 3d 32 2e 30 2e 37 36 39 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 57 65 62 2f 41 73 73 65 74 73 2f 53 68 61 72 65 64 2f 43 6c 69 65 6e 74 53 69 64 65 43 6f 6e 66 69 67 2f 6e 67 2d 61 70 70 2d 73 65 74 74 69 6e 67 73 2e 6a 73 3f 76 3d 36 39 35 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: v=2.0.769" /> <script type="text/javascript" src="//assets.us.brightmine.com/latest/Full/Bundle/checkScript.min.js?v=2.0.769"></script> <script src="/Web/Assets/Shared/ClientSideConfig/ng-app-settings.js?v=6951"></script> <script type="te
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 70 75 6c 73 65 53 75 72 76 65 79 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 67 61 6c 54 69 6d 65 74 61 62 6c 65 53 65 61 72 63 68 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 73 65 74 28 27 43 6f 6d 6d 6f 6e 27 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 53 75 67 67 65 73 74 42 61 73 65 55 72 6c 3a 20 22 2f 73 65 61 72 63 68 2f 41 75 74 6f 73 75 67 67 65 73 74 2f 3f 50 61 67 65 53 69 7a 65 3d 31 30 22 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 6d 6f 76 65 55 73 65 72 53 65 61 72 63 68 42 61 73 65 55 72 6c 3a 20 22 2f 73 65 61 72 63 68 2f 54 72 Data Ascii: pulseSurvey: false, legalTimetableSearch: true }); AssetShared.Helpers.modelDataLibrary.set('Common', { autoSuggestBaseUrl: "/search/Autosuggest/?PageSize=10", removeUserSearchBaseUrl: "/search/Tr
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 73 3d 22 31 36 37 78 31 36 37 22 20 68 72 65 66 3d 22 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 36 37 78 31 36 37 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 38 30 78 31 38 30 2e 70 6e 67 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 63 6f 6e 74 65 6e 74 49 44 22 20 63 6f 6e 74 65 6e 74 3d 22 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 63 6f 6e 74 65 6e 74 54 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 46 6f 72 67 6f Data Ascii: s="167x167" href="/apple-touch-icon-167x167.png" /> <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon-180x180.png" /> <meta name="gwa_contentID" content="" /> <meta name="gwa_contentTitle" content="Forgo
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 20 73 72 63 3d 22 2f 2f 72 62 69 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 65 76 65 6e 74 3f 64 5f 73 74 75 66 66 3d 31 26 64 5f 64 73 74 3d 31 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 63 74 73 3d 31 26 64 5f 63 62 3d 61 61 6d 5f 74 6e 74 5f 63 62 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 0d 0a 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 0d 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 62 61 73 69 63 2d 6c 61 79 6f 75 74 20 67 61 74 65 77 61 79 20 22 3e 0d 0a 20 20 20 20 0a 0a 20 20 20 20 3c 78 68 72 2d 68 65 61 64 65 72 2d 63 6f 6d 70 6f 6e 65 6e 74 20 73 68 6f 75 6c 64 2d 64 69 73 70 6c 61 79 2d 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 3d 22 74 72 75 65 22 3e 3c 2f 78 68 72 2d 68 65 61 64 65 72 2d 63 Data Ascii: src="//rbi.demdex.net/event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb" type="text/javascript"></script></head><body class="basic-layout gateway "> <xhr-header-component should-display-global-search="true"></xhr-header-c
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 77 6f 72 64 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 78 68 72 6f 62 2d 6c 6f 67 69 6e 2d 72 65 71 75 69 72 65 64 22 20 69 64 3d 22 6c 6f 67 69 6e 53 65 63 74 69 6f 6e 22 3e 0d 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 66 6f 72 67 6f 74 74 65 6e 70 61 73 73 77 6f 72 64 2f 22 20 63 6c 61 73 73 3d 22 78 68 72 2d 66 6f 72 6d 22 20 69 64 3d 22 72 65 71 75 65 73 74 50 61 73 73 77 6f 72 64 52 65 73 65 74 46 6f 72 6d 22 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 45 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 62 65 6c 6f 77 2e 20 49 66 20 79 6f 75 20 61 72 65 20 61 20 73 75 62 73 63 72 69 62 65 72 2c 20 61 6e 20 65 6d 61 Data Ascii: word</h1> <div class="xhrob-login-required" id="loginSection"><form action="/forgottenpassword/" class="xhr-form" id="requestPasswordResetForm" method="post"> <p>Enter your email address below. If you are a subscriber, an ema
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 2d 73 70 61 63 69 6e 67 2d 6c 65 66 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 69 64 3d 22 72 65 71 75 65 73 74 50 61 73 73 77 Data Ascii: </p> </div> </fieldset> <fieldset> <div class="button-spacing-left"> <button type="submit" id="requestPassw
2024-04-18 17:15:58 UTC	1452	IN	Data Raw: 70 74 61 6e 6f 6e 2d 74 6f 67 67 6c 65 2d 64 69 73 70 6c 61 79 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 70 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 70 61 72 61 74 6f 72 22 3e 20 7c 3c 2f 73 70 61 6e 3e 20 59 6f 75 72 20 50 72 69 76 61 63 79 20 43 68 6f 69 63 65 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 33 30 22 20 68 65 69 67 68 74 3d 22 31 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ptanon-toggle-display" style="margin-top: -2px"> Cookie Settings<span class="separator"> \|</span> Your Privacy Choices <svg xmlns="http://www.w3.org/2000/svg" width="30" height="14" fill="none">
2024-04-18 17:15:58 UTC	945	IN	Data Raw: 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 33 30 76 31 34 48 30 7a 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 78 68 72 2d 73 69 74 65 2d 66 6f 6f 74 65 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d Data Ascii: fill="#fff" d="M0 0h30v14H0z" /> </clipPath> </defs> </svg> </a> </xhr-site-footer> </div> </div> </div></div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49900	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:58 UTC	2584	OUT	GET /Web/Assets/Full/Bundle/register-or-login.css?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
2024-04-18 17:15:59 UTC	379	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:58 GMT Content-Type: text/css Content-Length: 5537 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 55-23605839-23606004 NNNY CT(13 14 0) RT(1713460557384 559) q(0 0 0 -1) r(0 3) U24
2024-04-18 17:15:59 UTC	1073	IN	Data Raw: 2e 6c 6f 67 69 6e 2d 64 65 74 61 69 6c 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 34 70 78 7d 2e 73 69 6d 70 6c 65 2d 70 61 67 65 73 20 2e 63 65 6e 74 65 72 2d 61 6c 69 67 6e 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 36 33 34 70 78 3b 6d 61 72 67 69 6e 3a 61 75 74 6f 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 34 30 70 78 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 4d 61 72 6b 65 74 69 6e 67 2f 47 65 74 46 72 65 65 54 72 69 61 6c 42 61 63 6b 67 72 6f 75 6e Data Ascii: .login-details{margin-top:14px}.simple-pages .center-align-form{display:block;width:634px;margin:auto}.marketing-form{position:relative;padding-bottom:40px}.marketing-form .content-container{background:url(../Content/Images/Marketing/GetFreeTrialBackgroun
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 20 2e 72 65 71 75 65 73 74 2d 64 65 6d 6f 2d 66 6f 72 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 65 6e 2d 67 62 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 4d 61 72 6b 65 74 69 6e 67 2f 52 65 71 75 65 73 74 44 65 6d 6f 45 6d 61 69 6c 53 75 62 6d 69 73 73 69 6f 6e 50 61 67 65 42 61 63 6b 67 72 6f 75 6e 64 46 75 6c 6c 57 69 64 74 68 5f 47 42 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 63 65 6e 74 65 72 20 30 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 20 2e 72 65 71 75 65 73 74 2d 64 65 6d 6f 2d 66 6f 72 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 65 6e Data Ascii: op:0;width:100%}.marketing-form .request-demo-form-background.en-gb{background:url(../Content/Images/Marketing/RequestDemoEmailSubmissionPageBackgroundFullWidth_GB.png) no-repeat scroll center 0 transparent}.marketing-form .request-demo-form-background.en
2024-04-18 17:15:59 UTC	1320	IN	Data Raw: 20 2e 66 6f 72 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 2e 2e 2f 43 6f 6e 74 65 6e 74 2f 49 6d 61 67 65 73 2f 4d 61 72 6b 65 74 69 6e 67 2f 33 43 72 65 64 69 74 73 46 6f 72 6d 44 65 63 6f 72 61 74 69 6f 6e 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 74 6f 70 20 72 69 67 68 74 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 2e 63 72 65 64 69 74 73 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 6e 2d 67 62 20 2e 74 77 6f 2d 63 72 65 64 69 74 2d 66 6f 72 6d 2d 64 65 63 6f 72 61 74 69 6f 6e 2c 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 2e 63 72 65 64 69 74 73 2d 77 65 6c 63 6f 6d 65 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 6e 2d 67 62 20 Data Ascii: .form-background{background:transparent url(../Content/Images/Marketing/3CreditsFormDecoration.png) no-repeat top right}.marketing-form.credits .content-container.en-gb .two-credit-form-decoration,.marketing-form.credits-welcome .content-container.en-gb
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 20 2e 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 66 6f 72 6d 2d 62 61 63 6b 67 72 6f 75 6e 64 7b 68 65 69 67 68 74 3a 32 34 33 70 78 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 20 2e 72 65 67 69 73 74 65 72 2d 6f 72 2d 6c 6f 67 69 6e 2d 70 7b 77 69 64 74 68 3a 36 30 30 70 78 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 20 68 31 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6f 6c 6f 72 3a 23 34 64 34 64 34 64 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 35 39 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 20 2e 78 68 Data Ascii: .content-container .form-background{height:243px}.marketing-form .register-or-login-p{width:600px}.marketing-form h1{border-bottom:none;position:relative;color:#4d4d4d;margin-top:14px;max-width:590px;line-height:1.4;margin-bottom:12px}.marketing-form .xh
2024-04-18 17:15:59 UTC	240	IN	Data Raw: 6e 2d 6c 69 6e 6b 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 61 72 6b 65 74 69 6e 67 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 32 70 78 7d 2e 6d 61 72 6b 65 74 69 6e 67 2d 66 6f 72 6d 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 74 65 72 6d 73 2d 61 6e 64 2d 63 6f 6e 64 69 74 69 6f 6e 73 2d 73 63 72 6f 6c 6c 61 62 6c 65 7b 68 65 69 67 68 74 3a 33 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 31 64 31 64 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 7d Data Ascii: n-links-container-marketing{overflow:hidden;margin-top:12px}.marketing-form p{margin-bottom:12px}.terms-and-conditions-scrollable{height:300px;overflow-y:scroll;border:1px solid #d1d1d1;background-color:#fff;margin-bottom:12px;padding:12px}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49902	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:58 UTC	688	OUT	GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1 Host: rbi.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; rbi=72487132774482760582579231535531206623; DST=
2024-04-18 17:15:58 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:58 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 108 Connection: close X-TID: evi8vIPHT1k= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-0a2d4d9ba.edge-va6.demdex.com 4 ms set-cookie: DST=; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:15:58 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: rbi=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:15:58 GMT; Path=/; Domain=.rbi.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:15:58 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:15:58 UTC	108	IN	Data Raw: 61 61 6d 5f 74 6e 74 5f 63 62 28 7b 22 73 74 75 66 66 22 3a 5b 5d 2c 22 75 75 69 64 22 3a 22 37 32 34 38 37 31 33 32 37 37 34 34 38 32 37 36 30 35 38 32 35 37 39 32 33 31 35 33 35 35 33 31 32 30 36 36 32 33 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 65 76 69 38 76 49 50 48 54 31 6b 3d 22 7d 29 Data Ascii: aam_tnt_cb({"stuff":[],"uuid":"72487132774482760582579231535531206623","dcs_region":7,"tid":"evi8vIPHT1k="})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49911	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:58 UTC	2577	OUT	GET /Web/Assets/Full/Bundle/generic-standard-page.min.js?v=6951 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; mbox=check#true#1713460610\|session#1713460549104-847971#1713462410; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0
2024-04-18 17:15:59 UTC	394	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:59 GMT Content-Type: application/javascript Content-Length: 12573 Connection: close Accept-Ranges: bytes Etag: "80f94216dd8cda1:0" Last-Modified: Fri, 12 Apr 2024 13:26:55 GMT Server: Microsoft-IIS/10.0 X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 61-43381836-43381959 NNNY CT(13 14 0) RT(1713460558050 224) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:59 UTC	1058	IN	Data Raw: 76 61 72 20 41 70 70 46 75 6c 6c 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 61 2c 62 29 7b 76 6f 69 64 20 30 3d 3d 3d 62 26 26 28 62 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 24 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 3d 61 2c 74 68 69 73 2e 24 70 72 6f 64 75 63 74 73 53 65 6c 65 63 74 6f 72 3d 62 2c 74 68 69 73 2e 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 54 61 62 48 61 6e 64 6c 65 44 72 6f 70 44 6f 77 6e 3d 6e 65 77 20 41 73 73 65 74 46 75 6c 6c 2e 54 61 62 73 48 61 6e 64 6c 65 44 72 6f 70 44 6f 77 6e 2e 56 69 65 77 4d 6f 64 65 6c 28 74 68 69 73 2e 24 6c 6f 63 61 Data Ascii: var AppFull;!function(a){var b;!function(a){var b;!function(a){var b=function(){function a(a,b){void 0===b&&(b=null),this.$localeSelector=a,this.$productsSelector=b,this.localeSelectorTabHandleDropDown=new AssetFull.TabsHandleDropDown.ViewModel(this.$loca
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 67 65 74 28 22 70 61 72 74 6e 65 72 22 29 3b 72 65 74 75 72 6e 20 61 26 26 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 2e 53 65 65 6e 4d 65 73 73 61 67 65 3f 76 6f 69 64 20 63 2e 63 6f 6f 6b 69 65 53 65 74 28 21 30 29 3a 28 63 2e 24 63 6f 6e 74 61 69 6e 65 72 2e 64 69 61 6c 6f 67 28 22 6f 70 65 6e 22 29 2c 24 28 22 62 6f 64 79 22 29 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 2c 22 68 69 64 64 65 6e 22 29 2c 76 6f 69 64 20 63 2e 61 64 6a 75 73 74 4d 6f 64 61 6c 50 6f 73 69 74 69 6f 6e 41 63 63 6f 72 64 69 6e 67 54 6f 41 6e 63 68 6f 72 54 61 67 53 63 72 6f 6c 6c 28 29 29 7d 2c 74 68 69 73 2e 61 64 6a 75 73 74 4d 6f 64 61 6c 50 6f 73 69 74 69 6f 6e 41 63 63 6f 72 64 69 6e 67 54 6f 41 6e 63 68 6f 72 54 61 67 53 63 72 6f 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: get("partner");return a&&JSON.parse(a).SeenMessage?void c.cookieSet(!0):(c.$container.dialog("open"),$("body").css("overflow","hidden"),void c.adjustModalPositionAccordingToAnchorTagScroll())},this.adjustModalPositionAccordingToAnchorTagScroll=function(){
2024-04-18 17:15:59 UTC	1320	IN	Data Raw: 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 65 6e 74 65 72 4d 6f 64 61 6c 28 62 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 29 7d 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 65 6e 74 65 72 56 69 73 69 62 6c 65 4d 6f 64 65 6c 73 4f 6e 52 65 73 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 24 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 22 72 65 73 69 7a 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 63 65 6e 74 65 72 56 69 73 69 62 6c 65 4d 6f 64 61 6c 73 28 29 7d 29 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 65 6e 74 65 72 56 69 73 69 62 6c 65 4d 6f 64 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 3b 24 28 22 2e 63 65 6e 74 65 72 2d 6d 6f 64 61 6c 2e 6d 6f 64 61 6c 3a 76 69 73 69 62 6c 65 22 29 Data Ascii: on(b){return a.centerModal(b.currentTarget)})},a.prototype.centerVisibleModelsOnResize=function(){var a=this;$(window).on("resize",function(){a.centerVisibleModals()})},a.prototype.centerVisibleModals=function(){var a=this;$(".center-modal.modal:visible")
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 65 77 4d 6f 64 65 6c 2c 74 68 69 73 2e 63 65 6e 74 65 72 50 6f 70 75 70 73 56 69 65 77 4d 6f 64 65 6c 3d 6e 65 77 20 61 2e 53 68 61 72 65 64 2e 43 65 6e 74 65 72 50 6f 70 75 70 73 2e 56 69 65 77 4d 6f 64 65 6c 7d 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 47 6c 6f 62 61 6c 48 65 61 64 65 72 44 72 6f 70 44 6f 77 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 6c 6f 62 61 6c 4e 61 76 69 67 61 74 69 6f 6e 56 69 65 77 4d 6f 64 65 6c 3d 6e 65 77 20 61 2e 53 68 61 72 65 64 2e 47 6c 6f 62 61 6c 4e 61 76 69 67 61 74 69 6f 6e 2e 56 69 65 77 4d 6f 64 65 6c 28 24 28 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 65 72 2e 74 61 62 48 61 6e 64 6c 65 45 6c 65 6d 65 6e 74 73 2e 6c 6f 63 61 6c 65 53 65 6c 65 63 74 6f 72 53 65 6c 65 63 74 6f Data Ascii: ewModel,this.centerPopupsViewModel=new a.Shared.CenterPopups.ViewModel}return b.prototype.initGlobalHeaderDropDowns=function(){this.globalNavigationViewModel=new a.Shared.GlobalNavigation.ViewModel($(this.pageLoader.tabHandleElements.localeSelectorSelecto
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 63 2e 69 6e 69 74 53 69 74 65 53 65 61 72 63 68 28 29 2c 63 2e 69 6e 69 74 50 75 6c 73 65 53 75 72 76 65 79 28 29 2c 63 2e 69 6e 74 69 54 61 62 73 48 61 6e 64 6c 65 73 28 29 2c 63 7d 72 65 74 75 72 6e 20 5f 5f 65 78 74 65 6e 64 73 28 63 2c 62 29 2c 63 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 53 69 74 65 53 65 61 72 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 24 28 74 68 69 73 2e 73 74 61 6e 64 61 72 64 50 61 67 65 4c 6f 61 64 65 72 2e 68 65 61 64 65 72 53 65 61 72 63 68 46 69 65 6c 64 73 2e 73 69 74 65 53 65 61 72 63 68 50 61 72 65 6e 74 45 6c 65 6d 65 6e 74 53 65 6c 65 63 74 6f 72 29 3b 61 2e 6c 65 6e 67 74 68 3e 30 26 26 28 74 68 69 73 2e 73 69 74 65 53 65 61 72 63 68 41 75 74 6f 53 75 67 67 65 73 74 3d 6e 65 77 20 41 73 73 65 74 46 Data Ascii: c.initSiteSearch(),c.initPulseSurvey(),c.intiTabsHandles(),c}return __extends(c,b),c.prototype.initSiteSearch=function(){var a=$(this.standardPageLoader.headerSearchFields.siteSearchParentElementSelector);a.length>0&&(this.siteSearchAutoSuggest=new AssetF
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 65 6e 74 73 2e 73 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 53 74 61 74 65 73 53 65 6c 65 63 74 6f 72 29 29 2c 74 68 69 73 2e 73 69 74 65 4e 61 76 69 67 61 74 69 6f 6e 56 69 65 77 4d 6f 64 65 6c 3d 62 2e 62 75 69 6c 64 28 29 7d 2c 63 7d 28 61 2e 50 61 67 65 73 2e 42 61 73 65 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 29 3b 62 2e 53 74 61 6e 64 61 72 64 50 61 67 65 56 69 65 77 4d 6f 64 65 6c 3d 63 7d 28 62 3d 61 2e 50 61 67 65 73 7c 7c 28 61 2e 50 61 67 65 73 3d 7b 7d 29 29 7d 28 41 70 70 46 75 6c 6c 7c 7c 28 41 70 70 46 75 6c 6c 3d 7b 7d 29 29 3b 76 61 72 20 5f 5f 65 78 74 65 6e 64 73 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 65 78 74 65 6e 64 73 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f Data Ascii: ents.siteNavigationStatesSelector)),this.siteNavigationViewModel=b.build()},c}(a.Pages.BasePageViewModel);b.StandardPageViewModel=c}(b=a.Pages\|\|(a.Pages={}))}(AppFull\|\|(AppFull={}));var __extends=this&&this.__extends\|\|function(){var a=Object.setPrototypeO
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 29 26 26 28 61 5b 63 5d 3d 62 5b 63 5d 29 7d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 62 7d 61 28 62 2c 63 29 2c 62 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 63 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 63 29 3a 28 64 2e 70 72 6f 74 6f 74 79 70 65 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 64 29 7d 7d 28 29 2c 41 70 70 46 75 6c 6c 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 Data Ascii: )&&(a[c]=b[c])};return function(b,c){function d(){this.constructor=b}a(b,c),b.prototype=null===c?Object.create(c):(d.prototype=c.prototype,new d)}}(),AppFull;!function(a){var b;!function(a){var b;!function(b){var c=function(a){function b(b){return a.call(
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 2c 6e 65 77 20 64 29 7d 7d 28 29 2c 41 70 70 46 75 6c 6c 3b 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 21 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 76 61 72 20 62 3d 61 2e 63 61 6c 6c 28 74 68 69 73 29 7c 7c 74 68 69 73 2c 63 3d 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 67 65 74 28 22 43 6f 6d 6d 6f 6e 22 29 3b 72 65 74 75 72 6e 20 62 2e 61 75 74 6f 53 75 67 67 65 73 74 42 61 73 65 55 72 6c 3d 41 70 70 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 43 6f 6d 6d 6f 6e 2e 69 73 44 65 66 69 6e 65 64 41 6e 64 4e 6f 74 4e 75 6c 6c 28 63 2e 61 75 74 6f 53 75 67 67 65 73 74 42 61 73 65 55 72 6c 29 Data Ascii: ,new d)}}(),AppFull;!function(a){var b;!function(b){var c=function(a){function b(){var b=a.call(this)\|\|this,c=AssetShared.Helpers.modelDataLibrary.get("Common");return b.autoSuggestBaseUrl=AppShared.Helpers.Common.isDefinedAndNotNull(c.autoSuggestBaseUrl)
2024-04-18 17:15:59 UTC	1452	IN	Data Raw: 73 29 7c 7c 74 68 69 73 3b 62 2e 73 65 61 72 63 68 46 69 65 6c 64 4d 6f 64 65 6c 44 61 74 61 3d 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 67 65 74 28 22 53 65 61 72 63 68 46 69 65 6c 64 22 29 3b 76 61 72 20 63 3d 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 67 65 74 28 22 53 65 61 72 63 68 46 69 65 6c 64 22 29 3b 69 66 28 6e 75 6c 6c 21 3d 63 29 7b 76 61 72 20 64 3d 63 2e 74 6f 6f 6c 49 64 2c 65 3d 63 2e 74 6f 70 69 63 49 64 73 3b 62 2e 68 65 61 64 65 72 53 65 61 72 63 68 46 69 65 6c 64 73 2e 74 6f 6f 6c 49 64 3d 41 70 70 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 43 6f 6d 6d 6f 6e 2e 69 73 44 65 66 69 6e 65 64 41 6e 64 Data Ascii: s)\|\|this;b.searchFieldModelData=AssetShared.Helpers.modelDataLibrary.get("SearchField");var c=AssetShared.Helpers.modelDataLibrary.get("SearchField");if(null!=c){var d=c.toolId,e=c.topicIds;b.headerSearchFields.toolId=AppShared.Helpers.Common.isDefinedAnd
2024-04-18 17:15:59 UTC	31	IN	Data Raw: 6e 65 72 69 63 53 74 61 6e 64 61 72 64 50 61 67 65 2e 50 61 67 65 4c 6f 61 64 65 72 7d 29 3b Data Ascii: nericStandardPage.PageLoader});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49912	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:58 UTC	619	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:59 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:59 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664cce8cafad86-ATL
2024-04-18 17:15:59 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49903	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:59 UTC	1470	OUT	GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460558286-269908&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=&gwa_contentTitle=Forgotten%20password&gwa_contentType=&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_siteSection1=forgottenpassword&gwa_siteSection2=&gwa_siteSection3=&gwa_siteSection4=&gwa_pageName=forgottenpassword&gwa_contentHierarchy=forgottenpassword&gwa_server=desktop%20platform&mboxMCSDID=692873E39B366FD7-655FB5B4EA028375&mbox=target-global-mbox&mboxId=0&mboxTime=1713467758297&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1 Host: reedbusinessinternat.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:59 UTC	418	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:15:59 GMT content-type: application/javascript; charset=utf-8 referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-18 17:15:59 UTC	759	IN	Data Raw: 32 65 62 0d 0a 20 2f 2a 20 44 49 53 41 42 4c 45 44 3a 20 46 6f 6c 6c 6f 77 69 6e 67 20 6d 62 6f 78 2e 6a 73 20 64 65 70 72 65 63 61 74 69 6f 6e 2c 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 20 69 73 20 64 69 73 61 62 6c 65 64 2e 20 2a 2f 0a 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 33 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 6f 72 69 65 73 2e 67 65 74 28 27 64 65 66 61 75 6c 74 27 29 2e 67 65 74 4d 62 6f 78 65 73 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 73 65 74 4f 66 66 65 72 28 6e 65 77 20 6d 62 6f 78 4f 66 66 65 72 44 65 66 61 75 6c 74 28 29 29 2e 6c 6f 61 64 65 64 28 29 3b 7d 29 3b 0a 7d 20 65 6c 73 65 20 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 31 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 Data Ascii: 2eb /* DISABLED: Following mbox.js deprecation, this endpoint is disabled. */if (mboxVersion >= 33) { mboxFactories.get('default').getMboxes().each(function(m){m.setOffer(new mboxOfferDefault()).loaded();});} else if (mboxVersion >= 31) { mboxFact

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49914	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:59 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:15:59 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:59 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664cd27bb26787-ATL
2024-04-18 17:15:59 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49904	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:15:59 UTC	2281	OUT	GET /latest/Full/Content/Images/Forms/fieldBackground.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://assets.us.brightmine.com/latest/Full/Bundle/legacyFormCss.css?v=2.0.769 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
2024-04-18 17:15:59 UTC	504	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:15:59 GMT Content-Type: image/png Content-Length: 83 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 x-incap-sess-cookie-hdr: eeEbZWc8TizQAEXq5iwwGU9VIWYAAAAAhRaGo1pqwCn4j5akPBMNoA== X-CDN: Imperva X-Iinfo: 42-2544690-2544709 NNNY CT(14 15 0) RT(1713460557382 1744) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:15:59 UTC	83	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 1e 08 00 00 00 00 c8 fe 2b 1b 00 00 00 1a 49 44 41 54 08 d7 63 f8 ca c4 c0 c4 08 c4 0c 70 1a 41 62 63 c1 55 33 fc 07 00 41 91 02 36 f1 c6 e6 7a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR+IDATcpAbcU3A6zIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49916	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	2755	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
2024-04-18 17:16:00 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:00 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 59-35334407-35334451 NNNY CT(13 14 0) RT(1713460559250 269) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:00 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49919	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	1992	OUT	GET /latest/Full/Content/Images/Forms/fieldBackground.png HTTP/1.1 Host: assets.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
2024-04-18 17:16:00 UTC	422	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:00 GMT Content-Type: image/png Content-Length: 83 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public,max-age=2592000 Etag: "06b9759d18cda1:0" Last-Modified: Fri, 12 Apr 2024 12:02:54 GMT Server: Microsoft-IIS/10.0 X-CDN: Imperva X-Iinfo: 62-46608702-46608795 NNNY CT(14 14 0) RT(1713460559456 297) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:00 UTC	83	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 1e 08 00 00 00 00 c8 fe 2b 1b 00 00 00 1a 49 44 41 54 08 d7 63 f8 ca c4 c0 c4 08 c4 0c 70 1a 41 62 63 c1 55 33 fc 07 00 41 91 02 36 f1 c6 e6 7a 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR+IDATcpAbcU3A6zIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49920	64.233.185.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	1216	OUT	GET /pagead/viewthroughconversion/950188369/?random=1713460559129&cv=11&fst=1713460559129&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 17:16:00 UTC	1011	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmQvLvDFAN3Zoya1uB0rjphsp5FZYzMSEjSRGIFs-HAs9OUgyGV7EtK8EX9; expires=Sat, 18-Apr-2026 17:16:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:00 UTC	244	IN	Data Raw: 38 64 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b Data Ascii: 8d7(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break
2024-04-18 17:16:00 UTC	1255	IN	Data Raw: 20 61 7d 6b 3d 70 7d 76 61 72 20 72 3d 6b 26 26 6b 5b 36 31 30 34 30 31 33 30 31 5d 3b 67 3d 6e 75 6c 6c 21 3d 72 3f 72 3a 21 31 3b 76 61 72 20 74 2c 76 3d 66 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 76 3f 76 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 77 28 64 29 7b 72 65 74 75 72 6e 20 67 3f 74 3f 74 2e 62 72 61 6e 64 73 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 61 2e 62 72 61 6e 64 29 26 26 2d 31 21 3d 61 2e 69 6e 64 65 78 4f 66 28 64 29 7d 29 3a 21 31 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 78 28 64 29 7b 76 61 72 20 61 3b 61 3a 7b 69 66 28 61 3d 66 2e 6e 61 76 69 67 61 74 6f 72 29 69 66 28 61 3d 61 2e 75 73 65 72 41 67 65 6e 74 29 62 72 65 61 6b 20 61 3b Data Ascii: a}k=p}var r=k&&k[610401301];g=null!=r?r:!1;var t,v=f.navigator;t=v?v.userAgentData\|\|null:null;function w(d){return g?t?t.brands.some(function(a){return(a=a.brand)&&-1!=a.indexOf(d)}):!1:!1}function x(d){var a;a:{if(a=f.navigator)if(a=a.userAgent)break a;
2024-04-18 17:16:00 UTC	771	IN	Data Raw: 3d 74 79 70 65 6f 66 20 47 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 47 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 46 5b 30 5d 29 3b 20 66 6f 72 28 76 61 72 20 48 3b 46 2e 6c 65 6e 67 74 68 26 26 28 48 3d 46 2e 73 68 69 66 74 28 29 29 3b 29 46 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 43 3f 47 5b 48 5d 26 26 47 5b 48 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 48 5d 3f 47 3d 47 5b 48 5d 3a 47 3d 47 5b 48 5d 3d 7b 7d 3a 47 5b 48 5d 3d 43 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 3b 73 2e 73 73 5f 28 77 69 6e 64 6f 77 2c 27 4f 6a 45 33 4d 54 4d 30 4e 6a 41 31 4e 54 6b 78 4d 6a 6b 27 2c 5b 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 31 70 2d 75 73 65 72 2d 6c 69 73 Data Ascii: =typeof G.execScript\|\|G.execScript("var "+F[0]); for(var H;F.length&&(H=F.shift());)F.length\|\|void 0===C?G[H]&&G[H]!==Object.prototype[H]?G=G[H]:G=G[H]={}:G[H]=C;}).call(this);;s.ss_(window,'OjE3MTM0NjA1NTkxMjk',['https://www.google.com/pagead/1p-user-lis
2024-04-18 17:16:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49921	142.250.105.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	1340	OUT	GET /td/rul/950188369?random=1713460559129&cv=11&fst=1713460559129&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-18 17:16:00 UTC	954	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1; expires=Sat, 18-Apr-2026 17:16:00 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:00 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49925	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	794	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460559195 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:00 UTC	661	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:00 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: smwy63qMQ2A= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://hrcenter.us.brightmine.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v059-0fa6139c8.edge-va6.demdex.com 9 ms
2024-04-18 17:16:00 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49927	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	2755	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419
2024-04-18 17:16:00 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:00 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 51-12303853-12303878 NNNY CT(13 14 0) RT(1713460559759 214) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:00 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49928	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	2444	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
2024-04-18 17:16:00 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:00 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 60-39164868-39164951 NNNN CT(17 39 0) RT(1713460559767 214) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:16:00 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49929	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	2555	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
2024-04-18 17:16:00 UTC	308	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:00 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 45-3300532-3300541 NNNN CT(13 18 0) RT(1713460559769 214) q(0 0 1 -1) r(1 1) U24
2024-04-18 17:16:00 UTC	1144	IN	Data Raw: 66 34 34 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 70 Data Ascii: f44{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Sup
2024-04-18 17:16:00 UTC	1452	IN	Data Raw: 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f 6e 4d 61 Data Ascii: ":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}],"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigationMa
2024-04-18 17:16:00 UTC	1319	IN	Data Raw: 61 72 65 2d 62 65 6e 65 66 69 74 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 43 61 72 65 20 42 65 6e 65 66 69 74 73 22 2c 22 69 64 22 3a 31 34 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 77 61 67 65 2d 61 6e 64 2d 68 6f 75 72 2f 6d 69 6e 69 6d 75 6d 2d 77 61 67 65 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c 22 74 69 Data Ascii: are-benefits/","title":"Health Care Benefits","id":14},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/minimum-wage/","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/","ti
2024-04-18 17:16:00 UTC	1452	IN	Data Raw: 32 30 62 32 0d 0a 67 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 45 45 4f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 65 6f 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 65 65 20 42 65 6e 65 66 69 74 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 62 65 6e 65 66 69 74 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 65 65 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 65 61 6c 74 68 20 61 6e 64 20 53 61 66 65 74 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 65 61 6c 74 68 2d 61 6e 64 2d 73 61 66 65 74 79 Data Ascii: 20b2gations/"},{"text":"EEO","urlSlug":"/tasks/eeo/"},{"text":"Employee Benefits","urlSlug":"/tasks/employee-benefits/"},{"text":"Employee Relations","urlSlug":"/tasks/employee-relations/"},{"text":"Health and Safety","urlSlug":"/tasks/health-and-safety
2024-04-18 17:16:00 UTC	1452	IN	Data Raw: 22 3a 22 65 6d 70 6c 6f 79 6d 65 6e 74 2d 6c 61 77 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 6d 65 6e 74 20 4c 61 77 20 47 75 69 64 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 6d 70 6c 6f 79 6d 65 6e 74 2d 6c 61 77 2d 67 75 69 64 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 2c 22 74 65 78 74 22 3a 22 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 6d 61 6e 75 61 6c 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 62 65 73 74 2d 70 72 61 63 74 69 63 65 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 4c 65 61 64 69 6e 67 20 50 72 61 63 74 69 63 65 20 47 75 69 64 65 73 22 2c 22 75 72 6c 53 6c 75 67 Data Ascii: ":"employment-law-manual","text":"Employment Law Guide","urlSlug":"/employment-law-guide/"},{"cssClass":"international","text":"International","urlSlug":"/international-manual/"},{"cssClass":"best-practice-manual","text":"Leading Practice Guides","urlSlug
2024-04-18 17:16:00 UTC	1452	IN	Data Raw: 67 22 3a 22 2f 74 72 61 69 6e 69 6e 67 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4e 65 77 73 20 61 6e 64 20 55 70 64 61 74 65 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 2d 75 70 64 61 74 65 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 33 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 22 2c 22 74 65 78 74 22 3a 22 45 64 69 74 6f 72 27 73 20 43 68 6f 69 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 22 2c 22 74 65 78 74 22 3a 22 4e 65 77 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6e 65 77 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 51 Data Ascii: g":"/training/"}]},{"name":"News and Updates","cssClass":"news-updates","dropDownPosition":3,"toolLinks":[{"cssClass":"editors-choice","text":"Editor's Choice","urlSlug":"/editors-choice/"},{"cssClass":"news","text":"News","urlSlug":"/news/"}]},{"name":"Q
2024-04-18 17:16:00 UTC	1452	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 63 75 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 6f 6e 6e 65 63 74 69 63 75 74 2f 43 54 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 44 65 6c 61 77 61 72 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 65 6c 61 77 61 72 65 2f 44 45 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 44 69 73 74 72 69 63 74 20 6f 66 20 43 6f 6c 75 6d 62 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 69 73 74 72 69 63 74 2d 6f 66 2d 63 6f 6c 75 6d 62 69 61 2f 55 53 57 44 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 46 6c 6f 72 69 64 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 Data Ascii: Connecticut","urlSlug":"/jurisdictions/connecticut/CT/"},{"text":"Delaware","urlSlug":"/jurisdictions/delaware/DE/"},{"text":"District of Columbia","urlSlug":"/jurisdictions/district-of-columbia/USWDC/"},{"text":"Florida","urlSlug":"/jurisdictions/florida
2024-04-18 17:16:00 UTC	1452	IN	Data Raw: 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 4a 65 72 73 65 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 6a 65 72 73 65 79 2f 4e 4a 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 4d 65 78 69 63 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 6d 65 78 69 63 6f 2f 4e 4d 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 4e 59 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 63 61 72 6f 6c 69 6e 61 Data Ascii: },{"text":"New Jersey","urlSlug":"/jurisdictions/new-jersey/NJ/"},{"text":"New Mexico","urlSlug":"/jurisdictions/new-mexico/NM/"},{"text":"New York","urlSlug":"/jurisdictions/new-york/NY/"},{"text":"North Carolina","urlSlug":"/jurisdictions/north-carolina
2024-04-18 17:16:00 UTC	1118	IN	Data Raw: 2f 6d 61 72 79 6c 61 6e 64 2f 62 61 6c 74 69 6d 6f 72 65 2f 4d 44 31 30 39 35 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 68 69 63 61 67 6f 2c 20 49 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 69 6c 6c 69 6e 6f 69 73 2f 63 68 69 63 61 67 6f 2f 49 4c 31 31 34 39 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4c 6f 73 20 41 6e 67 65 6c 65 73 2c 20 43 41 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 61 6c 69 66 6f 72 6e 69 61 2f 6c 6f 73 2d 61 6e 67 65 6c 65 73 2f 43 41 31 31 34 36 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4d 69 61 6d 69 2d 44 61 64 65 20 43 6f 75 6e 74 79 2c 20 46 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 6d 69 Data Ascii: /maryland/baltimore/MD1095"},{"text":"Chicago, IL","urlSlug":"/jurisdictions/illinois/chicago/IL1149"},{"text":"Los Angeles, CA","urlSlug":"/jurisdictions/california/los-angeles/CA1146"},{"text":"Miami-Dade County, FL","urlSlug":"/jurisdictions/florida/mi
2024-04-18 17:16:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49931	108.177.122.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	1081	OUT	GET /pagead/1p-user-list/950188369/?random=1713460559129&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqHU9SbkGTH_-Gbt1q8QIq2sHFtyLdvcxkQesG-_-qsCPPEy_G&random=4245107337&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:00 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:00 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49935	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:00 UTC	519	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460559195 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:01 UTC	542	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:01 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: /cPm9O4mT5Q= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-0b5e6a6cf.edge-va6.demdex.com 2 ms
2024-04-18 17:16:01 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49937	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:01 UTC	2444	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
2024-04-18 17:16:01 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:01 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 56-26203541-26203617 NNNY CT(13 20 0) RT(1713460560361 331) q(0 0 0 -1) r(1 1) U24
2024-04-18 17:16:01 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49939	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:01 UTC	835	OUT	GET /pagead/1p-user-list/950188369/?random=1713460559129&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqHU9SbkGTH_-Gbt1q8QIq2sHFtyLdvcxkQesG-_-qsCPPEy_G&random=4245107337&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:01 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:01 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:01 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49938	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:01 UTC	2296	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A15%3A59+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93
2024-04-18 17:16:01 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:01 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 58-31089393-31089462 NNNY CT(13 24 0) RT(1713460560455 214) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:16:01 UTC	1142	IN	Data Raw: 32 66 66 36 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 Data Ascii: 2ff6{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Su
2024-04-18 17:16:01 UTC	1452	IN	Data Raw: 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f Data Ascii: ary":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}],"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigatio
2024-04-18 17:16:01 UTC	1452	IN	Data Raw: 68 2d 63 61 72 65 2d 62 65 6e 65 66 69 74 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 43 61 72 65 20 42 65 6e 65 66 69 74 73 22 2c 22 69 64 22 3a 31 34 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 77 61 67 65 2d 61 6e 64 2d 68 6f 75 72 2f 6d 69 6e 69 6d 75 6d 2d 77 61 67 65 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c Data Ascii: h-care-benefits/","title":"Health Care Benefits","id":14},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/minimum-wage/","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/",
2024-04-18 17:16:01 UTC	1452	IN	Data Raw: 65 65 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 65 61 6c 74 68 20 61 6e 64 20 53 61 66 65 74 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 65 61 6c 74 68 2d 61 6e 64 2d 73 61 66 65 74 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 69 72 69 6e 67 20 61 6e 64 20 4f 6e 62 6f 61 72 64 69 6e 67 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 69 72 69 6e 67 2d 61 6e 64 2d 6f 6e 62 6f 61 72 64 69 6e 67 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 52 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 72 2d 61 64 6d 69 6e 69 73 74 72 61 Data Ascii: ee Relations","urlSlug":"/tasks/employee-relations/"},{"text":"Health and Safety","urlSlug":"/tasks/health-and-safety/"},{"text":"Hiring and Onboarding","urlSlug":"/tasks/hiring-and-onboarding/"},{"text":"HR Administration","urlSlug":"/tasks/hr-administra
2024-04-18 17:16:01 UTC	1452	IN	Data Raw: 6e 61 6c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 6d 61 6e 75 61 6c 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 62 65 73 74 2d 70 72 61 63 74 69 63 65 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 4c 65 61 64 69 6e 67 20 50 72 61 63 74 69 63 65 20 47 75 69 64 65 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6c 65 61 64 69 6e 67 2d 70 72 61 63 74 69 63 65 2d 67 75 69 64 65 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 6d 70 6c 61 74 65 73 20 61 6e 64 20 50 6f 73 74 65 72 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 74 65 6d 70 6c 61 74 65 73 2d 61 6e 64 2d 70 6f 73 74 65 72 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 Data Ascii: nal","urlSlug":"/international-manual/"},{"cssClass":"best-practice-manual","text":"Leading Practice Guides","urlSlug":"/leading-practice-guides/"}]},{"name":"Templates and Posters","cssClass":"templates-and-posters","dropDownPosition":1,"toolLinks":[{"cs
2024-04-18 17:16:01 UTC	1452	IN	Data Raw: 78 74 22 3a 22 45 64 69 74 6f 72 27 73 20 43 68 6f 69 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 22 2c 22 74 65 78 74 22 3a 22 4e 65 77 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6e 65 77 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 51 75 69 63 6b 20 52 65 66 65 72 65 6e 63 65 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 71 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 34 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 66 61 71 73 22 2c 22 74 65 78 74 22 3a 22 46 41 51 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 66 61 71 2f 22 7d 2c 7b 22 63 73 73 43 6c Data Ascii: xt":"Editor's Choice","urlSlug":"/editors-choice/"},{"cssClass":"news","text":"News","urlSlug":"/news/"}]},{"name":"Quick Reference","cssClass":"quick-reference","dropDownPosition":4,"toolLinks":[{"cssClass":"faqs","text":"FAQs","urlSlug":"/faq/"},{"cssCl
2024-04-18 17:16:01 UTC	1452	IN	Data Raw: 43 6f 6c 75 6d 62 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 69 73 74 72 69 63 74 2d 6f 66 2d 63 6f 6c 75 6d 62 69 61 2f 55 53 57 44 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 46 6c 6f 72 69 64 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 46 4c 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 67 65 6f 72 67 69 61 2f 47 41 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 61 77 61 69 69 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 68 61 77 61 69 69 2f 48 49 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 64 61 68 6f 22 2c 22 Data Ascii: Columbia","urlSlug":"/jurisdictions/district-of-columbia/USWDC/"},{"text":"Florida","urlSlug":"/jurisdictions/florida/FL/"},{"text":"Georgia","urlSlug":"/jurisdictions/georgia/GA/"},{"text":"Hawaii","urlSlug":"/jurisdictions/hawaii/HI/"},{"text":"Idaho","
2024-04-18 17:16:01 UTC	1452	IN	Data Raw: 22 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 4e 59 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 63 61 72 6f 6c 69 6e 61 2f 4e 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 64 61 6b 6f 74 61 2f 4e 44 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 68 69 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6f 68 69 6f 2f 4f 48 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 6b Data Ascii: "New York","urlSlug":"/jurisdictions/new-york/NY/"},{"text":"North Carolina","urlSlug":"/jurisdictions/north-carolina/NC/"},{"text":"North Dakota","urlSlug":"/jurisdictions/north-dakota/ND/"},{"text":"Ohio","urlSlug":"/jurisdictions/ohio/OH/"},{"text":"Ok
2024-04-18 17:16:01 UTC	980	IN	Data Raw: 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 61 6c 69 66 6f 72 6e 69 61 2f 6c 6f 73 2d 61 6e 67 65 6c 65 73 2f 43 41 31 31 34 36 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4d 69 61 6d 69 2d 44 61 64 65 20 43 6f 75 6e 74 79 2c 20 46 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 6d 69 61 6d 69 2d 64 61 64 65 2d 63 6f 75 6e 74 79 2f 46 4c 30 34 30 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 2c 20 4e 59 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 6e 65 77 2d 79 6f 72 6b 2d 63 69 74 79 2f 4e 59 31 30 33 37 22 7d 2c 7b 22 74 65 78 74 22 3a 22 50 68 69 6c 61 64 65 6c 70 68 69 61 2c 20 50 41 22 2c 22 Data Ascii: :"/jurisdictions/california/los-angeles/CA1146"},{"text":"Miami-Dade County, FL","urlSlug":"/jurisdictions/florida/miami-dade-county/FL040"},{"text":"New York City, NY","urlSlug":"/jurisdictions/new-york/new-york-city/NY1037"},{"text":"Philadelphia, PA","
2024-04-18 17:16:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49944	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:02 UTC	642	OUT	GET / HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:02 UTC	1075	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210485 Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Set-Cookie: united_states#lang=en-US; path=/; secure; SameSite=None Set-Cookie: shell#lang=en; path=/; secure; SameSite=None Set-Cookie: ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; path=/; secure; HttpOnly; SameSite=None Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False; expires=Sun, 16-Apr-2034 17:16:02 GMT; path=/; secure; HttpOnly; SameSite=None Xhost: SC102CD1 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Date: Thu, 18 Apr 2024 17:16:02 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120118-DFW, cache-pdk-kfty2130061-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460562.489904,VS0,VE262 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 74 61 72 67 65 74 2d 64 65 6e 73 69 74 79 44 70 69 3d 64 65 76 69 63 65 2d 64 70 69 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, target-densityDpi=device-dpi, initial-scale=1, user-scalable=no
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 37 33 39 38 38 38 37 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 70 72 65 6c 6f 61 64 27 20 61 73 3d 27 73 74 79 6c 65 27 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 2f 31 2e 31 32 2e 31 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6d 69 6e 2e 63 73 73 27 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 20 7c 20 54 72 61 6e 73 66 6f 72 6d 20 59 6f 75 72 20 52 69 73 6b 20 44 65 63 69 73 69 6f 6e 20 4d 61 6b 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 Data Ascii: 7398887" rel="stylesheet" /> <link rel='preload' as='style' href='//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css'> <title>LexisNexis Risk Solutions \| Transform Your Risk Decision Making</title>
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 0d 0a 7b 0d 0a 22 40 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 2c 0d 0a 22 40 74 79 70 65 22 3a 20 22 57 65 62 53 69 74 65 22 2c 0d 0a 22 6e 61 6d 65 22 3a 20 22 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 2c 0d 0a 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 20 7b 0d 0a 22 40 74 79 70 65 22 3a 20 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 0d 0a 22 74 61 72 67 65 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 Data Ascii: <script type="application/ld+json">{"@context": "https://schema.org/","@type": "WebSite","name": "LexisNexis Risk Solutions","url": "https://risk.lexisnexis.com","potentialAction": {"@type": "SearchAction","target": "https://risk.lexi
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 75 73 68 70 2d 69 6e 64 75 73 74 72 79 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 7d 0d 0a 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4a 65 31 55 49 30 61 58 6a 75 56 69 51 44 4a 71 59 6b 67 72 41 5f 38 74 6f 56 55 2d 43 53 58 70 72 55 4d 47 46 32 59 70 44 6c 59 22 20 2f 3e 20 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 42 38 36 45 37 45 42 44 45 36 31 44 44 35 35 39 34 35 46 43 30 39 38 44 44 39 39 35 31 35 39 44 22 20 2f 3e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: c !important;}.ushp-industry {padding-left: 20px;}</style> <meta name="google-site-verification" content="Je1UI0aXjuViQDJqYkgrA_8toVU-CSXprUMGF2YpDlY" /> <meta name="msvalidate.01" content="B86E7EBDE61DD55945FC098DD995159D" />
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 20 73 2e 74 79 70 65 20 3d 20 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 0d 0a 09 09 09 09 20 73 2e 61 73 79 6e 63 20 3d 20 74 72 75 65 3b 20 73 2e 73 72 63 20 3d 20 27 2f 2f 69 6d 67 2e 65 6e 32 35 2e 63 6f 6d 2f 69 2f 65 6c 71 43 66 67 2e 6d 69 6e 2e 6a 73 27 3b 0d 0a 09 09 09 09 20 76 61 72 20 78 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 73 63 72 69 70 74 27 29 5b 30 5d 3b 20 78 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 73 2c 20 78 29 3b 0d 0a 09 09 09 09 20 7d 0d 0a 09 09 09 09 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 Data Ascii: ement('script'); s.type = 'text/javascript'; s.async = true; s.src = '//img.en25.com/i/elqCfg.min.js'; var x = document.getElementsByTagName('script')[0]; x.parentNode.insertBefore(s, x); } if (window.addEventListener) window.addEv
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 47 72 6f 75 70 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 67 72 6f 75 70 49 73 41 63 74 69 76 65 20 3d 20 4f 70 74 61 6e 6f 6e 41 63 74 69 76 65 47 72 6f 75 70 73 2e 69 6e 64 65 78 4f 66 28 65 6c 6f 71 75 61 43 6f 6f 6b 69 65 47 72 6f 75 70 29 20 21 3d 20 2d 31 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 53 65 74 45 6c 6f 71 75 61 54 72 61 63 6b 69 6e 67 28 67 72 6f 75 70 49 73 41 63 74 69 76 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d Data Ascii: Group !== null) { var groupIsActive = OptanonActiveGroups.indexOf(eloquaCookieGroup) != -1; SetEloquaTracking(groupIsActive); } } }
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 72 65 2d 68 61 6d 62 75 72 67 65 72 20 6e 61 76 62 61 72 2d 74 6f 67 67 6c 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 54 6f 67 67 6c 65 20 6e 61 76 69 67 61 74 69 6f 6e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 62 61 72 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 62 61 72 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e Data Ascii: re-hamburger navbar-toggle"> <span class="sr-only">Toggle navigation</span> <span class="icon-bar"></span> <span class="icon-bar"></span> <span class="icon
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 4d 31 38 53 5a 52 58 54 4d 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 43 6f 6e 74 65 78 74 4c 61 6e 67 75 61 67 65 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 65 6e 2d 55 53 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 53 75 67 67 65 73 74 69 6f 6e 73 4c 69 6d 69 74 26 71 75 6f 74 3b 3a 35 2c 26 71 75 6f 74 3b 4e 6f 53 75 67 67 65 73 74 69 6f 6e 73 54 65 78 74 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 4e 6f 20 52 65 73 75 6c 74 73 26 71 75 6f 74 3b 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 53 65 61 72 63 68 2f 47 6c 6f 62 61 6c 53 65 61 72 63 68 42 6f 78 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 3e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 77 72 61 70 70 65 72 22 3e 0d 0a 20 20 Data Ascii: M18SZRXTM","ContextLanguage":"en-US","SuggestionsLimit":5,"NoSuggestionsText":"No Results"}" data-ux-module="Search/GlobalSearchBox" data-ux-state="pending"> <div class="global-search-wrapper">
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 4d 6f 64 61 6c 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 69 64 3d 22 6d 6f 64 61 6c 2d 37 64 34 65 36 64 62 34 2d 39 30 38 32 2d 34 61 38 37 2d 61 35 62 66 2d 39 39 31 32 36 38 65 61 38 36 63 63 22 20 72 6f 6c 65 3d 22 64 69 61 6c 6f 67 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 3e 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 20 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 63 6f 6e 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 68 65 61 64 65 72 22 20 69 64 3d 22 6d 6f 64 Data Ascii: bootstrap/Components/Modal" data-ux-state="pending" id="modal-7d4e6db4-9082-4a87-a5bf-991268ea86cc" role="dialog" tabindex="-1"> <div class="modal-dialog "> <div class="modal-content"> <div class="modal-header" id="mod
2024-04-18 17:16:02 UTC	1379	IN	Data Raw: 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 2e 75 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 75 6b 2d 66 6c 61 67 32 32 78 31 36 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 55 6e 69 74 65 64 20 4b 69 6e 67 64 6f 6d 20 2d 20 45 6e 67 6c 69 73 68 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 Data Ascii: nding" href="https://risk.lexisnexis.co.uk"><span class="sprite-image"> <span class="icon-uk-flag22x16"></span></span><span class="" >United Kingdom - English</span></a></div><div class="score-left-text " > <a class="score-composite-link"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49945	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:02 UTC	741	OUT	GET /Areas/LNRS/css/main.css?v=638484963597398887 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:02 UTC	685	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2443200 Content-Type: text/css Last-Modified: Fri, 12 Apr 2024 05:11:12 GMT ETag: "058dd6978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 113424 Date: Thu, 18 Apr 2024 17:16:02 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120047-DFW, cache-pdk-kfty2130045-PDK X-Cache: HIT, HIT X-Cache-Hits: 7, 0 X-Timer: S1713460563.925953,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:02 UTC	16384	IN	Data Raw: ef bb bf 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 40 69 6d 70 Data Ascii: /! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */@imp
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 34 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 35 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 35 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 62 6f 74 74 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 35 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 32 35 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6e 73 6f 6c 65 3a 62 65 66 6f 72 65 7b 63 6f Data Ascii: ign-right:before{content:"\e249"}.glyphicon-triangle-right:before{content:"\e250"}.glyphicon-triangle-left:before{content:"\e251"}.glyphicon-triangle-bottom:before{content:"\e252"}.glyphicon-triangle-top:before{content:"\e253"}.glyphicon-console:before{co
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 6f 6e 64 65 6e 73 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 70 61 64 64 69 6e 67 3a 35 70 78 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 7d 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 68 65 61 64 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 62 6f 64 79 3e 74 72 3e 74 64 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 68 2c 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 3e 74 66 6f 6f 74 3e 74 72 3e 74 64 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 Data Ascii: ondensed>tfoot>tr>td{padding:5px}.table-bordered{border:1px solid #ddd}.table-bordered>thead>tr>th,.table-bordered>thead>tr>td,.table-bordered>tbody>tr>th,.table-bordered>tbody>tr>td,.table-bordered>tfoot>tr>th,.table-bordered>tfoot>tr>td{border:1px solid
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 6f 78 22 5d 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2e 64 69 73 61 62 6c 65 64 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 2e 64 69 73 61 62 6c 65 64 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 72 61 64 69 6f 2e 64 69 73 61 62 6c 65 64 20 6c 61 62 65 6c 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 63 68 65 63 6b 62 6f 78 2e 64 69 73 61 62 6c 65 64 20 6c 61 62 65 6c 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c Data Ascii: ox"]{cursor:not-allowed}.radio-inline.disabled,fieldset[disabled] .radio-inline,.checkbox-inline.disabled,fieldset[disabled] .checkbox-inline{cursor:not-allowed}.radio.disabled label,fieldset[disabled] .radio label,.checkbox.disabled label,fieldset[disabl
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 63 66 38 65 33 7d 2e 68 61 73 2d 77 61 72 6e 69 6e 67 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 63 6f 6c 6f 72 3a 23 38 61 36 64 33 62 7d 2e 68 61 73 2d 65 72 72 6f 72 20 2e 68 65 6c 70 2d 62 6c 6f 63 6b 2c 2e 68 61 73 2d 65 72 72 6f 72 20 2e 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 2c 2e 68 61 73 2d 65 72 72 6f 72 20 2e 72 61 64 69 6f 2c 2e 68 61 73 2d 65 72 72 6f 72 20 2e 63 68 65 63 6b 62 6f 78 2c 2e 68 61 73 2d 65 72 72 6f 72 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 65 72 72 6f 72 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 65 72 72 6f 72 2e 72 61 64 69 6f 20 6c 61 62 65 6c 2c 2e 68 61 73 2d 65 72 72 6f 72 2e 63 68 65 63 6b 62 Data Ascii: ackground-color:#fcf8e3}.has-warning .form-control-feedback{color:#8a6d3b}.has-error .help-block,.has-error .control-label,.has-error .radio,.has-error .checkbox,.has-error .radio-inline,.has-error .checkbox-inline,.has-error.radio label,.has-error.checkb
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 74 6f 6e 2d 6d 65 6e 75 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2c 2e 73 63 6f 72 65 2d 73 70 6c 69 74 2d 62 75 74 74 6f 6e 2d 6d 65 6e 75 20 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 73 63 6f 72 65 2d 61 6c 65 72 74 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 6f 70 61 63 69 74 79 3a 2e 36 35 3b 66 69 6c 74 65 72 3a 61 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 36 35 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 61 2e 62 74 6e 2e 64 69 73 61 62 6c 65 64 2c 61 2e 64 69 73 61 62 6c 65 64 2e 73 63 6f 72 65 2d 62 75 74 74 6f 6e 2c 2e Data Ascii: ton-menu .dropdown-toggle,.score-split-button-menu fieldset[disabled] .dropdown-toggle,fieldset[disabled] .score-alert{cursor:not-allowed;opacity:.65;filter:alpha(opacity=65);-webkit-box-shadow:none;box-shadow:none}a.btn.disabled,a.disabled.score-button,.
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 66 65 65 64 20 2e 73 63 6f 72 65 2d 6c 69 73 74 2d 67 72 6f 75 70 20 61 20 2e 63 61 70 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 74 73 20 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 74 73 2d 2d 69 74 65 6d 3e 64 69 76 20 61 5b 63 6c 61 73 73 2a 3d 22 69 74 65 6d 2d 6c 69 6e 6b 22 5d 3a 61 63 74 69 76 65 2c 2e 61 69 73 2d 68 69 74 73 20 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 74 73 2d 2d 69 74 65 6d 3e 64 69 76 20 61 5b 63 6c 61 73 73 2a 3d 22 69 74 65 6d 2d 6c 69 6e 6b 22 5d 3a 61 63 74 69 76 65 2c 2e 73 63 6f 72 65 2d 73 70 6c 69 74 2d 62 75 74 74 6f 6e 2d 6d 65 6e 75 20 2e 64 72 6f 70 64 6f 77 Data Ascii: feed .score-list-group a .caption .score-call-to-action .score-button:active,.ais-infinite-hits .ais-infinite-hits--item>div a[class="item-link"]:active,.ais-hits .ais-infinite-hits--item>div a[class="item-link"]:active,.score-split-button-menu .dropdow
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 3a 23 35 62 63 30 64 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 61 64 34 65 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 65 61 32 33 36 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 63 39 37 31 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 39 38 35 66 30 64 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 63 39 37 31 66 3b 62 6f 72 64 Data Ascii: :#5bc0de;background-color:#fff}.btn-warning{color:#fff;background-color:#f0ad4e;border-color:#eea236}.btn-warning:focus,.btn-warning.focus{color:#fff;background-color:#ec971f;border-color:#985f0d}.btn-warning:hover{color:#fff;background-color:#ec971f;bord
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 2d 61 63 74 69 6f 6e 20 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 73 63 6f 72 65 2d 68 69 67 68 6c 69 67 68 74 2e 68 69 67 68 6c 69 67 68 74 2d 63 61 72 64 20 2e 63 61 70 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 2e 6c 65 61 72 6e 6d 6f 72 65 20 73 70 61 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 6c 65 61 72 6e 6d 6f 72 65 20 2e 73 63 6f 72 65 2d 68 69 67 68 6c 69 67 68 74 2e 68 69 67 68 6c 69 67 68 74 2d 63 61 72 64 20 2e 63 61 70 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 73 70 61 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 73 63 6f 72 65 2d 68 69 67 68 6c 69 67 68 74 2e 68 69 67 68 6c 69 67 68 74 2d 63 61 72 64 20 2e 63 61 70 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 63 61 6c 6c Data Ascii: -action button[disabled],.score-highlight.highlight-card .caption .score-call-to-action .learnmore span[disabled],.learnmore .score-highlight.highlight-card .caption .score-call-to-action span[disabled],.score-highlight.highlight-card .caption .score-call
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 2d 69 74 65 6d 3e 64 69 76 20 2e 6c 69 67 68 74 2d 73 6c 69 64 65 72 20 2e 73 63 6f 72 65 2d 68 69 67 68 6c 69 67 68 74 20 2e 63 61 70 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 61 5b 63 6c 61 73 73 2a 3d 22 69 74 65 6d 2d 6c 69 6e 6b 22 5d 3a 68 6f 76 65 72 2c 2e 6c 69 67 68 74 2d 73 6c 69 64 65 72 20 2e 73 63 6f 72 65 2d 68 69 67 68 6c 69 67 68 74 20 2e 63 61 70 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 2e 61 69 73 2d 68 69 74 73 20 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 74 73 2d 2d 69 74 65 6d 3e 64 69 76 20 61 5b 63 6c 61 73 73 2a 3d 22 69 74 65 6d 2d 6c 69 6e 6b 22 5d 3a 68 6f 76 65 72 2c 2e 61 69 73 2d 68 69 74 73 20 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 Data Ascii: -item>div .light-slider .score-highlight .caption .score-call-to-action a[class="item-link"]:hover,.light-slider .score-highlight .caption .score-call-to-action .ais-hits .ais-infinite-hits--item>div a[class="item-link"]:hover,.ais-hits .ais-infinite-hi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49946	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	722	OUT	GET /layouts/system/VisitorIdentification.js HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:03 UTC	698	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3091 Content-Type: application/javascript Last-Modified: Wed, 20 Oct 2021 21:45:02 GMT ETag: "08375bcfbc5d71:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 554833 Date: Thu, 18 Apr 2024 17:16:03 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210115-DFW, cache-pdk-kfty2130073-PDK X-Cache: HIT, HIT X-Cache-Hits: 17, 0 X-Timer: S1713460563.238844,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: ef bb bf 66 75 6e 63 74 69 6f 6e 20 73 75 62 73 63 72 69 62 65 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 20 7b 0d 0a 20 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 20 65 6c 73 65 20 69 66 20 28 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 61 74 74 61 63 68 45 76 65 6e 74 28 65 76 65 6e 74 2c 20 6c 69 73 74 65 6e 65 72 2c 20 75 73 65 43 61 70 74 75 72 65 29 3b 0d 0a 20 20 7d 0d 0a Data Ascii: function subscribeEvent(event, listener, useCapture) { if (document.addEventListener) { document.addEventListener(event, listener, useCapture); } else if (document.attachEvent) { document.attachEvent(event, listener, useCapture); }
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: 6e 63 74 69 6f 6e 20 70 6c 61 63 65 43 73 73 41 73 70 78 52 65 71 75 65 73 74 28 29 20 7b 0d 0a 20 20 76 61 72 20 73 74 31 20 3d 20 67 65 74 56 69 72 74 75 61 6c 46 6f 6c 64 65 72 28 29 3b 0d 0a 20 20 76 61 72 20 73 74 32 20 3d 20 22 6c 61 79 6f 75 74 73 2f 73 79 73 74 65 6d 2f 56 69 73 69 74 6f 72 49 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 43 53 53 2e 61 73 70 78 22 3b 0d 0a 20 20 76 61 72 20 73 74 33 20 3d 20 61 64 64 54 73 74 61 6d 70 41 6e 64 53 69 74 65 54 6f 51 75 65 72 79 53 74 72 69 6e 67 28 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 29 3b 0d 0a 0d 0a 20 20 76 61 72 20 66 69 6c 65 72 65 66 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6c 69 6e 6b 27 29 3b 0d 0a 20 20 66 69 6c 65 72 65 66 2e 73 65 Data Ascii: nction placeCssAspxRequest() { var st1 = getVirtualFolder(); var st2 = "layouts/system/VisitorIdentificationCSS.aspx"; var st3 = addTstampAndSiteToQueryString(new Date().getTime()); var fileref = document.createElement('link'); fileref.se
2024-04-18 17:16:03 UTC	333	IN	Data Raw: 69 6e 67 20 3d 20 22 3f 22 20 2b 20 74 69 6d 65 73 74 61 6d 70 50 61 72 61 6d 3b 0d 0a 20 20 69 66 20 28 73 69 74 65 4e 61 6d 65 50 61 72 61 6d 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0d 0a 20 20 20 20 71 75 65 72 79 53 74 72 69 6e 67 20 3d 20 71 75 65 72 79 53 74 72 69 6e 67 20 2b 20 22 26 22 20 2b 20 73 69 74 65 4e 61 6d 65 50 61 72 61 6d 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 72 65 74 75 72 6e 20 71 75 65 72 79 53 74 72 69 6e 67 3b 0d 0a 7d 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 74 56 69 72 74 75 61 6c 46 6f 6c 64 65 72 28 29 20 7b 0d 0a 20 20 76 61 72 20 76 69 72 74 75 61 6c 46 6f 6c 64 65 72 20 3d 20 67 65 74 4d 65 74 61 74 61 67 43 6f 6e 74 65 6e 74 28 22 56 69 72 74 75 61 6c 46 6f 6c 64 65 72 22 29 3b 0d 0a 20 20 69 66 20 28 76 69 72 74 75 61 6c 46 Data Ascii: ing = "?" + timestampParam; if (siteNameParam !== null) { queryString = queryString + "&" + siteNameParam; } return queryString;}function getVirtualFolder() { var virtualFolder = getMetatagContent("VirtualFolder"); if (virtualF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49948	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	592	OUT	GET /ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:03 UTC	934	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:03 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ea3-32ed" Last-Modified: Mon, 04 May 2020 16:11:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Tue, 08 Apr 2025 17:16:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pZqtuszTv4MWuob%2FCLPgJAZ7ATunfQG99UPrIwY7MlmjS3Cdvbl0Ac19h0aC1u47%2B0wSuXvJiHlT6gEZk5y37a2KMr%2BkBygtyEyn1o9Huiu6Xc5ekAXT1mbyCONX9gM8UiSPCSf%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664ce92f4753d3-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:03 UTC	435	IN	Data Raw: 33 32 65 64 0d 0a 2f 2a 21 20 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 20 31 2e 31 32 2e 31 20 7c 20 c2 a9 20 41 6c 67 6f 6c 69 61 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 6c 67 6f 6c 69 61 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 20 2a 2f 2e 61 69 73 2d 73 65 61 72 63 68 2d 62 6f 78 2d 2d 70 6f 77 65 72 65 64 2d 62 79 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 7d 2e 61 69 73 2d 73 65 61 72 63 68 2d 62 6f 78 2d 2d 70 6f 77 65 72 65 64 2d 62 79 2d 6c 69 6e 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f Data Ascii: 32ed/! instantsearch.js 1.12.1 \| Algolia Inc. and other contributors; Licensed MIT \| github.com/algolia/instantsearch.js /.ais-search-box--powered-by{font-size:.8em;text-align:right;margin-top:2px}.ais-search-box--powered-by-link{display:inline-blo
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 20 31 38 22 3e 3c 64 65 66 73 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 20 78 31 3d 22 2d 33 36 2e 38 36 38 25 22 20 78 32 3d 22 31 32 39 2e 34 33 32 25 22 20 79 31 3d 22 31 33 34 2e 39 33 36 25 22 20 79 32 3d 22 2d 32 37 2e 37 25 22 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 30 30 41 45 46 46 22 20 6f 66 66 73 65 74 3d 22 30 25 22 2f 3e 3c 73 74 6f 70 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 33 33 36 39 45 37 22 20 6f 66 66 73 65 74 3d 22 31 30 30 25 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 3e 3c 2f 64 65 66 73 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 75 72 6c 28 23 61 29 22 20 64 3d 22 4d 35 Data Ascii: 18"><defs><linearGradient id="a" x1="-36.868%" x2="129.432%" y1="134.936%" y2="-27.7%"><stop stop-color="#00AEFF" offset="0%"/><stop stop-color="#3369E7" offset="100%"/></linearGradient></defs><g fill="none" fill-rule="evenodd"><path fill="url(#a)" d="M5
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 2e 33 37 34 20 30 20 30 20 31 2d 2e 38 34 2e 33 31 37 20 34 2e 31 35 20 34 2e 31 35 20 30 20 30 20 31 2d 31 2e 32 2e 31 36 20 34 2e 35 31 35 20 34 2e 35 31 35 20 30 20 30 20 31 2d 31 2e 36 32 2d 2e 32 38 20 33 2e 33 38 35 20 33 2e 33 38 35 20 30 20 30 20 31 2d 31 2e 32 36 2d 2e 38 31 20 33 2e 37 34 34 20 33 2e 37 34 34 20 30 20 30 20 31 2d 2e 38 31 2d 31 2e 33 35 63 2d 2e 31 39 2d 2e 35 34 2d 2e 32 39 2d 31 2e 35 2d 2e 32 39 2d 32 2e 32 31 20 30 2d 2e 36 36 2e 31 2d 31 2e 34 39 2e 33 31 2d 32 2e 30 35 61 33 2e 39 32 35 20 33 2e 39 32 35 20 30 20 30 20 31 20 2e 39 2d 31 2e 34 33 20 34 2e 31 32 34 20 34 2e 31 32 34 20 30 20 30 20 31 20 31 2e 34 34 2d 2e 39 32 20 35 2e 33 31 20 35 2e 33 31 20 30 20 30 20 31 20 31 2e 39 35 2d 2e 33 36 63 2e 36 39 20 30 20 31 Data Ascii: .374 0 0 1-.84.317 4.15 4.15 0 0 1-1.2.16 4.515 4.515 0 0 1-1.62-.28 3.385 3.385 0 0 1-1.26-.81 3.744 3.744 0 0 1-.81-1.35c-.19-.54-.29-1.5-.29-2.21 0-.66.1-1.49.31-2.05a3.925 3.925 0 0 1 .9-1.43 4.124 4.124 0 0 1 1.44-.92 5.31 5.31 0 0 1 1.95-.36c.69 0 1
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 32 20 31 2e 30 32 63 2e 37 30 37 20 30 20 31 2e 33 30 34 2e 30 39 20 31 2e 37 38 36 2e 32 36 2e 34 39 2e 31 38 2e 38 38 2e 34 32 20 31 2e 31 36 2e 37 33 2e 32 39 2e 33 32 2e 34 39 2e 37 34 2e 36 31 20 31 2e 31 39 2e 31 33 2e 34 35 2e 31 39 2e 39 34 2e 31 39 20 31 2e 34 38 76 35 2e 34 38 61 32 35 2e 32 34 20 32 35 2e 32 34 20 30 20 30 20 31 2d 31 2e 34 39 2e 32 35 63 2d 2e 36 37 2e 31 2d 31 2e 34 32 2e 31 35 2d 32 2e 32 35 2e 31 35 61 36 2e 38 33 20 36 2e 38 33 20 30 20 30 20 31 2d 31 2e 35 32 2d 2e 31 36 20 33 2e 32 31 33 20 33 2e 32 31 33 20 30 20 30 20 31 2d 31 2e 31 37 2d 2e 35 31 20 32 2e 34 35 35 20 32 2e 34 35 35 20 30 20 30 20 31 2d 2e 37 36 2d 2e 39 63 2d 2e 31 38 2d 2e 33 37 2d 2e 32 37 2d 2e 38 39 2d 2e 32 37 2d 31 2e 34 34 20 30 2d 2e 35 32 2e Data Ascii: 2 1.02c.707 0 1.304.09 1.786.26.49.18.88.42 1.16.73.29.32.49.74.61 1.19.13.45.19.94.19 1.48v5.48a25.24 25.24 0 0 1-1.49.25c-.67.1-1.42.15-2.25.15a6.83 6.83 0 0 1-1.52-.16 3.213 3.213 0 0 1-1.17-.51 2.455 2.455 0 0 1-.76-.9c-.18-.37-.27-.89-.27-1.44 0-.52.
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 31 38 35 20 37 2e 37 33 33 63 2e 36 35 37 20 30 20 31 2e 31 34 35 2d 2e 30 33 20 31 2e 34 38 34 2d 2e 31 76 2d 32 2e 31 37 61 35 2e 30 39 37 20 35 2e 30 39 37 20 30 20 30 20 30 2d 31 2e 39 38 2d 2e 31 63 2d 2e 32 34 2e 30 33 34 2d 2e 34 36 2e 31 2d 2e 36 35 2e 31 39 61 31 2e 31 36 37 20 31 2e 31 36 37 20 30 20 30 20 30 2d 2e 34 37 2e 33 39 34 63 2d 2e 31 32 2e 31 37 2d 2e 31 38 2e 32 36 37 2d 2e 31 38 2e 35 32 33 20 30 20 2e 35 2e 31 37 2e 37 39 2e 34 39 2e 39 38 2e 33 32 2e 31 39 35 2e 37 35 2e 32 39 20 31 2e 32 39 2e 32 39 7a 6d 38 2e 36 38 32 20 31 2e 37 34 63 2d 33 2e 35 31 2e 30 32 2d 33 2e 35 31 2d 32 2e 38 32 2d 33 2e 35 31 2d 33 2e 32 37 4c 38 39 2e 34 36 2e 39 33 6c 32 2e 31 34 33 2d 2e 33 34 76 31 30 63 30 20 2e 32 35 37 20 30 20 31 2e 38 38 20 Data Ascii: 185 7.733c.657 0 1.145-.03 1.484-.1v-2.17a5.097 5.097 0 0 0-1.98-.1c-.24.034-.46.1-.65.19a1.167 1.167 0 0 0-.47.394c-.12.17-.18.267-.18.523 0 .5.17.79.49.98.32.195.75.29 1.29.29zm8.682 1.74c-3.51.02-3.51-2.82-3.51-3.27L89.46.93l2.143-.34v10c0 .257 0 1.88
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 2e 32 2d 31 2e 31 31 37 2e 32 2d 2e 35 38 20 30 2d 31 2e 30 33 2d 2e 31 36 2d 31 2e 33 36 2d 2e 34 37 2d 2e 33 33 2d 2e 33 31 2d 2e 34 39 2d 2e 37 36 2d 2e 34 39 2d 31 2e 33 33 20 30 2d 2e 36 31 2e 32 33 2d 31 2e 30 37 2e 36 38 2d 31 2e 33 38 2e 34 36 2d 2e 33 31 20 31 2e 31 35 2d 2e 34 38 20 32 2e 30 38 2d 2e 35 31 6c 31 2e 30 33 2d 2e 30 33 76 2d 2e 33 32 63 30 2d 2e 33 38 2d 2e 30 39 2d 2e 36 36 2d 2e 32 36 2d 2e 38 35 2d 2e 31 37 2d 2e 31 39 2d 2e 34 35 2d 2e 32 38 2d 2e 38 32 2d 2e 32 38 2d 2e 33 20 30 2d 2e 35 39 2e 30 35 2d 2e 38 37 2e 31 34 61 36 2e 36 38 20 36 2e 36 38 20 30 20 30 20 30 2d 2e 38 2e 33 32 6c 2d 2e 34 31 2d 2e 39 61 34 2e 34 31 34 20 34 2e 34 31 34 20 30 20 30 20 31 20 31 2e 30 35 2d 2e 34 20 34 2e 38 35 36 20 34 2e 38 35 36 20 30 Data Ascii: .2-1.117.2-.58 0-1.03-.16-1.36-.47-.33-.31-.49-.76-.49-1.33 0-.61.23-1.07.68-1.38.46-.31 1.15-.48 2.08-.51l1.03-.03v-.32c0-.38-.09-.66-.26-.85-.17-.19-.45-.28-.82-.28-.3 0-.59.05-.87.14a6.68 6.68 0 0 0-.8.32l-.41-.9a4.414 4.414 0 0 1 1.05-.4 4.856 4.856 0
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 35 2d 2e 32 30 38 20 31 2e 37 33 33 2d 2e 36 32 37 20 32 2e 32 37 36 2d 2e 34 32 2e 35 34 32 2d 31 20 2e 38 31 34 2d 31 2e 37 34 36 2e 38 31 34 2d 2e 37 35 32 20 30 2d 31 2e 33 33 36 2d 2e 32 37 2d 31 2e 37 35 2d 2e 38 31 68 2d 2e 30 38 37 6c 2d 2e 32 33 2e 37 30 33 68 2d 2e 39 34 36 56 34 2e 38 68 31 2e 32 37 76 31 2e 39 39 6c 2d 2e 30 32 2e 36 35 35 2d 2e 30 33 2e 35 35 33 68 2e 30 36 63 2e 34 2d 2e 35 39 2e 39 39 2d 2e 38 38 36 20 31 2e 37 37 2d 2e 38 38 36 7a 6d 2d 2e 33 33 20 31 2e 30 33 63 2d 2e 35 30 37 20 30 2d 2e 38 37 34 2e 31 35 2d 31 2e 30 39 37 2e 34 35 2d 2e 32 32 34 2e 32 39 38 2d 2e 33 34 2e 37 39 38 2d 2e 33 34 36 20 31 2e 35 76 2e 30 38 36 63 30 20 2e 37 32 33 2e 31 31 35 20 31 2e 32 34 37 2e 33 34 34 20 31 2e 35 37 2e 32 33 2e 33 32 35 Data Ascii: 5-.208 1.733-.627 2.276-.42.542-1 .814-1.746.814-.752 0-1.336-.27-1.75-.81h-.087l-.23.703h-.946V4.8h1.27v1.99l-.02.655-.03.553h.06c.4-.59.99-.886 1.77-.886zm-.33 1.03c-.507 0-.874.15-1.097.45-.224.298-.34.798-.346 1.5v.086c0 .723.115 1.247.344 1.57.23.325
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 65 73 75 6c 74 73 2d 64 65 63 6f 72 61 74 69 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 73 62 78 2d 73 66 66 76 5f 5f 69 6e 70 75 74 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 62 33 62 33 62 33 7d 2e 73 62 78 2d 73 66 66 76 5f 5f 69 6e 70 75 74 3a 61 63 74 69 76 65 2c 2e 73 62 78 2d 73 66 66 76 5f 5f 69 6e 70 75 74 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 30 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 31 70 78 20 23 33 33 37 61 62 37 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 73 62 78 2d 73 66 66 76 5f 5f 69 6e 70 75 74 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 73 62 Data Ascii: esults-decoration{display:none}.sbx-sffv__input:hover{box-shadow:inset 0 0 0 1px #b3b3b3}.sbx-sffv__input:active,.sbx-sffv__input:focus{outline:0;box-shadow:inset 0 0 0 1px #337ab7;background:#fff}.sbx-sffv__input::-webkit-input-placeholder{color:#bbb}.sb
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 6f 6e 2d 6e 61 6d 65 3a 73 62 78 2d 72 65 73 65 74 2d 69 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 73 62 78 2d 72 65 73 65 74 2d 69 6e 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 31 35 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 2e 31 35 73 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 62 78 2d 72 65 73 65 74 2d 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 25 2c 30 2c 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 32 30 25 2c 30 2c 30 29 3b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 74 72 61 6e 73 Data Ascii: on-name:sbx-reset-in;animation-name:sbx-reset-in;-webkit-animation-duration:.15s;animation-duration:.15s}@-webkit-keyframes sbx-reset-in{0%{-webkit-transform:translate3d(-20%,0,0);transform:translate3d(-20%,0,0);opacity:0}100%{-webkit-transform:none;trans
2024-04-18 17:16:03 UTC	1369	IN	Data Raw: 74 68 3a 32 30 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 36 61 65 64 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 61 69 73 2d 72 61 6e 67 65 2d 73 6c 69 64 65 72 2d 2d 68 61 6e 64 6c 65 2d 6c 6f 77 65 72 7b 6c 65 66 74 3a 2d 31 30 70 78 3b 62 6f 74 74 6f 6d 3a 37 70 78 7d 2e 61 69 73 2d 72 61 6e 67 65 2d 73 6c 69 64 65 72 2d 2d 68 61 6e 64 6c 65 2d 75 70 70 65 72 7b 72 69 67 68 74 3a 31 30 70 78 3b 62 6f 74 74 6f 6d 3a 37 70 78 7d 2e 61 69 73 2d 72 61 6e 67 65 2d 73 6c 69 64 65 72 2d 2d 74 6f 6f 6c 74 69 Data Ascii: th:20px;height:20px;position:relative;z-index:1;background:#fff;border:1px solid #46aeda;border-radius:50%;cursor:pointer}.ais-range-slider--handle-lower{left:-10px;bottom:7px}.ais-range-slider--handle-upper{right:10px;bottom:7px}.ais-range-slider--toolti

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49952	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	873	OUT	GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=F1DF4E8DA09829A65EEF7AACA0C56D50 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:03 UTC	886	IN	HTTP/1.1 200 OK Connection: close Content-Length: 140804 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="United_For_Wildlife_Carousel jpg.jpg" Content-Type: image/webp Etag: "Chuo9hirVNuJ+KcFDIRpUZg/oPkc+b8RBAHNiS9PE6o" Fastly-Io-Info: ifsz=174179 idim=1230x420 ifmt=jpeg ofsz=140804 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560834 Date: Thu, 18 Apr 2024 17:16:03 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210162-DFW, cache-pdk-kfty2130067-PDK X-Cache: HIT, HIT X-Cache-Hits: 10, 0 X-Timer: S1713460563.372521,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 52 49 46 46 fc 25 02 00 57 45 42 50 56 50 38 20 f0 25 02 00 30 4f 05 9d 01 2a ce 04 a4 01 3e 51 20 8c 44 23 a2 21 21 2e d9 fa 60 70 0a 09 4d 91 36 fb af f7 b8 b6 7e 37 42 1f df fb 90 50 d1 8f 27 04 95 7a 2c 3f 47 f2 a3 ce db a0 dd 5f ff 1b d3 e5 fc ef 75 9e cd fa 34 f2 c7 cf 8b cc 5e 7b 5e 5b bb a3 5d 3f 9b 7f cd f0 78 df f8 ff 2d fd a9 39 77 c4 ef 9e 7e 3f fc df fd 8f 8e bf ec 7f e8 ef 67 e7 3f ea f9 89 7b 57 f4 1f f9 ff ce fe 54 fc e5 ff bf eb 03 fb 77 fa 6f fd 3f e9 bf 7f fe 83 3f ad 7f 8c ff af fe 53 d7 b3 f7 37 df c7 ef 27 a9 1f da df fe 3f e9 3f e5 fc 4e 7f cc ff e5 fe d3 fe c7 c4 3f f0 df f0 ff 6d ff e8 fc 82 ff 75 ff 39 ff c3 da 9b ff 37 ff 5f fa 1f 09 7f de bf e9 ff f3 f7 19 fe 9d fe ef ff 97 b4 97 fe df de 3f 86 cf ef bf f8 ff 76 7f f8 7c 3d 7f Data Ascii: RIFF%WEBPVP8 %0O*>Q D#!!.`pM6~7BP'z,?G_u4^{^[]?x-9w~?g?{WTwo??S7'??N?mu97_?v\|=
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: c0 e7 2f ea 23 3e 9c 5d fc 35 18 9c 80 2a 03 74 6d 6b 1d aa 0f 3d 65 2f fd e2 ef 5b 49 01 e2 62 3d 11 43 ce 83 26 30 e6 17 da f3 0f f8 d2 03 2e 2c ba df 9a 6e 9a 95 13 d6 91 d3 da 80 2c 71 6d 10 ab 29 26 ce 0c cb ac 7c 8b 9c 05 e0 46 50 d7 d3 f9 2b ea 31 c5 22 b3 83 19 9a 0e 85 30 a1 5d 47 17 ce 32 22 53 3f 58 b0 b5 e2 e2 71 49 34 36 02 22 9b 10 c9 de 41 62 12 05 ee 73 70 0c 06 94 c8 0e f9 b6 90 89 32 d7 b5 a0 03 ef d5 70 0a f8 88 4f e9 c2 f3 dc b4 87 e0 5e b7 33 87 13 6c 69 4f 9c 84 4e 40 b9 98 58 d1 fb 13 bd 37 c4 14 f6 2e a7 f5 c5 6c 39 63 8c dc e4 fe f5 60 ad 4f de 9b bd 6c 2c 0a b7 30 74 42 8e 0d 6f 83 10 92 cc ca 01 96 c1 44 d7 ea c6 da 68 bb 7a b7 10 ab e8 49 02 d0 8e ab fd 8c 15 5b 2d 89 86 0d ab 20 ee f6 41 2a e4 a6 ef 10 fd 1f 2a bc c8 b8 22 bc Data Ascii: /#>]5tmk=e/[Ib=C&0.,n,qm)&\|FP+1"0]G2"S?XqI46"Absp2pO^3liON@X7.l9c`Ol,0tBoDhzI[- A*"
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 8e a6 18 bc 7a f3 98 e5 b2 87 18 1c 6b 9e cf 9a 65 2b 90 31 1d e6 d9 61 d7 16 bd f5 08 80 cd 00 e5 4c bb 98 51 ce f9 f0 fe f2 78 ae 2c 6a 5d 09 f5 20 dd d7 f7 32 40 6e 09 3b 7c dd 7e bb 35 63 3d 94 df c3 a1 ce c8 3a 7f 48 01 63 68 db f3 36 5b 4b bd f4 59 f2 21 fb c9 14 da 7c 7b f1 eb 59 b8 cb a7 6a 31 fa 83 04 be 70 36 51 e5 66 cf 76 96 3a ae 26 35 35 58 75 f4 61 64 34 7f 35 f4 07 a1 26 0c 25 f4 cc bb 00 f0 30 ad a4 bc 2e fc 42 de 88 e2 79 4d e0 2c 2a cc 47 dc 16 d2 ad 25 66 b1 9b 6e 29 aa da 9b 1a db 71 25 db 01 16 05 de 66 78 8f 20 b4 d6 a0 e0 80 5f ae e4 c1 5d 49 a6 d1 90 6b 99 f4 10 5d 8c 35 e5 81 b4 d7 40 02 78 09 9c 83 c7 62 c5 8e ba f0 30 e5 28 37 a7 88 b2 42 db 2d 68 1b 5d 2a 9a 1d 12 6a e4 09 55 62 ab 8b 5f c6 eb ec 83 71 b4 18 17 b6 60 96 21 aa Data Ascii: zke+1aLQx,j] 2@n;\|~5c=:Hch6[KY!\|{Yj1p6Qfv:&55Xuad45&%0.ByM,G%fn)q%fx _]Ik]5@xb0(7B-h]jUb_q`!
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 2f 68 6d 22 5d 5c 96 70 6f 27 74 dc 46 eb b1 22 5c c4 d8 6e 39 35 31 4c d5 84 0e 50 f0 04 ce af e7 49 6f b1 f1 76 4e ca fb f9 15 67 77 1b 73 8b d0 f5 85 f5 d2 c0 8d 42 af d2 33 cc c1 d3 56 b5 e0 cf 38 85 fe 60 a8 3e a3 ea 3f 6c 36 3f 02 f9 c7 37 fa dc 56 fe 89 c6 f6 b8 48 1d 02 0d fa 59 92 c8 34 07 ac 0f a1 c6 2e 59 b9 00 98 1d 12 98 63 d8 92 f8 0a 00 6e 22 83 ac 27 a4 f8 9f 4d b1 fb 1a 99 9e a7 78 fc 70 55 ff cd 5d 52 41 78 74 24 bc e9 a4 61 c3 48 3f 28 6b b2 ad 93 af 8d e3 87 17 d3 28 ae 9a 5a d0 4c 9e 06 56 c2 3d 20 f4 61 c9 3b 1d bb 8c 7f a5 e3 b1 2e a3 73 94 bb ec 01 48 52 05 c5 05 a6 8b a8 d3 00 22 84 b9 65 83 b6 43 c9 e3 f9 b0 25 46 25 5a 1b e3 98 34 23 ea cd a3 8b e3 da 40 45 1c 8e ae 57 31 7f 5e b0 b9 9e 29 be a7 35 30 32 5d 89 e7 95 39 63 94 07 Data Ascii: /hm"]\po'tF"\n951LPIovNgwsB3V8`>?l6?7VHY4.Ycn"'MxpU]RAxt$aH?(k(ZLV= a;.sHR"eC%F%Z4#@EW1^)502]9c
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 4d 74 ea 02 eb d6 ad a9 a9 a4 18 0b 1a 00 46 e0 04 eb bd 5f e6 0d 29 f3 59 b5 a8 88 10 a2 8e 5d bc 81 6a 06 77 74 89 d4 5d 57 59 76 8f 35 71 e7 c0 f2 94 06 08 de 2f 41 9e 5c 72 d8 f3 f2 e9 fc 38 f3 b7 e7 9b f2 68 93 61 39 48 64 4c c2 29 8d a8 b8 10 41 17 4f e9 73 e4 13 49 17 67 62 d7 17 b8 9e 62 11 b9 3d 50 95 60 f0 f3 ee de 73 cf b5 69 76 a1 3b 09 73 10 dc eb 35 e4 0f 92 93 f9 ed de 4d a6 00 0c 5e df 00 30 80 de 34 4d 0b 9e 0f 1c d5 15 63 25 b6 ef b7 73 d2 8b 8d 33 b9 f2 82 58 22 a0 73 92 e5 4e 65 77 f2 2e 63 d9 27 ae 57 29 95 81 70 ae 05 d6 05 4a 0b 66 55 c1 fc e4 9c 3f 71 59 f7 06 e3 77 81 37 62 56 ed 7f a8 91 5e b4 dd 73 0b c6 b8 7b 1c d1 d2 0f 15 49 f6 34 69 ee 12 a1 80 ae 9a 90 67 ef 85 9f 24 94 e5 68 e1 35 99 29 f6 da cb 79 cd 65 fe b5 01 bf c5 61 Data Ascii: MtF_)Y]jwt]WYv5q/A\r8ha9HdL)AOsIgbb=P`siv;s5M^04Mc%s3X"sNew.c'W)pJfU?qYw7bV^s{I4ig$h5)yea
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: f3 c1 7c 2e c0 cb a7 4c 5b 74 98 e6 d8 52 9f b3 5b 57 1b 3a 84 36 e2 59 6d 21 4f 5a 42 23 e5 4b 6c c7 40 53 43 07 3f 84 2d 9b 3c ff 8c 21 71 e3 ce aa 89 8a 5d 40 be 86 eb a1 42 94 63 fe fc 3e 00 fb fe 9a a0 aa df df 82 3a f9 c9 64 c3 c0 39 64 25 20 0d 39 55 cf 53 fb 99 65 dc f4 5c b0 86 26 ee 07 7f 18 5e 53 5c 15 98 08 13 ff 02 d7 ff 87 71 43 fa 63 8d 8d a8 36 5c 6f 85 81 e4 86 a3 8e cf e9 7c 6f 1d b1 52 dd 84 6c 1e c0 87 21 80 0b 05 82 6d 8d bb a2 15 e8 07 6c b8 b3 3e 4f af 21 1e 4e 36 a0 c4 e5 24 32 ca d3 8b 77 10 36 60 e1 b7 b8 ef 80 32 3e 16 09 2b a6 20 6b 38 ab 0b 15 b2 81 ca 29 7f 38 4a 96 a1 3a 30 c9 fb f6 d9 36 0d 7a 19 ea d5 76 9f a3 e0 9a b0 db 53 8b e8 c1 e3 10 b9 fd 0a ce f8 c8 44 04 ca 9c cc 73 db 58 36 ff 2c 08 a5 2e 4b a5 07 7e 28 8d 7b 8e Data Ascii: \|.L[tR[W:6Ym!OZB#Kl@SC?-<!q]@Bc>:d9d% 9USe\&^S\qCc6\o\|oRl!ml>O!N6$2w6`2>+ k8)8J:06zvSDsX6,.K~({
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 11 90 ed 32 eb d9 6e 3a b4 1f 36 5e f4 c2 ee b9 7d fd fa 90 fb 68 78 10 2b 6e 7c 51 62 34 79 b2 11 13 4c 8f 5f 23 00 06 5e 11 9d 10 70 51 dd f9 d4 c4 f7 16 8e 44 36 43 99 5d 20 3b 3c 8b c6 35 0b 39 8e 0e 8f a5 16 44 f2 68 03 4f 52 bd 3f 9a ca 90 14 88 00 c2 f4 06 df e3 d7 44 60 cf 05 c2 61 51 f1 c5 84 97 97 e7 60 01 20 19 22 c0 f8 d7 e4 30 87 9e 88 f3 20 3c 18 9c fa 54 1f c4 40 d6 af c5 bf 6d 71 02 33 14 ad 59 6f 8b 72 fe 9d 32 2b b6 b6 41 04 fe 2f a4 ef 3c b0 29 97 56 40 32 f8 d2 7f 3b d8 51 ef 27 a9 01 68 66 d5 e6 77 f4 61 9f 2d d6 a7 02 d2 3d 74 3a 3a cc 1e 16 e5 cf 26 be 53 31 43 30 2b c4 04 d8 52 3f 5a a4 e9 89 b1 23 80 70 40 08 69 c7 13 44 8a 67 24 0a de bb cf 33 35 fe cf 72 c3 47 05 6a 54 1f 1d 68 0f 23 be cd c4 8d 83 7e ed c1 44 fe bf aa 92 c9 b8 Data Ascii: 2n:6^}hx+n\|Qb4yL_#^pQD6C] ;<59DhOR?D`aQ` "0 <T@mq3Yor2+A/<)V@2;Q'hfwa-=t::&S1C0+R?Z#p@iDg$35rGjTh#~D
2024-04-18 17:16:03 UTC	16384	IN	Data Raw: 10 34 89 c8 19 f0 7d 44 1c 58 23 91 13 b8 dc 8c 29 be 4c 94 6e 70 c5 11 a3 2c c0 a3 b5 36 d8 0c ad 47 fb 67 f9 09 48 b1 7f 9e 77 bf 3b 32 61 e0 93 d1 22 b9 94 5d 3c d3 df 82 f5 12 de d6 4a b8 6e 9d b5 e3 f2 7b 04 ed fc 53 40 83 ef a3 5b 03 40 da 52 71 42 bd 84 21 47 f9 1a 4f f4 95 32 c6 6c 88 e3 9d a2 6d 77 80 64 1f 3d 09 30 26 3a 55 29 79 10 67 6d 98 0f 2f 73 b8 57 e4 49 6c 12 ed b0 8b 26 ff 3f 28 f0 9f 2b f3 4d 0b ba 39 fb b4 0d 10 14 ca 2e 7a f0 fb 0b b2 a5 5d c1 fc 50 e8 9f df d8 3b 7f de 39 07 7a 0a 26 56 88 47 67 2a 24 3c 2b 43 00 44 f0 81 38 a4 c2 b8 01 58 21 40 9c a1 97 3e 42 83 3d 3a 80 ca d1 c0 73 a0 49 c0 8f 74 08 e3 ed a9 5a 06 a7 7b 0f 66 b7 6d 22 2e da 0e a0 ee 60 f6 21 3f 1f 87 c7 fe 60 5a 16 fe 60 2a 57 0b a4 77 da 32 cb ac 3e 98 54 58 55 Data Ascii: 4}DX#)Lnp,6GgHw;2a"]<Jn{S@[@RqB!GO2lmwd=0&:U)ygm/sWIl&?(+M9.z]P;9z&VGg$<+CD8X!@>B=:sItZ{fm".`!?`Z`Ww2>TXU
2024-04-18 17:16:03 UTC	9732	IN	Data Raw: fb 0c bf 3e e7 7e 19 d8 74 56 5e 19 37 0d 37 90 61 2e 69 2a db 79 0c e8 7c 43 50 55 59 bd b8 9b 42 b9 ec d9 01 3d 92 8a 87 f9 d0 69 d6 07 54 d7 0b 4c d6 1c 42 c9 83 04 d7 cb 0d c9 13 af f8 2b 64 d2 d6 b6 64 d6 c5 84 49 15 5e 7a 6e f2 38 9a f7 dd a0 42 06 0e 3c 98 98 89 2a ca 89 08 d6 c4 f5 89 40 66 56 3a 29 d5 c6 1c 8b 0c ba ea 90 10 a8 e7 7e b2 4b c5 b8 8e e6 e8 a3 43 7d eb 7b fd c2 c9 18 6b 95 02 3b c3 9d 3a 7a 1f 16 ff a8 c1 7d e3 21 67 52 a0 b8 7b be 04 b7 76 ae e2 da 57 67 cf f9 20 f9 0a 9f 3f 3b 44 66 76 d5 5f 49 39 8c ea c2 0e d5 fa 53 4e e3 a5 3a 6f a5 03 6d ae 70 44 3a 6e 4a b0 e8 0b 7d 77 8b ff 91 18 63 80 e0 2c eb 36 de 7f 39 b6 97 1a 24 0d f3 a7 d4 ce 50 76 2d 30 c6 fc 20 12 15 d1 92 68 c8 b6 ca 6e fc a0 92 d0 a4 83 48 92 e7 fb 9e a3 91 97 20 Data Ascii: >~tV^77a.iy\|CPUYB=iTLB+ddI^zn8B<@fV:)~KC}{k;:z}!gR{vWg ?;Dfv_I9SN:ompD:nJ}wc,69$Pv-0 hnH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49951	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	872	OUT	GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=915B990125E8A6865191232B3C3F9D8F HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:03 UTC	883	IN	HTTP/1.1 200 OK Connection: close Content-Length: 123686 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="insurance_december_carousel jpg.jpg" Content-Type: image/webp Etag: "yzPXnlB6y9nk1SMCyWS+Eg2wGvnZDsZgsmzgflSXt6Q" Fastly-Io-Info: ifsz=590559 idim=1230x420 ifmt=jpeg ofsz=123686 odim=1230x420 ofmt=webp Fastly-Io-Served-By: img01-us-east4 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560834 Date: Thu, 18 Apr 2024 17:16:03 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120020-DFW, cache-pdk-kfty2130072-PDK X-Cache: HIT, HIT X-Cache-Hits: 10, 0 X-Timer: S1713460563.372406,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: 52 49 46 46 1e e3 01 00 57 45 42 50 56 50 38 20 12 e3 01 00 70 3e 05 9d 01 2a ce 04 a4 01 3e 51 20 8d 44 a3 a2 21 26 2b 76 ac 98 c0 0a 09 4d a2 b7 57 9c c4 eb f8 f9 94 fd a9 e8 ea 68 a7 99 cf 1c 9c f8 e5 68 00 6c d9 12 a2 5d af 98 5c 4f 71 33 c3 42 c0 d4 00 a5 a9 e5 bb 96 95 73 f4 67 94 df 57 61 ff 6b cd 8f 97 fb fa fa 17 e0 bf d2 fc 2a 7f 93 aa ef c0 ff ad e5 99 f0 ff da 7c eb fc d5 ff 69 ff cb fd 57 fc 2f 84 bf cf 7f c7 ff e6 ff 41 fb f9 ff 07 ec 43 f5 8b fe bf f7 ff f4 9e fc ff ec 7e e4 fb d5 fe bf ff 23 ff 9f fb 9f f6 ff ff fe 4e 7f 48 ff 45 ff ab fd 7f fc cf ff 7f 3b 1f f9 bf 75 3d ec ff b9 ff a9 fb 7d f0 23 fe 2b fd f7 ff af 6f 4f fd de cc 3f bb 3f fa 3f fb fc 17 7e cf 7f ff f6 9e ff cf fb a5 ff 2f ff ff d4 37 f7 bf fa bf b9 9f 08 df db 7f e3 7f f9 Data Ascii: RIFFWEBPVP8 p>>Q D!&+vMWhhl]\Oq3BsgWak\|iW/AC~#NHE;u=}#+oO???~/7
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: a7 e5 ae df 76 07 df 0b 21 4a 2a bf bf fb 06 6b 5d e5 34 f1 b3 dc ff bf e5 a4 2b a4 8c ff a0 83 fc b4 ae b6 58 43 b9 dd a2 f5 d4 08 9f 7b ed 62 ee 6a 30 8d 81 d2 11 6b 8e 0a ef db 2b 68 f9 d1 bb 60 f9 45 68 d8 f4 09 98 7e 33 be b2 8d 98 c0 f3 29 ef b2 14 0c 62 bd b3 81 6e d7 24 27 b5 b0 ac b7 b7 ae 97 25 bd c8 40 3c e5 86 fb 89 b1 fe 3f dc e9 ad 75 11 87 6a d0 d5 ca b6 a1 16 bb 62 e6 98 d3 c8 5d dc e8 37 e9 f8 b0 d9 6f 48 e1 3c a2 c3 85 69 e8 b9 fb 5a 6d 11 ba 77 ba d8 20 5b bb 19 db 64 e8 6a 17 97 9a 14 a7 b0 c9 12 a1 9a e2 14 ee 3a c7 1f 4d 73 74 ec 99 4f e1 3f b1 b9 16 07 e0 db a6 51 91 e2 0f 46 64 e7 ab 16 93 d3 0e 83 15 c6 3d 1f cd 12 df 21 6e 48 51 fe 4f 53 af 8f f1 e0 c8 cf e1 85 75 3e 0c 68 54 b2 53 1a 0d d2 d7 cc b4 c8 e2 03 7e 0e 2e 2e 97 a1 00 Data Ascii: v!J*k]4+XC{bj0k+h`Eh~3)bn$'%@<?ujb]7oH<iZmw [dj:MstO?QFd=!nHQOSu>hTS~..
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: 2e f8 97 8a ee 6f 13 ff eb 1e 58 f6 4a 2d 34 0a db 70 33 e8 39 fb 2d 61 26 b3 48 28 ce 18 57 6e 3a 73 f2 ed 9e 96 d1 09 d8 2c 10 10 ff fc bd 6f ac eb e6 ce fb 5e 1f 3f d0 2b 45 2c e6 ed b5 42 e7 9f 1b 1d 43 21 17 bb ab a1 99 f6 89 28 d1 3e d3 d5 9f 58 88 37 77 40 88 16 86 c6 88 58 9b 7e f0 65 97 bd 2d bc 94 88 53 a6 de ee 6d 1b 5b c4 3a 73 30 a3 71 33 f8 8b 0c c6 1e b2 bd 53 cf ea 11 fc c6 a3 20 e8 e6 7b 79 d1 17 eb 05 f5 81 1c 87 71 ac f9 66 08 ee df 52 7a d8 19 f0 3d b8 ee 75 51 aa 05 1d 3f 50 19 49 94 22 2f f2 13 61 2a 80 6c d8 54 a5 10 da 1e d1 86 91 a2 5b bb 6a 2a 17 66 bc d9 47 cd 1d b8 b5 cc 5b 95 ca f7 a7 73 73 62 b6 5e 8e 68 ec e3 e2 9b e1 62 55 ee 4c 04 9d 13 2d 6e 5b 78 87 1d 51 3f f6 5c 97 90 95 e7 07 0e 17 c1 7a af fa 94 ba e4 d5 a2 82 91 ba Data Ascii: .oXJ-4p39-a&H(Wn:s,o^?+E,BC!(>X7w@X~e-Sm[:s0q3S {yqfRz=uQ?PI"/alT[jfG[ssb^hbUL-n[xQ?\z
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: 53 13 74 d5 13 c8 98 a5 50 46 05 c1 08 af 64 44 a5 ee b1 c3 e8 77 e9 ea af 61 8e 0d cc 69 8e 7d f2 57 2c 72 a2 8b 43 d5 09 e9 44 12 1e ee 60 18 e9 7e 0a cb 03 ed 85 b0 06 93 82 3e 94 26 db cf 70 44 d6 d0 ba d4 29 67 30 40 f2 72 98 c5 9a 9c 86 ca 55 17 e7 df 89 3a 75 27 c1 42 c3 a2 10 1b 3c 47 35 6a a4 99 08 ea 84 77 1e 91 c4 9c 3b d6 f4 df 37 b4 dc 28 b1 54 f8 29 ca 49 69 0a d4 5b d3 16 f3 09 58 9c 01 a1 32 f3 c9 16 de 3c 0d 71 db b3 d1 14 5c a0 cd d2 5e e6 ff 79 b6 01 b5 36 84 a3 c9 91 6f e9 23 1f 18 13 0b 2a 4b a1 82 b4 39 dd 6c 02 c4 14 8c c8 31 1b 31 55 d9 a0 c9 4f 58 90 6b fe 9a 75 fa 35 f9 54 fe 28 e2 15 0e fd ee 8e 84 5d 9c a3 68 3c f9 b1 ff b0 44 12 5c c8 10 ef eb 1c 55 dd 6d ff 2e ad 74 7e 7e e7 f5 9b c7 1a 0f e2 4f cc 24 1f 3f 51 42 92 5d a7 bf Data Ascii: StPFdDwai}W,rCD`~>&pD)g0@rU:u'B<G5jw;7(T)Ii[X2<q\^y6o#*K9l11UOXku5T(]h<D\Um.t~~O$?QB]
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: da 92 2f f2 aa 07 3d 50 5f b5 ce d8 48 82 cc ce 73 a4 ba 19 1e b6 38 ad 1a d2 b9 6f 20 c9 9b 79 08 44 a8 5f e8 b0 ff bc f5 33 80 82 37 95 c6 a0 22 a4 1a b7 01 d3 71 0f f4 93 1b 4f b1 6a 0a 53 3f 92 44 4c 16 72 75 fe 84 b7 04 51 ee e8 5e bf e9 bd ef c2 c3 3f d9 cb e8 ff d9 16 52 ba bf c0 34 03 84 1e dd db 73 39 5a 9a cd a9 c5 03 37 bc 24 99 8b a2 dd 27 a5 31 0d 67 60 9d 09 e1 ad 34 68 1e 5b 6b 0b c0 87 fe 69 99 5c ff 3d 2b c9 d2 f9 e2 98 27 39 91 25 50 fd af 9c e9 cb dc 46 f9 06 e1 3e c6 1e 9d 2b 6b 19 d8 43 26 1f 58 0f 8d ce 2e ae 59 cc 5b 46 c9 e6 1e ed 75 9d e0 a4 b2 10 6f f5 42 fb 61 9f 74 ca c8 37 7a e4 11 13 bf 34 59 44 ca 47 9b 14 07 27 a0 4f bd 43 b9 39 c3 b5 69 f1 4f 70 4e e8 4b 7f 45 07 80 5d aa b2 af ba 2c 9c e5 32 c5 9c 0b 1f f5 c9 7b 25 7b e6 Data Ascii: /=P_Hs8o yD_37"qOjS?DLruQ^?R4s9Z7$'1g`4h[ki\=+'9%PF>+kC&X.Y[FuoBat7z4YDG'OC9iOpNKE],2{%{
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: c8 d4 a5 3e 30 8e b8 e4 f1 17 43 36 13 2c 55 c6 ab 55 93 ba 9d 7e d5 ae 71 c0 22 86 62 b0 82 bd aa 5d bb 25 bf 6a 6b 37 27 52 85 35 87 98 56 3c a6 06 fb 98 66 59 56 86 d3 57 00 41 45 b2 25 e5 fe 18 55 f0 d7 8f 43 08 49 0d 7f 55 9e a5 ed 73 6c 8e 07 08 9b 6f ff f7 9d 62 05 6e b1 41 ce 55 09 77 91 01 1c cf 73 d5 85 35 25 e6 42 b2 b8 65 84 6e 67 96 ac 19 6e 47 76 43 54 d9 4c 82 12 1c 8b d2 5d a9 f6 ff d8 7a 59 13 a4 e5 a8 b3 75 36 49 19 b7 2d 3c 0d ec 79 bc a6 fd bc f6 93 df 70 d1 ba 52 ab 41 28 7e 36 fe 62 34 d6 3f a6 6a 73 6f b0 37 ee c6 d0 eb f9 ab f1 56 81 6e a0 5e c5 f2 e1 ed c6 21 68 b5 86 28 31 de 0c 51 c1 12 ae 24 0e 05 eb 2a 0e 5b d1 79 6b a3 fe 3e e0 3a 44 1e 45 4d 94 9a 60 57 f7 7a 9d 93 d5 32 8d 37 ee d2 d3 a3 fe 47 1b f4 3c 8f b4 77 93 c7 60 23 Data Ascii: >0C6,UU~q"b]%jk7'R5V<fYVWAE%UCIUslobnAUws5%BengnGvCTL]zYu6I-<ypRA(~6b4?jso7Vn^!h(1Q$*[yk>:DEM`Wz27G<w`#
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: 2d 68 6e 52 0e 7e 15 00 0f e4 fb 28 fe 3d 27 65 df d3 cc ea 8f 57 35 1e dc 1a e0 35 61 0e 3f 2a ad 01 fa fc eb 3a 41 ce 4b b0 36 0a b3 b7 7a e9 49 80 25 36 27 26 1f 1c cc 2e 5c 05 36 1c fb b5 08 83 95 d6 02 e5 39 ae c1 93 57 b9 ac e7 44 b6 7f 39 c3 df b5 48 5f 19 f0 25 d7 a9 d9 0a e2 e8 59 f6 2d fd 53 f6 7e 68 b4 e5 9f 54 31 b2 fa ba ca 8a e6 a3 b0 be b3 85 95 ed 94 6a 53 20 92 a5 04 58 66 e3 6e 91 64 65 73 dd 7e 61 7a 05 b4 ea 52 e3 b3 6b 6e db 94 ba 4b c2 93 e4 86 90 10 11 e9 7d 37 a6 5a 37 54 09 b1 78 d2 32 53 d7 81 db 5d a3 6e 98 1f a2 f4 e9 4b 26 25 cc f7 9b 20 dc 2c 76 b8 5a c9 3d 9b 37 d4 a5 0a df 8e b9 db c4 76 20 40 d4 fa ed 9f 7d b2 4f 49 1a c2 d7 4a 99 5d 20 7e 10 9a 9c ec 57 c6 d5 b0 b8 5c de 28 4c 63 33 10 60 35 08 ec 4d fc 36 f6 13 32 eb 49 Data Ascii: -hnR~(='eW55a?*:AK6zI%6'&.\69WD9H_%Y-S~hT1jS Xfndes~azRknK}7Z7Tx2S]nK&% ,vZ=7v @}OIJ] ~W\(Lc3`5M62I
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: ff 7e fc 1d 9e c4 0e e7 16 92 18 57 2d 0a 73 66 8e 2e af 9f 4d e4 53 fe f0 d9 fb 09 75 07 a6 13 d2 57 7e cd 35 54 2b 8e 81 b2 e2 e9 91 63 f9 18 78 81 a1 b8 a7 22 dd 2b 49 25 e8 c6 f8 17 ff 74 8b 61 e4 10 f1 c1 6f 92 ac c5 db ec 30 3a e7 e6 97 c1 04 70 bd 83 19 22 d0 c6 6e 54 42 fe 67 92 b9 ab 5e a0 13 07 11 5b d2 fa 36 bf 55 3a 2e ba 0b 8a 70 35 e0 9b 21 6a a1 f1 e7 27 7c dc cd 3d 82 b5 25 fe a3 01 52 56 31 1a b4 8e 2a c8 ba 58 aa 26 a6 e2 2e 14 d9 7a 8e 4e 18 0e c0 e7 94 3b 9b 4d e8 30 cf 27 0f 97 97 94 21 57 82 8b 96 af 5b 31 82 ed 63 2c 22 2c 26 d4 87 61 69 64 1c 7f 5f cd d8 12 ad 2e bf 4d 67 5b ec b3 d4 64 b3 32 72 41 96 d0 47 d9 13 3a 4e 37 c2 4d e9 f8 34 6d 1a 39 bf bc 73 2f 1f 02 7f 71 40 8e 00 ac 10 fd 2c f8 cd 7b c3 3c 8b 70 01 f1 17 d1 b0 30 f5 Data Ascii: ~W-sf.MSuW~5T+cx"+I%tao0:p"nTBg^[6U:.p5!j'\|=%RV1*X&.zN;M0'!W[1c,",&aid_.Mg[d2rAG:N7M4m9s/q@,{<p0
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: 60 a2 5c d5 62 6a bf 7f 0f cb 29 df 6e ab e0 ad a2 24 ed 0d fb d4 95 9d 9d 63 ab 4a f4 bb 94 ff c8 91 8b 6f 17 5e 22 64 e9 67 ce 40 28 d8 c8 c6 92 d4 88 80 2e 00 78 4f 45 6e 9e 94 d6 6a c7 b7 4b 6a 71 a9 74 0d da 29 80 41 d4 27 b2 17 47 e8 6a 3f 3b 9d 95 51 c2 91 d5 9c 68 cf 2d 3f be 2a b7 6f 9e 0c cb 44 d3 ba f5 bb 7b c0 0e 6d 76 20 fe 79 02 ee 2e 93 2f 53 ac 14 0e 7b ba 6f 06 ea 91 e4 37 c4 45 15 fe 6d 2d d8 9b bc 98 08 5c 04 e6 83 92 dc 93 51 21 96 46 26 54 3b 77 c2 25 f6 d4 b3 b3 7e de db 1d 4a a0 42 77 06 e7 94 cb 2d a4 45 0c 83 fc 60 ea 33 4f f4 93 1b 44 01 4a f4 d4 8a 40 4e 99 ba ec 0f 19 22 95 57 3e cf 97 8f 79 4b 8d e3 4e ae 30 bd ec 7b 49 8b 18 d8 14 ae c5 bd af 34 8e a6 a3 2e d4 e8 29 cf 79 14 b7 f5 56 2d 3c 0f b3 b7 05 8f f5 33 6b 1a 1a 7c 7d Data Ascii: `\bj)n$cJo^"dg@(.xOEnjKjqt)A'Gj?;Qh-?*oD{mv y./S{o7Em-\Q!F&T;w%~JBw-E`3ODJ@N"W>yKN0{I4.)yV-<3k\|}
2024-04-18 17:16:03 UTC	1379	IN	Data Raw: 43 37 fa 57 17 d4 19 03 c6 c0 fa 15 25 d4 7e ef 5c e5 c0 35 1b 2f 58 6f 3b f8 52 08 5b aa 04 29 11 bb 50 29 31 c8 dd ba d2 d0 bb 5a 59 c0 bf 97 af ac 1b 78 20 65 c4 21 db 1a a6 30 12 76 63 3d 66 8c 90 ac 9f 32 5d e8 08 75 04 5c c7 98 9b 22 27 a1 f2 9c 6b b2 28 ea e6 0c 2c a4 fc cf 57 a5 02 00 95 a6 5c 17 f9 38 c7 a2 d0 be 9a 10 9a 1a 36 fc 77 0e 84 2c c4 d3 34 9d 0a a9 12 85 91 a4 b1 97 8a dc 9b ca 87 67 06 29 da bb e1 4f b6 11 69 5d ed 6a 08 0c 52 84 da 23 f2 54 c7 ef 16 e3 c6 93 f8 69 94 6c ef 0f 56 49 bd 09 09 22 63 aa b5 ec 4d fa 4c dc 47 23 cb 8e 4c 48 68 cf a3 5b 3a 6e a6 26 60 9d ce ef 1e b0 17 a5 4d 65 62 82 27 c5 55 82 c0 8c 6d b6 91 ea 11 eb 26 71 e5 95 03 6f 4e 61 12 8e eb 60 7f f2 5b e6 14 86 3a 66 48 b3 b8 41 e2 36 12 b8 34 54 5f dc 29 f8 bf Data Ascii: C7W%~\5/Xo;R[)P)1ZYx e!0vc=f2]u\"'k(,W\86w,4g)Oi]jR#TilVI"cMLG#LHh[:n&`Meb'Um&qoNa`[:fHA64T_)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49955	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	828	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	760	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21156 Content-Type: image/webp Etag: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" Fastly-Io-Info: ifsz=33454 idim=320x360 ifmt=png ofsz=21156 odim=320x360 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210155-DFW, cache-pdk-kfty2130081-PDK X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1713460564.076406,VS0,VE308 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 9c 52 00 00 57 45 42 50 56 50 38 4c 90 52 00 00 2f 3f c1 59 10 4d 48 72 1b 49 92 a4 96 b9 cf 2a ef ff 3f 38 3c a3 6a d6 73 44 ff 27 80 df 78 a0 db 6c e9 c9 bb aa 6a ba cc d0 95 a4 33 74 c5 16 88 cb 08 e4 c7 0f 3e 13 3f 9c 4e 27 09 d5 21 01 bc cb 27 06 60 00 86 53 d6 bb fe fe 0d 50 53 4a 12 e9 90 e5 e5 81 c4 34 51 a3 79 db 5f 53 8f 82 cc 43 a0 8e da 72 21 04 a3 d1 ce 04 54 c8 43 26 8b 0b 6d d4 49 02 cd d9 bd a8 fc 5b f3 3b 94 cb 78 d4 a2 8b e6 d0 1c 6e 1e a5 bd 24 07 2e bc 21 56 16 bd f3 e2 51 95 7f 79 5e f0 e1 fb 1c b3 19 80 5e 74 69 6b a9 02 66 0c e0 56 3d 4b 8e e2 71 61 04 d8 76 f5 f8 57 0b 82 20 82 c0 48 40 10 1f 06 d4 80 5d e2 18 98 ba 70 eb b9 6a 51 05 fa b5 02 10 04 e5 02 f9 4f 1c 0c a8 58 0e 8c 90 04 02 33 81 ae 39 84 30 8e 08 03 08 55 Data Ascii: RIFFRWEBPVP8LR/?YMHrI*?8<jsD'xlj3t>?N'!'`SPSJ4Qy_SCr!TC&mI[;xn$.!VQy^^tikfV=KqavW H@]pjQOX390U
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 13 e0 09 18 e5 be 8c 3a d7 2e 63 97 ac ad d6 a8 cd 83 c8 ec 82 d2 76 ba 94 3c 00 ad 2a 36 5b db 46 6d 81 b6 ad 63 92 a4 73 df f7 fd 88 c8 a8 88 54 17 db 36 c7 b6 6d db b6 6d db b6 6d cf b4 dd 9d 3d 6d ab 5a e5 aa c8 cc c0 ff 7f df b3 b4 6d db 31 49 d2 75 3d ef 1b 11 19 59 63 db b6 6d 5b db de d7 6e 3c b3 53 46 8d b5 32 57 fc 07 b6 6d db 6c 15 b3 22 32 de f7 79 28 60 db 76 6c 8a ce ff fb d1 58 61 6a 6b 8e 6c b7 c8 b6 d7 0c 6b 7b b3 b5 b6 6d db b6 cd 6c bb c6 d8 d1 ff 4d 80 80 b1 08 2e 05 5a bc 12 aa 42 20 12 0c 12 9a e2 b3 90 11 e9 e2 9a 5f 42 4e f4 88 7b 7e 88 4a 11 22 4e 1b 21 0e 8b 02 31 2c dc 05 2d 1e b4 5b db f7 de 67 71 32 6c ac 34 7a 17 10 05 1e 7a 4e cb 10 91 d6 29 8b 52 a2 87 52 15 eb 8b 95 1f 12 fc 1e 33 81 14 0e 02 83 50 37 48 5c 17 49 08 a6 90 Data Ascii: :.cv<*6[FmcsT6mmm=mZm1Iu=Ycm[n<SF2Wml"2y(`vlXajklk{mlM.ZB _BN{~J"N!1,-[gq2l4zzN)RR3P7H\I
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 90 44 cd 7f 4f a1 92 ac b4 18 c7 a4 5e 0e ec e5 e0 8e 32 50 15 10 1c cb c3 c9 eb f0 3b ec 40 a8 0f 20 79 06 de 1f 28 de 46 c4 71 51 0c 63 f3 e8 71 78 70 1d c1 f2 4b e1 74 02 ef 08 70 66 c2 0a 07 79 0d 21 db d1 c3 82 a8 c6 f6 e0 2a 08 ae 78 08 54 80 4d 20 73 49 6e 05 a7 22 b8 48 b8 1e de 22 4c e4 83 38 b0 94 b8 79 80 a9 66 78 c8 04 32 87 a5 d6 37 ad 2f 2c 79 7a 18 b8 ed 37 f1 7c 4d a4 30 55 e0 06 02 ee b2 ca 42 61 42 4d 5b d2 b2 d2 51 a5 54 2a f4 43 c5 8e 6a 8a 57 a1 0c f5 91 7a a3 cb 61 87 63 cd 4d 88 42 ba e3 58 2c 75 03 15 e0 09 4a 50 0d c1 a9 45 43 aa cd 19 ee f1 4b e0 1d 74 05 71 05 fb 56 43 5b 0d 06 66 c0 09 95 78 c7 72 21 61 87 d3 50 11 96 f5 22 d3 09 f3 aa 81 b8 eb a0 da 0c d2 cf dd 4e e4 88 0b 88 13 89 b0 2f 83 09 8a 8d 88 1f 08 a5 71 8e 96 22 d4 Data Ascii: DO^2P;@ y(FqQcqxpKtpfy!xTM sIn"H"L8yfx27/,yz7\|M0UBaBM[QTCjWzacMBX,uJPECKtqVC[fxr!aP"N/q"
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: af 49 1c 9d 14 93 37 22 18 42 71 96 64 bc a9 c4 52 15 37 1a 86 33 8c 84 37 2d 0b 47 82 31 b4 66 c3 9f 20 59 ae eb d6 7f 44 22 01 00 ae 0b 24 dc 7a b8 43 c8 a0 fb c4 07 a0 48 b5 ac bc f2 65 ea d6 ed b9 54 64 4d 10 9f ed ea 6e b2 7c 23 5e 52 c4 23 b6 03 4c ea 09 cb 39 49 ab 6f b3 5a df 84 59 7e 71 15 7d 6c 18 12 44 94 2c 2e ee d8 88 ad 7f aa 02 88 1e 4e 2f 04 20 62 22 74 58 d3 41 a8 f0 f4 2e 5e eb 71 27 e5 8c 89 f3 7d 55 0b 39 e8 eb ab 5b d4 97 64 7c ab 6d 68 a0 c0 ad 7a 7a a9 b6 23 35 01 d9 76 86 81 74 d6 47 7c 44 bd eb 22 12 dc 44 bd 0b 40 59 e1 a6 18 bb a8 ee 9f 14 10 75 42 1c 21 12 89 c0 7e 46 e6 d5 80 c2 fb 79 27 ad 7a 6e 38 27 e3 3d 69 f8 a8 b4 cd f5 62 bd 0c 52 2b 41 28 42 06 84 4a 88 dc 8e 0d e6 6d 2c 0e a5 b2 9f 49 10 0a 45 42 4e c2 17 92 4e 1e f0 Data Ascii: I7"BqdR737-G1f YD"$zCHeTdMn\|#^R#L9IoZY~q}lD,.N/ b"tXA.^q'}U9[d\|mhzz#5vtG\|D"D@YuB!~Fy'zn8'=ibR+A(BJm,IEBNN
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 74 0a 32 fa c5 19 56 11 6b 0c 21 58 83 01 35 35 2f e0 0e 57 38 ab 86 9c 2b 04 89 80 e7 ea 2f 1a f1 cc 1d 40 02 df 93 33 a8 e2 20 5a 10 6c f2 ef 3a 3e de 19 2c 3f a7 6c b6 4e d4 b2 57 a0 da bc 37 6f 0d a5 b9 55 5d 01 67 b4 eb 4b 05 8b 94 e5 85 c0 a3 69 1c a7 fa 71 fb 88 3f e1 fe 48 b9 5f f5 13 aa 63 ac b4 24 39 55 3d 59 c4 cd 7a fe 49 d3 fa c1 bf b9 9f 7c f9 a8 ee d2 4b ed 95 1f 93 65 53 9d 4c b2 53 4b 8a 04 5b 21 c5 27 04 13 00 dd c4 32 d5 65 a1 35 65 72 04 56 5e 27 e7 fc 2d ee 0c bc 3e ec c0 c6 ec 29 63 71 13 74 72 b9 22 67 0b 2c 20 e6 12 a9 bd 49 b5 73 31 41 c8 15 81 91 c6 dc e7 16 e2 76 4e f3 d6 13 06 64 9c 67 f3 42 7f 9c f3 4c d3 4d d4 b1 32 49 66 82 4b ea 74 3d 6f 00 90 67 f5 85 f7 b0 fa 8c 9a 1a 76 3e 5e 9e 5a 56 a0 43 39 e4 fe 61 2c e6 2e cb 24 19 Data Ascii: t2Vk!X55/W8+/@3 Zl:>,?lNW7oU]gKiq?H_c$9U=YzI\|KeSLSK[!'2e5erV^'->)cqtr"g, Is1AvNdgBLM2IfKt=ogv>^ZVC9a,.$
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 15 08 63 64 81 3f a4 e9 51 1c a9 6a 4a b5 76 43 11 29 00 46 be ea 6c 01 c1 4d f6 36 ff 34 16 19 9a b7 54 37 80 08 00 e0 59 66 2a 97 63 16 2b 7b 49 d1 32 54 01 ab 69 eb 2a 8f 67 70 3c a8 56 2a 66 f0 34 44 7d 4f c4 ab 94 b3 9e a9 b8 6e da 58 82 09 88 4c b0 fd 2f e1 ac 2e da ab 3a 97 50 24 53 72 7f 9d 20 b0 59 d5 8a 8c b0 ea b0 4c f3 02 31 9a 79 ce ab 30 d1 01 30 ec 77 c9 32 9d 33 0c 1f 77 98 33 f3 34 cf ce fd 74 d5 e3 c7 6f a1 60 97 28 5a 3d 8b bc 4a 20 d9 20 8a 60 f0 ad 6a f7 71 32 6c de 73 d4 b9 3a 46 64 40 ac 7d 19 54 75 de a2 89 3e 91 fc d0 56 c5 0a 84 d8 03 ca 11 81 13 6e 10 20 44 8c d0 43 2b a8 e0 b6 ec 8b 6f d4 92 72 d5 1e 15 11 7d bb 19 2e d5 b8 cf 98 b7 9b b5 cc bb 05 07 1a 62 b3 72 bd b8 fa 3c ac 6e 9f 44 51 8a b1 1c e1 7a 4c 04 e1 04 9b 5f c3 d9 Data Ascii: cd?QjJvC)FlM64T7Yfc+{I2Tigp<V*f4D}OnXL/.:P$Sr YL1y00w23w34to`(Z=J `jq2ls:Fd@}Tu>Vn DC+or}.br<nDQzL_
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 88 fb 65 12 57 7b df 58 e0 34 b7 3c de 13 c7 05 ea 4b 3c ba d4 68 9a 16 09 6b 94 8a c3 d8 fa 8d 66 01 d8 71 c4 cf 9c c3 91 05 da 2e 21 6c 97 97 17 f6 95 09 79 79 09 09 3e 42 42 56 d0 13 1c 54 8b 14 1e 5a 32 49 c8 07 4a ce 9e 45 26 4a 6a a4 7b 45 bf 07 65 4b 66 27 85 2c 2e 7b 24 c3 12 28 9a cd c7 15 08 72 82 fc 93 97 f7 58 26 d1 2a 92 4b 87 bb 59 cd 21 d1 6c 5e 31 ea f6 27 6e 1c 90 16 18 8b a0 08 d2 5f 2b e1 9b bd 5f 21 56 0f 80 a8 79 4e 2c 02 a6 13 06 22 c1 2a a2 fe 19 bd fa f4 14 22 bb 48 68 b5 83 9a b4 a6 40 09 6e 5d 1f b4 7c 4e 6a 34 f7 5a 57 b4 44 38 be e5 46 dc 48 6a 96 f8 6e b1 d5 42 68 a1 8d 45 e6 e2 6e 79 64 01 31 39 9f bf 0a f2 3b 74 4a 34 b7 88 c2 3e 31 66 99 11 8f 1c b2 f4 d5 c3 7a ac 45 72 ea b6 84 38 1f 2e ab ba 97 7b 32 8d c5 e2 4c 12 b9 d8 Data Ascii: eW{X4<K<hkfq.!lyy>BBVTZ2IJE&Jj{EeKf',.{$(rX&KY!l^1'n_+_!VyN,""Hh@n]\|Nj4ZWD8FHjnBhEnyd19;tJ4>1fzEr8.{2L
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 78 94 65 09 5e dc 42 1a 2f e1 ae 41 83 03 92 7c e1 21 16 bb 11 b7 60 9f ff f8 be 44 e3 20 94 ef 18 0a 13 2f ed 01 31 b1 f6 c1 0e 5d f1 13 7e 8f 7f 79 b0 97 44 2b 7c 1c 27 4e 79 0b c7 16 67 28 cd 57 04 67 75 c4 71 aa 70 a2 d4 14 10 99 f8 5c 6b 55 5c 1f 13 22 37 87 86 0d cc f8 57 12 f9 32 0d 1a e0 34 ec 31 5a 49 ee 11 fd cd f7 32 9a 56 6a 74 79 18 56 de 7b 24 6d 97 6e fc 17 63 99 c9 78 c9 56 c0 b3 b3 f4 05 ec 79 3b e1 2c 3c 1a c9 47 c9 b9 94 a8 df 9f 5b 9c 71 e6 fd ae d0 f3 21 7c a4 e0 fa ba 80 30 bb 17 f8 d5 66 70 6a 44 71 20 52 4e ca 13 0a 1e 61 1d ce 16 f1 db 07 16 3d d2 2d 6c a4 0f ea 48 ca 8f 88 40 56 b9 86 0a 45 9f 54 d4 13 2f 8d fe b7 d9 a0 60 16 ba 60 7f d6 01 64 b2 c8 57 e5 7e 03 41 0e 18 8a ae 07 2e f6 7a 4a 10 45 3e 72 dc 9b 05 a2 6f e6 43 84 19 Data Ascii: xe^B/A\|!`D /1]~yD+\|'Nyg(Wguqp\kU\"7W241ZI2VjtyV{$mncxVy;,<G[q!\|0fpjDq RNa=-lH@VET/``dW~A.zJE>roC
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 5e 7e 46 f0 30 b7 31 ec 30 81 31 3c c0 50 21 35 16 e8 55 cd 86 01 70 74 35 8d 9b 02 4c c1 c8 5f 89 ad da b2 ec ec 3d 55 df 84 e1 d8 5a 64 d9 d9 0f 37 c6 e9 09 11 57 8b 19 bc 1b 89 a3 36 37 80 b7 58 36 cd fc 7b 70 66 f2 3d 38 8b 8d 9b c6 55 22 a3 a5 0d a2 dc c6 be e5 9c 38 4e 9d 47 80 28 e7 b3 6b c7 82 ab 01 5e 71 6d f8 3f 66 89 aa 9e 9c 73 5f a8 3c 91 7b 89 ab 9c b7 e8 95 76 0d 5e 71 bc 95 20 06 00 9a e5 9d f8 07 d6 22 c8 ac 46 78 a8 02 3c bc db 0a 58 bc 36 4b 1c 83 91 cd 41 6c 5f 93 38 ff 2f c2 3b c2 c2 82 07 1f 85 6a 59 7d 3b 03 6c e6 ef b3 41 fe 8b bd 1f 6c 96 85 8f 05 55 f8 76 06 88 c1 20 8a f7 83 cd 5a d8 ec fa be a5 f0 ae c0 c2 a1 90 09 1f d3 81 81 72 58 a3 38 84 e1 43 eb 7b 28 3d 30 f8 e3 1e 8a 43 c4 4f 17 cf ee d7 8d 79 4f 8a c9 2d 6d 44 b7 af 96 Data Ascii: ^~F0101<P!5Upt5L_=UZd7W67X6{pf=8U"8NG(k^qm?fs_<{v^q "Fx<X6KAl_8/;jY};lAlUv ZrX8C{(=0COyO-mD
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 83 c9 77 72 17 06 e5 5b 2b d3 a1 58 6f e0 61 8b 0f 0d 26 b7 28 a8 bb 9c 6e d5 f0 1e 57 e9 29 4f a9 fd c1 2d 73 50 c6 e4 5b 8b 79 ca 41 97 00 30 ae d2 53 9e 52 fb 1e 1b 16 c4 4d 9d 56 b7 89 0d 4d 47 1f d3 05 fc 5b 91 7e 7a 4f 69 48 be b5 94 75 ca 34 ed e1 45 d3 d1 c7 74 01 2b 25 2c 55 d0 36 ed 4e 6a 76 c4 e7 a9 bd e2 68 9a ce 1a 62 48 be b5 15 13 06 96 c0 fe d4 5e 71 f4 e8 ad 9c bd 11 2d 63 53 cb f8 cb ca 43 4b 10 17 66 0d c1 c4 ea c4 e6 ea f1 97 42 86 0d ed de d6 57 d5 48 a1 96 45 fc bf 88 ff e3 dd fb 83 30 66 11 57 82 ae 45 5c 09 ba 16 09 d4 87 82 b8 96 30 63 2b b5 ca b9 f2 35 7d 03 c5 28 e2 8a 6f 7c 75 18 a3 48 5c 35 8d 73 13 60 60 b1 52 ae f8 d6 ac a8 12 2d 9e bd 70 8b bd 7f 38 e8 69 50 3e 44 29 f4 38 10 60 25 02 28 34 27 93 71 ef eb 18 e6 f5 21 f3 00 Data Ascii: wr[+Xoa&(nW)O-sP[yA0SRMVMG[~zOiHu4Et+%,U6NjvhbH^q-cSCKfBWHE0fWE\0c+5}(o\|uH\5s``R-p8iP>D)8`%(4'q!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49956	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	792	OUT	GET /-/media/images/lnrs/heroes/pattern_hero%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	909	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23246 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="pattern_hero jpg.jpg" Content-Type: image/jpeg Etag: "T52nMp0FWoJ6RElo9abbyCMLAqMCYgRTYdt/ytT/gYQ" Fastly-Io-Info: ifsz=23246 idim=1230x214 ifmt=jpeg ofsz=23246 odim=1230x214 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210087-DFW, cache-pdk-kfty2130084-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460564.076976,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 05 03 04 04 04 03 05 04 04 04 05 05 05 06 07 0c 08 07 07 07 07 0f 0b 0b 09 0c 11 0f 12 12 11 0f 11 11 13 16 1c 17 13 14 1a 15 11 11 18 21 18 1a 1d 1d 1f 1f 1f 13 17 22 24 22 1e 24 1c 1e 1f 1e ff db 00 43 01 05 05 05 07 06 07 0e 08 08 0e 1e 14 11 14 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e 1e ff c2 00 11 08 00 d6 04 ce 03 01 22 00 02 11 01 03 11 01 ff c4 00 16 00 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 07 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 d7 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIFC!"$"$C"
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 11 1e 7f ff c4 00 24 10 00 02 03 01 00 03 00 03 01 01 01 01 01 00 00 00 01 21 00 b1 f1 11 41 51 f0 31 50 61 d1 81 c1 10 30 ff da 00 08 01 01 00 01 3f 21 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 e5 53 e5 53 e5 53 e5 fa af 94 f9 4f 95 4f 95 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 Data Ascii: $!AQ1Pa0?!Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&SSSOOLT&Bb1PLT&Bb1PLT&Bb1PLT&
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 8a 84 c5 42 62 a1 31 50 98 a8 4c 55 31 54 f9 54 f9 7e b3 e5 ff 00 cf 95 4c 55 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 9d e3 ef 83 a7 f0 3f 82 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 4f 95 4f Data Ascii: Bb1PLU1TT~LU1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1P?b1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&*OO
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a9 8a a7 ca 7c bf 5d f2 a9 8a a6 2a 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 9d e3 ef 83 a7 f0 3f 82 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a Data Ascii: Bb1PLT&Bb1PLT&Bb1PLT&Bb\|]LT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1P?b1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&*
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 53 e5 53 e5 53 e5 fa af 94 f9 4f 95 4f 95 4f 95 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 ef 1f 7c 1d 3f 81 fc 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 Data Ascii: LT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&SSSOOOBb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&\|?Bb1PLT&*Bb1PLT
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 9d e3 ef 83 a7 f0 3f 82 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 50 98 a8 4c 54 26 2a 13 15 09 8a 84 c5 42 62 a1 31 54 c5 53 e5 53 e5 3e 5f a4 f9 4c 53 e5 53 15 4c 54 26 2a 13 15 09 8a Data Ascii: LT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1P?b1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1PLT&Bb1TSS>_LSSLT&
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ff 00 04 fc 77 f8 27 fe 09 f8 ff 00 82 7f 93 fc 9f e4 ff 00 27 f9 3f c9 fe 7f f8 ff 00 93 fc 9f e4 ff 00 27 f9 3f c9 ff 00 82 7f 93 f1 ff 00 04 ff 00 c1 3f 1f f0 4f 7f c1 0a ff 00 83 c4 2b fe 0f 10 ae ff 00 04 2b fe 0f 10 ae ff 00 07 88 57 7f 83 c4 2b bf c1 e2 15 df e0 7c 85 77 f8 1f 21 5d ef 80 f9 0a ef f0 3e 7a f4 21 5d fe 07 cf 5e 84 2b bd f0 3a 79 eb d0 85 77 be 3a 3c f5 e8 42 bb df 01 f3 d7 a1 0a ef 7c 37 3d 7a 10 ae f7 c7 47 9e bd 08 57 7b e3 a3 cf 5e 84 2b bd f1 d1 e7 af 42 15 de f8 e8 f3 d7 a1 0a ef 7c 74 79 e0 7a 10 ae f5 73 a3 cf 5e 84 2b bd 5c e8 f3 c0 f4 21 5d ea e7 47 9e 07 a1 0a ef 57 3a 3c f0 3d 08 57 7a b9 d1 e7 81 e8 42 bb d5 ce 8f 3c 0f 42 15 de ae 74 79 e0 7a 10 ae f5 73 a3 cf 03 d0 85 77 ab 9d 1e 78 1e 84 2b bd 5c e8 f3 c0 f4 21 5d ea Data Ascii: w''?'??O++W+\|w!]>z!]^+:yw:<B\|7=zGW{^+B\|tyzs^+\!]GW:<=WzB<Btyzswx+\!]
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 50 df c9 a8 6e e4 d4 37 72 6a 1b b9 28 4e e4 a3 0a db 28 4e e4 a1 3b 92 84 ce 4a 13 39 28 48 e4 a1 23 92 84 8e 4a 12 39 28 48 e4 a1 23 92 84 8e 4a 12 39 28 48 e4 a3 ca 3f e9 47 94 5a 3c a2 d1 e5 05 a3 c8 e8 5a 3c 8e 85 a3 c8 e8 5a 3c 8e 85 a3 c8 e8 7d e4 74 1f d7 91 d0 fb c8 e8 7d e4 74 3e f2 3a 1f 79 1d 0f 87 ea 3a 1f 79 1d 0f bc 8e 87 de 47 43 e6 3a f9 8f ff 00 db 1f 31 d7 cc 75 f7 91 Data Ascii: Fj0Q};af5wFj0Q};af5wFj0Q};af5wFj0Q};af5wFj0Pn7rj(N(N;J9(H#J9(H#J9(H?GZ<Z<Z<}t}t>:y:yGC:1u
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 fd 2d e0 0e 4f f5 fe 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 6f e4 d4 37 72 6a 13 b9 28 4e e4 a1 3b 92 84 ee 4a 13 b9 28 4c e4 a1 33 92 84 ce 4a 12 39 28 48 e4 a1 23 92 84 8e 4a 12 39 28 48 e4 a1 23 92 84 8e 4a 12 3f d4 79 45 a3 ca 2d 1e 50 5a 3c 8e 85 a3 c8 e8 Data Ascii: ;af5wFj0Q-Oaf5wFj0Q};af5wFj0Q};af5wFj0Q};af5wFj0Q};af5wFj0Q};af5wo7rj(N;J(L3J9(H#J9(H#J?yE-PZ<
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 fd 2d e0 0e 4f f5 fe 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 be cd 46 1d f6 6a 30 ef b3 51 87 7d 9a 8c 3b ec d4 61 df 66 a3 0e fb 35 18 77 d9 a8 c3 b6 cd 43 77 26 a1 3b 92 84 ee 4a 13 b9 28 4e e4 a1 3b 92 84 ce 4a 13 39 28 48 e4 a1 23 92 84 8e 4a 12 39 28 48 e4 a1 23 92 84 8e 4a 12 39 28 48 e4 a1 Data Ascii: Fj0Q};af5wFj0Q-Oaf5wFj0Q};af5wFj0Q};af5wFj0Q};af5wFj0Q};af5wFj0Q};af5wCw&;J(N;J9(H#J9(H#J9(H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49957	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	873	OUT	GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg?h=420&iar=0&w=1230&hash=51E0FB2312B4005496EF1209FD583A43 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	885	IN	HTTP/1.1 200 OK Connection: close Content-Length: 52634 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="solving-crimes-at-the-speed-of-now.jpg" Content-Type: image/webp Etag: "y8gxKjo7IjyKGme7FWrz8SQWL9tCPAkytyG2j3z9Ymk" Fastly-Io-Info: ifsz=361299 idim=1230x420 ifmt=jpeg ofsz=52634 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010215 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120096-DFW, cache-pdk-kfty2130034-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460564.080634,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 92 cd 00 00 57 45 42 50 56 50 38 20 86 cd 00 00 50 c6 03 9d 01 2a ce 04 a4 01 3e 51 26 8f 46 23 a2 21 27 a3 f3 7b 10 f0 0a 09 65 6d c4 b3 3a 8b 8d f1 9c 69 d5 9f 0e ab 4f 53 21 99 83 c4 d3 97 7e 0f c0 fb d1 7f c5 f4 a1 ff 89 de 51 d9 bf df 7b 03 79 84 e6 f4 e2 0e 6b 9d 96 b5 3a a7 ec 67 c8 c9 1f e6 3f 3a 23 7d fe df 06 fe 1f ff 0f 9c cf b6 7f 49 ff 8b ee b7 e6 2f fd af 5f 7f d7 3f e4 7b 14 ff 54 ff 03 ea b7 ff 87 ee 47 c1 8f ef 3f f8 7d 59 7f 5c ff 8f fb 73 ee df e9 eb fc 67 a8 1f f4 0f f4 1d 75 5f bb 3e c5 df b8 de b2 df fc bf 76 be 23 3f b6 7f d9 fd d8 f6 b7 ff f5 ec 01 ff bf db 67 a2 5f bd 9e 76 fe 5f f7 6b c3 9f 3f 5f 5a fe 23 f7 83 e2 3b f6 6c e5 fb bf fa 3e 67 7f 46 fd 59 fd 9f f3 be a7 fe d8 79 9f f3 df fe 8f 51 1f cf 3f b4 7f c0 f4 f2 Data Ascii: RIFFWEBPVP8 P*>Q&F#!'{em:iOS!~Q{yk:g?:#}I/_?{TG?}Y\sgu_>v#?g_v_k?_Z#;l>gFYyQ?
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 2c f4 24 b4 e5 41 f6 bb 74 2c 4f 00 39 43 ed cb 58 59 d4 21 df 87 59 43 ba 92 52 ac 8d 5d d8 dc a2 20 cb ec 37 3d 28 d4 3f ae f1 39 f4 4a ce ac cc c6 a9 0c 30 0d 44 22 13 6c 69 0c 78 25 9c e6 1f 43 1c c1 15 c0 56 0a 9b 9f c4 2c 47 72 e6 32 2d b4 0f 43 7b 18 e3 b1 9b ed 49 18 54 3a 4e 2a 85 55 65 85 f2 af 8e 49 78 cd 25 6f 22 cd 80 fe cd e9 cf f0 a7 16 e6 34 13 91 12 99 c9 f1 37 eb 0c 53 53 be c5 75 42 94 06 a5 91 c8 28 5c a4 77 27 b6 52 98 8e 95 99 81 42 6b d3 fe d1 45 5d 44 fe 26 52 d8 4e cd d3 05 48 a6 1c 11 68 b1 2c 4e 5d d7 87 d2 19 03 7d 35 0b 14 94 c6 ae d4 69 7e a1 ce 19 9e 83 d1 c7 5d ce 69 bd e7 7a cd 2e 19 fe 05 10 44 0b da 93 d2 48 c8 ea b0 a6 9d ed 8e db 71 4e 7b 74 e4 8c 27 b2 ff f7 d5 3f ef 7c fa 8a 01 1f bf 92 1e 15 7b f6 b4 e1 d2 e2 b4 5c Data Ascii: ,$At,O9CXY!YCR] 7=(?9J0D"lix%CV,Gr2-C{IT:N*UeIx%o"47SSuB(\w'RBkE]D&RNHh,N]}5i~]iz.DHqN{t'?\|{\
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: f8 27 8f 90 14 00 83 9d ce 91 a3 5e 0f 56 35 80 71 16 08 14 94 d7 ea 94 f0 a7 2a 59 1e 39 88 40 97 6d d5 de 3e 0e 3a f8 7d 8e cb 3b 83 dd 84 c1 67 d9 32 2a 3f d2 d0 f2 18 4b 85 24 b4 69 4c d0 67 22 2e 81 71 72 8e 3a 6a 78 57 0f 47 98 19 68 c8 68 4d 2a f9 11 f0 d7 b9 3e d6 c3 f5 fc 53 83 de b5 31 d0 05 94 2e f8 51 b2 d1 29 2d 7d 06 ea 67 1c c3 7b 39 b3 e7 b8 53 d7 8c aa 5b 8f 78 45 1e 8e c0 7b e9 24 69 f4 08 e3 57 0b 62 14 85 4f b8 dc d6 6d 91 db 5c e6 b7 1e b0 f3 2a 24 aa a6 33 7b 56 35 8d 8b 0b 7d 89 7b 05 d3 0b 8d 63 18 2e 96 b6 90 66 23 11 37 a8 d0 fe 8f 15 59 f0 98 67 e9 a0 10 4c 8b 11 93 50 b0 cc 1e e4 c1 5c 0c 4d 87 63 41 30 76 54 1b 3a 21 85 89 d2 b9 64 39 cb 4a b2 36 c6 2d 47 52 65 71 db 0b 44 15 7a 58 32 f9 ec fe f4 c8 41 15 e0 cd 50 79 29 ca a7 Data Ascii: '^V5qY9@m>:};g2?K$iLg".qr:jxWGhhM>S1.Q)-}g{9S[xE{$iWbOm\$3{V5}{c.f#7YgLP\McA0vT:!d9J6-GReqDzX2APy)
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: dc 0f 48 21 6f cc 87 53 ee f8 27 ae 10 be a4 91 79 31 37 e8 cb a9 51 d5 99 b1 f6 0a 0a 78 86 9a 0c db ef 25 16 d4 c6 51 39 b3 3c ec a1 24 c8 49 36 2e c8 f7 20 76 97 b3 f1 7d 08 61 2b 14 97 82 3e bf d5 1c 15 6c a1 c0 be 43 98 94 b8 1b ee 61 44 62 45 40 4d 07 32 02 c4 f3 62 3a 4e 09 e8 7a 71 c9 b3 20 5c b5 5c 06 27 09 6f 9d b1 39 fb fe 39 9d a2 53 75 0e 43 d3 a0 af 0b ee 3e a9 9d c9 10 38 0e bc 34 1e 47 a5 f8 b8 6c 8b 35 dd d6 00 67 84 8b cc a3 ab 17 fc 54 cd d2 10 b4 4b 36 19 5e 91 41 64 38 dc 54 05 ff f9 c0 f5 07 3b ce 4a de 73 04 b7 57 dc 6a 69 85 6a 37 c5 81 21 7e dd db ca d7 26 50 fb ec b6 d6 e7 29 62 45 9f 12 c0 cf 3a 2d 56 f4 a6 19 2c 5c a7 5a 98 55 ed 53 73 3e 46 1c 69 19 87 5e e0 64 0c 20 11 20 8a f5 ca a4 7a 19 c3 46 1c 3d 66 a2 6d 1a 13 b6 ae 76 Data Ascii: H!oS'y17Qx%Q9<$I6. v}a+>lCaDbE@M2b:Nzq \\'o99SuC>84Gl5gTK6^Ad8T;JsWjij7!~&P)bE:-V,\ZUSs>Fi^d zF=fmv
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: c4 ec 79 23 d2 d0 fb 5b 3f 69 29 80 e1 1b 2e 87 a1 20 37 6f b3 14 36 90 a5 2b cd 75 70 d1 eb 6d e0 60 95 57 51 24 28 40 a4 7d 19 e3 b5 5d 04 1e 86 39 d3 2d a4 3e f9 9a dd 97 b9 5b e8 05 71 df d0 1b e7 f3 32 0f 55 03 ea f7 47 57 4c 7c a3 7b 1f 8d ed 73 50 da be d1 b3 44 81 95 9b 64 1a b0 1d f2 d5 42 c0 87 db e2 93 79 13 70 76 12 cd d6 6a b5 7c 3a 6e a0 fd db ce a2 bb 6b f9 e8 3b 0b 76 3e d9 12 48 fe 3d 40 84 43 e2 52 b4 db 81 9d 97 c2 59 a4 69 c5 13 bf b4 3b 51 a2 19 8e 36 71 9d 69 64 6d d2 6a 9e 40 13 f0 a1 9b b3 d7 b6 11 3d 65 3c 55 00 ab 71 a2 1c 52 7e b1 db 08 bd f1 45 c1 87 a3 fe d9 66 81 52 15 c0 a5 a9 d2 23 84 e2 bf 25 7f 03 8a b7 bd 88 63 65 63 77 c3 55 fa e4 b7 3f e6 1b eb 6f 01 6c 6c fe e7 03 6e cc d2 63 88 b7 13 3c 57 03 69 f4 d1 8c a0 93 2d 00 Data Ascii: y#[?i). 7o6+upm`WQ$(@}]9->[q2UGWL\|{sPDdBypvj\|:nk;v>H=@CRYi;Q6qidmj@=e<UqR~EfR#%cecwU?ollnc<Wi-
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 69 d3 bd 9f 25 64 1d 66 a3 77 69 57 81 8c d5 8a a6 f7 2f ba a7 e0 fc 67 38 06 87 d2 a8 60 db 8a fd 3b 35 36 94 ca d3 28 0c d1 b3 f0 b9 14 6e 80 35 b1 0b 6e 06 b7 e6 ec 3a c6 ee 0d bb 5c 3b ee 15 81 c9 48 a9 b1 4c 76 c1 e9 05 6e 5d 64 e4 3d 0d 05 a2 8e 3b cf f5 b2 71 96 8a ff 74 51 49 45 1d 78 a0 53 26 d4 7f 5a 23 07 1d ab d1 5f f0 96 6e b6 7b 95 75 c1 54 52 b2 69 82 d6 c9 4b 51 5d d4 43 42 ce 52 77 cd ff 61 b9 56 73 36 e1 ed a0 2e 93 93 db 58 ee ed ce b9 78 3b dc 72 45 d8 af 8c c5 3c 0d 48 65 9e cc 3a e6 16 e3 50 1b 6d 4e 0c bc 88 80 4c 1b 93 25 92 2c a8 3c 70 9f f6 5f 78 7c 22 6f ae 88 4f 8c 01 86 51 6c f2 86 97 b5 05 12 57 ec 4e 56 47 c0 05 b8 75 9b 9c ff 75 fb 57 e1 66 a5 33 82 18 b7 18 74 0c 59 e3 6e d9 ec 3e 1d 17 97 68 d8 9d cf 4e 4b be 3f f9 86 04 Data Ascii: i%dfwiW/g8`;56(n5n:\;HLvn]d=;qtQIExS&Z#_n{uTRiKQ]CBRwaVs6.Xx;rE<He:PmNL%,<p_x\|"oOQlWNVGuuWf3tYn>hNK?
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: fe 97 5f 39 2f e6 d1 01 0d c4 35 f0 ad 5d 11 ce 66 6f 9c b9 ca c0 32 a8 8b cb 29 8e 5e cc 9b 42 fc 73 fa 50 bb 49 11 47 05 57 db f8 b4 74 55 f3 8d 8b db 0c b8 74 10 84 27 2c 7d 8f d2 52 5b 22 90 d2 b8 62 bd f4 e9 f0 58 65 eb 4e bf c5 a8 90 16 a4 9b 88 88 46 a3 aa 3c 40 cd 44 e9 c0 76 54 d1 cb 94 89 46 5b f0 46 28 a8 60 68 8c 7c ef 21 11 7c af 4a 55 6a ae cc e4 79 de 8f f9 aa f6 c8 fd cd ae 71 64 ce 33 e0 45 ec 94 12 5c 48 af fb 89 b7 ee 5e 99 f2 ca d8 f8 77 84 ae 5c ce aa 4c 15 c7 b7 6e 00 d1 6b d7 18 e0 45 8d 61 c6 3c 7e aa 83 93 93 5e 3c 17 2e a6 e8 f9 01 db dc 7e 21 9d 3e 86 a2 61 cc c9 0c 52 98 74 0a 6d e0 f4 01 e9 0a a9 c3 45 9a 2f 9e b9 8c 32 7c 76 c8 5c 0e 52 5a 03 1d 73 9a 80 3a cb 8d f8 6d de 11 c7 85 cb 66 f4 74 0b 78 67 8f d8 e2 23 0f 48 9d 95 Data Ascii: _9/5]fo2)^BsPIGWtUt',}R["bXeNF<@DvTF[F(`h\|!\|JUjyqd3E\H^w\LnkEa<~^<.~!>aRtmE/2\|v\RZs:mftxg#H
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 06 9f 7c b9 00 c6 91 b3 6b aa 05 33 b0 5c 2a 96 0b 4b 22 c4 1f 4f 61 24 d8 12 5b 7e f0 73 33 2c 9f 88 b1 dd 12 6c 82 54 f2 3f 1f cf 47 c5 10 96 03 1a 48 99 1d b7 56 f2 19 cf 47 8c 9b f2 f7 ca 27 c7 0b d4 09 88 4c e6 db 81 86 e3 ec 35 a4 fb 4b 32 f2 f3 3a 7c ee ff 9a 3c 21 25 d7 2c 84 30 e6 fa 43 a0 81 09 2f 45 3d b1 04 25 82 20 01 06 b6 4f 67 a1 39 d8 d8 70 f6 52 cc 2d 02 0f 71 88 3a d2 87 8f 2e 61 54 4c e5 de ee d5 3d 8d 03 ad d5 fd dd 9c ab 65 ce 2e 65 cf 14 b5 76 be 12 7f 38 c1 41 92 d2 73 ba de e5 3e ee b8 75 e7 b4 cf 2e bb 4f 1e 2e 04 72 ce fd 08 37 7b 8b e1 10 ac 42 c1 09 6a 72 3c 22 e3 fc ac 12 84 c5 f5 c1 e8 13 49 35 73 9e a1 02 47 bc d7 6a 20 1f ca db 0c 1a 3b 45 52 25 1d 9a 88 9a 02 be ac f0 b7 ad 2d 01 a4 c0 af 5d 60 5c 97 0f b9 fb 74 99 32 46 Data Ascii: \|k3\*K"Oa$[~s3,lT?GHVG'L5K2:\|<!%,0C/E=% Og9pR-q:.aTL=e.ev8As>u.O.r7{Bjr<"I5sGj ;ER%-]`\t2F
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: f0 c4 fa 3a 8d 91 b0 c1 d2 8e 69 d1 f5 c0 14 4b ac af 9f 8b 20 63 5b 1c 9d 3a 6a 01 c0 a6 d7 76 99 cc 11 35 f7 7b 3a 5d b0 df fc 73 fd 84 3c 83 a8 89 f9 55 42 93 0e 1b e0 9d ba b1 24 b6 8a cb 6f de 33 ed 0c e1 09 a7 71 96 96 c6 78 f5 45 04 4a 75 a6 54 2d a9 9e 6a 39 0c e2 55 89 cd e1 48 96 1a e9 bc 01 1c 8c 3c 7b 89 ca b7 86 cf 1c 27 6c 46 22 4a a6 b6 d1 84 79 27 3d f8 15 d5 f7 86 3f 49 63 e5 a7 72 a0 2a be 29 b5 ce 96 fa 11 fb d3 81 49 b6 b1 3f f1 b3 e8 b8 30 03 19 28 13 1a 88 52 69 01 e6 e4 dd 42 d0 fd 06 01 94 c6 d8 aa 66 77 e1 f5 85 5a 7c 39 50 0f 10 62 56 78 9f 94 58 0b 2a fd 91 38 08 46 2f 3b cb 79 7f 98 2c d8 75 2a 80 af 3a 8d 1b 42 a1 cf c8 73 10 9f 02 8c 7f 85 4c 53 cb e3 89 be ff 20 58 8d 5d 99 61 0c 97 b3 0b e7 55 18 b6 b0 52 e9 12 64 54 c5 16 Data Ascii: :iK c[:jv5{:]s<UB$o3qxEJuT-j9UH<{'lF"Jy'=?Icr)I?0(RiBfwZ\|9PbVxX8F/;y,u*:BsLS X]aURdT
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 10 18 84 b9 ac 91 c3 cc c8 fc 42 32 74 c1 27 50 d9 2b af a6 e0 e2 c7 5b 14 ed e7 c9 ec 58 ef 43 6d e2 5c 4f 52 98 42 3f fc 6d 58 22 6b 01 94 4a 63 ae 9d 06 b8 ed 9a 1f 86 31 ff 6a 36 4e 08 ec fd 4c 14 8b 26 e1 24 06 69 b5 38 b0 4b e4 be 32 98 37 a3 5f d7 63 83 a2 9a 2f bb 19 b9 3d 1a 22 d4 6d b3 db 0d e4 78 7c 37 ca df 4f 7b 61 52 d9 ab 4a a5 0f 08 9f f6 11 ff c9 8c be 04 6c 05 34 48 53 df 03 5e 65 51 b5 25 45 a2 3c be fb 0d 21 e7 83 eb e4 74 87 28 0e b4 4d 81 0b f8 13 da bb a1 a4 69 34 e3 78 f2 9e 89 82 1f 95 58 1d c7 e0 03 55 54 39 02 93 0d 78 9e 35 80 9f 15 2d 8e 0b 4a 90 2f 75 0b 7c 69 cc b9 cb 76 f7 e3 ba 36 e7 b0 29 58 1a d6 02 40 3d 89 ac 82 13 8c 9d 8a 65 8e e2 d9 2f 06 a3 4c 2a 19 be 36 08 c8 8c 11 a1 8c 0c 01 2d 5a f6 98 4b 63 4b 30 2d 97 07 c2 Data Ascii: B2t'P+[XCm\ORB?mX"kJc1j6NL&$i8K27_c/="mx\|7O{aRJl4HS^eQ%E<!t(Mi4xXUT9x5-J/u\|iv6)X@=e/L*6-ZKcK0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49954	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	861	OUT	GET /-/media/images/corporate/csr%20wellness_mobile%201_800x420.jpg?h=420&iar=0&w=800&hash=5CAE46E3F2412A05E7D8584D25B63DFF HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	878	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53504 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="CSR Wellness_Mobile 1_800x420.jpg" Content-Type: image/webp Etag: "1Z8wX6m6to08tDT251HscvysomXrHWiiRHiYh5pmkRc" Fastly-Io-Info: ifsz=282882 idim=800x420 ifmt=jpeg ofsz=53504 odim=800x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120139-DFW, cache-pdk-kfty2130071-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460564.079740,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 f8 d0 00 00 57 45 42 50 56 50 38 20 ec d0 00 00 30 38 03 9d 01 2a 20 03 a4 01 3e 51 22 8e 45 23 a2 25 22 a7 52 3d 28 a0 0a 09 63 6d f6 f3 3a 63 fc b3 9e 4c b3 4b b2 1b ae d6 2f df 60 8f 79 9d b7 fd ff 3e 5e 4f f1 ff ed fa 57 ff 7f bd 0f 7c ff b7 e7 5b ee 1e b7 3f 33 bf e8 ff f0 fc bb f9 df fd 67 fe 17 b0 f7 f5 9e 91 5f e2 bf f5 7a a9 fe a9 fe cf ff 3f fd 3f 78 5f fc df b8 3e ff bf b7 fa 82 7f 5c ff 6d d7 43 fb d3 ec 85 fb b3 eb 35 ff cb da 6f fb d7 fe 6f dd df 6a 1f ff f8 5f 1e 63 fc ef fc 0f cb af 3d 7f 32 fb 3f f7 5f e2 ff d0 7f d6 ff 35 ee eb 97 7e db 3f f1 ff 6b ea 77 f3 7f ce 7f c2 ff 37 fb c9 f1 2b fc 6f da 8f 2d fe 71 7f b7 f7 63 f2 23 f9 ef f5 4f f6 df df bf 26 be 56 e3 15 dc af cd f4 20 f7 b3 ef 5f f7 7f c8 7f a6 fd b1 f8 70 fc 5f fc Data Ascii: RIFFWEBPVP8 08* >Q"E#%"R=(cm:cLK/`y>^OW\|[?3g_z??x_>\mC5ooj_c=2?_5~?kw7+o-qc#O&V _p_
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: b1 26 58 5a 60 73 13 71 2e f6 b3 ed 25 f4 36 16 ec e4 13 ed f7 14 02 7b 8f 75 1f 7f d7 a6 37 1d 09 b5 4d 41 1c a7 25 ee e3 ab 0f 36 3b 3f 81 18 82 cf e7 d3 95 79 e0 b2 94 89 6c ff 2b c8 ca 61 57 2f 8e 87 21 2a 4a 7c 67 23 26 80 23 1d c3 ee e8 3f c8 e0 23 7a 3f 28 23 e5 68 c4 25 a0 8a 04 f8 88 9f 7d 54 83 4f ce 37 09 ea 59 ed b7 0f 74 5a 6b 09 f0 1f 90 25 fe 4f f7 ca 6c b1 d8 4a 3c 7c 3c a7 d9 5f ed 33 e0 fe 50 41 77 7b 01 d2 b1 9c 90 01 9a 87 62 0a ed 7f ce 72 9d 4a 35 d9 0a 3c 41 d3 32 cd a5 0b 21 c6 b0 ba 27 8d f2 36 b2 4d 63 25 5b a8 a5 62 f9 34 7c 23 67 b4 70 d1 93 19 ba a9 66 47 4e 6c 65 93 c1 a6 44 33 f1 c1 97 49 ef 68 8d d6 fd 29 97 f6 53 bc d0 7c 4d 3b 66 01 63 db 2f b4 70 4c b7 5b d0 98 8e 62 1b a9 73 99 f1 9d b8 e5 ab 3a 6f 71 ea fe e4 59 ea e4 Data Ascii: &XZ`sq.%6{u7MA%6;?yl+aW/!*J\|g#&#?#z?(#h%}TO7YtZk%OlJ<\|<_3PAw{brJ5<A2!'6Mc%[b4\|#gpfGNleD3Ih)S\|M;fc/pL[bs:oqY
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 82 44 a1 9f ed 38 d5 1f 6f cc e8 bf b7 a4 8a a0 63 ad 65 6e d2 1a d5 2c d5 ff 43 e8 66 5e 31 8e b0 d4 63 09 ea 75 82 53 27 f9 b2 f5 c6 dd f5 8d c7 04 c8 08 3e cb 61 d7 ee c7 c5 4f ac 6e 4a ae 2f 66 76 29 a3 3a d3 db f9 58 df c4 59 90 2e 28 b2 d6 3d ac a5 e3 59 3a 9a 36 d3 25 4c 5e 89 81 6c e9 ef 24 de 7d 91 13 3c 52 ac a2 1e 14 6b 64 42 90 97 68 51 ec ff 12 80 c4 0d 95 8f 1d 25 7b ba 50 f4 13 98 0f 97 f7 3e 88 92 9a 53 94 c2 d6 eb 73 08 09 7c d2 0e 3d 35 9d fc c7 1f e5 12 7f 92 89 99 e6 a6 de 0d 91 28 1a d9 94 2c 70 d6 71 e4 ab 7d 06 f2 db 66 d6 e5 e4 b2 c8 4d 30 22 24 e8 b4 09 f5 bb 8e e4 a4 ee 8b 4f aa 0f 6f 47 86 78 6d 0e e7 0f d4 f7 7f 1a 1a dd 71 4c f5 16 88 8f 9d 32 85 15 ad b8 43 5c bb a6 f4 97 3d 71 fc f8 fb ee 47 17 73 01 55 77 70 38 22 ea dd a1 Data Ascii: D8ocen,Cf^1cuS'>aOnJ/fv):XY.(=Y:6%L^l$}<RkdBhQ%{P>Ss\|=5(,pq}fM0"$OoGxmqL2C\=qGsUwp8"
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 4b d6 1a fe a1 51 47 9b 4e 37 b2 0a f1 02 98 38 4d 08 75 03 50 d6 99 0c df 40 12 d0 cc 96 db 31 e7 63 11 7c 50 d8 bf b0 e4 fb 19 25 f2 72 dc 4c ef 06 b5 8f 2f 6c 85 3c a9 0b 1b 28 0f 15 8c 10 db 4f a9 cc 24 e9 c4 26 8b 19 d4 a6 b6 b1 5d 7d e5 9f 26 fa fd 83 12 a3 95 e4 41 d6 dc 5d 53 82 31 cf d2 a5 c0 2a 32 b8 f6 d9 a7 82 ca f4 fc 80 57 e7 19 a8 5f 1d b7 f9 9c 1b d3 80 d4 97 53 14 b6 bf 0f 3a 3b 00 b5 e1 77 9f e6 f6 39 f1 c2 b6 d1 c0 30 f9 36 0d 51 ba 7b 52 e7 26 0a c4 03 a1 9d b3 d6 ce b2 60 bd ee 0e 03 d3 f0 df 0c 79 e9 dd da 06 38 8f 73 ed 0f 68 9d 22 d6 e2 05 ee 7f d5 b6 b6 40 1c 43 ac c9 bb 6a 97 c9 69 98 88 91 c8 78 06 45 70 be 54 15 04 15 d4 0f 81 72 ae 63 30 e0 3d a8 92 c7 68 ca 7e 12 4f 2f 00 79 56 d0 48 af 68 37 80 a5 ef 14 3b 41 fe 6b 1d 0b 8a Data Ascii: KQGN78MuP@1c\|P%rL/l<(O$&]}&A]S1*2W_S:;w906Q{R&`y8sh"@CjixEpTrc0=h~O/yVHh7;Ak
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: b9 a5 b3 2a 40 2f 3b f9 5c bf fb 7b d5 bd f3 9d 40 b5 b0 d1 d8 33 a9 f2 1a f6 46 fb e1 4b dd c8 8e cb 5d 30 67 43 c3 8f 1d 4f 8a 64 aa d7 94 f2 19 4b 3d f4 6b f5 1e 8a c1 ab 36 e6 bf 3f f8 ed 0c 7b d3 ce f7 56 87 05 55 b1 fc 64 8a 5d 12 af 08 7c 7e 27 4a be 55 b2 59 66 8f f1 84 93 0b 21 38 17 5b 5f 75 93 30 20 a7 e9 d5 62 47 ff 7f 45 fe 83 f1 7f 21 ff ae cd 68 4b 4e 53 1b 1f 32 d9 7b be 42 cc 1b 4a 98 bd c5 02 9b 84 aa 16 3b a4 6a be 2a f8 ad 9c df e8 e6 eb 07 72 94 21 6d 65 41 99 40 53 37 f6 84 9f 7a ba e3 f4 9e 5e ed 50 c7 d4 7c df 74 3a 4c 58 ea 1d 44 3c 32 af 85 bb 7d df 2c d1 7d 3c 08 d0 63 3a 2b c8 e7 33 ff 0b e4 ca ee ee 3c c9 7d 04 4b 0c 71 4b ac 68 7c e9 e2 24 2a 4a 7b f9 0e b6 8f ef 52 db 73 ab 20 9d 13 e4 91 15 60 7c 3b c6 8e 1b e8 1b 78 b3 92 Data Ascii: @/;\{@3FK]0gCOdK=k6?{VUd]\|~'JUYf!8[_u0 bGE!hKNS2{BJ;jr!meA@S7z^P\|t:LXD<2},}<c:+3<}KqKh\|$*J{Rs `\|;x
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 12 ee 98 ad f5 6d ce 32 8d 9e 8e 33 a5 f5 3b 08 e7 fe 3b a5 6e 2f a3 56 19 bf a2 a8 bb c5 42 01 b1 71 e4 84 1f 1f 30 f9 71 5d aa 64 be 68 d5 fb 62 59 4b 68 25 cd c5 9f d5 05 14 15 74 65 6f f2 34 4f 1c 9e 20 67 90 07 52 e8 5d 66 89 dc 37 64 97 7e 10 6a 71 6f 55 72 28 e2 92 cd 53 ad 73 77 76 ce 61 4d fa 0b 19 50 6f f5 2a 42 d9 2d 34 8c e0 3e dd c4 a7 c0 8f 61 8c 67 e8 3a 87 b2 5f b0 d8 3a b1 b2 31 c3 52 ca 77 6f c5 48 ad df 3e 85 96 78 33 d2 b3 82 40 32 b4 38 43 3d b9 34 bb dd 64 98 c2 8e 18 e0 73 67 14 a9 89 b2 53 4b ce 9b 3c 67 67 9a 81 bb 6a 1f 82 b9 cd bf ab 95 e1 0c 01 74 cf 4e 82 fa af ee c4 28 7e 4e 48 35 02 61 30 a6 15 8d 5b 16 23 f2 09 4b b1 4a 4e ac 87 84 6e f9 c4 05 3a f4 34 8b d9 87 42 99 4f 49 24 22 03 fc a9 18 9f 64 df a6 6a fe ed a6 97 a6 26 Data Ascii: m23;;n/VBq0q]dhbYKh%teo4O gR]f7d~jqoUr(SswvaMPo*B-4>ag:_:1RwoH>x3@28C=4dsgSK<ggjtN(~NH5a0[#KJNn:4BOI$"dj&
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 80 68 f0 f3 32 c3 27 b7 b3 7b 2c 8c 1f f0 4e 1e 0e 01 d8 4a 2c 37 3e 5c 90 c3 98 f1 d9 bb 07 87 e4 56 37 54 93 2a 53 3f 0f b3 8c 2c 2d a8 f3 58 b1 69 0b f3 70 8c 02 10 33 a5 75 fa b0 b9 04 0a f0 9c dc 8b f7 0a 9f 19 0d de 92 da 67 80 0e 9a 99 50 e4 74 35 b3 34 eb 0b 84 6c 17 06 62 38 0f 55 09 fd f7 ca 5b c6 63 4e ed 1d 38 2c 31 b0 1f b1 19 c0 e8 a6 ef c6 cf 98 eb d8 2d 8e 2e c3 28 37 53 d9 14 c5 23 4d ac 96 ed 88 88 b5 40 eb 75 97 ab 42 de 85 03 03 a6 44 f4 10 f7 11 6f c9 a9 f0 09 73 1e 85 a4 87 99 1e 4a 11 c5 1d f8 e4 32 11 7f 92 bd 68 51 3a 8f 13 aa 4c c0 63 63 dd e5 a7 d5 24 39 fa ec ae 69 7b b6 a3 c7 eb 9b d5 0d cc ab 6a 20 dc d6 bb 54 90 0f b9 af 54 33 a0 13 73 f0 1f cc 00 dd 56 9a 91 c1 b7 5c 0d 4b e1 5e 63 15 8c d3 26 19 a4 27 ca b1 40 b5 56 31 26 Data Ascii: h2'{,NJ,7>\V7T*S?,-Xip3ugPt54lb8U[cN8,1-.(7S#M@uBDosJ2hQ:Lcc$9i{j TT3sV\K^c&'@V1&
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: f0 22 09 c2 94 48 01 f3 48 01 cc 3a 00 75 45 96 bc 8f 26 f3 ea 14 7a ca 14 42 6b 97 d2 e0 7f 72 bd 64 a0 20 c2 ad 9b 42 07 dc 21 bd 2a c0 97 ac 30 27 5c 4a d9 70 12 d8 e8 f6 83 e3 ad 33 26 3a b7 a7 0f 4c b0 a4 b4 27 1b a1 56 7c a3 61 78 64 71 6e 08 4e 4f d9 e3 87 32 f3 da 93 e6 78 c6 8a d6 c1 c9 b1 c2 ac 72 53 79 64 b9 62 f4 dc cd 6e cd d1 71 d7 ad 14 b1 ad 14 82 60 e3 0f 2a 1c 9f 45 99 21 e9 a1 a3 3d 86 0c ab a2 e8 cd b5 2f a5 7a a0 da 8e b3 91 f8 92 a3 c0 a2 dc 56 3c 41 20 1f ff c6 ba 9e 1f b9 68 44 de 22 a3 ff 49 67 f3 c5 85 11 6d 68 a4 a8 a3 c7 e3 86 51 03 d0 ba 0e e8 86 c2 cf 24 b3 6d 5f 10 a6 6b b1 4d ee 1e 8b 1c 8d 9b 01 11 e2 18 bf ff ab 32 21 bc 19 d7 83 df 53 47 16 73 45 f4 fa 53 05 e7 1c c6 fb 3a 86 44 ee 04 51 08 ac 00 91 f6 f0 6c 06 5b d1 74 Data Ascii: "HH:uE&zBkrd B!0'\Jp3&:L'V\|axdqnNO2xrSydbnq`E!=/zV<A hD"IgmhQ$m_kM2!SGsES:DQl[t
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: b1 92 31 6a af 89 5e 1b 49 44 3c e3 b8 58 45 58 f3 1e 87 cf 58 23 5c 69 ca 51 4a 47 ff cf 36 c3 d7 0e c0 74 cb aa 8b a8 d2 8f 15 02 8c 46 3d 81 c8 e6 6f 84 15 bb 35 f7 1a 7c f0 66 7b 1d ca a7 8f 57 79 40 e9 2c 9c 47 66 cd e2 44 3b bd 33 fd 10 aa 05 f1 f2 0f eb a2 27 6f 4f 50 d3 c8 9b 93 23 a1 92 b5 1f d4 79 75 7b 7f a5 72 b5 c2 a4 6f 10 cb 71 23 df 2b bc f0 7c c5 1b 46 1f 8a 67 2b 10 65 a7 dc 9a e1 75 2c 38 4d 89 0c b2 e8 ce 68 1b bc 1c 8e 8b 37 d1 8a c0 be 91 a7 e1 6e f8 c9 e7 95 35 5b 35 94 89 df c4 4a b3 d5 32 c6 46 f8 6e 81 42 ba 00 cd cd 6d 07 a6 de 1f 35 d2 fb 20 53 34 f7 d0 99 d2 08 7d 18 99 c6 af b5 32 8c 95 e9 1e 74 00 50 5a c7 1d 7c d7 3c 08 14 ca 11 ad d3 04 c0 7d e6 9e 60 de c6 2b 5a 46 66 20 aa a2 83 7a b6 33 04 8c 1d 0b 92 3c 98 b8 66 89 5a Data Ascii: 1j^ID<XEXX#\iQJG6tF=o5\|f{Wy@,GfD;3'oOP#yu{roq#+\|Fg+eu,8Mh7n5[5J2FnBm5 S4}2tPZ\|<}`+ZFf z3<fZ
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: cb 4f 23 91 5a 84 05 5f ee 5e 20 a3 a8 6a 85 76 0a 16 9c f3 78 00 be 2c e4 8d 35 17 9c 36 3d 22 de a6 5b 85 91 64 ba 0c 1c 69 8c 4b 63 7c 9a be 7d b7 7d fa 45 26 e6 be f2 81 9c 7f 1b b3 4a 00 cd d6 b8 f8 67 9e 4a 20 a3 53 69 b2 d4 e9 96 8c 9a 84 40 32 06 a1 24 bf 5d 23 a7 8b 97 d1 a9 1a b4 79 a4 69 af a6 27 11 f1 38 6c b6 dd ee 9f cf 01 1a 7c 22 66 16 b3 b9 1e 1a 09 23 1b 1a be 25 5a 90 fe 57 c3 28 05 2a 9a 1f 8e 2a 6d 64 d0 79 3d 62 90 c1 4b 1b 10 63 2a 7c a4 a9 52 47 e3 50 9d 92 63 9d 11 19 70 2f 7d 90 6e a0 7c 67 a1 50 7f af eb f9 fe 33 bd eb a7 72 49 ac 37 ec 74 ab 8a d9 91 65 a8 23 13 fd 22 85 43 32 05 0b 45 ed 18 7f f0 97 15 43 ea 19 c1 fc a9 fc 46 c2 32 c5 44 73 54 03 c9 f5 45 1e c9 e8 8d 56 05 e1 99 d4 8d a4 52 89 cc b0 f6 65 b3 1a f6 17 fa d6 df Data Ascii: O#Z_^ jvx,56="[diKc\|}}E&JgJ Si@2$]#yi'8l\|"f#%ZW(*mdy=bKc\|RGPcp/}n\|gP3rI7te#"C2ECF2DsTEVRe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49958	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:03 UTC	863	OUT	GET /-/media/images/homepage%20carousel/from-complex-to-possible.png?h=420&iar=0&w=1230&hash=980BED648303F4AA5BC7BDCF211C2315 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	876	IN	HTTP/1.1 200 OK Connection: close Content-Length: 444664 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="from-complex-to-possible.png" Content-Type: image/webp Etag: "vOB062MxU0Iib7prGcNeRq/FBQWA3YFMXtrdTXwQ48Q" Fastly-Io-Info: ifsz=716107 idim=1230x420 ifmt=png ofsz=444664 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120034-DFW, cache-pdk-kfty2130048-PDK X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1713460564.079339,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 f0 c8 06 00 57 45 42 50 56 50 38 4c e3 c8 06 00 2f cd c4 68 00 8d 40 6c 24 49 68 a4 19 18 fa 96 e5 f2 0f f8 ce d8 ff 11 44 f4 7f 02 b4 6d 49 6a ad 2d 49 2d 49 8d ae 0b 78 6c 0e 80 24 4d 90 f4 a8 25 d6 e1 76 ec 38 b9 87 f8 a6 b5 ce 05 09 2a b1 5d 59 48 a0 25 4d e9 3c 4f c6 80 d8 8b 1d 40 db 85 e6 03 ad cf 0b 4f aa 02 39 02 47 8b ad cf 73 b9 6d b3 49 60 99 1b ad 8b de a4 c8 9d 82 24 47 a0 a5 9e f0 d8 3e 39 c7 9d ec e2 60 b4 f6 d4 e7 af 1a 42 2a 40 55 a8 3e 66 26 d8 f6 38 c7 c8 27 6f d8 e8 73 cf 6f 0c 90 6d 01 76 98 90 0d 30 c0 1e 7a ca 06 d0 57 92 d4 6f 0a 18 9b aa 2c 8d 66 96 f6 10 5e 10 65 1b ff 4a 92 58 1a 48 c1 72 df cb cc 33 49 16 8c 47 6c 3b de f8 0f fa c5 3a aa 80 db 3d d3 73 c6 36 dd d8 be ed 6e 2d b6 f9 07 40 82 83 c1 9e 99 9a 49 7b 8b Data Ascii: RIFFWEBPVP8L/h@l$IhDmIj-I-Ixl$M%v8]YH%M<O@O9GsmI`$G>9`B@U>f&8'osomv0zWo,f^eJXHr3IGl;:=s6n-@I{
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 99 2f 93 24 7a e2 9a 48 2e b8 e6 f1 0d 80 f6 cb ef 56 79 3a ff ab 9d fa 20 04 be c1 01 0e cd 72 72 07 2f 00 2c 60 75 00 74 80 f5 a8 a3 8e 96 1c 95 24 49 a4 92 84 1c df e8 d9 f8 76 54 b6 b7 3d 6d b5 95 34 1e 69 c9 91 84 0e 00 d4 0f 3a 00 4a 4f ab 5f fd c3 e1 71 d3 20 8e af c7 4d 2b 00 75 bb 6e 1a ab 3e 40 51 42 d3 60 d8 e8 74 8a 75 24 6d b5 e4 ad 92 24 c9 b7 84 1c 21 78 f4 d5 96 23 63 7b 20 47 4b 8e c6 f1 d2 5e da 4b b2 7d f8 01 80 e0 27 c5 27 53 75 96 47 e9 43 cf 83 40 ee df 3c c0 50 2b 57 eb fd 5a f4 a1 e9 a2 cc 6e a3 83 b2 d1 a1 76 d6 64 25 19 db a3 27 23 49 92 24 91 24 58 6d b5 23 c9 c3 23 c7 46 68 40 5a 92 8d fe 0f ff cc c4 d7 fe eb 83 e7 43 28 02 5a b9 c1 b8 9c 1f 37 7d 55 0b 40 81 ce c2 01 76 80 6e b8 41 92 24 c9 a3 27 47 46 92 95 24 59 49 40 4f 92 Data Ascii: /$zH.Vy: rr/,`ut$IvT=m4i:JO_q M+un>@QB`tu$m$!x#c{ GK^K}''SuGC@<P+WZnvd%'#I$$Xm##Fh@ZC(Z7}U@vnA$'GF$YI@O
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: d4 1b e3 57 f3 fe 19 cf 77 7b a8 f1 ed b4 16 7c c1 d7 5e 4f cf bb 45 e1 e0 e6 e7 c4 07 62 80 42 44 4b 7d f9 da db 33 41 b3 0e b9 d7 53 36 c6 ed 02 ab ee fb ae 47 77 d5 91 c0 dc a9 ae ba af 9b 4a cd 74 00 82 d0 b5 7c e7 4a 77 b0 4b 7a ae 21 6f 27 90 75 b7 ea 3f 01 80 57 91 63 f5 f6 04 12 86 63 78 7b 44 b8 a8 02 20 9b 6f 1f c7 85 cd 14 8a 64 95 91 8c bd f6 5e 09 43 76 1c bf 67 47 34 61 04 fc 07 ef 57 1e c7 17 6f bc 8a dc 0f 2b c7 09 91 9e be 33 2d 22 10 66 23 bb f8 c7 7b 93 2f 70 ca 7d 79 f6 42 38 1c 99 3b 23 04 30 39 12 fb d9 3b 52 78 81 75 cd 9f 84 ef 74 2f 82 09 32 b1 39 8e 0f 71 55 3d 0c fd ba fc e6 0b 87 da 9d 23 13 b0 83 19 02 14 89 a8 c1 cf dd 63 dd 4b b8 ba 19 6b 45 1a 40 2a f9 d4 a2 59 00 51 16 e3 9e 3d e1 e7 ee 7b b9 8e e3 42 b8 29 69 0f 1b 29 24 Data Ascii: Ww{\|^OEbBDK}3AS6GwJt\|JwKz!o'u?Wccx{D od^CvgG4aWo+3-"f#{/p}yB8;#09;Rxut/29qU=#cKkE@*YQ={B)i)$
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: b2 18 48 92 20 b7 51 64 2f 2d 7b c7 9e 7a b7 5f 37 15 13 e0 3b 92 6d d5 b6 6d db f2 28 73 af bd 0f f3 d1 5f bf cd cc 23 a7 8f d6 fa 3c 47 04 86 6d db 86 a1 b2 ff 4f 5e 4d 39 6c 24 41 92 03 66 af ff de ea 75 9a 8a 98 80 7f fd e7 cf 2a 86 29 03 13 9c 96 94 2d 6d bb 7d ac 38 f6 e7 fc c3 ec 5a fd cb f9 fb 92 33 11 2b 60 06 09 95 00 ec d6 da ad 99 19 bc 04 15 23 aa 6d b1 2d 06 a8 ac 3b 03 62 c3 33 13 58 2a 75 59 30 78 0b 4c 59 8c 59 33 80 c0 42 a9 29 af 73 c3 e3 fe b7 ff 50 9b dd ee ff f9 8f b1 5c 54 2c 31 10 4b 2c b1 18 48 5b 77 46 49 b3 b3 16 3b cd 80 a4 d1 da 89 55 17 60 0a 26 a3 6d a8 94 6a 01 30 0c 6c 8b 84 bb 26 00 64 58 6d 97 4d d2 26 ff fc d7 17 03 fd e7 eb c7 89 98 00 68 a3 dc cb 3b 40 4c 08 1a 07 b6 ae 49 10 cb a6 2c c1 86 98 35 f3 d8 05 81 a9 4e 00 Data Ascii: H Qd/-{z_7;mm(s_#<GmO^M9l$Afu)-m}8Z3+`#m-;b3XuY0xLYY3B)sP\T,1K,H[wFI;U`&mj0l&dXmM&h;@LI,5N
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 98 42 19 40 d6 30 33 4c 4c 9d 44 a3 9a 09 4d 6d 8b f1 ee 91 f7 dc 63 27 ff fa ff 7b b2 aa 79 4e 5b 99 95 c4 58 c1 02 75 05 50 6c 84 ec 51 9e a9 25 40 78 cc 96 a5 6d 94 21 52 b5 8a 8a 67 da b3 b2 a0 32 85 06 d0 ec 3a 6f 58 4d 06 40 64 53 b6 02 7e 49 db c4 be 8e 76 77 72 cb b8 d6 a0 3b 6f 0a 46 8c cc 6c 63 26 84 24 12 31 80 b2 98 f2 36 41 0c 31 81 d6 0a 24 b0 a5 17 18 81 0d 9b ec 49 92 a0 0b a6 cb e3 f8 59 34 50 56 e4 97 eb 19 68 2f 7d 7b 8b 06 f7 2e 1e 30 92 0d 14 d8 ea 76 bc 2d e2 bd 6a 41 92 50 36 da 81 37 d9 06 41 2a d1 b5 18 d9 ac 6d 8f d0 95 20 63 06 e0 b2 80 0d a6 28 35 02 cc 09 00 6c dd c8 c3 2f 31 44 ff f1 fa 58 46 09 e5 e1 0c 29 0b cd 32 03 5b 12 24 66 84 a2 0c 04 8b a0 b5 02 ed 62 29 f7 d8 dc 31 e2 a2 5c 46 c8 b8 92 bb 7b fe a8 35 76 c4 ab c4 d3 Data Ascii: B@03LLDMmc'{yN[XuPlQ%@xm!Rg2:oXM@dS~Ivwr;oFlc&$16A1$IY4PVh/}{.0v-jAP67A*m c(5l/1DXF)2[$fb)1\F{5v
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ff fa 7b f6 7b b9 17 ee 1f ff 36 8b c0 22 c0 04 a6 20 01 27 6b 5e 02 de 72 ed 4a d9 56 b6 09 95 a4 de 21 08 6f e4 05 07 a5 52 db ed 5c 51 32 6d f3 af bf bd b6 b6 33 ba 51 ce dc c4 2e 8f 00 09 c4 36 25 5a 05 41 28 a5 94 5f 2b 28 93 33 b7 bb 49 b1 3a 8b 94 6d da ae 58 56 4b 99 dd 6d e3 d4 68 0d 75 d9 75 82 76 d9 bd ec ee 89 b1 e6 cb 17 c7 8e ed 4b c6 09 1b 5d a9 74 95 c3 d4 59 24 bc a5 b2 b6 86 d3 85 5b 28 4b e0 c2 50 ba 32 77 ef d3 b5 59 ab d9 a7 bb 7f 6e b5 f3 74 b6 6e 77 ea 97 f6 f9 fa c9 dd 68 db ae f0 de ed 68 01 f6 44 bb ba a8 0c 65 5c 82 b2 73 2d 59 c4 08 e3 a0 e3 4a 0a f9 80 41 54 32 08 f3 02 bf 85 44 9a 46 0a ae a0 42 a9 9c 15 01 42 15 a8 31 4a 25 81 8b ad 25 26 02 74 9c 84 10 5c 18 a0 63 91 41 1f 41 c3 2e ac c4 52 88 01 27 4a e1 d1 11 6e d6 90 0b Data Ascii: {{6" 'k^rJV!oR\Q2m3Q.6%ZA(_+(3I:mXVKmhuuvK]tY$[(KP2wYntnwhhDe\s-YJAT2DFBB1J%%&t\cAA.R'Jn
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 97 59 bd 35 4d ee f2 09 28 14 d0 52 78 e5 a8 70 b3 9a 57 68 d4 9d bc c0 8b 7a 73 14 68 02 01 6a 10 8c 25 11 0f b1 35 80 3a ce e5 0d 21 c2 ba 23 c4 b8 19 00 42 38 3e 9d 88 45 d9 0b 36 11 a1 cd ee 68 2b bb dd 9b e7 42 75 ac e5 58 67 2d 5e d1 b2 76 1b d6 db de eb 22 57 ca 85 8e 7b a1 ab 76 bd ba df de 5e 6a 9d 37 bc e9 ad 94 85 c6 86 a9 bb b1 29 a5 44 e8 7a ab 27 db d7 b3 ae 6d d6 44 6c 07 eb 32 fd 98 e4 f2 46 63 b5 c5 02 60 df d6 7a 37 f6 76 f8 7c 8b c4 c3 dd 4a 1b b2 ec 76 37 67 1b 38 9a 90 95 52 75 6d 61 85 05 97 4d b9 d9 ed 99 d3 cb 4e af b7 c3 4a 8b 6c 6e 76 38 1c 32 f4 d2 49 ea f8 a6 3b 4f 1a a4 b3 57 d1 98 76 6d af bf d8 31 68 6c c0 9c 90 ee 6c 32 87 90 75 16 34 3b c0 dd 3e 88 d2 dc 51 fd 73 d9 0b 04 06 67 1c b3 eb d5 63 61 44 e3 3a 21 3e 12 58 27 4e Data Ascii: Y5M(RxpWhzshj%5:!#B8>E6h+BuXg-^v"W{v^j7)Dz'mDl2Fc`z7v\|Jv7g8RumaMNJlnv82I;OWvm1hll2u4;>QsgcaD:!>X'N
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 0d a6 eb b4 58 78 75 dd e6 76 db ba 25 b5 cf 77 07 c2 f7 63 15 4b 1d 53 19 0e 6c 2a db d4 06 aa 85 4c 31 00 c4 86 6a 2a 65 11 23 c0 96 c0 76 15 93 8c ec 55 18 21 49 cc 68 a3 8c d7 4c a6 79 98 ea e5 9c 59 17 ca 12 e7 7d 7b f7 80 db fd cb ff dc 00 76 01 d4 5e 1d 9b c4 66 d6 80 01 88 51 65 86 ca 30 c5 b8 2e 64 63 cd 00 31 ca 19 8c a4 2b 62 0a cf ca c0 d5 28 30 2b 2b 5b 0d 43 03 c8 56 8d fa 62 ab 1e e7 db 7b 4b 5e cf d4 e0 96 d5 a6 cb 9b ec a9 a9 60 14 23 06 8b 81 30 d8 00 ae c8 72 c3 b0 cb 86 65 00 46 12 4c ac 6c 13 50 5a 93 24 78 c3 0a 65 72 a8 29 0b 14 ec ac d6 1f aa d5 72 7e 5f 3b 66 4f b6 ba 95 18 69 9b 35 80 c1 12 18 94 a1 ca 72 6b a7 11 80 2d 6b 86 0d 03 15 a6 0b 46 66 36 0c 57 ea 82 b1 0d 56 2c c7 74 9e b5 50 86 c3 23 65 26 c0 65 01 b5 3f 1d 17 9a bf Data Ascii: Xxuv%wcKSlL1je#vU!IhLyY}{v^fQe0.dc1+b(0++[CVb{K^`#0reFLlPZ$xer)r~_;fOi5rk-kFf6WV,tP#e&e?
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 90 77 fe 70 7e fe ee 43 99 db de ed 62 16 0a 68 e9 97 bb db b5 3b 8b 10 e8 45 6d dc 5a f1 3c 55 bf aa ed e8 b3 ef b1 e9 3e 2c 05 5c 5e 7e 00 01 22 4c 50 9a 02 34 0f df 77 f9 e7 e6 3f 5d bd 7e ea b8 d7 39 f5 b8 20 27 18 3c 08 ec 84 7b b8 85 e9 e5 30 f8 d2 f5 62 e3 8a 36 e0 41 53 4e 41 17 76 8e 19 1a 0b e8 40 6c e0 5a 3a 0d ee 91 c6 39 d6 ef df a2 8d 5a 75 de 1b bc dd 7f 19 58 0d 29 4c 20 24 80 30 dd db f1 18 6a ed 1c b6 68 7a a6 dd dc ed 9e e5 ee e5 fa 9d 9d 6e df dd 4b f5 c2 b1 55 59 9d 17 43 75 e8 d6 ed 64 5d 2e d2 6e 11 9d 4a a4 c8 33 27 bb b4 b3 d7 ac b0 05 d7 31 44 ab d2 85 5d a4 6c 5a 64 75 40 dd 76 f3 7b c6 77 e6 3e c7 be fc 69 2c e3 eb 8c 98 50 2c 2d db e8 db 1e 2c 9f 9d de ef 9b e9 28 b7 cb 9c 97 66 73 1b b6 08 86 47 3c 2c 61 14 40 58 a8 6b 3a d0 Data Ascii: wp~Cbh;EmZ<U>,\^~"LP4w?]~9 '<{0b6ASNAv@lZ:9ZuX)L $0jhznKUYCud].nJ3'1D]lZdu@v{w>i,P,-,(fsG<,a@Xk:
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: a0 4a b3 92 a8 01 6b a8 75 48 32 0e dc 0f bf d4 b9 d6 f2 dd 17 88 51 74 db 30 04 af a1 71 2c b3 46 43 c4 d5 41 91 01 53 11 0f cb ba d3 56 61 bd 2c 9f 63 0d 5a 3f 33 2d a2 32 e0 9a 2a 01 57 8f ad 33 25 b2 c6 21 93 1d d5 a0 7f c8 ce 31 2e 49 33 34 0b 08 30 69 64 29 a3 86 0c a2 4a 27 18 57 5d 09 94 e2 41 22 6c 43 92 44 a8 2b a3 1f cc b9 93 ea 66 7f f5 fc de fc c3 f5 2f ee 97 9c 95 c5 bd 01 85 2b 69 03 d8 15 83 21 e3 71 6b 09 e1 0c c6 38 34 64 14 09 6a f1 f1 40 67 1b 71 cb e7 b4 c4 59 92 6a 44 db 1d e6 5a ab 46 7a e3 cc 61 2e 74 bb cd 60 62 ea 46 aa dc 6f b5 9b ad 01 b4 62 e7 a3 be ee 62 79 d5 b1 7f 5b 02 06 b6 ee 6a aa 55 9c e3 45 9b fc 98 8c 57 b1 c7 bb 6e 5a c6 dc c8 0e 63 17 d3 d8 84 27 2b 50 20 bb af 62 37 b5 ad 39 72 6c 58 02 0c 23 87 ab 96 c8 d9 98 de Data Ascii: JkuH2Qt0q,FCASVa,cZ?3-2*W3%!1.I340id)J'W]A"lCD+f/+i!qk84dj@gqYjDZFza.t`bFobby[jUEWnZc'+P b79rlX#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49953	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	739	OUT	GET /Areas/LNRS/js/LNRS.bundle.config.js?v=638484963603668861 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	698	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7189 Content-Type: application/javascript Last-Modified: Fri, 12 Apr 2024 05:26:00 GMT ETag: "06457e7998cda1:0" Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 553202 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210038-DFW, cache-pdk-kpdk1780029-PDK X-Cache: HIT, HIT X-Cache-Hits: 25, 0 X-Timer: S1713460564.058314,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 20 3d 20 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 20 7c 7c 20 7b 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 20 3d 20 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 20 7c 7c 20 7b 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 2e 73 63 6f 72 65 5f 63 63 66 20 3d 20 22 2f 41 72 65 61 73 2f 53 63 6f 72 65 43 43 46 2f 6a 73 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 2e 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 20 3d 20 22 2f 41 72 65 61 73 2f 53 63 6f 72 65 42 6f 6f 74 73 74 72 61 70 55 49 2f 6a 73 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 Data Ascii: ;(function(global) {global.require = global.require \|\| {};global.require.paths = global.require.paths \|\| {};global.require.paths.score_ccf = "/Areas/ScoreCCF/js";global.require.paths.score_bootstrap = "/Areas/ScoreBootstrapUI/js";global.req
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 6f 6e 73 2f 43 6f 6e 74 61 63 74 56 69 73 69 74 57 69 74 68 54 68 65 50 72 6f 66 69 6c 65 43 61 72 64 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 41 63 74 69 6f 6e 73 2f 53 68 6f 77 41 6c 65 72 74 4d 65 73 73 61 67 65 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 41 63 74 69 6f 6e 73 2f 54 72 61 63 6b 43 6c 69 65 6e 74 45 76 65 6e 74 41 63 74 69 6f 6e 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 43 6f 6e 64 69 74 69 6f 6e 73 2f 43 6c 69 63 6b 65 64 43 6f 6e 64 69 74 69 6f 6e 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 43 6f 6e 64 69 74 69 6f 6e 73 2f 47 65 74 73 46 6f 63 75 73 43 6f 6e 64 69 74 69 6f 6e 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 Data Ascii: ons/ContactVisitWithTheProfileCard","score_ccf/XPerience/Actions/ShowAlertMessage","score_ccf/XPerience/Actions/TrackClientEventAction","score_ccf/XPerience/Conditions/ClickedCondition","score_ccf/XPerience/Conditions/GetsFocusCondition","score_ccf/XPerie
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 74 73 74 72 61 70 22 2c 22 6d 61 74 63 68 48 65 69 67 68 74 22 2c 22 6b 6e 6f 63 6b 6f 75 74 22 2c 22 6b 6f 5f 65 78 74 65 6e 64 65 64 22 2c 22 6a 71 75 65 72 79 56 61 6c 69 64 61 74 65 22 2c 22 6a 71 75 65 72 79 55 6e 6f 62 74 72 75 73 69 76 65 41 6a 61 78 22 2c 22 6a 71 75 65 72 79 56 61 6c 69 64 61 74 65 55 6e 6f 62 74 72 75 73 69 76 65 22 2c 22 69 6d 61 67 65 73 4c 6f 61 64 65 64 22 2c 22 74 79 70 65 61 68 65 61 64 22 2c 22 70 69 63 74 75 72 65 66 69 6c 6c 22 2c 22 62 6f 6f 74 73 74 72 61 70 73 6c 69 64 65 72 22 2c 22 63 73 73 45 73 63 61 70 65 22 2c 22 73 6c 69 63 6b 22 2c 22 64 6f 74 64 6f 74 64 6f 74 22 2c 22 6c 69 67 68 74 73 6c 69 64 65 72 22 2c 22 62 6f 6f 74 73 74 72 61 70 53 65 6c 65 63 74 22 2c 22 6d 6f 6d 65 6e 74 22 2c 22 64 61 74 65 74 69 Data Ascii: tstrap","matchHeight","knockout","ko_extended","jqueryValidate","jqueryUnobtrusiveAjax","jqueryValidateUnobtrusive","imagesLoaded","typeahead","picturefill","bootstrapslider","cssEscape","slick","dotdotdot","lightslider","bootstrapSelect","moment","dateti
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 22 62 6f 6f 74 73 74 72 61 70 41 6d 64 46 69 78 22 2c 22 6a 71 75 65 72 79 54 6f 75 63 68 53 77 69 70 65 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 62 6f 6f 74 73 74 72 61 70 41 6d 64 46 69 78 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 62 6f 6f 74 73 74 72 61 70 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 6d 61 74 63 68 48 65 69 67 68 74 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 6a 71 75 65 72 79 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 6a 71 75 65 72 79 56 61 6c 69 64 61 74 65 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 6a 71 75 65 72 79 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 6a 71 75 65 72 79 55 6e 6f 62 74 72 Data Ascii: "bootstrapAmdFix","jqueryTouchSwipe"]};global.require.shim.bootstrapAmdFix = {"deps":["bootstrap"]};global.require.shim.matchHeight = {"deps":["jquery"]};global.require.shim.jqueryValidate = {"deps":["jquery"]};global.require.shim.jqueryUnobtr
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 6e 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 6a 71 75 65 72 79 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 73 63 6f 72 65 62 6f 6f 74 73 74 72 61 70 22 2c 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 41 6e 61 6c 79 74 69 63 73 44 69 73 70 61 74 63 68 65 72 22 2c 22 65 76 65 6e 74 4d 61 6e 61 67 65 72 22 2c 22 6d 61 74 63 68 48 65 69 67 68 74 22 2c 22 64 6f 74 64 6f 74 64 6f 74 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 20 3d 20 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 20 7c 7c 20 7b 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 2e 6a 71 75 65 72 79 4e 6f 43 6f 6e 66 6c 69 63 74 20 3d 20 7b 22 6a 71 75 65 72 79 22 3a 22 6a 71 75 65 72 79 22 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 Data Ascii: n = {"deps":["jquery","underscore","scorebootstrap","LNRS/Track/AnalyticsDispatcher","eventManager","matchHeight","dotdotdot"]};global.require.map = global.require.map \|\| {};global.require.map.jqueryNoConflict = {"jquery":"jquery"};global.require
2024-04-18 17:16:04 UTC	294	IN	Data Raw: 2e 72 65 71 75 69 72 65 2e 6d 61 70 5b 27 2a 27 5d 5b 27 54 72 61 63 6b 2f 54 72 61 63 6b 46 69 6c 74 65 72 73 27 5d 20 3d 20 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 54 72 61 63 6b 46 69 6c 74 65 72 73 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 5b 27 2a 27 5d 5b 27 54 72 61 63 6b 2f 44 61 74 61 4c 61 79 65 72 4d 61 6e 61 67 65 72 27 5d 20 3d 20 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 44 61 74 61 4c 61 79 65 72 4d 61 6e 61 67 65 72 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 5b 27 2a 27 5d 5b 27 54 72 61 63 6b 2f 47 6f 61 6c 73 4d 61 6e 61 67 65 72 27 5d 20 3d 20 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 47 6f 61 6c 73 4d 61 6e 61 67 65 72 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 75 72 6c 41 72 67 73 Data Ascii: .require.map['']['Track/TrackFilters'] = "LNRS/Track/TrackFilters";global.require.map['']['Track/DataLayerManager'] = "LNRS/Track/DataLayerManager";global.require.map['*']['Track/GoalsManager'] = "LNRS/Track/GoalsManager";global.require.urlArgs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49960	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	632	OUT	GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=915B990125E8A6865191232B3C3F9D8F HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	884	IN	HTTP/1.1 200 OK Connection: close Content-Length: 133156 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="insurance_december_carousel jpg.jpg" Content-Type: image/jpeg Etag: "Obxv5dIkmYwRzXH6xDr5Xs3Yo/MLpkMdW+cdAjIkrhc" Fastly-Io-Info: ifsz=590559 idim=1230x420 ifmt=jpeg ofsz=133156 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: img01-us-east4 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560834 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120020-DFW, cache-pdk-kfty2130077-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460564.146610,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: d2 b8 12 5d 37 c7 75 4f d6 aa 8c bb 1d 23 63 cc f5 34 55 d4 b2 dc 4a f2 ca da 9d d8 b3 1f 53 50 28 a5 c3 50 34 a9 d9 cd dd 8e 67 6e 2c 7f ad 27 62 b1 3c f5 5b a7 45 14 65 41 c1 44 84 2e 28 88 a3 0c c0 74 e6 7e 03 9d 61 a3 23 7a 96 04 70 0b 0c 02 4e d9 20 72 f8 fa d5 88 2b a5 a4 01 cd 0f 4d 39 77 6d 82 f4 f5 f2 fb b6 f8 52 d9 0e b6 66 ea 4e 68 b9 f3 1c 69 10 04 13 b9 ce c7 7e 5f 76 3e 79 a9 f8 6d 89 ba 93 53 a9 31 a9 03 1f c4 c7 92 8f 8f 53 d0 52 b3 ad 34 67 6d 82 56 95 27 ad 51 69 ae d2 61 3c 32 c8 20 f6 99 7c 38 1a 94 9e 4a 07 db 3f 82 8f 3a 0e fe f0 dd 3e 17 68 93 64 5f cc fa 9e b4 77 13 ba 2e c6 da 22 34 29 f1 b0 d8 33 0d b0 3d 07 21 5a 47 69 15 82 24 d7 4a 1e 66 1a a3 80 f9 1e 4c fe 43 c8 73 35 92 90 25 b9 ea 80 97 6f 51 7a a7 a3 59 82 53 f4 7a 2c 02 Data Ascii: ]7uO#c4UJSP(P4gn,'b<[EeAD.(t~a#zpN r+M9wmRfNhi~_v>ymS1SR4gmV'Qia<2 \|8J?:>hd_w."4)3=!ZGi$JfLCs5%oQzYSz,
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 32 09 66 f0 eb 38 f5 e4 0e 72 6a 11 65 67 67 17 10 ef 6e f3 23 83 ab bb 19 2a ba c7 53 d4 d7 5a ed 0d c7 b5 76 72 d6 40 9a 62 ef 1b 0b d3 0a 30 6b 8a 68 33 3d c8 2c 5a 69 65 5f 0a 6f 8c 64 e3 d3 1f 8d 35 45 61 95 4b e5 b7 ac 17 52 4d f8 cc fc 9f 88 5a eb 52 af 31 9b a7 64 2f a0 02 c3 74 32 25 b1 48 d1 d2 d1 7b 88 46 a9 19 fc 59 20 90 14 67 e1 bd 01 7f c4 b8 ac 93 34 eb 78 f6 a3 bb 8f 18 25 34 ae 06 14 01 b9 f5 a2 6f 2e a3 b7 b2 8a da 12 b1 24 47 7f b4 cc c3 56 49 f8 55 62 e6 e5 5a 49 b0 a5 88 89 08 67 39 3b e9 df 1e 74 a9 45 0b 66 c9 73 c5 b5 3e f9 bd f1 2e 17 29 7b 0f b2 9d 11 ee d6 37 8e fe 29 a2 91 6e 38 6d b5 fe eb 97 65 ee 5b e2 5a 3d 2c 7e 66 b0 f0 70 2b 90 54 dc dd 58 93 f6 02 ac d1 fd 46 8c 7d f5 5b ef 99 e3 7d 4c 79 af c3 ad 66 39 5f 60 ac 77 db Data Ascii: 2f8rjeggn#*SZvr@b0kh3=,Zie_od5EaKRMZR1d/t2%H{FY g4x%4o.$GVIUbZIg9;tEfs>.){7)n8me[Z=,~fp+TXF}[}Lyf9_`w
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: d8 32 99 64 60 3b d6 58 c9 76 2e dc 97 61 e7 b7 9d 3a e1 5c 56 de ee fe e1 de e4 b9 b3 6b 8b af 69 5d 90 16 01 55 37 c1 6f 11 04 9d 86 69 37 05 87 8b 3d 87 17 4b 6e 1e f0 85 b5 29 02 2f 22 66 3a 0b bb 9c 64 85 cf 3f 95 49 6d 0c 1c 07 84 dc 98 96 2b db cb d9 84 20 63 31 2f 76 3b dd 81 f7 fc 44 0f 2a c4 ea 84 b8 df a2 80 36 eb b4 93 d9 34 a9 6b 2f 79 fc a6 dc 07 80 de 9b d8 6f 2f e4 82 7b 18 d9 ae 4c ad fc eb 24 5e 3f 02 ec cc 49 c6 7a 7a d0 1c 5e de cb bd 59 6c e4 92 29 2f cb 96 67 60 1d e5 67 20 a3 30 0d a4 8f 2a 6e f6 b7 31 58 f1 1e 23 c4 da 56 9a ed 23 8a 38 87 bf a5 7f 7b 22 1f e0 56 38 5f 4f 2a cf 00 b7 e2 dc 5a ea 39 6e ac 12 4b 7b 58 de 74 8d 86 34 b8 3e 1f 19 39 c9 e6 49 35 36 aa aa cc ed 51 6c 34 b5 ec 25 97 0f 51 d4 01 4c f6 99 4c ed 34 02 cd ad Data Ascii: 2d`;Xv.a:\Vki]U7oi7=Kn)/"f:d?Im+ c1/v;D64k/yo/{L$^?Izz^Yl)/g`g 0n1X#V#8{"V8_O*Z9nK{Xt4>9I56Ql4%QLL4
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 32 0e 01 f3 34 58 ec ff 00 16 b8 d2 d7 9c 41 6d e1 8d d6 45 8d 4e 5c 29 1b ae 07 36 fb b9 d2 89 bb 3d c2 b8 7d d8 76 93 c1 18 21 16 4d 24 88 f7 c8 09 ee e4 f3 39 ce 4f 5a 99 75 3e de bf c2 3e 72 a9 48 8f 67 f1 19 4a e2 b6 f0 59 c9 7d 64 62 73 2c 33 2b 6b 2b 9c 8d ce 32 d8 c0 c1 db 3d 29 6d 94 f0 4a ad 14 96 ed 28 93 03 54 8d 95 0c 39 1c b0 e7 e8 2a fd 2c 9d 97 b5 b8 2b 3d e0 b9 91 c2 b4 4e ec d3 9c 8d 97 03 75 c6 06 36 e5 4b ee 7b 4b c1 ec 9f 16 fc 3c 8c f2 60 00 6d 3e 87 f0 23 a5 50 39 23 4a 6e 4f 13 a4 62 a8 bb 5d 07 60 bf c6 23 b3 5e 26 0b c3 fb 3d 44 2f e1 6f dd 1d 00 f4 6f 16 59 80 3b d6 e7 83 76 8a e2 52 25 56 c6 74 b2 33 e9 4f 86 94 cd 13 73 db 4b 89 a3 69 60 b2 8c 48 a4 06 2e 49 c8 e8 d8 18 f9 8a 4b 3f 68 b8 d5 da 92 6e 42 60 61 82 28 f7 4f c7 27 Data Ascii: 24XAmEN\)6=}v!M$9OZu>>rHgJY}dbs,3+k+2=)mJ(T9*,+=Nu6K{K<`m>#P9#JnOb]`#^&=D/ooY;vR%Vt3OsKi`H.IK?hnB`a(O'
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: d4 67 35 f6 d9 a7 c6 43 14 93 ca a5 19 15 02 12 39 0a 24 29 35 41 ac 53 a4 c6 4d 64 31 1d 6b 70 a2 b5 68 f3 c8 d3 58 c1 71 3d ae b6 d7 51 88 9b ce b7 11 79 b5 11 9b 84 1a 4d 83 d6 7b c1 59 11 81 59 10 87 6c 67 03 a9 f2 14 dd 2b 45 d2 6c a5 70 5c f2 1c 87 99 a8 1d 8b 12 4e e4 d4 ac 80 90 07 ba 39 0a c8 8e bb 53 3a 0b 93 59 cd 15 dc ad 63 b8 f5 c5 2e 56 86 f2 0c d6 a7 06 8b 16 e4 f3 60 2b 7e e1 76 f3 a3 91 8c 17 8b ca 67 a5 60 46 7c a9 98 88 0a 90 28 c5 1e 6f ae 76 68 b5 23 24 e3 14 6c 70 00 35 9e 9c bd 4d 4c a9 92 00 15 bb 10 48 03 dd 1c bf 5a 21 00 82 f7 90 2c 60 1c 9d cf 9d 4a 31 5a d6 db d3 81 68 26 f9 ad b9 d6 82 b7 07 1c e8 de 0d 27 b1 e9 58 c1 a9 06 2b 6d 3e b4 62 de 44 45 6b d6 a4 22 bc 91 3b ba a2 8c 96 20 01 ea 68 69 b4 c3 b6 d6 db ba 64 2a c7 0b Data Ascii: g5C9$)5ASMd1kphXq=QyM{YYlg+Elp\N9S:Yc.V`+~vg`F\|(ovh#$lp5MLHZ!,`J1Zh&'X+m>bDEk"; hid*
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: a7 95 69 d2 c4 35 1c 2e 15 4a 11 9b 3b 5e f9 78 9d 2d d7 6e 13 85 bd f4 4f 33 c5 6b 1b cc e3 9a c4 3b b5 03 fa 4c db e3 e3 8a 06 6e 22 90 06 d7 30 2f fe ea d8 95 1f 06 94 f8 8f c0 6d 4a 6e 2f 66 9d 4c 68 16 28 33 b4 51 8c 2f cf cc fa 9a 07 45 3d 3c 0a df 33 0b 75 6d 3d e7 ca 69 ad ca f5 48 ca 8f e1 a0 f0 df df 26 b9 be b8 b9 1a 01 11 c5 9c 88 d0 69 5f 9f 99 f5 34 08 8b 6a 32 2b 69 a6 6c 47 1b 31 f4 19 a3 c7 0c 74 19 b9 9a 38 47 91 39 6f a0 ad 40 d1 a2 02 8b 0e a1 b4 cf 3f 2e 27 12 73 1c cc 38 9d 00 f1 88 4a 54 91 db 3c 84 04 42 c4 f9 0c d3 82 dc 3a 0f 72 27 9c f9 bf 85 7e 82 a3 7e 21 76 ca 52 32 b0 a1 fb 31 8d 3f 7d 76 7a 8d ea 53 3d ad a7 ba 1e 6a 85 3f d6 57 04 fd 94 19 bd fb 24 69 c2 a5 51 aa e2 44 81 7f a6 77 fa 0d e8 95 fd 97 6f c8 49 70 c3 fb 0b fa Data Ascii: i5.J;^x-nO3k;Ln"0/mJn/fLh(3Q/E=<3um=iH&i_4j2+ilG1t8G9o@?.'s8JT<B:r'~~!vR21?}vzS=j?W$iQDwoIp
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 46 48 67 f2 0a 3a 03 f5 35 65 4b 28 38 6c 46 5b dc 49 72 7c 6b 6f 9c 85 fe 93 9f 3a 47 75 73 71 79 23 39 6d b7 1a b1 b6 3c 94 79 54 79 c7 72 6c c6 dc 7c a3 9b ad af 7b fd 9f 38 45 8c 56 72 5f 5b db 2a e8 84 e5 34 0c 69 55 3c cb 79 fc 39 55 d2 0b 3d 0f 68 1a 4d d6 e9 1d 89 eb aa 57 3b 63 e3 54 eb 1e 1f 2c 52 43 3c 8a c8 a1 c1 55 03 c6 df a5 5e ec 6c ae 25 60 ee 4a aa ac 6d cb 91 0c 18 8d f1 e7 59 aa d4 55 75 fa c0 05 ad ac a0 a5 5e a5 23 d0 62 6f 78 17 b1 cc 6d 38 72 28 d5 a6 e6 71 b7 96 84 a4 37 31 c7 6d 7f 14 b3 92 ce 24 53 a4 6f a4 87 18 d5 f3 23 6a e8 92 a7 b3 c3 a2 dd 88 3d fc be 32 bc bc 2a 36 de 91 af 09 e1 31 96 96 fa e0 49 28 21 b4 96 c6 00 3a 86 71 93 d3 95 3d 4e 54 a4 11 90 74 89 bf aa 38 99 e7 e1 b9 0f 14 31 09 59 ec 8a 32 e8 7a 80 9c 9d 52 e3 Data Ascii: FHg:5eK(8lF[Ir\|ko:Gusqy#9m<yTyrl\|{8EVr_[4iU<y9U=hMW;cT,RC<U^l%`JmYUu^#boxm8r(q71m$So#j=261I(!:q=NTt81Y2zR
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: cb a9 61 8c 69 2d 8e 4d dd 8c 96 2d 9c 02 e7 07 3c e9 bf 0a b2 e2 cf 1a ce bc 39 6c 21 8b 22 29 a7 c9 97 bb 23 4b 08 97 70 0f 23 b0 3b e6 9b 47 da 4b 34 b6 51 c0 78 2a c6 51 82 99 ae 0a a3 36 47 87 19 07 3e 5b 6f 42 fe d8 e2 d7 77 d0 cb 15 a7 79 de 6f 33 b8 60 8b 8d 9b 56 71 cb c8 ee 07 4a 56 0e c0 fd 58 5e d3 f2 8e 39 b1 6b d4 fc 22 13 67 6c f1 32 dd d9 da 96 b8 43 dd fb 54 ac 14 64 7b a7 42 92 9a 40 f3 3d 29 b7 16 e0 6b c5 6e 92 7b c2 ee 92 a2 b2 ad b0 2a e9 de 28 0e a7 04 e4 67 c8 62 a9 5c 4f 8d 47 69 3c b0 5d f1 77 95 48 09 1d bd ae 10 01 b1 46 2c 31 82 79 ed 8a 49 0f 15 e2 bc 4a ca e9 1b fd 4e da 30 24 8f 53 10 65 c7 35 19 cb 39 38 e6 33 8d e9 39 8a ba 36 60 bd 7d b1 8d 5a 5b 2c 5b b4 cb ec fd 92 e0 76 3a ae 4f 10 45 b7 94 9c 88 c8 d4 5d 77 24 85 df Data Ascii: ai-M-<9l!")#Kp#;GK4QxQ6G>[oBwyo3`VqJVX^9k"gl2CTd{B@=)kn{(gb\OGi<]wHF,1yIJN0$Se598396`}Z[,[v:OE]w$
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 5e 4c c3 0d a3 dd 20 dc ad 57 d9 a6 a2 74 2b ce 32 38 8c e7 d8 de 66 3c 89 c6 84 27 a7 89 b1 8a af 7f a4 52 5a 48 c2 47 00 83 87 45 fd e3 79 6f 9f 0f c6 aa 8f 75 73 33 03 24 8c cc 3d d2 c4 9c 7a 6f 53 cb 19 bf 88 cc 83 f7 c8 3f 78 bd 58 0f b5 f1 1d 7d 2a a3 03 86 43 a2 44 6e 56 c6 30 b0 70 3b 04 61 7b c6 a4 04 49 04 59 89 8f 85 9c 96 20 8e 98 db ef cd 27 b8 e2 77 f3 ae 7b f2 14 ec 55 76 1f 30 2b 16 cb 20 26 23 19 74 93 62 83 9f c5 47 98 a3 4f 04 b9 86 52 92 49 16 18 02 32 e0 6a 52 76 38 dc 8f a5 38 a1 45 74 c8 3c 24 1b 1d 8b 7d b5 db c6 d2 bc f2 4c f9 cc 8d f5 ad e1 1a f3 14 9a 8c 6c 79 f3 d0 7f 88 7e 63 ad 59 e1 ec f1 97 3a 2e 51 b3 ee f7 71 bc 80 ef 83 93 80 05 31 ff 00 47 38 7c 1d db 5e de 48 83 19 61 21 48 d8 fa 28 05 f6 a3 91 07 fb 48 9a b5 5b d6 76 Data Ascii: ^L Wt+28f<'RZHGEyous3$=zoS?xX}*CDnV0p;a{IY 'w{Uv0+ &#tbGORI2jRv88Et<$}Lly~cY:.Qq1G8\|^Ha!H(H[v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49959	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	633	OUT	GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg?h=420&iar=0&w=1230&hash=F1DF4E8DA09829A65EEF7AACA0C56D50 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	887	IN	HTTP/1.1 200 OK Connection: close Content-Length: 150251 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="United_For_Wildlife_Carousel jpg.jpg" Content-Type: image/jpeg Etag: "0jo6LhilKtTNfHvN+bbS1O0ZiGO/kZT83WOzfgPQEMM" Fastly-Io-Info: ifsz=174179 idim=1230x420 ifmt=jpeg ofsz=150251 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210162-DFW, cache-pdk-kfty2130040-PDK X-Cache: HIT, MISS X-Cache-Hits: 4, 0 X-Timer: S1713460564.152688,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 49 4f dd e7 bf de 9b 90 7b f6 a8 f0 45 78 7d b8 a3 0a 29 17 a6 a7 00 54 a1 97 b0 aa c5 72 69 39 a1 12 8c ab 99 51 da bc 0a 93 cd 55 50 d9 ab 28 b8 e4 ff 00 3a 42 21 49 95 32 e3 f5 a9 42 e4 71 51 a8 cd 58 55 e2 90 a7 48 ab 52 84 e2 9c ab c5 48 31 4a a2 8d 63 c9 ff 00 4a 98 28 14 aa 31 4f 14 a7 64 c9 02 8a 70 15 ec d2 d0 51 2d 7a 93 75 7b 75 45 13 f1 5e a8 cb 8a 4d e2 a2 8a 5c d7 b3 51 6e a5 cd 45 14 81 ab c0 d3 3b 57 b2 28 15 14 99 af 66 a3 dd 5e dd 41 44 fc d7 b3 51 ee af 6e a8 a2 97 35 ec d4 59 a5 06 a2 89 f9 af 53 33 5e cd 45 13 eb d4 cd d4 9b aa 23 0a 4a 5c 8a 87 7f f2 a4 dd 51 48 53 66 93 22 ab 97 a6 17 a8 a4 2b 05 a9 0b 8a a8 64 fb d3 4b 8f 9f d2 a2 96 0a d9 90 53 3a 9c d5 53 20 14 c3 28 a3 08 ab 66 4a 61 92 aa 99 b8 ff 00 4a 8f ad f7 a9 95 05 77 a8 Data Ascii: IO{Ex})Tri9QUP(:B!I2BqQXUHRH1JcJ(1OdpQ-zu{uE^M\QnE;W(f^ADQn5YS3^E#J\QHSf"+dKS:S (fJaJw
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 79 52 3f 4a 8c b0 1d f8 a8 1a 10 95 60 cd e0 71 4d 32 9f 26 a1 c3 11 ed 04 fc e2 99 86 1d c1 fe 46 9f 28 52 54 c6 51 f2 69 86 5f 03 9a 8b 72 e7 93 4a a0 54 ca 02 92 a4 dc 69 37 35 2e 07 6f e7 4a 00 f8 a9 6e 8a 4a f0 24 d3 86 69 46 71 4f 15 20 74 51 26 1b 1f 6a 50 1b bf f3 a5 c1 a9 00 18 e6 95 14 c0 a6 bd b4 79 3c d4 80 0f 8a 5c 54 51 45 b4 78 a7 88 c9 e7 15 22 81 52 02 05 09 51 42 21 f9 fd 45 48 b0 28 a7 ee 1e 29 0b ff 00 c5 4b a8 94 44 a0 52 ed 51 e2 a3 2d e3 34 c2 d4 60 a8 a6 ca 8a 42 ea 2a b9 7c 79 a6 19 00 f3 44 34 94 b2 14 c6 53 e0 53 49 63 fe b5 01 99 7c 53 3a b9 f3 c5 1c 91 b2 12 14 ff 00 9d 26 e4 f9 a8 32 c7 b5 28 53 9e 69 a0 21 2a 5e a2 f8 1f 95 21 66 3d a9 a0 01 4e ed e2 a4 05 0a f1 dc 4d 2e d1 e4 d2 6e 18 a6 33 9f 14 61 02 55 85 2a 3b 57 b7 63 Data Ascii: yR?J`qM2&F(RTQi_rJTi75.oJnJ$iFqO tQ&jPy<\TQEx"RQB!EH()KDRQ-4`B\|yD4SSIc\|S:&2(Si!^!f=NM.n3aU*;Wc
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 9c 44 42 d9 5b 5f c3 71 14 ae 96 3c a0 52 47 19 c3 76 a6 9b d8 59 49 fa 75 18 e0 9f bd 52 b1 ca 8b d4 59 55 9d 76 ee db c0 51 d8 0f cc 55 53 23 6f 16 ea b9 f0 30 3f bd 26 40 5c e8 da 13 4c 00 ae 45 74 d2 31 65 db b4 64 00 47 c7 f1 1f f4 a6 35 d3 5a c7 34 8d 1a fb c6 00 3f df f3 fb 53 6d b6 19 2e 22 da 57 a5 b3 04 8c 6f dd fc 40 fc 64 63 14 1e e6 61 7d ab 5a 69 ed 65 70 f0 e7 79 99 47 ee 80 5e fb 8e 7b 8e e2 9c 34 49 b5 80 93 e4 96 4c 5b 53 64 7f 4d 54 09 b6 45 06 61 86 6c fe 21 9f 07 e3 8e 6a a6 a7 7b 2c 03 74 58 57 8d 77 39 39 db 8f f4 e2 96 f6 cd 64 79 21 8e e6 48 a4 38 0b 24 6d fb c5 20 64 37 3d f1 8c f3 c5 08 81 ee 35 48 6e ed b5 13 03 46 c0 a3 4b 16 57 a8 ad ed e0 77 56 cd 46 b4 17 67 37 6e 84 28 e3 03 28 f4 5a 49 6f ad 55 3a a7 51 8e 35 da 09 46 60 Data Ascii: DB[_q<RGvYIuRYUvQUS#o0?&@\LEt1edG5Z4?Sm."Wo@dca}ZiepyG^{4IL[SdMTEal!j{,tXWw99dy!H8$m d7=5HnFKWwVFg7n((ZIoU:Q5F`
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ca bd 9f be 6a 65 47 32 b0 64 04 f1 48 5f ed f9 54 20 1c 1a f6 4f 7c 76 a1 94 29 25 4a 64 07 b1 fd 29 37 ff 00 2f 15 10 f9 ef 4b ff 00 a1 47 28 08 4c a9 4b 13 8a 5d d8 23 e2 98 07 34 e0 3f e4 50 23 50 98 14 ff 00 d2 9e 3b 62 91 71 8f 8a 70 06 91 30 4f 5c 91 4e a4 1c 53 b9 c7 db e2 81 4d 29 c0 62 9e b5 18 26 9d 9a 54 65 48 2a 4c f1 9a 83 3f 14 e0 f8 02 96 11 05 4c 1c ff 00 cd 29 99 48 c6 30 45 57 2f 51 96 e6 a6 5e ca 67 56 0c 84 8c 63 8a 8c 9a 8f 76 45 7b b9 ef 47 28 0a 66 ee a4 f3 4a a7 e2 93 da 3e f8 f1 5e 2f cf 02 84 4a 32 88 c4 8a 17 dc d9 34 8e 30 72 ad c5 0e 6b ae 42 a2 92 c7 8c 0a 1b 7d 7d 6d 6a 09 9e e8 2b 28 0d b3 3e ef b7 02 94 53 71 72 72 e1 08 95 c5 e1 88 7b 23 dd ce 32 7f da 86 9b e7 73 86 8d cb 10 08 41 e7 3e 2a b4 33 49 76 8d 74 d1 3c 16 e8 Data Ascii: jeG2dH_T O\|v)%Jd)7/KG(LK]#4?P#P;bqp0O\NSM)b&TeHL?L)H0EW/Q^gVcvE{G(fJ>^/J240rkB}}mj+(>Sqrr{#2sA>3Ivt<
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: c8 8a 7d aa c8 43 6c f1 ed c7 15 7b dc 5e da 67 4d ba 09 55 b0 65 2f 0a 7d 1e 35 b6 5d 4e cd ac 7a 10 09 37 a3 02 36 bf 50 64 90 07 63 9e f5 0d b6 9e d6 72 5d cb a6 5e b4 6d bc 3c b0 b1 32 46 58 0e 46 33 c0 61 f1 e7 9a a9 a4 5d 49 75 ea 0f 52 99 23 65 8e 21 0c 71 23 67 93 b7 71 f3 8e 73 da a7 b4 bc b1 92 f7 53 5b 63 8b 98 36 3d cd b0 c6 e0 1b b7 6e 32 71 c5 07 35 c1 cf 1d 9a 4f 44 41 10 d3 e8 16 a5 6e d1 a1 0d 2a f0 70 08 1c e1 8f 82 2b d1 dd 43 35 c3 a2 06 2d 17 0c 78 da 37 0c fc f9 ac 14 cd 05 f5 d3 4d a3 eb b7 76 f7 12 29 12 58 22 46 59 9a 3e 77 15 98 1c 30 ee 08 c6 45 31 35 7b 6d 2b 53 8a 7d 6e e1 ed 5d ca c3 15 d3 47 d0 ea 1d a4 88 a6 0a 4a c9 8e e1 80 00 55 7c 03 78 1c c0 7b bb a6 0f 13 db e4 ba 3c b0 c5 3a e4 8c 9f 0c bd e8 3d d5 ac 90 6d 2b 2e 41 Data Ascii: }Cl{^gMUe/}5]Nz76Pdcr]^m<2FXF3a]IuR#e!q#gqsS[c6=n2q5ODAn*p+C5-x7Mv)X"FY>w0E15{m+S}n]GJU\|x{<:=m+.A
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: a8 ea 12 f4 d6 12 1a da 04 1b db 9e 01 6c fe 39 09 ec 3b 0a 03 f4 5a c7 a8 e7 81 2c 82 d9 ad a3 31 8e 4e 55 1d d0 82 22 8f 8e 54 0f c6 dd cd 74 a9 af 84 2b 05 ab cf 04 b7 ca 03 3b 7e 18 e3 6c 60 b6 32 71 f6 14 95 09 a7 95 ac 89 3e f0 1a 80 13 b3 9a ee d1 57 87 49 9a fa 30 da 99 c4 79 dd f4 ca 70 9f ff 00 73 c9 23 cd 5d ba ba 94 40 c2 d2 10 ca ab b6 22 c7 6a c8 e0 8c 2a e3 f8 47 93 43 25 ba 9f 59 99 74 fb 79 d9 21 00 fd 55 c0 1b 19 95 3b aa 8f 03 9c 64 56 5b d5 5a f8 82 3b 5d 2a d6 4f a4 98 7b 5d d7 dc 23 45 18 d9 18 ee 5c e7 c5 56 ca 6f a9 51 ad 22 fa c6 c0 75 4e e7 b5 a0 99 d3 e6 b4 d2 6a 30 ed 92 d2 dc e6 e0 14 5b 99 97 dc a1 db 80 a4 af 93 f0 3b 0a 0b 75 a9 43 69 1c d6 d6 f2 7d 4d f1 21 04 48 01 c1 ff 00 2a 8e c1 47 c9 ac 5d a6 ae d6 b1 c4 90 4b 71 65 Data Ascii: l9;Z,1NU"Tt+;~l`2q>WI0yps#]@"jGC%Yty!U;dV[Z;]O{]#E\VoQ"uNj0[;uCi}M!H*G]Kqe
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 46 01 53 e0 73 83 f3 58 db 86 7e 6c b9 74 91 f0 d9 68 35 5a 1a 0c eb 08 87 d6 e9 ba 9e a7 aa 7a 71 e6 9b ad 25 b8 b8 92 48 f8 52 1f 82 14 fc f1 9e 28 de ad 32 e9 fa 65 e5 c8 50 dd 34 2c 06 70 a4 81 c0 24 76 ae 4a 2e ed f4 ef 56 c3 ae 59 0b 99 ed 26 99 a1 bb da d9 8a 20 98 8f a9 83 c8 04 73 c7 1c 73 57 fd 43 aa d8 59 e8 1e ac b8 4d 52 2b 9f aa 6e b4 28 84 a8 66 60 15 46 09 e0 e3 be 38 38 cd 69 38 62 6a d2 00 1c a7 2d a3 79 82 a8 e3 0e 1b c9 20 38 7d 13 7d 1b 35 cb 69 ba f6 a7 73 a9 48 a2 f6 e9 e4 81 5f 18 88 e0 22 2f f3 1d aa 39 74 0d 6f 49 f4 f5 fd e5 a0 5b ad 5f 52 78 d6 e1 e2 52 19 e3 27 9c e4 83 c0 f8 fd 2a b7 a4 b5 3d 3e eb d2 3a cc 37 0c 18 46 bd 51 08 1e f3 14 58 dc dc 77 c1 fe 55 ab d3 3d 48 ba 9a 2e a7 1d bf d5 5b 24 7f b9 30 48 0e cc 83 96 65 f0 Data Ascii: FSsX~lth5Zzq%HR(2eP4,p$vJ.VY& ssWCYMR+n(f`F88i8bj-y 8}}5isH_"/9toI[_RxR'*=>:7FQXwU=H.[$0He
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 8d 3c 1a 04 4a 33 2a 6a 55 c5 46 0f fe d4 e1 48 99 4b d8 71 4a 29 83 27 8a 77 22 a2 80 a9 29 ca 45 43 9e 29 c0 d0 21 30 21 4e 31 e3 f9 53 c7 6f ed 51 2e 6a 45 34 a9 82 90 2f f2 a7 74 f3 5e 06 a4 56 14 09 4c a1 31 91 5e db f3 fc aa 62 7e 29 1b 9a 92 84 28 08 c5 7a 9c c2 98 78 a2 a2 5a f5 25 2d 45 17 bf f4 29 d4 d1 4b 8a 87 42 8a f0 26 94 1a 5c 52 60 d0 46 42 90 1a 91 5a a2 14 f0 0d 2a 70 a5 53 52 86 a8 57 15 2a 9c d2 10 a3 4e ca 65 6e 2a 65 61 55 85 48 0d 57 0a d0 55 80 c2 9f 9a ac 08 a9 41 a5 84 c1 d2 a5 cd 28 a6 64 53 b3 52 13 ca 94 1e 29 41 a8 83 52 86 a5 84 65 4c 1a 9e 1a a1 06 9c 1a 84 27 0e 85 30 34 b5 18 6e 29 c0 d2 c2 70 e0 54 a3 ff 00 42 9c 2a 20 69 c0 9a 58 28 c2 92 9e 05 44 0d 38 1a 0a 68 a6 18 a7 8c 54 59 a7 2b 52 c2 20 c2 93 8f 14 e0 05 30 30 Data Ascii: <J3jUFHKqJ)'w")EC)!0!N1SoQ.jE4/t^VL1^b~)(zxZ%-E)KB&\R`FBZpSRWNeneaUHWUA(dSR)AReL'04n)pTB* iX(D8hTY+R 00
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: d3 4f 89 9c 6d 79 14 05 62 a0 60 0c 8f 18 18 c5 2b 30 21 ad 12 fd a0 28 fc 66 63 61 6d 56 ff 00 59 d7 f4 54 49 34 cd 35 da 0d 22 02 cd 23 64 b4 f7 f2 f1 82 77 72 50 7d ea 1b 5b f8 56 c4 5d 24 af a5 5b 48 3a 10 18 70 f7 97 25 7f 12 a9 61 84 53 d8 91 5c f9 5e 48 89 29 83 91 82 58 67 23 f5 a8 e5 eb 5e c9 d4 9a 46 91 c0 c6 5b c0 f8 1e 00 fb 0a d4 cc 33 5a d8 06 df 19 f3 59 4e 21 c4 c8 d7 a6 cb a0 9d 49 a5 5b 3b 55 90 45 0c b3 47 17 57 fe a4 50 26 71 c9 63 99 65 1f e6 6e 07 81 49 ae 7a 8d ee 23 b3 d3 ec ee a4 b7 d2 2c f6 c6 09 e7 73 2b 60 c8 c3 bb b1 c6 79 ae 7f d2 2a a1 0b 12 07 61 93 81 fa 54 6d 1b 11 83 c8 f3 ce 7f 95 37 01 84 b2 46 9a 7e ea 7b 43 c4 f7 5d be c7 d3 d1 6b 7e 8e bc 6d 36 f6 01 f5 64 a3 ca cc 15 a6 54 24 b2 12 39 0c 08 da 33 e3 14 47 4f 3a 6f Data Ascii: Omyb`+0!(fcamVYTI45"#dwrP}[V]$[H:p%aS\^H)Xg#^F[3ZYN!I[;UEGWP&qcenIz#,s+`y*aTm7F~{C]k~m6dT$93GO:o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49963	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	762	OUT	GET /layouts/system/VisitorIdentificationCSS.aspx?tstamp=1713460563277 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	803	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18 Pragma: no-cache Content-Type: text/css; charset=utf-8 Expires: -1 Set-Cookie: SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; expires=Sun, 16-Apr-2034 17:16:04 GMT; path=/; secure; HttpOnly; SameSite=None Xhost: SC102CD1 Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210032-DFW, cache-pdk-kfty2130076-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460565.507692,VS0,VE87 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	18	IN	Data Raw: 0d 0a 2e 73 63 5f 43 6f 6e 74 61 63 74 20 7b 0d 0a 7d Data Ascii: .sc_Contact {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49964	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	731	OUT	GET /Areas/LNRS/js/Vendor/require.score.3.1.14.min.js HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	699	IN	HTTP/1.1 200 OK Connection: close Content-Length: 26570 Content-Type: application/javascript Last-Modified: Fri, 12 Apr 2024 05:09:34 GMT ETag: "0bba39b978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 554833 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120024-DFW, cache-pdk-kfty2130034-PDK X-Cache: HIT, HIT X-Cache-Hits: 18, 0 X-Timer: S1713460565.526546,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 76 61 72 20 72 65 71 75 69 72 65 6a 73 2c 72 65 71 75 69 72 65 2c 64 65 66 69 6e 65 3b 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 2c 73 65 74 54 69 6d 65 6f 75 74 29 7b 76 61 72 20 72 65 71 2c 73 2c 68 65 61 64 2c 62 61 73 65 45 6c 65 6d 65 6e 74 2c 64 61 74 61 4d 61 69 6e 2c 73 72 63 2c 69 6e 74 65 72 61 63 74 69 76 65 53 63 72 69 70 74 2c 63 75 72 72 65 6e 74 6c 79 41 64 64 69 6e 67 53 63 72 69 70 74 2c 6d 61 69 6e 53 63 72 69 70 74 2c 73 75 62 50 61 74 68 2c 76 65 72 73 69 6f 6e 3d 27 32 2e 33 2e 35 27 2c 63 6f 6d 6d 65 6e 74 52 65 67 45 78 70 3d 2f 5c 2f 5c 2a 5b 5c 73 5c 53 5d 2a 3f 5c 2a 5c 2f 7c 28 5b 5e 3a 22 27 3d 5d 7c 5e 29 5c 2f 5c 2f 2e 2a 24 2f 6d 67 2c 63 6a 73 52 65 71 75 69 72 65 52 65 67 45 78 70 3d 2f 5b 5e 2e 5d 5c 73 2a 72 65 71 Data Ascii: var requirejs,require,define;(function(global,setTimeout){var req,s,head,baseElement,dataMain,src,interactiveScript,currentlyAddingScript,mainScript,subPath,version='2.3.5',commentRegExp=/\/\[\s\S]?\\/\|([^:"'=]\|^)\/\/.$/mg,cjsRequireRegExp=/[^.]\s*req
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 2c 66 75 6e 63 29 7b 76 61 72 20 70 72 6f 70 3b 66 6f 72 28 70 72 6f 70 20 69 6e 20 6f 62 6a 29 7b 69 66 28 68 61 73 50 72 6f 70 28 6f 62 6a 2c 70 72 6f 70 29 29 7b 69 66 28 66 75 6e 63 28 6f 62 6a 5b 70 72 6f 70 5d 2c 70 72 6f 70 29 29 7b 62 72 65 61 6b 3b 7d 7d 7d 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 6d 69 78 69 6e 28 74 61 72 67 65 74 2c 73 6f 75 72 63 65 2c 66 6f 72 63 65 2c 64 65 65 70 53 74 72 69 6e 67 4d 69 78 69 6e 29 7b 69 66 28 73 6f 75 72 63 65 29 7b 65 61 63 68 50 72 6f 70 28 73 6f 75 72 63 65 2c 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 2c 70 72 6f 70 29 7b 69 66 28 66 6f 72 63 65 7c 7c 21 68 61 73 50 72 6f 70 28 74 61 72 67 65 74 2c 70 72 6f 70 29 29 7b 69 66 28 64 65 65 70 53 74 72 69 6e 67 4d 69 78 69 6e 26 26 74 79 70 65 6f 66 20 76 61 6c Data Ascii: ,func){var prop;for(prop in obj){if(hasProp(obj,prop)){if(func(obj[prop],prop)){break;}}}}function mixin(target,source,force,deepStringMixin){if(source){eachProp(source,function(value,prop){if(force\|\|!hasProp(target,prop)){if(deepStringMixin&&typeof val
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 6c 65 73 3a 7b 7d 2c 70 6b 67 73 3a 7b 7d 2c 73 68 69 6d 3a 7b 7d 2c 63 6f 6e 66 69 67 3a 7b 7d 7d 2c 72 65 67 69 73 74 72 79 3d 7b 7d 2c 65 6e 61 62 6c 65 64 52 65 67 69 73 74 72 79 3d 7b 7d 2c 75 6e 64 65 66 45 76 65 6e 74 73 3d 7b 7d 2c 64 65 66 51 75 65 75 65 3d 5b 5d 2c 64 65 66 69 6e 65 64 3d 7b 7d 2c 75 72 6c 46 65 74 63 68 65 64 3d 7b 7d 2c 62 75 6e 64 6c 65 73 4d 61 70 3d 7b 7d 2c 72 65 71 75 69 72 65 43 6f 75 6e 74 65 72 3d 31 2c 75 6e 6e 6f 72 6d 61 6c 69 7a 65 64 43 6f 75 6e 74 65 72 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 74 72 69 6d 44 6f 74 73 28 61 72 79 29 7b 76 61 72 20 69 2c 70 61 72 74 3b 66 6f 72 28 69 3d 30 3b 69 3c 61 72 79 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 70 61 72 74 3d 61 72 79 5b 69 5d 3b 69 66 28 70 61 72 74 3d 3d 3d 27 2e 27 Data Ascii: les:{},pkgs:{},shim:{},config:{}},registry={},enabledRegistry={},undefEvents={},defQueue=[],defined={},urlFetched={},bundlesMap={},requireCounter=1,unnormalizedCounter=1;function trimDots(ary){var i,part;for(i=0;i<ary.length;i++){part=ary[i];if(part==='.'
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 70 26 26 67 65 74 4f 77 6e 28 73 74 61 72 4d 61 70 2c 6e 61 6d 65 53 65 67 6d 65 6e 74 29 29 7b 66 6f 75 6e 64 53 74 61 72 4d 61 70 3d 67 65 74 4f 77 6e 28 73 74 61 72 4d 61 70 2c 6e 61 6d 65 53 65 67 6d 65 6e 74 29 3b 73 74 61 72 49 3d 69 3b 7d 7d 0d 0a 69 66 28 21 66 6f 75 6e 64 4d 61 70 26 26 66 6f 75 6e 64 53 74 61 72 4d 61 70 29 7b 66 6f 75 6e 64 4d 61 70 3d 66 6f 75 6e 64 53 74 61 72 4d 61 70 3b 66 6f 75 6e 64 49 3d 73 74 61 72 49 3b 7d 0d 0a 69 66 28 66 6f 75 6e 64 4d 61 70 29 7b 6e 61 6d 65 50 61 72 74 73 2e 73 70 6c 69 63 65 28 30 2c 66 6f 75 6e 64 49 2c 66 6f 75 6e 64 4d 61 70 29 3b 6e 61 6d 65 3d 6e 61 6d 65 50 61 72 74 73 2e 6a 6f 69 6e 28 27 2f 27 29 3b 7d 7d 0d 0a 70 6b 67 4d 61 69 6e 3d 67 65 74 4f 77 6e 28 63 6f 6e 66 69 67 2e 70 6b 67 73 Data Ascii: p&&getOwn(starMap,nameSegment)){foundStarMap=getOwn(starMap,nameSegment);starI=i;}}if(!foundMap&&foundStarMap){foundMap=foundStarMap;foundI=starI;}if(foundMap){nameParts.splice(0,foundI,foundMap);name=nameParts.join('/');}}pkgMain=getOwn(config.pkgs
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 70 6c 75 67 69 6e 4d 6f 64 75 6c 65 3d 67 65 74 4f 77 6e 28 64 65 66 69 6e 65 64 2c 70 72 65 66 69 78 29 3b 7d 0d 0a 69 66 28 6e 61 6d 65 29 7b 69 66 28 70 72 65 66 69 78 29 7b 69 66 28 69 73 4e 6f 72 6d 61 6c 69 7a 65 64 29 7b 6e 6f 72 6d 61 6c 69 7a 65 64 4e 61 6d 65 3d 6e 61 6d 65 3b 7d 65 6c 73 65 20 69 66 28 70 6c 75 67 69 6e 4d 6f 64 75 6c 65 26 26 70 6c 75 67 69 6e 4d 6f 64 75 6c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 29 7b 6e 6f 72 6d 61 6c 69 7a 65 64 4e 61 6d 65 3d 70 6c 75 67 69 6e 4d 6f 64 75 6c 65 2e 6e 6f 72 6d 61 6c 69 7a 65 28 6e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 6e 6f 72 6d 61 6c 69 7a 65 28 6e 61 6d 65 2c 70 61 72 65 6e 74 4e 61 6d 65 2c 61 70 70 6c 79 4d 61 70 29 3b 7d 29 3b 7d 65 6c 73 65 7b 6e 6f Data Ascii: pluginModule=getOwn(defined,prefix);}if(name){if(prefix){if(isNormalized){normalizedName=name;}else if(pluginModule&&pluginModule.normalize){normalizedName=pluginModule.normalize(name,function(name){return normalize(name,parentName,applyMap);});}else{no
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 64 29 3b 69 66 28 6d 6f 64 29 7b 6d 6f 64 2e 65 72 72 6f 72 3d 65 72 72 3b 69 66 28 6d 6f 64 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 29 7b 6e 6f 74 69 66 69 65 64 3d 74 72 75 65 3b 6d 6f 64 2e 65 6d 69 74 28 27 65 72 72 6f 72 27 2c 65 72 72 29 3b 7d 7d 7d 29 3b 69 66 28 21 6e 6f 74 69 66 69 65 64 29 7b 72 65 71 2e 6f 6e 45 72 72 6f 72 28 65 72 72 29 3b 7d 7d 7d 0d 0a 66 75 6e 63 74 69 6f 6e 20 74 61 6b 65 47 6c 6f 62 61 6c 51 75 65 75 65 28 29 7b 69 66 28 67 6c 6f 62 61 6c 44 65 66 51 75 65 75 65 2e 6c 65 6e 67 74 68 29 7b 65 61 63 68 28 67 6c 6f 62 61 6c 44 65 66 51 75 65 75 65 2c 66 75 6e 63 74 69 6f 6e 28 71 75 65 75 65 49 74 65 6d 29 7b 76 61 72 20 69 64 3d 71 75 65 75 65 49 74 65 6d 5b 30 5d 3b 69 66 28 74 79 70 65 6f 66 20 69 64 3d 3d 3d 27 73 74 72 Data Ascii: d);if(mod){mod.error=err;if(mod.events.error){notified=true;mod.emit('error',err);}}});if(!notified){req.onError(err);}}}function takeGlobalQueue(){if(globalDefQueue.length){each(globalDefQueue,function(queueItem){var id=queueItem[0];if(typeof id==='str
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 6b 2c 77 61 69 74 49 6e 74 65 72 76 61 6c 3d 63 6f 6e 66 69 67 2e 77 61 69 74 53 65 63 6f 6e 64 73 2a 31 30 30 30 2c 65 78 70 69 72 65 64 3d 77 61 69 74 49 6e 74 65 72 76 61 6c 26 26 28 63 6f 6e 74 65 78 74 2e 73 74 61 72 74 54 69 6d 65 2b 77 61 69 74 49 6e 74 65 72 76 61 6c 29 3c 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 2c 6e 6f 4c 6f 61 64 73 3d 5b 5d 2c 72 65 71 43 61 6c 6c 73 3d 5b 5d 2c 73 74 69 6c 6c 4c 6f 61 64 69 6e 67 3d 66 61 6c 73 65 2c 6e 65 65 64 43 79 63 6c 65 43 68 65 63 6b 3d 74 72 75 65 3b 69 66 28 69 6e 43 68 65 63 6b 4c 6f 61 64 65 64 29 7b 72 65 74 75 72 6e 3b 7d 0d 0a 69 6e 43 68 65 63 6b 4c 6f 61 64 65 64 3d 74 72 75 65 3b 65 61 63 68 50 72 6f 70 28 65 6e 61 62 6c 65 64 52 65 67 69 73 74 72 79 2c 66 75 6e 63 74 69 Data Ascii: k,waitInterval=config.waitSeconds*1000,expired=waitInterval&&(context.startTime+waitInterval)<new Date().getTime(),noLoads=[],reqCalls=[],stillLoading=false,needCycleCheck=true;if(inCheckLoaded){return;}inCheckLoaded=true;eachProp(enabledRegistry,functi
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 2e 69 6e 69 74 65 64 29 7b 72 65 74 75 72 6e 3b 7d 0d 0a 74 68 69 73 2e 66 61 63 74 6f 72 79 3d 66 61 63 74 6f 72 79 3b 69 66 28 65 72 72 62 61 63 6b 29 7b 74 68 69 73 2e 6f 6e 28 27 65 72 72 6f 72 27 2c 65 72 72 62 61 63 6b 29 3b 7d 65 6c 73 65 20 69 66 28 74 68 69 73 2e 65 76 65 6e 74 73 2e 65 72 72 6f 72 29 7b 65 72 72 62 61 63 6b 3d 62 69 6e 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 72 72 29 7b 74 68 69 73 2e 65 6d 69 74 28 27 65 72 72 6f 72 27 2c 65 72 72 29 3b 7d 29 3b 7d 0d 0a 74 68 69 73 2e 64 65 70 4d 61 70 73 3d 64 65 70 4d 61 70 73 26 26 64 65 70 4d 61 70 73 2e 73 6c 69 63 65 28 30 29 3b 74 68 69 73 2e 65 72 72 62 61 63 6b 3d 65 72 72 62 61 63 6b 3b 74 68 69 73 2e 69 6e 69 74 65 64 3d 74 72 75 65 3b 74 68 69 73 2e 69 67 6e 6f 72 65 3d Data Ascii: .inited){return;}this.factory=factory;if(errback){this.on('error',errback);}else if(this.events.error){errback=bind(this,function(err){this.emit('error',err);});}this.depMaps=depMaps&&depMaps.slice(0);this.errback=errback;this.inited=true;this.ignore=
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 7b 74 72 79 7b 65 78 70 6f 72 74 73 3d 63 6f 6e 74 65 78 74 2e 65 78 65 63 43 62 28 69 64 2c 66 61 63 74 6f 72 79 2c 64 65 70 45 78 70 6f 72 74 73 2c 65 78 70 6f 72 74 73 29 3b 7d 63 61 74 63 68 28 65 29 7b 65 72 72 3d 65 3b 7d 7d 65 6c 73 65 7b 65 78 70 6f 72 74 73 3d 63 6f 6e 74 65 78 74 2e 65 78 65 63 43 62 28 69 64 2c 66 61 63 74 6f 72 79 2c 64 65 70 45 78 70 6f 72 74 73 2c 65 78 70 6f 72 74 73 29 3b 7d 0d 0a 69 66 28 74 68 69 73 2e 6d 61 70 2e 69 73 44 65 66 69 6e 65 26 26 65 78 70 6f 72 74 73 3d 3d 3d 75 6e 64 65 66 69 6e 65 64 29 7b 63 6a 73 4d 6f 64 75 6c 65 3d 74 68 69 73 2e 6d 6f 64 75 6c 65 3b 69 66 28 63 6a 73 4d 6f 64 75 6c 65 29 7b 65 78 70 6f 72 74 73 3d 63 6a 73 4d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3b 7d 65 6c 73 65 20 69 66 28 74 68 Data Ascii: {try{exports=context.execCb(id,factory,depExports,exports);}catch(e){err=e;}}else{exports=context.execCb(id,factory,depExports,exports);}if(this.map.isDefine&&exports===undefined){cjsModule=this.module;if(cjsModule){exports=cjsModule.exports;}else if(th
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 7a 65 29 7b 6e 61 6d 65 3d 70 6c 75 67 69 6e 2e 6e 6f 72 6d 61 6c 69 7a 65 28 6e 61 6d 65 2c 66 75 6e 63 74 69 6f 6e 28 6e 61 6d 65 29 7b 72 65 74 75 72 6e 20 6e 6f 72 6d 61 6c 69 7a 65 28 6e 61 6d 65 2c 70 61 72 65 6e 74 4e 61 6d 65 2c 74 72 75 65 29 3b 7d 29 7c 7c 27 27 3b 7d 0d 0a 6e 6f 72 6d 61 6c 69 7a 65 64 4d 61 70 3d 6d 61 6b 65 4d 6f 64 75 6c 65 4d 61 70 28 6d 61 70 2e 70 72 65 66 69 78 2b 27 21 27 2b 6e 61 6d 65 2c 74 68 69 73 2e 6d 61 70 2e 70 61 72 65 6e 74 4d 61 70 2c 74 72 75 65 29 3b 6f 6e 28 6e 6f 72 6d 61 6c 69 7a 65 64 4d 61 70 2c 27 64 65 66 69 6e 65 64 27 2c 62 69 6e 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 7b 74 68 69 73 2e 6d 61 70 2e 6e 6f 72 6d 61 6c 69 7a 65 64 4d 61 70 3d 6e 6f 72 6d 61 6c 69 7a 65 64 4d Data Ascii: ze){name=plugin.normalize(name,function(name){return normalize(name,parentName,true);})\|\|'';}normalizedMap=makeModuleMap(map.prefix+'!'+name,this.map.parentMap,true);on(normalizedMap,'defined',bind(this,function(value){this.map.normalizedMap=normalizedM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49965	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	552	OUT	GET /-/media/images/lnrs/heroes/pattern_hero%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22752 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="pattern_hero jpg.jpg" Content-Type: image/jpeg Etag: "nn7dTMDx6GDYYP4qKVBWcVK+SVDe8P8hiVQQhanFfkk" Fastly-Io-Info: ifsz=23246 idim=1230x214 ifmt=jpeg ofsz=22752 odim=1230x214 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210087-DFW, cache-pdk-kpdk1780076-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460565.536401,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 00 14 00 00 00 14 00 00 05 02 c1 40 05 4a 00 00 0b 05 00 15 05 41 60 00 02 58 00 00 08 00 00 80 04 00 00 01 00 00 00 25 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2c a0 00 00 05 4a 00 00 0b 28 05 4a 00 b0 54 a0 00 00 b0 54 15 28 00 85 20 00 00 00 96 00 00 20 02 58 00 00 09 60 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 05 94 00 00 0b 28 00 00 01 40 05 00 00 54 a0 00 00 00 00 00 00 00 00 40 00 00 40 01 00 00 02 16 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 52 80 00 00 14 00 00 02 c1 40 b0 50 00 05 8a 00 00 00 00 00 00 12 91 61 60 00 02 00 08 00 00 00 80 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: @JA`X%,J(JTT( X` (@T@@R@Pa`
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 74 52 3a 29 1d 14 8e 8a 47 45 23 a2 91 d1 48 ef 11 de 23 bc 47 78 8e f1 1d e2 3b c4 77 88 ef 11 de 1d e7 f1 f9 e1 9e 1d e2 3b c4 77 88 ef 11 de 23 bc 47 78 8e f1 1d e2 3a 29 1d 14 8e 8a 47 45 23 a2 91 d1 48 e8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 3f b4 fc fe df 84 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 d1 48 e8 a4 74 52 3a 29 1d 14 8e 8a 47 78 8e f1 1d e2 3b c4 77 88 ef 11 de 23 bc Data Ascii: tR:)GE#H#Gx;w;w#Gx:)GE#HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR?dR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HtR:)Gx;w#
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 23 bc 47 78 8e f1 1d e2 3b c4 67 86 79 fc 87 78 67 86 78 77 88 ef 11 de 23 bc 47 78 8e f1 1d e2 3b c4 77 88 e8 a4 74 52 3a 29 1d 14 8e 8a 47 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 fd a7 e7 f6 fc 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 1d 14 8e 8a 47 45 23 a2 91 d1 48 e8 a4 74 52 3b c4 77 88 ef 11 de 23 bc 47 78 8e f1 1d e2 3b c4 67 86 79 fc 87 78 67 87 78 8e f1 1d e2 3b c4 77 88 ef 11 de Data Ascii: #Gx;gyxgxw#Gx;wtR:)GE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)GE#HtR;w#Gx;gyxgx;w
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ef 11 de 23 bc 47 78 8e f1 1d e2 3b c4 77 88 e8 a4 74 52 3a 29 1d 14 8e 8a 47 45 23 a2 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 fe d3 f3 fb 7e 11 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 47 45 23 a2 91 d1 48 e8 a4 74 52 3a 29 1d 14 8e f1 1d e2 3b c4 77 88 ef 11 de 23 bc 47 78 8e f1 19 e1 de 7f 1d de 1d e1 de 1d e2 3b c4 77 88 ef 11 de 23 bc 47 78 8e f1 1d 14 8e 8a 47 45 23 a2 91 d1 48 e8 a4 Data Ascii: #Gx;wtR:)GE#HdR2)FE#"HdR2)FE#"HdR2)FE#"H~HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)GE#HtR:);w#Gx;w#GxGE#H
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 11 de 23 bc 47 78 8c f0 cf 0e f3 f8 ae f0 ef 0e f1 1d e2 3b c4 77 88 ef 11 de 23 bc 47 78 8e f1 1d e2 3a 29 1d 14 8e 8a 47 45 23 a2 91 d1 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 1f da 7e 7f 6f c2 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 64 52 32 29 19 14 8c 8a 46 45 23 22 91 91 48 c8 a4 74 52 3a 29 1d 14 8e 8a 47 45 23 a2 91 d1 48 e8 a4 77 88 ef 11 de 23 bc 47 78 8e f1 1d e2 3b c4 77 88 ef 11 de 1d e7 f1 1d e1 9e 19 e1 Data Ascii: #Gx;w#Gx:)GE#HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)~o2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HdR2)FE#"HtR:)GE#Hw#Gx;w
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ff 00 0f f0 ff 00 0f f0 ff 00 0f f0 ff 00 0f f0 ff 00 0f f0 ff 00 0f f0 ff 00 0f f0 ff 00 0f f3 ff 00 87 fc 3f c3 fc 3f c3 fc 3f c3 fc 3f c3 fc 3f c3 fc 3f c3 fc 3f c3 fc 3f c3 fc 3e fe 0f f0 ff 00 0f f0 ff 00 0f db f5 ff 00 8b ff 00 3e 23 f6 fd 7f e2 ff 00 cf 88 fb ff 00 17 ea ff 00 1f 11 fb 7e bf f3 f5 7f 5f 11 f7 fe 2f fc f8 8f bf f2 5f 8f 88 fd bf 5f f9 fa bf af 88 fd bf 5f f9 fa bf af 88 fd bf 5f f9 fa bf af 88 fd bf 5f f9 fa 9f e3 e2 3e ff 00 cf d5 fd 7c 47 ed fa ff 00 cf d4 ff 00 1f 11 ea 3e 7c 47 a8 f9 f1 1f 7f e7 ea 8f 9f 11 ea 3e 7c 47 a8 f9 f1 1e a3 e7 c4 7a 8f 9f 11 ea 3e 7c 47 a8 f9 f1 1e a3 e7 c4 7a 8f 9f 11 ea 3e 7c 47 a8 f9 f1 1e a3 e7 c4 7a 8f 9f 11 ea 3e 7c 47 a8 f9 f1 1e a3 e7 c4 7a 8f 9f 11 ea 3e 7c 47 a8 f9 f1 1e a3 e7 c4 7a 8f 9f 11 Data Ascii: ????????>>#~_/_____>\|G>\|G>\|Gz>\|Gz>\|Gz>\|Gz>\|Gz
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: aa 60 5d dd 68 1d dd 68 1d dd 68 1d dd 68 1d dd 6a 03 ab ad 40 75 75 a8 0e ae b5 01 d5 d6 a0 3a ba d4 07 57 5a 80 ea eb 50 1d 5d 6a 03 ab ad 46 1e 5d 4f 88 c3 da 9f 11 87 b5 3e 23 0d ed 4f 88 c3 7b 53 e2 30 de d4 f8 8c 37 b5 3e 23 0d ed 6a 30 cb 51 86 5a 8c 32 d4 61 96 a3 0c b5 18 65 a8 c3 2d 46 19 6b e3 2d 7c 65 af 8c 8f 88 8f ff 00 64 23 e2 3e 2d 46 11 18 65 af 8c b5 f1 96 a3 0c b5 18 65 a8 c3 2d 46 19 6a 30 cb 51 86 5a 8c 32 d4 61 96 a3 0c a7 c4 61 bd a9 f1 18 6f 6a 7c 46 1b da 9f 11 86 f6 a7 c4 61 ed 4f 88 c3 da d4 07 57 5a 80 ea eb 50 1d 5d 6a 03 ab ad 40 75 75 a8 0e ae 9f e4 07 57 5a 80 ea eb 50 1d 5d 68 1d dd 68 1d dd 68 1d dd 68 1d dd 68 1d dd 68 5d dd 68 5d dd 53 02 ee e8 0b f5 d0 17 eb aa 00 dd d5 00 6e ea 80 37 75 40 1b ba a0 0d dd 50 06 ee a8 Data Ascii: `]hhhhj@uu:WZP]jF]O>#O{S07>#j0QZ2ae-Fk-\|ed#>-Fee-Fj0QZ2aaoj\|FaOWZP]j@uuWZP]hhhhhh]h]Sn7u@P
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 07 77 5a 07 77 5a 07 77 5a 07 77 5a 80 ea eb 50 1d 5d 6a 03 ab ad 40 75 75 a8 0e ae b5 01 d5 d6 a0 3a ba d4 07 57 56 ff 00 20 3f 54 f8 8c 3d a9 f1 18 7b 53 e2 30 de d4 f8 8c 37 b5 3e 23 0d ed 4f 88 c3 7b 53 e2 30 de d6 a3 0c b5 18 65 a8 c3 2d 46 19 6a 30 cb 51 86 5a 8c 32 d7 c6 5a f8 cb 51 8f fc 07 c5 a8 c2 d7 c6 5a f8 cb 51 86 5a 8c 32 7f 91 86 5a 8c 32 d4 61 96 a3 0c b5 18 65 a8 c3 29 f1 18 6f 6a 7c 46 1b da 9f 11 86 f6 a7 c4 61 bd a9 f8 c3 da 9f 8c 3d ab 7f 90 1f ab 50 1d 5d 6a 03 ab ad 40 75 75 a8 0e ae b5 01 d5 d6 a0 3a ba d4 07 57 5a 80 ea eb 40 ee eb 40 ee eb 40 ee eb 40 ee eb 40 ee eb 42 ee eb 42 ee e8 0b f5 d0 17 eb aa 00 dd d5 00 6e ea 80 37 75 40 1b ba a0 0d dd 50 06 ee a8 03 77 54 01 bb aa 00 dd d5 00 6e ea 80 37 75 40 1b ba a0 0d dd 50 06 ee Data Ascii: wZwZwZwZP]j@uu:WV ?T={S07>#O{S0e-Fj0QZ2ZQZQZ2Z2ae)oj\|Fa=P]j@uu:WZ@@@@@BBn7u@PwTn7u@P
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 30 de d4 f8 8c 37 b5 3e 23 0d ed 6a 30 cb 51 86 5a 8c 32 d4 61 96 a3 0c b5 18 65 af 8c b5 f1 96 a3 08 f9 ff 00 8c f8 8f 8b 5f 19 6a 30 cb 51 86 5a 8c 32 d4 61 96 a3 0c b5 18 65 3e 23 0d ed 6a 30 ca 7c 46 1b da 9f 11 86 f6 a7 c4 61 bd a9 f1 18 7b 53 f1 87 b5 3f 18 7b 5a 80 ea eb 50 1d 5d 6a 03 ab ad 40 75 75 a8 0e ae b5 01 d5 d6 a0 3a ba d4 07 57 5a 80 ea eb 40 ee eb 40 ee eb 40 ee eb 40 ee eb 42 ee eb 42 ee e8 0b f5 d0 17 eb aa 49 0f 2e a8 03 77 54 01 bb aa 00 dd d5 00 6e ea 80 37 75 40 1b ba a0 0d dd 50 06 ee a8 03 77 54 01 bb aa 00 dd d5 00 6e ea 80 37 75 40 1b ba a0 0d dd 50 06 ee a8 03 77 54 01 bb aa 00 dd d5 00 6e ea 80 37 75 40 1b ba e7 89 83 1c b3 96 76 3f 5d 50 06 ee a8 03 77 54 01 bb aa 00 dd d5 00 6e ea 80 37 75 40 1b ba a0 0d dd 50 06 ee a8 03 Data Ascii: 07>#j0QZ2ae_j0QZ2ae>#j0\|Fa{S?{ZP]j@uu:WZ@@@@BBI.wTn7u@PwTn7u@PwTn7u@v?]PwTn7u@P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49966	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	864	OUT	GET /-/media/images/financial%20services/celent%20tile%20img%20jpg.jpg?h=170&iar=0&w=270&hash=5C83B7E104E9151B0581F8CD10EA72E0 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	867	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14218 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Celent tile img jpg.jpg" Content-Type: image/webp Etag: "Q+7bmBvRWxMh5QfJ/ihjrDj8nEptwJUV+QlbqQEyXNI" Fastly-Io-Info: ifsz=19668 idim=270x170 ifmt=jpeg ofsz=14218 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010213 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120128-DFW, cache-pdk-kfty2130031-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460565.649462,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 82 37 00 00 57 45 42 50 56 50 38 20 76 37 00 00 10 a2 00 9d 01 2a 0e 01 aa 00 3e 51 1e 8b 44 23 a1 a1 17 dc 86 c4 38 05 04 a0 0c 01 fd 5d 36 ca 43 91 7b e5 f9 fe 55 3b b2 ec ff 33 51 f2 dc 31 e7 23 9d a7 7e ef a0 ff d6 83 f7 3e d8 eb 8d 58 94 e7 7f e3 df c0 fe ee 7f 8b f7 0f c4 7f 61 3a 88 f7 5f fc 7f f2 1e d2 bf aa ef e7 e6 e7 fa 5e a1 df 9b ff 43 ff 85 e9 27 f4 9f b4 fd fb 1b ef fa af 41 7f 77 7e db e0 55 aa 57 85 3d 81 3f 99 ff 60 f4 87 fe 37 8b 27 e0 ff d8 7b 02 7f 59 ff 4d ea cf fd ff ff 6f f6 be 84 be a4 fd b3 f8 0a fd 83 f4 be ff ff ff b3 e1 57 ee 17 ff ff 78 3f dc 6f ff ed fd ee ab df 57 ca 39 07 0d c0 e4 a8 ad 1c 4d 8b 1f 26 e4 5e 5c 96 02 83 ec e8 36 be bd f8 7f ed bd ec 82 7b b4 71 0b b2 ed d3 de 79 af 99 e4 fe 67 5d 35 a5 b7 1c cc Data Ascii: RIFF7WEBPVP8 v7*>QD#8]6C{U;3Q1#~>Xa:_^C'Aw~UW=?`7'{YMoWx?oW9M&^\6{qyg]5
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 3c e1 b9 c4 6d 2e c0 a4 27 28 3d a5 32 08 40 88 02 7e 03 c1 be 59 b7 e6 45 af 38 a5 42 81 e0 55 ed 0d ed be 0e 8e f7 74 4c 1b fa ae d2 11 bb b2 19 cf 9a ab 92 49 3c 35 36 7c 4f fa 24 e2 04 f1 32 1e e5 41 87 f5 19 a7 27 ea 5c d7 1f 5d 59 3e db c7 91 f3 d3 7f 00 7a 7d 5f 8c 7a 22 93 2a 94 44 94 cc fc 2e 00 49 5f 55 7f dd 28 66 73 c2 10 45 99 20 66 37 9e 1d 48 bf 8a fe 4c 92 ff 15 9d 0e 3e aa f4 01 fc a7 b7 0e 7e bd 7b 61 be e4 8a 70 94 40 97 f5 b8 3d 3d 5e 5c 3f 4e 6a 20 d8 81 06 64 71 e6 c9 94 10 65 90 8c fb ee 7a 69 36 ae 4e a2 e2 10 74 bf fe c9 6f 20 aa c8 58 4e 5a 6d 2b 1e 35 d4 95 0a da 58 a8 a5 4e bc a1 c1 17 b3 39 8a 3f ce cb ff 3b 6c 65 e4 e4 d5 66 5d 17 3d c6 19 ec e1 53 58 b0 f0 b8 eb de 7e 05 00 f4 64 93 24 f7 e5 05 09 0c 0e e3 05 a6 bd 5f f9 77 Data Ascii: <m.'(=2@~YE8BUtLI<56\|O$2A'\]Y>z}_z"*D.I_U(fsE f7HL>~{ap@==^\?Nj dqezi6Nto XNZm+5XN9?;lef]=SX~d$_w
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: e3 14 29 74 2f 75 8f b4 e2 81 be 93 be 23 0b 1f 7e 5b b2 3a 0d 5d f7 33 65 53 d6 9c 35 79 54 3b aa 5e 28 96 1d f9 96 09 ea b7 93 63 ec f8 76 d2 c6 00 41 7e 84 e1 14 dd 9a 71 46 de 65 6b eb 10 a9 61 34 e1 d7 34 1c 87 db 4c 60 67 26 59 ce 9f 5e 2c 58 35 ca 71 b4 4e e0 e8 fa d5 f1 a8 b4 db b4 f1 1a ea bc d7 06 11 87 97 7a 55 f6 f9 5e 55 ba da 0f 5e 90 43 19 15 43 0f ab 48 d6 9c a6 35 19 33 3e d3 56 f4 db bf 66 82 a4 b7 67 b1 96 84 78 76 48 44 82 50 4e 41 1e d1 5b 91 3f 6b 81 5e 85 77 16 67 20 8b 5c b2 ff 48 1a 2d 4d b5 c0 4a 9b 47 9e e7 b0 92 3e c0 4b 00 af e8 5f 06 9f 6f 53 ef 43 13 72 a4 98 b8 46 40 e2 f8 49 d2 18 de a4 67 f8 51 7a 04 8e d4 b2 07 97 15 a0 7f ac 05 a7 f7 44 c3 49 75 08 5d e8 68 d2 4f 18 d3 67 e1 d0 be 82 55 57 19 af 26 71 50 6a dc 52 a7 93 Data Ascii: )t/u#~[:]3eS5yT;^(cvA~qFeka44L`g&Y^,X5qNzU^U^CCH53>VfgxvHDPNA[?k^wg \H-MJG>K_oSCrF@IgQzDIu]hOgUW&qPjR
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 03 2b 7d de c8 3a 05 46 fa 0a 79 48 bc c3 04 f2 a8 cb 26 c1 f3 ad fb 90 28 6b 34 cf 5b 64 3f 8b 4d 5a 0e 8c dd ab 4a 89 07 b3 57 32 ca de be 12 ba 0a 23 a2 cc 67 eb 38 7e d5 e4 48 59 4b 84 31 ac 92 80 ce ef 19 9a 80 e4 60 b0 75 64 f6 b6 bb 7b 84 dc 6f 69 54 f3 f6 c3 8a 9f c2 ab 4b ab ec 45 3b 0a 79 c7 cf dc 22 a1 d6 ad 0a 2c 12 bf c1 b8 ad 22 0d c7 3b 0b f6 26 55 d2 71 93 d2 f8 57 72 df 6c 54 01 52 0b 92 b8 f9 d0 28 26 c2 e7 c2 0b 03 9d 9d cb 1d 89 ce 21 32 f5 c6 22 70 d5 8d 9f a2 33 7f 5f a8 b6 dc 99 91 ce aa 7f a2 3b 2c 06 53 8c 55 2a b3 4d e1 13 6d 3d 63 73 d5 ae 6e a4 ae c6 c7 04 e1 b2 75 83 ef a3 b2 76 51 92 73 2f 3d b9 77 5f d3 a4 5d 96 8e e5 65 c4 93 c6 81 6d 34 a6 22 f1 89 9b b6 df 02 ed b1 57 af bd 46 0d e0 12 1f 82 9c af 21 dc df a6 57 ca dd f5 Data Ascii: +}:FyH&(k4[d?MZJW2#g8~HYK1`ud{oiTKE;y",";&UqWrlTR(&!2"p3_;,SU*Mm=csnuvQs/=w_]em4"WF!W
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 39 45 8d 1b 74 73 76 c5 cb 7c 3e 84 f1 5b 26 c1 0e ef c2 ff 62 07 4e 7a 7f fb 17 78 47 4c f2 64 00 2c 7c a2 17 b2 4d ae d1 d4 51 c4 1a ec 7e 05 e6 f6 16 6c cc 7d 58 4e 7c a2 38 b2 ae 47 b0 d3 ff d6 ea bb 27 fb d9 f3 eb 82 4a 9b 40 55 fa 76 8a 2b 53 c6 90 d4 03 e8 d0 11 25 fd aa 22 31 37 96 a6 7b e2 84 31 4f bb ac 22 29 19 72 95 dc 06 00 d7 6a bd 2a aa c4 79 7c c7 7f 87 9a 41 5d f1 cd 71 6d c7 3e 1d 5e 2b 5e 0a 86 d4 51 de 9d de d2 9a 4a 79 cf 08 5a f0 08 19 46 51 66 5c 96 b0 84 64 4a ab af 03 13 d4 9a cc ac 71 ad 0b a6 4a f0 d6 d9 12 65 93 fe 09 35 c2 e4 a2 fb 9a c2 89 22 f7 ac b5 e6 d8 de 8e 9e 63 ff d6 b7 44 6c 99 28 16 42 71 26 aa 69 a8 41 93 62 73 23 1e 32 a7 89 7a 76 c1 38 c8 11 fa dd 7c 74 8c 4c 5e a3 6c 35 25 94 f1 cb c4 21 42 bb 4f d3 77 50 de a9 Data Ascii: 9Etsv\|>[&bNzxGLd,\|MQ~l}XN\|8G'J@Uv+S%"17{1O")rj*y\|A]qm>^+^QJyZFQf\dJqJe5"cDl(Bq&iAbs#2zv8\|tL^l5%!BOwP
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: ce 10 24 bb ed 7d 7c 4e 43 d7 35 e6 b3 29 53 23 87 f3 5b 7e fa 08 18 fe ab af a7 7c e5 fe bd 0e ef d8 14 2b fc ae 81 73 65 70 ae 47 64 3f e5 b8 43 94 26 55 3b 61 8a 5a a6 ef fc 4b e1 c2 9a b8 db 4b cc 7f 37 0b c9 42 b5 3a ed 98 34 c1 6c 3a 3f 11 9a b3 67 5a f7 cb f3 9d 81 f9 30 e3 59 06 18 6c 6a bc 18 8a 2d da 21 6b 30 53 77 d7 d0 64 60 4d 91 1b 56 4d 9f e4 50 40 ae 0b 51 56 37 66 4e 86 d9 db 07 c3 2a 01 33 b4 ac e9 a9 d4 86 6a 93 89 cd 4d c5 c5 32 10 6b 53 d6 29 b2 30 6c 4e 50 86 aa cd 74 f5 0d 2a a2 4f 0b 1f b4 7e 30 ee e8 02 f4 07 b2 ba 45 e2 67 d9 c6 57 22 eb 07 6f 63 f9 9c 67 16 a1 db ab a1 66 ca e6 1e 85 75 fa 30 4d 1e 8b e1 25 56 7d a2 af 1d aa 56 6c 75 d4 a8 b9 73 ba 78 24 d5 d9 58 25 7e 5c a6 5d 2c f3 94 6d 5d 59 78 df 29 08 33 68 ba 63 37 d7 1c Data Ascii: $}\|NC5)S#[~\|+sepGd?C&U;aZKK7B:4l:?gZ0Ylj-!k0Swd`MVMP@QV7fN3jM2kS)0lNPtO~0EgW"ocgfu0M%V}Vlusx$X%~\],m]Yx)3hc7
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 8c 79 c1 37 47 5a c9 d0 83 1b 07 3a b2 63 a5 e4 dc 55 fa a8 19 2b 8b c7 5e bc 52 f9 67 65 0c aa a7 1b 03 89 d7 42 75 3a ec a4 e4 16 a5 9b ea bb 3c 73 c5 c4 0f f7 0f 77 eb 18 24 9b c2 7e d8 e5 2b 1b 6b fb 5f 5f ed 2d e4 c9 6f 84 5e 70 48 4d 31 e8 f2 11 02 fa 96 4c 35 f6 d5 8e 1f 87 71 0b f0 3c af 41 13 48 93 d7 8d fd dd 01 97 75 70 14 db 3a 70 8e 7c 1c 28 40 90 eb d5 f4 e0 83 3c 30 8d ae b9 1a 12 51 71 ae 57 3c fb 46 b2 2d 61 b2 f8 7f 44 2d e1 e2 e2 98 9e 91 03 b5 30 0a d8 34 c7 70 a9 21 13 1f dc c4 19 1f 85 dc cf 69 6d 5c c5 e5 aa 3c 6c c4 cb d5 1b 2f f9 ba 7f 71 f2 b4 d3 97 fc 03 b8 97 a1 85 15 57 8b e1 c1 62 14 0c c1 ff bc ef c0 1f e9 57 c8 05 9d af e8 ef ea c1 5f 8b 94 e1 48 7a fe 6a 27 02 bf 47 8a 28 75 a0 9f 60 8a cd ca 70 bd 43 24 87 0d 14 88 91 20 Data Ascii: y7GZ:cU+^RgeBu:<sw$~+k__-o^pHM1L5q<AHup:p\|(@<0QqW<F-aD-04p!im\<l/qWbW_Hzj'G(u`pC$
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: d4 64 b3 64 a2 eb 8e 31 73 9e 3f 77 f4 a5 3d 6c 9a a7 81 9e 86 74 ba 4c fa c7 02 ef a4 11 04 16 ac c3 04 d6 cf 28 cf 44 9e 98 55 42 a4 b4 65 75 b0 68 b6 b2 9b 36 dc 61 69 9e e5 c5 63 26 6f 32 54 41 92 c6 97 99 2f d8 68 46 40 cd fa 68 77 b4 fd c5 39 94 45 65 54 63 9a b5 bd 87 30 11 50 b2 c3 8b 9d 89 3e 07 3d ac 69 fe 5e 94 96 36 be 5b 0e 1c 07 b1 09 7d 06 2c bf 1e b5 af b8 7f fd 1e ec aa 92 b0 95 50 63 6a 9f 5b b5 ee 00 bc 4d 8e 23 40 21 38 5b 25 00 9b 18 5b 50 77 fe 84 92 12 08 a6 69 51 c4 45 d0 84 0d 87 e6 f3 2c 95 72 a4 82 71 cb 23 13 e4 94 00 e8 da 6a ad 39 83 fc e6 0d a9 d0 05 0d 03 68 e2 72 8a f9 43 c6 dd 02 89 95 14 eb ba 95 eb 3e 07 ee 34 52 51 6d c4 e9 4a 47 c8 60 b1 57 e9 fb 5c bb 1b 31 9c 89 50 92 33 d4 e7 60 a7 03 11 8c 16 ae da 74 ab 88 a0 df Data Ascii: dd1s?w=ltL(DUBeuh6aic&o2TA/hF@hw9EeTc0P>=i^6[},Pcj[M#@!8[%[PwiQE,rq#j9hrC>4RQmJG`W\1P3`t
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 79 ed b6 ca 6b 58 12 d0 a4 f2 6f 7c ba 94 d1 34 ae fa 94 52 2c ac 76 cb c4 d2 d7 ad 08 27 7b c7 e7 3a ca 1c 42 82 fc c2 80 18 dd 08 21 d7 a9 f6 b2 a6 22 d6 1d 6a a1 16 0f d5 28 bb be 37 8a 31 53 ab e9 35 20 57 c7 68 06 70 aa 7e 6e 2b 3d bd 6d a8 05 d8 1c ca 0b 97 26 b4 a4 fc 3b eb 95 20 9f 23 09 4c ac ee 7c 81 c5 ec f1 d1 01 42 36 fd d8 51 43 28 00 ad 29 a4 61 69 b2 91 a5 9f 2b 2d 1f 9d c6 12 1b 90 60 7e 89 d8 d1 00 e9 77 c3 b4 67 2c 30 83 cd a8 62 49 86 f7 78 f5 90 8c c8 a9 62 f9 99 76 16 1d 8b b4 3f 38 3c 51 a1 50 10 7e 81 b5 c4 33 03 11 e1 25 b7 b4 9a 88 47 13 8d 7f bf b6 3a 01 8f 5c c7 66 7d 48 5d 9e 54 34 bb 94 46 d6 03 fd 78 97 b8 c5 70 17 17 15 f3 d0 75 70 94 cb 2b d0 74 72 10 7b e8 cc e3 86 7d 7d c4 e0 02 d0 5e cb 40 a9 01 be 56 7f e3 f0 d5 f9 91 Data Ascii: ykXo\|4R,v'{:B!"j(71S5 Whp~n+=m&; #L\|B6QC()ai+-`~wg,0bIxbv?8<QP~3%G:\f}H]T4Fxpup+tr{}}^@V
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 5e f1 83 89 35 86 08 72 a6 46 72 29 51 8a 7a 0f dc a8 37 95 c6 e2 eb 81 d4 b5 1f 4d b4 a4 a3 90 99 93 22 9c 65 ba 18 e9 29 f7 45 33 72 ca 9d 8e 1a 9e 68 a2 b3 f1 52 fe ee 24 51 ad 27 1c fc c4 19 2f ad ce 68 4d aa 45 cd 24 64 7c 78 eb d7 88 f1 5e dd 82 0b 09 19 4b 4f 9a 63 88 7e 0b 64 3f 88 34 48 b6 9d 52 0b c3 ba f3 1c dc 4d 36 46 8a 0b 91 17 35 8a 83 24 8a d6 6b 01 e0 6a 8b dc d2 d6 96 43 36 f1 ba ba d6 c6 16 33 05 b6 49 5a c8 83 28 d3 68 5d c2 e3 3a e1 a2 ed 2d 74 6d e6 e1 a1 54 c3 60 7b e7 df 90 7e 10 49 df 83 1c 3e e1 85 8c f7 3e 2e 1b 67 ed ff 75 59 6d d4 ef 67 c9 f1 57 12 46 b9 12 95 e3 a9 c9 37 4f f5 c5 9a 32 9e fc 3b 54 47 08 1c 5e 9f ed a5 e8 8c e9 30 f1 9f 68 95 74 38 a0 84 dd c2 75 f0 af 1b dc 76 fe d2 93 1f 03 65 f9 a9 41 e1 57 56 47 e1 7d 23 Data Ascii: ^5rFr)Qz7M"e)E3rhR$Q'/hME$d\|x^KOc~d?4HRM6F5$kjC63IZ(h]:-tmT`{~I>>.guYmgWF7O2;TG^0ht8uveAWVG}#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49967	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	887	OUT	GET /-/media/images/financial%20services/payment%20trends%202024_tile-image-270x170%20jpg.jpg?h=170&iar=0&w=270&hash=31A1E0E0236BBF7A98DD735B10DDF8E6 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	890	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18606 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Payment Trends 2024_Tile-Image-270x170 jpg.jpg" Content-Type: image/webp Etag: "hi2UTlq5MLsvnMgyzz3RGK+/4N+NSqhSKDY5pHhxQBc" Fastly-Io-Info: ifsz=27339 idim=270x170 ifmt=jpeg ofsz=18606 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120116-DFW, cache-pdk-kfty2130067-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460565.665562,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 a6 48 00 00 57 45 42 50 56 50 38 20 9a 48 00 00 b0 b7 00 9d 01 2a 0e 01 aa 00 3e 49 1a 8a 44 22 a1 a1 1b 1c 4e dc 28 04 84 a0 0b ab bf 72 d0 fa b8 8d 7e 61 f2 6e 39 b7 99 f6 6e 5d 76 84 f4 77 fd eb d4 03 c7 6f d6 0f 98 6f da cf 5a 8f 47 df e9 bd 40 3f b5 ff 85 eb 51 fd d8 f6 08 f3 a4 ff e3 fb 89 f0 b7 fd fb fe d7 ee f7 b5 17 a8 07 ff ff 50 0f fd ba 9e bc 0a fd 7f e3 af 99 be 31 bd 7d fb d7 ee 0f f8 3f 6c af f0 bb b9 75 1f fc 4f 40 ff 97 7d ef fd a7 f8 3f dd ef f0 3f 36 7f 93 ff a3 e0 9f c6 af f4 3f c6 fe eb 7c 02 fe 57 fd 03 fd 3f f7 ff dd cf 7a cf b5 fc 6b ef 6d db bf d5 7e cb 7b 02 fb 43 f5 ef f8 5f e2 3f 78 bf d7 7a 71 7f d3 fe 87 d4 bf b1 1f fa 3d c0 7f 9b 7f 57 ff 93 fd e3 da 5f f7 5e 0d 1f 7f ff 81 ec 05 fd 1b fc 37 ff 1f f2 be ed bf dd Data Ascii: RIFFHWEBPVP8 H*>ID"N(r~an9n]vwooZG@?QP1}?luO@}??6?\|W?zkm~{C_?xzq=W_^7
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 36 82 74 16 42 8d 04 d1 ef d1 ca 7e b2 2d c4 49 d5 d1 49 0b f0 69 f3 94 96 79 09 b3 72 8d 20 b0 f1 4d e4 b0 5b 75 43 d6 7f 48 bf ef 1e 53 70 bf 6b 2b 20 cd e6 26 d2 e9 de 6d 0b 41 5f 98 19 9d 72 e5 dd 4f 96 31 3d d0 45 32 80 96 a6 a2 6c c2 0c 9c 85 cc 4f 96 38 e7 2a 0f 52 3d 38 17 29 32 da a8 6e 14 7f c4 19 32 84 cc 51 6a 9f 5a 8f 65 5a 7b e4 d6 3e 90 c0 00 fe ff fe 45 c5 1e f3 bc a1 62 dd 0b 43 48 40 2d aa 2c 37 24 23 6c a4 1f 0f 13 ed f5 d7 a9 8d 10 38 17 5a 3f d7 c9 45 fb 4f 3d 61 21 65 e4 23 2e 9a fc 57 ee 69 2d 47 8c 80 d2 39 f8 f0 06 f1 7d 39 18 54 cc 3d b8 ce b6 ab 21 92 e1 40 75 79 bc 06 56 65 6e 04 71 0c fc 37 ef b7 06 e7 e9 8b c7 8e 8c 98 8f e0 b6 7c 10 b9 b4 34 7f a7 3e 9a 37 a0 1d cc fa b2 53 a9 dd ed 57 ed 29 0e 64 9c ff c7 c8 95 3a 9c 07 3c Data Ascii: 6tB~-IIiyr M[uCHSpk+ &mA_rO1=E2lO8*R=8)2n2QjZeZ{>EbCH@-,7$#l8Z?EO=a!e#.Wi-G9}9T=!@uyVenq7\|4>7SW)d:<
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 1e 77 64 a2 4b dc ad a9 ce a1 36 73 c0 de 66 e7 21 39 e4 c1 4e db 78 6c a9 e0 93 48 90 13 90 49 cb 84 1e 1a 7e 2f 3f f1 ba 7f 3a a1 0d 54 ab 60 83 fa 6f 00 3e 9d 62 6e 50 f5 8c 31 1c c5 68 b9 26 0e f6 ab c6 0a 0a 9e 09 64 73 a5 b5 a7 74 35 52 98 e0 d0 e1 99 fb 44 c9 16 4b bf e0 ad 99 40 bb 57 3b 5e a7 e1 f0 f5 2d 2f fc c0 35 bc 82 11 5d fa 25 eb 5d 35 c4 27 d8 5c 90 9f 11 9d c9 26 3e 5f eb cd 7f 74 0b 0a d2 51 26 8b 04 69 61 74 8e a5 82 10 39 32 c8 c6 88 14 54 0c 39 21 d7 d6 8b f0 ae b3 5d 9e 8d 1c bf 33 ac 30 ae ca 7f 6a 00 40 08 6d bc cf 3e 0f 56 36 f8 9b c4 c4 3f cb e8 3f 94 74 b5 61 6d 10 54 eb 6c 57 c0 c4 07 1c 78 8e dc e9 cc bd 0f 9a ee a8 e3 20 a6 37 b7 3c 35 6e 40 ad 29 93 47 fa 5f 94 d8 54 77 4a e1 5a c4 26 76 78 ee e3 d9 6b 92 c2 23 ed 1b 00 5f Data Ascii: wdK6sf!9NxlHI~/?:T`o>bnP1h&dst5RDK@W;^-/5]%]5'\&>_tQ&iat92T9!]30j@m>V6??tamTlWx 7<5n@)G_TwJZ&vxk#_
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: a5 bb e3 1e f7 10 7c 2a 0f 49 46 31 fb 52 a9 80 39 07 74 ce 66 7e cc 6b 46 36 6b 16 04 1d a5 88 52 51 83 30 ae 63 1d 35 75 dc 70 f7 f5 b4 82 aa 55 dd 4d cd 76 9c 55 b3 50 6d 82 0d 49 bb 32 5c 69 46 7b a0 b6 df d4 45 33 5a 4a 5c 4b ef a6 1d b7 61 67 2c c7 83 1d 18 15 6b 0b 19 1f ff 19 93 0e 26 92 4a b4 65 d9 3a 61 e7 13 6d f2 70 ab 00 75 32 9d 9e b9 b5 53 10 d3 f1 f8 d1 d5 ba 42 65 91 42 df 64 bf 46 cd 45 7d a0 ec ae ae 5d ef c5 81 0c a4 bb cc 22 84 87 e8 87 31 c2 ba d5 e8 70 86 28 b9 fd ba b0 d3 e2 01 1a 64 7d 8d 2b 53 f3 2a dc 57 23 23 12 0c 8a bb 99 34 ba cc be 84 c5 46 68 48 6c 08 35 3a 63 90 c5 ad b5 1b b3 75 ee 94 b7 ef 0d bf 7e 80 e0 17 22 29 59 36 c8 3c 6d a6 3a 7a 2c 41 3c ae 22 6c 0e af b1 3e 90 98 be 6a 07 e8 29 55 ad 69 20 11 0a 7c 3b 2f 66 46 Data Ascii: \|IF1R9tf~kF6kRQ0c5upUMvUPmI2\iF{E3ZJ\Kag,k&Je:ampu2SBeBdFE}]"1p(d}+SW##4FhHl5:cu~")Y6<m:z,A<"l>j)Ui \|;/fF
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: c8 68 a2 a5 76 dd 59 e4 97 5e 45 ab bc 83 03 68 00 de d2 d9 f8 4c 26 94 be a6 55 f4 25 0d 5e f0 6a 82 70 70 72 18 32 8f d5 be 31 4e ed 33 58 69 ea f9 19 ed b1 e9 7f be ea 5b 23 d0 1f 31 60 3e 22 01 d1 5d 2c df 16 4c 35 5a 31 a7 15 20 10 4c ff 78 b2 b5 d1 46 ae 22 bb c3 22 15 49 b6 c4 13 e2 52 ce c2 54 f0 65 34 8d 22 c6 1e af 57 a6 a1 4c ae 0e 37 af e0 e3 0b 09 40 19 fb 05 9c 62 6f dc f5 85 52 bf 24 1e 4c 1b 5c e9 8f 70 3b a5 d3 d7 89 00 a0 32 cd 61 d6 4c 26 b4 a6 ea 9a 4d e1 cb 7c b9 5d 92 df b1 22 d5 e6 38 21 f4 e8 c7 13 42 79 26 c3 00 84 bb 9f 0a 06 0a a8 23 96 e2 78 e4 91 a0 15 83 28 41 d9 b8 a1 bb f3 ce 5c a7 66 07 fa f3 20 9c 81 70 66 55 f8 28 48 20 7c 99 19 21 09 99 c2 a0 3c fb b2 6e 4e 3b 17 d3 16 f9 da 22 91 5a 9e 3d 49 f5 ed 7c ac 9a 09 5c 54 25 Data Ascii: hvY^EhL&U%^jppr21N3Xi[#1`>"],L5Z1 LxF""IRTe4"WL7@boR$L\p;2aL&M\|]"8!By&#x(A\f pfU(H \|!<nN;"Z=I\|\T%
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 1b 26 30 c7 5c 90 93 9b e0 49 7e 20 fe 30 6e 8f 3b cf 3e dd 2c 48 3b 17 7d 00 65 3f 14 64 ef 81 10 f8 63 d1 16 f8 6d 58 50 0d 0f d7 2a c0 d8 ce 2a 07 22 d8 be e1 f1 58 5b f4 fb 9d d4 b2 0b 34 a8 08 5e ec 17 c0 98 b6 9b 04 a7 e6 86 a7 df 13 60 05 5a d9 bd 6d 50 58 f9 fc 0f 3d fd 62 ee 6d cb 70 31 1e ea 1d bb a4 9a ba 8b cc 23 67 32 92 cd ca b6 11 78 74 22 d9 07 3d 4b ea 5a 09 28 83 9a 7c 7b 0c 02 83 59 9f 43 ac 3e c2 47 1b f1 ce d7 b0 c4 5b b3 a2 56 66 b3 77 3c 2c d1 35 48 e6 bf f8 c9 59 be 99 4d c3 f6 97 53 85 c3 87 38 a0 17 09 8b aa 38 c8 dd e1 65 f6 1f 55 7b c2 c2 c3 bf 40 8f eb ea 31 c1 15 7d 22 2a 2d 94 da 13 fe 35 33 94 d7 04 b7 1f e2 fc ba 05 69 a5 32 98 5f 75 5a 2c 0f 7b 13 81 32 df 44 6a 8e 85 ae 5c ca cb 9b 99 68 58 d3 40 36 10 c9 f1 26 01 89 6d Data Ascii: &0\I~ 0n;>,H;}e?dcmXP*"X[4^`ZmPX=bmp1#g2xt"=KZ(\|{YC>G[Vfw<,5HYMS88eU{@1}"-53i2_uZ,{2Dj\hX@6&m
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 0e d9 7b ef fd e7 6d 75 2d d2 b1 19 67 53 ba 50 7d a5 2d 13 80 89 91 24 ea e4 87 13 05 d3 70 c3 bd f4 61 41 2b 45 04 36 c9 f6 2b f4 99 ec f1 10 c3 f8 60 ef 25 44 d2 67 35 db ed 94 88 7b 50 68 70 b4 64 45 5f fa 8b 04 83 d2 39 65 e7 3c ce 01 73 ee f7 d6 db 03 87 2a 98 79 62 58 e9 78 4d 5f fd 5f b0 2b d2 ae 6e 18 6f 0b 9d 72 77 21 a6 bf 16 a2 58 68 b4 47 18 20 38 96 20 99 9e 92 5e c6 68 7a a6 73 5c 1b b7 4f 37 31 dd 2b 4d bb 16 e5 24 ce 46 55 b4 e9 2a c7 bb f9 14 36 58 35 c9 87 17 24 43 8c 69 ad b2 95 a9 ea c5 4e c9 87 5a 56 94 50 d8 ec e8 43 d5 ae e5 dc 82 d4 81 54 6d af a7 39 58 44 e2 c6 bb 5b 0f 2b 61 d3 49 b9 3c 27 e4 dd d7 98 70 37 cc 14 68 4d d8 41 6e a9 4f be 29 ce 1d 4b 00 4f c2 68 f9 63 7f b5 24 ae fe 7b 4c a6 91 32 47 7d f9 45 90 a7 ca 2c a7 f8 3b Data Ascii: {mu-gSP}-$paA+E6+`%Dg5{PhpdE_9e<sybXxM__+norw!XhG 8 ^hzs\O71+M$FU6X5$CiNZVPCTm9XD[+aI<'p7hMAnO)KOhc${L2G}E,;
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 6f a8 89 0b 2f a7 b8 90 67 4a a9 cd 9b e0 bb 17 7a c9 ae 22 44 22 e2 4c 1c c0 c1 55 87 f5 cb de 55 1a 21 c0 77 d0 a7 bb 12 51 8d 9a 26 e7 80 22 d4 6b 44 8e b7 1b 8b f0 91 d4 a4 96 f6 b8 a6 c3 12 95 99 7c 5f 1e 96 2b 59 80 d9 ca 0e 15 f5 51 95 d8 3d 6d ef af 64 6d 23 11 20 a3 94 cc 9f 96 25 0a 8c 90 72 65 2a 16 f0 b3 bd e7 0e 4a 02 8e 5a 40 2d 29 61 2c 08 92 cf cd ea 8c 23 a4 aa ec 5c db 67 1d 33 28 83 ee 72 fb f2 01 4b e4 19 1f 16 74 83 b4 45 53 a7 45 18 6e 7c 00 21 25 df a1 7a 1f 81 1d 5b 08 75 94 3b f5 2b 79 ee d6 f9 3a 17 6a 1b 2c 19 be 29 db f9 94 a4 28 ac f1 4f ac 1a f9 dd 14 6f 4b 18 92 17 a3 fc 5c b2 c3 ad cb f4 3b c5 94 93 19 bb bc 99 c2 e2 c0 24 5d d0 f8 be 69 57 70 2d 2a b8 cf e3 08 97 cb da 5b 65 48 78 b2 0b 21 b6 88 71 72 fd 7a 66 ab 61 bf 30 Data Ascii: o/gJz"D"LUU!wQ&"kD\|_+YQ=mdm# %reJZ@-)a,#\g3(rKtESEn\|!%z[u;+y:j,)(OoK\;$]iWp-[eHx!qrzfa0
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 23 a5 1e bd 96 04 ea 11 43 9b 35 f6 ee 3a b4 25 ef fc c6 cc 01 19 bf e1 5b b9 0b f8 14 f8 29 2c 51 9f 50 89 b2 f4 31 e7 87 cf 15 ae 9d 29 0b 5a 51 e0 ef 42 0b 2b 7f f0 2e 2f ef 71 04 38 dc 47 d1 e6 f8 b8 43 71 77 da ec 71 6b 3f 68 cf 4f 0a ad fa bc 98 04 82 8f 5e 1a b9 f9 b1 4d 2d ac bb ce 91 93 5e d7 21 27 db d5 c5 a7 85 8f 28 15 70 33 80 5f 7e f2 82 8d af 10 5b 2e f1 d7 63 84 4c 27 fd d5 1c bb 33 14 16 17 7b 51 26 41 36 46 49 ed c1 55 fe 92 de 60 18 0f b1 ba ae 23 19 91 78 d4 c5 b4 1c 77 f0 98 25 bd 91 25 c5 d6 f8 63 d0 0b 43 e1 f4 a0 bd 69 17 05 32 af 1f 6a 7f 1b be 17 e2 be a9 3c b7 f4 ec 78 13 6c 1b 79 6b cf 43 87 c1 39 9c 55 66 f0 3e cc 90 76 d2 35 16 77 0b 18 2c 6a 16 16 f7 db 7f fb 2e f8 a9 1b 2a 55 35 b2 a6 d9 d9 3c 42 22 1d 82 b4 e9 66 7a d2 25 Data Ascii: #C5:%[),QP1)ZQB+./q8GCqwqk?hO^M-^!'(p3_~[.cL'3{Q&A6FIU`#xw%%cCi2j<xlykC9Uf>v5w,j.*U5<B"fz%
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 79 b1 65 0b 8f 35 38 5f cb bb e2 f5 e8 71 f0 8d 42 58 9c 01 6c c3 1b a8 de 4c fc 58 81 db 78 7d e7 8c 20 31 21 4f 9c 83 b9 8d d2 34 db 10 dc 93 eb c4 1c 6e 57 9f 5c c1 a6 a7 60 ab f8 25 29 cd 54 10 1e bc 60 82 66 0b 08 8b 26 03 47 59 df a7 4b 82 1f bd d4 ac 2b 2b 59 49 6a 1b 46 14 c7 26 cc 3d 82 ec 51 aa 8c 40 c1 43 8f 52 eb c5 0c 03 6b d7 c9 20 e1 17 dc 58 f7 f4 1b 6d 54 79 4e b9 51 b0 dc 45 55 d7 80 8e e0 f8 82 99 cf 2f d2 27 ae a7 3f 18 45 13 fc 5e af 80 95 8a c2 c0 b9 e7 3f 66 81 cd 4c 4f 39 b3 07 1d 59 fa de f6 77 d4 de 9d 98 11 6e 04 54 f2 19 a1 49 d8 0c 95 df 7f ec 14 29 fb 12 a9 e3 e1 ee cd dd a7 65 10 72 04 82 99 f5 88 c7 79 db f3 4d f6 ef d5 33 cc 35 d3 2b 0e f8 2e f4 b7 49 00 d0 4b 33 42 bc 28 de d2 1e 8e b7 81 a6 eb bf 5d f0 af 59 47 25 31 5b Data Ascii: ye58_qBXlLXx} 1!O4nW\`%)T`f&GYK++YIjF&=Q@CRk XmTyNQEU/'?E^?fLO9YwnTI)eryM35+.IK3B(]YG%1[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49968	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	877	OUT	GET /-/media/images/financial%20services/tile%20img%20for%20tcof%20retail%20jpg.jpg?h=170&iar=0&w=270&hash=83A5C49094FD423F6A608530CF757C1E HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	873	IN	HTTP/1.1 200 OK Connection: close Content-Length: 3668 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Tile img for tcof retail jpg.jpg" Content-Type: image/webp Etag: "boCje85M9EwWKPW5YtgN2ggkECc12ePCDTuHmjat9MY" Fastly-Io-Info: ifsz=7036 idim=270x170 ifmt=jpeg ofsz=3668 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010251 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210039-DFW, cache-pdk-kfty2130070-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460565.869533,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 4c 0e 00 00 57 45 42 50 56 50 38 20 40 0e 00 00 f0 59 00 9d 01 2a 0e 01 aa 00 3e 51 24 8e 45 a3 a2 21 12 eb 15 84 38 05 04 b4 b5 18 ea ea a5 61 5c 57 b2 38 25 21 92 ea 9d 0d b0 d2 39 9a af 31 73 98 bd ad 98 67 a2 ff a1 db 4b f6 de 60 18 9f fa 9d cc 1d cd e0 dd bc 06 49 6f 3d b6 66 0f 44 00 4e 07 37 bb f6 8d 3d 53 4c 28 ca 24 fe 13 54 96 b7 9d c3 3d f6 ae ae 42 e1 cf 2d f8 e3 94 75 ea 0f bf 45 89 36 23 20 b7 b7 6e 7e 22 2a d2 90 44 b7 aa e7 6c 7c 06 02 f2 91 84 90 0c 0f 3e be 8d 52 44 d3 eb 52 45 f3 9b d1 75 6e 99 65 5c 35 eb 5f 76 be ff c8 b9 18 2d ae 76 e6 5a 61 ea 07 4f b6 ea 91 0b 4c 88 85 b1 b3 9d 81 73 d9 63 7f e0 c1 89 3f 40 ed 45 2b 92 6d cd c6 f4 76 cd 77 67 2b 1f 1f e8 b4 8a 1e 40 ad 7a 69 c8 12 dd 02 97 71 db 43 c6 6b b1 23 d0 89 7a Data Ascii: RIFFLWEBPVP8 @Y>Q$E!8a\W8%!91sgK`Io=fDN7=SL($T=B-uE6# n~"Dl\|>RDREune\5_v-vZaOLsc?@E+mvwg+@ziqCk#z
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 81 c6 54 3c 27 c1 eb f0 bb be 0a a3 28 c5 8f cd b5 df 7b 1c 47 1e cc dc 9d 4d ec 9b d4 37 8b e4 17 b9 2e 90 94 b1 25 0e 8a 25 5d 99 f0 17 8b 75 b2 bd eb b5 a5 97 a9 61 43 ba 66 c5 6d aa 38 a6 56 3f ee 7a c1 5d 3b 16 e8 ab 47 44 e6 77 24 49 b5 42 ab 3d 97 19 e1 fa 51 df c9 d8 b7 b4 87 eb 37 0e 8c 72 04 b2 f5 f8 25 f9 fe 7c 3e a3 fb 32 5a dd ca 0f fe 22 9a 5f db fd 64 09 ed e2 83 b7 a7 9a 36 bd 35 84 49 30 57 14 06 1d 62 df 76 00 e9 0a e0 64 f0 1f 2f 83 63 5b 33 37 19 f9 e1 ae c8 20 d4 ab a7 35 c2 5c 67 87 7d 2f 26 be c0 bc a4 0d 16 f2 cb 7d 61 33 d2 0f 0c 14 25 19 9f bf 8d 35 49 9c ac 1c 22 e2 f5 3e 9c 89 44 9a de 0a 85 09 d2 83 ed ff 24 2f 81 c8 71 39 98 e2 c1 ff ee e0 04 84 3a 41 2c 40 93 80 36 15 3e 61 be b3 e6 ab 7b b4 aa fa 22 c7 be 1f e5 e5 69 a0 3d Data Ascii: T<'({GM7.%%]uaCfm8V?z];GDw$IB=Q7r%\|>2Z"_d65I0Wbvd/c[37 5\g}/&}a3%5I">D$/q9:A,@6>a{"i=
2024-04-18 17:16:04 UTC	910	IN	Data Raw: 7c e7 29 24 d4 f4 4c 00 ba 9d 26 b0 ac 96 8c fd 73 4b 64 d2 73 41 03 9d 08 1e 44 f7 78 92 2d 3e 34 9c 07 4a b3 a9 67 9e 7d fd a1 bb 10 0a 3c 01 0a fa 88 19 2c 54 d3 3c 82 31 62 fe d6 53 ea dd 53 d2 3b 7e 7a 5a 07 aa e0 48 8f b4 ea c9 87 7a bf b9 2f d6 ce e5 24 1d 1d 08 3a 56 e1 3a 8d e1 57 06 f1 d8 3c 73 2e fb d2 a9 b1 e6 41 b3 ab e2 55 b3 84 18 0b a7 3b 81 1b be ec aa 76 9e 6d ee b5 6c 8e d2 51 e6 41 27 1e 16 ca c3 e8 2f dc 5f f3 fc 6d b9 95 fc 65 7d f1 26 c3 51 22 d6 7d 26 e2 5b ba 2d 9f 5d a5 f6 04 17 d3 9e 0c 15 f5 d9 c1 95 ca 21 a8 37 88 6a 67 1e 85 9b c3 90 56 e0 21 6b 6f a3 7d ce a4 2b e0 82 ed af f4 70 3b 63 6a 62 1c c7 d0 f0 aa 3b 30 a4 03 07 41 2a 9a ba 54 b4 97 81 96 1b 5d aa 2a 5d bb 8a e7 38 3b 04 f5 0f c9 5f f3 1b d1 65 b4 e8 f7 d2 3f d8 9d Data Ascii: \|)$L&sKdsADx->4Jg}<,T<1bSS;~zZHz/$:V:W<s.AU;vmlQA'/_me}&Q"}&[-]!7jgV!ko}+p;cjb;0AT]]8;_e?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49969	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	886	OUT	GET /-/media/images/government/5%20public%20sector%202024/5%20top%20threat%2012924%20jpg.jpg?h=170&iar=0&w=270&hash=282500ABCD598FC9D9CC84300150B53F HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:04 UTC	870	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10496 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="5 Top Threat 12924 jpg.jpg" Content-Type: image/webp Etag: "FXmtvUx2cl9pfb/2H+SYIhyO1SftPURiNUFtmYMe4jE" Fastly-Io-Info: ifsz=37278 idim=270x170 ifmt=jpeg ofsz=10496 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010213 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:04 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210111-DFW, cache-pdk-kfty2130088-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460565.886219,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 52 49 46 46 f8 28 00 00 57 45 42 50 56 50 38 20 ec 28 00 00 f0 95 00 9d 01 2a 0e 01 aa 00 3e 51 24 8e 45 23 a2 21 14 4b ad 38 38 05 04 a0 6f 8e 50 1a 36 a4 79 d1 64 7f a1 66 e7 d8 fe c4 fe 2f e2 2f 8c 4f ea f6 d9 f2 de 44 de eb f6 3f f2 ab fc 6f cf 9f fb 3e ab 7f bd 7e ec 7b 89 fe 9f ff bb f6 35 e9 77 cc 3f ec 6f fc ef f2 de ef 9f 96 3e ef bf be fa 82 ff 3d fe 89 d6 a7 e8 0b fb ab eb 31 ff 83 ff 17 fb 6f 85 8f ee df f2 bf eb ff 94 f8 12 fd 89 ff c5 ec 01 eb ad a7 82 c5 fd 28 fd 5e 52 8e 24 6a 4d df 7e 72 7f af ef 8f e6 9e a1 7e d5 f3 c5 fb de e7 2d ef fd ff a0 47 b9 df 75 f3 a7 9c 4e 40 dc 1f 74 02 f1 99 d2 3f d9 1e c2 8b 28 dd 05 b3 7e aa 61 dc e9 27 34 d4 f6 6c 48 e5 2c 7a 87 3a c1 72 51 e9 40 9d d4 2f ed e8 3e d1 62 6b a6 66 fd 0b 3b 5c 3e 57 2c d2 3d Data Ascii: RIFF(WEBPVP8 (*>Q$E#!K88oP6ydf//OD?o>~{5w?o>=1o(^R$jM~r~-GuN@t?(~a'4lH,z:rQ@/>bkf;\>W,=
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 03 00 1a b7 30 20 ac 96 67 44 c8 54 a6 5f 71 70 ac 81 e5 a9 a7 09 66 93 16 6a 66 38 c9 f8 a0 d0 6a c6 90 8d 75 f6 9c 1c c8 26 54 bb dc 97 66 66 0c 80 1c 80 2f 6b 8f a5 16 4c 91 51 12 ca 16 aa 2d 49 86 91 d2 eb 5d f9 80 17 c9 9e 32 c2 92 98 f8 c5 45 f9 4c ba 68 a0 80 24 61 30 f3 de d1 87 c0 e1 67 2e 11 74 af 90 d6 94 82 58 5b 3d da 17 64 81 a7 c3 87 2a 80 83 c9 6a 54 e4 87 b4 56 1f 0f 57 87 72 ee 86 5f 7f 85 e5 ae fa f1 d7 94 77 56 47 9a 5f 69 2b e0 72 c7 9e 17 3d 7f 46 ef af 31 26 0e da b1 62 d8 c0 6e 6f c3 0b 47 25 1f f1 87 38 c5 39 63 a2 a8 ed a8 d7 7c fd f6 8d 22 cd 46 03 2b 27 8f bd cb 0a 41 77 65 3a 59 ec 3c 0d 4c 25 15 ee e4 32 6e fb 9c 56 b1 2d 5a 24 ff 5a 00 fb b8 28 13 a6 26 3f 08 70 fe 80 b8 d0 d8 bb 24 6e a1 69 36 66 9e 8e ba bc ad 86 61 f9 93 Data Ascii: 0 gDT_qpfjf8ju&Tff/kLQ-I]2ELh$a0g.tX[=d*jTVWr_wVG_i+r=F1&bnoG%89c\|"F+'Awe:Y<L%2nV-Z$Z(&?p$ni6fa
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 3b a3 9f 69 1f 63 32 b6 2d a9 41 83 47 0b 45 78 83 95 3d ee e2 34 c9 28 9b 03 9c 02 1b 51 cc f7 e3 7e be 79 5c ed 3b de 7c c1 6c 98 a0 0f 6c c1 ac 42 17 d2 99 1d 42 d6 22 c0 2a d0 3b bb c1 b7 6c b6 dd fc 91 c9 d9 dc 7e ac 8e 98 00 02 e9 22 e8 2e f5 c5 5a 06 06 01 58 50 56 4f 36 98 42 6b 38 1c 9e 76 fe 09 0d 64 6d 3f 40 49 43 3f b8 78 91 dc 1b f6 cb 3a 4e 9c b2 05 de 02 3c b2 a8 0c f6 7a d2 65 1e b3 71 6b c4 62 b3 41 24 73 d7 48 66 97 d9 51 bd ef 8e b1 0e 8a 9b e1 4a 36 ac 8b 4c 7c 76 9e 1b 67 52 34 22 e1 2f dc 65 05 c9 29 3d 94 84 ab 84 4f 76 96 90 8c 01 a8 dd 3a cb 79 f5 90 36 78 f8 9a 7f 76 81 f5 fd 13 54 a2 82 5f ef 8f db 3a 86 ff eb 44 bb 12 a1 c0 d8 9b 75 20 e8 7b 14 89 f9 7d 9d b6 b6 0a 87 8f 61 30 7f 0e 3f 2f 4a b3 00 ff 61 87 bd 59 9a df 66 a9 12 Data Ascii: ;ic2-AGEx=4(Q~y\;\|llBB"*;l~".ZXPVO6Bk8vdm?@IC?x:N<zeqkbA$sHfQJ6L\|vgR4"/e)=Ov:y6xvT_:Du {}a0?/JaYf
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 67 81 df 86 ab 2b 3d b7 3e 5c d9 b0 6b 61 d5 16 cf 74 c6 41 3f ba f4 0e 48 fb 11 de 15 da 60 0a bb 47 00 33 5c 90 e8 02 dc 05 17 6c fd 86 f4 74 6e 2d ad 2c 7e b4 68 d4 89 3e 27 34 07 7c 42 16 bd 55 5d 14 ba ff 61 47 f8 70 2d 15 51 5e 5a 58 bd 7a 40 18 f8 78 6a bd 71 63 a6 45 03 57 0b 25 98 07 f6 c8 8f 57 92 85 bc ef f3 8f 43 ad f6 25 db 79 68 b2 db 0d 31 3b ac 4e 7e 41 3d a2 a4 fc 01 de f7 39 c1 4b da 9d 1c a2 bf a8 70 b9 3a a5 05 a9 d7 06 86 5a aa 50 4e 37 d4 d9 a3 4f 4d d1 bb f5 a7 9d f8 4f 18 00 5c 13 84 f7 41 46 2c 60 18 bb 84 72 18 7f cb 26 ef b6 be 2b 93 23 df 19 14 41 88 38 6e c0 0d c0 9f 70 84 5e 08 60 f6 17 93 fd 96 1d 70 6f 61 51 86 d3 2b 6f 42 4e 0e af d8 ef ea 56 bd 1c fe 6f 26 d2 11 c1 65 9c 3b f9 54 7b bb ad 09 b0 01 41 98 1a 0f 38 d4 b9 ce Data Ascii: g+=>\katA?H`G3\ltn-,~h>'4\|BU]aGp-Q^ZXz@xjqcEW%WC%yh1;N~A=9Kp:ZPN7OMO\AF,`r&+#A8np^`poaQ+oBNVo&e;T{A8
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 46 bf 54 34 af 64 c7 56 30 be 57 3f 70 15 7d 20 78 38 23 b8 91 89 c5 d3 10 d8 2f 82 ce 7e f3 00 74 99 a4 74 91 fb 7d 54 8f 03 ec 83 63 75 ae 68 69 99 6b 61 40 da bf 4c 3a 09 59 87 aa 80 38 ce 4f 11 9b b7 0d 25 5a 02 45 10 d8 9a b4 70 51 d7 80 3b 94 21 ca a0 6f 53 11 ec 3b e1 4f 79 71 36 35 f1 a2 8b 4c b5 8e 41 c0 36 6b c4 e8 ec ad 56 f8 ff a7 0e 0f d7 af 13 c0 4f 1f 8f 5d c5 09 7c ad 80 c8 e8 17 8e 96 a6 16 29 17 2f 2d 39 56 31 83 00 88 6f f9 1a a8 53 98 e7 54 57 b7 cb 89 e1 e1 6b 4c 64 df c6 ce e0 81 fa 98 8b bc 6d 1f 08 5d 85 4a 8e 15 c4 f8 76 85 e3 37 57 74 89 40 7c d6 ab 88 5c ff ba 36 ef 4c 82 fe ab 6a a0 4d 2a 4e 40 75 03 b9 bb c0 05 0c fa 31 e6 64 ab 46 fd 7e 61 c7 c1 da a7 2d 1d 95 ec 17 8c 71 a4 27 1e 3c 73 f0 fb fc 30 c7 95 c7 a0 c7 da 2e 28 ac Data Ascii: FT4dV0W?p} x8#/~tt}Tcuhika@L:Y8O%ZEpQ;!oS;Oyq65LA6kVO]\|)/-9V1oSTWkLdm]Jv7Wt@\|\6LjM*N@u1dF~a-q'<s0.(
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: c9 ba 3f 2c c6 9f b1 c9 b2 04 70 4f 07 2b dd 0b c2 69 54 dc e2 13 96 bc 19 9e 8e cc 8e f4 44 69 33 ca 1b 06 6b 2d 78 98 ed 57 8d 1d 28 7e 22 52 49 67 2e c2 7f ea 13 d4 07 42 b9 b4 8a 57 6a bd a5 08 82 d2 24 eb ca 8f 22 01 63 ea d5 35 0b 91 ed 5c 91 d1 0d e3 46 93 0c da bd c4 41 2f 1e fc d4 f3 85 6b 52 ca b7 43 5e ee 68 ed 92 c6 c1 0c 87 d1 5c 11 14 39 d3 bb bc 2e 78 33 c3 47 0a ab c9 71 7e ce b1 19 c5 89 4d 06 6e 45 27 2a f8 5a af 15 5f 6a f2 ab a9 24 b8 d8 43 c8 8b ac 6e 9b ba 1c 3f 77 9b b0 8a ad 80 13 4b 1c f6 7d 9a 73 db 10 6f e6 94 d9 25 b5 67 bf 9e e7 3d 13 7f d4 18 7d e3 76 1d 35 8a ae a5 fb 51 fa 50 51 8b af 4e 90 e0 bb e8 41 14 fb 3e 45 95 1e fc 7a 63 99 c7 bc 68 a6 a9 6a 3a 22 92 75 5a e0 13 94 f7 a5 37 c2 49 5d ee d3 32 ea 81 e2 e0 11 bc cc bc Data Ascii: ?,pO+iTDi3k-xW(~"RIg.BWj$"c5\FA/kRC^h\9.x3Gq~MnE'*Z_j$Cn?wK}so%g=}v5QPQNA>Ezchj:"uZ7I]2
2024-04-18 17:16:04 UTC	1379	IN	Data Raw: 2d 18 c4 cd 8c 60 ba e9 67 49 81 61 90 97 e6 c2 b2 c1 40 c5 7c 66 3e ca 1d 84 f8 11 d1 6a 79 4d 96 89 73 fe 1d c1 30 63 f0 86 34 13 4a 44 2f 12 61 61 b1 8d 4c c8 fe f4 93 43 f9 bf ef d6 5f 9e fb 75 12 d6 a9 28 df 4b ee b3 b4 bb fb ec 19 f8 39 9d 68 12 e1 57 9a 4b cc 9a e0 81 94 78 55 6f 6a 3f d4 ae b1 d2 64 ae a8 f5 44 df be 01 25 76 79 a0 2b 05 84 82 4c 80 0c df a3 00 03 4b b6 7d 3b ef cf d6 d9 7e b4 2f db 05 86 b6 c3 99 4d c4 2d bd c3 85 e0 62 7a ed ad 1e 6c e8 04 79 5c 57 f2 af e2 f6 64 8f 6c 1c 10 e7 42 67 80 67 09 57 0c d2 07 9f d9 19 68 f2 53 78 a2 b8 fc 48 8a f2 d4 e2 dd 7a 81 5d 26 ac 63 4b cb 6a f3 9f f7 c9 e0 83 89 42 fb 59 4d 22 98 f4 4a c1 5e bf 25 bb 57 28 bf e9 83 2f f8 53 9a ac f6 80 80 f9 c1 d8 43 aa 09 c5 12 52 4b 4a dd ba b4 7e 9f bb c1 Data Ascii: -`gIa@\|f>jyMs0c4JD/aaLC_u(K9hWKxUoj?dD%vy+LK};~/M-bzly\WdlBggWhSxHz]&cKjBYM"J^%W(/SCRKJ~
2024-04-18 17:16:04 UTC	843	IN	Data Raw: 7e bc 48 88 b3 93 e6 2c 08 98 df fa a0 c2 5b b3 5e 04 53 e2 93 12 4d 4a 06 55 44 14 4b 19 ef d4 b5 1b f7 b3 3a b8 f9 a4 86 dc 48 f7 39 71 6b a9 e4 02 43 a2 8b aa ad 6e 2a 83 49 45 11 9e 76 58 ae be 64 a6 95 d6 65 84 53 f3 7b 28 75 d8 72 c5 2d 2e f4 cf 92 e1 eb 00 b7 57 16 f0 6c 36 83 69 f1 41 8f 84 b6 25 75 35 ad fe 43 37 16 d8 a9 03 12 2b c3 a7 79 8e 9e 17 4f c3 56 05 68 b5 2a 7e ab d3 0f 37 73 40 7c 62 91 53 fe 41 a7 e9 87 6f 07 93 2e 8c 17 65 48 7c fe 7f 89 64 71 fe 1a 39 a0 d5 16 8b 5e 98 fd a1 9f 50 73 cc e4 09 0e eb c5 29 5c e8 38 33 7e 70 50 ee c1 af b7 f3 c8 6d d3 31 69 dc 4e 0a ae 31 8b 88 98 40 dd 18 8d 14 48 96 8b fa 68 68 ef fe a4 9a 1a 91 cd bc 08 ba 2a da 92 dc 2a ed 9d 79 f4 b8 7d 4b cf ea bd 75 8b d2 4f 1f e2 b0 20 9e a7 54 42 a3 12 21 8f Data Ascii: ~H,[^SMJUDK:H9qkCnIEvXdeS{(ur-.Wl6iA%u5C7+yOVh~7s@\|bSAo.eH\|dq9^Ps)\83~pPm1iN1@Hhh**y}KuO TB!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49971	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	621	OUT	GET /-/media/images/corporate/csr%20wellness_mobile%201_800x420.jpg?h=420&iar=0&w=800&hash=5CAE46E3F2412A05E7D8584D25B63DFF HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:05 UTC	880	IN	HTTP/1.1 200 OK Connection: close Content-Length: 70726 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="CSR Wellness_Mobile 1_800x420.jpg" Content-Type: image/jpeg Etag: "YktrIus8Dq7V68eDk5VLmOHnDnUdsPDALZcl0EFEHw4" Fastly-Io-Info: ifsz=282882 idim=800x420 ifmt=jpeg ofsz=70726 odim=800x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120139-DFW, cache-pdk-kfty2130034-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460565.046395,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: ec 8a 25 3a 11 16 47 68 19 bd be 39 ef c7 84 83 f7 05 4c ed bf c5 e0 ff 00 66 bf 2a 84 5a 92 66 d4 87 84 8b fb 82 a4 6b 79 34 56 f1 72 aa 90 23 5e be ca 3a 66 d7 80 c3 e6 61 ba f2 a3 27 5d 9d 49 cd b8 3e c3 5e af 10 ed 96 b6 6f 75 17 58 be 3e d2 b2 37 29 25 af 39 57 39 c0 cf 8d 02 4d 7e d9 86 5a 37 1e ea 5a 3d 6e ca 42 14 33 02 76 00 8a bc e8 6d ac ac ad c8 c3 15 e6 05 78 ce a8 85 d8 80 a0 64 9f 01 4d d6 fa d1 ba 5c 27 fb c2 88 90 37 22 0d 89 e1 37 ed 79 80 c6 d5 a4 97 04 6c 80 13 42 2f 6e 5a 24 1c a3 62 29 4b 46 27 95 80 ea 37 ef a5 bd 4b 36 50 25 80 4c 7d 6f 23 c8 58 38 dc 53 29 67 90 39 55 3e b7 36 05 3c cb ac 8b 81 f5 a9 82 c5 c9 7a 85 ba b1 34 a6 b9 0a 35 de 16 d0 9c 5c fc 8b cf 8c f9 57 20 7a 66 8f b3 f4 a3 a2 cb 8d 9e 2b 71 fb c2 bb 23 94 63 35 ca Data Ascii: %:Gh9Lf*Zfky4Vr#^:fa']I>^ouX>7)%9W9M~Z7Z=nB3vmxdM\'7"7ylB/nZ$b)KF'7K6P%L}o#X8S)g9U>6<z45\W zf+q#c5
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 4e de 39 a5 24 d0 a1 82 28 e4 77 e7 c8 27 3d 40 22 b8 b5 31 23 ad 66 51 9b 94 ed d2 c1 31 a6 aa ec 17 98 dc c9 33 71 ca bc e2 3b 1b 32 e9 d0 49 21 c6 4f 92 8a 25 2f 10 f1 0c 63 31 88 63 db 6c 26 7e 64 d4 4f 4f 7b 4c 81 ca b1 ef f5 9f 03 ee eb 56 ae 87 a4 e9 3a a0 02 5b df a4 14 03 31 a9 e4 03 e1 bd 0a 36 2a ab 59 5b 2d f9 9b 47 bd 2c 1d 04 0c d4 f3 5b 7d 33 7f 94 6f a6 71 56 bc b1 a1 95 e2 73 91 90 c8 37 5f ea e0 e6 a2 1e 95 af bf 2a 6a 5a 7d ab a6 22 82 d9 43 af eb 5c 8e 63 f7 01 57 fd 96 8d a5 d9 2a f6 16 10 21 1d 1b 90 16 f8 9d eb 9b fd 20 48 b2 ea da d5 d2 9f 54 98 4a 9f 7b 81 f7 0a e9 53 a5 59 10 8a 95 73 5c 7c a7 2e bd 7c 3d 56 1d 55 0c 96 e3 b5 ef e0 27 3d c9 6a d6 d3 4f 03 e4 b4 52 32 e7 c7 07 ad 25 80 09 15 38 d7 b4 e6 6b c8 ee 15 40 13 c1 1c 83 Data Ascii: N9$(w'=@"1#fQ13q;2I!O%/c1cl&~dOO{LV:[16Y[-G,[}3oqVs7_jZ}"C\cW*! HTJ{SYs\\|.\|=VU'=jOR2%8k@
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 3e b6 e0 8e 29 81 d5 ad 78 8d e3 65 39 52 25 74 c1 f6 0a bb e0 b3 b3 4c 10 bc c7 cc 67 e7 46 ad 2d 54 91 d9 db b7 b8 63 e5 45 d9 b7 18 16 f0 12 a0 b5 e0 4e 34 d4 a3 58 ae f8 ae e5 d4 b1 cf 29 79 33 9f 1f 1f 8d 58 7a 37 a0 5b 79 d4 36 a1 c4 1a 83 f4 f5 55 0a ff 00 1a b4 b4 9b 49 54 a9 ec 88 df fe 3a 9a b2 6c 12 7e 40 18 81 fd 7f e1 49 6a 97 36 02 10 5b 6b a4 03 c2 1c 2f 6b c1 9a 63 e9 fa 5d ac a6 37 94 c8 d2 48 10 b3 31 18 f5 89 60 4f 95 49 73 a9 31 dd 21 03 f6 b2 7e 1c bf 8d 12 45 c6 72 c3 e1 4a 00 83 a9 03 df 8a b0 09 03 52 20 96 17 ee 83 06 08 2f 08 c3 5c aa 8f d4 42 a7 e2 58 8f ba 91 6b 25 52 1a 49 24 90 f8 b7 2f e0 05 16 e7 89 7b c6 7d e6 99 cf 2a 90 70 ad ee 15 4d 60 37 90 12 78 7d d0 73 88 94 9c 21 db f5 8d 24 70 fb 32 8c 1f d2 df e7 5e 4a ee 7e c1 Data Ascii: >)xe9R%tLgF-TcEN4X)y3Xz7[y6UIT:l~@Ij6[k/kc]7H1`OIs1!~ErJR /\BXk%RI$/{}*pM`7x}s!$p2^J~
2024-04-18 17:16:05 UTC	5190	IN	Data Raw: db 35 d0 51 73 32 31 b0 f3 8e 87 aa 33 43 2f ef 0a 47 ca 3b e9 e5 c4 a1 14 6f e5 f0 a8 a5 fd c7 3b b6 7c 69 8c 6d a4 5a 8b eb 05 5d 4b cc 58 f9 d0 a7 24 d3 a9 5f 99 8d 1d d1 34 a1 21 4b b9 c0 e4 07 d4 53 de 7c 4f 90 a5 ef 0c 69 16 d0 b4 f9 63 87 b6 90 63 9c f3 2a e3 a0 f1 3e da 95 c4 b8 1b 52 6b 22 e7 ae 73 4f 23 00 e0 67 7e b4 fa 34 85 ef 6d e2 6a d5 26 c2 fa 08 ee 18 f3 81 9c 0e 9b 53 fc aa af 95 32 cf 80 da b6 92 45 0a 37 ad b6 ca 26 6b dc cd 1e 5c 64 7c 29 a9 fc e1 3f f1 bd 23 23 96 27 96 88 59 c0 27 c2 f2 65 3b fd b4 ae 30 b8 40 5a 13 81 a5 59 83 d7 0c 3f b4 68 fb db 73 72 9e e2 01 e9 e2 2a 27 a3 bf 25 9d ba f8 16 fd e3 56 4d ad b3 cf 0c 04 0c e6 34 f9 56 6a 0d db 6f 29 a6 b0 ec 8f 38 12 1b 0e 79 06 de 42 ac 4e 1b e1 bb 8b e9 d2 18 a2 2c ec 46 00 a5 Data Ascii: 5Qs213C/G;o;\|imZ]KX$_4!KS\|Oicc>Rk"sO#g~4mj&S2E7&k\d\|)?##'Y'e;0@ZY?hsr'%VM4Vjo)8yBN,F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49970	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	633	OUT	GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg?h=420&iar=0&w=1230&hash=51E0FB2312B4005496EF1209FD583A43 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:05 UTC	887	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75463 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="solving-crimes-at-the-speed-of-now.jpg" Content-Type: image/jpeg Etag: "aVBKWDXiE2/BQNGmn4u4WDk5COZaNV9zPqW+M3FvUlw" Fastly-Io-Info: ifsz=361299 idim=1230x420 ifmt=jpeg ofsz=75463 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010215 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560835 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120096-DFW, cache-pdk-kfty2130046-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460565.046471,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 2f 44 12 10 ba 40 28 d9 25 0b a0 80 08 84 9b 25 5d 26 e9 08 24 11 5d 24 b9 03 16 80 29 92 f4 a0 e0 80 1e 47 64 d8 3e 51 dc a0 42 ee 8d 35 74 2f e1 31 8e a0 90 1c 8f 32 00 34 69 19 90 cc 98 ac 5d 90 48 cc 86 64 0a c5 a3 48 cc 93 99 01 7e e3 88 f4 4d 87 23 cc 81 0b 44 91 74 77 40 06 89 24 94 59 90 1c c5 20 91 99 1d d0 02 b4 41 22 e8 20 28 5a 2b a4 a2 ba 00 5d d2 51 5d 0b a4 49 72 0d 02 42 49 29 24 a4 02 ee 10 04 26 c2 50 28 01 68 24 dd 16 64 d0 c5 dd 29 35 74 a0 53 44 18 b4 12 73 22 2e 4c 54 2b 44 12 2f e5 16 6f 29 80 ea 3b a6 b3 20 5e 8d c0 76 e8 5c 26 33 21 9d 31 0f dc 22 ba 8f 9d 17 31 00 49 b8 49 25 47 32 24 f3 10 04 9b af 3b 7e 34 c5 4b 8c 63 38 06 19 4d 4a d7 57 d2 c4 6a 6a 26 d8 88 5e 6c c8 c9 ec 48 2e 5e 82 33 47 13 1f 24 af 0d 8d 8d 2e 7b 8e 96 6b Data Ascii: /D@(%%]&$]$)Gd>QB5t/124i]HdH~M#Dtw@$Y A" (Z+]Q]IrBI)$&P(h$d)5tSDs".LT+D/o); ^v\&3!1"1II%G2$;~4Kc8MJWjj&^lH.^3G$.{k
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 15 ec 9f c3 5e 1b 38 17 0f d1 cf 57 14 67 11 a8 84 67 94 5c 91 0d f3 32 3b 9e 9d 4f 95 87 c1 b8 2f 0d e3 6a 98 f1 2a a8 59 05 24 52 87 08 63 1e b2 d0 73 08 c9 d8 0e fe 17 7c ca 00 00 00 00 16 00 6c 00 e8 a2 a4 e4 93 7b 7b 14 65 4b 1b 78 e2 ee 9e ec 19 ed d5 17 30 22 2d 43 20 4f 62 90 f3 02 94 1d e5 10 68 47 94 23 60 0f 3f 94 33 24 d9 1a 00 19 8a 2c c7 b2 34 57 08 00 af e1 1e 64 34 41 00 15 ca 50 ba 08 c1 45 80 61 0b a3 b8 45 70 90 09 4a 17 47 a2 09 80 05 d2 92 6e 94 90 04 85 d0 ee 93 a2 00 88 63 6d ce 89 26 36 f6 4f b9 36 56 64 69 6c 61 cc 1d 92 72 02 9f 22 e8 06 a2 82 c6 c4 7e 12 84 7e 13 ed 68 4e 65 4f 48 b5 11 b2 78 49 2c 3d 94 cc a9 25 a8 d2 2d 44 50 d4 e3 47 84 6e 08 02 02 43 bb 1c 00 23 b2 46 60 3a a5 07 5f aa 90 80 5a 8b 64 b4 48 a1 06 10 44 81 4c Data Ascii: ^8Wgg\2;O/j*Y$Rcs\|l{{eKx0"-C ObhG#`?3$,4Wd4APEaEpJGncm&6O6Vdilar"~~hNeOHxI,=%-DPGnC#F`:_ZdHDL
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 27 41 7d ca a4 e6 0f 48 1b 5e c2 ca c2 9c d3 3a 4e 5c f2 b9 b1 b4 7e 91 99 5d 19 2d 9f 6e 46 6a 97 99 27 b4 b9 96 f1 53 d5 c0 c7 92 c9 58 f9 9c 6f 20 b6 5d 3a 5d 48 6c 8e 82 cd 63 a5 2f 3e c4 1b 78 4e d3 63 34 d2 01 04 b2 c8 04 7a 36 42 46 57 0e 99 87 75 24 c9 46 c7 36 59 63 0d 86 40 5b cf 87 52 d3 d1 d6 3f d9 41 65 a7 ba dc db f8 78 4a 37 8f 22 aa e4 fa 7c 94 f5 13 55 56 b5 b1 b6 36 b5 c1 d6 76 63 94 8f ba a4 9e 17 c6 f8 d9 1b b3 bd ce f9 46 a6 e5 5c 3c fc 63 b2 43 2c 6f 71 79 6f 30 8b 13 f4 e9 74 30 da 1a d8 f1 02 d8 a8 5e 65 67 a4 36 c4 82 e3 a6 e9 ca 49 ab e6 fb 94 43 14 dc d2 de 9b ae 56 52 cd 15 65 21 01 d1 b9 9a fc fd 05 d3 d4 fc b7 ce 03 a6 b4 6d f9 dd df d9 6e 69 30 da fa bc 3a 68 e6 8e 53 03 a4 7b 44 a0 5d a1 e3 70 7d 97 3b 8d 91 43 52 f1 3b 4b Data Ascii: 'A}H^:N\~]-nFj'SXo ]:]Hlc/>xNc4z6BFWu$F6Yc@[R?AexJ7"\|UV6vcF\<cC,oqyo0t0^eg6ICVRe!mni0:hS{D]p};CR;K
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: af d0 34 b7 e5 b0 d8 69 ba 84 c7 c4 f7 3d d2 89 65 79 1a b8 5f 2b 4f 85 63 87 b6 a1 a5 ae a4 6c ce 96 e4 3a 57 db d2 de cc 0e ea 7b a9 2a 7d 3f dc 4e df 22 3c d5 c1 f0 80 e6 b3 2e cd b6 87 4e b6 4d b6 4e 67 2c 38 be 66 1b 5a 22 75 bf f9 a7 8c 75 d4 75 3f 15 25 2e 43 27 f2 e4 36 2d 1f ea 54 d7 54 83 56 2a 0c ad 7b da d0 2e 1b 62 5d 6d 98 07 40 a5 5b b4 dd 3f 82 3b ec e8 89 1b aa 5b 34 ac a7 84 80 01 2f 61 1a 34 20 e8 83 e8 ea 27 00 b0 92 3d 20 d8 58 9b 5e c8 e4 af 9a 01 33 df 1b d8 6a 0d ce 96 d3 6d 10 87 37 24 cb 33 1e ca 72 40 16 d7 33 bb 1b a1 be 9b be 7c fa 0e 31 57 75 42 3e 01 92 4d 10 a6 63 dc 32 02 6c 7f 57 ba 65 cd aa 73 e4 7c cd 79 8a 27 d9 e4 8d 42 d9 0c 57 0f a5 8b 0f 91 94 6d 73 63 05 ce 37 fe 61 23 63 6e ca 87 10 c6 66 ad 77 25 91 36 36 6a e2 Data Ascii: 4i=ey_+Ocl:W{}?N"<.NMNg,8fZ"uuu?%.C'6-TTV{.b]m@[?;[4/a4 '= X^3jm7$3r@3\|1WuB>Mc2lWes\|y'BWmsc7a#cnfw%66j
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 8a 9a d6 c8 c6 b4 9b 02 46 7b 6a 6d ff 00 75 56 22 70 92 47 8b ef 7d 3a 05 54 72 3d db 7f 05 92 c5 17 49 2f 92 b5 92 51 f0 f7 35 f0 42 e0 f2 df 98 58 5d 62 b1 6c 62 a2 a9 f9 44 72 b5 d2 3a e0 3c dc 9f 65 b1 af 6c b2 67 6b 1e 1a d3 b1 b5 dc 4f 71 7e 8a 9a 1a 68 a8 73 ce e8 8c 93 93 72 5d ab 87 6b 76 0b 56 3c 89 6e d7 99 98 b2 e3 93 7a 53 a8 a3 32 ec 0f 1c 31 39 ee a1 91 d1 01 79 00 17 3a 8b eb 6d ac aa 65 6c 52 36 46 47 0b a9 e3 d0 b4 88 ee f7 38 6e 6f d1 6b eb f8 ae b9 ad 74 10 0c b9 ae 3d 1a 9d 74 b6 8b 39 2d 6c d5 3c b7 55 e6 14 ed 19 4b 80 cb b7 6b 6e 56 98 ca 6e af 4d 19 25 18 ad a3 a9 b4 51 1c 42 b5 b1 18 22 73 9b 10 1a 8b 0b 9b 75 36 dd 24 1e 6b 83 df 56 1e ec ba 34 5c ea 7b d9 58 3a 4a 46 4a 64 76 47 46 e1 95 b0 c6 0e 67 bb f4 b4 fb f5 b2 91 59 41 Data Ascii: F{jmuV"pG}:Tr=I/Q5BX]blbDr:<elgkOq~hsr]kvV<nzS219y:melR6FG8nokt=t9-l<UKknVnM%QB"su6$kV4\{X:JFJdvGFgYA
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 2a e1 42 e6 14 39 83 ba 34 b1 6a 44 c2 42 2d 14 33 30 1d d2 0d 47 82 9a 8b 0b 44 fc c0 21 98 2a c3 31 45 ce 3d d3 d2 c8 ea 45 a6 60 8f 30 ee aa f9 c8 73 8a 34 86 a4 5a 67 1d d1 e7 0a af 9c 51 f3 8a 34 06 b4 59 66 f2 81 70 55 c2 67 77 4b 12 93 d5 1a 43 52 64 2e 22 a4 f8 dc 22 a9 8d b6 78 db cc 6f d3 7f e8 bc fb 2c 05 8d 99 af d4 eb 62 3a db aa f4 a3 5e d7 02 d7 6c 41 07 d8 e8 b9 4d 76 0a 21 ad 9e 31 73 6b dc 01 ad bc 1f 2a b9 c3 75 ef b1 a7 06 5a 52 5f 73 8f cc c3 19 71 70 3a ef db d9 55 54 19 25 b8 f5 69 6d 06 80 5b 60 b6 5c 41 4a da 37 39 a6 e1 e4 1c c7 c7 65 8e 92 71 60 d0 08 eb 60 b2 e4 8b 83 3a 58 9a 9c 53 1a ce d3 67 01 f9 a3 ab b6 fb 27 60 a8 cc e7 ba 57 16 92 74 b6 de ca 29 94 1d af 74 03 33 fe a3 73 d3 b0 54 3d fa 17 25 ee 2e a6 28 a6 98 4b a3 9c Data Ascii: B94jDB-30GD!1E=E`0s4ZgQ4YfpUgwKCRd.""xo,b:^lAMv!1sk*uZR_sqp:UT%im[`\AJ79eq``:XSg'`Wt)t3sT=%.(K
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 76 c5 48 4f 2d 2f 96 95 cc 68 ea 8b 9c ce e1 16 2a 13 90 a3 c9 e1 11 9e 3f dc 12 4d 43 3a 38 23 70 db b8 ee 51 d9 0e 5b 4a 8d f1 23 b8 47 f1 23 b8 4e 9f 60 d8 91 cb 01 2c 34 28 9f 14 3b 84 7f 14 11 4f b0 ad 13 32 84 61 a1 42 f8 a0 8b e2 da 9e 97 d8 2d 13 ec 10 d1 57 7c 60 45 f1 40 f5 46 97 d8 56 8b 0d 10 b8 55 e2 a0 77 29 7c f1 dd 3d 2c 35 22 6d d2 49 0a 2f 38 77 45 cc bf ea 46 96 1a 91 20 b9 27 30 4c 67 ff 00 12 41 73 bf 72 34 0b 51 30 38 20 5c d5 04 bd fd 1e 92 5c ee af 46 8f 70 d5 ec 4c 32 35 27 9a 14 4c c7 ba 19 bd 93 d0 1a bd 89 7c df 28 b9 c3 ba 8f 7f 64 2c 11 a1 0b 50 f7 3f ca 2e 7f 94 ce 50 88 b4 1e 88 d0 85 ac 91 cf ee 52 4c e3 b8 51 cc 63 b2 65 cd 1d 93 d0 83 5b 25 9a 80 8b 9e 0a ae 76 89 37 f7 52 d0 83 5b ec 58 f3 87 64 7c e5 5e 0f ba 72 e9 e8 Data Ascii: vHO-/h*?MC:8#pQ[J#G#N`,4(;O2aB-W\|`E@FVUw)\|=,5"mI/8wEF '0LgAsr4Q08 \\FpL25'L\|(d,P?.PRLQce[%v7R[Xd\|^r
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 21 1e 81 00 47 11 04 ae 50 ec 9e d1 28 10 10 03 3c a1 d9 18 88 04 ee 60 8b 30 ee 80 10 22 08 f9 4d 47 9c 21 cc 09 8a d0 5c b6 a2 31 b5 19 91 bd d1 19 1a 8a 0b 0b 20 ec 86 5f 09 26 56 dd 11 99 bd d2 a6 1a 90 bc a8 65 f0 99 35 0d 45 f1 01 14 c3 52 1e b2 2b 68 98 33 dd 17 3b c2 7a 58 6a 43 e0 25 28 a6 52 8b 9a 53 51 62 d4 49 d1 0b b5 43 32 14 d1 95 e9 e8 62 d4 58 e6 1d d2 4b ec ab b9 af 43 3b 8a 7a 03 51 3f 98 3b a1 9c 28 20 b9 2b 52 8d 34 1a 99 24 bc 77 49 e6 79 51 f5 42 c8 d2 83 53 1f 32 94 83 39 ee 13 45 a9 05 9e 13 d0 85 a9 8f 73 fc a2 e7 95 1f 22 2c 9e 4a 7a 62 16 c9 1c f2 93 ce 29 8c a7 ba 49 69 da e9 e9 88 ad 8f 99 7c 24 19 4a 6f 96 ef dc 87 2d dd d3 a4 2b 7d 83 32 92 9a 73 c9 e8 97 ca 77 74 46 27 27 b0 bc c4 72 e7 76 48 24 95 27 90 ee e8 72 0a 7b 06 Data Ascii: !GP(<`0"MG!\1 _&Ve5ER+h3;zXjC%(RSQbIC2bXKC;zQ?;( +R4$wIyQBS29Es",Jzb)Ii\|$Jo-+}2swtF''rvH$'r{
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 9a be a3 0c 95 d6 01 b5 b1 16 b2 e7 a7 31 99 87 dd 75 f8 a4 82 a6 18 a7 82 66 4b 0c 8d cd 1c b1 b8 3d 8f 07 ab 48 d0 85 e1 dc 4b f0 ba 8a 36 b9 f0 61 93 3d a0 5f fd de a6 ce ff 00 e1 20 37 fb ab 2f c3 be 30 a8 fc 3c c5 a3 c2 fe 36 aa 6c 2a aa 5c 92 e1 f5 6c c8 e8 1e 76 96 22 34 f7 03 75 77 84 a4 ae 19 61 2f 87 5f b3 a6 55 2b 8d ea 84 97 ca ff 00 74 7b 4f 28 45 94 2c af 0f f1 9e 07 c4 95 13 51 d2 4e e8 eb 62 b9 75 34 ba 38 81 b9 61 d9 c3 fa ad 61 6b 95 72 8c a0 ea 49 a6 25 e6 56 b7 43 0e 01 34 5a a4 18 dc 52 39 4f 42 92 ee 1a 5f 61 8c a0 21 a2 5b a0 79 44 20 78 ea 9e a5 dc 5a 5f 61 bb 03 d1 02 cb f4 52 1b 01 ee 9d 10 f9 28 d6 97 51 e8 7d 88 26 3f 09 26 3f 0a cc 44 10 e4 84 bc 44 1e 1b ec 54 3a 1b f4 45 c8 1d 95 c7 24 23 10 8e c8 f1 10 78 6c a7 e4 81 fa 52 Data Ascii: 1ufK=HK6a=_ 7/0<6l*\lv"4uwa/_U+t{O(E,QNbu48aakrI%VC4ZR9OB_a![yD xZ_aR(Q}&?&?DDT:E$#xlR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49974	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	870	OUT	GET /-/media/images/financial%20services/javelin%20pr%20tile%20img%20png.png?h=170&iar=0&w=270&hash=98F44E34F06D15DDC759AAA71D4B85F7 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|False
2024-04-18 17:16:05 UTC	871	IN	HTTP/1.1 200 OK Connection: close Content-Length: 74392 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Javelin PR tile img png.png" Content-Type: image/webp Etag: "TONSZB72RFiIJ2M81fEiJE8zG0OwSTld81eaKWrj6pI" Fastly-Io-Info: ifsz=100553 idim=270x170 ifmt=png ofsz=74392 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210079-DFW, cache-pdk-kfty2130029-PDK X-Cache: HIT, HIT X-Cache-Hits: 8, 0 X-Timer: S1713460565.129892,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 90 22 01 00 57 45 42 50 56 50 38 4c 84 22 01 00 2f 0d 41 2a 00 4d 40 8c 24 37 6c 33 78 03 fc 27 80 ef bf 60 2a a9 21 a2 ff 13 00 1f 9e 73 68 1e d2 ec 96 48 4a e7 f0 cf 8d e0 39 20 27 82 a9 68 76 3e 3a 87 64 77 d3 11 11 3c 0c 92 74 64 a6 32 87 f7 a3 d9 4d 06 23 28 9e 07 8c 94 94 24 a9 a7 9f e2 67 9f a7 3b 52 f4 3e 45 da dd 8e 50 04 c1 e6 11 50 8e 08 7b 77 23 d6 6b b7 cd 08 8a 08 b2 0f 01 92 a2 77 ed 60 70 6d 3b 93 a7 08 be 25 14 69 d8 3b 56 89 b4 cb 1b 09 9a f1 44 93 94 87 b2 87 d2 25 ab 38 13 c1 48 46 44 54 92 d2 cc 91 f0 a8 3e 82 b9 9b d9 e4 9a 9d 12 d4 92 40 69 1e ec 6e 0e ed 24 c7 85 cc 86 ba bf 58 55 97 fb 7a 27 33 65 a3 be 66 44 0f 50 d5 5f bb b6 93 0e bb b2 4e c4 95 44 3f f5 e0 ab 8b 44 d9 a5 0c 97 54 fc c7 dd f5 e7 d7 74 ab 5b 12 80 db Data Ascii: RIFF"WEBPVP8L"/AM@$7l3x'`!shHJ9 'hv>:dw<td2M#($g;R>EPP{w#kw`pm;%i;VD%8HFDT>@in$XUz'3efDP_ND?DTt[
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 80 03 f0 72 7f 19 df b5 3d 9c 0f 05 00 6c e9 0d de d7 7b 1b 0b bc d7 6a f9 43 66 a9 33 07 b2 79 54 41 48 a5 d1 be ba 32 6c 6b cb 54 59 5f 98 31 37 c3 9f c3 f7 ee 71 73 80 80 fb 0a bf a4 8b b3 ef 66 c6 16 a3 80 0c a0 e2 f7 cb 3c ab 59 a1 7c ed 62 ed 38 cf 19 6b 5f 3f 1d 72 03 85 2e 7c 41 65 98 6a 4b 6d 4a 17 a6 52 0e 12 37 ba 54 e0 06 0c 40 e4 3c 69 91 f6 2b 16 14 50 e0 e5 00 0f e7 3b 67 87 b9 b8 2f a8 77 ae e7 ec f1 ba af 7c 8e 26 52 18 32 a9 1b 6a 4c 14 16 6d 75 57 74 b9 e5 74 8f d1 5f aa 0b c1 2d 1c 31 e6 79 b2 f0 fc 31 18 3f 53 36 df 5e d2 cd 71 23 1e ce b6 df 5b 5e cf 09 88 cb 8d e7 48 47 36 96 3a 69 1a d5 60 83 f7 8e 05 a5 b0 d5 c7 89 31 6d 2c 81 bb c1 b0 9f dd c2 e7 71 0b cf 00 40 01 33 e0 4d 7a 49 97 bc 79 0b ce c8 e5 fb 05 03 7c fd 03 53 30 53 cf Data Ascii: r=l{jCf3yTAH2lkTY_17qsf<Y\|b8k_?r.\|AejKmJR7T@<i+P;g/w\|&R2jLmuWtt_-1y1?S6^q#[^HG6:i`1m,q@3MzIy\|S0S
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: a1 3d e3 bc ff 4a 7f fd cc 89 0f ca 7a 2f fc d9 53 7d f2 c6 78 4a 00 77 ef 3b cd 80 65 d9 d5 a5 c7 ab 70 57 ee 52 b3 4a 05 95 ca 1a 14 49 5f 14 dd 01 65 20 79 b9 c2 2e 3b 17 01 3d 76 0d 3d f6 7b 12 b5 cd 61 fc f0 fc f1 54 bd ae 88 79 b5 3f ea 7e 1e 95 5b 77 24 73 df 0c 49 58 68 79 d1 e3 33 9d 37 75 77 ef 0f 87 da 98 ce ff 45 f2 b2 8d a3 5f 48 04 7a 36 f4 8f ae fd c7 f2 b0 8a 91 0f 58 e7 8a c2 7d 5a fe a3 22 c2 55 cd 3a ac 62 61 f8 fa c9 07 44 ef d4 d5 bf cd d5 fa 36 2d e1 d6 43 54 8e 32 89 d2 06 62 8a 91 bb 58 60 b8 8e c9 e3 c0 f0 08 20 27 a1 ca 18 53 7a 2a df ad 9f 8e 71 7a 58 a3 98 c6 94 41 3f 77 42 ff 80 ff af 46 3a 34 e6 7e 1a 50 4d 42 ad 82 36 33 5a dc e4 f6 d6 d0 35 54 8a 72 03 2e ea 24 d6 ef f5 7f 71 40 0c 01 44 a0 b0 7d 44 e3 c3 31 84 67 10 18 42 Data Ascii: =Jz/S}xJw;epWRJI_e y.;=v={aTy?~[w$sIXhy37uwE_Hz6X}Z"U:baD6-CT2bX` 'Sz*qzXA?wBF:4~PMB63Z5Tr.$q@D}D1gB
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 7a eb 79 f6 e2 f3 be b2 33 07 c0 6b f3 1a 88 99 27 c4 77 96 b0 8c 06 65 6a d9 92 96 5a b5 d8 98 34 6c 4d 3a 1a a7 c3 e6 1d d9 b9 67 87 da 3d d5 1b 09 87 b1 d6 cf 61 f7 5c 5e ff 3b e7 e0 aa 7d 66 e9 88 da 70 3a bd 32 30 4a 01 08 b2 61 ac e6 3d c5 3a 01 93 f8 9a c6 46 79 2a 10 22 f4 54 42 8b 19 d3 79 a5 af d7 41 66 ce c3 6c 86 f3 a3 09 55 53 1e 85 76 14 14 0d ba 79 6c 01 61 62 03 dd 21 08 36 67 fb a5 f5 e7 be cd 53 27 4e d1 02 12 a1 cd d0 c8 59 3d b5 48 b4 ac 68 b2 d8 db ac 7a 98 1a b1 c9 4e db 45 db d8 5e 01 ca 3e f0 05 2f 6c cd 7b 5e d3 30 99 30 11 9a 26 44 69 d9 cc 61 36 33 fa 23 b5 d9 ce 3e af 36 9a ac 8c 08 1b 4d b6 4c bd b0 6c 1e 22 82 6d 53 ef 71 ab 46 05 61 58 5a f6 96 19 2c ca de 75 ae 46 64 4a 9b 2c 4d 32 23 8b 15 29 a5 b6 1a d5 25 88 55 2d ed 34 Data Ascii: zy3k'wejZ4lM:g=a\^;}fp:20Ja=:Fy*"TByAflUSvylab!6gS'NY=HhzNE^>/l{^00&Dia63#>6MLl"mSqFaXZ,uFdJ,M2#)%U-4
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: f9 bd 8e bd 88 d3 d9 2b bd b2 b8 af 0f 83 2c 74 58 d5 23 f2 90 c4 c4 22 b1 0c 6b a0 08 6d 86 01 3c b8 ff f9 df ff fc d9 3f d5 cb 5b b4 8a 84 e7 11 0f 68 8c a2 16 2b 88 66 f3 9a 1b 06 a3 65 25 69 7e d3 83 25 ef 3f 96 75 0b f3 b6 d0 55 d2 09 52 9c be d0 04 27 dc 89 ae 4e b7 24 78 85 88 49 16 bc 4d 66 6c b5 e5 9e 4d c8 d3 29 a3 91 38 b4 f0 d2 88 a9 de c8 6a 90 d5 2b c8 46 cb 6d 5d c1 8a 22 64 34 42 5d 32 db 85 a9 79 4f 41 30 32 6d 19 91 00 0b 5a 23 a3 75 22 1a ab 6e 6a b1 05 56 8b 78 2a 24 90 0c f6 c4 54 f9 e7 b7 bd da 9c 1e e6 7c 27 8d 15 cc 16 5d ae f9 1e db bf 7d 40 5f 73 f8 a2 65 b1 39 cf 3c 97 8b 2b bd 11 ee 83 89 3b 53 f3 30 90 77 b0 92 4a 6f f8 9e 07 b9 8c 72 eb bb 6c db 1b ed 81 da 48 25 69 1c b0 d9 4d 38 25 e2 84 da 72 c5 1c 12 51 8a 5d d2 f1 2a a5 Data Ascii: +,tX#"km<?[h+fe%i~%?uUR'N$xIMflM)8j+Fm]"d4B]2yOA02mZ#u"njVx$T\|']}@_se9<+;S0wJorlH%iM8%rQ]
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 22 cf 27 f3 6c 3e 9f 3d f6 78 62 3e 9c bb 76 fe eb ec 7f ff d5 c7 f9 0f ff 3e f1 30 bb 47 5e 3d 3f a8 51 0a 20 b3 47 6f e7 1b e9 68 4d 21 14 35 36 60 12 89 36 4f 9c a0 a8 34 d2 aa 69 31 55 31 2f 6e 2e d2 1a c7 f5 20 b5 65 24 94 50 25 4a ab 5c f6 43 c2 96 a9 a8 38 f5 e8 a1 61 d3 1e 37 be ba 81 0e 31 6a 57 34 b6 d8 8c 9a 11 d1 c2 6e e3 ad 7b e7 5b 5b 8d 3a 0d 76 45 08 26 75 1b 4f 32 12 6d 4d 50 a9 3c c5 61 cc 91 40 40 6f 97 b6 f0 c2 30 59 0c 26 5d 1a 91 1e d6 cb 7d 36 25 18 37 05 37 65 d6 b5 2b 14 e3 bb cf 5d 79 b3 e9 be d5 61 ac c7 0f e1 d9 03 8e ee 88 d3 4b ea a1 0a 92 2f f5 c8 94 47 8a e0 85 85 6d 73 f3 d1 24 b3 12 3e a8 50 32 58 cb fd e6 9f 4d ad 3b 50 13 bf 32 15 19 39 af d6 56 9d d0 b5 91 ac 65 c6 2e d7 a1 9c d4 81 ea 3b 13 99 74 f3 ad 6f 72 3f f2 7f Data Ascii: "'l>=xb>v>0G^=?Q GohM!56`6O4i1U1/n. e$P%J\C8a71jW4n{[[:vE&uO2mMP<a@@o0Y&]}6%77e+]yaK/Gms$>P2XM;P29Ve.;tor?
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 8f b2 89 3a a8 5f 03 16 38 18 33 5a 36 26 e9 3c b7 7c 4f 7e c3 a6 7b 6f f6 b6 7e e8 71 ac d3 97 e9 d8 6e dc b0 32 a9 68 6c e3 2b d5 9c 90 30 65 2e 8e 62 95 d2 25 bd b2 b3 c5 29 75 a1 e3 3b 72 35 ed c2 14 89 92 f5 f5 42 d5 06 27 be c1 1f c8 9d d3 f3 5c 4f 2b 3e 4f 13 19 9b b9 3f 7d b3 c9 04 d6 d5 89 7b 79 a3 69 41 36 99 18 d4 5e b5 38 6e de 22 71 95 d9 c2 08 0d 75 61 41 e2 4c 87 c1 e0 77 8c 36 7a c7 de 78 af 3d 81 c9 d3 de 19 9e cc 9b 7a de 53 f3 4a c3 4c 6f f7 35 d7 f7 16 79 6b af 9f 75 91 8f 13 0b e4 a4 e5 a9 4d bd 91 cd fe e4 5d c3 7f b2 e8 fb 93 d9 db 84 3c 60 23 dc eb a0 cc ca 11 54 63 dd ef 29 eb f2 4c d3 ee 2c 55 c1 2a 6b db f0 e5 66 ff fa 9b cd ef 7d 9b 29 20 39 1d 45 fe a7 df 19 df f5 5d af 3f fb bb a2 74 a6 81 0f 07 6b ea de 09 34 23 17 1e ae 5a Data Ascii: :_83Z6&<\|O~{o~qn2hl+0e.b%)u;r5B'\O+>O?}{yiA6^8n"quaALw6zx=zSJLo5ykuM]<`#Tc)L,U*kf}) 9E]?tk4#Z
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 8c f9 da 43 ef f4 6e 8f 95 ab f9 ea b4 9e f0 a4 a8 6d 9f fb 18 41 48 cf f1 9a eb 51 06 6d 7b 1b 50 a9 3b 74 69 3a 5a 9d ae 56 ac b2 58 30 db a3 6a 2b c1 a4 54 d0 0c 95 f9 5c a5 cb 53 2f ef f7 bc e1 36 f7 3b fb 9e a4 4a a3 85 4d 6c 3d 2e 3a 1b f1 f6 f6 07 c7 b9 bf 75 f3 ad 8f 1a 49 b6 59 8d 44 e3 da 9b 79 25 e3 85 8a 64 d0 d8 a2 65 bf f7 60 0b a7 11 e4 f7 ba f7 f6 19 47 ad 8d 60 30 6e 63 c5 cb 24 a3 d7 7b e1 cc 19 a6 3a e6 8a fe 3f 90 db 8a 99 0d 0c c7 0e fb a4 29 fa 93 cb ec b0 47 a9 d5 e5 41 72 4a ec 3a 79 b5 d8 54 95 85 41 8e b4 25 8b 8d d6 f6 1c 82 5c 81 54 c7 8d b0 4e 1d 6e 70 af 37 ed 93 4e c9 a9 89 c0 a8 ec 18 a0 56 7c 73 d5 71 ff d3 db 3b 3f af f1 eb be fc 9c ac 3c c8 71 59 b9 5d aa 58 8a 3e 3b 69 3e 48 6f 79 d4 7f f9 a4 b7 bc ab e3 95 6f ec aa d1 Data Ascii: CnmAHQm{P;ti:ZVX0j+T\S/6;JMl=.:uIYDy%de`G`0nc${:?)GArJ:yTA%\TNnp7NV\|sq;?<qY]X>;i>Hoyo
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 4c db 09 4f e3 53 9d ea 89 27 1c 71 69 2b 69 f9 e2 e7 83 23 cf 78 c4 42 f1 a6 35 b7 d8 f4 b6 d1 6d 7b eb ef 8c 6f 5b 82 85 a7 4a 7c 8e 93 29 2b 08 10 2d db 89 8d d6 1e 9b 94 ad e8 56 9e bc 93 72 aa ad c4 6d dc d4 4e ca 0c 4b 83 b7 36 5a 23 b3 97 ef 8f e6 4d 8d c6 26 4f 0d 8d 5f 94 45 05 df ee c2 e5 c2 df 8c ae 5d 55 35 1e bd 4d 2c d4 49 be e6 c9 26 bd b5 ca 3d cb 8b fa f6 44 9a cd ae ad 31 3f 5f 39 8e c1 ba ae 27 f4 69 4d 87 7c 44 d8 54 06 9b 48 69 f7 f3 8f 5e be 39 88 2f f8 79 f7 77 7e f3 3d bd 17 fb bf f8 6c b9 28 f1 96 18 9e 79 60 8f 4d a9 42 8b 76 6c 89 a1 b4 2d d5 61 40 48 01 73 55 60 3c 64 79 42 d3 bb 7e fc 77 ce da c3 37 41 16 8a 2b 68 75 f5 27 5b ed 3c c6 ae 0e 98 47 98 b7 26 24 08 c6 20 18 ab ce 92 9a d3 7e e2 03 4b f7 f1 5d 3a 68 3d 10 65 89 78 Data Ascii: LOS'qi+i#xB5m{o[J\|)+-VrmNK6Z#M&O_E]U5M,I&=D1?_9'iM\|DTHi^9/yw~=l(y`MBvl-a@HsU`<dyB~w7A+hu'[<G&$ ~K]:h=ex
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 98 88 9a ec 0a 04 6d 5a 58 e4 92 e5 16 9e b7 a4 b9 ce f6 34 94 95 4c ed f2 ba 88 11 19 36 9f 8e 4c 1a 5e a5 c2 88 c8 63 40 e9 35 4a fa 05 48 0e 92 e2 d4 79 8d ee 0b 31 0e c6 f0 a1 4b 28 8b 33 7a a7 7e f5 f6 fd c7 cd e9 fc 13 1d 54 85 a6 75 76 aa 29 3d 8d 1f bc 2d c6 6d 9e 3b 0f 1b 1a 3c 39 0b 33 93 dc 0d 2d bb d0 ad a2 84 c1 18 8c 54 4c 5d ab 9e 06 33 53 86 a9 c4 2e 9a da d1 f2 6e 50 00 e8 98 33 5e 4d bd cf 3c 71 80 6c 44 bf 49 d0 c8 7b 4f 5c d5 a0 6a 80 b2 69 e2 c4 1b 1f fc 9b 74 eb 79 f1 6f 6a ed dc c3 c9 2d 49 64 a2 08 50 9c 40 54 01 49 1c e1 df 22 c7 f3 fa 6e f4 98 00 71 10 ba db da b4 67 68 04 29 60 30 32 73 7d 96 af 09 f7 a3 a9 ef 32 fb c8 75 31 57 db 94 16 e2 b9 0a ac 24 4c a1 05 44 9d 3c 71 89 97 37 33 c7 22 9f ea 3a 7f ab a2 c0 7e 91 35 9a 45 a5 Data Ascii: mZX4L6L^c@5JHy1K(3z~Tuv)=-m;<93-TL]3S.nP3^M<qlDI{O\jityoj-IdP@TI"nqgh)`02s}2u1W$LD<q73":~5E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49972	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	976	OUT	GET /-/media/images/healthcare/3-i%20and%20r%20pages/video/member%20engagement%20with%20sdoh%20webinar/ln%20menu%20image%20270x170%20knocking%20down%20barriers%20with%20data%20jpg.jpg?h=170&iar=0&w=270&hash=F9FAAD5F1BF33D3F6177BFF5F80A0F99 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	907	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12398 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="LN Menu Image 270x170 Knocking Down Barriers with Data jpg.jpg" Content-Type: image/webp Etag: "axjmN6gaDiajt1QbHIcTvZnccMmROWHMji8xTdArCxU" Fastly-Io-Info: ifsz=54178 idim=270x170 ifmt=jpeg ofsz=12398 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010230 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210129-DFW, cache-pdk-kfty2130054-PDK X-Cache: HIT, HIT X-Cache-Hits: 10, 0 X-Timer: S1713460565.099941,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 66 30 00 00 57 45 42 50 56 50 38 20 5a 30 00 00 d0 a0 00 9d 01 2a 0e 01 aa 00 3e 51 20 8d 45 23 a1 a1 14 6a 5e 78 38 05 04 b2 80 62 0e 0c 36 63 dc 84 7a f2 af 93 5f 8e e9 47 e2 f4 d7 fd 6f 77 97 99 ef da af 59 4f 4d 3f e0 fd 26 7a a2 77 a2 bf be 63 ba 49 c7 92 ff ba f0 87 c8 d7 bd ff 79 fd d6 f6 09 c7 ff 62 5a 8d 7c bf f0 cf ee 3f c9 fe ee fb 71 e0 8f cc df f4 3d 44 7f 35 fe bf fe 9f f3 6b d2 17 74 9d b7 f4 0e f7 5f ec bf f0 bf c4 7e f4 ff a1 f5 18 d5 bb c2 ff f7 bd c0 bf a1 7f 55 ff 75 f7 19 f4 2f fd 5f 15 6f c4 ff c8 f6 08 fe 85 fe 07 fe 67 f9 cf cb 3f 95 1f fa 3f d6 ff a9 fd ce f7 6d f5 4f fe af f4 9f 01 bf ce 7f b6 ff d1 ff 0d ed b5 ff ff dd a7 ee c7 b2 5f ec 3f ff a6 af ff e4 3e 01 2f 39 51 8f 2c 20 52 d6 78 56 d0 6b db 93 6b 6e 6f 70 ab Data Ascii: RIFFf0WEBPVP8 Z0*>Q E#j^x8b6cz_GowYOM?&zwcIybZ\|?q=D5kt_~Uu/_og??mO_?>/9Q, RxVkknop
2024-04-18 17:16:05 UTC	1363	IN	Data Raw: 13 c5 94 2a 8f e7 cb 18 a7 2b c3 67 6d 67 c3 13 fe 37 7c 89 1e 45 f8 cf 2d 6b 3a da b5 38 67 9f 8a dd ed c3 44 46 93 0d 15 32 dd 96 51 fe fa 67 7c 15 96 1d 9e 78 cb 4b 22 ab f0 72 2a 6f 6e 1f c9 4d 20 a4 b7 fb 15 0c 75 60 7c 0d 3a e7 b0 75 85 10 7a 16 13 db f3 c6 ec b9 2b d7 50 2d ea 7d 85 a8 25 8f 48 3d 9d 8b 5e 9b 5e 9a 77 16 49 0c b7 ee f9 a1 7f f3 16 46 63 d6 64 6e 66 1d 93 9a a0 c1 0f d8 03 4b 19 10 87 a2 f2 42 f4 bf 13 f9 08 63 5b b6 95 a9 49 fc 44 c8 12 29 9d 01 34 25 a1 30 05 b6 0b 18 2e 7b 1b c9 99 50 69 83 d2 8d 7c 08 76 cf e6 97 a6 16 47 a9 45 99 9e db 17 ec d7 a8 b9 19 92 31 91 b4 96 76 b2 0c 01 e1 10 ae 3d 8f 1b 5c a1 91 da d7 86 dc 2d 33 78 15 46 20 e6 60 fc a1 1c 6c 18 5f 03 4e 03 8a 43 a8 cb ec fd 2b 1e 19 eb 83 a5 35 62 19 75 7f 38 f2 4a Data Ascii: +gmg7\|E-k:8gDF2Qg\|xK"ronM u`\|:uz+P-}%H=^^wIFcdnfKBc[ID)4%0.{Pi\|vGE1v=\-3xF `l_NC+5bu8J
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 28 56 8a c7 81 9e fd 0e ef e7 4c 8c c4 20 61 60 42 8a 5c c9 6c 79 7e 13 d6 aa 34 c0 8b eb 68 6c 7a 28 1a b4 07 66 f0 62 a1 1a 9a cc e9 e0 aa ca 4a b0 64 9f e0 1d f9 3b ad 02 a8 cd 16 57 b3 d3 25 38 e6 15 d9 c7 bf 54 33 63 aa 5d e3 1f 38 3d d9 65 51 1a 5a cc 55 b9 11 d1 08 91 8c 9c ce 8d c9 85 e1 7b e6 fd ad 97 7e 59 0c ea 9f 38 42 bf 45 fb 8a 70 3a 55 6d 60 e5 f9 a1 8b ef 2a 15 7a 9d 65 f1 39 c0 58 a0 69 42 51 c9 5c 56 30 34 26 50 d4 88 42 67 ca 01 ab 65 dc c6 35 5d b6 53 97 d7 66 77 e7 4f 99 54 a6 67 59 bd 34 0c 75 c8 7f f2 85 61 57 42 1b 81 58 ae e3 c9 76 26 21 0c 41 dc df 06 7d c2 7e b0 70 5e 9e f3 75 6a 8a b2 0c 7a 50 79 ea 72 3f b6 16 75 d0 57 bb 6d 22 aa 4f ed 0b 80 d3 8c 55 e1 e4 be ce f8 06 73 ed a1 54 2d cc 1c 4d 68 42 78 30 d6 91 8e 5f 36 9d fb Data Ascii: (VL a`B\ly~4hlz(fbJd;W%8T3c]8=eQZU{~Y8BEp:Um`*ze9XiBQ\V04&PBge5]SfwOTgY4uaWBXv&!A}~p^ujzPyr?uWm"OUsT-MhBx0_6
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c1 f9 4b fe b4 82 a2 6b ce b7 f1 e2 52 82 17 90 3c 9e ae ec cf 3e c9 13 96 bc 7f 86 db 99 f6 f4 27 15 71 63 64 e8 02 5b ba 8a 19 a3 fb fd 68 e5 09 f8 e0 6d 04 38 e0 a3 bb f1 43 7e 26 55 d4 d8 92 0c d4 ea 90 6b 00 4a 41 77 3c f3 e1 cb d1 19 49 6a b5 ac d4 27 66 a4 85 17 56 cd 4e 77 de fd 0b a3 4d 6c 7a fc 66 ba 41 41 f2 32 c1 83 71 16 35 6e 3c ea 63 4b d8 84 ba 19 a8 19 5f 54 de 99 8e 4e b5 d0 b4 86 dd f8 ad 59 cf 63 f5 e6 3b a5 42 d6 e1 70 23 04 0b 98 88 ee c2 7a da cc 39 4a 5d ab 06 84 16 9d 99 b3 90 62 08 a5 19 16 96 f7 90 69 1e 85 1d 82 a3 f7 2b 57 ac 84 2e 34 60 87 e8 e1 01 f2 c2 1f 00 72 bf 81 af 1d a0 df fe 84 91 7b 70 84 88 58 66 54 64 63 26 ca 16 bc d7 54 05 1c a2 e4 56 ea be 4c cc 46 a3 78 f2 46 a9 f1 0c 0b 7f dc 04 d1 92 31 fc fd 40 f9 b5 e8 1e Data Ascii: KkR<>'qcd[hm8C~&UkJAw<Ij'fVNwMlzfAA2q5n<cK_TNYc;Bp#z9J]bi+W.4`r{pXfTdc&TVLFxF1@
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 70 cb 17 de 9c 43 86 2c 00 ac 4b 56 b7 63 40 86 56 3b 02 d7 b5 b3 4e a5 50 ab bd 8f 42 6b 04 2f 13 ee 90 8f 87 f1 9b cd 9c 6e 5a b2 b3 f8 91 f4 40 7d 2b 5d 69 c9 88 fa 9e 67 24 df 2a 5e c3 12 db a5 2b 94 54 36 1c cb 15 0f c6 ba ff e8 3d 09 20 43 e8 c0 e5 f6 c6 b8 42 77 f3 ae 32 37 a0 59 0d ca b4 fa b9 22 d6 a1 7f d3 92 f2 50 a7 4c 29 89 61 1e 3d a1 11 05 57 b0 3d c2 8b 28 f0 77 70 f7 90 2b 51 23 fc 1e f6 9f 1e 75 ae 29 5a d7 ee 80 0f d6 d6 df ef 64 f6 00 cb 08 f7 d5 ca 02 0c 51 86 ed 5e 7c f9 a8 dd 67 75 1f 80 65 7d 77 95 73 33 42 2a 52 b2 36 6d b1 55 a4 b9 9a 89 f0 a5 0e 43 9d 4f da ad 32 5e c8 41 d8 ca 98 93 dc 96 9b 3c 5e 11 6e 39 e6 e3 f1 09 f6 e8 7c e7 2e 45 23 0d 69 2a d1 90 49 fb 3d 44 0e ba 23 e9 4f c8 18 bc ec 77 d2 1d cb dc 28 0e fd 21 b3 1c e6 Data Ascii: pC,KVc@V;NPBk/nZ@}+]ig$^+T6= CBw27Y"PL)a=W=(wp+Q#u)ZdQ^\|gue}ws3BR6mUCO2^A<^n9\|.E#i*I=D#Ow(!
2024-04-18 17:16:05 UTC	1347	IN	Data Raw: 8e 75 b1 56 33 90 1b 8c 92 2b 4f 0b 15 9e 97 37 cc 04 74 ab ee e1 44 8f 13 30 e5 ff af a4 12 3f f5 f3 70 d1 ea 60 86 9c 2f 8f c3 26 be f5 7c 7e 5e 37 77 31 87 b4 be 0e 41 af 99 c1 a3 94 a0 00 14 e2 5e 6b ee 80 11 cc a4 ad d0 ad 19 ad 00 1c 02 fc 37 6d e8 34 3b b5 c5 36 fe 71 47 1f 5a 61 ef 00 9d ac b9 44 51 43 fc d5 76 6f 3f fb 08 09 a7 c4 36 44 fa 29 8d 20 4d 83 18 44 ee 63 68 af ed 8a 9c 78 3d 80 c3 9c ad 65 68 47 2e 34 bb 52 7d de 75 6b ac e2 7c 41 eb d7 fe ee 1b 1c 38 a3 60 14 31 aa a3 cd ef 30 3a 83 30 9e d7 17 43 1d 78 08 91 38 dd fe d8 6b a7 a1 f9 12 47 80 d9 a3 8b 54 9e 6e 9d 80 65 b2 5b 2f ed 5a 14 bf ac 86 2d 65 72 d0 47 dd b4 d0 23 b5 58 de a2 12 d3 d1 cc ac e4 ff 47 90 e9 04 69 98 ec 1a 3f e4 89 cc 67 1a 06 8f af 3d 1d 1c 89 5a 95 f5 62 ef 73 Data Ascii: uV3+O7tD0?p`/&\|~^7w1A^k7m4;6qGZaDQCvo?6D) MDchx=ehG.4R}uk\|A8`10:0Cx8kGTne[/Z-erG#XGi?g=Zbs
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 3b 88 9b af a2 c1 09 8d 61 e7 9f 39 b6 f3 ea db af 3e 07 cc 83 3a c2 fc 2c b3 fe 60 03 f4 3c 3d 16 fd f3 96 b6 19 d9 29 0f 54 19 f7 74 12 03 88 fd 37 48 79 b7 3d cf a0 92 d6 87 65 68 44 8a 73 a7 32 ac c8 a4 6b d6 d3 9a 80 fd da a6 64 28 87 58 52 a1 47 88 8e 70 86 b1 41 99 c8 0a 89 c4 86 b2 cd 95 ce 43 d5 e9 8b 90 f2 d0 7d ee 24 2a 8c 55 e2 9d f3 37 69 5b d1 00 b7 0f ed 10 6e 52 12 a5 fc a7 a5 19 ed 7e f0 91 4b 2b 93 6a 34 87 94 2e 20 f7 1b 26 ac 45 c3 95 bf 70 fa e1 e1 d3 d5 7a d9 25 f1 3b 7c e0 eb 65 78 75 61 3f c7 83 ff e5 5f d0 f1 9e 41 34 41 d6 47 1e 35 f5 1f 92 0a 26 c0 ef 1a a9 f0 d6 56 d9 6c 99 1d 42 e5 50 94 2f b8 32 c4 26 87 74 bb 26 76 13 1a 0f 49 df 38 e5 9c 5d d6 5f 17 74 7c ae 73 03 84 79 52 3c f1 76 58 86 98 8d b1 6b 49 e4 51 35 18 d3 1d e8 Data Ascii: ;a9>:,`<=)Tt7Hy=ehDs2kd(XRGpAC}$*U7i[nR~K+j4. &Epz%;\|exua?_A4AG5&VlBP/2&t&vI8]_t\|syR<vXkIQ5
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 00 3a 10 49 83 ed 67 66 1d de cb 52 a2 26 fe 0e 13 a9 a4 98 ed cc 1d 82 92 52 1d 78 eb 59 42 f4 08 81 5f f2 2d 6c 19 73 43 7f 07 43 db f1 41 f5 d2 9c 1b bc b7 d7 ca 31 a5 79 f7 2c 25 00 3a 08 05 1b 29 b4 31 86 a6 af 8b c6 ac ac 9c df 64 d7 25 e7 ce d5 49 b5 59 f1 93 fb e7 ef fd 57 b4 4f 25 12 72 06 23 b1 79 7b a3 30 4a b5 d7 03 92 46 b8 5c 18 84 53 8b 38 e4 41 9f b4 eb e4 be e6 7a de be d8 1d f2 6d df bf ac fe d9 a1 e1 ba 70 de e5 87 15 03 c0 62 9e 00 f4 af 07 28 41 c1 f9 44 6a ee fe ab b4 f6 73 b1 48 81 65 1c 65 ba 54 7b fb 4b 0e 48 5a 9b f4 41 0d 96 ff e6 6a 5e 66 ed 84 9b af c3 36 bf 1a aa 82 9a 0b 49 de f6 ea 57 30 41 8d 7f cd 0b 83 66 37 a7 e5 b5 78 41 53 fd 5e be d5 1c 4d d9 f0 cc d5 38 2d ec 51 70 d1 59 ad a1 e4 df ed 0f d4 df 78 c9 b4 12 32 ba 27 Data Ascii: :IgfR&RxYB_-lsCCA1y,%:)1d%IYWO%r#y{0JF\S8Azmpb(ADjsHeeT{KHZAj^f6IW0Af7xAS^M8-QpYx2'
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d0 c5 86 17 31 e6 d1 1e ba 96 ff b1 a2 d0 9d 4a 13 f8 51 c0 c4 e7 cb 29 c0 49 e2 80 2e dc 5f 85 2a 84 57 84 d7 11 84 de 97 23 5a 6f dc 5e 76 e6 38 c1 ae 87 3c 28 ef 29 e7 b6 cf 0f f2 44 e7 4f 85 fc 9c d3 ba de 2b 45 fa ee 69 19 b4 08 af 1c 0a 20 4f 8e 88 42 0f 7f af b6 6a 59 bf ae 09 e2 d8 fd f8 bb dd fe cf 74 f5 2a 64 63 30 34 54 48 cc 27 67 29 ba 81 0a 81 91 5a e5 b2 de 33 de 25 8a b3 85 65 ed 24 f2 86 31 79 66 db 86 a9 48 8c 2c 25 df f9 6e d7 b1 08 00 17 88 95 d8 3e 48 66 bb df b0 c6 17 88 47 55 f6 1e 3d 01 fd 96 18 f3 25 3b ca 55 9c 1f a5 7e 76 62 e7 a6 38 6d b0 d3 ac 93 0b 42 2b 4b 77 c5 bb 45 f5 45 53 f2 b5 1a 4d 0e 65 d3 b5 67 04 ca 16 01 0d 81 78 37 35 69 c8 da 08 c2 91 36 04 90 5a 1d 3e 47 14 0d b7 8d ab d1 08 49 4d 79 7a 6a fa 5c 88 73 66 f4 31 Data Ascii: 1JQ)I._W#Zo^v8<()DO+Ei OBjYtdc04TH'g)Z3%e$1yfH,%n>HfGU=%;U~vb8mB+KwEESMegx75i6Z>GIMyzj\sf1
2024-04-18 17:16:05 UTC	35	IN	Data Raw: a1 33 07 13 51 3a 9e b0 25 14 80 a8 16 d6 dd f0 52 47 4b f1 7a 6d f0 67 e0 09 7a d2 68 96 07 9f 80 00 00 Data Ascii: 3Q:%RGKzmgzh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49975	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:04 UTC	865	OUT	GET /-/media/images/financial%20services/tcoc-regional_270x170%20png.png?h=170&iar=0&w=270&hash=F43278B90D67065468EDD449166DD2E5 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	872	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54514 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="TCOC-Regional_270x170 png.png" Content-Type: image/webp Etag: "NFjQQtXt/wod3k8+3MkNO4ZFLYXLk0AN4qTQ4Mf34h0" Fastly-Io-Info: ifsz=78325 idim=270x170 ifmt=png ofsz=54514 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120121-DFW, cache-pdk-kfty2130029-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460565.148877,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 ea d4 00 00 57 45 42 50 56 50 38 4c de d4 00 00 2f 0d 41 2a 00 4d 40 8c 24 37 6c 33 0f 10 38 80 10 fa 2f 58 72 d2 42 44 ff 27 80 fb e6 a7 e4 ca ac 96 74 41 b4 99 21 f1 96 84 24 47 99 b7 f3 66 e6 39 85 cc f4 f9 21 69 94 99 d9 e4 e7 b9 50 f0 25 b9 73 db 25 bd 80 a4 ce 39 f7 02 48 ee 72 97 d4 7a 4f e6 6e 26 55 e7 dc 00 f4 e9 fa bd 23 a5 32 33 a3 ce 09 24 b9 24 97 a4 7e ed 1a d2 79 65 c6 a9 92 bb a4 56 48 93 f9 31 92 74 3e 92 aa 76 77 75 ef 3c 39 ca ac d5 7c 64 7d 24 d5 2e f7 ee dd 2d 53 e6 01 26 01 4a 49 66 26 ee ee 61 cf 12 bb 2b 38 3f 72 b4 bf 76 d7 b6 7d d8 5d a0 60 20 19 7e fa f3 3c 4f f7 5d 18 de 55 c6 77 8d 32 61 77 f7 99 89 66 46 2c 50 55 40 fb 18 99 79 5e cf cc 12 c8 08 60 a8 0a a0 dd f2 75 fe 10 41 44 5e 44 55 df a1 d7 ec e3 79 3c 66 b4 Data Ascii: RIFFWEBPVP8L/A*M@$7l38/XrBD'tA!$Gf9!iP%s%9HrzOn&U#23$$~yeVH1t>vwu<9\|d}$.-S&JIf&a+8?rv}]` ~<O]Uw2awfF,PU@y^`uAD^DUy<f
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 38 8c 6f c4 c2 59 38 eb 44 64 0f 70 d8 38 0f 11 75 07 39 38 8d 9f 13 71 d6 04 97 61 21 15 41 1d 5c f7 20 71 36 ce 0f 69 29 9c 62 f8 c3 69 39 8d ef c9 c6 39 53 64 e3 2c 9c 3d a8 8e e8 8d b3 7a b8 06 d5 11 9d b8 16 f2 0c fa 2f 40 da 32 82 9c e0 6c 24 71 12 7f 90 b6 c4 29 fc 37 41 4e e2 96 d8 c6 eb 46 30 de f8 c6 29 a4 2d b1 29 11 89 5c 4b 9c 96 1a 3c 38 5c 99 6a 0e 0a f7 45 44 e1 14 ce 42 aa 23 70 d7 2f 0e 89 77 f7 ad 0e 62 e1 24 ae 89 93 38 39 38 39 40 ff 81 3d b8 6e c3 44 16 ce 99 7a b6 b6 ed b8 6d db b6 ee fb fd fe 9c 73 41 b3 5b b7 6d db 0a 9a 21 9b a1 7e 2e fd 34 7a 0f 3b ea 1e 6a 76 b7 7b 65 c9 39 ff df fb 50 6c 24 c9 91 24 99 67 cf 91 ff d7 5f 57 3a 1d 31 01 fc df ff 7f 6f b9 71 f3 3d df 73 be a7 b7 7b ee b9 bd d7 e9 7d 38 c3 e1 b0 89 d2 8a 5a 6d f7 Data Ascii: 8oY8Ddp8u98qa!A\ q6i)bi99Sd,=z/@2l$q)7ANF0)-)\K<8\jEDB#p/wb$8989@=nDzmsA[m!~.4z;jv{e9Pl$$g_W:1oq=s{}8Zm
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: bd 65 9a af df d4 ff a8 90 87 a7 c4 83 e0 65 62 38 a5 35 00 cf ba 2c 02 cc 88 e8 81 e4 10 e0 1f a2 50 72 3a 81 01 2d e7 b0 4e 9b 60 fa 39 8f 1e 1e 45 32 e2 26 88 3b b0 32 b8 be 03 a8 36 c5 6c 42 9b be 04 37 5e 50 b7 17 f4 12 1d 74 12 0b a5 37 c4 b5 c9 02 b7 ca 62 d9 6c 36 59 25 b4 47 48 ad 95 66 60 cc be ce b2 ad 7c 93 46 29 90 55 23 46 91 57 75 b5 59 8e ba 87 ae 30 e3 2f ab a7 b2 e6 e6 a2 a4 66 a1 23 31 45 7a 0c 26 fb 6a 6e 34 65 58 4e e6 10 4b b1 2c ce ca 52 4a 22 26 ce 4b 9a b1 e3 05 c8 b0 05 02 66 0b 00 20 6d 29 99 0f 25 06 2a f7 6a a3 ff c6 6a fc f8 d9 9f 9d 64 23 ec 1d f7 ee df 77 67 ff 5a 77 e2 ef dc bd fe 1f 27 78 96 f0 fc 9a 7d b7 09 be f6 e5 40 47 6b 16 68 8d 93 56 37 38 d4 2f ad f2 8a 36 83 67 61 84 cf 3d 92 25 98 9d b1 5d 73 ae d1 a8 df 75 66 Data Ascii: eeb85,Pr:-N`9E2&;26lB7^Pt7bl6Y%GHf`\|F)U#FWuY0/f#1Ez&jn4eXNK,RJ"&Kf m)%*jjd#wgZw'x}@GkhV78/6ga=%]suf
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: cd 4d 98 00 f3 58 f3 86 ee bc 2f 50 f3 2f bc 16 88 49 80 b1 bc 41 15 a7 1e e5 9a 4d ee 6b af ce 6b 36 39 90 52 ca e6 0c 37 67 6c e8 19 6e f2 4c 93 99 b9 d8 67 8f c6 5c 6e 4c 4a 6e 4a 9d 21 c8 3c 0a 4c cb 8f f9 63 44 c4 3c 46 b3 d5 19 9f 68 86 4c 9c cb 1e 3d 1f 54 63 cd 6b 7a e5 5e 36 b2 c2 fb 32 3c 80 01 62 26 db 61 72 12 0b b5 58 2f f1 75 7a c1 f3 b6 7e f7 c7 db f0 83 9f d1 0f db c5 ff 7c 93 fc 6c 62 ff 52 f0 90 f0 58 0d 0b a5 a5 ea b0 b6 f9 7c 3a b7 3f d3 22 b1 8f 0d 49 37 9a 4c 26 60 c0 4b 65 5a 3b 00 32 55 f7 a5 a2 c8 70 8f 5e d5 ce 3a aa 72 33 9b 2d 32 63 12 93 d3 6f d5 bc bd c6 3f 8a 92 b6 4d 8f d9 ac 20 3f 15 f4 02 a9 e0 e2 ea 11 30 9b 33 32 5b 7f 44 19 de 21 35 5f db bd dc d2 db f3 aa de b6 97 76 9f 67 4e 38 b6 e8 e4 49 cc 71 56 55 c5 a4 64 6b 80 Data Ascii: MX/P/IAMkk69R7glnLg\nLJnJ!<LcD<FhL=Tckz^62<b&arX/uz~\|lbRX\|:?"I7L&`KeZ;2Up^:r3-2co?M ?032[D!5_vgN8IqVUdk
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: b4 99 e9 c1 a5 6b 1e 4b aa 54 d9 aa 44 75 41 47 d5 04 b0 93 41 cd 94 b7 ff ed fd e1 ee eb d7 76 8c 5d 12 8d 28 31 55 45 55 f6 07 4d 29 33 7d 75 59 3c 3c c8 c3 0d c0 68 31 66 a8 44 5e 21 92 c1 76 91 0b 61 63 9e 30 06 86 45 4d ff 99 3f e5 f3 32 12 00 6c 0f 7a e7 14 b8 9e b9 e8 7d 99 0b db 66 84 68 7a ac 99 fe d8 fa 25 a9 4b 4c 87 c7 9f c5 58 26 0d d8 80 ee 9c d8 51 0e b7 ed 54 61 50 b5 cc 85 aa 7d c9 25 c5 43 f2 62 55 1e 0a 2c 33 c6 ae f5 ae 3d 2d b3 99 52 b1 a5 35 33 d9 b4 8c 35 2e c8 02 19 cc f0 bd a7 54 5d 11 eb c5 f5 59 07 c5 ee 9e 99 c1 04 65 79 92 99 59 76 0d 8a e6 c7 bf f9 dc ae d7 38 cd dc b7 b7 bb 88 47 a7 93 a3 77 7f 18 0c 83 33 33 2c 17 1f c3 3a 4c 54 89 56 9e e7 35 3d 66 3d e5 43 e1 64 1f 6a fb 06 55 c1 6a 3f 6a e7 1e d7 20 0f cd b0 c9 fc c4 c7 Data Ascii: kKTDuAGAv](1UEUM)3}uY<<h1fD^!vac0EM?2lz}fhz%KLX&QTaP}%CbU,3=-R535.T]YeyYv8Gw33,:LTV5=f=CdjUj?j
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 2b 67 a3 63 ba ce 0d a3 6d ef 03 08 1b 13 ab 9b 97 3b b6 f0 45 0e 6c 53 cc 7f fc b6 cf 9d 67 77 01 b5 98 7e 0f 9a 69 cc 04 00 a2 79 72 40 8e 11 e4 20 66 58 40 88 54 41 95 b2 a7 a8 62 96 27 8e b7 e2 f1 62 de 6a b4 2f 09 fd 41 3d 61 9e 0e e3 22 8b 4a 88 dd 67 1e ab 9b 2d 95 43 69 64 40 85 b0 ba 9f 40 7a 02 24 28 f2 0b fd 23 a0 56 df d6 62 ec 0f e1 1b 6f 5c 64 63 f9 22 98 4e 26 6f 42 59 b6 11 a4 ee 75 1c 76 03 70 42 88 7a 51 87 cc 15 f3 77 da 55 96 5f f5 e8 f6 60 0a 20 48 f6 18 2a c3 a0 8c cd c8 36 0b 90 2d 80 b2 7a ee a6 c1 0c c8 c3 fa d0 43 16 fe 8d 4b 0d 24 6c e8 d6 6c 4f 51 65 c2 22 88 58 b2 6b 8b 0c a7 9c 61 e4 2a 06 14 63 20 c4 2b 19 0a 72 d4 f5 a1 d3 9f 33 cd 9f 73 08 ce 3f 77 9f ce fe 8d d4 7f 68 9b 5f f8 32 52 d1 56 5d d5 b2 5c eb 68 96 9e a8 b5 ca Data Ascii: +gcm;ElSgw~iyr@ fX@TAb'bj/A=a"Jg-Cid@@z$(#Vbo\dc"N&oBYuvpBzQwU_` H6-zCK$llOQe"Xkac +r3s?wh_2RV]\h
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 15 33 25 ab 00 ab 22 29 85 9f 62 ad d2 67 17 b7 2e 39 ad 2d 29 dc 9f fe 8d bf f1 6a 9c fe c6 b5 86 60 06 45 ad 51 54 25 b9 a8 90 c7 ad 6e 68 50 61 09 b1 8f c8 94 89 42 40 80 3c bc 4b 03 20 1b d8 5e 52 6e 6f ea 9c 57 c8 37 a6 89 9f 96 39 b6 79 9c c3 8d 0a 14 62 92 b0 43 aa ba 04 ec 26 84 e0 e2 77 ac b5 06 d2 a0 48 78 9c f7 08 53 5e b2 f1 cc da fc e3 e5 d3 56 50 03 a1 18 af f6 01 f5 11 39 a9 08 00 a9 21 b1 55 41 71 3c 8b 5b 89 82 59 b5 2f 91 c1 c5 9f 9a 06 ba a8 f9 aa f8 43 c2 2f cf 57 d4 f8 2d dd de 7f fb 7b 36 7f ef 75 b8 5b 93 af 76 01 ff f6 ee f1 df 73 1f ff 2d 13 fd 6c a1 57 2f f7 ac 0a 9f 27 78 42 74 79 6b 20 02 30 35 8b 0e c0 d6 68 40 21 f3 70 81 f1 e2 66 2b f2 16 5f f1 3a bd e2 57 a7 32 68 02 ed e7 dc bf 0b 65 b5 91 f4 64 2b 9f 7b bc a7 d7 e9 b5 f7 Data Ascii: 3%")bg.9-)j`EQT%nhPaB@<K ^RnoW79ybC&wHxS^VP9!UAq<[Y/C/W-{6u[vs-lW/'xBtyk 05h@!pf+_:W2hed+{
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d5 7f 5c dc 4a b1 d5 9a b2 b4 91 a3 2e 64 9b b7 db 4f 7c a6 bb 09 fc a8 37 99 0e c5 fe 34 a1 01 0e 99 48 8a 9c 8a 0d e7 1f 5a 6d 83 81 8c cf cc 04 f2 78 aa 13 6e 0b 90 fc 51 57 45 58 4c 62 49 3a b9 6d 8c c0 d5 f9 46 b1 95 57 88 55 b7 a0 90 2d aa c6 69 3e 3a aa dd 73 34 cb ba 74 cc 45 49 55 78 9e e7 55 a7 13 76 c9 a7 9f a9 95 ed 5c d9 2b 3a 9c 89 16 28 58 68 a0 c2 0a 1b 67 9b 5a da 6f 9c f6 05 2e c7 ac b3 e7 e5 74 4e 5b f0 c0 bc 71 f1 b9 cd 47 ff c3 d5 ff 13 0f 75 71 8d 7e b6 89 ff bb a2 1f 37 84 82 0f 00 99 10 af 44 8f cb 34 1a 33 0f c6 3c 4e fa 2c 55 77 c5 00 87 a5 e3 0c 6c 21 01 a9 9a de 47 b1 2a 9f 24 84 19 67 aa 2f 43 ac 81 cc 4b 4f 96 b7 ec 2b 8e f3 9a ad 47 4a 00 80 28 d3 c7 bc 9d db 2a 7e 40 57 cb 3a 80 43 ce 82 85 79 00 00 13 26 f0 bc 9e 05 09 7b Data Ascii: \J.dO\|74HZmxnQWEXLbI:mFWU-i>:s4tEIUxUv\+:(XhgZo.tN[qGuq~7D43<N,Uwl!G$g/CKO+GJ(~@W:Cy&{
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 3b 47 c4 96 a7 fe 74 e1 6f f5 a3 dc 03 90 cb 8d 34 02 67 34 3f d3 6f a1 db 03 70 fd ac bd c5 e0 17 e8 44 39 af 73 78 80 ad 53 94 af cb 50 e6 9d ee d0 9f e8 6b 34 78 cc ce 85 ba 3b e5 0a 9a 24 24 e5 0b ee 6e aa 67 44 be 6c 11 e8 ba 06 55 44 1d fb 38 23 08 d0 19 13 7d 17 03 a3 d1 68 51 87 f0 79 a3 53 5d 88 f3 bb 68 bf d0 69 f4 cb a8 99 b1 4f 86 76 0b 34 08 3e a0 65 6c 6d 65 a4 f5 ec 25 59 d8 65 cc dd ca c9 02 bb fd 98 94 2b 54 b8 b9 e1 67 63 44 2b 87 86 0a 34 24 b7 af 6f 35 52 a6 48 af 4d f7 1c f2 7d d2 0c 69 ca bd 9a 7f 6e 61 db 42 92 02 89 1d 1b 3a b3 3a 95 99 08 ec 09 a8 9c 70 d5 95 0d f7 d2 49 f7 52 4c 2b ed 52 ca 79 fc 47 55 39 1e 77 b7 ea bf e0 f1 a9 08 8e 4c b0 9d 58 8e bc 1f a9 1b b1 47 cc bd 3c 24 23 94 08 d6 3c 83 e7 29 38 61 d4 00 a8 26 d8 63 3f Data Ascii: ;Gto4g4?opD9sxSPk4x;$$ngDlUD8#}hQyS]hiOv4>elme%Ye+TgcD+4$o5RHM}inaB::pIRL+RyGU9wLXG<$#<)8a&c?
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: bc d9 2f fb 8b e3 d7 a0 08 67 e4 bd bd ee cb 64 5a d5 8a f3 1b 3c b8 8f d1 88 8c 16 92 c2 24 9b de fd 50 f8 b5 da ba c2 f4 74 46 5a 32 38 70 d6 94 94 52 06 24 cb c1 e8 8e 1b 5f ee 4b 6c cb be ef d1 00 84 8e 0b af c7 eb 6a 3b 4d b1 75 ec f5 7a af d0 fe 58 7b cc e5 c8 fa 6c 12 63 b1 4d b1 45 7c f1 38 89 51 62 e3 5b 1f 3a b0 f5 a5 45 fb 55 7f f9 33 fe e5 91 51 2a 8b b6 2d a9 a1 6b 35 fa a0 57 7a b0 0b 67 cf 89 c7 38 bf 1d fd d6 17 69 0c eb ab 39 65 bc 7c 87 3a dd 45 6e fd 66 75 e9 39 5b f6 c4 65 1e 47 dc 96 bc 0f b9 4c c6 9a 71 bb 85 3c 83 33 e4 0a a5 81 0f 32 cc 63 5b 87 2f fb 9f 2f 5b b7 2a b1 15 1f f5 e5 6e 65 1e 2e ce 56 c7 7b d3 b1 ac 6a b4 cd 8e 8a 50 98 bd 0d fb a6 70 91 e4 e1 9f 5f 8b 7b 2d b4 4b d8 f6 85 ab 7c 07 0c e6 e9 2a 40 50 20 40 20 9a 5e d1 Data Ascii: /gdZ<$PtFZ28pR$_Klj;MuzX{lcME\|8Qb[:EU3Q-k5Wzg8i9e\|:Enfu9[eGLq<32c[//[ne.V{jPp_{-K\|*@P @ ^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49976	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	835	OUT	GET /-/media/images/flag_270x170%20png.png?h=170&iar=0&w=270&hash=7B72FF4206EA37A8AC8DEADF8690F469 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	865	IN	HTTP/1.1 200 OK Connection: close Content-Length: 64124 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Flag_270x170 png.png" Content-Type: image/webp Etag: "ajdljX/LfBn3KoanWML83W/kFcCzg4eaQ/qDbx6JYOI" Fastly-Io-Info: ifsz=102340 idim=270x170 ifmt=png ofsz=64124 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120043-DFW, cache-pdk-kfty2130057-PDK X-Cache: HIT, HIT X-Cache-Hits: 10, 0 X-Timer: S1713460565.154642,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 74 fa 00 00 57 45 42 50 56 50 38 4c 67 fa 00 00 2f 0d 41 2a 00 4d 48 6c 1b 49 92 a4 55 d4 93 d7 ab 4a ff 0d ee 9a d9 33 21 a2 ff 13 90 dd 3d 12 75 a9 b5 e9 52 01 e4 5d a5 ae e7 79 ba 5c 65 8c ed ee e6 1c ea 02 6e 46 9e e6 da ea 32 76 37 c0 de c0 da f6 1a 8f 37 d8 5b 93 4a 2c 37 d0 a0 8e 4b fd 1b 7c ac 32 95 3c 65 f3 41 35 a9 a2 59 03 7a 03 ea a3 bf ea b3 d8 3a 13 01 c6 c3 87 77 77 25 66 81 99 e8 a6 d6 58 60 ad aa 57 03 68 7c a1 67 c2 58 6b c5 08 30 84 06 4c 8b 71 4e e7 de a0 49 02 8c 1e 9c fe 2d 92 a4 8c 40 be 92 f6 69 23 b7 bc e6 9c 13 b8 24 55 b9 fe 5c 56 d4 2f 4c 82 df 98 a4 5e 32 e7 9c c0 e5 7d 8b 89 95 a8 fe a7 ab 65 5a d3 b7 fc e1 87 9b 49 d2 4e 20 6f ab 5e 9d 9c 4f e7 9c d8 06 b4 93 54 55 e5 8a 49 2e 89 dc f2 27 b5 34 79 75 aa 72 ce f9 Data Ascii: RIFFtWEBPVP8Lg/A*MHlIUJ3!=uR]y\enF2v77[J,7K\|2<eA5Yz:ww%fX`Wh\|gXk0LqNI-@i#$U\V/L^2}eZIN o^OTUI.'4yur
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 0c 36 00 14 fa 85 96 66 6d 03 01 f4 6b 34 64 08 a4 a8 b2 b6 4b b5 26 0c 5e 32 0e 04 02 00 44 ea 56 43 73 73 4d a0 a5 20 10 21 fa cb 76 f9 79 01 00 b0 b3 96 45 01 04 c0 35 6c 18 18 32 64 d0 98 86 db 09 60 01 f0 1f 12 d4 d0 dc d4 c0 99 0b d3 13 83 41 db 36 82 9a a5 fc 49 6f f7 4f 21 22 26 20 90 8c 42 42 12 08 a8 18 80 dc 10 c8 23 21 09 a3 4a 80 23 e1 fc 44 08 aa c9 00 f3 d8 0b 48 48 32 c1 68 98 01 54 39 93 5c 24 90 c0 24 10 da 56 c2 fd ca 24 c1 04 3c 3f 40 20 09 18 80 24 da 1e c1 5a d7 56 02 26 c9 a8 82 5c 7e 10 1f 33 9e b4 ad 2c ad d5 0a ac cc d8 47 0d 84 56 d7 ec cc a9 b8 8a f2 67 26 6b 5e 56 a0 75 33 c3 bc 85 6f 9e 73 67 f1 41 a1 0f 04 93 d9 2e ff 9d 8f 2a 6d eb e1 51 59 78 28 47 ad ae 6e 0f d0 a1 1f bc d4 d6 be aa 3f b8 7c b7 cb 57 5f 7f 5b b1 b5 d5 e5 Data Ascii: 6fmk4dK&^2DVCssM !vyE5l2d`A6IoO!"& BB#!J#DHH2hT9\$$V$<?@ $ZV&\~3,GVg&k^Vu3osgA.*mQYx(Gn?\|W_[
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 47 7c 4f c2 9d 58 18 32 42 fe 3d de 33 62 3f 7a 7b 9e 53 87 8e 3e ea c4 fa e5 cf f5 6f 3c f1 ec ed 73 39 69 37 52 da 13 06 fd 96 2f ef b4 33 6e d3 d6 09 96 26 0c a8 08 a2 51 80 86 7d 8c 09 7d b6 9b 8d 16 41 a8 8d 19 e8 a2 50 a2 41 1c df 51 a8 8d 88 a7 d4 d8 75 57 f5 16 7c ce fd 4f f7 fe 67 74 3d ea c5 01 e7 ec ab e3 14 85 b5 d7 ed b7 77 25 06 66 92 90 1c 51 68 ee 7c 85 4b 0e 59 60 97 3f 7f 2b f6 0f 19 3b fb 4e ce 9f cc 2f 5f d7 46 ec 17 4e cf 63 0f 48 be f7 f3 d6 78 30 b5 b3 28 a3 66 c9 9a e6 a3 40 b8 23 23 71 6c 16 5a 31 22 cc 08 82 5a 86 6c 80 82 68 2b bb bb 09 fd eb 81 c8 e0 97 90 a4 6f b7 af 27 4a 87 a4 ee 73 66 fa 1f 3f 38 13 c9 b9 0c c1 f9 01 9a f8 cf ff 4c 2d 35 ff cb df b6 04 64 ca c2 2e 4f 40 55 25 03 94 ad 00 50 12 64 92 8d 44 29 9c 49 26 18 44 Data Ascii: G\|OX2B=3b?z{S>o<s9i7R/3n&Q}}APAQuW\|Ogt=w%fQh\|KY`?+;N/_FNcHx0(f@##qlZ1"Zlh+o'Jsf?8L-5d.O@U%PdD)I&D
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 7d 7d 4f 4f 85 72 84 25 8b 4a ab 26 1d cb 51 06 80 9e 02 18 8a 2c d3 9b 79 4b 44 17 ac 72 6d fe cc 03 58 d4 04 df 68 8e 65 38 1f f3 2a 3a 46 e7 09 07 53 33 ae a1 3b 83 50 6c ed f4 1b 02 5d a5 ad d3 71 9a cd ba 5d a6 3e 73 df 23 ae da d5 ce 88 a9 8d 23 b0 5a 20 ac 26 bd 68 ac 15 26 bb 67 2d ae e2 cd 87 ee d3 2f 8f 3f 5c 7f 76 4c 51 44 ef 86 a4 cc 45 47 5d 41 87 64 68 49 4d 51 53 d3 cd ef f8 f9 31 f4 37 22 1b 6f 67 db 71 22 3e 03 f5 c7 a7 ae bb 95 17 fc 6c 9e 4f de 85 c5 c9 6e d3 37 b0 0a 88 f8 6e e5 27 3e f4 c8 07 85 be 1c a5 11 ab e6 b4 9a 42 6f 7d e4 d5 fe a2 1f af ef 9c 7f 44 77 fc 72 7d ee ab fd b5 c2 aa ad 4b 67 ea b6 3b 5f af bc f3 d9 37 e2 63 f6 c8 67 b2 89 1e 86 43 eb 86 40 1e f3 94 b7 3d 6d 3d 3b b3 b2 25 cf 96 2c 43 87 50 85 32 bc 81 d0 88 0c c1 Data Ascii: }}OOr%J&Q,yKDrmXhe8*:FS3;Pl]q]>s##Z &h&g-/?\vLQDEG]AdhIMQS17"ogq">lOn7n'>Bo}Dwr}Kg;_7cgC@=m=;%,CP2
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: df cf 1e fe 9f 3f d9 26 d5 7c df 9e 93 da 43 3f 8f 72 f6 e7 31 8b ac 06 04 b0 11 45 92 31 27 ed d0 94 fe 09 52 31 26 29 93 17 43 c4 55 7d 7c 3a 96 c7 9c b3 93 ee fa ce e1 8b f2 e7 fe 40 ef cf fa eb 3f e8 9f ff 6c 7f fe d5 bf fd 6f fc c8 f3 0f 69 cb ae a1 04 1a cd 52 9f 4a 31 1b bf 24 18 b9 41 57 aa 38 82 00 04 48 40 59 88 7d 49 04 8b d0 e5 26 6c 48 61 54 74 e4 c9 fe 18 5f 3b d2 43 88 db 10 43 77 28 1c a3 61 7e e6 a9 be b1 f3 eb ed ed 68 84 56 f8 5e 2f c3 c4 ad dd 99 d6 08 31 bc f9 d9 03 73 36 bd 38 1e c9 bc 8c b8 f1 55 76 c0 41 a0 0d 03 0c 06 35 40 da cf 0a a2 84 20 3d 6a cd ba 73 e5 de 0b 7b a6 c0 49 61 61 c6 46 42 1e 04 41 8a 64 4c 1a 41 b9 6d 2d 08 fb 75 af 43 4f b7 5b 8d 28 d7 84 2e 58 d4 99 32 66 63 b5 41 52 91 22 9c 7a 58 da 36 4a cd a9 b5 eb 7a cf Data Ascii: ?&\|C?r1E1'R1&)CU}\|:@?loiRJ1$AW8H@Y}I&lHaTt_;CCw(a~hV^/1s68UvA5@ =js{IaaFBAdLAm-uCO[(.X2fcAR"zX6Jz
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 0f ae b6 55 65 36 b3 cb 1e a7 d3 c9 34 49 d8 8e 78 01 18 73 a3 cc aa 52 af 8d 21 42 8b 22 4c 50 29 54 b5 66 28 ba 6e 36 6b 7e 94 16 11 cd 08 5a 2f 6e dd 64 cd 54 2f 19 4d 59 4e 88 2d de f2 d0 ec ad ab 16 eb 10 51 77 b1 3a 3a 8f 24 38 70 69 40 b9 55 a5 66 32 0a 56 5a 66 42 0b ae c1 f1 f9 bb f5 e1 e9 66 6a f0 0f da fc 6b 7e ec c1 e3 db 1f 7f 76 ce 4f f9 a8 ab ae c1 21 03 50 45 41 a0 32 94 74 5d 55 0f 9c fc aa 30 fc c2 9a 50 e6 ae 89 55 4e 33 b4 bb d6 33 6a 1c 9d dd 9b 9c b0 47 ed b8 e8 06 1a ae 50 c8 a3 35 d0 81 5b c7 8a dc 79 6e db 87 cc 46 82 bc 9c 20 45 ba b0 03 2d 58 a9 57 50 b1 4c d2 22 58 31 86 6a e0 ec 5e 7d d5 be 4b 8c 86 b8 1c 51 b9 30 1b 0f 71 5d 99 7e 4c fc e6 d3 48 f8 e2 4b d2 1d f3 f7 32 19 71 b8 18 ce ae 14 b8 22 e7 7a f8 d4 9d c7 fe 2e 51 31 Data Ascii: Ue64IxsR!B"LP)Tf(n6k~Z/ndT/MYN-Qw::$8pi@Uf2VZfBfjk~vO!PEA2t]U0PUN33jGP5[ynF E-XWPL"X1j^}KQ0q]~LHK2q"z.Q1
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c9 02 ad 0e 42 91 0a 0a 8d c5 57 ec fd dc 7b 90 32 69 bb d0 50 66 73 f4 05 b3 6c 47 1c 73 fc bf 9e 05 53 58 95 1b d7 1d 77 02 57 8e f9 fd cb 43 18 8e 8d 4d ef fa 1b 5e 9e 37 1b d2 24 db fb 3d ed 8f df 72 27 47 a2 12 80 8e 93 ee 85 ec 02 11 63 b6 ca 7a f2 87 ff f8 2f 9b e7 db c3 1d c4 45 37 61 2b a9 99 a1 60 fb aa b7 b2 6f f2 39 dd 99 7f fa 2f f1 fd 4d 49 98 21 b6 39 6d a6 93 ee fc d0 bd 63 ee a9 5c 84 27 f6 9c dd 83 44 f1 ea 54 47 42 c9 a5 2d e8 ba ee 8e f9 f2 c8 17 1f 7e 7d 47 ac 9e 58 e1 d8 84 8a c4 1e 3b 1f 8f 87 42 54 3b 61 c9 ca 7a a9 5f 59 3c e2 1e 7d de f8 79 69 55 b9 b2 5f 36 45 fa da 78 be 8c 13 d6 84 b5 af bd 96 08 9a a8 72 46 ec 90 0b 74 8f f4 ed d1 4c fc b6 1e 74 61 31 34 44 fa 62 73 20 c5 58 38 9d 9f a4 42 5e a5 eb 62 c5 aa 94 85 5a 05 00 58 Data Ascii: BW{2iPfslGsSXwWCM^7$=r'Gcz/E7a+`o9/MI!9mc\'DTGB-~}GX;BT;az_Y<}yiU_6ExrFtLta14Dbs X8B^bZX
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 68 8b 9a 19 df 0d 0c 93 c6 d3 74 a2 fc a7 ec 45 32 dd 3f 9f c9 cd fb df fd 47 ff c4 61 9b d5 85 9a 5f ec b8 75 b9 bc 3d 0f aa 62 33 ec 71 a4 38 d0 de ba 39 b6 22 91 08 2d 18 0b 00 d0 80 12 32 81 09 ca d8 50 84 08 22 a2 44 28 20 60 e5 67 3f 49 98 ef 7d ff 9f 7f fd b1 ef f1 13 5f ca 06 2f 9d 6a 4c dc b1 f7 bf 7f f5 de 75 7f 04 2f 02 f4 87 a6 66 ab 27 d0 c3 14 e3 a6 9b f6 f8 1b 4e fe fe 16 7e f8 36 49 41 43 dd ae f7 3d 7f 18 3f 7c 7c 5c 78 9a a8 3e 79 7b 28 4b a6 cf 16 68 34 03 19 0c 4b c2 36 61 53 82 19 05 3c b6 48 6c bf 79 de bd e3 81 32 75 3d c3 ea 62 46 90 fa 8b 7e f4 0a de 69 8e 20 22 0a 78 10 09 7a b3 26 88 94 84 55 dd 0a 01 10 61 ec d8 6f 77 71 c6 dc 9a db 3e e6 91 2c a0 ab 33 d1 ec b3 b4 51 ee 52 26 89 63 99 cb fc b6 30 45 1d dd 63 17 dd 98 95 1a e4 Data Ascii: htE2?Ga_u=b3q89"-2P"D( `g?I}_/jLu/f'N~6IAC=?\|\|\x>y{(Kh4K6aS<Hly2u=bF~i "xz&Uaowq>,3QR&c0Ec
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: a0 6a 6a 41 47 80 9d 0c 45 37 54 80 e1 83 e4 5b e6 62 45 c6 63 34 d7 8a 49 9d 5d 77 2b fc b1 f0 c0 75 83 1f 7f fe fa 5e cd 4e 82 da f2 91 f3 54 ef 58 d7 bc e2 39 ca 5f 78 48 81 d0 a2 15 37 e3 3a 1c cf 07 be 24 db e9 93 cb 3d 17 9e 05 19 6f 89 e9 ee 59 1c 9d 5e 9c ce af 5f f9 89 e1 b8 1b 81 52 65 a1 29 93 3e 8c 87 62 04 8a 01 0d 2d f6 95 1b 91 f9 23 77 3e 8a 75 c5 8c 79 2d a9 2f 4b ac 6a 63 0c 00 2a 50 68 c9 a3 39 c0 7d 75 7f ab 75 c7 c0 b9 d4 da c7 53 fb 04 f7 f6 11 fa ed c0 99 4b 81 bc 87 bf bd 43 a7 9e 1a 17 69 30 28 18 8e 40 c7 06 e9 69 a3 8d 53 da ed ba 21 4d f1 88 26 19 26 71 1f f7 4c 2c e3 76 ba cf 90 35 c4 30 50 00 c1 b4 7c 2b 06 10 28 20 00 56 67 15 81 56 b6 72 a2 6c 4e 9f 1d ff bb bb fa 9e af da 6b 78 5b 7f d4 7b e1 33 9e 10 08 9d ed 04 f3 23 31 Data Ascii: jjAGE7T[bEc4I]w+u^NTX9_xH7:$=oY^_Re)>b-#w>uy-/Kjc*Ph9}uuSKCi0(@iS!M&&qL,v50P\|+( VgVrlNkx[{3#1
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 21 5b 51 86 67 e6 15 8f a5 de c0 3d 0d 46 6a eb e0 ec 2f c7 fc 3c 82 03 3c 7a 24 3b 92 54 00 e7 96 68 3d 68 94 1b c8 66 dd 6a 5d 5d 78 fd cb 63 92 df e7 e6 c7 97 ff 8b bd e5 da 91 c7 87 a7 e5 34 0b 95 0e 37 1f 11 0f b7 92 49 89 c0 8e 3c 23 eb 1f 79 df 50 47 6e 7a d1 5b 08 57 39 4a 43 00 24 00 0a aa 90 44 f7 c9 11 91 af cc 00 01 7c 04 8e 87 7d 25 20 7c e3 a6 de a6 ee 0e 2a 96 d3 67 7e 7c 3d dd 77 bf ec 1c e9 d3 45 05 a0 71 cd 3d 9f 88 ef 38 4d 66 26 bd c7 7a 96 39 4d 0e f6 4d 89 75 90 23 b5 73 dd ea 5a a9 5b 7d bd bf 56 79 9a 76 00 3a 93 c6 d4 9e 98 85 4c 6a 6c 94 63 1a 29 48 a2 3e 03 1b 0a 50 10 55 85 02 a2 62 02 f7 bb 2b d7 44 ad 9e 02 2f d2 a7 22 36 ad 35 f8 cf ff fa de 90 80 29 c3 65 bb 62 2d f5 3c bf 3f 60 9c 3e a0 8d 0e 34 13 50 4b 93 81 16 ce 4d 76 Data Ascii: ![Qg=Fj/<<z$;Th=hfj]]xc47I<#yPGnz[W9JC$D\|}% \|*g~\|=wEq=8Mf&z9MMu#sZ[}Vyv:Ljlc)H>PUb+D/"65)eb-<?`>4PKMv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49977	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	543	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 33432 Content-Type: image/png Etag: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw" Fastly-Io-Info: ifsz=33454 idim=320x360 ifmt=png ofsz=33432 odim=320x360 ofmt=png Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210155-DFW, cache-pdk-kfty2130086-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460565.186375,VS0,VE92 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 68 08 06 00 00 00 26 6f 22 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec 9d 79 98 1c 55 b9 ff 3f 6f 55 f7 6c 99 2c 93 49 02 09 4b d6 c9 4c 16 20 a4 83 30 18 76 01 15 b9 a2 82 a0 82 a2 f7 2a 78 05 04 d4 cb 22 12 22 5c 77 01 15 f1 ba e0 8e b2 f8 43 50 51 70 0b ab 83 9a 0e 04 c8 64 92 99 6c 84 00 49 66 b2 cf d6 5d 75 de df 1f a7 3b d3 d3 99 9e 25 e9 59 c2 9c cf f3 d4 d3 b5 9c aa 7a ab ba fb 5b ef 79 cf 7b 4e 89 aa e2 70 38 1c c3 11 6f b0 0d 70 38 1c 8e c1 c2 09 a0 c3 e1 18 b6 38 01 74 38 1c c3 16 27 80 0e 87 63 d8 e2 04 d0 e1 70 0c 5b 9c 00 3a 1c 8e 61 8b 13 40 87 c3 31 6c 71 02 e8 70 38 86 2d 4e 00 1d 0e 87 63 98 50 00 3c 01 ac 01 6a 81 d8 a0 5a d3 7b a6 02 af Data Ascii: PNGIHDR@h&o"sRGB IDATxyU?oUl,IKL 0v*x""\wCPQpdlIf]u;%Yz[y{Np8op88t8'cp[:a@1lqp8-NcP<jZ{
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 53 e7 f3 80 0f 61 05 e1 1b 39 6c ec 2d 67 01 d7 03 c7 60 1b 5b 00 5a b1 a1 8a cf d0 21 5a 60 85 ec 49 60 64 ca f6 db 81 1b ba 39 f6 75 d8 fb 1a 62 1f 80 e9 06 b3 5f 60 6b 02 7b b0 31 cd fa ac fd 62 a9 32 15 a9 65 01 7c 6c b5 7f 09 f0 de 8c b2 13 81 9f a7 6c 02 f8 01 f0 e3 6e 6c 1a 34 62 b1 d8 8f 3c cf bb 48 55 d3 a1 9d 10 78 69 e9 d2 a5 c7 0e a6 5d 07 c8 56 f6 4d 65 ea 4d 78 a6 4f ec 77 22 f4 f7 a1 64 ec 49 27 3e 35 66 e4 c8 11 f5 bf 7a 88 d7 7f f6 20 c9 a6 ed 8c fb d0 fb 38 fc cb 37 32 ea 82 73 69 5f b5 86 37 3e 71 2d 5b 6f fe 32 52 18 65 ec d5 1f a7 60 d6 4c 5a 6b e2 48 69 09 e2 fb ec f9 dd e3 b4 fd 33 4e b8 b5 89 c4 8a 3a da 96 be 80 b6 25 30 8d db f0 cb c7 12 6e df 45 fb 8b b5 6c db bd 87 d1 e2 47 0a 22 45 bf 5f 37 6f ca 64 ac a7 b2 18 18 0f bc 84 f5 Data Ascii: Sa9l-g`[Z!Z`I`d9ub_`k{1b2e\|llnl4b<HUxi]VMeMxOw"dI'>5fz 872si_7>q-[o2Re`LZkHi3N:%0nElG"E_7od
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: cc ee dd 34 dd f9 23 da 57 ac 62 c2 ff de 84 78 1e 4d 5f fe 16 66 f7 1e 34 34 98 5d bb ed b4 7d 27 e1 b6 1d 84 4d db ed e7 b6 1d 68 18 92 58 b9 9a f6 e5 2b 10 df 47 db 13 10 04 a0 ca 1e 0c 23 c4 2b dc 99 d0 af f5 6c 71 b7 f4 26 04 10 a1 a3 e5 c9 60 73 df ba 63 75 ea b3 9c 8e 6a 70 9a ff c0 c6 10 c1 7a 89 8b b0 a2 39 12 2b 82 b7 f5 c2 9e 4c 0c 36 e0 0d 36 b6 d5 97 de 1c b9 d8 84 6d 4c 49 7b b8 ef c5 36 fa f4 c4 a5 74 3c 24 9e a7 7b e1 fd 2d 1d ad 7a e7 65 6d ab c5 26 7b 83 fd 23 fc 38 65 c3 75 d8 6b 3d 99 ee 5b dd bb 22 b3 fc 3d e4 8e 2f 66 f3 25 ac 77 f8 7e f6 6d 50 19 74 54 b5 53 9c 73 d9 b2 65 ff 18 2c 5b 0e 56 fa 1c 03 dc b6 6a f5 e5 89 37 b6 22 c5 25 4c aa 5e 40 a4 b8 88 5d 2b 57 b3 f5 ef cf 20 d1 28 13 de f3 4e 8a 8f 3c 0c 4d 04 ec 78 fc ef ec 7a e6 Data Ascii: 4#WbxM_f44]}'MhX+G#+lq&`scujpz9+L66mLI{6t<${-zem&{#8euk=["=/f%w~mPtTSse,[Vj7"%L^@]+W (N<Mxz
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: f4 49 00 93 aa 63 46 8c 19 4d 41 c4 a7 6d 77 33 bb df d8 02 08 a5 87 1f 86 ef 47 10 85 e6 0d af b2 e7 8d 2d 44 0f 1d 4f d1 e1 13 31 ed 09 5a 37 6c 24 4c 24 30 be d7 49 c4 42 52 22 d8 d5 44 d7 53 48 87 07 98 40 69 57 29 78 ad b1 a5 ab 40 7a be d8 48 47 3f d0 08 fb df 58 01 36 fd 63 01 36 ad e2 42 e0 df d8 7c 39 b0 e2 9a ef ae 7c 1f a2 c3 9b 29 ee ae 60 0f 3c 0c dc 9a 9a 17 ba 4e 1f 7a 20 63 be 2f b9 87 d9 4c c0 f6 b0 11 6c ac f4 65 6c ef 96 dd a9 ed ef 26 3f a3 62 a7 f9 37 9d 73 e6 fc 5c 05 87 02 aa 7a 97 aa fe 52 55 7f 89 4d 37 ca e4 29 6c 7a d5 9f 3c cf 7b 7c df bd 1d d9 f4 2d 0d c6 f3 22 23 47 96 62 54 69 6e da 46 7b 5b 3b 52 50 40 e9 c4 43 08 db db 41 0d 7b d6 ac c7 b4 27 28 9a 78 08 7e 51 21 da d2 42 e2 f5 cd 18 cf c3 a4 bd bb 2e a6 30 eb 33 d7 44 f6 Data Ascii: IcFMAmw3G-DO1Z7l$L$0IBR"DSH@iW)x@zHG?X6c6B\|9\|)`<Nz c/Llel&?b7s\zRUM7)lz<{\|-"#GbTinF{[;RP@CA{'(x~Q!B.03D
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 7c da 31 be 53 57 6f 4a c8 5c 9f 29 9e 99 93 87 10 a0 5b 4f 5b bf be 2f 4f ee 7c 3c e5 b7 60 ab c7 df ee a1 5c 82 be 67 af a7 85 32 73 44 18 43 cf 23 12 af c3 0e b1 95 3d cc 56 57 a4 07 4a 3d 10 7a b3 ff df e8 5d cb 76 5f 87 3b da 41 d7 df e3 b6 d4 94 0f 9b 1c c3 80 3e 09 60 4b cb 9e 3f 36 97 8e 38 93 30 c0 ea 9f cd 5c d6 64 12 3c 21 99 0c ac 68 79 5e ea 1d 1f b6 9f be 14 16 60 9a 9b f7 7a 79 82 ed f5 96 b9 9c 4d da 6d c9 16 3d 32 3e 03 14 fc c8 90 ce dc 77 38 1c 7d a6 bf 5e 89 bb 0f 7d 12 c0 e6 1d 8d f7 b7 8c 1a f5 cd c2 48 d4 43 40 0d f6 4d 6f c9 00 4f 04 13 04 36 87 cf 18 34 91 00 cf c3 f3 3c fc c2 02 c2 8c b7 b0 77 f7 99 2d 72 99 9f 99 f3 1e b0 cb 84 18 df ec 4f 3f 57 87 c3 31 74 39 75 a0 4e d4 a7 46 90 85 8d 8d af 27 93 41 5d a9 51 3c 11 14 45 83 00 Data Ascii: \|1SWoJ\)[O[/O\|<`\g2sDC#=VWJ=z]v_;A>`K?680\d<!hy^`zyMm=2>w8}^}HC@MoO64<w-rO?W1t9uNF'A]Q<E
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d7 9a 3d f5 d6 4c a9 ab 9b b9 6e 76 e5 1b 05 c8 21 09 d4 88 aa 44 3c 4f 92 6a c7 ef 2e 16 f1 da d0 7f 4d 59 b1 ea f8 75 b3 2a 9b 55 68 9b 56 bb 6a 6f 57 be da 59 33 3e 38 56 a2 3f 0c c5 94 04 86 00 51 e3 21 05 51 91 a0 39 0c ef 98 5e 57 bf 77 88 b1 f5 73 2a ff 3a 39 52 70 c6 da 44 db 73 d3 57 d6 57 67 db bc 7e 76 45 ab e2 ed 98 5a bb 6a 22 40 c3 ec 99 5f 18 21 72 4b a0 88 81 a4 2a d1 22 4f 24 89 d9 e0 49 c1 85 87 bd fc f2 90 49 94 57 ed ed 23 df 31 50 ec 77 15 38 cd fb 6b 6a b6 9d b9 71 cd b4 d7 82 e4 33 41 22 c1 38 a3 8c 8f 46 51 60 47 22 c1 8e e6 66 a2 c9 00 6d 4f a2 6d 6d 4c 1e 35 92 88 78 84 bd f8 31 14 7b 1e 05 9e b0 c7 84 2b c3 d6 dd 55 07 2a 7e 00 c6 98 c8 1e 35 a8 e8 15 7e 54 df e2 85 2c f0 8d 9c 1d e2 6d 1e e1 c9 47 d7 cc 99 f9 11 00 15 0d 05 d5 Data Ascii: =Lnv!D<Oj.MYuUhVjoWY3>8V?Q!Q9^Wws:9RpDsWWg~vEZj"@_!rK"O$IIW#1Pw8kjq3A"8FQ`G"fmOmmL5x1{+U~5~T,mG
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d4 15 0d 0d 9b 54 65 27 9e 99 0e e0 19 09 f7 f3 f6 e4 05 25 72 b6 8a 12 51 93 b3 bb e2 e8 80 47 9a 8d 51 15 4e b4 6b 8c f1 05 6f ea ca 95 cf 85 22 37 95 47 a2 65 6b 57 bc d4 e5 e8 cf 53 ea eb 1f 6d 53 7e e3 8b 8c 2b 20 f2 bb 8d b3 ab 9a d7 cf aa 7c fa f5 39 73 dc c0 a6 8e 5e 91 77 01 4c 73 e2 ab af 6e 9b b5 b6 6e d1 59 af ac 9a 33 da b4 1e de 18 35 6f db 10 04 d7 37 13 dc b3 53 c3 df be 9e 4c 3e dc 6a 92 f7 1e 56 e0 7f 63 5c 34 f2 9e d6 3d de 94 b7 bd b2 7a c6 c9 1b ea 3e d7 9f c2 27 f8 89 a8 e7 21 9a 7c 78 5c cb 9e 6d 6f 99 55 b9 2b 52 18 59 13 15 e6 ee 08 c2 3f cd 58 b1 ea 9b 5d ed 37 75 65 c3 8f ea 24 3a 73 b7 09 ee 8f 88 d7 98 c4 cc 1e ed fb 9f ff e4 dc aa 6d 1b e7 4c 3f 03 40 45 14 01 a3 7a 71 54 bc 82 84 aa 59 72 ea a9 45 3d d9 34 75 fd fa 1d 93 57 Data Ascii: Te'%rQGQNko"7GekWSmS~+ \|9s^wLsnnY35o7SL>jVc\4=z>'!\|x\moU+RY?X]7ue$:smL?@EzqTYrE=4uW
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: e1 c2 42 bc 29 49 0d 9b b4 3d 71 7a c6 11 0a 01 f1 8c e9 f4 30 98 5e 57 77 e5 da d9 33 cf 98 5a 58 38 ab 59 4d 01 80 f8 be 14 28 53 a4 80 15 1b e7 54 fe 2b 54 56 82 8c 2b 50 de e1 2b 1a 26 cd e7 7a ff cb 70 0c 47 86 9d 07 e8 99 f0 c5 84 ea ab 09 df 7f 2d bd 4e 20 d1 12 e8 05 05 e2 37 81 b9 0a 40 42 a9 c1 c8 da 1d 61 e8 4d 59 b9 f2 85 e7 e6 1c 33 2a 80 ef a3 5a 66 e0 42 84 f7 47 22 e8 66 13 7e 76 f2 8a d5 1f 06 f0 02 ef d5 16 a3 9b c0 7f 29 f3 9c 53 6a eb de da ac 41 8d 81 8b d6 4c 9f be 4f ab f0 d4 da ba 53 36 9b e0 52 90 8d 1a 72 16 aa 1f 25 94 f9 46 e4 4f 3b 25 52 71 e8 8b 2f ee f5 e0 a6 af 5c 7d d1 d6 30 f1 1e e3 eb 5a 55 7d a7 aa 5e 0a 3a 57 55 1e 5e a9 de 11 d3 56 ad 7a 2c 5d 36 29 d1 ba 3d c6 bc 6a 0c 11 45 0f 15 f5 ca 43 d1 72 44 c7 4b 18 19 6d cf Data Ascii: B)I=qz0^Ww3ZX8YM(ST+TV+P+&zpG-N 7@BaMY3*ZfBG"f~v)SjALOS6Rr%FO;%Rq/\}0ZU}^:WU^Vz,]6)=jECrDKm
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 7b 4f 6f f7 2d 0b b7 fe 6c a7 57 fe 6d c0 53 bc 77 00 5f ed e5 ae a3 e9 f0 58 fd 1c 65 0e 01 6e 56 d5 8b 44 a4 32 6b db a8 1e f6 cd e4 d0 d4 67 31 10 cd 98 ef 0d 5f 04 fe 9a 3e 8e aa fe 48 44 fe 2b ab cc 5d 74 3c 7c 5e 11 91 3f a7 e6 3f 0a 9c 0f 7c 03 b8 4f 44 3e a0 aa 57 a6 6c f8 1a f0 3e e0 93 19 36 e5 97 79 57 4f c6 04 a9 27 b3 46 08 a2 cf 83 cc 04 5a 69 49 d4 80 94 82 ce 41 cd 5d 20 21 f0 11 34 b9 10 bc 5d a0 a3 09 cd 63 f4 ed e9 bd 5f 44 a4 e8 05 52 1e 32 4a 9b 88 3e a6 78 1b 15 9d 27 b0 10 10 84 b3 b7 cd 5e f0 cb b1 b5 4b 2f ee 6f 7b fa 8b fa ea d8 3a 60 4a c6 aa a6 8a 9a f8 b8 d4 b6 65 c0 b1 19 db d6 62 7f 3f bf c3 fe 57 32 8f d3 02 5c 5a 51 13 7f b0 5f 0d ee 1f fe 5c 51 13 ff 21 40 45 4d fc 87 f5 d5 b1 73 81 73 33 b6 1f 72 20 07 ef b3 07 b8 f3 96 Data Ascii: {Oo-lWmSw_XenVD2kg1_>HD+]t<\|^??\|OD>Wl>6yWO'FZiIA] !4]c_DR2J>x'^K/o{:`Jeb?W2\ZQ_\Q!@EMss3r
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 66 37 db c6 93 8e 25 75 a6 3f 72 a6 2e 03 32 ab 91 2b 45 e4 91 7e 38 cf 81 21 5a 8b ca bb 19 51 70 0b 35 77 d8 9c c7 63 ae f8 18 e8 32 5e fc ee 55 00 cc bb e2 c3 20 af b0 fc ae ab 52 db cf 40 d8 c3 f2 d4 f6 63 af bc 0a a3 17 11 f8 cf 74 7d 92 03 c7 53 f3 df 2a de b3 76 5e 1e de 7e d4 71 9f 29 7b e9 df df 06 50 88 ec 98 1b bb 5f 95 f7 a6 8a 07 63 6a 9f ff 46 7f d9 32 c4 e8 2a ae 9d 9d 33 07 6e 08 bc 4e f4 fa 66 68 17 65 47 df d2 38 7f cc a2 a6 a2 31 8b 9a c4 18 53 8d f0 47 5b 94 52 3c be ba 63 71 f9 ab bb 6e 1d 97 53 54 02 23 d7 19 e3 8d c8 b5 7d 3f 31 c0 75 22 92 2b 21 ba a7 7d f3 cd 4d 59 cb 95 aa 3a f4 52 33 82 c8 af 00 68 09 ae cf 58 db 8a 78 b9 5b fa 3b 7a 86 58 0c 1f 00 4d f0 f2 b7 5e ee 2f 33 cb 56 3e ff 0f 44 d3 0f cc 88 1a f3 ad 6d 73 62 6d db e6 Data Ascii: f7%u?r.2+E~8!ZQp5wc2^U R@ct}Sv^~q){P_cjF23nNfheG81SG[R<cqnST#}?1u"+!}MY:R3hXx[;zXM^/3V>Dmsbm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49978	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	622	OUT	GET /-/media/images/homepage%20carousel/from-complex-to-possible.png?h=420&iar=0&w=1230&hash=980BED648303F4AA5BC7BDCF211C2315 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	876	IN	HTTP/1.1 200 OK Connection: close Content-Length: 631619 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="from-complex-to-possible.png" Content-Type: image/png Etag: "OhhpLyS8hYjVLJonWDxNU2BIJtkeJr74AEMbZ7z2v0g" Fastly-Io-Info: ifsz=716107 idim=1230x420 ifmt=png ofsz=631619 odim=1230x420 ofmt=png Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120034-DFW, cache-pdk-kfty2130030-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460565.191674,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 ce 00 00 01 a4 08 02 00 00 00 46 bc fe 99 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c 64 bd d9 92 24 49 92 24 c6 2c 6a e6 47 1c 79 56 55 77 cf cc ce d2 ce 60 09 f8 48 bc e3 09 ff b5 0f 20 5a c2 03 08 04 10 e1 98 5d 4c 57 67 55 e5 19 11 7e 98 a9 08 e3 41 44 cd 63 80 6c aa ae ac 4c 0f 73 33 55 51 11 66 96 c3 f8 df ff 8f ff 03 04 10 92 04 90 90 04 40 02 00 03 44 12 20 11 02 21 17 58 9f a4 19 df bf 79 fb ee ed 5b 08 12 fe f8 fc c7 f7 e7 27 02 34 e6 af bc 08 50 d7 24 00 e6 ff 88 f1 8b 92 48 4a 1a f7 00 00 51 9f 26 f3 ee 40 50 14 6e ff 1b 3f 4e 0a 34 ab 1b 26 ea 2f 15 db 57 02 02 49 82 34 e4 4f 4a 00 a2 7e 0f 70 fc 98 b6 7b 05 5e fd 74 7d 11 09 82 01 34 23 00 6b d3 3f fe e5 ef 49 Data Ascii: PNGIHDRFsRGB IDATxd$I$,jGyVUw`H Z]LWgU~ADclLs3UQf@D !Xy['4P$HJQ&@Pn?N4&/WI4OJ~p{^t}4#k?I
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 74 f3 22 79 bb d9 84 2a 8c 53 5f 35 75 25 71 9a 06 2d 42 e7 94 ba a1 3f 01 6f 9b 6d db 54 13 8e dd f5 1a eb 58 c7 ea e5 f9 db d0 0d fb dd ee b0 3f 34 75 15 62 58 20 8d d7 ae 12 c8 a8 31 05 63 1d 01 b5 b1 14 9b 00 00 20 00 49 44 41 54 23 a3 50 8c 00 4a 58 83 8a 98 13 92 78 47 29 a0 4a 01 91 8e 90 05 ef c1 21 c4 2c 86 2d 35 f5 ad 99 18 b3 df 68 3f 17 d0 93 80 e6 01 10 d5 2a 88 ce a8 04 10 34 9d 0b ab af 06 14 80 ba aa 62 88 00 28 92 37 75 7b 82 93 4b 13 e9 a0 07 b4 c6 18 0f ab 40 8b 4c f4 08 39 39 42 80 cc 19 43 10 94 2c 19 6c 14 00 68 ba e9 f9 f5 a5 0a ef 9b ba d6 16 c0 bb e3 7e 5c 86 cb a5 13 60 c9 c6 90 3b d3 a4 0e d4 a2 38 11 e5 5d b4 17 9c 4c 4d 59 89 59 4d ce 65 0d 16 ed 94 1a fb 63 70 3b 7b f4 81 ca c1 71 e2 94 45 84 11 38 04 42 24 71 e2 56 cf b8 cd Data Ascii: t"yS_5u%q-B?omTX?4ubX 1c IDAT#PJXxG)J!,-5h?4b(7u{K@L99BC,lh~\`;8]LMYYMecp;{qE8B$qV
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 05 87 20 22 56 8b 68 df 43 56 ab a7 f6 92 3e bd ff 10 95 06 54 c0 c6 8e 5f 44 1f 37 6e 37 db 7e 1c 59 32 79 90 0a 2e bc 2c 08 d6 53 66 21 a8 3d 36 b9 31 26 96 5f a4 f5 05 8a cc ad 5e 15 bd 63 d7 d9 80 f5 11 af ab bc fe 59 f9 30 2a 4f bf 6c a3 35 26 07 d2 4c b7 3f 77 bb d6 97 ca bb 00 00 20 00 49 44 41 54 66 c4 48 01 d0 1f b6 45 3b 00 41 7d 04 42 49 06 52 d0 be 9d 8f 4f 4f 44 36 16 e5 d2 5d c6 79 04 53 6a 75 c7 86 58 2a d6 83 0f a9 32 86 be 7c 85 f2 a6 88 2c 56 4e 8c 84 41 35 9f c0 f4 96 7d 47 a2 24 5e 52 4a 79 59 96 29 8d cb 3c 8c 7d d7 33 8b 0a d3 17 cb 45 3e f2 c4 a3 32 28 19 ce db 45 0e 01 eb b6 6e 37 9b b6 dd 84 b6 6d db 5d dd d6 55 15 6f af 56 1f 34 d9 10 35 b0 61 2d 22 18 82 78 8d 3f f8 0e 57 de 80 04 1f 8e f7 c7 ed d6 c9 14 78 3b 9d ae d7 0e 00 90 Data Ascii: "VhCV>T_D7n7~Y2y.,Sf!=61&_^cY0Ol5&L?w IDATfHE;A}BIROOD6]ySjuX2\|,VNA5}G$^RJyY)<}3E>2(En7m]UoV45a-"x?Wx;
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 7f 9b a6 25 2d 75 dd 2a 84 6b da 9e 28 cc d3 a2 6b 37 cd cb eb cb 6b 3f 0c 9c f8 7e 9b 44 38 2d f3 b0 d9 20 85 69 1a 73 4a cc 99 28 ce d3 84 48 c0 b9 6e 9a eb ed 7e 39 5f 40 e4 7e bd c6 80 99 25 65 66 ce ef 1f 1f da b6 b1 6e db ae 6b df 5f df 3e 4e ef 43 db 6f 37 bb 69 5a 72 16 f5 c9 55 21 0e 43 ff f8 f4 b8 2c f3 fb fb 47 ac eb 87 e3 03 06 7b d1 2f d4 00 00 20 00 49 44 41 54 42 84 db 78 bf 8f e3 ae 1b c6 79 fe f5 d7 5f a7 f1 be dd ec e6 79 01 a0 39 27 22 fa fa d3 4f cb 34 7f fb f5 b7 58 c5 71 9a c6 69 da ef 77 18 c2 34 8d c8 bc 2c 4b 6c ea fd c3 51 58 ce a7 77 44 8c 6d 3d 2e b9 1a b6 14 2a 48 b9 aa 1b 57 d2 9b 02 40 7b 29 06 0c 84 04 da 97 02 a9 40 49 70 8f a4 56 24 37 f8 2e 08 c0 24 be 7f 8c c5 d8 a9 22 92 4d e5 52 da 2f 20 51 69 0e ac db 16 04 31 b0 c6 Data Ascii: %-uk(k7k?~D8- isJ(Hn~9_@~%efnk_>NCo7iZrU!C,G{/ IDATBxy_y9'"O4Xqiw4,KlQXwDm=.HW@{)@IpV$7.$"MR/ Qi1
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 40 44 7a 7d 7e 52 e3 c6 02 df 4f 1f 6b c0 e2 31 47 55 4a 60 47 ff a9 d4 90 3e 2c ac 6b 07 47 07 ee 5c 35 1c bb be 8d 1c 64 1b 2a 28 a4 08 f4 4c 15 20 0a 25 2e e5 d0 f6 21 df 58 c0 ef ca d9 84 6f 53 71 22 40 e1 10 05 bd 1b 0b c0 97 e3 31 86 a8 18 f3 72 bd cc f3 02 7e 60 34 c3 5a 51 bc 17 62 a1 53 4b 0f 71 b8 6c 62 59 60 57 a3 8a 16 64 25 ac 86 a7 f5 b9 08 3d 87 99 2c 49 41 c4 03 90 9a 27 b6 f2 2e 40 94 ec 3c 87 4e 48 6f 1c 00 00 20 00 49 44 41 54 5d 64 cb 12 03 96 41 3d 4e 89 d7 1f fc 7b 75 45 9d 2e 22 e2 db f3 b3 67 47 c3 fb f9 9d 39 db ee 92 a0 c7 41 8d d4 80 93 63 67 75 b8 aa 00 0d 85 18 8f 62 b1 04 30 f6 f7 eb c1 34 81 2d fc cd b0 ba ed 56 91 1a 29 df e3 48 5e d7 b8 f0 51 58 cf 88 c9 a4 e6 a7 fd fe 2c fa 97 78 48 74 15 20 00 04 38 ec f6 4d d3 e8 11 e8 Data Ascii: @Dz}~ROk1GUJ`G>,kG\5d*(L %.!XoSq"@1r~`4ZQbSKqlbY`Wd%=,IA'.@<NHo IDAT]dA=N{uE."gG9Acgub04-V)H^QX,xHt 8M
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 26 50 08 88 12 63 a5 2f 5c 95 67 75 bb 86 18 c4 9a 66 35 2a 2c 48 f4 ed e5 05 d0 fa 31 2e fd 65 98 26 a5 c4 2a ca a7 db 52 75 21 04 84 dc 91 23 90 8f 83 16 9d 5b 63 d3 2f cd ac e9 0e 34 4c a3 90 04 3d b4 04 84 49 ac f5 dd b6 86 9b 48 60 c3 4c ec ef 2d 38 24 2c 9e 8b c5 7c a7 68 6c c3 2e 85 a2 c2 cb 52 b6 73 b9 19 bc fe e5 7a 10 04 c0 f4 c3 74 c3 09 a0 18 22 f1 91 7a 80 c8 8c 44 81 c2 b7 2f cf 01 23 51 50 fd b3 f3 70 39 9c 8e 1a 89 b1 0f 11 b6 9d 72 3d 73 ee 04 83 1a 1d 05 24 a2 95 cc ac ce b7 00 00 20 00 49 44 41 54 c2 05 1b 68 7e 00 3d 80 81 a6 b1 67 8d a3 a1 98 17 c4 50 8e 1f 01 10 08 73 ca 4b 55 37 48 51 51 96 ef 5c 2a 76 58 10 08 91 e7 35 cd f3 72 3a 1f 5f bf 1f 3f 0f e7 8f e3 e9 fd 7d 1c 2e d3 b2 4c d3 2c 00 44 61 d3 b6 db 6e 2b 00 cb 34 6f ef bb 87 Data Ascii: &Pc/\guf5,H1.e&Ru!#[c/4L=IH`L-8$,\|hl.Rszt"zD/#QPp9r=s$ IDATh~=gPsKU7HQQ\*vX5r:_?}.L,Dan+4o
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 8e e3 6e bf 3f 9c 8e bf 7f fe 0c 88 9f 3e 7d dc 0c ab 65 9e 10 b1 6f 9b 55 d7 af 86 d5 66 bd 5a 77 1d 08 70 e1 c3 f1 7c 1d af 43 df a7 b4 b0 9d 5b 66 2f 89 a8 28 e9 25 ca 85 8b fa 9e 18 1a 0f 83 71 e1 52 12 12 2c f3 32 4d d3 e3 f3 47 0d 49 35 4d fc f8 d3 af af a7 2b 83 f4 ab 55 ec 5a 96 82 14 40 b0 e4 14 da 78 17 55 11 22 d0 dc 6f d1 82 34 1a 6c 42 32 cf 8e 01 2b cf bc 70 d7 8c 29 05 44 54 f7 08 a2 7e e9 1b 13 33 77 8e d1 7b 11 2e a4 2d 6d d5 d4 b3 21 38 df 87 a6 34 d3 82 9d 6e 30 84 45 22 59 6b a6 10 62 df c4 2e b6 6d 34 e5 ac 56 d5 09 56 11 5c 4f 6a f1 0e 35 d5 00 00 20 00 49 44 41 54 2d e1 7d 03 46 7a 37 39 e5 ae eb d0 51 8d b0 e8 68 97 52 b8 70 4a 69 9a 97 f3 f9 fd c7 f7 3f be 7d 79 1b 17 a6 10 c4 1d 4c 80 10 34 fb d2 0e 23 f4 a7 34 ec 84 ae 13 34 66 Data Ascii: n?>}eoUfZwp\|C[f/(%qR,2MGI5M+UZ@xU"o4lB2+p)DT~3w{.-m!84n0E"Ykb.m4VV\Oj5 IDAT-}Fz79QhRpJi?}yL4#44f
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: cd 72 74 88 a6 cc 7f c4 a4 44 26 30 28 26 20 50 f6 3a 09 b0 1e 17 ca cd 94 3b 58 b6 24 c7 0e dc 2d a5 e7 37 0e 3a 59 3c d2 38 69 66 56 7c 50 db f2 73 e1 ac 47 15 30 8e 0e c8 27 b7 48 95 22 64 b5 b0 cb 69 cc 4d 11 01 50 5a b0 24 ab 17 f3 80 68 27 d9 55 36 90 0b 2c 9f 22 26 3a 6e 51 6c 0b 05 01 6e 8c b2 6f 03 16 37 e7 65 7b 37 1f 4c cd eb bb 8d 13 5e 99 64 dc d9 d6 7a 66 e3 75 22 e3 0a 53 31 b4 71 1c 9a 4b a1 a8 4e 97 8b b9 3e 39 20 7e 94 5a f9 27 f8 dd 6d 60 18 f6 7d 37 01 23 04 88 ea 1b 8d 2a 46 44 55 f1 b7 01 ef f5 97 01 6c 75 c1 a7 b9 16 1a 99 4c 54 41 0c 99 a3 a0 07 19 50 c1 7f 42 c9 bd df 10 81 88 aa 54 46 62 42 4f 24 96 fd fa 9d 00 00 20 00 49 44 41 54 22 39 07 2e 44 f1 ed 5e 7b 48 85 40 0c c3 a6 16 c0 6b 78 00 4a 17 6d c4 99 c9 d9 60 df 75 e3 b0 b2 Data Ascii: rtD&0(& P:;X$-7:Y<8ifV\|PsG0'H"diMPZ$h'U6,"&:nQlno7e{7L^dzfu"S1qKN>9 ~Z'm`}7#*FDUluLTAPBTFbBO$ IDAT"9.D^{H@kxJm`u
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 75 b9 de dc 0e fd a6 eb 4b 57 90 19 10 09 bd f7 22 b9 0f 3e 3a fe ce 3d ca 7c 75 7b d8 91 22 61 6b 43 bd 50 c0 01 f0 0d 90 d4 ab 4a 4d 21 8e 14 40 af 69 d4 34 73 8a 20 16 cd cc 04 10 48 6d de ed f6 2f 9e 3f 07 00 a2 72 75 75 b3 df 9f 21 cf bc 30 d0 47 8b 0a 0e 11 66 42 62 a9 42 a5 c4 dc 30 20 30 20 36 30 70 cf 58 22 20 88 f4 23 31 52 68 b4 dc 71 c0 8f 69 11 89 b3 0f c0 f3 cf ed e8 f2 f3 4e 4c c3 f5 40 15 98 22 1e 33 75 78 a4 8e 48 4b 01 80 92 d5 fe d0 6a f0 c0 4c 01 7e 7a f7 f3 7a b5 1a a7 69 9a e7 c6 56 53 03 07 2d 82 8a 74 04 c6 91 d1 72 35 76 09 4d e3 a7 19 50 36 48 bb 44 a6 dc a4 aa 01 33 ec 32 4a b3 16 c4 79 fc d3 f8 99 a0 f6 33 07 e2 28 52 3c 60 fb 45 9c 17 07 79 8b 9b 93 46 76 74 13 33 ba d7 9f d6 00 00 20 00 49 44 41 54 da 80 b9 6b 78 76 ae b3 07 Data Ascii: uKW">:=\|u{"akCPJM!@i4s Hm/?ruu!0GfBbB0 0 60pX" #1RhqiNL@"3uxHKjL~zziVS-tr5vMP6HD32Jy3(R<`EyFvt3 IDATkxv
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 62 21 d0 66 9a ce cb 7a 3e 2f bb dd 16 6a ad b5 fb bb 1b 61 71 f3 65 5d 8f 4b 77 90 f5 d5 ba 02 31 3c 49 97 a5 ab f9 88 74 67 b3 86 a0 62 6e 8d f2 26 dc 48 63 69 77 9b 4d 9b 9a 3c de 75 ed ef df bc 6f d3 44 22 8d d8 dc 97 f3 39 62 7f d1 a9 c8 b3 65 60 9d c7 f8 4c d5 b8 80 e2 ba 33 8f de 4b 15 91 c7 00 8b 14 ad 53 e2 2e 29 dc 0c 1a 3f 53 97 76 fe ad e0 a2 a9 ba 47 74 ae da cc d3 b6 cd ad b5 8d cc ad c9 d4 a6 26 dc a4 95 2f e5 72 26 59 97 91 f7 78 24 86 90 d1 ab 54 ae e6 6d 1a 4e 29 47 41 46 8f 80 69 9e 5a 6b 4d 98 59 8c c8 9d 9b c8 d4 da dc a6 d6 da 3c 4f 22 b2 99 37 ad cd 93 4c 9b 79 9a 78 da 4c f3 66 9a a7 36 6d e6 69 6e 73 9b 26 99 a7 36 6f 36 f3 66 b7 99 76 db 69 9a e3 13 c9 b4 f0 c8 05 54 73 84 27 d3 37 27 91 cd bb 31 40 b3 7b 4e 51 8f 7f 59 dc af e9 Data Ascii: b!fz>/jaqe]Kw1<Itgbn&HciwM<uoD"9be`L3KS.)?SvGt&/r&Yx$TmN)GAFiZkMY<O"7LyxLf6mins&6o6fviTs'7'1@{NQY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49979	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	623	OUT	GET /-/media/images/financial%20services/celent%20tile%20img%20jpg.jpg?h=170&iar=0&w=270&hash=5C83B7E104E9151B0581F8CD10EA72E0 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	869	IN	HTTP/1.1 200 OK Connection: close Content-Length: 15611 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Celent tile img jpg.jpg" Content-Type: image/jpeg Etag: "Qc+EwILxpt8EpsHRoccBkKD6/03cV0afhy3RYtH0kjw" Fastly-Io-Info: ifsz=19668 idim=270x170 ifmt=jpeg ofsz=15611 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010213 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120128-DFW, cache-pdk-kfty2130068-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460565.196303,VS0,VE24 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c9 2c 30 af de ac 57 be e1 7f db 43 f2 72 a3 66 48 90 e4 b4 d6 c5 8b 1f 45 18 5d 8f d4 54 d8 1d c1 e6 f5 42 6c d9 36 15 46 55 16 09 2a 01 b3 57 7f 4d 58 ff 00 1a 86 39 3a 5f fc 17 2f 29 33 66 1d 44 64 7a 69 0a c6 d4 56 a8 82 c1 78 0c 09 e6 eb 5d e3 12 7a 57 89 7f e9 68 8b 51 b0 b1 25 b1 f4 fa 4f 63 c8 51 39 71 84 1a 65 00 c3 26 fd c6 39 14 82 18 00 00 6a ef 5c 69 e3 a7 ec eb 53 0c 9c cc a9 7d 57 20 3b a3 04 ec 28 50 1e da ca cb 66 af a0 be 98 97 ea f5 29 09 05 94 0e 63 ef 42 81 fd 47 9b d1 5f 87 a7 ca 93 31 11 51 d5 0b 87 32 04 24 2a 03 4c c4 77 01 7f 98 9e 06 b3 de d6 32 60 6e cc 6b a5 d3 69 b4 ce 6c 61 8c 7d 67 e8 0e 9b d0 1a 5c 66 97 1b ab e6 a3 a7 76 f5 58 c7 6c 09 03 63 16 07 8e 01 1c 13 a6 6e a9 26 6e 04 58 f2 b6 61 c9 69 00 55 89 a2 56 6b 51 66 82 Data Ascii: ,0WCrfHE]TBl6FUWMX9:_/)3fDdziVx]zWhQ%OcQ9qe&9j\iS}W ;(Pf)cBG_1Q2$Lw2`nkila}g\fvXlcn&nXaiUVkQf
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 61 0e 46 e0 56 f9 fa 24 34 3b a8 ec 07 23 47 7a 6e 7f 51 e9 2d 98 30 b2 c6 e9 d4 45 31 00 1e 49 b0 c4 5b 04 51 cd 90 2f f3 a1 6b 10 1f 2a b2 30 0b 4d 8e 79 60 01 bf a4 20 3b bf a9 d1 08 71 9a 50 16 45 e5 c0 8a 44 3b 64 21 97 b3 3b 02 09 3f e3 5c 32 3d d2 5a b4 75 da e3 20 cb fd 16 53 89 93 14 9b 63 05 1c aa 37 0a 91 c8 df aa 34 5b 5d c5 bd bb 1d 7e 8f f8 7b 1a 28 fa 7e 1c cb 1b b4 b9 10 92 01 a6 c9 96 32 68 a1 76 a0 bb 49 be 1a c0 d7 e7 bc 2a 2f 19 67 db ea 30 8d 9c da b0 91 7f 48 40 41 1f 93 df 5a 97 41 eb 19 d8 30 a6 3c 71 8d 93 3b 4c 90 59 56 69 94 7d 41 9d 49 00 30 ee 0f 07 ed a1 59 56 e1 c4 2a f4 82 a1 b8 f6 c7 cc d8 97 1e 46 54 2a a4 30 f5 52 33 e9 c7 ea 11 f4 c9 2b 36 d2 fb 87 d2 c3 9d 0c 39 28 10 85 3f c3 50 43 95 fe 0c 31 aa 9a 20 b0 a6 62 87 b8 Data Ascii: aFV$4;#GznQ-0E1I[Q/k0My` ;qPED;d!;?\2=Zu Sc74[]~{(~2hvI/g0H@AZA0<q;LYVi}AI0YVFT0R3+69(?PC1 b
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 7e 88 b9 10 65 4e dd 42 5e 65 58 88 d8 02 13 4a 9e 45 f9 3a a1 16 37 ac a6 d1 40 95 37 88 9d 00 01 87 f3 b3 2d 59 fb 68 88 87 d0 56 32 4a 8b 1a 3b 14 3b 42 04 52 6c 28 d4 d0 24 51 a8 48 52 94 12 c7 92 db af c9 b3 ff 00 e6 87 9e 71 2d 5a 14 24 33 e7 13 c8 37 cc db e1 90 01 22 2b 7a ca c1 d1 64 8f ba aa 91 fd c6 b4 de 8d 3c 43 16 35 d8 a8 08 f5 2a b6 33 16 20 b6 ea 3c d9 ae fd f5 9a ac 25 41 3b 63 92 48 5b 7c 28 0f a6 55 58 f3 c7 03 fa e9 83 1f aa c8 8d 91 8f e9 b0 43 e9 b1 91 94 15 65 ff 00 ea 7f cd f9 d4 36 47 69 76 4d c7 86 8c d3 e4 c5 06 44 91 22 a4 cd 18 33 43 00 fe 12 ac 64 ed 62 58 7d 24 df bf 3a 17 99 9a 91 b3 2a cf f5 aa ec 93 29 d4 28 17 cc 46 31 fa 5a 8f 16 28 e8 0e 5f 54 95 56 56 95 59 20 8d 85 85 a9 04 c1 8e d2 08 ae 07 8e 7c 68 46 56 43 ca e5 Data Ascii: ~eNB^eXJE:7@7-YhV2J;;BRl($QHRq-Z$37"+zd<C53 <%A;cH[\|(UXCe6GivMD"3CdbX}$:)(F1Z(_TVVY \|hFVC
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 9d 88 1c df 9a d3 07 45 f8 76 7c d9 71 dd e0 fa e4 8d e3 79 a3 6a 11 a8 ec 00 36 39 d5 1c 85 28 a4 ee 20 fd f8 fd 81 35 a7 6e 91 9d 8f 16 1a fa aa f7 13 07 0b 1f ea 3e c2 bd bd f5 a7 4f 86 3c c5 bf 13 b6 ea eb 4d 87 83 29 e5 74 1c 54 e9 ec ef 96 63 50 0c 45 25 50 5a 62 45 55 9e 6c 7b 0e c6 f4 92 ac 63 6c 73 2c 73 46 c0 98 d6 35 6d eb cf 62 de fc fb eb 4c eb 7d 52 07 8e 78 84 c9 2c d4 b3 43 0c d1 d7 a5 cd 12 48 ab 20 76 1d c6 80 74 7f 87 e1 ea 31 67 e4 99 65 c5 59 17 d4 33 28 de 96 87 90 3b d0 af df 56 b5 01 82 f8 7e a1 d2 bb 0d ae c5 3d b0 26 2f 4d c9 ea cb 9a 31 65 4f e0 23 ef 65 60 36 85 f6 04 f2 47 b7 8d 07 48 04 d1 b8 57 14 e0 87 95 06 c9 5d d3 b0 04 f7 14 2b 47 ba b7 4e 6e 9f 93 3c 6a 43 e3 3a 24 d1 bc 2b b2 59 01 1e 57 c9 bb 15 df 43 f2 5a 47 99 98 Data Ascii: Ev\|qyj69( 5n>O<M)tTcPE%PZbEUl{cls,sF5mbL}Rx,CH vt1geY3(;V~=&/M1eO#e`6GHW]+GNn<jC:$+YWCZG
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c7 58 c9 57 60 c6 c9 60 39 a1 c7 8b ad 4a 8c 0c 6e 80 aa ea 8d 9c b3 64 f1 f4 c4 59 69 d8 c3 85 20 9d e2 de a6 34 86 44 da 4b 03 41 89 1f 7f f2 35 3f 4e 83 37 23 2b 16 10 42 4d 22 36 f9 15 8a ac 6a 05 df 24 f3 5a af 90 5e 37 9d 16 75 f5 a2 90 bb 19 6e 91 59 6c 0b 3e 79 f3 e3 5f 49 13 ce 92 2f a6 f1 46 1a 39 23 95 1a cc 80 d9 34 2b 91 67 fc 6b b2 54 e6 6b b1 43 a6 d6 19 fd 30 ff 00 5a 83 07 15 70 17 13 ab a6 4c 2c 24 8f 20 cc df 5e e6 16 a1 4d 03 4c 49 ab e7 8d 47 d1 fe 21 9f a2 c7 0a 95 f4 e1 59 ca 2c 05 8b 2b b3 0a dc 6b bf e4 fd f4 b3 33 33 4d 3a 30 8e 66 a5 78 61 e0 30 b1 4c 7b 79 f3 7a eb 7c 88 72 44 72 c9 14 8e 82 43 23 d1 44 09 dc 02 78 07 56 2c 5b 99 4a f4 e8 b5 8a db 90 63 5e 5e 48 ea b9 c7 2a 56 56 99 2d 46 c2 40 8d 48 aa 02 fb 81 7c fd f4 21 50 Data Ascii: XW``9JndYi 4DKA5?N7#+BM"6j$Z^7unYl>y_I/F9#4+gkTkC0ZpL,$ ^MLIG!Y,+k33M:0fxa0L{yz\|rDrC#DxV,[Jc^^H*VV-F@H\|!P
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: e4 1c 73 8e dc 2b 4c a2 c1 3b af b5 d2 d6 85 ce a7 e1 be aa f8 e7 6c 8b 24 61 a4 96 37 da 57 69 a0 85 4f 1b a8 72 07 7d 5e aa b6 ae 66 17 b5 2c 5b 6b 07 ac 4d e2 26 8b 15 31 e3 33 64 24 31 4c f0 91 32 16 f5 cb 9b 06 c7 14 28 f3 e7 42 3a bc 6b 2e 3d 3e c9 65 d9 24 19 13 44 fb 4c 62 ac 50 14 2f db cd 8d 2d e1 7c 69 0c 91 e3 af cc 4f 04 92 c0 55 15 d7 70 4f 4c d9 24 35 9e c3 e9 3e e7 42 3a c7 5b 8f a8 a1 59 26 8b d3 74 13 42 76 b4 6f 2c 88 28 90 aa 39 27 93 ed 55 aa 2d 4c ad 93 02 a7 3b 10 a6 22 56 4b 2b 18 41 9d be 5e da 20 92 a0 25 d8 55 12 54 1a e4 8e fe 78 d4 f3 67 e4 ce 3a 52 65 44 d7 0c 06 18 d2 35 01 11 07 02 eb 9b aa e4 eb c8 f1 33 b3 17 36 58 62 f5 5a 10 27 90 4b ca 42 08 b2 01 e4 d8 1e 47 71 a1 d2 a8 8a 2c 96 44 78 b1 8b ac e2 45 7b f5 4b 8a 24 06 Data Ascii: s+L;l$a7WiOr}^f,[kM&13d$1L2(B:k.=>e$DLbP/-\|iOUpOL$5>B:[Y&tBvo,(9'U-L;"VK+A^ %UTxg:ReD536XbZ'KBGq,DxE{K$
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 78 3d b5 c1 eb 38 79 78 5d 5d f2 b0 fe 63 a9 64 92 d1 4c 84 04 23 8b 00 1b 2b 46 f9 02 eb 4b 79 19 2e ab 62 59 12 d4 cc 4b 25 85 5f e6 1e 68 9f 6e fa 89 36 16 c7 78 96 03 b4 09 23 51 6b b6 36 e1 89 06 ae c0 be 75 b1 58 f6 98 df 4f 53 75 32 f2 79 e3 8e 44 b8 1e 45 5d fb b2 10 2c 8a ee 5b 95 00 d0 28 09 a0 05 9f c5 0d 1a 6e a9 95 96 90 26 4e 64 72 8c 60 11 0b 46 50 c7 04 80 0d 8a 55 45 9a a1 cf 3a 0f 14 22 32 1a 08 a5 58 e1 90 08 c2 ca 08 68 e5 06 98 90 39 af 1f 7d 5d 5b ad 84 c8 41 63 00 f5 62 12 06 24 f0 c4 93 64 02 6c 5f 3c 0d 50 9c 9c 09 a1 6b 53 b0 ed 84 a1 c8 9f 0b 19 62 47 92 1c 79 64 30 34 08 c1 c3 c6 e0 9b 7a 22 81 36 7d f5 5a 21 2b 32 95 8e 37 97 63 41 23 c4 40 58 d5 7b 0a fd fb 6a bb 92 c9 21 2c e0 ca 8b be 40 4a c8 f2 46 2e 95 49 a1 63 db df 5c Data Ascii: x=8yx]]cdL#+FKy.bYK%_hn6x#Qk6uXOSu2yDE],[(n&Ndr`FPUE:"2Xh9}][Acb$dl_<PkSbGyd04z"6}Z!+27cA#@X{j!,@JF.Ic\
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: aa 0b 9d 34 4d 1f cb 38 61 8e 4a c6 ab 29 8c b3 df 20 06 e4 79 db 5d b4 cd 59 42 76 98 09 7b 2d d8 0f 92 19 cd e9 ed 83 94 d8 19 d0 e2 62 64 63 01 06 47 d5 20 de 8d f5 a1 04 5a 9e 3b d7 80 2f 5d e3 f4 ec 8c 8e 9b 9d 98 a6 35 58 8c 71 4c 16 70 24 12 7e 95 54 e1 ac 93 40 fd 8e a9 65 4d 3f 57 ea 3d 46 59 24 65 69 62 fa 3d 69 8c be a1 55 dc 00 2c 49 25 48 a5 07 b9 ae da a6 d2 4f 30 01 8b 6f f5 11 56 4f 96 56 21 94 de fb 1d c1 3c 82 79 03 43 52 40 84 fc cc 2a 87 c1 85 26 ca c7 12 3c d0 16 54 dc 1d 0c 92 2c a5 40 34 51 08 00 0e 79 b1 ed a8 63 11 ab 18 97 7e c4 32 28 8c 72 19 24 17 b9 ec f1 43 f5 0f 07 51 7a 8d 22 a3 3f ab 12 96 6b 91 90 2a ac 7f a4 21 3c 6d 15 60 1f bf 8d 71 68 b2 cb 10 02 5d af 11 1d 81 8c 81 7b af 8d e6 bc 78 1a bf 98 e0 c2 a8 01 78 69 67 a6 Data Ascii: 4M8aJ) y]YBv{-bdcG Z;/]5XqLp$~T@eM?W=FY$eib=iU,I%HO0oVOV!<yCR@&<T,@4Qyc~2(r$CQz"?k!<m`qh]{xxig
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 91 bd 44 dc 5a 45 16 00 34 7e ab f1 a3 32 f4 94 4e 86 bd 59 f2 23 e3 21 62 4c 75 4d ce c4 0a 24 6e 3c b5 9d d5 d8 5e 96 e1 8e 36 75 32 94 01 1b d4 76 65 70 43 f8 6b 1d c1 f2 74 6a c1 0b 20 5b 5b ef d8 7b 36 1b ee 21 48 0c 70 b8 62 37 b4 4c 2c 34 56 a5 9f b9 b0 6c 83 ed d8 e8 b7 56 9f 17 a9 64 1c 98 f0 31 f0 d4 a0 82 28 92 37 08 59 bf 51 24 05 15 56 2e af b6 85 4e 71 20 ca 99 f1 4b 24 30 15 91 44 a5 8b 2b c9 d8 9a 5a 23 ef f9 d1 d4 e9 70 27 40 7c e4 cd 8a 39 b1 f2 fe 5d a3 69 5c 31 69 00 20 05 00 13 5c fd 57 7a 36 48 95 c2 b3 2d 87 76 7f f6 51 79 9a 68 22 4b 1f 2d 09 31 a3 6c 66 db 18 6d e4 38 6e e0 9f dc 9d 46 16 36 8c 3b cc a0 8d f3 85 6e 54 92 76 80 8c 7e fe fa 98 19 1a 1c 88 03 ec 05 d2 34 56 50 1c 6c 34 4a 96 e4 a9 07 bf b6 b9 8e 3c 79 21 92 53 2d 34 Data Ascii: DZE4~2NY#!bLuM$n<^6u2vepCktj [[{6!Hpb7L,4VlVd1(7YQ$V.Nq K$0D+Z#p'@\|9]i\1i \Wz6H-vQyh"K-1lfm8nF6;nTv~4VPl4J<y!S-4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49981	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	646	OUT	GET /-/media/images/financial%20services/payment%20trends%202024_tile-image-270x170%20jpg.jpg?h=170&iar=0&w=270&hash=31A1E0E0236BBF7A98DD735B10DDF8E6 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	890	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18550 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Payment Trends 2024_Tile-Image-270x170 jpg.jpg" Content-Type: image/jpeg Etag: "yDt/ZknH/NL/GSqyUhCZejddYNugRhrJe8jOpsMjnl4" Fastly-Io-Info: ifsz=27339 idim=270x170 ifmt=jpeg ofsz=18550 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120116-DFW, cache-pdk-kfty2130051-PDK X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1713460565.366327,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 1f 18 66 39 95 6e 49 92 c0 5a 45 a3 cb e5 65 8c 0a 69 21 42 64 5b 09 1d 9e da a4 60 b6 3b 71 80 d4 23 27 ca 2a 19 e9 fc 4d 34 52 db 49 48 2e 80 8e e1 e4 dc 6f ec 08 c3 ee 7f e1 5c c2 9b c2 4b e2 3a aa aa 2a 9a 6a 94 59 d2 99 a4 a8 69 24 50 c1 43 5f 52 e9 0b 7e df 5c 4c de ca e3 18 8f e9 aa 78 52 84 e5 8c 1d 88 31 19 e4 6b 12 55 66 d5 6d 87 36 bd b8 f4 bf 38 69 a0 a5 a6 4f 0e 2d 72 d7 81 5b f1 92 42 94 fd 36 2e 16 35 57 ba b2 91 60 da 8d ef e9 b6 2a d3 fe e4 a8 5d 52 51 cd 46 74 dc 49 0b 99 91 6d b5 cc 72 1b 90 09 ec d8 ab 55 95 d4 65 f0 ad 64 32 a5 45 29 6d 29 57 01 25 03 1f ca c0 80 51 8f f2 b0 17 c5 03 6d 22 3b d7 2c 6f ce bb 5a b4 8e 5f 95 05 cb 6e 39 b9 de c7 73 b6 f8 d3 33 9f 10 65 f9 9f 87 d8 45 28 49 0c 2a af 11 62 4f 51 4a 9f 28 db 63 6c 64 96 62 Data Ascii: f9nIZEei!Bd[`;q#'M4RIH.o\K:jYi$PC_R~\LxR1kUfm68iO-r[B6.5W`]RQFtImrUed2E)m)W%Qm";,oZ_n9s3eE(IbOQJ(cldb
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 6f ff 00 9f ae 3a aa a7 ce ab 22 ea 57 55 5a 21 b2 2b 38 48 c7 b2 22 d8 00 3d 85 b1 1f 85 32 f8 b3 7c ef 2f cb 26 cc 45 0c 75 92 88 1a a2 da 82 ea 3b 6a 17 5b 82 7d f0 ed e2 ff 00 07 55 78 39 fe 1a 5a 5a b9 21 dc 1a c1 22 34 64 1f 2f 95 54 10 09 be d7 3f 4c 45 9c 5b 70 09 05 8e d3 bf b5 75 5b b2 2e a3 10 18 69 39 20 48 1d ea 0c a7 c4 b9 ae 43 e1 2c fe 1a 69 c0 8e 5a aa 4a 45 e9 9d 4a 43 07 95 fe fe 51 8c f7 f7 8d 5a bb 3c 73 ba 5f 90 0d 94 df d4 70 46 1c e5 34 52 f8 16 b8 ae d2 8c f2 26 16 88 29 37 81 fc ad a4 d8 01 f4 c6 7f c3 7f 4f d3 7c 52 db 6b 0c 48 e7 b1 a8 dd 4f 0d 82 cc c0 dc 55 b9 67 4a 8d 5a a0 58 c9 fc f1 8b 0f f3 01 61 fa 5b 05 73 ac b2 af c3 cf 05 27 c7 53 4f f1 14 d1 ca 64 a7 94 38 d3 20 be 86 23 82 3b 8f d7 02 02 c4 cb a8 a9 f6 b1 da fd ee Data Ascii: o:"WUZ!+8H"=2\|/&Eu;j[}Ux9ZZ!"4d/T?LE[pu[.i9 HC,iZJEJCQZ<s_pF4R&)7O\|RkHOUgJZXa[s'SOd8 #;
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 04 ed 18 ac 78 97 74 50 f2 48 11 a8 18 24 72 06 ad 54 7e f2 85 96 19 da 75 b5 ca 06 2c 07 1b db 7c 46 90 d4 36 96 69 6c 1b 82 d2 73 ff 00 9b 63 99 2a 16 58 96 32 cc 02 b9 23 61 f9 b9 df ed 8a ed a9 1a df 37 9b df 6f d0 e1 fd aa 04 93 cc c7 ad 5a 78 e5 46 d1 e5 dd 46 e1 ae 05 fb 92 09 be 0e e5 d5 74 34 b0 cf 11 a9 a8 08 66 24 35 98 6a 00 58 1b 29 db 0b 1d 66 55 db 9d 3d f1 dc 35 95 30 ae 95 62 57 b0 e4 0c 10 44 8a 53 b4 55 32 8c bc ff 00 bf fe 31 76 86 59 61 97 54 32 15 72 08 be c3 df 9c 51 21 95 ac 76 38 e9 43 9f 95 58 e1 2b 56 cd e1 af da 01 cb ba bf 19 47 2a 4a dd 38 ba b0 d4 b4 62 66 dc 13 3e a0 e4 80 0f 6b 00 71 99 67 94 11 e5 f9 ae 63 4b 15 4c 55 11 c7 31 d1 2c 52 07 46 56 f3 02 1b be c7 f5 c5 bc ef c4 3f be 68 b2 7a 61 97 52 d2 fc 04 1d 2d 70 ad 9a Data Ascii: xtPH$rT~u,\|F6ilscX2#a7oZxFFt4f$5jX)fU=50bWDSU21vYaT2rQ!v8CX+VGJ8bf>kqgcKLU1,RFV?hzaR-p
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 32 4d ed b9 d2 a0 61 f6 bf 20 9b 31 a4 a9 cc 72 fa ca 6a 9c c7 a5 fc 5a 17 50 1d b5 01 d7 01 49 00 91 70 e3 6f 31 d5 df 08 d3 d0 d5 a5 2c ed 9a d0 cd 4c 60 01 b5 a5 f4 9b 30 51 6e 41 37 3e fb 63 a9 38 80 41 90 64 63 de bc d7 e1 5b 20 11 99 27 a0 f7 da 90 0e db 63 bb 69 5b 32 b0 3c 8f a1 1b 6d ef 82 cb 95 35 4e b6 a0 9c 4e aa 35 11 c3 81 ee 31 56 2c ba b2 a6 ab e1 a0 a6 76 94 de c8 76 36 1c 92 4d 80 03 b9 e0 60 ea 5c e4 63 7a e6 36 dd 20 95 30 76 3d 7b 55 10 cd c6 3c d6 43 61 89 a3 c9 72 a5 b4 ab fb ca ab d1 58 a5 2a 76 f9 96 cd 21 16 de d6 1e 84 e2 a3 e7 99 81 d4 b0 b4 74 d1 f6 48 22 58 c0 fb a8 b9 fb 9c 0d 44 ec bf 3c 52 e9 8d cd 08 d4 d8 95 3f c4 c5 7e 98 35 97 57 35 5d 6d 2c 59 84 89 24 25 c0 7e a2 82 40 be f6 3b 11 fa e3 48 fd a0 e4 be 08 a0 4c a4 e4 Data Ascii: 2Ma 1rjZPIpo1,L`0QnA7>c8Adc[ 'ci[2<m5NN51V,vv6M`\cz6 0v={U<CarX*v!tH"XD<R?~5W5]m,Y$%~@;HL
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 5b 9b 5f ef 88 dd 65 0c 25 84 81 56 4d 5a 20 6d 33 4b d6 b7 18 e8 6a 5e 36 c6 a5 e2 6f d9 95 67 83 69 a8 ea f3 da 93 0a 54 26 a8 e0 89 43 cc df 62 40 51 ee 4f db 08 2d 5b 45 1f 96 9b 27 8f fe b9 dd a6 73 f6 1a 57 fa 61 35 74 04 d3 01 1c c0 ae b2 fc e6 bb 2d ab a3 9d 25 d5 d0 24 84 6d d5 95 81 0c ad ea 18 6c 46 34 8c b2 aa ae 77 8a 55 ea b5 05 5a 34 94 c4 10 34 18 f6 68 64 d4 34 96 52 6c 3b 91 be 33 49 67 9b cc 66 ca a0 50 00 bd a1 68 ec 0e e0 dd 48 b5 ef 87 4f 02 65 54 f9 f5 74 54 75 6a eb 97 bc ca 1a ec 58 47 20 df 52 8e 40 de c7 eb 89 3d b7 7f 84 15 31 93 bf d2 ba b8 6e 25 6c dd 47 ba a6 e2 03 25 66 27 d2 60 d1 88 f2 ea 2a fa 8a ca 78 20 48 e7 91 19 5e 48 c1 86 50 a4 dc 92 a6 e0 8b 81 c1 27 15 a7 cb e5 8c b6 5b 49 54 8f 4a 58 0a 9e bd d2 a2 40 0e cc c4 Data Ascii: [_e%VMZ m3Kj^6ogiT&Cb@QO-[E'sWa5t-%$mlF4wUZ44hd4Rl;3IgfPhHOeTtTujXG R@=1n%lG%f'`*x H^HP'[ITJX@
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 05 60 05 89 b0 ef 86 ba ca 85 4a 7c 9f 46 af 2c da 83 f6 3a 63 dc 02 3b ed be 15 7e 12 ba 90 cf 58 b4 ae 29 e6 b3 21 20 8b 02 75 69 07 db 05 b3 4a ba 44 8b 2e 58 25 52 8a d3 1f 2e f6 2c 0a f6 e0 9c 5e d9 f2 37 b5 49 d6 4a 08 eb b5 17 2c c9 49 3c 31 cb 79 1e 6a 68 80 d8 81 a7 cc 48 1d c0 b5 fb 63 f4 97 82 b3 c4 f0 f6 4f 4b a2 8e 29 2a a6 88 c5 23 d8 3c 6c d1 dd 49 42 38 d4 7b 6d 7e 71 f9 2f 2e a9 f8 bc d7 a6 b1 29 73 31 90 1d b8 03 81 c1 16 c6 ab 35 64 cf 57 e1 ba 31 3c ca 94 7d 29 ed 1d d1 9d c1 32 12 c0 72 6c 6d 83 f1 0c 6d 58 0d 3b d5 1f 18 c7 5b 9c d5 45 0c b0 4b 05 38 79 24 ea c8 75 c3 22 b1 b8 b9 52 3c a4 f1 e9 84 cc b7 2d 8b c3 f5 cd 4b d5 47 ce 94 9f c4 16 78 a8 cf 01 45 b9 97 7d cf e4 fa e3 54 ce 2b 68 8c 19 65 5a d1 c3 1e 6f 3c 8e d0 05 5b 88 96 Data Ascii: `J\|F,:c;~X)! uiJD.X%R.,^7IJ,I<1yjhHcOK)*#<lIB8{m~q/.)s15dW1<})2rlmmX;[EK8y$u"R<-KGxE}T+heZo<[
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 06 a9 1d 88 1b 02 cd 71 eb 61 c1 c5 9a 8a 38 a1 46 eb d5 74 5d 45 ca 0b 49 21 27 f2 d9 4d 96 c4 6f 73 df 00 b0 14 62 89 e6 61 67 ca 9a 55 f3 00 51 81 dc f7 de c4 da dc f6 18 b5 e1 7c a1 f3 b9 6a 72 f6 ac 4a 5a 28 e3 35 15 f5 2d fd 9d 3c 11 f3 23 5b f3 6f 65 1d c9 b6 2a c3 a6 a3 27 9d 4b 7e 49 07 62 78 b8 e0 1f e9 6c 3b 53 49 16 55 96 37 83 56 54 4c ca aa 14 ac cc dc c4 19 9e 67 17 4a 51 cf f6 4a 43 58 7e 62 7d 31 0e 22 18 28 3d 67 b4 73 ae de 01 ae 25 d3 e1 98 2c 0a ef 13 a8 44 7b d5 6c eb c4 94 35 59 6c 19 67 86 a2 9a 9b 22 a3 21 67 49 07 9e a2 56 be 89 6a 08 be a2 42 9d 8e cb db 09 39 96 6b 51 40 f1 18 25 e9 54 25 8d ac da 94 11 ef b1 07 d3 be 18 fc 29 99 b6 55 2c f9 5e 60 ad fb 92 bd e2 5a d0 63 d7 d2 26 e8 b2 8f 32 8d 64 82 06 a3 60 0d f0 99 e2 7c be Data Ascii: qa8Ft]EI!'MosbagUQ\|jrJZ(5-<#[oe*'K~Ibxl;SIU7VTLgJQJCX~b}1"(=gs%,D{l5Ylg"!gIVjB9kQ@%T%)U,^`Zc&2d`\|
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 49 51 c8 e6 7e 75 d5 ff 00 91 be 5d ee 8d 29 74 99 0f 6c 0b 65 4f a6 98 ab 75 19 96 67 52 ed 34 95 8f a5 89 d9 49 b0 f6 00 71 6c 3a e4 14 14 39 b6 45 98 cc b9 8e 9c ca 9d a3 58 a9 fa 25 cb a3 5c 96 66 6b 85 03 df 0b 29 4f 4b 4f 45 04 d5 d2 b4 b3 10 0a 51 ee a6 dd 99 d8 5f 4a 91 d8 6e 7d b1 51 6b ea 2b 2a 20 a6 79 61 86 00 c7 42 00 52 28 d8 ef ab 4a db 71 ea 6e 70 c2 da 08 d0 8b 03 9f 2f fb ae 77 e2 b8 9b ac 5e e5 fb 8c c4 e4 b3 16 3f 33 53 47 96 b5 0c c8 26 ce 28 e9 ec ff 00 28 95 a4 65 6f 7e 90 60 0f df 07 a3 14 b4 59 ad 1d 7c 79 b5 30 f3 86 71 24 72 2a 0f ca fb 15 37 bd ef 85 ea a8 69 0a b2 75 ff 00 10 6d af f2 6d c1 04 fa e2 78 53 e3 69 36 65 d6 ab aa e4 5c ed b1 e7 b9 b6 28 01 cf 9b 3d 85 73 98 c6 28 d6 69 e1 ca aa 7c c2 aa 34 9d 26 8d 25 2d 18 8d 83 Data Ascii: IQ~u])tleOugR4Iql:9EX%\fk)OKOEQ_Jn}Qk+* yaBR(Jqnp/w^?3SG&((eo~`Y\|y0q$r*7iummxSi6e\(=s(i\|4&%-
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d4 b9 92 cf 2d 5e 6b 12 08 e0 8e 39 63 45 6b 5d 9c 6a 2f b5 f4 1b f6 f5 18 4b cc 68 b2 a8 73 29 73 0a 6a 68 2a 2a a9 ee 6a e8 95 87 40 ce dc 48 01 b0 08 18 f9 94 7e 6d 87 38 05 34 11 3b 13 1d a8 83 a8 1e a2 90 60 82 1a 44 79 a1 77 dd 86 84 90 00 c0 f2 bc 5e e3 bd fd b0 73 2a d7 3b 25 63 c5 4e ba 3f 0a c6 e0 e9 df 53 da e2 c7 df 8d b1 c4 b9 3e 71 98 55 cf f1 94 13 f5 66 7b f0 03 17 92 f6 d2 05 c1 bd b8 fb 62 a5 7c 33 d0 52 cf 10 57 04 ba c4 fa 94 ab 44 00 d9 48 3c 13 6c 12 31 07 6e 94 54 90 75 09 91 b1 fb 55 3c c2 b5 73 1a b6 72 cd d3 40 16 2b ff 00 28 e0 fd 4e 2a a4 81 59 ae 55 78 f4 ff 00 db 9e f8 85 bc 81 57 52 91 a6 e2 d6 ef ee 3b e2 48 62 a9 9b cb 4a b7 90 0b 91 b5 f4 9e fb 8c 69 93 40 0f 95 0a 49 59 4e db 79 af 6f fe f9 c1 0a 88 e2 89 b4 2e a0 19 89 Data Ascii: -^k9cEk]j/Khs)sjh*j@H~m84;`Dyw^s;%cN?S>qUf{b\|3RWDH<l1nTuU<sr@+(N*YUxWR;HbJi@IYNyo.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49983	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	869	OUT	GET /-/media/images/corporate/catfishing-website-thumbnail_270x170%20png.png?h=170&iar=0&w=270&hash=7C549725CE1171E10F84CD1535971AEF HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	887	IN	HTTP/1.1 200 OK Connection: close Content-Length: 63952 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="catfishing-website-thumbnail_270x170 png.png" Content-Type: image/webp Etag: "slTlYUSGfkGgiQxnQrrHgewsOL8eU+tDdHl8yTtHA78" Fastly-Io-Info: ifsz=93155 idim=270x170 ifmt=png ofsz=63952 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210108-DFW, cache-pdk-kfty2130083-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460565.387903,VS0,VE5 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 c8 f9 00 00 57 45 42 50 56 50 38 4c bc f9 00 00 2f 0d 41 2a 00 4d 40 6c db 46 90 04 2b b9 4c 0c ff f4 5f f0 ee 7e 0d 11 fd 9f 00 42 62 f0 81 2a 97 34 d3 dd bc 27 87 84 c2 c2 8a 4b 48 33 33 ea 7d 83 49 82 80 9f ab ac af d9 fd 39 bf 00 09 af 89 cb 55 ca e9 ee 79 2a 32 13 5e 0b 08 b1 ab 72 d8 b7 1b 59 4a c4 01 3f ec b2 51 22 cd e8 bd ce e1 9f 51 8c 7d 37 95 dd 51 66 f4 9c df 23 00 e5 02 65 a5 02 42 f7 48 ca 2c e4 cd 0e fc 15 ab 00 17 7a 46 f6 6e c2 eb b1 0b fe c4 cc 00 01 fa cc 5e 13 de ad 02 76 b9 b7 21 f4 f6 f4 ec ad fa 10 36 d0 bb 37 39 c7 b0 bb a3 48 d5 2f 09 cf ed ee ab 3a e5 a5 77 24 69 a6 41 d8 d0 fb 36 53 55 e0 de 19 cd ec 0e 99 b0 04 aa 6a 17 26 81 a2 67 a5 19 b5 78 4a ed 07 17 0a 52 15 db 91 e6 ac 20 c0 25 c2 3c 0b 4e 57 7d cc 7c 28 25 Data Ascii: RIFFWEBPVP8L/AM@lF+L_~Bb4'KH33}I9Uy*2^rYJ?Q"Q}7Qf#eBH,zFn^v!679H/:w$iA6SUj&gxJR %<NW}\|(%
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: a8 b6 d9 e8 46 cd 60 bf 8d 3e 01 e6 ec 6d b2 81 47 21 96 33 8e 72 7d 1f 43 ca 8f 1a 9b de 77 a9 a7 24 ce 96 04 af a4 e6 ae 1c be 3d f8 f8 a8 dd 7e 5a 77 76 97 2b 66 31 bd 30 dd 0b 46 d0 89 78 53 f8 54 b8 99 c1 6b 00 78 15 6f c5 c2 b3 34 ef d2 70 c0 01 9d f1 de a2 bd 4f e7 6b df ca d2 91 3b 08 d6 d6 e7 f0 19 cc ce 29 b8 6a 4e 6a e3 80 6e 83 42 a5 6a 16 8c 20 aa 84 60 e4 34 c7 2d b5 85 90 69 61 15 d0 6c 2d f7 d6 5d 38 60 57 f6 ca 01 ed 74 4c 3f 9f 9f 31 67 de 09 9a 2a e9 0f 49 7f a8 eb 0f 94 1f 6a a9 06 07 44 52 bc ff 19 95 a0 1f 07 11 4d 7c ba 84 6d 55 98 37 3c e9 02 08 00 89 d4 b4 77 ea 1d ca 1d 48 12 11 09 00 18 b2 47 02 40 00 b8 03 02 fd 46 62 00 7a 8c 43 f8 e5 fc 69 04 23 48 a1 d9 f4 a1 3f 9b 7f 9f 33 29 b7 01 00 40 48 b9 0b f5 3b 5d 1a 48 22 01 00 8b Data Ascii: F`>mG!3r}Cw$=~Zwv+f10FxSTkxo4pOk;)jNjnBj `4-ial-]8`WtL?1g*IjDRM\|mU7<wHG@FbzCi#H?3)@H;]H"
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: cf f2 06 bf 99 5f cb b7 fa be 74 b4 2e 49 3b f2 67 fe f9 c6 97 8d 61 9b 7f fc 3d 3f 3f d2 45 b6 e1 e3 1f be fc dd 2f 5f a0 01 80 c6 12 ff 06 fa 66 39 c3 c7 7a 52 ff b7 f4 97 eb 1c 8d df c9 1c 71 7e fe e2 0f 7f f6 fa 7f 82 c2 7d c9 87 8d bf f2 b1 ff d6 67 fb ff fe e7 f9 4f ff c9 eb 2c 0d b6 e1 c0 e3 9f f9 35 f9 f7 7e 53 c6 bc fa 7d fe eb e7 fe 73 7b ac f5 3d 60 0e 77 fe 97 fa ce c7 37 fe b0 df ff e4 7d 9c 3c 55 2e 72 5c 9c 3e cf 2c 55 19 b8 dd e0 bf ff f7 7f fe d0 f5 f9 17 ef 25 dc 21 e6 e3 f1 1f 3f 1b fe 62 a7 55 41 81 70 7b 5a 50 02 58 04 82 0a 2b de 84 94 8a 50 a1 35 da be 9b 10 04 a1 00 a0 41 66 7d d7 57 f7 db 6f fe 7e 47 b7 01 00 3b b8 82 70 f2 13 68 91 bc 4b 36 f7 86 8a 33 df fd a7 b7 d4 61 3e 9e a7 eb b6 b2 ad d8 ab 38 2a 18 e7 3e 44 5c b9 b1 5a 93 Data Ascii: _t.I;ga=??E/_f9zRq~}gO,5~S}s{=`w7}<U.r\>,U%!?bUAp{ZPX+P5Af}Wo~G;phK63a>8*>D\Z
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d8 b7 d9 eb b3 d7 f9 e6 9c 5f 57 33 f9 d8 f8 da 71 55 f9 2a cf 60 46 77 0c 87 e5 80 da 76 6d c6 84 a5 ac 65 13 72 01 84 80 13 80 ea 69 37 f7 33 3a ac 81 eb e5 05 81 36 4d c3 1b 5d 27 43 68 48 1d 10 9d 12 78 c0 7e 51 5d 0f c1 3e 00 63 7f c1 9b 4f 04 16 1b 96 0f c4 f7 41 84 0b 9d c4 f9 9b 43 fe 9f e9 f0 a7 97 fb 9d 23 f4 52 ff 0f 6f eb 67 fe f3 5f 79 ee d4 46 65 40 00 a4 95 71 19 27 a0 1c 40 10 d2 c7 c0 74 79 9f 67 cf 1d 67 5a a2 8a 54 09 80 a0 15 ea 0c d1 18 a7 b5 d2 9c 9b f2 a0 03 8a a8 16 9d 49 4e 8d 60 b2 d7 84 cf 68 58 77 6b ac 6f f0 f4 39 c7 f7 ce ae a7 66 64 7b 49 e0 64 37 b9 14 97 db 8d 15 3a b8 79 fc 89 05 e0 38 40 c5 2a b3 2d 77 fb 4b 58 4c ff 57 ac 19 a4 dd 8c cf ac e7 3d cd 42 81 36 b4 a2 70 0f 42 61 8b 0b 7d fe e0 1b 5f 79 88 31 48 51 3b 53 c7 Data Ascii: _W3qU`Fwvmeri73:6M]'ChHx~Q]>cOAC#Rog_yFe@q'@tyggZTIN`hXwko9fd{Id7:y8@-wKXLW=B6pBa}_y1HQ;S
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 8e b0 8d cf c6 30 50 80 02 03 17 ae a1 49 11 b5 0c 62 e3 72 e4 e3 ed ad 77 7e 12 e9 ea a6 6d 25 bc 46 8d 5c 33 48 43 12 60 0b b6 9e 59 63 5c a4 5b da 5c 2b 55 55 82 52 79 b2 94 98 aa fb 95 cf 9f 4f 1f 3d e7 87 1e d6 73 5c 51 83 2a f5 ac 59 a6 9e 26 4a 0a 01 94 01 00 53 80 b7 5d 7a ef 7c 1a 58 34 c3 0e 22 6d 6a 65 2b 25 1b 4a 8a d5 14 43 c2 10 b6 50 13 b0 52 a7 7e af b8 bd 6f 8b 51 8d 26 4d 8b f4 ba 6c c2 22 00 20 44 28 74 37 74 8a 5b 9c 96 01 2d d8 41 4c 6d d4 80 10 10 33 d5 eb ee d7 ba 77 e3 49 4c 48 05 28 80 17 b2 3e e5 42 d5 99 e5 f2 3d 9b b1 da 69 2b 68 b4 0c ed cb e9 a5 d8 aa 6a 00 00 b0 9a da 9b 16 30 00 f1 45 59 df 7c b1 7d f1 e6 ea 6b 02 b0 d6 a6 54 3f d9 f6 b0 56 05 2c d1 1e 99 dc 5b f0 fe f2 78 50 d5 d8 56 80 7d d0 75 e2 48 22 1a 6a 3a 61 28 78 Data Ascii: 0PIbrw~m%F\3HC`Yc\[\+UURyO=s\Q*Y&JS]z\|X4"mje+%JCPR~oQ&Ml" D(t7t[-ALm3wILH(>B=i+hj0EY\|}kT?V,[xPV}uH"j:a(x
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 9f a2 9e b8 32 9d 34 9f 1e 95 69 9e f1 38 46 fa 2d f3 2d 5a 09 c8 15 69 4c 6b 1d 02 41 c0 02 08 2c 7d 09 bb 3a 6c 1b c8 bc cc 1b 0f e5 64 a7 cd 1f 5d 72 11 84 aa 42 eb a0 32 fc fa 8b 77 4c 77 9b ed 38 d3 70 85 c6 fe d9 34 23 32 6d 7c fe fa 51 93 34 0d a0 85 aa 02 20 38 1e 67 ba 3d 67 46 05 e3 e7 56 d2 fb 07 2e 5b 73 43 59 62 34 c2 c1 5c dd 1e 2f 9e 0e 54 2a 1d 37 3f 17 40 72 7d 63 0b cb 27 66 ef 3e db 87 23 00 00 36 52 83 32 04 c4 ca 24 21 9b da 1d 2b cd 56 48 3c 9c 2b 94 ae 29 a4 02 86 90 95 7d db 73 ba 7d fa 71 bf f7 29 40 59 f2 9c 99 02 db 2e dc 93 69 e6 eb dc 5d 4e 7e a7 b1 5c 57 23 64 3c fb 72 f6 fc c0 d4 db 7d 27 d5 f1 64 5d f1 bb bc 32 d1 c3 e9 37 b6 fb 83 5b 7b c8 41 35 00 20 d0 8a e3 fe d8 f5 63 f7 d2 f7 cc 0d 84 3b f4 de e3 2f a2 8b 47 4d 1b 82 Data Ascii: 24i8F--ZiLkA,}:ld]rB2wLw8p4#2m\|Q4 8g=gFV.[sCYb4\/T*7?@r}c'f>#6R2$!+VH<+)}s}q)@Y.i]N~\W#d<r}'d]27[{A5 c;/GM
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ee 08 22 63 56 22 a6 e0 4a 47 29 02 c1 67 9d 45 19 4d 5d 36 67 47 af 73 7f 2e 57 ba 20 01 20 32 70 b6 a6 b2 50 78 75 bb 7a 81 66 73 5a 1c 18 c6 f1 8e 63 32 76 cc 28 71 4c fb e4 ec 9e 24 1e ac 4e 40 0c 3c e5 6c 93 ce c2 33 28 a5 45 32 33 19 87 05 cc d2 cb c9 e7 8f 79 7c 47 bf 09 24 98 6d 71 34 a1 67 7b cf c6 77 33 c1 12 27 12 37 81 f8 65 c3 38 63 0d 1a c6 06 45 84 81 d5 5e f3 3e b6 81 49 9b 67 22 12 a0 2c ad 0d 99 aa 41 0d e3 71 df 5e 9e 92 d3 25 1c 36 a1 75 71 ac a1 a5 00 40 37 55 a5 8d 01 00 2c c2 b2 cd e1 65 9f c8 34 f0 db bd 7b 3e db b3 e6 c0 d9 31 7b e4 30 80 17 26 e9 19 63 4d 18 33 2e 79 50 f4 b7 c9 4e 08 4a 75 4e 4d 02 5e 8e 72 38 b6 05 a0 30 c5 ba ce ba 0c 83 8c 35 8a e5 e2 f5 4f 65 ef 77 3a 1d 63 28 dd af 5e dd 5f d9 48 8b 79 f9 6a 5b 5b a7 f6 61 Data Ascii: "cV"JG)gEM]6gGs.W 2pPxuzfsZc2v(qL$N@<l3(E23y\|G$mq4g{w3'7e8cE^>Ig",Aq^%6uq@7U,e4{>1{0&cM3.yPNJuNM^r805Oew:c(^_Hyj[[a
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c2 d9 44 dd 63 d3 ad 0a 42 16 cf 58 74 63 75 d8 8c e3 e5 b1 8c ba fb 9c 8e fe f5 bf 04 c8 49 80 82 01 05 05 c0 00 48 32 83 a1 54 00 80 b4 ba da 41 a7 1b 3f 4d 31 45 15 22 8c 05 82 c8 66 62 0d 00 ed 05 78 90 9f 23 76 74 5d db ae ae 4b 48 19 8a 2b 45 40 77 3a ba f9 2e 73 32 88 41 0a 23 a1 5b 48 e7 b1 52 d3 d1 d4 12 37 4c dd 98 b6 52 f6 73 52 8f 06 e5 94 d5 15 a6 f8 9a 6a bd be d1 eb 72 4b dd 10 14 91 00 01 a8 1a 89 6a db 90 9d 0d 33 af 90 3d de cf 4b e9 50 a5 ef 6d 76 f7 fa 89 db 83 bb 29 26 9a 9c 70 f3 c2 4c 8a 1d c9 92 44 ea c4 1b 16 3a 8a 1f 2c 17 7d cd a5 03 af a0 2d 93 d8 ce ab 39 8f ef f7 7b 2f fc cc 8f 4f 50 36 ed 8c 46 05 8e 58 aa a3 03 e9 06 cb 65 15 90 23 4d 38 28 55 8a 82 00 60 14 f9 6b d8 9e 35 a8 e6 14 4f 62 34 86 96 0a b9 a7 22 ac 9e c5 d9 91 Data Ascii: DcBXtcuIH2TA?M1E"fbx#vt]KH+E@w:.s2A#[HR7LRsRjrKj3=KPmv)&pLD:,}-9{/OP6FXe#M8(U`k5Ob4"
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 6c 41 76 e2 98 00 04 4a d2 50 a2 2b 61 aa 7b 98 77 9f a3 0c 55 68 bb 5b 6d f2 e0 53 6a 90 68 2c b4 69 19 8b b6 02 34 21 6e cb 27 e5 a5 be 82 47 e8 e5 73 94 6c 2e a1 2b 3d fe 70 51 f9 63 4f b6 b4 41 c0 f8 22 75 25 f3 d0 13 00 64 93 79 72 cc 71 cc ab d3 6e 56 f4 b1 1f b3 9d 1a d8 51 6c c6 8c 27 8e b7 88 67 cd 2b c0 0a 20 e9 67 87 2f ff c9 ee d5 cf 18 04 00 1c cd a2 39 49 a1 30 70 8f 21 57 68 1e ed 92 ad f7 dd f9 2e f8 88 3b 37 71 15 7b 09 24 33 f6 a3 56 21 0a ca 89 d3 04 12 b8 ba e5 c3 4f 6b 78 2b 8a bb 72 6b ee dc 62 f4 0a 8a 1e 05 4a df 22 81 4e c4 de 75 63 77 9b 2c 59 2e 27 01 85 aa e5 05 79 d7 ca 00 1d 65 b3 59 ad 66 50 3a 10 e3 7c 50 12 aa a5 b6 ac b7 29 59 27 c4 48 49 64 72 92 99 4c 0c cd ba 31 c5 89 2c 31 44 c0 a2 14 58 72 f8 b2 dd d3 48 b1 3c d3 af Data Ascii: lAvJP+a{wUh[mSjh,i4!n'Gsl.+=pQcOA"u%dyrqnVQl'g+ g/9I0p!Wh.;7q{$3V!Okx+rkbJ"Nucw,Y.'yeYfP:\|P)Y'HIdrL1,1DXrH<
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ea e4 21 4e 9d f5 58 39 31 93 5f bc 25 9f 02 50 a2 61 e2 01 3c da 95 d9 21 7e 14 f7 ff 2f 9e 13 48 95 22 4f e4 80 4e 07 13 08 0a 6b 31 a4 a6 41 27 0e de f7 2f 06 dc 0d c7 1f ad 98 1d 8e 32 81 2b 90 71 c6 f0 fc ac b6 4b f4 35 84 33 23 30 a5 96 95 d4 88 a4 cb 27 99 7d f9 65 f6 f9 8f 5d 6f 2b 00 48 94 ec d2 55 6e 80 d8 b4 a2 c6 26 c0 e8 58 02 75 91 9f aa b2 79 f3 e0 e1 a5 6f 81 56 60 67 eb bd c7 eb e4 f3 02 8d 3a 1c af 63 1f 21 0f c0 22 93 96 ad 42 35 4c d0 20 a8 0d d8 08 00 00 50 87 bd d9 94 38 f9 74 21 14 cb e1 b3 68 37 c9 5e 3b 08 80 8d 7c 81 bf e5 de 40 17 24 b5 ee e6 2a 40 cc 1a 0d 8d 55 2d d1 68 46 94 14 91 45 f0 64 35 67 ab 3b 55 8d 97 f8 ed ff d0 01 01 4c 6b 89 1a 21 87 20 48 81 59 75 9e 75 f3 58 1c c8 6c 56 28 ed ec af d7 7a be 98 6e 0c 22 64 e4 32 Data Ascii: !NX91_%Pa<!~/H"ONk1A'/2+qK53#0'}e]o+HUn&XuyoV`g:c!"B5L P8t!h7^;\|@$*@U-hFEd5g;ULk! HYuuXlV(zn"d2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49982	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	851	OUT	GET /-/media/images/corporate/iwd%202024_270x170%20png.png?h=170&iar=0&w=270&hash=BAC305282643EF1EE26BB0E2B96C3EA3 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	867	IN	HTTP/1.1 200 OK Connection: close Content-Length: 41908 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="IWD 2024_270x170 png.png" Content-Type: image/webp Etag: "FfHVqzhtVKtHY5BCgqr6sH6hD5O3aU/C5fB1yhfCVIU" Fastly-Io-Info: ifsz=61244 idim=270x170 ifmt=png ofsz=41908 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210066-DFW, cache-pdk-kpdk1780147-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460565.392833,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 ac a3 00 00 57 45 42 50 56 50 38 4c a0 a3 00 00 2f 0d 41 2a 00 4d 40 6c 23 49 88 a4 ea 85 5d f8 6a f2 0f 98 e5 f4 21 44 f4 7f 02 26 80 03 e6 e4 d7 09 f8 b9 a3 e0 66 6e 80 be bf 86 6d c9 e6 f3 06 70 0b 90 8c e7 aa 3f 0c 9a 65 13 f5 06 b8 9b ac d4 7e 01 5d a9 d1 7b 01 e7 6c 62 2a bf 3d cb f7 7d c0 94 26 d9 cd f5 e5 72 0d ef 1b 50 02 e2 50 fe 53 91 b6 05 d8 09 45 6e 18 40 5f 83 36 42 93 4c 4d 93 44 b5 6d 55 9a e7 49 3c d4 e0 3b 9a a9 23 7d 1e 0c e6 7c a2 53 75 87 62 a4 3e a2 34 d1 88 26 5a 13 b2 bd aa 30 26 0a 0c 50 44 de 06 e3 04 84 89 50 da 52 7e 9d 17 7f d0 ea b9 00 3a 00 52 18 c0 38 61 cd 75 8e b6 cd dc c4 f1 01 63 ac b5 b1 b1 cd b5 1b ad c6 8d 72 ad 75 ad 24 69 03 08 49 c8 07 04 16 8b 46 93 70 00 a4 c7 95 bc 06 b2 37 1f db 2a 50 71 b0 17 04 Data Ascii: RIFFWEBPVP8L/AM@l#I]j!D&fnmp?e~]{lb=}&rPPSEn@_6BLMDmUI<;#}\|Sub>4&Z0&PDPR~:R8aucru$iIFp7*Pq
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 54 50 39 2a 80 2a 1e b2 4a 17 65 c9 94 d5 03 20 32 3d f9 e3 d2 85 2f 1e f2 49 6e 1f e6 9b fb 76 e9 d5 ae 70 ed ff d9 b5 6d db 4e ef 6b 5f 8b de 7b 12 55 b4 ca 57 09 b8 dd c1 18 73 ce b1 76 04 3f 99 30 1e 96 29 50 a4 d3 4a 64 80 e7 16 e8 a4 64 06 5c 21 88 ba 2e d3 c1 26 d7 34 b2 a1 4e 06 93 c9 4f f0 dc a4 95 c0 0b 41 5e e7 9a 41 86 0c 6d 61 c8 2d 79 2d 32 41 c9 d1 95 81 e8 a1 53 66 81 0d 5a 2c 72 17 36 22 2f 1d aa 30 26 7d ae cb 10 da 91 24 bb b6 95 aa 7e 1a ad 1d c0 51 70 01 33 f9 7f fa ed 29 09 91 24 39 92 14 91 2b f8 c3 3c 04 fa bf 22 26 40 cf b4 6d aa 64 6b 4e e6 5a 55 dd bd f7 3e 4c 33 62 66 66 96 c5 e4 c9 d5 0f 92 27 7b 7c 79 0c 1e 33 b3 86 99 e1 83 43 9b 1a aa 32 8d ee fd c1 3f 78 e2 8b 76 c5 92 77 3e 4b 31 1f a4 91 82 25 56 0a 8e 25 66 2c b1 da 58 Data Ascii: TP9**Je 2=/InvpmNk_{UWsv?0)PJdd\!.&4NOA^Ama-y-2ASfZ,r6"/0&}$~Qp3)$9+<"&@mdkNZU>L3bff'{\|y3C2?xvw>K1%V%f,X
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ac 75 af 68 95 bf b8 1d 98 d9 35 d1 ba 4b 3e 44 f2 c0 e0 56 14 bb 76 ab 42 8a 19 7e b9 98 71 5c 0d 40 0d 53 03 bd 38 c7 04 90 24 3c 4c f1 f0 fb c8 7d f2 4a 7f 89 8e 90 48 22 a4 e4 fd 90 94 76 45 54 92 02 a0 60 b6 fc 70 79 7a cd d3 b1 24 97 ca 97 ba 7d 77 76 76 52 62 e1 88 91 01 2f c0 5e 52 c8 6b 4a 0a 29 09 92 20 92 08 0e 39 01 12 79 de 47 f1 85 d7 1f 75 7f 42 24 e2 8e 36 5e cb f4 02 40 c0 00 5b 6d 3d 80 04 01 21 36 35 c2 a9 f7 c8 fb c0 79 74 53 c1 17 35 bf 01 e9 c1 09 53 12 59 af e0 04 06 d0 d6 31 d7 66 5c 20 91 53 a0 b8 4e 82 55 fb ae e8 42 6d 62 71 00 9b 97 62 f9 54 f8 94 70 9e 8b 24 48 0a 77 86 0a 9d 8a 9a 1a 84 43 d2 df bc e4 9b 57 72 ed b3 e7 b1 18 ba c2 87 02 af c6 9d 79 ec 4e 21 4c 65 0f 73 b9 eb 81 79 eb 6f 66 6f c3 cc 26 89 90 72 02 52 70 99 11 Data Ascii: uh5K>DVvB~q\@S8$<L}JH"vET`pyz$}wvvRb/^RkJ) 9yGuB$6^@[m=!65ytS5SY1f\ SNUBmbqbTp$HwCWryN!Lesyofo&rRp
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 24 08 86 a3 c1 01 7c e6 c9 b8 e3 18 4f 83 c8 f6 17 cf 17 7d f7 91 f5 c5 75 74 3f 48 74 4e 1a f7 dc f0 24 d0 41 6c b6 6c 90 c6 41 10 90 8e 63 c0 26 de f0 54 2f 28 4c c3 c0 00 83 68 0a 01 06 f0 52 0a aa 72 b0 85 73 02 da 60 b4 d0 76 bc 47 be 79 4b 7f c6 b5 8f 08 70 7e 92 87 86 df ef 50 48 e0 0a 08 0c 84 31 c3 0e 20 79 17 08 d1 91 fc 8a 83 80 1a 1d 71 66 b1 c6 e3 57 3e 6a d3 ff c3 f8 ff 61 e5 39 84 ea b8 4d 4f 48 de ca 0c ab e9 1d b1 b7 35 d0 78 34 a7 46 4e e2 04 a7 91 a9 06 41 c4 80 f0 ca 4d d0 c4 da d1 ee bc 16 53 05 a7 15 89 d7 eb 00 14 4e 2a c4 74 93 d4 91 3b c0 f1 c7 41 ab ed 64 53 c1 a7 02 70 98 31 d1 d9 85 1f ce 67 80 aa 2c bd 91 23 f0 86 51 28 c0 24 a2 38 c7 54 7b 6b db f3 af bf 81 bf f5 c6 6e ff 9f 5a 95 69 9d b4 26 89 f8 03 a4 df ec ea 82 0f 0f 22 Data Ascii: $\|O}ut?HtN$AllAc&T/(LhRrs`vGyKp~PH1 yqfW>ja9MOH5x4FNAMSN*t;AdSp1g,#Q($8T{knZi&"
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 22 18 31 ff ae c5 76 94 a3 0e 4b 37 f8 0a e3 f1 75 59 a9 6a 27 b9 53 0d f4 00 03 43 4d 39 72 e8 13 44 e7 30 d6 8c 15 66 ee 0f dd b4 40 07 05 89 e9 72 bf eb fd 85 1f 28 be 3f e8 0c 2a 56 30 58 13 c4 cf 3e da ab 6f 9c d2 da ec e0 76 bf 1d ed 1d 89 a6 37 23 32 b6 73 e3 e4 a6 89 76 a1 ed d8 e8 86 08 90 2d e6 88 cb 60 ee 84 0d 49 60 54 43 3c 70 a6 9c 82 36 6d 59 29 68 0a 7d fc 87 1e 39 a5 6a 00 a0 19 6e 94 c7 ae 40 0a 93 3d 89 02 96 37 da 19 60 a5 af 34 00 20 03 11 fd 4b 03 fa 64 2e a5 70 6c d5 13 59 5d 43 e9 86 6f d7 ff 39 7e 5d cd 31 60 a1 bd 8f d9 b5 c9 51 19 97 eb 2d 3a 21 60 4a c5 a7 81 a0 22 19 6b 1c b0 68 c6 65 75 ef 8e 4a a8 ef 4d 16 de 81 f5 26 ca 6f ab f4 16 8a 6f f1 f3 51 1a 67 7b 1f 8c d8 04 dc df 50 e6 41 3c 2b 93 09 88 3a 1c ae 00 a6 f6 1e 00 b5 Data Ascii: "1vK7uYj'SCM9rD0f@r(?*V0X>ov7#2sv-`I`TC<p6mY)h}9jn@=7`4 Kd.plY]Co9~]1`Q-:!`J"kheuJM&ooQg{PA<+:
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 0a 9c 0b 55 b9 62 e9 3a 58 1f 6d d6 35 f2 61 40 de ef bf da c9 ff 2d c9 a1 3b 8a cc f9 7d 49 2b 31 8b de c9 07 ce 7d b3 16 b5 10 ee 72 9a 8e 04 eb ff 6d ca 35 81 74 b4 68 b9 17 4a 7e 5a 9c b9 e5 21 b5 56 50 a5 11 01 c5 8c 6e 70 b0 9f c1 bb c3 80 cd 34 9e 9e 38 18 02 13 7b 50 dc 68 93 af b4 65 0c 17 75 61 a2 29 06 67 63 83 a8 10 0e 04 d0 67 70 d3 81 4a f1 41 a6 1a 79 88 b5 6b d7 ca ca 18 ef 46 b6 05 9c ad 52 11 12 b0 84 27 48 20 60 d8 be 75 c4 f1 fd d1 a4 9b c4 e2 2a 0c 49 97 0e 8f 03 17 5b e4 92 4d d3 b9 85 91 44 6e 3b 06 d0 dc e7 2f fd 9b dc 5f 7d 31 83 7f e2 9b 6d 95 e8 cc 77 dd c0 11 d0 34 32 f2 10 d2 28 72 d7 7c 4d c8 65 85 82 73 58 47 a9 ba f4 da 85 e8 12 06 98 be 9f e3 86 96 23 9f 30 e6 cc c9 06 bb 7d 02 52 f2 1e 12 90 b3 b8 bd dd dc 9a 6e 38 ee cc Data Ascii: Ub:Xm5a@-;}I+1}rm5thJ~Z!VPnp48{Pheua)gcgpJAykFR'H `u*I[MDn;/_}1mw42(r\|MesXG#0}Rn8
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 55 0b 75 80 fd d4 eb a2 dd a7 7a 68 e2 9d 84 8c af c4 e4 87 2e 60 13 26 29 bd 24 95 84 ac 6c c2 57 4b 97 f2 01 b5 fb 6c e3 34 79 3f 76 f0 ea f4 f3 d5 1f c3 6c f6 d3 11 b2 65 45 9f 14 2f 37 95 8c 54 91 39 2c 88 93 b4 6c d5 4a 5c e0 ab df 47 4b cb 04 47 ba 90 22 d9 7f 6b ee 73 b2 15 05 96 d1 58 d4 42 38 1a a3 56 a5 70 19 2a df de ae 9d ec 06 c0 a3 5d af 78 96 1d 87 a8 13 10 d5 51 c8 c8 5d 91 50 64 e1 e3 6a c8 3f 71 1f a6 95 22 5b b3 7a ee b0 fb 72 f6 b5 3e f7 ce 26 ea db a9 2f a5 7a b6 08 ad d6 b6 04 a6 3f df df 76 58 36 52 40 af 7a 89 3e ba e9 2e 4a 20 74 43 0a 81 c8 89 05 70 e2 2c 9d bf 90 23 b0 b6 d3 91 7c 08 70 ed 57 3a 2f 00 03 f1 45 01 ac f0 5d 55 a8 c8 24 23 00 84 03 0e b9 47 68 d9 c4 55 f4 10 72 da cb 73 16 3d c1 66 4e 6d 3a 5a 27 a6 a4 22 49 69 2c Data Ascii: Uuzh.`&)$lWKl4y?vleE/7T9,lJ\GKG"ksXB8Vp*]xQ]Pdj?q"[zr>&/z?vX6R@z>.J tCp,#\|pW:/E]U$#GhUrs=fNm:Z'"Ii,
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 64 e9 71 72 a7 96 79 79 87 38 db 42 bd e1 6d ce 7d d2 79 6b 88 d8 88 58 84 f0 60 a7 2c 44 49 d5 38 4f 31 e2 f3 7d 72 b4 a8 40 4b 01 41 2a c6 a0 43 98 1a 54 9f 39 4c 0f 47 08 5e 78 b5 16 2f 50 c3 70 8e 1e 52 5e b4 d5 ab 2f 9b 7c 54 f6 b3 30 45 6a a4 48 cb ab ca 09 51 a4 10 12 30 d0 df 35 98 69 2a c1 e9 eb eb 83 7e cd e5 56 ef c7 c4 97 1d 85 e2 4f af c1 f1 6d b8 1c 67 bc 68 fb 51 48 97 a8 44 c5 c3 0f 5f 29 4c 28 f2 b3 71 a8 be e2 9e eb 47 59 43 93 0e 00 07 12 86 00 5d d2 80 28 0f 01 ad 5b 50 24 6f 16 54 35 05 03 b5 f7 74 a8 a6 a0 b9 e2 59 f2 1d 58 f3 32 33 ef 92 22 7c 19 4f 2a 3e d9 5e c3 77 97 be 7f 46 fc 2f 78 d6 ff 36 de f5 df f8 c6 99 f7 46 97 f5 1a 9d b8 5c 1a b9 59 a1 fe 8b b3 c6 53 1c 2a 9c 8a 82 94 a2 8e c6 4b 6e f7 2d 07 c5 de cf d4 e1 ec 0a 77 b5 Data Ascii: dqryy8Bm}ykX`,DI8O1}r@KACT9LG^x/PpR^/\|T0EjHQ05i~VOmghQHD_)L(qGYC]([P$oT5tYX23"\|O>^wF/x6F\YSKn-w
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ea 9e 66 e0 2b 89 42 0e 61 85 03 c0 0b 54 f8 97 8d 78 c9 fb d0 27 24 67 79 cc 83 70 13 35 d2 0b 45 77 b1 a5 a3 35 47 ff 0e 6f cb 7d 2a fc b3 1e 28 ef 3d 6d 3e ad cc 4a 87 01 42 80 55 79 4c cc 8f 28 7d 50 74 db b5 61 d7 f6 c6 88 3f 91 61 cc ff 8d c3 b6 30 ee 6c 82 32 30 85 0e 78 eb 7b 6f a5 37 ec 5d 60 d4 0e 81 02 69 e5 e3 17 b9 6a 79 ec 88 5c cf d8 db e4 8a 29 ad 17 4d 3d 5b de 66 0e cc 8b 0a 1d 85 55 12 96 8d cc 38 8c ad e9 b4 ee 4c 1a 26 01 e7 46 f4 e0 b7 f3 22 08 80 85 d0 02 35 57 d9 e3 3f 22 87 b3 05 d5 f8 d5 98 16 d1 38 14 52 df 3f 5b 6d 25 90 fb c3 70 b4 23 a6 15 49 58 95 ab b6 75 2e 18 6a 6a d9 47 28 c7 79 70 38 17 3d 43 95 ce fb cd e0 15 c4 96 a7 e8 f1 08 83 4f 96 88 68 41 91 c3 91 4d 47 de 35 61 1f e4 4e 3c 41 dd 75 bc 48 39 34 e4 c4 8d 78 09 51 Data Ascii: f+BaTx'$gyp5Ew5Go}*(=m>JBUyL(}Pta?a0l20x{o7]`ijy\)M=[fU8L&F"5W?"8R?[m%p#IXu.jjG(yp8=COhAMG5aN<AuH94xQ
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 0b 10 33 8c d9 a3 31 b0 26 46 24 54 d4 95 26 53 1e 48 cd ed 95 ff fc b2 f3 a3 12 af 23 f6 ed 7d 69 e3 e1 cb 01 0a 46 f6 e4 ab 58 29 18 37 0b 51 fd fd 6f 0f 01 54 01 7a 66 8f 4c 6f ad a5 7b f3 08 e9 6a 0f 39 7e 0e c4 7e 6f 68 38 cc a0 e6 90 f7 41 36 06 4c 62 ce ca 23 a5 a6 07 50 b3 ac 52 c8 e6 79 16 bc 95 13 d9 09 5c b9 53 e4 b6 f7 6a bb e1 8b 0d b5 7e 73 c7 f7 9a b4 06 2b 8c eb 9c b2 b2 83 c8 0f 83 26 e8 0c 48 51 70 27 56 41 61 d0 2d 95 2c 9f a2 6f 1c 44 ab bb df 74 93 a5 33 67 a0 6d fb fb 7d 40 8f 8d b5 42 66 7f 8b 50 31 5b e2 e2 d3 1d 4e 6c 73 88 ed 29 0f 28 97 33 87 b6 53 66 e7 e2 5c f9 29 8c 97 1a 13 35 43 80 fe 38 c6 05 65 41 95 34 2e 7e 4c 81 38 ea 05 90 6b b9 62 82 16 4b 9b 11 79 51 df 18 4d fe 90 a9 5b 4f 82 e3 b3 37 7a a7 a1 4d c8 f9 d3 1f 2d 5a Data Ascii: 31&F$T&SH#}iFX)7QoTzfLo{j9~~oh8A6Lb#PRy\Sj~s+&HQp'VAa-,oDt3gm}@BfP1[Nls)(3Sf\)5C8eA4.~L8kbKyQM[O7zM-Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49986	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	645	OUT	GET /-/media/images/government/5%20public%20sector%202024/5%20top%20threat%2012924%20jpg.jpg?h=170&iar=0&w=270&hash=282500ABCD598FC9D9CC84300150B53F HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	870	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12121 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="5 Top Threat 12924 jpg.jpg" Content-Type: image/jpeg Etag: "aE3tRD6V7dZcWu6KGkKjFGDEYkOBEXfNzvFchgs5KAY" Fastly-Io-Info: ifsz=37278 idim=270x170 ifmt=jpeg ofsz=12121 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010213 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210111-DFW, cache-pdk-kfty2130039-PDK X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1713460566.631974,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 79 10 e2 52 a8 4a 0d 2e 3e 86 24 3c 6b 30 5a 48 d6 47 ab c3 b5 2c 98 d9 77 ca d0 68 7c 4f 74 a1 90 99 5a e5 d9 96 9d b0 e7 ed 23 d1 19 56 47 53 92 d9 67 56 75 78 d5 e3 d0 94 27 3a 86 44 b4 f4 74 82 49 f0 a1 18 b5 c9 f5 40 ab 33 1b bb 20 a8 c2 27 d7 ee d3 91 b7 64 22 b4 86 22 2d 64 1f 3c 0a 8e 9e 90 82 f6 86 df 38 59 05 6c 58 6c 66 30 84 3b c3 80 0d 33 06 c0 ab 03 4b e6 3c 6f ff c4 00 29 10 00 02 02 02 01 03 03 04 03 01 01 00 00 00 00 00 01 02 00 11 03 12 21 04 10 13 22 31 41 14 20 23 30 32 40 42 05 33 ff da 00 08 01 01 00 01 05 02 fe 97 30 58 fb 28 fd da 99 53 9f e9 57 6a 95 2a 54 a9 53 c7 50 84 87 b7 06 6a 86 1c 5c 51 83 1e d3 58 47 ed af be a5 4d 67 bc a2 65 01 38 94 26 bc d2 cd 08 9b 12 1b 18 95 70 a5 7e fa fb 2b b2 aa 55 5c aa 9c 93 a0 85 04 55 9a 89 Data Ascii: yRJ.>$<k0ZHG,wh\|OtZ#VGSgVux':DtI@3 'd""-d<8YlXlf0;3K<o)!"1A #02@B30X(SWj*TSPj\QXGMge8&p~+U\U
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 8e 6a ae e8 c1 aa e2 97 c2 fa ec b9 83 0d 06 0c 14 5b d1 81 71 ab 8a 77 4d e1 85 8f 07 0d ab 31 46 ce e8 53 d9 f3 6e 15 3a dd 59 36 0f 57 52 ff 00 55 dd c0 5d da 3f 88 09 31 d5 65 d1 14 7b 19 67 77 43 82 31 96 76 f5 2a d5 bd e6 aa f6 09 c2 c1 a3 57 ca 38 8f f2 ca ff 00 da 57 14 a5 75 7d f0 fd c7 04 ad 43 03 48 74 53 d7 cb 21 a0 5c 3a d7 89 d8 dc d2 ac 2c 6b 65 fa 86 03 cc dd c2 e2 9c 3d 96 b7 0f 6d 36 f2 38 63 68 8d 03 b6 f6 4e a2 e1 39 a3 d9 ec a2 54 26 33 10 9c 51 9e e9 da a8 d7 d5 09 63 81 02 61 1c dc 4e 1d 53 1e 59 8b 94 7b a6 dd dd b3 2a 57 35 69 b4 9f d3 4d e5 ad 1e c1 53 bd bf 3f c7 dc 4f f5 5c a8 55 bc a8 d6 9f 9a 55 98 24 cd 53 94 6c 73 54 5f 76 73 f8 ba e7 2d 3b c2 aa d2 2e 18 89 73 8e e4 9c cf dd 3d 9d 5a e4 08 1b 22 42 d0 c9 cf c9 3d e0 b6 22 Data Ascii: j[qwM1FSn:Y6WRU]?1e{gwC1vW8Wu}CHtS!\:,ke=m68chN9T&3QcaNSY{W5iMS?O\UU$SlsT_vs-;.s=Z"B="
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: e9 dc 9c bb 1e 88 ea 68 f5 08 0f 86 1a 57 2e 1f ad 51 9c 38 3b 21 18 71 f7 5c b8 5f 92 bf 4f 0b 94 dc 1b a2 d0 6a ff 00 c2 32 ef 48 42 29 ed 39 9e a8 44 77 94 3f 2b 68 54 c9 a0 5f 7c b9 21 50 3a 51 d7 78 a4 a3 ab 49 26 d0 9e d3 13 b2 14 40 b9 b2 a7 5b 0b 0e d0 9c 05 30 9c 56 25 ab e1 75 d1 0e 2d 27 e9 80 ad 55 f1 1a d9 22 e9 8e 6c 6a dc 26 c4 7f 2e c8 2c 32 19 fe 6d a9 37 43 08 fd c1 ca 21 46 90 5b ba f1 4b 05 8f fc 44 bc 08 34 45 a2 3b 3a 17 33 87 b2 a7 01 2e 19 5e a8 4a b0 84 62 c9 d3 7d 82 3f 13 0d ad a5 21 18 00 bb a1 5c cd 01 fb 00 89 d0 24 51 6a d2 35 4c 21 13 ab 75 e1 05 60 b9 b8 6d 14 a8 58 44 00 03 85 63 ae 4d 38 83 95 73 e1 e1 69 ea d2 b1 45 09 fa 35 59 3c 62 b5 8d 1d 41 4e 03 0d a3 12 7e ad c2 05 e0 07 8f 0c 15 e1 5f aa d0 42 fd 56 e1 86 7e f6 Data Ascii: hW.Q8;!q\_Oj2HB)9Dw?+hT_\|!P:QxI&@[0V%u-'U"lj&.,2m7C!F[KD4E;:3.^Jb}?!\$Qj5L!u`mXDcM8siE5Y<bAN~_BV~
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: e3 1c c1 67 cc 2c fe 13 71 86 a8 bd 45 61 79 21 d4 c6 a5 04 4d ef 1b 8f b1 b6 09 7f 32 e6 6b d1 7f cc 36 50 ef 66 20 bb 4c 35 5a 89 96 23 2d 57 b8 c7 07 d3 6c 44 e0 ce 79 ed 8c 37 67 9c 59 2c f2 63 50 e7 8f 87 d5 4a 82 85 be a0 0b aa cf 88 b6 cb ab 70 e9 98 37 87 c8 44 d2 2e dc 91 56 4b a4 2e be 22 35 8a c7 06 15 9e a0 18 cc c6 29 80 9d ca 03 df 86 02 8c df cd 47 2c a0 64 bc ce 8b 1d dc 0b 33 f1 28 8d b4 f1 4d c2 92 22 f3 6d 43 12 ee 15 90 8e 18 b2 ca 78 38 95 c9 4f 35 9a 22 af 11 e1 91 33 6b fd e1 95 a0 91 90 a2 f6 40 c5 79 61 bd f9 94 e8 38 19 0b bd 45 8d 28 0c 79 be 61 22 bf 08 72 96 2b 50 a6 9c 75 36 88 f3 fd e8 65 d3 ac a6 8a 8f 28 c1 40 c1 44 01 3d 87 15 a5 a9 ca d6 a5 79 d1 7d 46 d8 e5 65 81 e2 55 31 f6 da 9b 2d 97 56 c3 c5 41 3c 55 fd 4c 41 25 c6 Data Ascii: g,qEay!M2k6Pf L5Z#-WlDy7gY,cPJp7D.VK."5)G,d3(M"mCx8O5"3k@ya8E(ya"r+Pu6e(@D=y}FeU1-VA<ULA%
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 4a 38 73 09 c2 00 99 20 31 88 4c e2 1d 04 a2 f5 28 ea 03 18 22 3a 20 2b 53 ff da 00 0c 03 01 00 02 00 03 00 00 00 10 8f 32 00 02 90 63 4c 68 b1 c4 7e 03 64 38 ec c7 96 89 ce 5d c7 e1 8a c7 00 dc cc 7c af 46 3e b6 89 69 a8 24 d1 93 da cf 14 ce a5 56 72 1a c9 c7 11 87 55 2c 91 a0 1f 20 98 77 78 40 8e e3 38 62 7c 7a 80 10 4e cd 66 9a c6 e8 f0 91 60 f0 33 20 54 bc 58 62 e8 64 3a d8 79 8a de 8d 9f 48 53 85 ba 54 f7 87 70 86 f7 dd 77 54 ac 1e 8b 50 7c 6f 72 c1 38 c6 0d 3e 2d 91 0e a8 d5 8e a5 e0 76 a2 65 c5 11 8c 2c 3a c2 3b 2a 79 d5 8f 7f ff c4 00 24 11 01 00 02 02 02 02 02 03 01 01 01 00 00 00 00 00 01 00 11 21 31 41 51 61 81 71 91 10 b1 d1 a1 c1 f0 ff da 00 08 01 03 01 01 3f 10 59 72 ff 00 07 f2 1f c1 46 53 b8 83 6c 2d c3 2f d3 f7 2b da 7c ca ed 85 b4 fe 16 Data Ascii: J8s 1L(": +S2cLh~d8]\|F>i$VrU, wx@8b\|zNf`3 TXbd:yHSTpwTP\|or8>-ve,:;*y$!1AQaq?YrFSl-/+\|
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ac 78 0b 50 68 36 dc b8 e7 9d f9 8c ad e7 5b ac 42 a5 3b c7 99 75 5b 14 8c d6 3c 54 10 1b 57 bf ac 00 01 a3 03 ab f9 cb 00 a0 e0 25 0f 50 49 ce 2b 39 d3 ea 09 b4 c7 58 7e 72 ae d1 76 c2 bf b2 94 96 f2 60 4a 74 b9 88 62 da 66 ef 09 2d 5b 6a 34 97 f7 2e 27 7b b6 55 94 ae 23 aa b7 99 4e 9d 11 0a 57 04 05 3f 5c 6f e0 1a de 7c 97 0b 5e 75 66 be 53 70 0e 3d 98 67 0d 65 8d 91 61 cd 87 0e 18 e9 8c c3 c0 72 fa 4f 9c 05 b2 87 98 90 a1 4d d1 44 b4 6c 6e 9e 75 14 2d 4b 66 ba f1 1a b6 b5 33 50 d3 32 5f 5d 42 ca af 9c 1b b4 c6 63 bc 7a 86 18 4a be 7a 82 be 95 a8 3d f3 50 ad 5d b2 b0 75 37 2f c4 16 03 54 ee 28 26 2c dc 5a be d6 ee 0d 8d e6 25 6d 3f ff c4 00 27 10 01 00 02 02 02 02 02 02 02 03 01 01 00 00 00 00 01 00 11 21 31 41 51 61 71 81 91 a1 b1 10 d1 c1 e1 f1 f0 20 Data Ascii: xPh6[B;u[<TW%PI+9X~rv`Jtbf-[j4.'{U#NW?\o\|^ufSp=gearOMDlnu-Kf3P2_]BczJz=P]u7/T(&,Z%m?'!1AQaq
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: e5 af 00 f1 cc 3b 18 51 be 33 99 ab 41 a4 40 d6 aa fd c3 2a 99 16 3c ab 2e f9 81 c4 01 0b a7 02 df 0c b0 e1 69 70 0e 4a fa 82 51 87 d9 63 10 48 81 a6 d5 a5 ea 05 06 0f 73 dc b8 bb 12 ec 31 5c dc b1 04 19 20 c0 1d b6 0c b0 02 f2 34 ba a9 49 c0 68 d1 a6 59 10 9d 98 a2 64 7a 64 ff 00 73 95 c1 42 f2 b8 7e 65 82 28 12 f8 13 d9 21 6a e9 54 06 cd 5d 89 c0 cc bc 88 ae f0 c2 36 ca 33 10 85 5f 3e 25 b5 84 34 c2 de 73 71 d9 a6 b2 f8 85 8a ae b4 44 82 ac cb ff 00 21 d4 57 29 4b ea 19 ac 85 95 9d f7 28 8d dc 29 9f cc 0d 9a 79 5c b5 d0 bc 94 b0 be d9 80 8b 68 81 f0 ad cb 3d 8a 28 72 bc 45 d2 c1 c4 60 96 2c 96 ce 42 ad a9 82 05 3a 20 ca 78 c9 2f 0c 50 22 04 b6 a0 e4 00 a4 ce ce ed 80 05 ca f1 97 64 7e 8a 40 34 2d 03 39 8c 22 16 ad 73 68 8d f1 b8 13 5b 46 ea 5d 8f 32 d3 Data Ascii: ;Q3A@*<.ipJQcHs1\ 4IhYdzdsB~e(!jT]63_>%4sqD!W)K()y\h=(rE`,B: x/P"d~@4-9"sh[F]2
2024-04-18 17:16:05 UTC	1089	IN	Data Raw: 7d 74 70 32 59 6a 89 a2 90 b8 13 a6 66 d9 5c 66 51 4c 61 ec 85 c0 e8 b6 af 20 ef 0c 75 53 90 35 c0 f4 bb bf 8e a6 55 e0 00 26 37 8a f9 94 01 8d 42 b7 50 d5 c5 85 65 fb 1f d4 cb 10 b4 05 67 82 ac 96 04 b1 31 81 74 41 a0 d1 35 44 fa 99 05 4f 0c 1f 44 48 86 b2 e6 b1 f3 07 d1 ad 44 11 ea 5b 05 0e 57 5e a6 60 73 84 a6 d4 3e 6e e2 c0 01 36 34 2c df b8 01 ae 01 69 79 c1 bc 73 2a 17 8a 29 1b 7a c4 2e 85 56 05 d5 d6 2e 64 95 6e 90 7d 8d 4c 86 ca 2a 51 e8 ae a7 95 41 0a 5f 0f a5 df cc f2 10 04 fc ac b9 ac b6 40 2f 39 4c 63 01 68 db 58 39 2e 53 50 63 2c 1c 2d 72 4b d4 02 91 0f 16 d1 8b 6f 7c b7 1e 25 8f c6 8b 0f 14 52 00 42 80 49 ba 5a 4a 87 dc 5f 25 5e 6d 25 a0 1a 92 c8 1a 0c 6a a5 ca 95 17 6a 0c 6d 75 02 01 c2 91 9a 00 a7 e2 5a 1f 6f 34 af 23 64 04 0b 72 c7 ca 80 Data Ascii: }tp2Yjf\fQLa uS5U&7BPeg1tA5DODHD[W^`s>n64,iys)z.V.dn}LQA_@/9LchX9.SPc,-rKo\|%RBIZJ_%^m%jjmuZo4#dr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49984	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	863	OUT	GET /-/media/images/corporate/bhm%20graphic%20simple_270x170%20png.png?h=170&iar=0&w=270&hash=ABB107F15E66C1D41B6BAF4A394BD0E3 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	877	IN	HTTP/1.1 200 OK Connection: close Content-Length: 33032 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="bhm graphic simple_270x170 png.png" Content-Type: image/webp Etag: "wG/cuNg8iXT5lXY+P2vzWQ0B5ZRNX2l1PKPXgNvhRnQ" Fastly-Io-Info: ifsz=43649 idim=270x170 ifmt=png ofsz=33032 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010250 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210178-DFW, cache-pdk-kpdk1780033-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460566.543524,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 00 81 00 00 57 45 42 50 56 50 38 4c f4 80 00 00 2f 0d 41 2a 00 4d 40 68 24 c9 91 d4 59 33 6f b3 97 3f 60 db c7 20 a2 ff 13 50 a3 c1 4a 4a ce 19 8a 39 0b f8 a9 9a 6b 8d 45 52 64 2a 76 d4 84 0f fc a5 d1 b4 38 06 e4 d4 5d 53 bd 44 b5 e3 9a ca 4e 47 85 f6 03 62 a2 80 23 72 5d 9c 6b a6 a1 81 b4 dd 9d 19 40 35 7d 9e 01 af 38 f7 84 1c 56 b9 b6 0d 6c 07 7e c3 61 d8 ab b2 d6 ae 4c d4 49 a9 dc 4e 54 63 27 95 14 ac f4 48 fa f8 2a 43 f6 c9 a1 bf 95 1d 2e 7b 46 4d 0c 2d c0 4c 29 50 55 5c 2e 20 29 80 1b 47 aa d9 f7 e5 38 ff 7f d5 9c 1a 13 4c 10 c1 18 61 8c 10 a2 d0 59 4f 80 e4 48 92 22 c9 94 4a 95 52 ad 81 5a de e3 9c f6 ff af 61 66 66 46 41 b0 6d 5b 69 73 90 78 82 d4 6d fe 13 72 ef 85 d8 c7 7e 52 57 f8 fd 57 98 b6 0d a3 74 be 02 94 62 6c 72 e3 bf f0 d3 9c Data Ascii: RIFFWEBPVP8L/AM@h$Y3o?` PJJ9kERdv8]SDNGb#r]k@5}8Vl~aLINTc'H*C.{FM-L)PU\. )G8LaYOH"JRZaffFAm[isxmr~RWWtblr
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 61 56 fa bc c7 55 df 11 9d 83 cb 94 8e 06 3a bc ea 41 80 71 c7 e7 e5 7f c9 7e ff 3f 3f 0e fa 38 20 88 90 1d c9 29 46 2a 9b db 73 9e 2f 73 7e b4 61 98 24 d2 b8 d2 d7 fc eb b3 3c f9 7f dd fe cf ff d1 73 ff cf 7b db 3c 36 d3 1f fb bc 71 f9 da f3 4e de ee c9 3b dd 5d b4 9e 3d 75 61 1f 4b c3 51 ed bb 87 fc cf 1b 5c 61 b7 4e e3 31 ff ae 20 40 39 01 d7 82 eb 43 71 32 cc 8e 31 3d ec a0 bd 51 95 bc 52 4a b5 0b 60 87 70 ab 89 a7 d7 79 c8 c2 69 5f 34 6e f9 df ff de 16 57 01 90 26 1c 98 9b 94 ac 12 65 0c 11 72 38 25 29 4f 22 39 d3 37 b3 fc 3e 5d f8 ff 5f db 3d 93 99 6a 75 37 cb f3 83 7b f5 10 a1 9d d2 61 3c 52 08 02 18 c1 e3 72 6b 11 57 e3 b3 7d 88 e2 34 3c 50 f5 da 61 ac 1a 7a 9e 58 35 dc 13 37 b7 f1 35 46 46 b4 08 76 54 1d 3e 8d 3b 39 98 b6 20 0a 27 7a c0 35 6c 04 Data Ascii: aVU:Aq~??8 )F*s/s~a$<s{<6qN;]=uaKQ\aN1 @9Cq21=QRJ`pyi_4nW&er8%)O"97>]_=ju7{a<RrkW}4<PazX575FFvT>;9 'z5l
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 12 f8 ef e4 25 99 55 20 a5 63 09 e2 f8 73 f2 bd f9 a5 5c 7e f2 6e 99 c4 76 40 55 3d ef d9 50 a3 92 d9 a4 a5 d5 25 82 02 53 99 ef 51 f6 93 98 6f 80 ae e3 0b 9e fb 39 39 e6 9e e6 ba d2 ee 0f 00 ae 84 b8 5b 14 67 fb b6 44 0d 1b f1 7f 47 10 cb 70 07 60 55 86 c9 7a 79 90 16 9b c0 1d 4e 97 75 a4 7b 03 18 52 e8 61 53 2a 42 05 55 69 41 10 dc fa cb f9 f5 a1 40 79 9a 44 a9 e4 78 6c 71 f9 0f 7c e3 37 0f b3 56 53 19 4e 2e 95 22 17 2b 91 cf f2 31 74 9a e6 d5 3a 0c ee 45 71 10 13 2a f4 a6 94 2f 3a 8a 36 3b 98 99 cf 52 f2 d5 40 82 b8 a2 5a 55 9b bb c7 d0 27 5e 39 af f9 1f 69 3e b5 dd 53 ed b4 8f ae cd 35 71 3c 27 c7 53 df c7 54 f3 ca 09 4c 20 30 e7 69 57 fa 2c b0 e7 a4 a0 f7 fa df 37 29 71 71 4f 0f cb e4 a6 52 86 07 c5 47 65 2c e9 e1 da d6 48 4a 3c 6d fa 41 2b 85 10 80 Data Ascii: %U cs\~nv@U=P%SQo99[gDGp`UzyNu{RaSBUiA@yDxlq\|7VSN."+1t:Eq/:6;R@ZU'^9i>S5q<'STL 0iW,7)qqORGe,HJ<mA+
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 6a 12 63 a8 bc 66 d8 15 c8 12 28 b3 92 1d b3 20 2d ae 51 b1 29 4d 18 d5 4b 81 98 15 9b e4 50 32 49 8a 64 5d 82 d1 c1 5d 5a db 8d cc 45 e9 9d cb a6 5d f9 d6 d1 6e 8b 9f e1 69 56 c7 31 10 23 0f 12 21 06 9f 7b 98 0b cb 51 3c ff 24 ee 43 ef 2a aa 98 8b 86 f6 6a 7d ea f5 b1 fc 81 b8 ea 19 da 7d 4f a8 61 44 e7 02 1b c7 08 cc a1 24 6c 6d a4 5c 87 0b bc 20 a3 a6 aa c8 a9 de 9b 27 15 ab 5b 56 dd 3c 22 4b 0a f9 10 66 c7 c6 5c da 88 3d f3 2d 43 7e d2 a2 4f b7 b6 86 af 9a 7b c5 12 a6 48 1c 28 cf c4 9c 9b 81 be d9 b7 82 50 ce a3 ed 45 41 7a ae 65 4d 5f cb 8a 04 88 a0 01 07 f4 82 50 c2 30 a4 64 2a ca bb d8 54 11 a7 5f dd 6b d7 17 ed 3c 6b f0 6f 4b 4e 85 32 da c4 ca d7 df be c7 af fb c5 a0 c2 3b 8c 45 31 0e bd 28 88 ac 67 5b 87 91 5c b4 43 f7 ae dc 26 a8 31 ef 1c 7c fa Data Ascii: jcf( -Q)MKP2Id]]ZE]niV1#!{Q<$Cj}}OaD$lm\ '[V<"Kf\=-C~O{H(PEAzeM_P0dT_k<koKN2;E1(g[\C&1\|
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 31 3c 35 d9 53 e8 15 c7 ae 4c 9d 2f 73 66 9b 00 aa 5d 09 00 6b 37 ad ce 75 40 51 c4 6e 04 64 3d 05 1a fa 4f 6f a5 38 40 8a 09 4c a1 64 24 3d f4 da b6 32 61 77 d2 f9 67 af 8f 99 3c ab cc f7 6a 5d b5 4b c9 46 6d 67 b6 d7 66 92 1a 67 09 ca 5b 41 e7 84 1d 14 00 b2 67 9c dc 8a 04 45 16 af 57 c3 27 c2 f2 ae 3d dd cb e1 59 14 ae c6 36 ce ca f8 46 9e 15 da 14 c2 2a 01 11 1d 21 8a c4 f0 86 62 71 9b 65 59 16 e8 24 6b e6 65 e5 51 52 2c 15 8e 36 51 c8 cd e1 f4 77 96 f9 4e e6 80 19 c0 96 59 ee 4f 9e d2 ac d7 3e 5e e9 9b ff fd 0e 53 27 55 76 72 68 d3 88 7a 0b 2c b9 dc 1e ff 57 71 d1 97 eb ef 2e 03 20 44 04 92 95 e4 71 d4 92 f3 3c 24 53 98 f8 28 22 f9 82 28 c5 08 cc 26 19 95 1c d8 6c 13 27 11 bd 34 33 78 b0 b9 19 71 e8 b2 a7 5c 1a 2e fc 60 41 c6 d0 7d 69 f6 db 5e 0a 03 Data Ascii: 1<5SL/sf]k7u@Qnd=Oo8@Ld$=2awg<j]KFmgfg[AgEW'=Y6F*!bqeY$keQR,6QwNYO>^S'Uvrhz,Wq. Dq<$S("(&l'43xq\.`A}i^
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: f6 51 4f 45 52 88 03 82 13 80 10 ec 73 1c 54 a3 8b 02 b5 f5 cf 69 05 9e f9 92 98 4b c2 35 13 ce 93 f7 04 56 1a 63 31 ba cd 62 f4 5f f7 7b 09 84 fc c6 21 d5 9a 14 ae 22 e1 c8 a4 38 60 9c 19 40 14 0f 7d fb 9f 37 b3 4d 97 15 2a b1 e1 be 7f fc 6e cb 19 22 dc e4 43 bd ec 1f cf 0e f9 d5 8f 0b 22 f9 61 7f 2f 65 2b 97 d8 e9 d9 0b 0f 8d 23 97 e3 25 bd ee 57 e0 13 72 05 ae 0d c0 76 8a 9e cd ac 5f 64 f2 f2 ed 24 f6 af ab 64 bc 75 08 82 02 12 13 08 4a f5 66 87 2c 81 b0 10 09 90 f5 c0 ca 81 d0 78 a7 d4 1c 11 45 81 71 4c 6c 61 c5 12 75 bf 3a 29 d5 04 26 6c dd f0 ff 0b 40 9f f3 a5 10 2e 2a ec dc be 67 04 81 b5 08 68 cc b0 8a 83 44 f2 ae bd 61 d3 bb ed ed 24 7d 97 7c 73 0d e8 33 20 82 66 a6 1d b8 c8 39 c5 e6 a9 06 d9 8b d6 31 3c 9f 34 06 08 e9 56 c8 8b ac 79 fd dc 9a 52 Data Ascii: QOERsTiK5Vc1b_{!"8`@}7Mn"C"a/e+#%Wrv_d$duJf,xEqLlau:)&l@.ghDa$}\|s3 f91<4VyR
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 33 55 cf a0 2a 55 55 bd 9b 58 de ac c2 b5 92 2d 43 53 aa 58 24 d3 6b 82 12 0c 06 89 02 ac 60 e0 87 91 38 74 de b6 f8 b5 fc e4 35 4f 69 24 cc 9a 92 f5 43 c0 b7 4e 57 2f 05 18 50 a3 38 42 2b 46 53 23 6b a5 ea e5 d2 7f e6 de 31 af 5e 78 f7 87 b2 27 67 4d cf be d9 29 c7 ca 42 35 66 91 32 39 55 22 3d 60 b3 cf 94 13 8e 72 e6 ed 63 73 73 1f 88 2d 03 50 80 c6 c1 47 39 60 d7 51 de 29 d6 c4 4a 55 f2 8c 3e a2 80 37 4a 97 00 09 96 4a 69 e8 e8 a7 ed ad 4f 06 43 17 8e 8f 03 3a 28 61 d4 6b 21 d4 10 c7 26 53 09 3d bc d7 f5 cf 3e f2 37 be 79 cc 47 df 97 0b e1 17 8d f4 23 9d 18 71 23 da ff 70 39 f2 33 39 b8 d7 43 d6 5f e0 ee 32 e9 e4 60 98 d1 60 33 ea c8 90 86 29 80 2a 36 9e 8e 25 f9 3c 9b af 9a 15 95 f3 cf 53 0f d9 e4 11 05 a6 92 98 a3 43 09 38 bf 89 de ff 10 7e 1a 68 6d Data Ascii: 3UUUX-CSX$k`8t5Oi$CNW/P8B+FS#k1^x'gM)B5f29U"=`rcss-PG9`Q)JU>7JJiOC:(ak!&S=>7yG#q#p939C_2``3)6%<SC8~hm
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 2b 05 aa 0c c3 9b 43 b5 70 8b 05 3c d1 7a 6f d5 0a 1f e7 0e 8e 82 55 f3 37 1e dd 55 05 13 72 84 e9 8a f8 e0 41 cd b3 47 29 9c 05 bf b4 ce f7 94 c5 46 12 84 7c fa e1 7c d9 bb ef 98 8f 63 66 f4 7c 5f b8 6e 0c 37 05 33 a6 4c 24 1e 5f 2c e1 56 dc 84 ef b1 df 71 ca e4 d8 25 c5 19 36 c2 20 38 97 b8 d9 dd 90 f4 d5 64 ca dc 55 44 b3 92 8e b5 a9 6e fe da 78 45 c5 2b 51 19 92 c4 20 86 24 00 85 2a a4 ea 3a 9e 85 ba bc 38 12 28 36 aa e3 ec d9 98 fa 12 7c 33 d8 9e c5 8e 35 5d df f4 66 ee 27 de 1a f8 7f 6f a4 7f b8 4d 9f 9b f7 63 00 34 64 84 a4 16 74 dc 4e df 3b f6 db f2 c1 34 53 3a 95 00 37 af 1f af d4 68 ac 55 8a a2 30 a5 10 0a 24 20 d4 4d 40 c5 59 35 9e 72 05 1c 57 e2 fe 1c b0 63 71 ec 56 04 a0 f2 f9 8b c8 81 57 0b 96 af c3 1b ec 1f 8a 2a 56 13 c8 01 06 d0 95 2b f9 Data Ascii: +Cp<zoU7UrAG)F\|\|cf\|_n73L$_,Vq%6 8dUDnxE+Q $:8(6\|35]f'oMc4dtN;4S:7hU0$ M@Y5rWcqVWV+
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 21 70 28 1a 36 0e d8 8d 9e 4e 55 74 18 dd 6a 6a 71 6c 4f 6a b0 55 a1 14 fa 18 8f 25 4d 18 f4 05 b1 8f 15 c3 51 88 b8 65 0d a3 12 d3 85 c1 7f a8 aa 6d 5d ef 62 29 1e 36 89 42 cf 39 3d 55 15 e3 39 5b 87 a0 ba f9 14 6a e0 06 ab 6d 8f 46 69 2d 68 8c 65 de f0 ab 1a fa e6 44 9b b4 15 88 50 e9 17 7c bb 6c 73 52 68 9b b4 ac dd e9 3a 94 79 e2 7e f6 ea 32 c1 a8 44 26 14 15 23 cf fc 38 c0 a0 0c 09 68 41 8f a2 07 57 77 f1 cf df 0d 4e fa 15 2f 3c 19 f8 be d3 50 73 31 69 f8 7a a9 06 09 bc 4a fa 16 58 67 a4 96 55 b2 a3 5d ee d7 88 13 6c ab 60 e8 1c 0d 4b 07 dd ed de 7e 52 ca e6 c3 d8 c7 7d 05 93 e3 40 31 0e c7 01 2f aa 49 38 de 14 19 f7 fd b1 2b ec bb 20 4f e1 43 9f fa c6 a8 2b cb b4 29 42 14 2e 1f 49 12 88 c9 9a ff cc 65 96 81 31 fc 57 30 d0 e7 44 74 00 cd 5f d5 c4 17 Data Ascii: !p(6NUtjjqlOjU%MQem]b)6B9=U9[jmFi-heDP\|lsRh:y~2D&#8hAWwN/<Ps1izJXgU]l`K~R}@1/I8+ OC+)B.Ie1W0Dt_
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: cc 1f a6 63 72 7b a7 a7 2c 74 a2 40 af 5a 07 ce 86 94 2a 9b 7c 49 7f f3 5c 8a 16 8f 4d 02 04 03 2b a7 a9 e9 04 67 fe af 9b 44 19 01 e7 c3 31 dd 3c 1a d6 12 31 8a ec 6b c1 df ae 1e ca 03 fd f1 90 fa 95 36 d6 d9 44 3e b6 b5 95 84 22 84 38 02 10 d2 23 06 e4 6c 1c 34 4d 7f b5 62 bf 31 f0 9c 85 21 11 f1 b3 5b 6d a6 1d 78 7e bf ff 67 9a 74 9f 59 15 32 76 62 c2 66 24 de 83 cb 15 d5 8b 5b f9 bd ff 79 d6 37 fc c6 8b ff d6 37 54 29 b2 d1 d1 20 37 28 90 19 94 e4 04 8b 60 5c d6 09 9d e4 9a ae 3f 2f dc fc 16 eb 19 aa 60 e7 64 ca 20 95 83 c3 ed 71 c5 e5 1b dc 62 5e 8e 9d ed 70 c7 f2 03 c4 c1 c2 be 9e 39 d6 fa a3 29 68 36 6e 06 a8 68 c4 04 50 44 60 c3 a9 56 85 74 88 10 9b 70 c4 4d c3 42 4d 01 87 6a 97 67 47 ff c2 b5 70 df f4 8a f1 33 f7 b2 00 cb 02 c3 8e 69 ae 9b e8 26 Data Ascii: cr{,t@Z*\|I\M+gD1<1k6D>"8#l4Mb1![mx~gtY2vbf$[y77T) 7(`\?/`d qb^p9)h6nhPD`VtpMBMjgGp3i&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49988	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	866	OUT	GET /-/media/images/lnrs/content/runaway-children-story_270x170%20jpg.jpg?h=170&iar=0&w=270&hash=3136CC6D5BF8B0C93796551094BA84B0 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	882	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11152 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="runaway-children-story_270x170 jpg.jpg" Content-Type: image/webp Etag: "6Su5V65LpYfLofTTWwlu+wgliBQRaibYsLBRARW1CyI" Fastly-Io-Info: ifsz=14104 idim=270x170 ifmt=jpeg ofsz=11152 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010213 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210157-DFW, cache-pdk-kfty2130036-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460566.691792,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 88 2b 00 00 57 45 42 50 56 50 38 20 7c 2b 00 00 70 8c 00 9d 01 2a 0e 01 aa 00 3e 51 20 8d 44 a3 a2 21 15 d9 c6 50 38 05 04 b3 80 64 84 39 55 f6 ac 7e c3 30 8c 09 76 71 f5 21 fd c3 78 7f 99 df 36 cf 4d df e1 b7 e8 ba 29 bd 69 bf c1 da 66 71 3f f4 1e 06 fe 7f f6 9f 06 3c 35 f6 c7 a8 5f 82 7f cf f5 bf fd 9f 7c bf b0 ff 53 e8 23 8c 3f ef fb 3c 6e 67 a0 a6 09 ff 9f e6 87 ef fe a0 3c 1a 27 87 ff 8b c9 e7 ee 5e a3 3d 33 7d 2c c6 ed b9 f9 28 4d e3 ea 2a 5d 07 2a 0f f0 e8 e4 b2 df a5 ca c1 40 b1 32 ae f7 7f cd 5d 87 b9 7c d8 0f eb e0 3e 56 93 cc ec e1 38 6f a1 6a 7d c5 22 ad 6f 81 ed c2 b5 15 f1 0d 96 cb d2 08 60 69 cd e7 45 15 94 30 09 5a a2 f6 11 76 99 bb a3 22 92 05 ca 6d 1d d8 7d 1a 77 f9 77 7e e9 a8 17 eb 3c d6 71 31 1e 0d 14 70 11 4a 5b 18 69 ce Data Ascii: RIFF+WEBPVP8 \|+p>Q D!P8d9U~0vq!x6M)ifq?<5_\|S#?<ng<'^=3},(M]*@2]\|>V8oj}"o`iE0Zv"m}ww~<q1pJ[i
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 30 ea 5a 8c 91 e0 9c 68 52 de 2b f5 47 b7 98 90 e2 06 05 72 f1 47 be 46 da 6b cf 59 05 59 9f a6 df ee 2e 66 44 87 c9 14 fb 1f 44 9e 65 34 63 67 bb 8b 97 05 b6 bd ad 96 55 aa e8 dd 6a f1 1c 10 16 5d f1 e8 4c 52 ce a6 b5 74 67 af 08 b5 79 31 65 f5 1b 6f 16 e9 31 0c eb e5 23 55 e4 12 0f 42 1f 52 7c b2 25 25 f1 b8 61 a7 1f dc 50 5b 21 54 a5 e4 15 56 00 8f 72 c5 90 97 d1 a7 76 56 2d b3 fd 86 0b 8d f9 a7 42 6e 3f 6c 56 34 99 2a 43 c0 7a ac 35 db b6 8f 9e 01 d9 80 02 e6 75 94 ab 74 b4 fa cc 18 69 89 4e 5d ab b3 ed 86 79 f7 87 c8 60 a2 6f 22 85 28 11 a3 e1 af 34 f1 db d6 9f 6c cc 3e c2 dd 78 80 33 b2 b1 c9 61 c8 c5 16 be 10 c8 a8 fc 09 5e 60 cf c0 fe ee 01 08 3e 7d 52 02 e1 30 41 3d 9e bf 3a 45 7e 06 df 77 c4 bf e1 ec fa ec 38 17 f0 df b0 99 7c a1 60 c1 34 7f 70 Data Ascii: 0ZhR+GrGFkYY.fDDe4cgUj]LRtgy1eo1#UBR\|%%aP[!TVrvV-Bn?lV4*Cz5utiN]y`o"(4l>x3a^`>}R0A=:E~w8\|`4p
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: dc 5e 73 ea 3f 86 4e fb 5c 5e 52 91 53 e2 22 90 08 77 34 f5 a3 3f 18 3c b1 63 f8 26 8b 7b ba a1 f7 b6 d8 d2 63 e9 78 4d 73 08 7e 28 b4 a7 97 28 60 ab 2a 29 03 fe a3 0b d3 93 5e b4 98 47 15 21 14 c5 e0 f7 e0 6f f0 e0 3d 8f 6c 7d a4 f7 24 39 9f 5d bf e0 e2 00 a9 e9 bf 91 de 44 d0 95 4a f9 66 10 87 90 82 72 97 93 f1 91 4b f8 86 7f c6 86 f0 32 dc ce 7d b8 bb a2 42 c0 4a 56 6f e3 a8 9b 49 e9 89 32 c4 78 f7 2b ee e5 4e b4 69 fe 5f d7 b6 85 68 d4 25 a5 d5 e1 39 65 c1 27 4e fd 1b 06 bd 1e 8e 8f 40 d2 09 8b 4b 3d d6 33 e8 34 2e a7 31 e3 63 71 81 97 c4 de 17 83 89 69 33 e9 31 9a 8e 93 b0 72 bf 2f 49 f1 fe ec 72 86 45 d0 55 a4 07 e4 41 8a 21 6b 07 a6 fa 48 96 52 d2 a1 9c 9b 3e b3 ad b6 2c 5f 5b 17 b1 51 de 1b 8f f3 0a 5a 54 ce 09 0c 6f 7d 7b b8 22 f6 ea 0b dd 6f d6 Data Ascii: ^s?N\^RS"w4?<c&{cxMs~((`*)^G!o=l}$9]DJfrK2}BJVoI2x+Ni_h%9e'N@K=34.1cqi31r/IrEUA!kHR>,_[QZTo}{"o
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 70 bf 12 54 31 30 e1 28 5f 5a f0 24 7d 2a 0d 90 34 51 ed 89 54 f2 86 fa c8 9e d7 b0 d6 1c 77 94 ef 00 e7 17 fa 39 b8 01 57 55 93 ba 82 91 eb bd d3 31 20 e2 4b cd ee 15 05 ba 3d 3f 7a d6 b4 cf c2 0b fb 67 b2 35 c4 86 88 c7 04 5a 9c 5a 33 b6 46 a1 a2 91 ac 2c b2 29 e8 16 a5 59 38 10 62 7b b6 d4 c7 5d 5c e3 f7 d0 eb 70 dd cb cb 1a 49 3c 3c 23 27 45 4a 36 6f b6 01 70 5c 01 2a 5b fb cb 1f c0 17 c4 af 7b eb 74 30 ab 95 5d ee 9b 93 36 90 47 9e 48 9f 66 83 e9 1a b1 be 7b 7d c8 29 c4 a6 0e 7e 6b 79 28 49 0e 04 26 c5 b0 52 57 ce 42 75 64 96 dc 90 fb 93 30 ea 38 ab bd eb a6 49 fa a0 69 72 88 ab 57 1f 9b 0a d4 26 65 bd 25 98 22 ea eb f5 bf c2 83 a7 5c 96 8a 9e 36 15 9e 26 60 ea c1 0e 84 71 51 18 5c 21 72 26 9b 3b b2 03 fa 86 cf cc 50 25 9e 41 44 24 b5 58 e2 c6 06 97 Data Ascii: pT10(_Z$}4QTw9WU1 K=?zg5ZZ3F,)Y8b{]\pI<<#'EJ6op\[{t0]6GHf{})~ky(I&RWBud08IirW&e%"\6&`qQ\!r&;P%AD$X
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 21 06 08 c8 4c 4b ad 45 d0 38 3b d3 ab 85 09 77 10 ec a2 e9 ae 8e 84 3d 29 1f fb 91 71 c3 fe 94 03 ae a1 e5 4b 72 f2 d8 19 08 07 60 24 15 b5 b0 74 5b 9d 0a 5c e9 fe 51 89 b4 d3 b9 48 dd 92 1f da 5a df 0d a2 35 ab c3 37 3a fb d4 e1 6d 8a be ad 68 c9 51 75 9f e1 27 c1 27 1c 28 66 86 b8 cc 32 d3 6c 48 a9 c6 5c 95 c5 33 83 a2 fd b1 74 9e 42 dc 1b 2e 6a b4 39 e4 86 83 f8 3c 82 97 8b 06 59 fd ac 80 ca b4 95 6e 6c b4 1f e2 87 77 56 46 6e d6 b9 2b 59 49 24 6e 38 2d eb 53 2d 21 bc cc 68 1f 4c 0f 8d 92 d2 c7 5f 33 2c cf 49 11 a0 9d a9 17 50 d5 56 c9 e2 7e 5d 92 64 ee 83 99 27 44 58 35 44 f5 b3 5d 74 5a 97 0a 61 03 12 7a 79 71 92 ed 8f 81 71 f5 44 f8 6e 82 07 a0 1e f5 8c 73 13 a3 1e 29 ec 06 86 4d 6b 01 ab df df 29 0d d9 51 62 d7 b4 f0 ea dc 47 5b 7f 0c 95 b5 4d d0 Data Ascii: !LKE8;w=)qKr`$t[\QHZ57:mhQu''(f2lH\3tB.j9<YnlwVFn+YI$n8-S-!hL_3,IPV~]d'DX5D]tZazyqqDns)Mk)QbG[M
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: f7 72 58 60 61 df 33 05 4d 53 04 da 8f 09 e5 23 b7 e2 8d 6a c0 8f 50 9e 42 ae 3b dd 25 72 17 a2 b1 f4 06 b3 d9 eb 39 c8 43 4a 8f 7e d2 cc a3 ce 71 53 e0 f4 61 05 15 63 55 66 c2 4d 81 d9 f9 dd 2e 00 c1 cc 59 0c 06 2d df 8f 67 04 d4 08 d3 51 77 9c d0 84 cd 85 1c 6a 07 9e aa ba ce 2f 8a 6a 5d 9e 5a 91 78 cb 7f a1 75 d7 30 f2 0a b0 19 20 f6 83 d1 b9 ee 34 eb 81 1b 9d 2d df fe f0 c6 b1 20 57 fc 0d 59 3e 23 43 3b a4 53 fc f2 6a ea da 8b 41 86 22 15 f9 f5 f4 94 11 32 f7 11 c0 9a 7c 5f 1d df aa c0 ec 3c 90 a2 e4 3c a8 ab 06 5e e8 f1 9d 0b 77 e6 aa 85 f3 e2 da 97 7d 0a 06 fa 31 f7 91 18 cc 38 b5 18 7c a7 d1 20 af 42 dd 61 f0 1a fd cb 74 f6 ed a3 93 4e 5a b9 c2 fd ab 1d df bb 18 19 8d e1 36 b4 cb a9 f6 fd 16 d7 b6 15 a2 52 70 dd 84 55 c5 13 1f 0e 78 8d f2 62 1d 07 Data Ascii: rX`a3MS#jPB;%r9CJ~qSacUfM.Y-gQwj/j]Zxu0 4- WY>#C;SjA"2\|_<<^w}18\| BatNZ6RpUxb
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: f8 ab 24 7a d8 42 dd d9 49 89 bd 9e 54 6e a2 99 6a bc b7 82 2a 89 84 52 e1 da b7 6e 8a fc 18 d7 21 bb eb b6 7e b7 94 af b5 fd 86 c5 fe 2c e6 66 71 c4 85 d4 c2 4e 3f 72 ae a8 fd 10 c5 da c0 b0 8f 60 01 05 9f 37 a4 49 1a 37 ba 30 d3 a6 50 9b a7 83 81 76 7c 0f 5b 80 8b c0 8b 4e a4 88 0e 2d 40 6e 8e 84 a7 85 cd e4 79 f2 6b 9b 0e 6b 3f 1d e7 da 42 21 19 6d 30 fc d3 01 1f 0a f1 1f 6e ec 4b d1 92 49 54 67 1e 55 f8 7d cd d1 e6 70 b9 5a 89 30 2c 93 10 25 86 ac 1a 4d e1 06 a0 e8 c0 67 37 c6 03 11 6a 5e 2d ae 15 c8 a5 80 02 85 ba 03 35 46 89 8d 0d 43 24 b5 59 c1 06 d8 92 d0 28 47 fc 3f 12 9b 58 60 36 61 a6 6f 30 e3 81 22 3f 26 c9 19 ed 2b 27 6c 36 a9 d1 64 cd 09 27 01 4c b9 1f 86 90 c1 97 b7 70 9e 32 31 5b 49 00 ce 1d da 24 85 34 bd a9 a5 90 4e 18 20 2d a9 7b c4 65 Data Ascii: $zBITnj*Rn!~,fqN?r`7I70Pv\|[N-@nykk?B!m0nKITgU}pZ0,%Mg7j^-5FC$Y(G?X`6ao0"?&+'l6d'Lp21[I$4N -{e
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c0 e4 e7 26 80 f1 76 1a 1b 8e 94 05 9b 57 3a b4 d2 cf bc 9d 40 cd 41 2d e6 d6 03 3e c8 64 41 46 15 db 33 ee f8 3c 43 ae 23 91 0a 3a ed 70 d9 95 b4 87 64 20 d3 80 29 0b d8 c5 6e b3 d8 13 2c 75 31 d1 27 bf c8 61 9b e1 37 58 f3 c6 29 94 9b 24 65 59 4e df 26 40 74 c4 48 00 33 67 bf 4f 2d 3c 23 5f 2d 29 82 dd 01 14 ac 64 22 c8 77 e7 cf cd 6f bd 99 4b d7 6c 8d 5d 76 cd 0f e3 73 33 78 ca 7d 31 63 52 47 32 8a b7 be 72 11 8d 54 17 a3 0c f9 b3 68 4a 08 d2 b2 4f 6a 4f 21 89 18 50 78 fc 5c c5 75 05 8f 5d 1a 0a 97 ec 1b c9 cd 13 eb c0 53 99 a6 3c bd ca 8a b2 e6 52 68 73 01 83 a7 c7 60 5e 1c b5 3b 82 5b da e4 11 7a 31 a9 df 71 d8 50 03 56 13 6a bc 59 54 54 30 45 7f 8e 76 e4 6f a9 bb 80 8b 34 17 88 79 a9 d5 08 3d ce ee 0d b5 4a 34 82 14 36 5c 5e d9 78 e9 bd 5c d6 14 2a Data Ascii: &vW:@A->dAF3<C#:pd )n,u1'a7X)$eYN&@tH3gO-<#_-)d"woKl]vs3x}1cRG2rThJOjO!Px\u]S<Rhs`^;[z1qPVjYTT0Evo4y=J46\^x\*
2024-04-18 17:16:05 UTC	120	IN	Data Raw: b2 90 02 a7 de 0d b4 85 50 d5 61 3d 50 06 dd 32 ab c1 be df db f6 fd 64 84 f3 8f dd 1a da 36 af 6a dc d9 8e 90 9f a0 27 97 c1 59 03 d3 9e 89 8c 28 99 9f a9 5f 51 53 15 2b aa c1 b4 10 93 ce cf 76 01 1d e9 26 14 62 9e 11 6d a7 23 a3 52 f2 46 f5 15 d6 18 06 de ca a2 dc 8e 8a e5 fd 84 98 f2 5c cd 64 8c d5 95 4f 24 42 8c 90 44 8c d4 ec 88 25 36 05 6d e9 98 00 00 Data Ascii: Pa=P2d6j'Y(_QS+v&bm#RF\dO$BD%6m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49985	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	636	OUT	GET /-/media/images/financial%20services/tile%20img%20for%20tcof%20retail%20jpg.jpg?h=170&iar=0&w=270&hash=83A5C49094FD423F6A608530CF757C1E HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	875	IN	HTTP/1.1 200 OK Connection: close Content-Length: 6220 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Tile img for tcof retail jpg.jpg" Content-Type: image/jpeg Etag: "TcyJyedIvtUV7GSjOp7InYmonqY2MvcfCfARPFuUIJY" Fastly-Io-Info: ifsz=7036 idim=270x170 ifmt=jpeg ofsz=6220 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010251 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210039-DFW, cache-pdk-kfty2130079-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460566.630850,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 64 dc 91 6d 5b aa 8c 68 18 82 13 9a e7 03 68 ec 22 52 2f 6d ae 87 3a 26 00 21 59 a6 29 83 aa bd 66 99 d8 49 27 dd 65 b5 ce 07 55 89 e2 60 a2 d4 e7 1f 31 b7 19 fb 95 23 6b ce ab 4b 57 90 38 0f f9 1f e1 47 8b c9 f8 55 81 a3 62 1c e7 0c f1 7f ba 6e b6 96 c7 84 d1 f3 3f 94 1e d6 db 50 c5 8d 93 35 e3 65 9e 41 10 5c 20 1c 26 d3 70 32 24 c9 c0 1c a1 5b ab ba c7 28 a7 ba a6 e2 58 74 98 91 98 44 d7 13 81 30 2e 83 da dc dd 59 a6 d1 a4 38 e4 ac c6 bd d2 ac b2 b3 80 00 1b 0d 8a 72 c9 d9 5d d6 82 e4 a1 55 85 a0 92 04 ec 51 87 34 e0 82 b5 dc 40 97 2e 5c 80 88 03 dd 25 cd d3 7d 93 d0 39 ad 75 8a 59 4d c3 97 4a f2 8f c4 70 b2 17 b1 cd 1a 9b 71 b8 dd 23 51 d9 67 cc 5f 15 71 ae 6b a2 c2 77 52 e3 a0 13 04 81 95 44 ba 31 9e 57 3a ab c3 60 9b 15 5e df a5 71 5d 6b 99 50 79 5d Data Ascii: dm[hh"R/m:&!Y)fI'eU`1#kKW8GUbn?P5eA\ &p2$[(XtD0.Y8r]UQ4@.\%}9uYMJpq#Qg_qkwRD1W:`^q]kPy]
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 83 82 a8 37 2a ed 01 fd c6 c0 5c 92 bb 3c 9a f5 ae 6f 1e fd a4 8c 5e b9 bd 2d 2e ac b4 35 ec 23 49 f2 c1 04 9b d8 18 84 9e ba a8 ab 51 a4 38 80 00 92 62 7f fb 14 3d 4d 61 5a b5 5a cd 12 09 b1 1f 03 3e 8a 28 52 a9 55 da 9f 4d d0 77 02 7f 30 b9 1d 33 9a 2a 34 0b c0 73 cc 46 00 ba 97 d0 2c f3 12 08 f8 57 8b 5d 46 9c bc 69 23 61 83 e8 ab 54 a8 d7 30 07 b6 26 e0 03 b2 8d dd b4 b2 48 a4 dd 33 11 8c 26 92 d6 90 5b 9d f8 49 01 c1 c4 c5 82 b1 4c 39 ee 20 09 04 4c 71 b2 68 93 6d 1a 55 69 e8 f3 38 0c 5d 3f 50 2d 6b 99 57 4b 49 b1 b1 59 b0 d6 36 9e a7 49 8b c8 c3 4a 7d 1f 05 cc 12 18 62 e4 c4 5c 6f 0a 2c 6b 2d e9 73 cd 3e 6d 27 bc 42 28 68 b9 f9 09 6d 73 0b 65 b5 01 08 81 69 da 0a 4a 30 44 18 10 3f 28 87 28 35 44 4e 76 2a 75 7b 28 a3 46 83 7e 54 90 23 09 41 c2 73 fc Data Ascii: 7\<o^-.5#IQ8b=MaZZ>(RUMw034sF,W]Fi#aT0&H3&[IL9 LqhmUi8]?P-kWKIY6IJ}b\o,k-s>m'B(hmseiJ0D?((5DNv*u{(F~T#As
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 1a 81 c1 76 c1 2a b1 ac 5a 08 a9 e2 03 90 d1 00 7e 21 14 73 3e ba ab dd a8 b4 bb fa 6e 16 0d b9 b6 f0 ac 51 73 dc e6 b5 a6 e1 bf be 0a a7 45 cc c8 97 38 09 1c 5b 83 e8 8d b5 85 1a d2 1d ad ce 11 88 b2 2c e3 4c e5 bb 95 ac 3c 4d cc 77 52 7b df d5 24 57 d5 10 3d 42 20 f9 c6 56 7c fe 35 32 4f f8 c7 d9 10 73 62 f2 97 a8 c5 c2 1b 1d bd ca 5a 06 38 82 38 f4 48 75 ae 11 16 f0 52 9d 22 d7 3f 84 15 76 a2 80 ba 4c 1b 21 3d fe c8 5c 46 d6 2a a4 67 6b 81 13 dd 18 71 17 49 24 cd e0 2e 26 d6 39 4f 44 73 9d 64 ad 43 dd 2e 4e 17 7e 51 26 8a d3 75 08 ee a7 51 23 84 a9 ff 00 41 76 13 1b 32 7f e4 a0 90 45 b9 51 22 20 25 b9 da 44 72 80 eb 93 30 98 04 9b 09 39 4a 69 c1 98 da 15 9a 4e 6b 5c 09 36 32 08 e4 1b 20 1d d2 c8 af 49 ba 24 13 70 44 82 3d d7 a2 90 07 65 91 d1 b6 ad 2a Data Ascii: vZ~!s>nQsE8[,L<MwR{$W=B V\|52OsbZ88HuR"?vL!=\FgkqI$.&9ODsdC.N~Q&uQ#Av2EQ" %Dr09JiNk\62 I$pD=e*
2024-04-18 17:16:05 UTC	704	IN	Data Raw: 1c 09 90 88 21 6e 6e a6 b5 8e 92 01 91 b2 65 36 91 2c 77 16 27 30 52 dc e7 1f 29 f3 46 36 21 43 5e e6 12 5c 35 11 fb a2 98 bc cd 71 9c 76 46 00 fa 81 46 da 94 c8 f3 10 0e c3 29 2e 78 13 a6 de 97 53 d8 49 73 81 f2 7c 11 28 4b ce f6 1b d9 47 88 ee 54 17 72 eb f1 94 22 d7 12 66 c6 fc 84 b7 3a dd d7 4f 37 03 70 84 9d f6 46 92 8d 66 62 3d 90 93 e5 ed 30 7b 14 2e 20 8c 5f 9d 97 79 9d 39 3b 2a d2 52 01 da e8 c9 88 1c 67 d5 00 69 01 76 9d 46 66 0c df f9 41 38 92 a5 a5 58 6f 4b a9 cd 68 ae c2 0c 5c 4e 4e d0 ae 37 f4 df ab fa c0 d8 81 6d d5 68 f4 cd d6 ee 50 ce 56 b3 7f 4d 64 0d 75 4c ef 03 f9 55 6b f4 35 28 8d 6c 3a 9b 37 e4 23 54 6a a9 ca 95 65 9d 0f 51 51 85 f0 01 d8 3a c4 aa a4 16 92 08 82 2c 41 cc a3 44 dd fd 35 a0 50 2e dc b8 cf b2 b8 e7 2c af d3 ab 00 4d 27 Data Ascii: !nne6,w'0R)F6!C^\5qvFF).xSIs\|(KGTr"f:O7pFfb=0{. _y9;*RgivFfA8XoKh\NN7mhPVMduLUk5(l:7#TjeQQ:,AD5P.,M'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49991	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	736	OUT	GET /-/media/images/healthcare/3-i%20and%20r%20pages/video/member%20engagement%20with%20sdoh%20webinar/ln%20menu%20image%20270x170%20knocking%20down%20barriers%20with%20data%20jpg.jpg?h=170&iar=0&w=270&hash=F9FAAD5F1BF33D3F6177BFF5F80A0F99 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	906	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14552 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="LN Menu Image 270x170 Knocking Down Barriers with Data jpg.jpg" Content-Type: image/jpeg Etag: "MSQBVjO+kU5dUnwTtfCm5rLxngiaKLg4z9qGTrkZv40" Fastly-Io-Info: ifsz=54178 idim=270x170 ifmt=jpeg ofsz=14552 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010230 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210129-DFW, cache-pdk-kfty2130036-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 0 X-Timer: S1713460566.741143,VS0,VE3 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 60 54 0b 93 7d b0 71 70 33 d3 8d 46 ca 39 f4 e5 8e 2d 07 96 0c a3 c3 52 a6 48 65 8e 45 bd b5 46 43 0b f8 5c 63 c3 47 e5 8d 99 02 18 07 86 39 f6 45 58 10 48 23 91 18 30 d1 79 63 8b 45 8e 9d 21 91 1c fb 4c 02 bf 49 00 e7 f9 b1 12 5a 42 8d a5 96 c7 a7 9e 09 f6 23 1d 90 23 2f 65 29 ee fd d6 fc 27 fb 63 66 40 3d 85 81 00 73 1b ff 00 96 3c 76 1e 58 25 52 f1 53 96 56 37 61 f7 57 7c 07 9e a9 9c 1b 90 a3 f0 8f eb 8e 82 58 09 c6 59 d2 22 34 77 9c 78 74 c4 7a b6 6a b8 c5 41 f8 81 b4 8a 39 02 79 37 cf 1e 09 e7 b0 18 2b 97 65 59 84 f2 8b 52 b8 85 c5 9d dc 68 4d 27 ad cf 3f 96 37 e6 2e cb 1a 95 96 4d bc b1 36 8b 24 ae cc 4d e1 8a d1 f5 91 f6 51 fd f1 78 8f 21 ca 72 a7 53 5b 51 1c d3 73 51 23 04 8f e4 0f c5 80 b9 c7 1b 65 b4 6e 29 e2 99 15 c9 d2 ad 2a 95 8d 6d e0 bb 5f Data Ascii: `T}qp3F9-RHeEFC\cG9EXH#0ycE!LIZB##/e)'cf@=s<vX%RSV7aW\|XY"4wxtzjA9y7+eYRhM'?7.M6$MQx!rS[QsQ#en)*m_
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 4e a5 24 5c 72 c2 72 13 7b c7 e2 00 ad d6 b2 b7 9e d1 83 55 32 e9 01 45 99 6d d4 36 f8 a8 cc 29 55 ac ee b8 64 66 b9 5c b2 50 c3 52 79 88 82 b0 be f6 bf 74 e1 65 53 c3 d4 ef 26 b0 d2 21 3c ec df df 1c a6 34 ad cd 7e 87 54 ad f9 b1 5a ce 33 4f 7d bd 1d 3b 9e c1 4f da 3a 9b 76 87 96 91 6e 6b e3 e3 8f b9 95 73 3e ba 68 5a c1 ae 24 61 cc ff 00 08 f2 f1 c0 f1 08 86 20 c7 14 28 ea 62 f2 b9 20 a8 3f 26 06 ab 2b 1a d8 6d 8a 75 65 6d 44 f9 9e 51 97 23 9e c0 54 a5 55 50 e9 a5 0f d9 af fb 4e 2f f2 c1 cc d2 b2 34 12 3c 92 04 8d 14 b3 b1 e4 15 77 27 e5 8a fc 31 49 4d 45 97 56 ce 85 6a 73 1a f8 a7 75 3c d2 2b 15 86 33 e6 ab b9 f3 27 0c 26 84 42 0d 44 91 9b 4f de 72 5b c7 08 5e 3e 97 b4 ad a0 5f c3 1b 1f a9 c3 a7 34 70 64 71 7b 9b e1 05 c4 b5 42 af 36 94 83 74 8c 14 5f Data Ascii: N$\rr{U2Em6)Udf\PRyteS&!<4~TZ3O};O:vnks>hZ$a (b ?&+muemDQ#TUPN/4<w'1IMEVjsu<+3'&BDOr[^>_4pdq{B6t_
2024-04-18 17:16:05 UTC	1347	IN	Data Raw: 7d 2f 89 3c 53 31 92 bf 26 88 48 bf e9 d1 b3 f8 0d f6 f9 62 7f 0d d1 49 47 41 3d 7d 5a e9 a9 af 61 3c 8b 70 dd 9c 2a 2d 14 77 17 e4 bb 9b 75 27 15 bc d2 46 96 48 6a 9b 9b 55 c6 47 90 d5 61 87 30 d0 44 2b 5e 41 05 71 05 48 a4 a5 aa a8 d6 a0 84 62 37 ea 76 03 d7 08 3c c1 1a 39 3b cc 35 18 44 87 d5 f7 c3 63 8d 25 33 3d 06 58 8d df 9e 6d 4f d3 ba 30 af cf f4 b6 65 56 13 e1 54 0a 3e 42 d8 59 95 20 d0 7b eb 36 df 0a c4 21 e1 2e 1e 5b 58 ae 53 09 03 fd 8c 70 cc 0a 22 77 09 3b 00 6e 79 5c 60 86 51 19 4c 9f 27 89 87 c3 97 46 bf 48 f1 5f 9e 45 63 20 2e 6e 01 1b f8 f8 e3 cf 66 d4 cb 15 74 9e ea 48 61 06 99 22 62 6c 45 81 3b 9d be a3 00 33 18 07 6b 26 a9 14 1d 69 cf 6e 64 0b 83 82 1a d6 d4 97 b8 02 42 58 8e 60 63 86 66 0a b4 84 00 da a9 d7 66 e4 7a fc b1 d7 60 ce 02 Data Ascii: }/<S1&HbIGA=}Za<p*-wu'FHjUGa0D+^AqHb7v<9;5Dc%3=XmO0eVT>BY {6!.[XSp"w;ny\`QL'FH_Ec .nftHa"blE;3k&indBX`cffz`
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 0c e7 15 0c b4 cc b7 ef cc da 7e 5d 71 4d ce 14 47 49 0d 8d b4 cb 17 fc c3 07 b3 17 ed eb 52 24 37 11 0b 7c fa e0 76 75 4d 4f 51 95 ce cf 2b 2f 66 ad 34 8c 0f c0 91 6f 7f 99 b0 c3 58 69 26 c7 eb 1f 31 47 5f 3f bd f1 4d 74 b7 ba 52 a1 45 3f c4 7b b8 5f 66 5f 69 99 54 0f 17 55 fa 9b 62 e7 96 02 f4 95 95 6f f1 4f 31 20 f9 0f f3 c5 3b 49 97 38 44 e6 5e ae 15 fa b0 18 41 da 7a 2b bd 76 15 37 58 26 9e 2c ba 20 7e 18 51 7d 41 5b 62 a8 ea b1 4e 43 2e c4 00 d7 3c 88 f0 c5 a3 33 bc 56 20 5f 42 8f d0 6d 80 35 e9 7a ae e8 bd d8 37 c8 8d 57 fa e3 cd 3b cb 17 69 c1 56 dd 9d c0 16 26 fe 5d 70 3b 31 55 76 51 cc 98 c5 ed 89 cc cb 17 79 8e ad 88 fa 8b 6d 88 72 f6 45 59 46 e4 a2 fd 6d 8e bd 0c ca d4 19 c6 85 06 96 0b bf 72 c3 e5 8d 05 51 9d 65 59 3e 59 49 55 99 e6 34 f4 91 Data Ascii: ~]qMGIR$7\|vuMOQ+/f4oXi&1G_?MtRE?{_f_iTUboO1 ;I8D^Az+v7X&, ~Q}A[bNC.<3V _Bm5z7W;iV&]p;1UvQymrEYFmrQeY>YIU4
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 15 6e 2a ac f7 7c b7 38 01 ad db 44 94 aa 3f 39 32 1f f9 46 2e 14 ab a6 01 85 77 1b 4a ce 99 64 28 dd f9 eb 9c 91 e4 a5 63 1f d7 04 de 93 07 08 bc 89 f7 82 fd d9 69 32 9a 38 f7 d6 21 5d 43 cc ee 71 47 ca e3 33 71 46 59 10 17 2f 99 d3 8b 7f b6 30 db cf 29 16 6a da 6a 7a 71 fe 91 2c 4b 18 fc e4 0f d3 0b dc a6 8d 60 f6 9b 41 42 87 52 c3 9e 08 81 f1 ec de d7 fd 30 9c 83 94 19 66 16 e7 37 df 59 b3 33 34 57 66 5b 75 37 f4 b6 04 ca 81 a9 e3 7e 65 18 a1 f4 3b 8c 18 ae 36 91 87 eb 80 c2 51 a9 a2 63 dd 90 69 df a1 e8 71 e6 1a b3 2e 04 c0 b3 9b a5 b0 32 b2 aa 9e 8e 1a aa ca a9 04 74 f0 47 ad da dc 94 6d f3 27 13 65 25 65 28 db 30 24 58 f9 78 e3 3d 71 df 18 c9 9a 55 55 e5 94 73 9f d9 c2 35 4d 85 bb 49 14 dc b1 f2 be c3 07 87 19 c8 c6 f4 51 bf fd 4c c8 fc 80 57 a8 ed Data Ascii: n*\|8D?92F.wJd(ci28!]CqG3qFY/0)jjzq,K`ABR0f7Y34Wf[u7~e;6Qciq.2tGm'e%e(0$Xx=qUUs5MIQLW
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 2e 5b 3d a8 7d bc 99 8e 2c cb 9c d5 e5 f5 d0 e6 50 d4 3a 4f 05 d9 18 01 b1 b5 af 6e 5d 71 5a f6 65 13 cd ed 23 87 99 dc b3 1a a9 65 2c 79 b7 71 8d fe 77 c2 b3 6d f4 94 f0 c2 b9 a6 bd af 94 ac b2 0b 7c f1 58 9d 9d b9 03 f2 df 16 0c c9 6d 3c 96 e5 7e 5d 70 8a f6 ad 9a 56 50 d2 65 d0 43 98 b5 3c 72 f6 ad 24 71 1d 32 49 a6 c1 6e 6e 08 51 bd f1 e6 aa 78 8f cb 75 ef 2f 2d c8 b7 57 b4 eb ed 0f 8b 97 2d a3 14 d4 52 29 af a8 8c ad 43 02 0f 63 1f c3 7d be f3 f2 f2 c6 6b 9a 40 cd 70 71 ed ab 64 79 35 39 2d 7d 9a fd 46 38 4a 9a 08 b1 ba 9d d4 f8 8c 5c aa a8 a1 57 ff 00 4c 41 e6 62 59 b7 9e 6f 86 07 0b fb 31 e3 8e 30 80 55 65 19 1c 8f 48 49 02 a6 67 58 22 24 73 d2 5c 82 df 20 71 0b 86 78 4e 7c d6 6a 4a 8a 91 a2 8c c9 de 5b 30 79 00 df bb b5 b4 9e a6 f8 df 3e ce 6a 56 Data Ascii: .[=},P:On]qZe#e,yqwm\|Xm<~]pVPeC<r$q2InnQxu/-W-R)Cc}k@pqdy59-}F8J\WLAbYo10UeHIgX"$s\ qxN\|jJ[0y>jV
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 68 8a 2e 63 ab 1e 8a be 67 18 db 8d 78 a6 a3 8a 33 57 aa 70 12 14 1a 29 e1 1b f6 69 7b da fd 49 3b 93 83 5e d0 b8 d2 a3 8a b3 5a ba a8 64 9e 3a 07 71 d8 d3 33 6d 1e 91 60 48 1b 06 3c cd b0 b2 24 9b 92 7e 78 5a a0 c6 3b b1 dc c7 02 5e 89 d8 6c 27 f6 2c dc 39 94 49 9a d4 46 26 56 4a 05 70 65 9a dc ad d1 7c 49 c5 eb 82 78 40 25 34 b9 9e 6f 41 14 91 cd 08 f7 58 a5 5d 4c 05 ef da 15 3c 81 1c b1 67 ad 11 c4 a6 24 54 54 43 65 54 00 28 1e 40 5b 0a 7c d4 4a ae fd e3 97 1d 8b 3b 4e d0 a9 a4 96 38 d4 05 50 07 66 57 e1 d3 d2 d8 d2 3e cb e3 82 4a 1c c2 52 80 ca 93 20 0d d4 02 bd 31 98 b2 fa d4 52 21 98 16 8a ff 00 ed 29 3d 57 fb 63 4d 7b 2a 5d 14 d9 b8 0f ae 36 30 32 38 f4 60 41 1d 0e 01 06 b6 67 3d 68 3b 46 ce 3e 10 08 20 80 41 d8 e3 ee 3f b0 d8 b9 8c bd b4 fb 30 87 Data Ascii: h.cgx3Wp)i{I;^Zd:q3m`H<$~xZ;^l',9IF&VJpe\|Ix@%4oAX]L<g$TTCeT(@[\|J;N8PfW>JR 1R!)=WcM{*]6028`Ag=h;F> A?0
2024-04-18 17:16:05 UTC	1339	IN	Data Raw: 79 5b 63 e6 31 7e e0 6e 09 a8 cf 6b 23 cc 66 25 32 ba 69 41 32 d8 13 2c 8b 66 ec 94 1d bf 31 3d 31 7c e0 bf 67 34 d3 e5 ad 9a 67 f4 da d6 a6 2b 52 d2 b1 2b 64 6f fd 56 b5 88 27 ee 0e 9c f0 d3 a0 4a 1c 9e 82 2c ba 96 99 63 a1 41 a5 62 1d 3a de e7 9b 5f 72 7a e1 07 29 2a 47 ea ef 1c c8 81 c8 53 62 06 ad a8 f8 f9 82 6e 2e 3c 0e d6 f4 c2 ff 00 32 7f 88 df ae 18 59 d5 19 a7 84 4e b3 2b 46 c4 5b a1 b3 0d b0 b1 cc 24 d4 58 78 73 c2 50 6b 0d 8e 92 3d 3b 5a 45 37 da f8 d2 9e c8 2a 5b de 33 48 83 6c d4 f1 b6 9f 12 ad 6b fe b8 cc 14 ef f6 80 8d 85 f0 e1 e0 ac ee 5c 9e 49 66 8e a1 61 69 21 75 56 72 06 a5 51 ad ad 7e 76 02 e6 d8 a4 0a 93 b5 92 00 04 9f 69 ad 4d b1 f0 92 2f b1 3e 98 cc 14 be d7 73 0a da 77 a9 a8 8a b6 9a 98 06 2b 33 ba 2a 39 1c 95 4d 94 92 dc 85 81 b7 Data Ascii: y[c1~nk#f%2iA2,f1=1\|g4g+R+doV'J,cAb:_rz)GSbn.<2YN+F[$XxsPk=;ZE7[3Hlk\Ifai!uVrQ~viM/>sw+3*9M
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 9c 8b 3a 53 d8 d5 ce 69 62 bf ee c2 47 04 5f f1 3a 83 ea 70 37 92 f4 1a 7b e9 1c b8 78 60 3c f9 2c ff 00 c6 88 fc 46 2f 1a 7b 41 a4 fd 98 f4 79 1d 5c f3 19 94 25 45 53 ae 83 a4 8d d5 14 7c 20 f5 3b 9c 56 3d 9a 70 94 39 d6 65 1e 63 9a c4 5a 82 20 cf 1c 67 94 f2 27 43 fc 03 af 89 db 01 29 68 b2 3c b6 64 7a fa d1 3a ea 1d a4 7e f7 11 8e 45 be ea c6 11 2b 58 f2 db 7c 69 4a 6f 6b 59 2b 70 fa c5 45 92 55 cb 3a c7 d9 c6 99 5d 1b c9 04 41 7e 11 f6 81 39 0f 2b 60 86 36 2c 0b 51 db 41 ac c7 ca a9 8c a6 20 46 87 cc 74 93 2b a5 77 ed 02 45 23 13 dd 21 56 e3 ba 76 b6 00 bc 35 cc 80 7b b4 96 17 e7 61 fc f1 06 9f 8c b3 cc de ae 28 21 c9 eb a9 96 46 d2 66 ae 92 3a 58 a2 1c ee e3 4b 36 08 54 f1 4f 08 51 d5 52 65 d5 5c 42 33 0c c2 a6 78 e1 09 08 41 14 6d 23 05 bb 32 83 65 Data Ascii: :SibG_:p7{x`<,F/{Ay\%ES\| ;V=p9ecZ g'C)h<dz:~E+X\|iJokY+pEU:]A~9+`6,QA Ft+wE#!Vv5{a(!Ff:XK6TOQRe\B3xAm#2e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	49987	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	629	OUT	GET /-/media/images/financial%20services/javelin%20pr%20tile%20img%20png.png?h=170&iar=0&w=270&hash=98F44E34F06D15DDC759AAA71D4B85F7 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	871	IN	HTTP/1.1 200 OK Connection: close Content-Length: 88882 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Javelin PR tile img png.png" Content-Type: image/png Etag: "DVyuSUHp2pEngJ5xI0JSLTAW+Dm7vaMD2xWHrV5YeY0" Fastly-Io-Info: ifsz=100553 idim=270x170 ifmt=png ofsz=88882 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210079-DFW, cache-pdk-kpdk1780063-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460566.672268,VS0,VE20 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c 54 bc 69 ac 65 e9 75 1d b6 d6 de df 77 ce b9 d3 9b 5f cd 55 5d 43 77 75 b3 e7 66 ab 49 91 94 38 4a a2 68 4b 91 64 09 b6 6c 58 90 e5 c0 86 2d 3b 89 11 20 46 10 c4 b0 11 c4 48 10 67 f8 91 00 32 10 c0 8e 0d 3b 70 a2 04 a2 61 39 d0 48 46 22 65 8a e2 d0 1c ba d9 cd 9e aa 6b ae 57 6f 7e 77 3c e7 7c df de f9 71 6e 51 4e a1 50 55 38 f7 9c 73 cf bd b5 87 b5 d6 5e fb f1 53 1f fa c4 cf 5e c8 bf 71 63 3b f5 fa ff e8 3f 7a fa b7 7f e3 f3 9f 7f 78 7e 1e 37 7b a7 1f 5b c4 58 94 d1 17 f3 bd 9b 37 2a e6 5c 4f 8f a6 4d 28 fa a3 5e d4 7e 75 ad 8f 73 31 7d f5 c6 e1 a9 15 b9 7d 7f 3e 9e cf 20 9a 8c b3 45 6e a6 Data Ascii: PNGIHDR)6sRGB IDATxTieuw_U]CwufI8JhKdlX-; FHg2;pa9HF"ekWo~w<\|qnQNPU8s^S^qc;?zx~7{[X7*\OM(^~us1}}> En
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c9 2d 6f 28 aa 45 78 7a d5 b3 6a 8d a2 57 52 23 57 7b c5 a0 aa f6 c6 fe ad d7 76 bc c2 4f 7c f8 8a 24 db 9b b6 ad 15 48 30 e7 9b 93 58 1b 66 f3 e2 77 bf 7b b0 bd 77 f7 b1 83 e9 37 d3 60 da ef 17 c3 d0 57 5c 28 f5 1b f3 78 bf 09 b2 68 c3 a0 58 94 55 9b f1 f8 c5 c1 cd 07 0b 6b 49 03 32 35 f9 a5 ad fc 7f 4e 56 ca dc 6e 29 ff e7 bd a1 86 30 71 31 07 8b 60 26 d3 89 11 0e 30 67 b4 0b 84 4a 52 c3 a0 a2 22 22 02 82 4e 55 8a 50 62 74 29 7d 3c 05 5d a2 c0 05 2e 00 b7 2f 0d f7 6f ce 8a 41 a1 51 2d 39 83 82 c2 a0 10 b1 b6 eb 16 a4 88 a8 18 08 51 aa b8 2a b4 4b 2d 91 20 6e cb e3 14 d1 32 ba 63 99 72 09 71 a5 74 83 27 67 97 60 02 42 40 d8 c2 7a 67 fa cd 24 51 15 21 b8 c1 21 10 a5 88 1b 40 d1 2a b8 2f 9b 55 97 00 80 00 60 d0 66 9e 53 6d da 8f 5a 05 6b 1c ce ee 13 c2 19 Data Ascii: -o(ExzjWR#W{vO\|$H0Xfw{w7`W\(xhXUkI25NVn)0q1`&0gJR""NUPbt)}<]./oAQ-9QK- n2crqt'g`B@zg$Q!!@/U`fSmZk
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 74 34 3c da 3b aa 36 57 12 5a 9a 8d fa 83 d1 70 e3 2f bd 3c d0 99 be b9 2f 9e 17 8d 91 65 35 9b 4d 76 6f de 7a e2 27 3e be f5 d8 e9 dd 7b 0f 6d 7d 43 b6 b7 dd 08 d5 32 c8 f9 21 a5 9d 1c d7 83 d3 75 73 9c e5 64 d2 b2 a9 8f e7 76 78 32 7f eb fd e3 d9 ce 78 ed e0 f0 a3 d5 ce c1 ac 59 47 5d 6a da 39 f0 72 54 49 a1 5a 54 06 82 0e 01 94 28 74 82 ea ee 9c e6 c8 0c 6f a4 a2 89 65 90 30 28 23 44 13 48 d5 a9 c4 13 97 a9 cb 41 eb df bf 73 f4 fd 9d c9 2b 2f 5e d8 5c eb df 1e b7 8b 09 68 80 2e a9 2a 93 66 b8 8b 63 a1 bb b9 f8 83 b6 2a 91 8f 10 5d fc 76 2e 8f 13 9f db ea bd 36 0b 87 e3 e4 62 3a 0c 3a 0a 96 e0 89 70 3c d1 d7 83 42 7c ee 83 95 b8 6f 21 65 7f 71 35 bd 77 12 0f f6 31 18 e9 60 20 87 bb 9e 4d 4e 0e 72 7f 55 34 4a 6a c4 9c 5a d0 55 b0 70 64 a0 10 56 a2 b1 d2 Data Ascii: t4<;6WZp/</e5Mvoz'>{m}C2!usdvx2xYG]j9rTIZT(toe0(#DHAs+/^\h.fc]v.6b::p<B\|o!eq5w1` MNrU4JjZUpdV
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 29 14 76 7d 86 4a 80 6e 4b de 42 51 88 c0 00 25 81 d4 38 97 32 9d 2c 49 d7 32 e6 49 d0 1d 20 8b 61 69 ad 43 64 29 91 ab 76 00 8c 4e b8 77 62 5a 97 c9 ee 60 0c 0c 01 d9 c0 8e 8d 28 84 9d 3e 06 00 4e 98 a3 43 6b 70 90 44 97 4b 5c ca e2 80 ee dd e0 b7 de dc dd a9 9e 7b f7 77 bf f4 4b 3f 79 a1 5f 1f be fa b0 91 a4 7f e5 ca 78 7a 50 df 6d a2 b9 14 e5 f1 cf 3f 77 74 9e 77 1e b4 b2 cf a1 2b 91 4d aa 41 f2 b2 06 92 da a2 c6 a5 41 fe 2b 2f cd bf 79 5b 8f c6 d9 24 a4 66 72 25 ce 77 93 1e 2f 38 3c 75 ea b1 27 2f cc ad 98 3f 98 e4 85 ad f6 f3 e4 e0 f0 fd d7 de 38 7f ed e2 c5 a7 9f d8 f9 ce f7 53 9b 12 f2 33 3a 5e 6b 8a 5f 78 fa e0 17 3f 7b e1 b7 be 31 39 33 b4 49 66 76 b6 59 3c 0b 21 73 c8 8e f7 1e 1c fa 7b d3 ea f7 6e e5 3f d8 2b 0f bc 4a aa 06 66 e3 fd e3 f6 95 55 Data Ascii: )v}JnKBQ%82,I2I aiCd)vNwbZ`(>NCkpDK\{wK?y_xzPm?wtw+MAA+/y[$fr%w/8<u'/?8S3:^k_x?{193IfvY<!s{n?+JfU
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: cd ed 4b 5b d3 85 fd c8 99 6a 6f 61 9f 7f f5 84 86 61 2f cc 6a 4f 75 a3 73 47 62 9e 19 4c d0 13 04 95 99 c5 42 5c a4 e9 61 b8 21 79 42 9f 31 25 a6 e4 b1 94 aa 0a e7 cf 17 e7 4e e9 f9 6d c2 39 6b f1 fe 83 74 3c 41 03 b4 35 9b 99 9d dc 38 6c 8f a7 68 09 40 47 b1 bf 55 16 a3 62 72 7b d6 cc 72 ec 05 6b 8c 9d f4 29 92 05 50 86 2a 98 c1 5a 17 d2 0c ee 50 a1 06 89 51 2c b9 99 13 70 67 4e cb e2 0e 42 ba f9 78 f2 4b cf f7 0e ee b4 f3 b1 c1 dd 0c eb eb 5a 2f bc 5e 38 04 d6 fa ca d9 c2 b2 9f ec 34 22 02 ba d9 92 92 98 c1 3a e6 2d 6e 39 c3 3b 46 e0 21 32 35 06 47 37 6a ed 28 40 ae 13 41 b8 bb 39 e0 4e 57 81 65 b7 64 80 87 7e c8 d3 d6 dd 68 59 03 cc cd 5a 23 e0 f6 68 54 9f 33 e1 a2 b4 36 41 dc b3 93 80 c2 e7 35 72 0a bd e0 29 e7 ba 45 20 cd bc ed f4 16 83 9b 5b 06 0c Data Ascii: K[joaa/jOusGbLB\a!yB1%Nm9kt<A58lh@GUbr{rk)P*ZPQ,pgNBxKZ/^84":-n9;F!25G7j(@A9NWed~hYZ#hT36A5r)E [
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 50 fe f2 ad f5 93 d4 9a 20 b7 e6 5a 88 a5 98 66 a7 47 69 5b e7 bd 36 d5 4d ca f5 54 c1 26 b7 2f e8 64 e4 33 98 cd 4d 72 9b b4 2c a4 6e 67 45 7f 77 62 08 51 40 e4 1a 46 5b b4 6e ed ec 64 be 7e 76 7b 74 f9 ec b8 1a 69 9d 5e 38 73 6f e3 fc 66 31 18 32 9e 39 3c ee bd 7d 67 7f e6 1e ca c2 e6 0a d5 ef 2d 42 4e 69 da ef ef 4f 48 14 b0 f2 78 d1 3b 39 31 f6 2b 9f d9 e1 61 b3 a0 99 2a 0b 91 28 6f 1c 17 67 9a fb c7 c3 d3 87 f7 77 5e 7a 6c ed 6b 5f 7d e3 5f dc b0 89 8e 46 83 d1 b9 8b 9b d7 9e 38 7d f9 89 b3 97 ae 6e 6e 8f 7a f3 d6 77 c7 75 73 30 3e d9 9d 3c d8 9d 1d 1c d7 85 a5 ad 42 2e 8f ca 33 95 f6 45 28 dc 8e ed bb 37 e6 17 cf 8f ce 5e 1d ec 9f 2c 72 2b ac 99 0f 53 e1 e9 af 9f 4d ff ea 60 54 b7 02 f0 ec 48 46 aa b3 85 bd b9 93 af 9c e9 f5 7b fa f0 41 ea fe 13 e1 Data Ascii: P ZfGi[6MT&/d3Mr,ngEwbQ@F[nd~v{ti^8sof129<}g-BNiOHx;91+a*(ogw^zlk_}_F8}nnzwus0><B.3E(7^,r+SM`THF{A
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: f1 82 d8 1f 1c 16 c3 9e c0 59 44 69 e7 c8 f0 73 e7 65 bc ef a9 c6 60 4d 83 48 32 06 c6 d9 74 61 54 92 66 84 48 d1 0f 0f df 6f d7 4e c5 8b 57 cb bd 7b 19 ce 22 d2 1a 44 88 0a 4d 58 94 5a f5 b5 e3 d5 56 7b 6e e9 19 2a 02 d0 32 2d d3 cc 1d 74 11 2d 04 ce a2 92 c5 1c c3 a1 c4 c8 93 43 a8 72 6d 45 c7 93 2e 9a 58 14 cc 86 aa 94 40 89 15 67 13 40 a4 cd 6c 53 97 30 9a c1 6c a4 d2 49 2a 1d 42 a1 28 49 11 83 12 5d 6e 90 24 d8 eb a9 83 e6 5e 54 6a 06 f3 6e 8c 43 00 54 89 85 5a 5a 92 0e 07 72 e3 70 e4 ba bb 8b 03 e8 1a 88 04 81 c1 f3 52 be 18 5e 18 e5 59 6b 06 e9 76 01 9c ee 5e 54 c1 00 58 27 24 3c 72 e0 04 ed ec e9 6e 46 25 54 99 1d 02 ef 9c 76 a2 a0 7b 9b f4 a5 cf fd a5 b7 bf f2 47 4a a1 0e a8 7a 70 70 70 ef e6 9d 83 5b 77 eb fd e3 34 9e 4a 4e ae e6 52 d7 6d 83 26 Data Ascii: YDise`MH2taTfHoNW{"DMXZV{n2-t-CrmE.X@g@lS0lIB(I]n$^TjnCTZZrpR^Ykv^TX'$<rnF%Tv{GJzppp[w4JNRm&
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: f3 bc 6e 1e 3e 38 1a 0a 64 7b e3 53 4f 0d 9f 97 87 bf ff e5 7b 7f f3 ef 7e ee 97 3e 75 f5 f2 c5 d5 cf 7d fa 7a ba 70 ae ae 7a 6b 67 57 ea ca 77 6e 3d b8 f3 c5 77 ee bc 7a 6b ef fd 3b 27 07 27 8b c9 1c 2a b2 56 ae 0d dc 41 83 31 6a 46 99 8d 00 4e ac b0 10 7b aa 41 45 23 93 16 74 aa 68 22 7f f6 74 fb f7 9f 59 ec cd 3d 96 bd 85 d3 a5 1b 8f c9 a0 94 20 2c 03 8b 20 4e 5e ec 05 29 f4 de 91 fd c8 66 3a 37 0a 1f 7c 76 f5 24 e7 cb a3 b0 b6 51 fe ab df 7e 78 eb c6 64 78 32 6f da 7a c7 45 33 2d 1b 22 af 9c b2 9f 38 37 ff fd ef e4 95 8d e2 c9 e7 fa 07 3b 29 47 8f 15 73 f6 64 f2 f5 3a 3c dd ab 3f ac 8b b3 2b c5 7a c8 7b 22 1f 7b 62 78 74 af f9 47 3b 83 5f 7e cc 56 61 df 98 c6 08 52 85 99 0c 30 e3 da 3a db 19 7a 03 2e 16 28 2a 29 34 4e 27 ad 10 41 c5 12 dc 50 90 a5 ea Data Ascii: n>8d{SO{~>u}zpzkgWwn=wzk;''VA1jFN{AE#th"tY= , N^)f:7\|v$Q~xdx2ozE3-"87;)Gsd:<?+z{"{bxtG;_~VaR0:z.()4N'AP
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 20 d9 d6 dd c6 a6 2f 1b 42 b7 c8 bb 34 96 21 f4 a2 77 76 05 07 54 96 7d 03 8f f6 db 00 12 e6 9d 1e f6 28 a7 84 52 04 28 bd 3b ea 0c c3 d2 cd 61 60 19 40 81 01 e6 b1 8a 2e 50 cb fd 58 f4 63 55 4a 2c 5b 97 64 c9 db 43 15 ef 05 77 e5 a5 73 f6 c9 a7 36 be f9 4e 9e b4 14 86 d6 75 6e 96 23 33 e1 41 19 34 e7 4c b3 ab 8b 7b ff f9 cf 9e fe c9 4f 3c f1 e0 cb df d9 c1 28 a9 3c 98 96 7f fc 95 6f 7f fb f5 b7 3f ff e6 e2 76 1a dd ae d6 0e 16 8a a4 d6 3a 5a 23 f3 6c 91 77 16 19 20 ca 48 80 09 32 1a 41 a9 2b d1 4e 66 f5 de a4 37 e8 ed 1f 2f f6 76 1e 66 d7 5b 0f 67 5f 79 7f ff 7f fd e7 5f bc ff da fb 88 04 14 49 21 f8 dc a9 9d b5 dc de f3 11 7b c1 17 ed 22 f3 73 2f 96 ff cd cf 3d f9 8d 77 6e ed 2d 8a 94 24 b7 d2 1c 2e 58 e8 38 f6 0d a4 d2 8c 8d 3b 43 b0 da 6d 9e cc 64 65 Data Ascii: /B4!wvT}(R(;a`@.PXcUJ,[dCws6Nun#3A4L{O<(<o?v:Z#lw H2A+Nf7/vf[g_y_I!{"s/=wn-$.X8;Cmde
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 47 07 c8 1f 90 97 00 01 fc 10 18 48 1c 5b 11 61 59 a4 45 51 a4 48 8a 4d b2 d9 73 55 77 8d b7 ee 7c 86 3d ac f5 7d 79 d8 e7 b6 5d 28 14 ea 5c 54 1d dc 42 9d bd d6 f7 fd 46 3f 39 32 d6 7c e6 20 fc a2 0f 47 e0 3b 5a fd 8b 43 fc ba 0e 57 d7 fe 17 b3 66 7b db 1f 86 b0 57 e1 f7 f6 f3 77 97 da 52 24 3b c0 f6 42 66 3b de 6c 49 01 14 a8 24 ac d7 b6 5c d9 64 12 52 92 3c 80 64 8a e2 06 75 49 94 f3 53 6c cd f9 e2 ab 72 f2 10 34 e8 66 c7 65 9a 90 c0 b0 c6 a5 c9 fe 52 3d a6 18 f5 fa 70 8a c0 1d b3 5d af 26 6c cf 10 d3 86 1b 97 80 7a 02 1b 68 19 30 4c e6 1c fd 26 14 8c b9 33 7e 09 30 71 54 30 83 e2 0c 81 91 a4 c2 0d 51 49 db b0 a4 66 a0 00 4e aa 0c a3 b2 c4 51 0a 08 c6 20 74 40 19 02 63 62 ee 81 0d a1 b2 59 fb 85 28 83 8d d7 16 28 17 4f 3b 27 24 d2 cc c7 51 d5 49 aa b8 Data Ascii: GH[aYEQHMsUw\|=}y](\TBF?92\| G;ZCWf{WwR$;Bf;lI$\dR<duISlr4feR=p]&lzh0L&3~0qT0QIfNQ t@cbY((O;'$QI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	49989	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	848	OUT	GET /-/media/images/corporate/battle-climate-change.png?h=170&iar=0&w=270&hash=87197225C830C3E4A9EFE2B9DFF28CA1 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 59708 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="battle-climate-change.png" Content-Type: image/webp Etag: "rsJrQzHOXSTVb3d33afG6TlwIUeR3ivfUZ2lIjJOmQ8" Fastly-Io-Info: ifsz=84683 idim=270x170 ifmt=png ofsz=59708 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210021-DFW, cache-pdk-kfty2130041-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460566.719441,VS0,VE4 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 34 e9 00 00 57 45 42 50 56 50 38 4c 27 e9 00 00 2f 0d 41 2a 10 4d 40 6c db 46 90 04 f9 b2 e3 fd b3 a7 ff 82 67 ee 6b 88 e8 ff 04 14 28 84 7b 0b 90 b3 24 81 7c c8 25 17 43 ae 96 13 f2 08 09 64 20 7b b3 0f a5 cd f3 8d 6d eb d1 9f a4 a4 40 39 0d cf d0 8f 84 47 12 48 49 b2 cb cf bd 6d 3b 59 5f 5c 2c c1 85 7f f6 42 78 b1 b5 d0 5a 6a 20 40 2e 80 1f 01 0b 5f 17 6a f9 19 f6 51 e6 fd 03 6c d9 6b 25 69 8f 98 04 20 c0 c8 59 cb b6 05 d2 23 3e e1 aa 08 1a cf bc e1 e2 2c 55 b7 70 26 00 f6 cc 18 1b e7 ab 24 81 db 6e 81 b6 36 f0 ae b5 96 2c 1d e5 a7 0e d5 27 3c 4f 7e 03 ec 00 24 4d db da 36 30 90 4a 87 68 29 94 47 0a d8 19 db 6b 46 39 92 74 da 76 3a da 49 18 c0 56 80 56 89 e4 68 b7 15 a3 dd 26 9d e1 2a b5 52 a4 44 aa 1a b5 92 92 cc 1b db 8e 94 48 e8 1a 35 6f Data Ascii: RIFF4WEBPVP8L'/AM@lFgk({$\|%Cd {m@9GHIm;Y_\,BxZj @._jQlk%i Y#>,Up&$n6,'<O~$M60Jh)GkF9tv:IVVh&RDH5o
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: b6 84 0f 3f 9c 56 13 e8 07 5b 92 ba a7 3b 95 60 55 1b 82 49 34 6d 00 40 da 92 ed 2c 6b af 6d 9e 7d ac 3a e7 54 9d 42 57 75 55 17 bb ba 1a 75 5b af af ed fb 6c db b6 af 1e af d9 36 ab ba dc 65 1c 5b fb 9c 6d ef b5 f7 f2 5a a3 f7 1f 76 6c db d6 d0 98 da 36 2a b6 9d 0a 46 b6 ad 21 47 b6 6d a3 be 0c 2b b6 9d 4c 6d db 46 bd 61 6c df ef 8d 2a b6 9d 67 bf 37 8b 6d db 7d 63 db c9 b0 df 30 1a d9 b6 ad a9 6d a3 62 db e9 d8 f6 e8 66 66 3b 77 f8 66 b1 6d 76 66 b6 6d db b6 6d db 43 f3 07 78 6a db b6 6d 3d a3 f2 65 ea a1 6d db b6 79 67 f9 ee 30 b6 0d 6f d8 b6 ad 6d a3 6d db 01 27 48 b6 14 db a1 a6 d3 a6 34 0c f7 fd 30 33 33 33 33 33 de cc cc cc ff 1e fc c5 cc cc 37 cd 05 43 bd a6 03 85 4c 9a 34 71 6c cb 92 4e 3a 0e 5f 02 20 39 92 24 49 16 11 31 8b aa 59 80 cc aa 1e 0c Data Ascii: ?V[;`UI4m@,km}:TBWuUu[l6e[mZvl6F!Gm+LmFalg7m}c0mbff;wfmvfmmCxjm=emyg0omm'H40333337CL4qlN:_ 9$I1Y
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 18 a4 5a 80 68 00 14 c5 80 c8 a1 12 08 24 31 32 97 2b b5 4f 97 31 eb a8 fa b9 0d 8d 1b d1 2f 2a 2d 47 7a 3f 06 f2 e5 24 17 34 ea 8d c5 7c de 00 dd d8 3a 8c a7 62 ff e4 89 f5 a5 90 2f 03 ea 17 4b 33 8c 35 b0 85 bc db a5 2b 37 87 b7 5e 6e 53 58 20 b5 94 2f c9 02 5a 80 a2 1a 66 bc 5d af 30 5c d1 bf ad fb cb 5a 70 fb b4 62 23 50 99 78 02 59 cd 90 01 62 b9 f1 57 65 10 c9 05 a1 80 52 d8 7b 88 9d de 5b 65 3e 68 45 e4 9d 21 7b 9b 71 6e 2f ef 8d 3a 38 4f 83 2e 4b 13 23 c8 df 47 09 82 0d ab 0f 51 48 ae b6 a8 96 49 b8 18 74 a3 45 c6 0e a4 24 33 d5 27 2f 1a 94 21 1a c9 2f 50 d8 6c f9 93 46 11 68 80 48 29 88 08 4c c6 4d 5a 2c 91 2a 03 46 b1 0a 5b 16 63 0c 5d 91 00 0d 42 61 7f 64 1c 3b 84 14 00 8d 3c 95 51 c9 aa 43 39 9c 1a 0a 78 90 d4 24 2a 32 0c 0e 28 4a c4 4b 50 60 Data Ascii: Zh$12+O1/-Gz?$4\|:b/K35+7^nSX /Zf]0\Zpb#PxYbWeR{[e>hE!{qn/:8O.K#GQHItE$3'/!/PlFhH)LMZ,F[c]Bad;<QC9x$*2(JKP`
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 0f 85 36 0e 13 04 88 a4 30 32 90 7e 8b 36 46 29 59 a2 e0 44 db c5 c5 ba 80 24 18 16 12 92 47 cc 41 8a cd 90 4a 76 26 42 68 51 9c 1a 08 03 80 c1 23 3d 5f a7 90 64 08 44 52 75 20 32 0c 00 2a 49 07 96 2d 34 7a b0 38 20 62 0b 61 76 43 7b 11 40 4f 56 07 65 4e 98 12 3e 5f f4 c5 00 b1 86 91 3a 1c b1 96 96 11 eb 2e 65 2d 2c 01 34 47 8c 14 c2 ed e6 09 a0 74 83 86 0b 4e 21 66 ab c6 38 32 1f d4 83 a7 89 cb d1 e7 c5 5b de ae 59 80 b6 0e 32 7e 8c b5 df 68 e4 d6 e8 55 f1 1f b7 bd a6 df ea ac 7e d8 b0 fa 49 f6 83 4f 64 63 92 15 22 4a e9 a7 cd ac 26 54 83 24 92 a4 88 22 5a 12 32 5d aa 7a 39 05 b6 d0 d1 41 77 35 40 15 c2 14 f2 20 26 25 f1 61 e1 b4 5c 06 a7 8a 72 88 91 c2 31 a5 bb d5 e6 2d 38 9a fc 93 59 d7 1b 6f b0 49 f9 f8 81 42 40 c7 3c 70 01 01 cc 04 9c 33 25 17 3c 42 Data Ascii: 602~6F)YD$GAJv&BhQ#=_dDRu 2*I-4z8 bavC{@OVeN>_:.e-,4GtN!f82[Y2~hU~IOdc"J&T$"Z2]z9Aw5@ &%a\r1-8YoIB@<p3%<B
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 89 bb 80 56 85 10 78 4b df 9c 94 60 b4 01 59 91 86 49 ce 72 f3 20 5d 3d 0b 21 64 b3 61 b2 b1 90 47 5b b2 88 7a 7e 98 c2 1a d9 a4 a1 80 a5 52 85 85 a0 df 42 c5 69 85 ac 4e bd a5 54 23 0f 31 eb 9e ce 0a 11 63 e6 a0 8a 43 bb 54 f2 06 cb a1 9d 4a 12 23 af 14 da 0e 90 29 86 40 67 4a 32 a9 b4 59 41 6c b8 00 32 1e 2c c7 12 e6 2d c5 4b 22 b5 cd e4 d2 56 60 c7 b0 f4 ae 4c 36 51 b5 c6 89 c8 b1 1a 83 f3 d0 ea b2 cb b9 35 38 c6 6b a3 e8 34 9e a5 b1 36 a7 58 78 de ea 1a 73 ae 43 c3 32 fd 96 b4 b8 c5 a4 b6 f2 85 e8 7d b4 dc 2e 8c c2 d2 2b 45 78 67 28 d2 8e af f1 f3 f2 47 a1 8a 16 91 2d 68 f2 40 33 89 9e 14 09 01 41 04 e0 0d e1 64 8f 5d 26 8b f1 e8 64 6a e9 20 8b 68 40 0d 54 26 44 e9 da 4b b4 48 48 37 5b 54 20 88 40 b2 88 83 4c 29 20 8a 68 09 16 a0 04 62 1c 26 28 6a d8 Data Ascii: VxK`YIr ]=!daG[z~RBiNT#1cCTJ#)@gJ2YAl2,-K"V`L6Q58k46XxsC2}.+Exg(G-h@3Ad]&dj h@T&DKHH7[T @L) hb&(j
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: a5 7c 4b c2 e1 2b 18 0d 9c d0 b0 28 3d 2c cb df cd 59 ff 44 23 a2 0d 4d 4e 37 2e 43 d6 03 72 c4 a8 ec 36 c0 2c 20 8e 44 5e 62 8d 49 16 44 d7 1e 19 01 80 c2 10 c4 21 23 aa 20 d7 60 05 00 00 6e 34 a1 34 70 2a a6 6d 1c a8 0c 86 0a e3 8a 16 58 b3 dc ab e9 7b de 51 65 1a 6f 05 15 c0 18 2a 8b cc 0b 6a 65 8c 79 db 72 dd dc 83 68 cd 36 d7 5b b6 db 35 51 df f2 a5 8e e3 c1 d3 f9 6f 52 8c 2a 5e a9 c3 29 86 13 c6 f5 f9 85 4d 30 37 28 7d cb e3 1f c8 15 47 3c fe ab 67 d1 15 1c 5c 3d 4c c9 cc 96 8c 6a 4c 61 a9 04 86 04 8c 04 cb 54 a0 fa 88 c4 d7 c2 2b d7 47 ee c9 41 65 c7 75 7b 51 94 83 46 03 ad 58 91 d2 2d 1f 3b 62 08 24 14 69 3b 59 e9 db 8b 00 ad e3 50 80 8c d8 58 04 b9 88 c9 80 4d 6e 09 db 02 99 ba 84 c8 24 b3 9f 14 ff 55 18 19 ac 87 94 ff ca c0 a4 cd 78 fb 50 78 e7 Data Ascii: \|K+(=,YD#MN7.Cr6, D^bID!# `n44pmX{Qeojeyrh6[5QoR*^)M07(}G<g\=LjLaT+GAeu{QFX-;b$i;YPXMn$UxPx
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 03 c3 08 45 af c2 12 24 80 22 08 88 80 25 cb ec 52 a1 a1 c4 17 f1 84 5a 3e 8b f2 f6 b8 f8 74 ba fe d8 9e 6c 5f e4 64 be 16 82 2c d6 a8 af a6 18 56 48 85 88 62 a0 a6 7c 69 01 e4 b6 29 a9 75 3e 2c ae 0f 60 c6 ff 10 f3 02 64 85 c7 51 5c 01 53 b5 a9 cf 85 71 24 e3 00 b1 6d 88 31 98 89 0c 03 18 3c 8b 3c 34 0d 49 36 5f 6c 8e 26 0e 34 0e 47 ee 93 18 31 05 09 63 ad c3 a6 3d a3 82 6f 14 f9 eb 9b ef 6f 18 f7 25 70 93 35 46 cc d3 41 2b cc da 9c 4e 59 c8 f9 24 08 b3 bc 70 aa a7 44 63 1b 80 e4 2d 4b bf 96 d4 14 b3 6f 93 6c 5a c9 fb 54 be 5e 46 1c 5f 12 e6 b2 f7 15 f1 f5 12 3d 90 21 9f 96 8a 41 72 aa 80 a9 f1 4a 14 0d 00 6f 16 6f d3 dd ea 8a 19 71 34 91 c6 c8 17 2a 29 61 90 af b4 0b a3 41 93 18 1d 12 c0 58 dc b9 ae 37 b9 dc 3e b5 88 20 38 88 75 e0 6b a1 76 80 60 90 6b Data Ascii: E$"%RZ>tl_d,VHb\|i)u>,`dQ\Sq$m1<<4I6_l&4G1c=oo%p5FA+NY$pDc-KolZT^F_=!ArJooq4*)aAX7> 8ukv`k
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d5 e2 29 06 24 52 80 fc 87 65 08 c4 32 94 32 8d 83 a2 9c f3 24 a4 c0 98 f5 70 91 61 2a 48 82 e6 a6 20 d9 40 95 f9 db 46 8e 6c 37 ef c0 e1 15 60 aa e8 8a f6 d3 a7 c4 87 d6 1d 72 f6 d0 79 c3 bc fb 41 5f 81 ae 50 cf 25 c1 1d b8 8c 28 72 2b b7 62 ae cb 60 59 36 f7 f6 d9 a7 0d cb ac 9a 7c 00 a1 43 e0 27 84 85 58 f5 a3 70 d2 12 d3 9b 1c 47 be 30 b8 d4 f6 21 25 db 9f eb 5a 0b f7 77 ab 6b e6 b8 1d ac 5d fd 42 26 4e 0c 01 7f f0 df e3 5c 54 37 5a 29 e2 1d 7c 9f 53 f2 4f c1 c5 62 cc f0 f7 93 64 0a 6d 84 1e 88 6c 97 0b 57 62 a1 15 18 2a 98 85 6d 49 28 c8 ba 7f 26 26 a5 a0 92 34 e4 68 ba a2 fa 2b 99 b0 95 26 43 b2 b1 b2 f7 9b 7f 3b bc 40 af 93 28 22 07 a2 d7 54 14 8b 2b 44 a5 0f c9 0e 60 00 ff 15 d0 b9 40 55 ab 92 d8 85 23 e3 a2 10 a3 94 9e 6c 64 59 b2 9a 12 45 4b 25 Data Ascii: )$Re22$paH @Fl7`ryA_P%(r+b`Y6\|C'XpG0!%Zwk]B&N\T7Z)\|SObdmlWbmI(&&4h+&C;@("T+D`@U#ldYEK%
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 70 41 42 a1 20 8b 71 8a 8c c6 d0 f0 2d 55 6a 54 a5 c5 b0 92 82 03 7b 6a fa ea fa be 82 cf 82 65 db fb c7 0a 62 63 4f 50 f1 b9 a6 c7 74 e7 35 aa 9e 5d 2a 66 37 3c 7a 18 9d a7 c7 21 e5 d1 6f ac 0e 5c e5 56 d1 2a 20 11 67 8e 33 52 aa c9 43 a8 19 47 d3 16 de 0f 3f a1 05 64 07 68 14 5b 08 04 e8 a6 84 34 10 28 fe 86 ee 1c 09 05 20 d6 55 b3 3e 11 9b 60 5d 77 ab bf eb 74 b8 eb b6 ff 2d 56 bc cf 5a 3b 9c 10 01 1e 81 0e 02 61 61 6d db 16 8d 03 51 f9 82 40 01 3c b7 db 40 94 0d f1 4d ac 00 2d a4 a4 a5 30 52 7d b1 de 71 ba 93 5a c5 cb 21 4d 2b 04 32 03 57 d1 22 58 60 3e 04 12 9b c9 d0 ed 18 89 65 7f 49 9a 76 01 54 e3 6a 1a 76 ba e4 3e df 02 e1 a1 f5 b2 e9 32 e0 12 14 48 59 8a a5 5c 04 a6 d6 0f 4f 48 1a b7 04 15 29 c7 51 4e b4 b8 96 9a a1 9c 30 47 65 4f c3 46 a4 05 a9 Data Ascii: pAB q-UjT{jebcOPt5]f7<z!o\V g3RCG?dh[4( U>`]wt-VZ;aamQ@<@M-0R}qZ!M+2W"X`>eIvTjv>2HY\OH)QN0GeOF
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 57 07 4d 82 41 6c ab b7 b4 b2 5d 9c 25 fa a6 98 0f 44 21 62 b0 8c 40 49 f9 50 6c e1 d7 74 1d 1f fa b1 ec bf 26 f8 f4 88 78 a2 10 33 86 85 0d c0 32 cc 21 43 56 ee cf 7d ae 38 7c db 37 cc 70 7a c4 68 d0 f4 25 7d 51 b7 fc 3d 9f 0d bf ec ef 29 45 1d f3 a1 a2 0b a6 b2 5c 60 d5 3b d5 2d b7 dc 1e b6 68 48 a4 c3 f8 fa 7c 7c be 3e 1f f4 76 6f b3 82 bd 44 4d 23 b0 bd 7a 37 ec c7 ba d7 52 94 a6 14 2d 5b 5d 83 72 74 a2 71 85 3e 3a 0c 7a 59 28 d7 f3 39 76 ef e1 85 d6 fb c7 6d b3 e0 24 c4 0c b0 2d d7 43 a7 e1 2d 07 48 37 f3 2e 5c 0f b9 37 36 17 44 0c 2e e0 a5 62 54 9d 1d 26 45 43 40 15 2a 49 fb da 04 60 26 31 c0 a3 93 9f 99 61 04 0d 0a 64 0f b0 15 c2 8c 2f 48 e2 c9 52 53 27 44 28 05 13 41 e1 86 62 6b 6a c7 12 48 1a b1 47 bf 26 a4 d1 1c c0 e6 d2 3b 3c b1 1f af 40 c8 4c Data Ascii: WMAl]%D!b@IPlt&x32!CV}8\|7pzh%}Q=)E\`;-hH\|\|>voDM#z7R-[]rtq>:zY(9vm$-C-H7.\76D.bT&EC@*I`&1ad/HRS'D(AbkjHG&;<@L

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49990	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	862	OUT	GET /-/media/images/corporate/road%20to%20zero%20thumbnail2%20jpg.jpg?h=170&iar=0&w=270&hash=A15673A378D6B17FDDC8AFD66C93A728 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	875	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17950 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="road to zero thumbnail2 jpg.jpg" Content-Type: image/webp Etag: "2jqbQ1eKvTyMLUbj2/YmVbX0g9vLw6fpdOHYE8n2Ows" Fastly-Io-Info: ifsz=32873 idim=270x170 ifmt=jpeg ofsz=17950 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210118-DFW, cache-pdk-kfty2130041-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460566.729069,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 16 46 00 00 57 45 42 50 56 50 38 20 0a 46 00 00 30 ad 00 9d 01 2a 0e 01 aa 00 3e 49 1c 8a 44 22 a1 a1 1a cd d5 60 28 04 84 b6 13 80 09 6c 8f ed a4 bd 8f 9a 57 1b f5 7f ec 7f bf fe c8 fe ff ee ff b7 6e c7 f2 e0 f6 cf e9 ff eb fd db fc d2 ff 51 fb 2d ee 73 f4 27 fe 5f 70 5f d7 df 54 1f eb ff 72 7d de 7f 6d ff 73 ea 27 fa 67 fa 0f db 6f 79 6f f7 df b0 7e ea 3f d2 fa 83 7f 8c ff 87 d6 6f e8 5b fb 7d e9 c1 fb 8b f0 8f fd b3 fe 37 ee 27 c0 af ed 0f ff 7f 60 0f fe 1e d7 9f c0 3f ee fb 75 78 c7 c3 67 94 1f ad fc 7c f3 47 f2 3f 9c 7f 1d fd db fc d7 fc bf ee fe df 58 e7 eb bb 51 1f 97 fd ef fd ef f7 ef de 4f 63 ff d9 7f 8d fd d4 ff 23 e9 6f c3 7f eb 7f c4 7e 52 fc 82 fe 3f fc bf fc b7 f6 ef c8 df 8c 5f 9c ff 6b de 61 b0 7f 9f ff cb fe 8b d8 2f d8 6f aa Data Ascii: RIFFFWEBPVP8 F0*>ID"`(lWnQ-s'_p_Tr}ms'goyo~?o[}7'`?uxg\|G?XQOc#o~R?_ka/o
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 06 38 bd e5 3f 68 89 31 a2 1f 41 f9 d1 c8 2c 69 97 a0 ec 7d 98 97 21 bc 2c 83 59 e1 ee 35 3b f3 c1 da a0 00 fe ff fc bc 21 9f 4a b2 88 13 26 f9 15 05 79 19 13 dc 48 ad 1e ab 56 06 48 eb 67 e4 9c 75 cd c1 06 10 0d 8d a4 c3 94 84 4e bd c0 5d c9 30 0e 84 59 6d c2 08 43 66 4b 81 12 25 b2 33 01 a8 d1 66 c2 ea d3 33 d1 83 56 3c e4 d2 6c c3 10 35 e3 28 3c 58 71 b0 fd d0 84 50 99 c3 af d3 0a 80 ff 98 6e a1 83 05 03 78 5f ef b2 09 ad 83 ad 05 f1 03 69 9a 21 2d 08 e7 f2 e8 27 78 ff 34 5f c2 2a 2d e0 e3 29 dc 43 dd 27 f0 61 fd 7a e0 ff 20 bb 85 48 ac 81 80 82 79 a7 fa 70 67 36 d9 0d 58 10 b9 b4 8c 74 34 c2 c2 a3 07 3a 93 b4 cf 99 d1 97 85 d7 17 c9 00 49 86 35 8a d7 51 c6 14 63 95 9d 4b 46 88 b7 bf 26 fc 65 c5 37 6b 84 82 ea 8f 1c de 43 e3 ec 4a 1a 14 10 c1 56 74 53 Data Ascii: 8?h1A,i}!,Y5;!J&yHVHguN]0YmCfK%3f3V<l5(<XqPnx_i!-'x4_*-)C'az Hypg6Xt4:I5QcKF&e7kCJVtS
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 17 fc e4 d3 ad a2 20 5a 73 c0 a1 b0 59 61 01 12 ad db bd b9 f7 b2 38 08 41 77 2b de 13 ff 71 6c 61 91 aa f2 66 49 48 13 36 20 b5 ad 04 d4 3f 0d e0 67 07 41 f1 39 10 df fa a0 9e 08 31 e8 73 21 33 1c 0b 12 01 5f b8 9c d5 67 37 2c 88 a0 c0 b6 db b1 36 e9 f9 3e 25 2a b3 7f 0f 6c 54 38 72 e8 a1 09 c6 a9 a1 5e 44 9f 5a 17 cb 04 bb d0 a8 2e 76 91 03 d4 01 c5 92 c6 2c a8 0a fa 79 4b d8 96 7e 61 36 2a 2d 34 40 9a db 7a 7c 94 25 6d 8e cb 12 ef fa 98 ae 09 2c 24 e6 07 b0 7c d0 79 a4 5d f0 28 b0 b8 71 84 35 8f 7f b4 1a 60 9b 39 9e be a9 b9 54 f7 da 80 c5 9c 63 66 03 21 f9 a6 cc e7 57 03 1b 88 7a f7 18 6e 92 26 da 75 1b 86 34 16 0e 13 ac b5 07 80 18 0e 5c 7b 74 bd 40 64 88 dd 06 1f 79 d3 71 42 d1 ac 15 66 80 3a 8d 2d cf e0 e8 cf 48 a9 ec e6 69 df c5 32 ad 27 58 dd 8c Data Ascii: ZsYa8Aw+qlafIH6 ?gA91s!3_g7,6>%lT8r^DZ.v,yK~a6-4@z\|%m,$\|y](q5`9Tcf!Wzn&u4\{t@dyqBf:-Hi2'X
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 03 28 ed b4 65 1b 5d 13 18 20 5d 98 bc a9 bd c7 be 8b 0e d4 20 23 f5 17 28 32 d3 42 ee be 9e 60 f8 87 c3 7d 5b e7 a1 a6 c4 fa 86 3b c5 f0 bc 6c 6a 84 74 62 81 a0 8c 72 89 1a 77 3d 4f ef 55 55 89 7f 34 61 61 61 01 de 0d f8 7a e8 27 aa 98 5b d9 e9 d9 0f fa 33 a2 6e 53 31 dd 02 4f db e5 61 0e 4e ce 94 b4 94 25 75 09 ab bb f2 c5 5a 4a db c7 a4 8f 73 d4 c8 aa 02 b0 d4 88 cc 4b 08 0f e8 20 47 91 bc bf 27 7c fb 26 72 86 ba 65 1e c7 0d 01 1d 80 5d 68 65 db a1 33 6a 76 1c e6 e8 a8 7a 11 15 d7 aa d8 d6 d5 21 a3 87 65 62 52 ba ba 03 a9 10 20 dc 9f 79 a7 fb 47 e2 6d 4f 35 89 0e 1a 38 dc 0e 3a c2 ad f9 70 56 c4 1b d4 9e 53 44 ff ff cd 7b 75 86 f4 eb ac fd ce 98 1b d6 91 89 01 21 58 7e dd ef 30 8c 67 bd 0c 2b 51 2e 4f e2 56 c1 8d 83 02 af d9 40 cf fd 9c 09 7d b1 48 78 Data Ascii: (e] ] #(2B`}[;ljtbrw=OUU4aaaz'[3nS1OaN%uZJsK G'\|&re]he3jvz!ebR yGmO58:pVSD{u!X~0g+Q.OV@}Hx
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 90 5e f9 39 49 65 93 87 ea d2 c1 f0 11 b7 f3 f1 fb cc 7a 0c b6 df e4 38 8f d9 5b 72 14 9d 66 9b 1c 5b e3 05 2e e4 6b a6 a3 cb a7 6c 51 b0 5d cf 73 77 6e 6f 7e bc 74 cf e2 d3 27 3c b2 50 4b b5 b3 1f c9 54 fe ad b2 6d a9 5a 56 31 78 98 b6 c0 1a a9 7d b3 6e 42 05 47 42 96 99 bb ae 59 b1 6b 57 38 b0 e1 1b 81 a5 06 db de 68 25 c1 24 72 5c f1 93 c6 aa b5 21 3a 7c 53 e7 a2 db 40 85 7c 94 ff 1e 3d 6b 07 41 21 3f 1e 8d 19 e1 c3 0d 03 ca 3c fe c0 67 17 3c 36 5f d8 26 0c a5 18 e0 d5 88 f3 4c 32 00 ba 5d a6 d9 fd 33 b7 3f 3c 90 a8 d9 58 46 07 ef f2 fb 46 ca 94 b8 19 fd b1 45 d6 30 46 a8 a4 33 4d 50 11 d6 60 a1 4c af cc 4e b7 bf d8 50 b5 ac a4 9e f7 69 63 45 9a bf 68 98 f7 dc aa 5d 23 cc 9f 97 8d aa 42 4b 5c 7e 84 61 67 b8 58 ba e2 df 33 1e 68 79 82 71 b0 b0 31 c9 ca Data Ascii: ^9Iez8[rf[.klQ]swno~t'<PKTmZV1x}nBGBYkW8h%$r\!:\|S@\|=kA!?<g<6_&L2]3?<XFFE0F3MP`LNPicEh]#BK\~agX3hyq1
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 07 e6 90 e3 ee c0 b8 f6 5e a3 be af f2 ea 9f 3f 75 d0 c2 ca 9a 8c 8e d9 61 61 91 81 7d cc e4 9e ff 81 23 b2 62 a0 52 d4 cb 14 11 92 6c dd 26 8b 0c c6 90 fd 1f 1f 1a c7 fe ff 81 09 c5 15 1d 78 57 12 3c cd d4 0b 49 f7 c1 93 c8 f6 82 13 19 4d f5 e7 0d 01 59 73 2f 5e 25 6c 0b 07 11 e3 4b bf ba 17 14 dc 0a 7f 56 dd 0c 35 20 ce 08 e5 95 19 64 79 47 8b 52 bd be ce 7f 65 52 de 69 61 23 0a b2 5c b5 64 91 c2 4b f6 dd da 00 89 b0 b0 ca 68 b4 12 bb 61 25 03 cd dc 3e 25 05 77 40 66 d6 34 8f e8 d2 bb 5c f2 61 3d 04 bd 09 12 5c a3 a7 32 f2 dc f4 47 da 2d 3f aa be de c9 17 76 f9 4e e2 b5 81 02 05 52 57 3c cc db db 9a cf f7 aa 41 03 a8 fc be ab a0 41 f4 70 21 0f ef d2 4b af 53 98 8a a3 df 52 bf 70 a5 de fa b7 e0 1d 9b f8 eb 9e 83 6c 14 ad 48 f7 22 3d 86 24 5f 92 ce 99 5b Data Ascii: ^?uaa}#bRl&xW<IMYs/^%lKV5 dyGReRia#\dKha%>%w@f4\a=\2G-?vNRW<AAp!KSRplH"=$_[
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 80 b7 38 40 92 b5 04 d8 32 c4 27 ca 16 6e 24 0d fa 1f 8b 40 69 db e5 e8 b4 27 0d 44 f1 4a fa 5f 3b d2 a2 66 5d c3 4e 7c be 66 ec 06 92 06 4d ee 0c 9e 66 5e 90 b1 67 d5 7e 91 bc b2 b1 94 f7 0a 81 37 57 37 03 b6 11 8b 25 53 a6 6e 7b 74 db 74 8f 1b 5a 61 26 b9 4d 8b 56 f0 5a eb 08 52 2f fc 26 d3 fe 58 76 17 a3 e2 18 72 89 5e e4 73 66 1d 7b c5 6a 6d 75 e9 51 93 54 b0 b7 8a 86 7c 4e 78 cc 1a 69 43 c0 5f dc 87 fd fd 63 bd 66 a4 6c 6f 11 89 e5 65 d4 84 8a f4 f1 8b 14 f7 67 c1 a9 50 6d ae d8 9e e9 41 cd dd 2a 6d c5 fe 2f 3f 91 bf 95 c0 ca 08 3f f3 48 4e 46 af 33 ef d6 b0 18 6d a7 10 e9 d6 ef 27 c5 ea 0d 7c 7b bc f2 70 47 21 b4 73 9b 9f a2 97 02 97 12 fd 94 ad 20 a6 75 73 99 8b b4 3e 5e 9a ee 76 10 f0 1b e8 e9 c4 a2 e2 8b 25 a4 a4 5c 8a 62 4e e4 af b3 e7 f2 aa cb Data Ascii: 8@2'n$@i'DJ_;f]N\|fMf^g~7W7%Sn{ttZa&MVZR/&Xvr^sf{jmuQT\|NxiC_cfloegPmA*m/??HNF3m'\|{pG!s us>^v%\bN
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: fd 56 20 0a 67 45 e0 59 56 6b e1 76 d7 97 b6 bc 82 eb 50 a6 46 73 d3 81 32 c5 3e da 92 28 14 5e 70 c7 4a aa 29 45 75 35 d2 66 26 cd f4 a4 4d 43 17 33 1a b7 8f c9 f7 7d a7 87 99 6b b6 4e dc 00 c5 ba 0d 07 84 8a 45 c2 f3 1a d6 18 5b 23 1a 29 14 f3 8b 5c 85 ba cf 8f c8 1b ed 5e 91 28 61 8f bc a0 e9 49 62 76 92 ac 56 51 cd 0d db b8 9e 24 72 3d e7 ee 61 82 ad a9 05 f6 34 1e d5 89 73 2c ca 7f 25 1b 35 09 52 86 9f f4 50 cc aa 6f 18 b2 87 26 b3 9b fb 5c d7 d3 5f e0 3d 31 cf af 6f 55 66 cc 63 c1 29 70 09 73 6a f4 82 93 f9 a8 7f e6 d9 f9 a6 a7 bd b3 a1 64 e2 5e f3 5b 1b b0 2d 3e d6 bd bd 5c 41 6f 52 19 bf c1 43 f4 93 85 67 04 5e 78 c2 39 52 19 bf 20 6b 57 90 48 be 9f 6a 03 3c 9e 31 08 91 63 f6 18 c1 e6 87 a3 ac e6 ae 88 28 0c 8f d7 d7 c8 a8 0c f0 71 f9 63 0f 32 f8 Data Ascii: V gEYVkvPFs2>(^pJ)Eu5f&MC3}kNE[#)\^(aIbvVQ$r=a4s,%5RPo&\_=1oUfc)psjd^[->\AoRCg^x9R kWHj<1c(qc2
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 57 9a 0e 72 6e b0 26 bc bf d4 18 16 f7 57 03 a7 e5 44 01 c1 d1 87 2e ea a3 1e 17 8d 62 87 ea c7 97 73 ba 17 03 f2 cf f8 c9 25 3c 49 98 95 da fc 95 5b b9 d1 62 c2 84 1b 20 f3 09 d3 4e cf c9 1e 77 d4 86 f0 47 04 7b db 43 66 d1 ad 70 c7 ed b6 e1 4f aa 9c 27 36 13 70 21 ed 1f d1 70 c3 80 1e 15 d4 c0 0c b8 7e f9 68 98 c7 0c 4c 89 3a cc 3f 37 35 6c 48 b5 c6 12 a6 f6 18 08 22 5c 48 83 9c 31 f5 83 0e a4 ba 26 8b cd cc 7a ec d5 c9 32 6c fe 97 d9 ca a4 a9 b4 87 b2 57 19 1a 74 ff c3 d1 b0 e8 5b 37 43 db da ec af 7a 58 15 6f f4 75 f5 78 05 60 da e6 72 6b 45 17 d3 ee 1d 77 bc 2f e1 0e a2 26 03 e7 42 88 e0 5c a3 cb f5 a0 c0 e7 3b 88 ee 08 e0 b7 41 c5 15 0a d3 9a 2e 64 75 43 92 db 6b 7c b7 33 3a 23 7e e7 a3 3a f8 ad 24 c0 98 31 78 b4 48 70 3e 9c 23 3b 57 d9 f1 41 05 dc Data Ascii: Wrn&WD.bs%<I[b NwG{CfpO'6p!p~hL:?75lH"\H1&z2lWt[7CzXoux`rkEw/&B\;A.duCk\|3:#~:$1xHp>#;WA
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 67 7e 34 a8 5b ae 5d ae d7 76 bf b6 73 05 bf 34 98 45 bb 53 10 6c e4 36 aa c7 b9 d3 55 60 de e7 d9 bf b6 9d 0e 1b 98 61 31 d9 a2 51 a4 21 d2 3c f5 d4 c5 54 5c e1 bd 37 88 94 9f ec cb 8d 0d 07 e6 70 e0 f3 94 3e 07 f3 14 7a 47 70 35 75 bb 14 e3 bb 34 af 19 4c 6e 46 72 61 2e 2f ca d4 b5 bd bb 2a 4a da 8c e4 37 0c 32 9b 53 bd 9e 65 92 45 01 1e ef 6e 39 ca cc ed 4e 93 8b d3 f9 82 71 9b 61 ea 28 69 96 2a 60 51 05 2e 9e 4c 9d 73 7c 5b 0f 9c 3e 85 27 ba ac 2d 80 f9 0e 8f da 2c fc b3 b1 83 84 99 d1 08 bf 31 c6 b5 96 1b d4 c4 a0 61 ee 41 cf b1 3e 55 f0 b3 61 90 e3 81 5d b4 4a f1 33 9f 00 64 f8 1c c9 a9 13 94 ae 03 0d f9 2d 67 9c 2c 83 b9 51 bd f1 31 fd cd ce 4e 0c 73 1e de 16 d7 7f 3d 8e ec 94 6f f6 4d 3e 10 4d 5b ff 38 ff 29 f2 9c 3c e4 90 a1 6a 6f f0 97 2a 66 8e Data Ascii: g~4[]vs4ESl6U`a1Q!<T\7p>zGp5u4LnFra./J72SeEn9Nqa(i`Q.Ls\|[>'-,1aA>Ua]J3d-g,Q1Ns=oM>M[8)<jo*f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	49992	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	625	OUT	GET /-/media/images/financial%20services/tcoc-regional_270x170%20png.png?h=170&iar=0&w=270&hash=F43278B90D67065468EDD449166DD2E5 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	872	IN	HTTP/1.1 200 OK Connection: close Content-Length: 78298 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="TCOC-Regional_270x170 png.png" Content-Type: image/png Etag: "+xci+AVMRwgFJLDD4Fe9ALmzk3WHc84p2R40whfalKU" Fastly-Io-Info: ifsz=78325 idim=270x170 ifmt=png ofsz=78298 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120121-DFW, cache-pdk-kpdk1780053-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460566.804623,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c 7c 7d 77 bc 24 45 d5 f6 39 a7 aa c3 84 3b 37 6c 64 61 01 09 ab c0 92 83 c0 92 54 92 44 41 54 10 03 22 98 5e c5 80 bc 46 50 44 10 15 5f 3e c5 2c 2a 82 20 88 09 94 0c a2 22 22 a0 88 4a 58 c2 b2 a4 cd 7b f3 9d e9 54 55 e7 fb a3 aa ba 7b ee ae f6 0f ee ce 4c 77 57 57 38 f1 39 a7 4e a3 58 b2 95 51 1a 10 aa 83 01 00 10 91 99 e1 bf 1e ac 0d 10 02 a0 bb 1b 81 88 8c d6 48 c4 c6 20 22 6b 03 00 c0 0c 80 00 0c 0c 61 1c e5 59 0e 6c d8 98 20 8a 18 40 e7 05 a0 3b 0b 08 88 84 08 46 1b b0 0d 33 b3 61 00 20 21 d8 18 24 04 06 36 c6 3e 93 99 89 88 a4 50 79 81 55 df 01 11 85 14 3a 57 7d e3 02 b0 ed 18 ad ab af Data Ascii: PNGIHDR)6sRGB IDATx\|}w$E9;7ldaTDAT"^FPD_>,* ""JX{TU{LwWW89NXQH "kaYl @;F3a !$6>PyU:W}
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 53 6d 4c 9e e7 e3 13 13 0b 16 2c 08 82 60 b0 d3 e9 f5 92 d5 ab 57 f5 92 64 64 78 18 00 86 47 46 46 86 87 0b a5 8c d6 6b d7 ae 9d 9a 9a da 65 e7 9d a3 38 b6 2f d8 18 9f 9c 58 bb 66 6d a1 8a ad 17 2f a8 c5 17 bd 00 00 20 00 49 44 41 54 9e 3f 7f 3e 33 af 5f bf be d7 eb 0d 0e 0e 4e a6 c9 87 0f 38 6a dd cc e4 55 0f df bb 60 68 64 c1 82 05 4a 29 66 ce b2 ac 28 8a 89 c9 c9 24 49 a2 28 b2 db 2e 98 b9 33 30 60 95 cf ea d1 0d 5b b5 87 3e fd da 93 c6 b3 e4 8a 87 ee e2 40 0e 34 9b 52 06 73 07 3a 5b 77 46 66 b2 34 57 6a 32 e9 ce 6b b4 e7 c6 ad b6 0c 17 c4 03 45 96 3d be f6 a5 c7 d7 be f4 c2 e8 fa 8d dd 29 a5 b5 00 04 60 55 a8 24 4d ba dd ee cc 4c b7 db ed 66 69 aa d3 0c 0a 0d 4a 41 a1 a1 50 d2 00 17 4a 67 39 e8 59 7b c5 38 0c 83 3c cf 2d aa e6 ea 51 79 34 2c 08 02 ad Data Ascii: SmL,`WddxGFFke8/Xfm/ IDAT?>3_N8jU`hdJ)f($I(.30`[>@4Rs:[wFf4Wj2kE=)`U$MLfiJAPJg9Y{8<-Qy4,
2024-04-18 17:16:05 UTC	16384	IN	Data Raw: 25 d0 8f 95 d2 24 f4 91 d2 b2 1f 9b 56 cf 54 0a 56 58 65 f2 95 6b b6 ca d7 98 31 25 84 b1 1a 7b 6d 80 62 c3 28 a2 d4 50 e8 47 03 ea 30 ec b9 3a cd f2 b5 89 c6 d8 73 8c 30 02 9a fb 80 21 82 f5 20 d6 bd 08 21 04 08 74 ca 81 0b 36 3b a9 2b 81 12 02 30 31 4a 21 63 84 52 a8 ec 4f a3 cb 00 00 20 00 49 44 41 54 14 90 66 cf 58 ea b0 10 c0 ff 4f d8 9b 46 59 76 5d 65 82 7b 9f 73 ee 7c df 18 ef bd 98 32 23 e7 49 99 a9 94 94 b2 35 59 96 25 b9 24 5b 96 2d 0f 18 8f 18 5c 36 83 81 a2 e8 2e 9a d5 14 50 98 d5 54 57 35 cd 72 15 2c 68 bc a0 16 74 55 db 98 36 20 cb d8 85 25 5b d6 3c a5 64 a5 a6 9c a7 c8 98 e7 37 de f9 4c fd e3 be f7 22 52 6a ba ef 8f c8 17 2f 22 23 5e 44 dc 7d f6 fe f6 fe be 6f 67 29 12 a2 b4 86 28 cd bb 64 39 61 56 f7 fb 46 ba df 3d d3 ba 4f f5 cf 23 90 10 Data Ascii: %$VTVXek1%{mb(PG0:s0! !t6;+01J!cRO IDATfXOFYv]e{s\|2#I5Y%$[-\6.PTW5r,htU6 %[<d7L"Rj/"#^D}og)(d9aVF=O#
2024-04-18 17:16:06 UTC	16384	IN	Data Raw: 89 50 2a a5 63 8e ed f4 ca 35 20 71 63 89 e4 9d 9d 8d ed dc 8e 9f 39 d4 75 1d 63 6c 9a a6 24 49 e1 70 38 1c 8d 62 4a 3c c7 b5 6d 87 52 bf 09 0e 72 bc 80 58 16 b0 2c 71 5d 06 21 c4 71 84 12 5b d5 1c db f6 d3 24 bc 20 00 08 5c ec 2d cc cf 8b 01 c5 c1 1e a0 34 18 8f 21 81 07 0c 7b 75 f5 ce bf fa e1 9f ae b7 ea 6b d5 e2 d2 81 25 55 d3 d4 6e 57 35 e0 f1 d3 00 00 20 00 49 44 41 54 56 14 db 71 00 42 10 80 8e ae fd f8 c2 73 b7 6b f9 70 30 88 58 36 11 8d 15 4b 25 86 65 94 40 60 66 62 2a 91 48 cc 4e 4d 6b ba e6 79 9e 20 0a 00 00 08 a1 ac c8 4f 9f 79 fc c8 ec 62 cf b5 6d cb c2 84 14 8b 05 d7 f5 ce 9e 3d e3 7a 1e 03 51 3a 9d f6 5c b7 dd 6a 85 94 a0 66 e8 ed 6e b7 d7 6e 47 33 a9 e5 a5 e5 b9 b9 b9 60 34 32 9e 1d 93 04 41 b7 2d c3 34 8e 1e 3a cc b8 a4 52 2e 57 1a f5 9d Data Ascii: Pc5 qc9ucl$Ip8bJ<mRrX,q]!q[$ \-4!{uk%UnW5 IDATVqBskp0X6K%e@`fbHNMky Oybm=zQ:\jfnnG3`42A-4:R.W
2024-04-18 17:16:06 UTC	12762	IN	Data Raw: 55 40 48 30 6d b9 58 d3 fb b2 fd 1b d6 da 95 1a 68 2a 51 55 54 15 e9 31 82 44 22 aa 8a 42 08 45 4a 00 d1 e7 8c 79 1e 78 0c 4c 87 fa 1c b9 40 4d d5 d2 a9 44 2a b9 66 d3 86 c1 fe 01 45 53 5f 3c f0 fa fe 7d af 27 93 49 55 55 1b 8d 66 26 93 d9 b0 69 d3 bb af bd f9 f2 b5 9b 6d 9d 80 42 c0 d0 6e b9 f1 e6 77 df 7e e7 89 f1 f3 8a 44 21 e5 e9 33 a7 1d db 29 0e 0c ec da 76 f1 f8 f8 c4 73 ff f1 bd 6a 9a 82 04 b3 d9 da 34 1a 1e ec 3c 00 00 20 00 49 44 41 54 b2 7a d5 e0 d0 89 b1 73 07 0f bd 75 d3 a6 1d 3f dd b7 77 ef 81 37 0f 1d 39 3c 36 3e de a8 37 0e 1c 7d fb 95 37 5f 5f 5a 5a 1a 9f 9e aa b7 9a 03 83 c5 bb 6e bd 7d fa e4 99 d7 9e fc e9 50 aa 70 f7 95 d7 fd e3 53 3f 5a 7a eb 78 2a 95 b6 4d 33 bf 7e f5 f6 ab af 68 36 5b 89 d5 2b 3e f4 d0 af bf ff ea db de 38 7d 78 6e Data Ascii: U@H0mXhQUT1D"BEJyxL@MDfES_<}'IUUf&imBnw~D!3)vsj4< IDATzsu?w79<6>7}7__ZZn}PpS?Zzx*M3~h6[+>8}xn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	49993	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	845	OUT	GET /-/media/financial%20inclusion_banner270x170.png?h=170&iar=0&w=270&hash=11A79D8E6FA505DA6B1E1965DD928F02 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	880	IN	HTTP/1.1 200 OK Connection: close Content-Length: 64502 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Financial Inclusion_banner270x170.png" Content-Type: image/webp Etag: "vZ4e7ZdX5PPoXsemIS+052/PVcIhvbkN823+QhBCSkc" Fastly-Io-Info: ifsz=95543 idim=270x170 ifmt=png ofsz=64502 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010230 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120104-DFW, cache-pdk-kfty2130078-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460566.931495,VS0,VE4 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 ee fb 00 00 57 45 42 50 56 50 38 4c e1 fb 00 00 2f 0d 41 2a 00 4d 38 6c db 36 90 60 df dd b7 81 e5 fd 07 be de cf 10 d1 ff 09 a8 40 89 25 11 25 56 31 c8 e5 b8 ef 24 6e 82 a2 73 48 12 2e 28 2d 6c a2 7c 8b 3f 37 ff ea 9c 0c ff 66 17 72 4a 90 92 64 92 40 62 fb 49 a6 1c 0d 96 ec 84 99 38 76 82 49 86 cf 81 44 79 bf 6c f3 4e 80 1c 00 49 44 21 89 d3 97 81 fa 1a 50 3e e4 2b e3 17 87 42 39 1e ee b5 96 6d 63 1b 8c 81 45 d9 af 63 b2 2e 1b 5e c6 bc 0b ec 90 24 30 49 62 24 91 af be d6 e6 38 81 1b 26 09 18 b0 39 5e 9c 05 92 f8 2c f4 ab 65 ad e5 6d 49 0a 39 ec 6b 81 3d a7 c5 5a 33 83 24 c2 82 7b c1 6e 6f 33 94 ae 52 5e 92 e2 16 2f 9b b5 77 5b 9e 16 7e af 19 2f 49 40 fb ac 05 f5 de 8c bd 16 2d c0 60 5f be e1 06 b8 db 76 ef 87 b6 7b b5 85 19 dd 97 ec 31 5c 1c Data Ascii: RIFFWEBPVP8L/A*M8l6`@%%V1$nsH.(-l\|?7frJd@bI8vIDylNID!P>+B9mcEc.^$0Ib$8&9^,emI9k=Z3${no3R^/w[~/I@-`_v{1\
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 55 5b 15 a9 c7 b7 30 d9 f0 be fb d7 c4 cb 96 c4 db bc 7f 53 1d 12 82 bd ff d4 e6 75 ec 3c f9 71 55 ab 2f c2 6b ef 75 8a b7 b5 95 0d 6d 4d 50 30 f9 92 34 24 55 92 ed ba b5 21 31 7b 6d 7b c8 76 db 7a ab 5a c0 09 73 32 cb 78 92 40 92 3c b7 6d 40 48 2a 7b 8c 25 59 82 1f 97 c0 6a bb 9e b1 6d c9 6a 45 6d d7 15 24 f1 16 d5 08 db 48 ad cc 76 47 24 92 b1 cd 6d ab 7a ae aa b3 bd ed 94 90 25 cf ac aa b2 d5 ea ee ae da 4d 64 03 f0 36 7a 56 ed 53 a5 73 db de 05 02 82 6d 11 77 be 56 6a 75 57 b5 56 c8 23 92 20 74 d6 f9 ac d6 54 bd 02 19 20 10 54 dc d9 96 bf 55 f3 06 03 ad 90 d5 ab e7 77 f6 f9 12 d9 90 80 04 48 a8 77 cf 9d 75 17 0c 04 f3 1a 8c ac e7 0e d3 80 c1 c1 b7 00 40 8a 24 49 b2 25 a4 60 66 ce 11 91 55 d9 cc 3d b3 8c 7f cf ef cc d8 9c 14 e0 11 e1 64 a0 aa 22 b2 f4 Data Ascii: U[0Su<qU/kumMP04$U!1{m{vzZs2x@<m@H*{%YjmjEm$HvG$mz%Md6zVSsmwVjuWV# tT TUwHwu@$I%`fU=d"
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 0f 5f 08 19 ed 8d ec c8 06 bb dd 85 2e b6 11 e5 36 b4 a9 9a 60 44 59 b7 d7 01 fb 06 00 5d d0 05 15 84 a0 87 6b 73 77 28 fe 84 eb 9f 80 f3 07 23 32 10 20 20 43 72 1c 76 31 ed df 6c fd 97 38 c2 c6 88 fd 2b 85 7f 99 bb 9c bc 7b df a4 35 ac fc fa 41 dd 89 f4 d0 05 0e 6a 7f bd 77 7c a6 60 33 30 d5 4c 52 35 2e fa 7d 3e f6 9b f7 b5 64 6c 82 43 b0 91 b6 3c 9f d7 df 52 32 31 73 c7 ee 3a 5e 8b b6 da 8a ce 4b 12 04 c5 5c 4a 99 6f 55 8e 16 8c 68 a8 b4 33 a5 3c 5a 6d a7 ae fd 59 ff ae cf 2c 6b 6c 30 b3 50 b7 d3 56 af 67 9f a7 63 c9 ce cb 86 08 22 c6 f8 49 f7 73 fc 94 e1 13 89 8f 3c 45 06 e8 95 c7 7c f4 76 64 7e 17 e3 70 e6 bc bf 87 d5 b6 dc 2a b4 dd f5 f2 a1 ce c8 0f b1 3f 1f bc c1 fc 3a 09 c6 c9 37 83 30 52 dd 82 56 49 21 8e 4f 0d 66 f1 16 d3 ad 16 7c 90 b5 9d 0e 6e Data Ascii: _.6`DY]ksw(#2 Crv1l8+{5Ajw\|`30LR5.}>dlC<R21s:^K\JoUh3<ZmY,kl0PVgc"Is<E\|vd~p*?:70RVI!Of\|n
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 6c 33 b4 9c 72 28 ea c4 54 4c 8e cd f8 81 ee d0 b7 3b 4b 75 b9 31 a3 af aa d8 2b 10 0e 3d 5d ca 6c 44 4a 28 dc 10 56 66 79 ea 97 e2 96 53 6f b7 33 df e4 df 9a d7 c3 15 43 75 32 4f de a4 1d 17 48 09 2c 50 f1 cb a5 7f c1 f6 5b a9 fb 6d ee e1 bb d7 d9 eb b9 99 e7 e1 5f 7c d7 0b f6 c5 51 b2 26 79 43 3c 03 ba 4a 86 b7 5b 7a 7b 44 e6 b0 8e fd 3a cd cf bc 71 5f 67 66 d3 ed 3a 5f 1e f1 c4 69 36 51 8e a9 7a a0 ba a7 70 24 ee 1f 06 6f 3f 1f 37 5f e7 29 cb 63 d5 dd fb 3e bf fb b7 63 fc d9 0d 17 75 89 85 08 f4 26 6b 75 c6 0f 9f 34 bb 1e c0 dc 29 1b 31 80 40 b4 9a 43 d7 8c ed d9 20 71 91 23 21 40 b5 90 0c f7 dc 32 99 99 52 01 54 3d bd 34 4c dc e2 96 ce 34 5d 42 28 46 a2 09 0e 62 17 6d 48 d2 88 90 55 b6 37 67 d8 96 e4 3a 34 7f 9c 3e a6 bb 4c 6e 95 1d 53 19 00 56 87 49 Data Ascii: l3r(TL;Ku1+=]lDJ(VfySo3Cu2OH,P[m_\|Q&yC<J[z{D:q_gf:_i6Qzp$o?7_)c>cu&ku4)1@C q#!@2RT=4L4]B(FbmHU7g:4>LnSVI
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: fd 8c 08 20 e4 09 da db bb 68 9e a6 4b 8b 95 04 b6 c8 9c e2 c1 74 30 5e 5d 5d 5d 04 49 88 36 10 87 88 01 14 13 70 d7 83 5e 2d 5d 9e 56 2a 38 81 99 07 a9 53 96 46 3a 7a b2 60 e8 d2 16 87 bc f4 17 4b 19 a4 5d 1f e3 d3 c3 e7 b9 7d 38 e3 77 7b 8e df 16 df 7a bf f6 79 51 37 ee cd 37 4d e9 5f 3d dd 64 f4 c0 e3 87 0e 0f 77 3f 5b f7 62 92 24 b1 76 ef 6e 9a 7a 2b 0e 9d e5 87 a2 ef 7a fb 58 30 4e bf ce 21 fc 70 59 f5 af 81 c6 fe 88 27 7f e2 b5 73 f9 f6 83 74 2e d9 cf a2 3f 70 0e ee 8e 8f 78 d6 9b cc e3 39 7e fe 19 27 12 7b af 6f 78 c2 d3 f0 3c 7c 8e d7 fb eb 21 4b bf c5 c5 36 e7 8d 9d 70 f5 eb b1 bf 6f bf bd 9f dd 79 ff e7 8b a7 bf 78 7e f6 9a f7 fc ce af ff 98 8e 17 f9 65 3c cb cd bf bc 9d af af 6c 73 d2 31 27 ec b1 0d 6f ee 97 5f 20 e2 36 6a 91 26 8c b9 fc a2 8b Data Ascii: hKt0^]]]I6p^-]V*8SF:z`K]}8w{zyQ77M_=dw?[b$vnz+zX0N!pY'st.?px9~'{ox<\|!K6poyx~e<ls1'o_ 6j&
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: b5 9e b1 56 a6 3b 9d 30 42 d7 ba bb 7c cd 0a d9 aa be f4 7f 7f 6e ff f5 d7 8d 80 f3 3f fe fa 0e e2 8b 3d 1f ff 63 9b 8a 09 08 02 f0 de c4 a1 b7 96 e5 ef fc d7 bf 80 1c 05 51 02 58 ed fe 81 d5 a2 ec 2d f4 d7 ff cd 5f 18 16 de 3b 09 55 24 70 c5 c3 3c 94 32 b5 78 d7 f9 cc 2c 2b ad cf b7 4c a1 08 e2 06 86 01 50 05 75 9b 6e 86 f2 e8 73 3c fb 28 96 34 9f 74 f6 f6 55 3d 7e 67 ba 89 b6 ab f4 4e 4a 63 81 78 e9 92 b3 33 6a ce 34 32 b2 2a e4 1d 02 4e e6 3a 13 b7 01 64 ad df d2 9c 78 26 ee 35 1a 0e 30 25 64 8c 97 81 e9 cf 44 21 2b 86 39 8c 2b f4 ec 3c bd ba e8 76 c1 ed 96 17 d1 23 c3 6b 77 5b a8 ae 53 c4 30 1b 84 0e 02 5b 81 02 e9 b6 19 5f 6d b9 a7 77 a9 2c 70 84 e5 57 e0 67 c0 95 0c 23 e8 54 70 81 a8 79 d3 80 17 60 3c 18 24 fe 94 78 fa 43 42 31 5e c8 a7 43 a8 36 d3 Data Ascii: V;0B\|n?=cQX-_;U$p<2x,+LPuns<(4tU=~gNJcx3j42*N:dx&50%dD!+9+<v#kw[S0[_mw,pWg#Tpy`<$xCB1^C6
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 1e 6b 27 44 fa de 5a 03 8e 01 d7 a4 b6 19 d3 ee d8 b4 05 28 81 b0 f6 e2 11 d6 12 5b 99 8e 55 5b 2c 8f e1 51 c1 24 61 ca 83 07 21 10 94 94 0a 09 01 00 83 06 0d 04 d4 84 20 3b 40 66 c1 ff 83 43 10 8a 10 00 00 20 7f e8 fb a3 a1 85 dc 02 08 0d 30 c6 20 7a 0b 3d 04 d9 75 aa 24 2c 4b 89 7d a1 a6 70 ff 9c 9f 98 c7 0a e2 13 6a e0 bb 2f fd 88 f7 af fd d0 ed e9 b9 8c 9b 78 6a e3 17 ff e3 e1 d7 fe df 61 1c 9e d8 0e d2 f9 4b b6 35 3b 0b 28 2b 95 66 25 72 27 14 f5 2d e0 e3 ee 9b 9a 2e fa b0 b9 b7 fd f7 c3 f4 3f af ef b5 2f 26 a7 d7 ce e0 25 9c 56 cf 49 c3 5d a6 f7 bb 7e d7 6d 35 26 47 03 1f d3 2e 53 a6 17 f4 72 56 a9 09 7a bd e3 4a 78 9e f9 f1 c4 4f b3 e6 87 fc c6 47 bd eb f2 1d e0 00 d2 55 b3 40 f2 5e be b5 b9 d8 db 6e f5 40 7b 07 0b 44 76 67 9c f1 74 92 35 6b 9a 5c Data Ascii: k'DZ([U[,Q$a! ;@fC 0 z=u$,K}pj/xjaK5;(+f%r'-.?/&%VI]~m5&G.SrVzJxOGU@^n@{Dvgt5k\
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: ec 13 4b 66 77 16 4b 49 65 21 d2 35 1b 76 77 58 3f 5b 8e a2 65 4c 11 53 ed 2b 60 14 89 98 e6 22 19 07 c7 73 f3 eb 46 af 43 bf 89 ae 09 cd 16 b9 ea 33 b5 8a e5 7a 44 bb 3e e5 13 86 a2 6d 6d d5 55 30 25 9a 24 a0 95 35 4d 27 8d 4e ad 50 17 25 ca c4 26 1d 77 40 b1 3b db 71 2b e2 6d 2d 2b be c7 f6 ad 1d d9 c3 40 9c db 09 72 04 95 28 11 02 0e 08 8e d4 de 79 79 c2 1d 77 ce 6a c9 86 d8 60 dc cc 14 58 dc 9f cf fb f3 ee 59 47 62 31 35 05 8c 60 6c 0e 6e af d3 9a 80 29 2c 38 70 7d eb 5b b1 7e 2a d3 14 60 0e 4e 02 12 94 4a 54 16 81 81 d7 de 6d f5 fc d2 e3 29 2f 4b 7b 3c 6e fd 78 79 f3 aa aa 67 cc bf 9c c5 17 0d f7 6d ac 88 ec bd 6d 9b fe 07 20 cf 87 fa 7c dc 5f 3e 3d 5c cb 83 d6 d5 9a 34 98 e8 20 69 d5 2d aa 08 c6 b1 f8 43 f3 06 ea 21 c2 fc 44 ab b4 6c 9d 85 c7 b6 c4 Data Ascii: KfwKIe!5vwX?[eLS+`"sFC3zD>mmU0%$5M'NP%&w@;q+m-+@r(yywj`XYGb15`ln),8p}[~*`NJTm)/K{<nxygmm \|_>=\4 i-C!Dl
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: e4 4f be 88 ca c4 fc 0b 92 a4 24 80 40 08 ad 9b 76 e8 e2 9a 39 c2 f1 15 3d 9d 63 77 3e 38 d3 f0 f4 09 2f b7 4c 26 90 81 0a 51 8c 6a 71 d1 63 c5 98 63 bd e8 07 be 7c a3 6d 20 cb f1 50 98 39 6f 49 27 62 36 f2 f1 aa 7f 22 9b bb 03 79 2f 85 38 18 0c 14 a2 7b 59 11 fb 68 61 bf 66 c4 0f d5 e9 ff 7c ff 25 5c 9f ad 2c 27 19 89 8c ea cb 47 e5 d6 7e ed f6 8d 5f f2 c7 7c fc e0 0a d3 c6 ba 5d bd e7 95 18 74 ea 54 51 78 0d b8 bc ad 2b f0 11 b2 cf ae 74 f6 0d e5 30 66 2b 27 d1 72 59 a1 dd 42 5b 84 73 c2 82 c4 fa 68 bc f5 a1 cd 8a cd d1 b9 88 21 9a b8 11 d0 c7 04 d8 6e c9 69 3e 00 23 dd 9e 3a 9a 4c e0 db a3 e4 c9 56 0b a6 00 d5 f0 94 a9 16 6b fc 2e 16 31 80 14 04 d9 bb f0 5d c3 79 ae 5d bc 15 58 29 af 6b 22 bc 82 5a c4 06 14 42 63 5e 30 22 b3 ff fe a5 ff f9 cb 2d d3 6a Data Ascii: O$@v9=cw>8/L&Qjqcc\|m P9oI'b6"y/8{Yhaf\|%\,'G~_\|]tTQx+t0f+'rYB[sh!ni>#:LVk.1]y]X)k"ZBc^0"-j
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 5d 89 d9 ea 09 32 05 c9 8c 04 09 ba 19 52 86 07 5a 95 03 ef a9 51 a2 82 61 97 4c d5 99 19 62 ca 0d 97 87 5f 1e 11 03 a2 e1 2d 73 1c 63 c0 06 85 ef 3a 30 ca da 08 97 20 34 ea 41 a5 50 03 f9 c1 bf 49 db e7 70 ef 66 e0 f9 d9 55 dd 3d 11 6e 91 90 64 3a 34 f3 8f a8 7f da 08 b9 30 34 2d a5 ee 23 88 c7 91 bc 9a 49 c5 0a 84 c6 c1 2a a6 fd 1c f4 51 c7 6a 49 34 c3 16 dd d7 7d f5 df 97 ee 49 8a cd 61 b4 69 36 15 c1 d9 f6 9d 0e 81 f5 4e dd 76 15 32 d3 17 07 fe 2c fe 10 dd d7 8a b9 1e 44 1e 01 83 0b eb 34 56 af f2 ea 11 2f ac 1c 0a 7f 4b da 27 cb 38 bc df 61 96 53 32 18 6a d9 d6 fe df 5f f2 3f 4c e5 c7 5d dc f5 32 06 4a 50 08 18 41 c8 51 35 a0 7e cc d7 5f 98 68 4f 7a eb 4f c3 7e 2d eb 28 e6 79 5f 00 9a 49 57 ab fb 35 b7 9d f3 46 e5 12 fa 48 72 b2 0c 49 cb c0 c4 25 5b Data Ascii: ]2RZQaLb_-sc:0 4APIpfU=nd:404-#I*QjI4}Iai6Nv2,D4V/K'8aS2j_?L]2JPAQ5~_hOzO~-(y_IW5FHrI%[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	49994	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	863	OUT	GET /-/media/images/corporate/our%20stories/traffic270%20170%20png.png?h=170&iar=0&w=270&hash=462A40E91F079D87E5F29BC8A96AC035 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:05 UTC	865	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14796 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Traffic270 170 png.png" Content-Type: image/webp Etag: "369it1C/tpGKG+LM3nXq27SLXtK4s7M0mUKfqf+FZ/0" Fastly-Io-Info: ifsz=25236 idim=270x170 ifmt=png ofsz=14796 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010246 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560836 Date: Thu, 18 Apr 2024 17:16:05 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120053-DFW, cache-pdk-kfty2130064-PDK X-Cache: HIT, HIT X-Cache-Hits: 9, 0 X-Timer: S1713460566.948520,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 52 49 46 46 c4 39 00 00 57 45 42 50 56 50 38 4c b8 39 00 00 2f 0d 41 2a 00 4d 38 6c 23 29 92 ba 7b 06 7a d1 40 fe 01 df c3 4e 06 11 fd 9f 00 dd 82 cc 5b 5d c7 60 aa d9 a4 9a 37 a9 e6 08 72 46 97 07 9f d5 80 08 93 9c ea 0c 92 dc 33 df 0b 85 3d d6 e2 cc 7c e7 51 68 e9 c4 b1 fd 16 e4 64 ed 5a ae f4 c6 bf ff 91 b5 ec 51 60 bd 94 7b 43 e3 7c 5c fe 83 84 34 86 dd 01 52 43 cb ea 00 76 56 55 8f f4 a0 58 4d 82 76 f4 54 b1 42 2d 64 b1 4e 0f 0c 40 4d 9f 89 ab 05 c4 46 92 14 49 a1 56 1f a3 ff 36 32 f3 dd f3 4f 7b 00 47 92 24 45 92 db 48 2b ce 13 f6 ff 8f 81 5b 68 ab e3 b2 3c 66 06 d1 71 23 49 8a 14 cb 47 fe db 79 af 1b e8 eb de fe 4f 00 fe cb 42 85 42 31 09 6c f4 50 45 39 15 6e 8e 1b a9 92 1a a9 fe e7 ec f6 ef 45 7c 17 4a 5f 67 bb b1 74 bb fa ef 23 fa 1f a3 4a 9c 2c Data Ascii: RIFF9WEBPVP8L9/A*M8l#){z@N[]`7rF3=\|QhdZQ`{C\|\4RCvVUXMvTB-dN@MFIV62O{G$EH+[h<fq#IGyOBB1lPE9nE\|J_gt#J,
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: d7 f7 7d d8 39 0d f1 35 81 3d 6c f3 89 50 e5 1e f9 09 56 d8 ab 4b 74 3a 45 87 ab 8e 87 66 0b 25 db 09 2f 1c 98 9c 35 3e 77 af 97 92 25 9a d1 ea b6 a7 90 d6 ee ec d3 58 9c c2 1c 6d 8d a3 e5 33 cc 8d 6c 66 1f b1 31 79 09 40 93 98 b8 e1 cb 1e cf bb fb db 21 90 1a 9a ac 2f 76 1c d5 a8 5d 4a ae d2 a6 4f 84 a9 e2 10 c3 58 5f 00 b4 4d 4c 88 af a2 47 86 61 0f 18 6c 1a b6 1c 0d 7a 4e 17 8c 51 8e 7b e6 11 4a 72 8e 93 ed f4 00 5d 54 cf 0d 87 18 26 e6 21 be e2 92 d6 4f 49 81 0e a0 26 65 da d5 35 e6 58 ad 7a f9 62 07 4b f2 16 9d 95 ce c6 ec 90 ce 21 ea a4 84 9c f1 92 59 3f 02 c4 8d 8b 2e ae b9 bd 7c 6b 1f 4a 18 ec 2e 21 bc d4 66 ad 81 2e c8 eb cc ce 9d f0 11 3b b3 86 62 72 96 b2 30 85 48 65 6b b3 76 6a a4 55 a0 bd dc d3 bf 0d 16 a0 79 13 ce 4d 06 25 db c6 d1 f1 a9 43 Data Ascii: }95=lPVKt:Ef%/5>w%Xm3lf1y@!/v]JOX_MLGalzNQ{Jr]T&!OI&e5XzbK!Y?.\|kJ.!f.;br0HekvjUyM%C
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 64 7f 72 44 ed 5a 42 49 4e 46 a0 ac a9 af df ee e0 6f f6 29 2e 98 24 39 21 cc 58 49 75 3d 10 d4 53 52 bb d7 e7 c1 bd ef c3 f2 5c 9d 58 3d ab 47 6d 21 9d 57 bf b6 56 d7 94 d9 33 ee 0a ef 0a ce 36 01 a2 64 0a 54 fd 81 5f bf 85 91 4c 79 cc 00 a3 08 c7 77 1a 52 26 55 f8 49 67 1d b9 b6 3b 9f ef 1d ad 97 71 e3 a7 af fb fd dd 3a e5 b3 1b 42 88 e1 78 90 5d 40 bf e8 6f 39 ee 76 9e 24 e3 54 4b ec bf a6 b0 85 d1 a9 f6 db 0d 36 ac 83 68 33 bd 8d 47 b4 76 bf c6 ef 7f f6 1c 1f 5f 67 b9 d2 00 56 c0 1a c1 14 d0 71 64 c2 43 6b 0c 13 c2 94 08 f8 94 c0 f3 8e 6f 7b 9a df 5c 3a 94 51 24 e2 e8 cf a1 6d d5 b8 fe ee d7 03 22 1c 0e 83 75 f4 39 7f e3 54 e4 5c bf a8 31 d4 ae 0c e3 48 a1 88 db 16 e7 f4 3d af a2 15 8c cc 2c 91 26 82 66 31 50 aa 52 09 00 12 17 8e 8d ee 1c 35 e1 eb b7 Data Ascii: drDZBINFo).$9!XIu=SR\X=Gm!WV36dT_LywR&UIg;q:Bx]@o9v$TK6h3Gv_gVqdCko{\:Q$m"u9T\1H=,&f1PR5
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 56 8b d2 78 27 d1 f6 b7 7f 2c 73 de 38 bb 50 6f 28 9e b1 ec f5 8d 5a b5 3c 3a 9b ec 25 4a 77 2d ee 1f 4c 62 3f b2 9b 9d c2 7b 64 ef c9 8f 17 df 0d c9 b5 2d c9 3d 28 f2 d6 12 5a 92 b1 59 2c 25 2b 76 f9 be ee f9 dd 13 aa 25 02 13 01 42 24 c3 c7 99 47 52 36 38 4e b7 55 d8 47 e2 fc 2e 6e 15 22 ce d6 dc 8e bb 06 7b c9 b8 45 18 8b 18 10 48 d1 1e fe 4a 26 50 40 24 04 2b cb dd 85 67 29 af b5 df fd 9e fe c3 1f a3 25 53 e7 fa f5 6e 03 f1 3e de 6d 58 bc 96 68 77 1d a3 bd 46 77 a8 41 b6 55 9e f9 36 e5 36 9b 3e 3c 04 97 99 9d ca 56 a3 e8 30 b5 f8 dc 46 04 67 b2 6f cd 05 83 ac 9e c4 ca f6 6e c5 9b bc 53 88 77 25 bf 8f 71 47 2c 04 54 1c 06 22 10 74 17 d7 5f 4f ae 69 6d ab f1 72 8b 8e 94 b0 32 2a 9d d4 ec 51 8e f8 a7 df 10 0c 02 5a 74 45 4c 5b b9 d3 ea 2e 6e be dd 46 2e Data Ascii: Vx',s8Po(Z<:%Jw-Lb?{d-=(ZY,%+v%B$GR68NUG.n"{EHJ&P@$+g)%Sn>mXhwFwAU66><V0FgonSw%qG,T"t_Oimr2*QZtEL[.nF.
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: 80 97 9d 4a 8c 2a c9 86 06 4f ec 30 05 3a cd 19 47 96 5a d7 5c a7 55 45 d9 d6 0e 17 10 09 fb 6c 8a d7 a6 8c d3 72 37 7d be 7f bd ff d0 fa fe df 11 65 e2 94 67 cc e0 f8 a5 32 af 72 7b cd dd 12 78 f0 77 15 7c a9 ce 95 fa f4 d2 d4 39 73 b6 2d 95 7a 5c 67 79 ac 05 3d 5f ab 66 9d 3d 18 29 d3 4d fe 58 af c1 51 15 09 1c f7 47 8f 8a 14 77 87 ba 6a 9c 19 65 c8 4a ea c0 9c 88 8f 63 f2 50 c8 06 a7 71 13 85 87 eb 6a c9 91 c3 da d4 ef 30 ab 3c 42 0c 7a 23 82 4d cc af b8 e6 57 df bb ce 7f be 3b 1d a1 fa 25 d8 3d e3 3e b2 40 89 28 eb aa e0 86 66 0d 34 1d cd 16 65 58 ae af ce 17 0a f7 5e 0d 64 8e 5a fa 18 b5 c3 07 ed 8f 93 16 4f 27 16 01 db b1 41 16 e3 a1 48 ca b1 45 88 91 8a 42 40 70 45 c0 a2 6b 55 dc 2d 96 b8 ee 2f 97 7c 50 d3 b9 fe f2 96 50 91 c2 75 7a c4 71 56 c3 01 Data Ascii: J*O0:GZ\UElr7}eg2r{xw\|9s-z\gy=_f=)MXQGwjeJcPqj0<Bz#MW;%=>@(f4eX^dZO'AHEB@pEkU-/\|PPuzqV
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: b8 d7 f1 38 5a 1d bf b4 ca 5f c9 70 01 01 e5 74 f5 36 c7 75 b8 97 29 37 2a eb f2 2f 97 ed 67 57 61 4e c7 54 3b 0f 6d c9 d3 31 ae 46 95 a4 61 2a 45 4c a6 8c 44 d6 89 ad 8f 2b 54 a9 ee b6 ff 75 5b 2e 8e 62 b0 68 18 46 75 14 3d 2a f2 92 c5 c6 2a e5 1c 9e 6c 47 38 d1 4e 9e 43 d7 00 61 65 d5 e9 fc e9 8c e3 8c 9d 85 d6 79 86 0e 14 b5 9a 5d e3 a5 38 fd b4 55 43 a8 5f 1f c0 85 f7 46 54 76 71 68 b9 5b f6 f3 e5 e9 ba ac 76 8b 8f c6 94 3e a0 4d 94 51 23 70 6c 45 fd b2 7a d6 7b dc 36 c4 d7 8d 97 95 18 ef 2f 69 63 28 82 ce 43 d9 18 3e 32 80 0e 19 3e e5 75 16 62 a5 0b f7 5f 96 9e 68 4a 6f 7b 5d b6 88 0c f0 83 dd 27 3e ca df bc 3d eb d3 57 5a fe 18 02 ff f6 a6 1c 5b 04 08 83 a1 60 e7 38 63 79 16 a7 85 40 36 4a 26 d5 fa 18 a4 21 0d da ab c4 a8 94 a4 d6 18 d2 12 25 0d 87 Data Ascii: 8Z_pt6u)7/gWaNT;m1FaELD+Tu[.bhFu=**lG8NCaey]8UC_FTvqh[v>MQ#plEz{6/ic(C>2>ub_hJo{]'>=WZ[`8cy@6J&!%
2024-04-18 17:16:05 UTC	1379	IN	Data Raw: c3 c5 7a e2 c5 bf 78 c8 46 21 ae f2 08 f6 12 c0 37 b1 1f 20 02 05 32 e3 95 f1 9d 3f 56 96 e2 33 95 b8 23 73 bb 48 2b aa 3f 99 ff 2e c5 29 a4 81 71 a0 a2 22 21 ce 33 de fd 40 ff d6 4b 69 96 f4 2e 96 74 59 41 5e 9c 77 86 40 ae b9 c3 3a 50 24 43 b5 dc b3 10 f3 2d 79 70 8b 2d 76 48 b2 4a a6 58 31 0c 80 e3 71 6a fb 2a 55 fc f6 f2 e4 2c 66 e8 a8 8f 5c 74 e0 b3 fb 9c f0 3c 0c 67 52 f0 ca cf c7 d5 5f 4f 23 06 1f 07 a6 51 41 ef 6c 40 ab 31 4a 8a c0 76 d4 61 23 7a 07 5f fb b5 cb a4 41 d1 58 41 bd 70 49 ad 23 c0 34 79 66 c0 a2 db 95 74 a9 0b 73 f5 35 d9 0c d9 1c fd 35 56 65 b9 8a e3 b6 2b 97 8e f3 01 ff 35 8e f3 8f f5 c8 37 f0 c0 37 6e 0e c4 1d dc 30 f1 04 b9 79 ed 7e d1 6a 0e 6a 18 0c 62 a9 93 02 63 d7 6d 14 b7 ff db dd d5 4d bb 2f 81 03 e5 7d 41 3e 05 f1 3a 75 d9 Data Ascii: zxF!7 2?V3#sH+?.)q"!3@Ki.tYA^w@:P$C-yp-vHJX1qj*U,f\t<gR_O#QAl@1Jva#z_AXApI#4yfts55Ve+577n0y~jjbcmM/}A>:u
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 53 18 b7 da e3 90 dd e1 5c b8 c0 42 af 5d dd e4 ab 16 4c b1 76 1d 86 a6 44 94 80 80 b5 d2 a9 dd 92 32 0c 65 49 2e 84 e0 bf 50 57 31 77 d1 00 d2 de 85 01 b0 e3 3a 15 66 5e 07 ca 6b 57 68 ce 05 84 59 40 74 31 56 f9 b4 b0 15 16 c9 52 44 8c cf 4d 37 37 1d d1 c7 5d 30 96 5d 77 2a eb 1d f1 63 fb 9c 68 9e cd 9b 65 09 53 30 e8 a2 24 a2 09 75 dc 6d 35 3d 5b 9b 96 07 2b b7 22 d0 5b 68 36 15 ec 68 ad 24 d7 65 55 86 0e 75 42 45 29 31 22 d8 14 5a 44 53 38 af 95 0d f6 07 98 04 b7 c1 07 58 e9 0b 82 f9 d1 62 9c fc 81 ed 42 c9 57 40 71 2f 7e 99 f9 86 9a 7e 2a 03 e6 3c b2 93 dd ae 40 6f ae 3f d6 14 e0 a8 3b 38 63 bf a5 5a 63 e1 b9 ec 8a 9b 6d e5 99 7b 78 3b 68 c5 ea 21 12 d9 15 0d 86 6e bc 55 94 18 42 95 41 7a af 75 66 29 eb d9 cd 21 26 c3 9d 51 64 cb 05 6b 79 85 fa 55 cb Data Ascii: S\B]LvD2eI.PW1w:f^kWhY@t1VRDM77]0]wcheS0$um5=[+"[h6h$eUuBE)1"ZDS8XbBW@q/~~<@o?;8cZcm{x;h!nUBAzuf)!&QdkyU
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 10 b5 c2 a1 d1 7a 4c a1 da 2e ca 51 55 7b af 13 c7 60 ad 23 96 cb b3 be 78 6a 8e 28 ce a2 3a c7 3b af e2 38 74 0e 63 88 2f 95 26 8c 91 cd ce 59 93 a5 cf 63 cd e1 3e 28 f0 9e b1 97 43 98 b0 21 02 76 f4 c0 18 3b 50 81 ac 28 0b 63 ab 68 17 0d 52 0f 2f 85 61 b2 4a 63 c7 95 a7 85 1c 91 2a 71 00 fc ed 14 f4 1f 95 d6 23 84 e0 b9 a9 9b a2 99 53 0b ba 2b 59 8d 82 9b 40 de 31 63 a3 7c 13 e1 fd c8 ec fa 7d f5 fd e0 97 83 18 83 55 83 aa de a5 0c 7a f1 3c 01 12 76 01 dc ff ed ae 14 a2 4b a3 71 38 ad 1d c1 64 51 e2 41 70 d5 56 9a 40 00 43 21 74 54 41 57 e0 6c 0e 63 33 c7 46 6e a4 2c 50 02 06 5f bb b6 50 9c 71 76 bf f8 85 03 8e f0 1d c3 3c 85 f0 9a 82 c0 68 9e f0 4c 41 d5 3b 0e 96 05 72 c8 ef 8a 3a 67 7d f0 61 65 7b 7b bc 52 f9 71 a0 6a 7b 4b 4b 5d a0 41 12 01 b8 99 4b Data Ascii: zL.QU{`#xj(:;8tc/&Yc>(C!v;P(chR/aJc*q#S+Y@1c\|}Uz<vKq8dQApV@C!tTAWlc3Fn,P_Pqv<hLA;r:g}ae{{Rqj{KK]AK
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: e2 10 d7 bd bc 7d 58 eb 51 aa f7 d5 0d 2d 6d 06 72 66 33 96 b3 7a bc bd 15 38 a0 d8 0a a7 e5 50 49 cf 9c e9 7d 76 b8 d3 0a d7 0c 09 29 3e bc f8 36 2a aa e8 6c 94 72 6e ba d4 94 4e 2b e7 f0 7f 1a 38 12 2f 85 43 db 82 67 bd d1 5b 00 d9 ed 9d 4b ae 0d 6a 55 a8 d7 f1 bd 3a 9c a6 ca 1d b3 87 5a ab 55 48 62 94 3c cc e7 14 e7 0c ee 93 6b a5 90 3d d2 61 dc 2a 5f 5c e3 88 f7 1d 50 86 7a 4e c3 d3 cb 92 42 6e d0 05 38 17 04 83 0b bc 7f 8c 12 0c 44 2e f0 1c 64 eb 68 aa 48 8e f5 c6 11 79 b4 11 00 00 72 d5 9b c1 e3 fc 67 da 84 8b 3b 52 24 c2 d4 7a ff a2 61 17 2d d2 9a c5 04 a4 ad 56 63 a5 06 da 11 2e c5 79 c9 c7 ad 1b af 5a 11 76 f7 50 17 4c 0a 4e 2b 79 05 e7 02 20 38 14 02 f6 19 80 c2 11 fe 78 da a4 2f 6b bc 28 ab 27 1d e6 de ed 07 00 67 03 c0 30 f4 0e 32 93 98 18 ed Data Ascii: }XQ-mrf3z8PI}v)>6lrnN+8/Cg[KjU:ZUHb<k=a_\PzNBn8D.dhHyrg;R$za-Vc.yZvPLN+y 8x/k('g02

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	49995	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	786	OUT	GET /-/media/images/privacyoptions29x14%20png.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 384 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="privacyoptions29x14 png.png" Content-Type: image/webp Etag: "RHO9R42oksl5li/BySqWjGKxwZsULHYUkCPSBJp/4a4" Fastly-Io-Info: ifsz=697 idim=29x14 ifmt=png ofsz=384 odim=29x14 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560863 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120117-DFW, cache-pdk-kfty2130073-PDK X-Cache: HIT, HIT X-Cache-Hits: 5, 0 X-Timer: S1713460566.016854,VS0,VE3 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	384	IN	Data Raw: 52 49 46 46 78 01 00 00 57 45 42 50 56 50 38 4c 6c 01 00 00 2f 1c 40 03 10 e7 c2 a0 91 24 45 fd a4 e0 fd ab 64 9a 69 1b 8e 1b 49 52 a4 d4 fe d6 7f 2b 79 f7 18 2b 6b fe 1d 44 92 ed 44 4d ce a0 03 07 58 40 0e ca e1 72 be 17 00 4c 04 ea 6f 31 7c 6f 2c 96 fe 50 2a e0 a3 f6 6a 07 7f 34 5b 1a f2 23 3f 28 f7 1d ca b1 f3 dc 7d 54 66 a5 0d 8a 45 01 3f eb ab 2a ea ff 3c a4 cf 83 7c c9 8f 86 fb 06 c5 d2 3f 4a fe 28 df 9b 6d a2 d2 a0 28 96 ef 45 83 c5 f0 bd 31 be f9 4b aa 8c fa 81 50 79 83 d2 a0 1e 20 54 61 05 28 c1 15 04 f8 0f 58 07 a4 a0 00 69 90 82 bb a8 47 2c a0 00 09 68 07 5c 87 41 80 62 19 4d eb c3 06 88 b5 6d 9b 76 4e b2 e2 ff 63 db b6 6d ae d8 ee bf 91 a7 16 22 fa 3f 01 11 11 9f b7 16 bf fd 88 d4 47 4f c6 db 4a a5 72 63 53 73 73 73 73 86 fa 1a 11 8f 8e 92 b7 Data Ascii: RIFFxWEBPVP8Ll/@$EdiIR+y+kDDMX@rLo1\|o,Pj4[#?(}TfE?<\|?J(m(E1KPy Ta(XiG,h\AbMmvNcm"?GOJrcSssss

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	49997	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:05 UTC	826	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	759	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21406 Content-Type: image/webp Etag: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" Fastly-Io-Info: ifsz=33715 idim=320x360 ifmt=png ofsz=21406 odim=320x360 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010250 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210128-DFW, cache-pdk-kfty2130071-PDK X-Cache: MISS, HIT X-Cache-Hits: 0, 0 X-Timer: S1713460566.116316,VS0,VE88 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 52 49 46 46 96 53 00 00 57 45 42 50 56 50 38 4c 89 53 00 00 2f 3f c1 59 10 4d 48 72 1b 49 92 a4 96 b9 cf 2a ef ff 3f 38 3c a3 6a d6 73 44 ff 27 80 df 78 a0 db 6c e9 c9 bb aa 6a ba cc d0 95 a4 33 74 c5 16 88 cb 08 e4 c7 0f 3e 13 3f 9c 4e 27 09 d5 21 01 bc cb 27 06 60 00 86 53 d6 bb fe fe 0d 50 53 4a 12 e9 90 e5 e5 81 c4 34 51 a3 79 db 5f 53 8f 82 cc 43 a0 8e da 72 21 04 a3 d1 ce 04 54 c8 43 26 8b 0b 6d d4 49 02 cd d9 bd a8 fc 5b f3 3b 94 cb 78 d4 a2 8b e6 d0 1c 6e 1e a5 bd 24 07 2e bc 21 56 16 bd f3 e2 51 95 7f 79 5e f0 e1 fb 1c b3 19 80 5e 74 69 6b a9 02 66 0c e0 56 3d 4b 8e e2 71 61 04 d8 76 f5 f8 57 0b 82 20 82 c0 48 40 10 1f 06 d4 80 5d e2 18 98 ba 70 eb b9 6a 51 05 fa b5 02 10 04 e5 02 f9 4f 1c 0c a8 58 0e 8c 90 04 02 33 81 ae 39 84 30 8e 08 03 08 55 Data Ascii: RIFFSWEBPVP8LS/?YMHrI*?8<jsD'xlj3t>?N'!'`SPSJ4Qy_SCr!TC&mI[;xn$.!VQy^^tikfV=KqavW H@]pjQOX390U
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 4a 99 e7 54 b1 5a 27 f7 60 db aa f6 0d c4 59 5d dc ba 4c 69 ab dc 29 9d ea 54 23 b6 51 1a 37 c0 1b 30 ca f3 18 75 9e 53 c6 2e 59 5b ad 51 9b 17 91 d5 05 a5 ed 74 a9 cf 73 2e 20 b6 8d d6 b6 51 5b c0 f6 cf 90 24 e9 fb fd 23 32 b3 aa ba a6 ab 07 6b db 3c db b6 6d db b6 6d df da b6 6d 6b 70 36 66 35 9e a9 9e 2e 64 44 fc 2d 6d db 76 4c 92 74 5d cf fb c6 17 11 d9 63 db b6 6d 5b db de 8d 76 c6 4e 19 39 d6 ca 36 fe 81 6d db 36 5b c5 ac 88 8c ef 7d 1e 0a d8 b6 1d 7b 9b f3 ff 7e 34 56 7d b4 39 6a 2b e9 50 db d6 b6 ba 9d ed d5 d6 6c db b6 6d 9b b5 6d 37 5a f4 7f 13 40 10 c1 7e 70 29 50 e2 95 50 15 02 11 62 90 d0 14 9f 85 8c 88 16 d7 fc 12 72 82 26 ee f9 21 aa 84 9f 38 6d 84 c8 11 45 a2 5f 38 8a 85 38 d0 0e 6d 5f b8 db ea a4 ef d8 79 2e cc 25 f2 5d f4 9c a6 21 22 cd Data Ascii: JTZ'`Y]Li)T#Q70uS.Y[Qts. Q[$#2k<mmmkp6f5.dD-mvLt]cm[vN96m6[}{~4V}9j+Plmm7Z@~p)PPbr&!8mE_88m_y.%]!"
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 9e b9 03 9a 92 c6 9b 30 6a 49 a9 16 7a 83 71 50 2e 48 01 97 d5 11 e5 38 e2 50 89 89 49 ac e6 bf a7 52 89 57 5a 80 63 72 2f 7b f7 b2 6f 47 31 a8 08 f0 8f e5 e2 e4 75 f8 1d 76 20 d4 fb 90 34 0d ef f7 15 6f 23 a2 40 94 c2 a8 6c ba 1c 1a 5c 4d b0 d4 b2 38 1d cb db 02 9c 96 b0 c0 41 76 5d 18 e8 e8 01 41 54 63 7b 60 a5 05 57 3c 04 4a c3 2c 48 5f 86 9b c0 a9 f0 cd 1f ae 89 b7 08 10 85 20 32 97 15 37 f7 23 c5 0c 0f b1 40 fa e0 94 5a a6 f5 84 65 4e 09 03 37 ff 49 9e af 8a 1c 4b 14 44 0b 06 77 5e 61 21 2f a3 2a 95 a4 a2 64 54 2e 15 09 a5 a8 c0 51 49 71 2b 14 a3 de 52 0e ba 2c e1 50 d6 dc 18 2b 24 3b 8e 26 a4 6e a0 0c 3c 7e 21 aa 22 a8 8e 68 48 b9 39 c3 3d 7e 09 9c 83 8e 20 ae 60 df 6c 50 b3 fe c0 34 38 b6 c2 6f 5b 32 24 36 e3 34 94 9f 15 bc 48 77 c2 dc 8a 20 ee 3a Data Ascii: 0jIzqP.H8PIRWZcr/{oG1uv 4o#@l\M8Av]ATc{`W<J,H_ 27#@ZeN7IKDw^a!/*dT.QIq+R,P+$;&n<~!"hH9=~ `lP48o[2$64Hw :
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 73 10 2e 88 4a 84 f3 68 b2 d6 76 b4 c2 c3 7a b1 01 75 56 32 e6 ac c1 c3 54 63 c8 c1 91 87 25 96 8e 8b c9 1d e1 0f a1 a0 88 0b de 84 63 a9 88 1b 75 c3 11 23 e3 4d 8a c3 21 7f 0c cd d9 f0 66 70 91 e3 38 b5 1f 1e 8b 01 80 e3 00 31 a7 16 ce 70 32 e8 59 e2 fd 90 bf 62 46 76 a9 e2 35 6a 74 5d 36 f2 b0 20 3e db d5 98 b5 52 3d 5e 54 04 23 8e 00 8c ef 0a 2b 3a 49 ad 65 b3 46 cf f8 19 7e 71 39 3d 6c 18 10 44 1c 5f 4a dc b1 11 87 fe 64 69 10 34 4e 29 04 20 0e 46 68 f3 b0 0e 42 f9 a6 76 f0 5a 9f db 28 69 4c ac ef 69 5a 28 82 be ae 32 a1 b6 b0 e0 5b 6c 43 1d 05 91 d4 d3 4b a5 1d aa 0a 48 b7 23 06 d2 45 1f fe e1 b5 8e 83 50 70 62 b5 0e 00 69 45 b4 c5 d8 44 79 df 24 83 a8 13 e2 08 91 48 04 f6 21 32 b7 32 e4 db 87 db 68 d6 75 a3 d9 69 ef 4a dd 47 a4 65 96 17 eb a7 91 52 Data Ascii: s.JhvzuV2Tc%cu#M!fp81p2YbFv5jt]6 >R=^T#+:IeF~q9=lD_Jdi4N) FhBvZ(iLiZ(2[lCKH#EPpbiEDy$H!22huiJGeR
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: b9 86 47 55 5b c7 f4 00 aa 0b 6e 70 5a 8e 0a f2 34 60 97 5d c1 83 1e f6 b9 1f 11 e1 29 c8 98 2d 6a 58 c7 85 e6 de 04 6b d0 af a6 c6 05 a2 cb 15 6a c1 50 94 0a 41 22 10 8b eb 2f 1a f1 cc ed 81 03 df 93 d3 b3 6c 2f 1a 12 6c f2 6e 3a 3e 43 0d a6 cf a9 98 ad 33 95 c2 2b 90 29 ef cd 5a c4 a9 cc a6 ae 80 1a ed ba 50 c5 22 69 79 21 f0 a8 1a 87 ca d9 b8 bd ed a9 dc 1f 2a f3 37 7e 42 9d 18 c2 89 a4 c8 55 4d 16 71 b3 33 fe a4 69 fd e0 5d dd c7 5f 2e 2a 7b 14 c8 6d f2 63 b2 ac a7 b3 49 e1 54 92 22 21 ac 90 e2 13 82 e1 80 6e 63 99 ec b1 d0 9a 32 2a 84 50 5e 27 c7 c2 85 4e 0c bc 3e e8 c0 44 9f 52 2e c4 4d d0 d9 e5 92 9c cd b0 80 18 4b b8 e3 4d 32 8d c5 04 a1 68 08 8c 3c cf 7d 2e 26 6e 17 79 dc 7a fc 00 8f 73 8a 58 da 1f 17 65 a4 e9 36 aa 84 32 49 66 42 d4 54 e9 ce b8 Data Ascii: GU[npZ4`])-jXkjPA"/l/ln:>C3+)ZP"iy!7~BUMq3i]_.{mcIT"!nc2*P^'N>DR.MKM2h<}.&nyzsXe62IfBT
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 3d 1f 8d 26 0e 33 8f 9a 67 11 9e 27 a8 16 72 c6 b8 9e 40 0c 79 0d 04 19 20 af a2 50 90 64 a5 52 cf 40 5f 3a 32 10 46 c8 02 77 50 d3 e3 44 a8 8a 29 e5 da 0d 59 a4 00 18 e5 6f a7 f2 09 6e b2 d7 f9 a7 b1 8c 3e 59 cb eb 06 10 01 00 5c f3 8c 11 f5 3c 4b 28 0b b8 6a 19 b2 82 d5 b6 75 e5 87 d3 2b 0e 54 2d 25 23 78 6a a2 be 27 e2 55 2a 59 2d a8 b8 6e db 10 82 e1 08 4d b0 fd 2f a1 16 16 2d 64 27 97 50 24 93 4b 7f 9d 20 b0 59 56 b2 8c 08 d5 61 9e e6 05 6c d4 f7 5c 50 61 82 03 a0 e5 71 64 99 ce 44 c3 e7 3b cc 99 71 b6 6b e3 7e ba ec f3 e3 37 53 b0 6d 18 ad 9e 45 5e 27 c1 c5 20 0c 63 f0 2d 72 f3 71 32 68 f6 8b a9 72 74 8c 48 bf 58 a7 ad 57 76 f2 16 4d 74 0e e5 85 66 32 56 c0 c4 1e 50 89 08 54 b8 5a 80 00 d1 5f 0f 2d a1 8a db d2 57 5d a3 11 95 aa 3c 22 42 7a 36 d3 8f Data Ascii: =&3g'r@y PdR@_:2FwPD)Yon>Y\<K(ju+T-%#xj'U*Y-nM/-d'P$K YVal\PaqdD;qk~7SmE^' c-rq2hrtHXWvMtf2VPTZ_-W]<"Bz6
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 6e 96 75 5a 12 9e 65 22 3d 8b 4d 14 de f9 5b 7e d0 4a 5f bc d8 35 8f bb 4b ab f2 63 2f ed f3 38 f1 48 0c d8 6e 0e 5c 97 18 71 33 e2 7e f1 84 35 de 33 06 38 cd 2a 85 f7 b8 d1 81 fa 02 4f 6c 35 9a 46 45 c2 1a 65 22 07 db 05 16 8a 8b 32 92 36 6c 8a 23 0b 94 5d 7c d8 2e 3b 3b ec 2b 1d b2 b3 e3 e3 7d 84 84 ac 58 8c 77 50 31 92 6f 50 91 44 21 1f 28 39 3a e7 1f 27 a9 91 a6 09 a6 07 65 4b 26 c7 87 2c 2e 7b 24 c6 12 28 07 bb 8e 2e 10 e4 04 d9 37 4c f7 58 26 d4 2a 92 cb 85 3b 59 4d b6 68 36 af 20 35 7a 13 3b f6 49 0d 8c 85 4f 04 e9 af 55 f1 ed 99 3d d6 5a 4a 45 9a e5 c4 c2 6b 2a 61 20 12 2c 2f ea 9f d6 ab 47 57 21 b2 8b 84 d6 38 a0 f1 0f 2b 90 82 5b c3 07 4d 9f 95 ca 8d bd d6 13 2d 11 8e 69 c5 a1 d7 91 92 21 be 5b 1c b2 10 5a 68 63 11 bb 94 5b 1e 99 41 8c ce e3 af Data Ascii: nuZe"=M[~J_5Kc/8Hn\q3~538Ol5FEe"26l#]\|.;;+}XwP1oPD!(9:'eK&,.{$(.7LX&;YMh6 5z;IOU=ZJEk*a ,/GW!8+[M-i![Zhc[A
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 97 e4 d1 f9 59 0f ce 51 f0 41 2f e1 41 83 f0 aa 6f 88 bd 78 26 4a 7b 41 91 e5 5c 99 72 6a 40 68 a4 19 e4 70 f1 46 f0 a5 d2 d2 2b 1e 65 59 82 13 b7 90 06 4b b8 6b 51 7b 3f 25 5f b8 9f 25 af c3 2d c0 9a ff f5 2a 72 e6 41 a9 b6 a1 30 71 d2 2e 10 1d 4b 1f ec c0 55 df e3 f6 f0 d7 47 e9 24 1a e3 63 45 66 c2 9b 2b 5b 4c 94 1a af 30 ce 6a 8b e3 14 61 43 d1 89 20 62 f1 b9 f6 83 e2 fa c8 10 59 99 d4 ad 6d c6 bf 94 c8 17 af 5d 1b a7 61 8f d1 4a 74 0f c6 ff 7f 5d 4b d3 2a 8d 2e 0f fd ca 7b 8f 44 ed c2 cd ff a2 2d 33 1a 27 d9 0a 78 4e cc 7d 81 f0 bc 9d 70 16 1e 95 e4 a3 e4 5c 4a d4 ef cf 25 ce 38 f3 7e 47 e8 7a 3f 3e 92 71 7d 3d 40 6c ba 0b f8 65 66 70 52 44 91 19 29 29 e5 09 05 8f b0 0e 65 21 3c 36 cf ac 47 ba 85 95 f4 41 75 49 c5 af 22 90 e5 af a4 74 81 27 14 f5 c4 Data Ascii: YQA/Aox&J{A\rj@hpF+eYKkQ{?%_%-rA0q.KUG$cEf+[L0jaC bYm]aJt]K.{D-3'xN}p\J%8~Gz?>q}=@lefpRD))e!<6GAuI"t'
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: de 9a 24 d9 a5 02 a8 3a ee d8 8f e7 0c 13 b6 f9 3e 3d 43 f0 f6 90 64 97 0a 60 e1 b8 9b 30 8c 11 71 c3 f1 be 12 28 28 3c cc f1 a0 97 8b 01 3c 4c 4d 81 1d c4 3b 9a 07 18 2a a4 46 01 dd 2a da d0 07 8e a8 8a 71 13 81 89 18 f9 4b b0 55 2b ce ce de 53 f5 4d 18 82 ad 45 9c 9d fd 10 63 9c 1e 1b b1 b5 98 c0 bb 9e c8 b3 b9 16 bc c5 8a 69 e6 df 89 33 93 ef c4 59 4c dc 24 b6 12 31 4d 6d 10 15 36 f6 4d 67 c7 72 ea 38 00 44 39 9e 5d 27 06 5c 01 f0 b2 eb c0 ff 31 4b 50 bb 72 e6 3d a1 dc 38 ee 22 b6 72 de a4 5b ea 95 78 c5 f2 56 7c e8 03 68 b6 77 e2 1f 58 0b 1f b3 ea e1 81 0a 78 78 b7 15 b0 78 6d 96 c8 87 61 8d 41 1c 79 58 62 fd bf 00 6f 0b 8b 0b 1e dc 94 79 cb ee de 1e 60 de 7f 8e 06 b9 2e f5 be bf 59 16 6e 16 f3 c2 bd 3d 40 34 06 51 bc ef 6f d6 e2 66 c7 f7 2c 8a 77 69 Data Ascii: $:>=Cd`0q((<<LM;FqKU+SMEci3YL$1Mm6Mgr8D9]'\1KPr=8"r[xV\|hwXxxxmaAyXboy`.Yn=@4Qof,wi
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 9a b1 ce 36 10 c1 35 8b 75 db 70 d4 f8 3a 26 e5 5c 6b 2d 7e ad b3 0d 36 aa 59 ac db 86 a3 7a 1a 96 c7 d9 23 be 6e 77 e0 01 0b 0d 0a 26 dd c6 ed 18 94 73 ad 4c 9b 82 dd 81 07 2c 34 28 98 d4 24 8f ee 12 3a 55 c4 7b 74 d9 27 3d b1 d6 07 b6 fc 01 19 93 73 2d fa 49 fb 5d 08 c0 e8 b2 4f 7a 62 ad bb 6c 94 07 37 69 72 8d 06 36 34 1c 71 64 e7 f2 6f 44 f4 29 3d a9 21 39 d7 92 d7 2d de b0 8b 17 0d 47 1c d9 b9 ac 1a bf 6c 1e db e4 db a8 d2 16 9f 27 f5 b2 23 68 38 63 80 21 39 d7 56 8e ed 5b 18 fb 93 7a d9 11 23 b6 72 c6 46 34 8d 49 4d e3 2e ab 0d 2a 4c 6c 98 31 00 13 2b 11 93 2b c5 5d f2 1a d6 b5 7b 4b 5f 15 22 79 5b b6 ec ff 2d fb 3f ce bd 27 08 23 16 71 25 e8 5a c4 95 a0 6b 91 40 7d 20 08 6b 8b 4d 6c a5 6a 49 57 be a2 af a0 08 45 5c f1 8c 2f 0b 23 14 89 ad 06 39 67 Data Ascii: 65up:&\k-~6Yz#nw&sL,4($:U{t'=s-I]Ozbl7ir64qdoD)=!9-Gl'#h8c!9V[z#rF4IM.*Ll1++]{K_"y[-?'#q%Zk@} kMljIWE\/#9g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	49996	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	595	OUT	GET /-/media/images/flag_270x170%20png.png?h=170&iar=0&w=270&hash=7B72FF4206EA37A8AC8DEADF8690F469 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	864	IN	HTTP/1.1 200 OK Connection: close Content-Length: 90905 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Flag_270x170 png.png" Content-Type: image/png Etag: "EtwAEiCOwGSRtJauX4SJOr9D24JfmvbRlP+pnNCtpR4" Fastly-Io-Info: ifsz=102340 idim=270x170 ifmt=png ofsz=90905 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120043-DFW, cache-pdk-kfty2130035-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460566.065679,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c 4c bb 67 b0 9f d7 79 1f f8 3c a7 bc ed df 7b bb bd 00 17 b8 e8 44 23 48 b0 4b 24 45 52 92 8b a4 58 63 d9 72 b7 e3 71 d9 4c bc eb 4d 26 c9 ee 24 ce ce ce 24 b3 1b 3b 19 af 63 b9 c8 92 d5 45 15 8a a2 44 91 66 03 40 10 85 e8 17 b8 bd b7 7f ef 6f 3d e7 ec 87 cb ec ec c7 f7 d3 fb e1 29 e7 d7 1e 3c b5 2f 2c 44 50 6f 05 b5 66 90 48 99 84 28 04 a2 e9 8c 51 94 52 f9 ae ef bb 41 10 48 29 01 00 28 05 24 28 84 b2 4c b4 0c 86 48 fa 4e b0 db 08 28 a7 99 54 d8 d2 f9 78 21 fc c4 a3 0f 69 d4 c8 0c 15 27 c6 07 c7 0e 3c f3 f2 97 fe db f2 ca 8d 27 9f 7d ba d3 b5 2e 5c fc c9 e9 53 0f cd dd 9f 39 ff d4 c7 de fe Data Ascii: PNGIHDR)6sRGB IDATxLgy<{D#HK$ERXcrqLM&$$;cEDf@o=)</,DPofH(QRAH)($(LHN(Tx!i'<'}.\S9
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 39 2b 6c 71 d3 98 5b 9a db dc dc 28 0d 4d 9e 3d ef 2c de 7e d0 6e 34 78 24 f4 93 1f 7c 33 14 2b 9e 7f fa 6c b7 51 95 22 e0 46 d8 88 c4 34 4d a7 54 0b c5 f3 2a 70 56 96 1e dc b9 7d af 90 6f 1d 3b 73 e6 fe ec dc ad eb d7 95 12 cc f5 65 ab 2d 28 a7 3a 67 ed 8e 3d b5 6f 30 a4 d1 f5 9d 86 e7 f9 08 54 48 e5 4a b1 57 00 4a 50 33 08 52 a2 3c e5 09 01 00 42 2a 09 90 08 1b 21 53 d3 09 82 ce c6 87 72 ef be 7f f9 f7 ff e4 4f 4c 23 d1 ae 95 ef dc b9 18 cb c6 ab 76 8f a1 f2 45 af be bb 33 b0 6f d4 ad 75 6f cf de fe a3 7f f3 1f 6f bc 7d c1 87 36 88 7e b7 dd 4c a4 8a 52 08 00 50 4a 22 02 28 85 52 21 80 54 8a 2a 24 08 0a 00 91 10 40 42 19 22 21 04 01 80 20 00 22 00 20 22 a1 94 73 0d 10 3c 21 42 84 22 21 42 29 d7 0d 0c aa 11 ca 08 e3 8c eb 4b 6b bb 66 c4 62 be f3 ed ef fd Data Ascii: 9+lq[(M=,~n4x$\|3+lQ"F4MTpV}o;se-(:g=o0THJWJP3R<B!SrOL#vE3ouoo}6~LRPJ"(R!T*$@B"! " "s<!B"!B)Kkfb
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 43 8b 86 34 8b 6b 9e eb 8d 8d 66 f7 0f 17 1e 7d fa 39 af be d5 ab 36 be f2 a5 6f be 7d f5 42 28 a4 ff ce 6f 65 cf 9c 7a 08 95 bb 5d d9 3d 7d ea e1 6f fd c3 3f 3c ff 4b 5f d0 85 f6 fa 85 1f 7f fa f3 5f 70 6a 3b 9c 99 80 14 01 40 09 25 05 20 02 f9 1f 20 4c 0a 42 a8 ef b9 40 28 d7 0c 09 04 40 52 02 08 04 60 af 6e 08 00 52 04 84 10 42 28 a5 94 31 e6 f9 92 46 39 65 8c 10 e2 05 3e e5 21 c6 38 25 04 91 78 8e 33 90 49 98 83 f1 17 9f 3b f7 0f ff f0 dd 89 83 fb 4c 8d 20 b3 dc 7e f0 fe e5 eb 6f 5c be 77 6b 21 79 ec f0 f0 27 9e 7b 64 ea c0 3e bf d7 09 7c 17 94 92 4a 72 ca 1c a7 0f 32 4e 94 00 00 d7 75 4c aa 28 4a cb 30 80 c8 5f 7a e9 ec 81 c9 62 af 2f 47 f7 1f 8a 84 a2 9b 8b 37 6c 5f b5 eb 65 2b 92 ff fa f7 7e 58 2a 6e 36 ab d5 93 47 47 9e 79 64 7a 72 ff 64 ad 56 ad Data Ascii: C4kf}96o}B(oez]=}o?<K__pj;@% LB@(@R`nRB(1F9e>!8%x3I;L ~o\wk!y'{d>\|Jr2NuL(J0_zb/G7l_e+~X*n6GGydzrdV
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 3b 3b bb 9b d1 68 04 95 d0 74 3d f0 3c ca 08 28 c1 99 8e 88 84 00 a1 7b 4a 09 63 8c 6b 9a ee 07 82 52 4a 19 61 8c b9 4e 40 09 a3 94 71 4d db d9 ad 0d e5 53 50 0d 92 b1 90 14 c1 c1 fd e3 73 0f 66 df bd 74 e3 f7 b3 e9 d5 95 55 44 fc 9f 7e fb 53 ef bc 3f bb b1 bd 7b e1 bd 4b ed 7a c5 15 c2 f3 5c 16 0f ed 91 63 db 11 80 84 00 50 8a ae 17 b0 90 a1 71 83 a1 ca 67 d2 e9 64 72 69 f1 56 b5 ee c6 57 17 d3 39 27 3f 72 54 0f c7 37 97 ef 3b de 4e 36 9f f2 7c 79 f4 d0 d4 68 d1 ca a5 0c c7 87 c3 d3 fb b7 d6 96 1b 6d 67 7d 7b f7 c1 c2 bc 90 22 9d 48 8e 0e 0d e4 4b 25 ab 90 b3 7b bd ad ed 8d 77 2e 5e 97 68 1c 1a 2f 6a 1a ed b4 7b 96 a5 6b 1a 6d 34 bb 8e ed 65 33 b1 66 bb bf 53 6e 04 41 00 08 86 4e 65 10 6c d4 fa 1a 25 ab db 0b 9e 84 c0 53 51 dd cc 47 29 d3 c3 be 8c dd ea Data Ascii: ;;ht=<({JckRJaN@qMSPsftUD~S?{Kz\cPqgdriVW9'?rT7;N6\|yhmg}{"HK%{w.^h/j{km4e3fSnANel%SQG)
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: a3 da 4d 25 62 f3 2b 9b 5b 95 fa 48 29 2b bc 6e 21 1f 3f 72 60 b8 5e ab 8f 8d 0e 4a a0 67 cf 9e b5 bb 2d 42 35 4d d7 6d d7 26 4c 03 ca 28 01 db b6 01 e2 a0 40 d7 79 4f 28 3d 94 38 7c a4 d8 77 fc 4e a3 da 59 ba b7 38 3b 33 b2 ef f8 c2 fc dc f2 66 65 df d4 91 b1 d1 b1 63 27 7a 33 33 0f 16 ab 6a 76 76 e9 cc f9 a7 00 e8 d6 da d2 ad 7b f3 a6 65 3d f5 e4 f9 66 bd 71 ff 01 97 c3 83 54 0b 6d 6c ac bf f1 de 87 8b 4b db 9f 79 e1 e1 4f 3c 7d 62 a3 da 59 5c de 9c 9b 5f 9d 5f bc a7 94 1f 89 44 f3 c9 68 38 6c 69 06 6f b4 7b 1b 9b 0d cf f7 c3 56 18 95 70 7c cf f7 84 a1 eb ae e7 f7 fb fd 40 40 cf 93 ae df 17 52 78 8e b3 be b2 66 59 9a 15 89 84 0c ae 02 59 df ad 33 8d 27 53 31 46 e0 f8 f4 c4 1f fd da 93 17 6f 2c 5c ba b5 76 eb de b2 dd ed 85 35 ae 90 79 c2 07 21 91 20 a3 Data Ascii: M%b+[H)+n!?r`^Jg-B5Mm&L(@yO(=8\|wNY8;3fec'z33jvv{e=fqTmlKyO<}bY\__Dh8lio{Vp\|@@RxfYY3'S1Fo,\v5y!
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 9a 4c 26 b9 1e 7d f4 89 a7 1e 3a f3 58 a3 de b9 7c f9 d2 97 bf f3 77 0b 6b 95 4c 2e f9 67 ff f9 6f b7 ca 8d f9 ad ca c9 d3 0f 71 ce 0d 5d b7 fb 7d 42 28 43 e0 7a 38 9e 2e 52 24 9d 8e f3 e1 bd 35 5b 92 81 7c b6 19 c0 6b 97 e6 7f f4 d6 9d 44 24 5a 4a 87 47 07 f2 c7 0f ef 3b 73 68 50 20 a9 36 fa 73 8b eb cb eb 1b 76 df 99 1a 2b 9d 3d 32 dc 73 82 4e cf ad b7 fa cd 4e 17 31 55 ab b7 7b 7d d7 30 f5 68 24 b2 b6 5e ee db 36 08 44 e4 86 4e 1c 3f 58 af 89 ad 5a ef c6 ec 6e d7 87 89 c1 e0 9b df 7f 8f a2 3c 7c 70 24 1b 33 06 0a e9 5f 78 e1 cc ed b9 8d f9 95 b2 04 54 08 5c d7 2d cb 0a 02 df ee f7 ba 3d 5b d3 98 69 18 94 10 20 80 94 2a 25 49 20 29 51 8c 71 20 48 51 09 40 04 b6 87 db f6 40 9a 90 2a 10 fe 5e 7e 80 72 0a c0 42 06 72 ba 67 4e 12 00 14 a0 02 25 01 50 12 20 Data Ascii: L&}:X\|wkL.goq]}B(Cz8.R$5[\|kD$ZJG;shP 6sv+=2sNN1U{}0h$^6DN?XZn<\|p$3_xT\-=[i %I )Qq HQ@@^~rBrgN%P
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: f4 4c 36 86 2b 0f 6e 76 ea d5 03 fb 47 86 87 06 7d df 29 66 b4 f9 b5 cd b1 89 a2 ae f3 6f bc 7a bd dd 79 7f ff 40 f2 f8 f4 48 a9 90 5d 5e 5d 4b a7 63 a3 23 a5 5c 2a 6e 98 21 c7 f7 3b bd 5e 37 17 e9 f6 bd 4e c7 ee d8 5e b7 ef 96 2b ed 72 ad 69 59 3a a3 50 ad 77 41 29 05 c0 28 ef f5 fa 42 06 ae c0 7e c7 77 3c b7 dd 73 ff 8f ff f6 7d cb 22 23 43 b9 b8 a5 eb 9c e5 52 d1 70 38 d6 73 dc 7e df 91 12 08 a5 94 31 c3 d0 10 a1 5e a9 09 20 92 28 db 73 09 2a 53 e7 88 84 12 4e 18 91 32 50 c2 27 2a 40 20 88 84 6b 94 31 9d 6b 5c 08 21 85 94 4a b8 be ef b8 01 a2 cf 28 e5 0c 19 a3 9c 33 c6 00 14 f4 fa 41 bd 6d 4b 85 84 ef 59 3e 14 94 f2 94 72 fb b2 db 73 90 28 4a 41 67 8c eb 14 09 f6 ba 7e cf f6 39 67 40 95 61 e8 bf fd 6b 2f 7e e3 9b 5f fb fa 37 fe 69 78 a8 78 70 7a ff fe Data Ascii: L6+nvG})fozy@H]^]Kc#\n!;^7N^+riY:PwA)(B~w<s}"#CRp8s~1^ (sSN2P'*@ k1k\!J(3AmKY>rs(JAg~9g@ak/~_7ixxpz
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: eb eb 6b 6b 9b 9e 84 4a a5 71 e3 c1 ba ef cc 9a 9c 65 52 f1 4c 26 b9 b6 dd 59 dd d8 cd 26 43 88 2a 9d 8c 8d 17 62 07 46 32 7d 4f b5 3b 7d d3 e0 9c 43 af d7 17 81 4c 24 92 8d 46 a7 d1 6c bb 81 00 aa 71 4a 50 8a ad 9d 06 a3 40 28 06 8a 11 a5 92 61 2d 9b 0d 29 a4 b5 96 59 ab b6 27 8b 89 cf 7e fc 68 20 d4 95 3b f3 37 6e dc ff 9d 5f 79 de 88 c4 ff e9 d2 bd 3b f7 66 7d bb 17 8e 46 b8 6e 28 29 11 14 51 4a 49 11 c8 40 29 45 15 d9 d3 d6 38 63 7b 91 a6 8f 1c 44 21 fc 40 22 01 00 01 00 94 11 40 42 90 00 c0 5e aa 4c ed a9 0b 44 29 a6 50 52 19 04 80 8a 10 82 94 85 38 6d d4 6b 3f fa e9 72 3a 99 42 8a be 94 4a 81 12 a2 de ed 6e 5d ff f0 e2 d5 0f 38 35 52 d1 d8 c1 83 93 f5 6e 4b d3 34 44 a5 eb d4 d0 99 8a 99 81 94 be 23 5c d7 73 1c ff e6 83 95 ab 37 57 0c 0d 12 49 6b 78 Data Ascii: kkJqeRL&Y&C*bF2}O;}CL$FlqJP@(a-)Y'~h ;7n_y;f}Fn()QJI@)E8c{D!@"@B^LD)PR8mk?r:BJn]85RnK4D#\s7WIkx
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 66 76 ab cd 46 bb cb 28 4d c6 cd dd 72 d3 0f a4 94 a0 13 b4 1d c7 15 ca 57 60 d7 fb 6e 60 1b 1a bd bf b8 f1 67 ff f5 e5 81 6c 2a 1a 4f b8 5e 50 29 57 18 91 a1 90 75 7c 32 f7 b2 86 9f 7e e1 d1 ad 6a 67 76 71 13 08 0b 94 94 48 0d dd f4 3c d7 f3 6d e9 07 5c d3 10 09 28 29 84 f8 ff a2 98 0c 41 e3 54 71 26 00 a5 52 42 4a 29 a4 94 42 29 25 85 54 7b d4 87 10 42 a8 52 c8 24 0d 04 a5 00 f1 30 33 4c 9d a3 22 7b 50 4d 01 12 24 28 11 89 02 02 28 11 41 0a 15 8a 84 74 6e 20 c2 9e ec ad 08 2a a5 40 01 01 04 90 a8 00 00 08 25 7a 88 41 48 db 6d da 14 68 2a 44 8f 1d 1e 8b 27 c2 4c 63 a4 6f 8b cf 7d fa d4 a7 1f 9e fa 8f 7f f6 17 ef de 98 07 0a c4 bc fd 99 17 3f 76 e2 e0 fe b5 d5 cd 64 54 8f 47 43 3b e5 56 af 67 3b 81 20 94 ea ba 46 50 fa 42 6e d7 83 ad 56 6b 66 f6 c1 f1 83 Data Ascii: fvF(MrW`n`glO^P)Wu\|2~jgvqH<m\()ATq&RBJ)B)%T{BR$03L"{PM$((Atn @%zAHmh*D'Lco}?vdTGC;Vg; FPBnVkf
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: b7 7b b6 54 20 91 18 86 69 9a a6 14 b2 59 af f5 7a dd 78 22 c1 28 53 40 25 00 21 20 15 a0 54 04 25 a2 a2 48 14 01 40 24 8c 81 42 01 dc 93 22 08 84 08 82 40 2a 2f 10 7e c7 a7 d4 e5 9c 68 8c 72 5d e3 94 72 40 a5 50 48 25 a5 a8 77 9c 66 d7 43 aa 03 40 cf 09 7a b6 4f 10 28 05 5d e3 ba ce 0c 43 e3 9c 31 24 80 20 94 72 bd a0 d1 e8 fa 9e 30 c3 56 b7 d7 7b f2 d1 a7 9f 7d e1 a5 bb 33 b7 d9 b7 7e 76 ad ef c1 85 0b 37 ab 6b 8b 23 43 e9 67 9f 7c 3a 15 32 87 87 8a 9b 1b cb 87 8e 1c fe da 3f fe 64 b7 5a 1f 2c e5 8a f9 68 b1 10 77 1d bf d3 b3 3b 9d 3e a1 c8 09 6d b6 ba c9 4c dc 69 55 06 87 07 6b bb fd 77 af 7e f0 af ff fd 9f fd e8 1b 3f 28 7b bd df fd dd df a2 54 57 52 7e 74 ad 45 b8 52 4a 4a d1 6f 57 19 d3 6b 3b 9b 84 d3 74 69 24 99 1d e9 94 37 5a f5 ad 98 46 a5 11 9f Data Ascii: {T iYzx"(S@%! T%H@$B"@*/~hr]r@PH%wfC@zO(]C1$ r0V{}3~v7k#Cg\|:2?dZ,hw;>mLiUkw~?({TWR~tERJJoWk;ti$7ZF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	49998	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	731	OUT	GET /Areas/LNRS/js/LNRS.bundle.js?v=638484963592761859 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2035967 Content-Type: application/javascript Last-Modified: Fri, 12 Apr 2024 05:25:54 GMT ETag: "0ddc3e3998cda1:0" Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 226511 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120073-DFW, cache-pdk-kfty2130074-PDK X-Cache: HIT, HIT X-Cache-Hits: 11, 0 X-Timer: S1713460566.171747,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 73 2f 56 69 64 65 6f 4d 6f 64 61 6c 42 75 74 74 6f 6e 22 2f 3e 0d 0a 64 65 66 69 6e 65 28 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 73 2f 56 69 64 65 6f 4d 6f 64 61 6c 42 75 74 74 6f 6e 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 6a 71 75 65 72 79 22 2c 20 22 65 76 65 6e 74 4d 61 6e 61 67 65 72 22 2c 20 22 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 69 66 72 61 6d 65 5f 61 70 69 22 2c 20 22 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 61 70 69 2f 70 6c 61 79 65 72 2e 6a 73 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 65 78 70 6f 72 74 73 2c 20 24 29 Data Ascii: ///<amd-module name="Components/Buttons/VideoModalButton"/>define("Components/Buttons/VideoModalButton", ["require", "exports", "jquery", "eventManager", "//www.youtube.com/iframe_api", "//player.vimeo.com/api/player.js"], function (require, exports, $)
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 61 75 73 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 73 68 6f 77 56 69 6d 65 6f 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 69 64 65 6f 49 64 20 3d 20 74 68 69 73 2e 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 69 66 72 61 6d 65 27 29 2e 61 74 74 72 28 27 69 64 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 76 69 64 65 6f 49 64 29 3b Data Ascii: { this.pause(); } } }.bind(this)); if (this.showVimeo) { var videoId = this.$scope.find('iframe').attr('id'); console.log(videoId);
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 20 20 7d 29 2c 20 22 2a 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 56 69 64 65 6f 4d 6f 64 61 6c 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 75 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 69 66 72 61 6d 65 27 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 67 65 74 28 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 27 3a 20 27 63 6f Data Ascii: }), "*"); }; VideoModalButton.prototype.pause = function () { this.$scope.find('iframe') .get(0) .contentWindow .postMessage(JSON.stringify({ 'event': 'co
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 73 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 6a 71 75 65 72 79 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 65 78 70 6f 72 74 73 2c 20 24 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 7b 20 76 61 6c 75 65 3a 20 74 72 75 65 20 7d 29 3b 0d 0a 20 20 20 20 76 61 72 20 55 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 2f 2a 2a 20 40 63 6c 61 73 73 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 20 28 Data Ascii: nobtrusiveValidationExtensions", ["require", "exports", "jquery"], function (require, exports, $) { "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); var UnobtrusiveValidationExtensions = /** @class */ (function (
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 3d 20 24 28 73 65 6c 65 63 74 6f 72 29 2e 66 69 72 73 74 28 29 2e 63 6c 6f 73 65 73 74 28 27 66 6f 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 67 65 74 20 74 68 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 75 6e 6f 62 73 74 72 75 73 69 76 65 20 76 61 6c 69 64 61 74 6f 72 73 2c 20 61 6e 64 20 6a 71 75 65 72 79 20 76 61 6c 69 64 61 74 6f 72 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 61 6e 64 20 63 6f 6d 70 61 72 65 20 74 68 65 20 74 77 6f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 20 3d 20 66 6f 72 6d 2e 64 61 74 61 28 27 75 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 61 Data Ascii: = $(selector).first().closest('form'); //get the collections of unobstrusive validators, and jquery validators //and compare the two var unobtrusiveValidation = form.data('unobtrusiveValidation'); var va
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 65 6e 73 69 6f 6e 73 3b 0d 0a 7d 29 3b 0d 0a 2f 2f 65 78 70 6f 72 74 20 3d 20 55 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 73 3b 20 0d 0a 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 56 61 6c 69 64 61 74 69 6f 6e 2f 52 65 63 61 70 74 63 68 61 41 70 69 4c 6f 61 64 65 72 22 2f 3e 0d 0a 64 65 66 69 6e 65 28 22 56 61 6c 69 64 61 74 69 6f 6e 2f 52 65 63 61 70 74 63 68 61 41 70 69 4c 6f 61 64 65 72 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 65 76 65 6e 74 4d 61 6e 61 67 65 72 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 65 78 70 6f 72 74 73 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 4f 62 6a 65 63 Data Ascii: ensions;});//export = UnobtrusiveValidationExtensions; ///<amd-module name="Validation/RecaptchaApiLoader"/>define("Validation/RecaptchaApiLoader", ["require", "exports", "eventManager"], function (require, exports) { "use strict"; Objec
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 53 69 74 65 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6e 74 65 78 74 4c 61 6e 67 75 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 3b 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 53 69 74 65 43 6f 6e 74 65 78 74 3b 0d 0a 20 20 20 20 7d 28 29 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 53 69 74 65 43 6f 6e 74 65 78 74 28 29 3b 0d 0a 7d 29 3b 0d 0a 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 2f 44 69 63 74 69 6f 6e 61 Data Ascii: }; SiteContext.prototype.getContextLanguage = function () { return document.documentElement.lang; }; return SiteContext; }()); return new SiteContext();});///<amd-module name="Globalization/Dictiona
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 44 69 63 74 69 6f 6e 61 72 79 3b 0d 0a 20 20 20 20 7d 28 29 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 69 63 74 69 6f 6e 61 72 79 28 29 3b 0d 0a 7d 29 3b 0d 0a 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 46 6f 72 6d 73 2f 45 6c 6f 71 75 61 4d 61 73 74 65 72 46 6f 72 6d 22 2f 3e 0d 0a 64 65 66 69 6e 65 28 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 46 6f 72 6d 73 2f 45 6c 6f 71 75 61 4d 61 73 74 65 72 46 6f 72 6d 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 6a 71 75 65 72 79 22 2c 20 22 56 61 6c 69 64 61 74 69 6f 6e 2f 55 6e 6f 62 74 Data Ascii: }); }; return Dictionary; }()); return new Dictionary();});///<amd-module name="Components/Forms/EloquaMasterForm"/>define("Components/Forms/EloquaMasterForm", ["require", "exports", "jquery", "Validation/Unobt
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 66 6f 72 6d 4e 61 6d 65 20 3d 20 22 42 75 73 69 6e 65 73 73 20 53 65 72 76 69 63 65 73 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 46 6f 72 6d 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 73 50 72 65 76 69 65 77 20 3d 20 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 69 73 2d 70 72 65 76 69 65 77 22 29 20 3d 3d 3d 20 22 54 72 75 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 22 43 6f 75 6e 74 72 79 22 5d 27 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 29 2e 6f 6e 28 27 63 68 61 6e 67 65 27 2c 20 74 68 69 73 2e 6f 6e 43 6f 75 6e 74 72 79 43 68 61 6e 67 65 64 2e 62 69 6e 64 28 74 68 69 73 Data Ascii: this.formName = "Business Services Registration Form"; } this.isPreview = $("body").attr("is-preview") === "True"; $('[name="Country"]', this.options.scope).on('change', this.onCountryChanged.bind(this
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 20 66 6f 72 20 73 6f 6d 65 20 72 65 61 73 6f 6e 20 69 6d 70 6c 69 63 69 74 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 73 65 6c 65 63 74 70 69 63 6b 65 72 27 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 29 2e 73 65 6c 65 63 74 70 69 63 6b 65 72 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 48 69 64 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 6f 72 20 73 65 6c 65 63 74 70 69 63 6b 65 72 73 20 69 6e 20 63 61 73 65 20 69 66 20 75 73 65 72 20 73 65 6c 65 63 74 65 64 20 76 61 6c 69 64 20 76 61 6c 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 73 65 6c 65 63 74 27 2c 20 74 68 69 73 2e 6f 70 Data Ascii: for some reason implicit initialization doesn't work $('.selectpicker', this.options.scope).selectpicker(); // Hide validation error message for selectpickers in case if user selected valid value $('select', this.op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	49999	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	611	OUT	GET /-/media/images/corporate/iwd%202024_270x170%20png.png?h=170&iar=0&w=270&hash=BAC305282643EF1EE26BB0E2B96C3EA3 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	867	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54235 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="IWD 2024_270x170 png.png" Content-Type: image/png Etag: "ECiSHkEVTwh4tZcyGb2BMvAiO1gPYCUCw30mki7Bx4U" Fastly-Io-Info: ifsz=61244 idim=270x170 ifmt=png ofsz=54235 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210066-DFW, cache-pdk-kfty2130075-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460567.548482,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c c4 bd 49 cc 25 c9 91 26 66 66 ee 1e cb db ff 3d f7 b5 2a 6b af 62 15 8b cd 26 d9 d4 f4 82 ee 96 34 dd 83 3e 08 02 04 8c 0e 02 a4 cb 00 d2 5d 82 74 18 01 ba 0a d0 9c 04 b5 0e 82 66 84 d1 45 6a 35 46 a3 99 11 9b d3 64 93 ea ae 26 8b 64 b1 16 d6 92 55 59 99 59 b9 fd 99 ff fe de 8b 17 8b bb 99 0e 11 1e 11 ef fd 7f ee 55 6c 47 e2 cf 78 b1 78 b8 9b db f2 99 b9 b9 07 fe 93 ff f6 0e 00 80 80 20 a0 40 59 aa 63 84 a6 88 00 22 88 cc 9d 01 00 c4 b9 1b 9a 82 00 20 00 28 22 08 20 00 20 80 20 22 80 80 e5 55 11 44 34 8a 10 cb c3 f6 eb 40 40 10 b1 7c 49 d9 96 f2 50 6b d4 0a b1 7a 7f f9 06 00 68 9e 5f 6c c8 Data Ascii: PNGIHDR)6sRGB IDATxI%&ff=*kb&4>]tfEj5Fd&dUYYUlGxx @Yc" (" "UD4@@\|IPkzh_l
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 38 e2 a2 1b ae f6 6e 05 36 d0 19 7d 90 44 b0 d2 76 b5 55 06 a8 26 49 bc 67 31 17 71 01 a8 b8 b8 e1 74 f1 98 a3 1c 2f 91 9a a7 eb c9 31 31 0a 88 b0 3d ae 87 e5 a4 ba 5a 77 44 1a 8e 03 00 01 61 40 3c 8c 03 bf 8c d2 e8 5f 59 6c d5 13 d6 e6 d5 2a 96 bc e9 e9 b1 68 fb 5b 66 fe c9 ca 9c 0a 43 aa 84 a1 04 1e 15 ed 71 5e 60 00 a0 9a e4 42 c1 b6 76 28 87 a7 64 0c 1f 39 f3 14 29 15 97 b4 25 fd 70 2b 16 4d f8 3c 2a f9 f5 5a 95 b2 a9 25 4f 13 04 21 d5 b3 73 87 fd 0f 2d c2 00 30 17 88 6a 4d d5 2f 02 5a 84 3a ea ec ef 68 29 89 76 d4 a9 6a 49 35 9f 22 35 ea 95 ba ee 32 5c c6 3e f8 2b 5a e3 5c e0 df 4b d9 83 ad b2 80 70 39 c3 e2 47 42 a0 09 c4 7d 49 a5 05 c0 da f6 f2 4b a9 b1 ce 49 10 04 04 06 f0 4c dc 72 11 1e 68 c4 9e a6 0d 50 be 70 91 c0 d5 d8 57 58 d9 b7 11 3d 1e 68 Data Ascii: 8n6}DvU&Ig1qt/11=ZwDa@<_Ylh[fCq^`Bv(d9)%p+M<Z%O!s-0jM/Z:h)vjI5"52\>+Z\Kp9GB}IKILrhPpWX=h
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 44 8e 1d 00 32 30 92 0e 4c 48 4a 59 e7 98 9d 00 a0 52 00 80 a4 b8 0c 97 09 dc bb 7b 42 98 80 bd 4e ae 34 f3 93 0a 0b 02 03 28 85 8a bc fb 70 1f 66 d0 55 4c bf 7a 19 b6 5e de 02 15 1e cc 2e d0 b8 b2 14 a5 cd c2 da d1 a8 ae 35 31 e7 4a 49 21 08 38 92 33 53 38 37 11 87 52 28 60 04 97 09 68 dc 4c 6f fc fc e3 9f de 9e de e8 74 bb ca 18 c7 3c 88 d5 c6 52 27 52 48 36 27 60 86 9a 15 c5 22 66 88 c8 0c cc 0c 20 52 9a 20 20 42 45 ca 89 58 e7 04 c4 19 53 84 c6 5a 29 66 b3 8c 10 3a 3d 13 45 79 31 a3 f0 7c 34 78 95 39 6f cf 43 3f a5 97 ec bb 59 fe 78 18 2f 3e 62 85 f5 53 50 8d 8c 77 4c b0 16 21 38 84 96 fc e0 79 f4 8b 47 44 eb 1e fc da 26 a8 89 cd d9 d2 38 d4 b9 b5 e7 b6 65 29 91 54 43 a9 11 ef 6e dc dd 3a bd 95 04 89 e3 5c 6b 4d 48 20 2c 92 98 20 2c f2 cc d9 3c 8a ba Data Ascii: D20LHJYR{BN4(pfULz^.51JI!83S87R(`hLot<R'RH6'`"f R BEXSZ)f:=Ey1\|4x9oC?Yx/>bSPwL!8yGD&8e)TCn:\kMH , ,<
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: e2 9e b5 2e 9d cd b4 71 5a 07 20 5c ce 7e 91 52 ce 7a fc d5 ea b9 c8 a3 e8 ed f9 52 3b be 02 61 04 5a 37 7e c2 fd 88 a1 eb c4 9e 6a 5d 5e 43 44 f4 2e 8e 54 75 57 ff 97 ea 16 00 fc 3c 79 3d 82 75 56 66 73 52 00 50 50 0c e2 5a 22 0e 40 50 9c d5 e1 da d6 f0 d2 17 b7 26 a1 22 06 29 10 45 29 22 45 48 5e 5c 88 f4 a0 6b 4e 2f e9 5e d4 37 6a 7b 7f ff e3 bb 3b d3 dc 25 85 2c 0f fb df 78 f5 b9 8d 73 e7 4c 77 65 96 cc ae 5d fe 20 9d 8e 2d 6b c7 96 41 28 54 5a 6b e7 98 01 0a 91 82 d9 21 68 c4 32 fe 88 2a 8c 24 61 b1 25 c8 ad 55 7a db ab f7 47 8d 37 5c 72 ed d3 c9 ca 1c 3f 63 5b 2a 6a 55 53 d3 19 c0 27 5c 1d f6 2c 1a 48 5b 2d 6b ac d7 39 7a 75 36 37 a3 e3 67 3f e6 82 04 ed 51 2a eb 7a 24 4e 13 01 e8 14 60 9c 58 05 50 e0 c1 da 38 89 67 03 d5 77 91 28 5b 68 a3 45 24 cf Data Ascii: .qZ \~RzR;aZ7~j]^CD.TuW<y=uVfsRPPZ"@P&")E)"EH^\kN/^7j{;%,xsLwe] -kA(TZk!h2$a%UzG7\r?c[jUS'\,H[-k9zu67g?Q*z$N`XP8gw([hE$
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: a4 78 66 1d 33 d4 eb cd ab 95 3a 4d 3e 2d 54 d8 7d a1 fb 73 06 15 65 ce 24 3d 65 c1 c3 3f a5 76 3e 00 da 09 46 2d ee ae 43 74 2d 6c dc f4 00 c0 e7 8b 1f 16 ab fa 60 fe c5 0f 62 37 69 5e cf 08 0c 28 28 64 14 08 14 45 c1 ec c6 e3 fd 4e a7 d3 ed 75 80 65 9a 24 51 14 89 30 21 29 ad 39 50 79 9a e4 f9 6c 7f 3c 46 a4 41 1c ac 0e fa d6 f2 ad ad 83 6e 18 8e ba 41 e1 9c d6 66 7a b0 7f f5 ea 2d a7 8c 73 45 9e 15 d7 ae 5c 1e 6d 9c d5 4a f5 07 fd c9 f8 60 b2 bf 57 64 79 96 45 49 52 b0 84 20 d0 84 c0 fc 5a 97 47 2c 2d df 00 05 20 0c a9 66 57 9f 2f 29 78 d8 9f 2b a7 20 db a9 8e 2d ba d5 c3 e3 ff 6b 96 27 b6 16 60 d5 58 d8 c3 de da c4 28 85 54 af 6f f4 a9 a3 0e 00 08 35 82 21 25 50 90 02 42 26 b1 28 0c 5c 4d 28 11 e1 46 98 df db 3a e8 0f ba ef 7d 72 6d 9c da 4e 18 b8 22 Data Ascii: xf3:M>-T}se$=e?v>F-Ct-l`b7i^((dENue$Q0!)9Pyl<FAnAfz-sE\mJ`WdyEIR ZG,- fW/)x+ -k'`X(To5!%PB&(\M(F:}rmN"
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 65 0a 29 72 1c 1b 42 74 22 25 c8 f6 8a b2 9c 86 f6 1b c3 fa 09 35 dd 5a 48 54 cf d2 4b 63 a9 01 1b 54 8e 87 28 da 82 d0 b5 ce 23 02 45 15 b7 d5 61 8a 72 c5 82 00 58 84 10 68 18 c6 10 05 b3 9d 34 19 ef 12 5d 34 3a 34 80 00 10 68 bd 1c ba fd dd c4 28 42 6d 6e de dd 39 b7 36 f8 da f9 b5 6f be f4 ac d2 c1 c6 ca 72 6f d4 fd ba 2d 6e dd dd ba 78 ea e4 bf f3 dd df 46 a5 44 32 04 cb ec 84 e1 ea cd 9d 77 df ff e4 8d 97 9f 29 a2 20 eb 0d 52 67 19 51 03 82 48 26 4e 04 80 14 8a 65 d2 c0 e0 f7 ec ab 4d cb 61 82 d6 7f 17 11 4f 25 33 2d 9f a1 39 3b 77 5f 7d be 3e f9 a5 7b 38 d2 e6 f6 3a 2d 16 6b 81 f7 bf 8e c8 0c 7f ac 06 55 ae a8 d7 7a 04 c6 04 85 9b 39 97 9a c0 28 1d 16 79 21 96 8b 3c cd 12 13 46 61 9e e5 02 3c 5a 5a 9b 4e 26 2f bc fc d2 9b 5f fb 9a 4c 76 27 d3 64 7d Data Ascii: e)rBt"%5ZHTKcT(#EarXh4]4:4h(Bmn96oro-nxFD2w) RgQH&NeMaO%3-9;w_}>{8:-kUz9(y!<Fa<ZZN&/_Lv'd}
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 5d 4d 1b 27 4f 9c 39 7f fe d8 8d cf f7 6f 76 47 a3 13 df fe ce 77 4f 9f 3e 9b 5a cc 84 48 9b d5 e5 11 80 d5 0a 45 38 34 f4 de 27 37 fe f0 37 5f 74 dd 6e 36 99 e6 20 d6 18 65 8c 13 28 18 18 28 80 99 8b e2 52 1f b5 3a fa 88 b4 f6 ae c8 02 ea 29 9f c7 85 1d 9e 2a 08 5b 8a 04 ce a9 9c 3a 56 f2 00 2b f4 c4 45 6a 08 3d cf 50 65 3b eb 21 f3 6d 6d 82 16 9e 13 8e a8 b2 fe 5f 5c b9 ad 47 89 20 94 b2 d6 91 09 74 10 88 80 52 7a b4 b4 a6 14 e5 45 c6 ce b2 63 46 d6 5a 0b 73 7f 79 15 51 b6 76 76 76 f6 c6 02 70 77 6b cb 00 ff e9 9f fd df b3 3c 07 b6 b7 6e de fa de fe ee b0 1b cd f2 bc d7 eb 77 8f 9d bc b7 b5 d3 1b 0e 57 d6 8f 6f dd bb 37 3e d8 ed 8f 96 85 59 eb 48 a2 b0 64 a7 f6 6a c3 47 db 1b bc 8c 17 4a 09 8b 3a 1d 0a 02 e0 2a 9f a5 1d 4c ab 90 b9 ff 8e 55 73 45 57 81 Data Ascii: ]M'O9ovGwO>ZHE84'77_tn6 e((R:)[:V+Ej=Pe;!mm_\G tRzEcFZsyQvvvpwk<nwWo7>YHdjGJ:LUsEW
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 52 8e 9d b5 c5 52 27 8c 89 38 b3 f7 d2 62 67 9a 04 61 ac 48 ed 6d dd db 38 7d 5e 07 a1 d6 21 00 67 59 4a a4 c3 a8 63 74 c7 87 96 1a e1 90 43 22 7d 74 4f cb 27 11 7a bd 6a e2 cf 6b fe 3a fb c2 1b 16 f1 ce 78 8b 37 b4 5f 13 eb dd f3 66 81 57 6b 65 19 2e 88 47 4d ce 52 54 09 09 59 a4 e5 d5 b7 d6 12 7a f9 2f 73 25 1d 80 20 6a 32 ac 54 14 05 c5 64 fb 7b 3f f8 ab 74 7f 32 9b 26 a4 68 f7 20 b5 8e 09 09 00 ad e3 d4 f1 70 34 38 7f cc fe f0 af 7f 75 6a 30 ea 66 c5 f2 c9 95 51 21 57 2f 7f 7a 63 fb 20 03 9d a6 f9 e6 e6 f8 9f 7e ef 7d 00 0e 03 13 e8 40 6b 40 91 40 9b f1 de 5e d7 44 90 59 40 42 8d 81 b3 da 8a 12 d1 90 aa 80 45 60 1e 6f d6 c9 92 75 07 17 d8 e9 08 68 f5 48 83 53 89 de 9c 89 ad a2 86 52 87 4a fc 0c 30 42 eb 45 4f f4 c6 a7 2a 2d 29 41 80 d6 88 03 54 ca af Data Ascii: RR'8bgaHm8}^!gYJctC"}tO'zjk:x7_fWke.GMRTYz/s% j2Td{?t2&h p48uj0fQ!W/zc ~}@k@@^DY@BE`ouhHSRJ0BEO*-)AT
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 5e 5a da b9 78 e1 4c ff dc 25 d3 ed 85 dd 30 1e 74 8b 74 7a e7 56 f2 5f ff e9 bf f9 e2 de 2c ea 77 b2 24 03 e7 98 99 85 41 28 08 88 85 85 d9 88 0d d1 09 8b 12 0c 14 11 81 25 01 54 64 02 38 b4 65 de a1 cd d2 da 3f 11 0f 09 83 2c c0 dc c3 4c f6 e0 82 87 7e d6 ea a7 35 47 2c b5 61 ab d7 1b 2d 0a ef 57 5a da a6 ac 6c 05 08 89 43 14 10 9b cf 62 2d 2f da a5 df e8 9c dc de ba fb f3 5f fe 72 2f 2f 3a 61 f7 60 3c ee 74 fa c6 05 45 9e a3 c2 5e a7 9b e5 29 2b 17 28 45 a8 25 d7 05 93 2b a5 4d 64 6f 3a 1d e1 e0 5b 17 df d8 b0 4b b7 af dd 5e 39 d7 37 40 7f 7c e9 db bf b8 f2 de 27 77 be 38 79 f6 d4 ce e6 8d fe da 71 9b e7 96 00 40 66 89 93 72 66 65 ce e2 3f 90 da 58 a1 5d 44 e8 f7 15 80 07 92 8d f6 f7 df 3c ad 62 57 de 22 94 27 bd 76 d2 02 02 d4 78 24 d8 08 cc e1 03 ff Data Ascii: ^ZxL%0ttzV_,w$A(%Td8e?,L~5G,a-WZlCb-/_r//:a`<tE^)+(E%+Mdo:[K^97@\|'w8yq@frfe?X]D<bW"'vx$
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 32 ee 4f 02 9b 77 36 97 b0 48 73 bb 33 1e bf 7e ee 42 18 18 c8 8a 72 47 05 20 e8 46 7d 63 c2 a2 48 d8 ba 8e d2 c3 60 48 22 1d 6d 14 91 51 2a 52 81 63 ab 05 f2 59 06 bd a8 1b 44 a7 57 37 ce 6f 9c 39 be b2 a6 b5 4e 0f 76 45 c0 ba e2 64 38 fc 87 cf 7e f7 93 bd 9b 3f b9 77 f9 3a 6d 8e 36 d6 0e 0e 46 d6 22 a1 80 08 79 b2 d2 51 b4 9d e7 56 18 f6 09 11 ca 6c 26 1f 59 01 a0 7a d7 84 36 a2 ad 30 53 3b a9 1e fd 46 ac a5 71 10 69 25 c4 2c 12 09 ea c0 80 b7 53 de 66 55 97 ef a7 c8 10 a0 fa 04 17 00 80 10 e5 93 09 a4 ac 47 bd b3 27 8f bf 76 e1 c4 8f 7e f0 c3 db 37 6f 24 99 4d 66 79 52 70 18 d0 e6 bd fd 73 a7 d7 67 99 75 2c 2c b8 b6 b6 64 6d 4e 20 01 e1 b0 d7 8d e3 30 48 dd b3 67 8e dd bc 37 41 13 59 6b 23 81 30 30 0e 71 7f 9c 12 ba e3 cb bd bb 9b f7 5e 3d bf ea 6e dd Data Ascii: 2Ow6Hs3~BrG F}cH`H"mQ*RcYDW7o9NvEd8~?w:m6F"yQVl&Yz60S;Fqi%,SfUG'v~7o$MfyRpsgu,,dmN 0Hg7AYk#00q^=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50000	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	629	OUT	GET /-/media/images/corporate/catfishing-website-thumbnail_270x170%20png.png?h=170&iar=0&w=270&hash=7C549725CE1171E10F84CD1535971AEF HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	887	IN	HTTP/1.1 200 OK Connection: close Content-Length: 82267 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="catfishing-website-thumbnail_270x170 png.png" Content-Type: image/png Etag: "u9sCQX9iyxs8ot41RIF+2gpFE/414GlGjAGAkn83sP0" Fastly-Io-Info: ifsz=93155 idim=270x170 ifmt=png ofsz=82267 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210108-DFW, cache-pdk-kfty2130032-PDK X-Cache: HIT, MISS X-Cache-Hits: 4, 0 X-Timer: S1713460567.550122,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c 94 bc 59 8c 66 47 76 26 76 ce 89 88 bb fc fb 96 5b ed 3b f7 26 bb 45 f5 22 a9 a5 b6 67 91 25 7b 64 cb 0b 04 63 8c c1 bc 18 30 06 a3 87 79 30 6c c0 f3 ec 87 01 fc 30 36 30 f0 83 0d 0b b0 81 91 c6 d6 68 24 59 96 ac 91 ba 4d f5 ce 26 9b 3b 59 0b 59 59 95 59 b9 fe fb 72 d7 88 38 c7 0f 37 b3 58 24 ab d8 ec 40 01 99 c8 fa ff b8 f7 46 9c f5 fb be b8 f8 4f 5e f9 e8 de c1 de 83 c3 91 b0 ba 71 f9 cc 66 af ef 58 10 41 44 6e ef dc 9b 2d 16 84 88 88 00 20 22 f5 b8 76 e1 cc 99 56 bd 01 20 7f fe ed db 37 ef 4c 8c 41 00 54 4a be f4 42 f3 f9 17 9f af d5 5b cc 0c 8f 0c 11 40 64 2a b3 6e 48 5f bb 7e e6 de 70 Data Ascii: PNGIHDR)6sRGB IDATxYfGv&v[;&E"g%{dc0y0l060h$YM&;YYYYr87X$@FO^qfXADn- "vV 7LATJB[@d*nH_~p
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: a4 dd 6c 22 60 60 8c d2 ca 59 f7 b9 71 4e 4e ff 7d 7a 20 80 22 85 48 9f f5 95 2a c4 2a ad a2 50 01 30 40 15 87 c1 b3 2c 97 d2 ef 83 b5 ee 49 75 40 65 9f de b3 b3 9c 67 05 00 02 3b 59 8d c0 5a 80 c0 a3 61 01 22 c8 16 c9 87 ef 7c e4 4b 31 94 b5 97 6f 4a 36 ee 7c f9 97 2e 7e f5 9b cb e1 a1 17 8f 80 82 64 56 7b f5 dd bf c9 5b d7 73 e9 82 52 a4 9d 41 2b 02 71 3d d6 de f2 f1 a8 00 f1 46 83 f3 7e b4 98 d7 6b 0d 44 08 b4 01 04 00 41 00 52 08 80 22 a0 94 22 42 44 2c 4b 5f e4 b6 7a 5e 11 0a 43 51 9a aa d4 e8 ac 63 e1 d2 16 65 59 ac e6 d3 c9 64 e8 6c 41 a4 00 a4 28 5d 5e 38 42 1c 34 6b b3 2c b7 f6 89 b6 fe d9 c5 a8 72 7e 65 33 04 e0 99 3f 55 e9 3d dc 26 52 38 5b ae 86 d3 09 11 09 00 7b 4f 88 9e fd ee e1 01 7b 8f 88 20 62 bd 17 e1 cf f7 55 14 60 11 6d 64 2d a6 9d 45 Data Ascii: l"``YqNN}z "H**P0@,Iu@eg;YZa"\|K1oJ6\|.~dV{[sRA+q=F~kDAR""BD,K_z^CQceYdlA(]^8B4k,r~e3?U=&R8[{O{ bU`md-E
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 68 1d 0e 47 0e 91 09 09 09 9c 05 eb c5 3a 06 e0 22 2b 6c e9 bb ad 00 59 44 50 2b d4 da 10 61 59 14 b6 2c 95 52 88 54 dd ae 88 00 9c 64 1f ad 94 22 50 80 d6 cb e7 ef e1 e7 8c 2a 22 95 ce 8b 7c da d9 10 90 99 47 d3 89 f7 9e 3e 83 05 09 80 67 7e e9 ca 85 af dc b8 f4 ff fe e4 ed fd e1 f1 b9 f5 8d cf bd 92 d4 e3 48 99 e8 7a 9d de 39 5a 34 20 5e 7b fa e2 83 f0 78 b4 37 32 46 b5 5a 61 ef 4c af 63 c8 2d 26 ef ff c5 77 76 de fc e0 e2 37 bf 7c f1 9b 2f 3f 78 eb d6 f0 fe 6e 10 04 6a 73 8d 97 53 03 ba 59 6b cf e6 c3 6f fe ce df 0f fb 6b 7f fa 87 ef cc 7b 4f 9b e5 b8 fc b7 7f c0 cb 19 a4 0b 71 16 98 01 10 94 82 30 92 b0 46 61 44 41 5c 6f b7 06 57 ae 06 83 2d 51 ca 0a e6 9e 0b cb b9 f5 05 b3 17 0a c2 de e6 95 ad 3e d8 e1 fe 78 72 34 5b 25 d9 2c 88 0d ea 4e 1c 15 0c 0f Data Ascii: hG:"+lYDP+aY,RTd"P*"\|G>g~Hz9Z4 ^{x72FZaLc-&wv7\|/?xnjsSYkok{Oq0FaDA\oW-Q>xr4[%,N
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 66 cb e5 29 65 fa e9 a1 08 26 cb d5 1f bc f2 e3 ac 2c 93 2c 6f af 35 54 15 d6 3e c6 35 2b e0 08 99 b9 11 9a 1b 5b bd 76 cd 6c 1f 4e be ff fe 87 fd 6e f7 e2 80 bb 3d b5 f3 c6 ed 57 fe c7 df 1b de dd 09 c2 00 b4 6a f7 06 ed de 20 5f 64 47 af 7d 10 e9 80 c9 2d 6c 0a 28 41 58 2b bc 0b c8 08 4b 60 62 63 22 eb 4b 4d 06 c3 5a fd ea 55 73 66 2b 68 b5 fc 2a f1 c9 92 cb 42 5b af 92 b4 98 8c b5 2b 19 21 49 bc 31 c6 18 6d 10 03 02 8d 90 27 ab b0 16 42 2a b3 ac 98 1d 4d 0f 6b 61 7f b3 35 18 b4 fb 71 58 e5 7d 11 e9 c7 81 07 20 e4 66 cc 5a 61 e9 20 cb b1 b0 e0 18 5d 01 49 4e de c3 46 1f 8c 12 10 e1 d3 a8 57 35 f6 46 71 10 80 b5 52 0b d0 5a 9c 25 22 8c e7 d6 f0 ea 7a 9b 85 ef 1c ce aa 5a ff 21 13 4d 4a d5 55 dc 88 eb bd 76 a7 db 98 4d e6 53 a5 b4 3c ac 61 2a b4 14 1f 83 Data Ascii: f)e&,,o5T>5+[vlNn=Wj _dG}-l(AX+K`bc"KMZUsf+hB[+!I1m'BMka5qX} fZa ]INFW5FqRZ%"zZ!MJUvMS<a*
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 24 2f d3 24 5f 1a 1d f5 a2 0d 1d 2a 41 32 61 a3 11 98 66 76 6f a1 cf ce 3b 57 58 1b 29 94 c3 c0 6c 3d 43 67 9f f1 c5 42 0e 3f 94 ed b7 b5 cd d5 72 44 7b 6f 17 e7 9e b3 f5 2e 0a 0a 78 10 20 42 61 a4 22 2f 5b 8d 3c ee 99 c5 08 57 8b 22 6e 4c 6a ed bd a5 7e fb c0 5d ec a9 a7 d6 83 0b 3d 8a 42 f2 5e da 75 24 91 f1 0a 56 39 e7 05 65 05 62 65 8a 22 2c b8 73 2c de a3 75 08 02 71 84 9d 3a 8c 13 01 80 c9 0c 1a 21 77 ea e6 ca 46 f7 9d 9d 21 9c 6a 31 1e f6 e2 78 c2 eb 03 08 28 60 f1 5e 54 20 a8 41 08 80 e0 71 4c 25 9e 30 d5 a2 2a b8 40 98 27 0f c0 66 25 99 62 3e af b7 5b 08 4c 78 ca de c3 c7 1a 05 63 18 b2 a5 b5 16 11 50 53 9a ac be fd 47 df 56 dd ad 7c 7a 0c c0 40 8a 45 81 40 6c a0 5b 57 a7 8d 35 54 34 5a e5 74 ce 33 88 f8 a0 53 84 83 b8 78 20 68 4e 36 ee 34 e2 0a Data Ascii: $/$_A2afvo;WX)l=CgB?rD{o.x Ba"/[<W"nLj~]=B^u$V9ebe",s,uq:!wF!j1x(`^T AqL%0@'f%b>[LxcPSGV\|z@E@l[W5T4Zt3Sx hN64
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: e6 05 64 99 89 a2 64 21 37 df b8 d3 ed b7 06 5b 6b ed 5e ad dd 0d ce b4 02 02 26 6a 6d 6d 6c 6e ac 56 e9 6c 3e 99 2f 8f a7 f3 37 67 d1 ed 9d fa d9 41 7c 7d 10 37 6b d0 8e 64 a3 0b cd 9a ec 8d 21 c9 81 05 59 84 45 02 85 d5 42 3b 27 35 63 3e 9a a4 f7 67 0e b3 ac 9c e4 5f ff ea 99 66 1c 5e 1c b4 df df 1b 0b c0 67 19 13 79 f8 43 b8 52 88 68 9b 83 38 44 aa d0 69 45 58 5a 77 34 1b 2e d3 d4 7b bf 5a 8a 2d 45 69 04 42 ae b8 44 84 32 b3 f9 2a 6d d7 23 0f e0 1c 7b 27 dd 5e 43 d8 af 96 39 e1 49 2c 97 7c 8e ec 01 59 e6 87 c2 0c 40 20 84 c8 a0 f0 bd 77 b7 f7 77 26 65 69 8b 3c af ea 75 40 00 45 87 fb e3 f1 f1 74 eb 4c ab 8a cf 22 4e 84 04 4f b9 59 16 ef 6c ff c6 73 41 ad 31 ba f9 0e 7b c7 a8 99 74 a5 65 01 e1 30 50 40 50 e4 99 9e 8c e7 15 5f 29 00 88 04 3a f0 de eb 72 Data Ascii: dd!7[k^&jmmlnVl>/7gA\|}7kd!YEB;'5c>g_f^gyCRh8DiEXZw4.{Z-EiBD2*m#{'^C9I,\|Y@ ww&ei<u@EtL"NOYlsA1{te0P@P_):r
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 35 bf 33 fa 97 af 6f df bb c7 4e 50 93 52 0a 95 ae d6 c7 a5 b9 d6 a6 d6 6a 6b a3 45 a4 2c ad 73 65 3d ac c5 3a 46 3e 11 78 28 15 44 41 10 87 2d 42 62 9b 87 61 18 5c b8 62 5a 3d 54 28 ce 29 67 a9 2c a2 7c 59 2c 16 c5 f8 1e 2e 0e 2d 40 19 c6 c1 e6 55 73 f6 ba 1e 9c a1 a8 51 15 1f 80 20 9e 99 a9 db 6f d6 9a b5 fd ed 83 fd bb 87 ce 33 29 ad b4 88 c8 fc 78 31 2e 08 b6 06 81 a2 51 2a a5 cf ae f6 a2 50 2b f4 e0 85 24 ac 01 08 b2 08 12 21 08 c3 74 09 59 01 67 06 70 fd 0c a5 de 8c 17 be 13 49 95 0a 02 85 5a 21 8b a0 52 69 54 bf 7f 7f 76 e5 a9 4d 04 b5 de ac af 75 5a 47 d3 44 57 80 e7 09 39 5f 6d 3b 08 29 40 23 02 28 ae a2 09 15 62 61 cb 0f b6 1f 0c 87 59 ab a5 e8 93 dd 8b 08 83 b3 95 c0 ec cc 85 4d 00 3c d8 3e 88 7b dc ac bd cc a0 67 b3 6c 34 9a bd ff de 2e 92 01 Data Ascii: 53oNPRjkE,se=:F>x(DA-Bba\bZ=T()g,\|Y,.-@UsQ o3)x1.Q*P+$!tYgpIZ!RiTvMuZGDW9_m;)@#(baYM<>{gl4.
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: ce fb 8a 4a a9 1c a6 3a bb 52 38 5f 7a 16 10 66 5f b2 d7 4a fd 3c 47 ec e1 e1 1a ed 1d 1d ed 1d 1d c2 89 ef 3d 31 2f 89 b0 88 ac 6d 9e 3d 7b fe 2a 21 1c 0d 27 4a e4 d2 7a e7 ca 7a 5b 1b 5d 32 28 42 eb fc 38 2d 73 ef 37 da 51 73 7a f8 bd 1f 7c c4 1e e4 dd 57 b2 a3 5d 21 ad a2 f8 c4 df 4e 9e a2 72 18 01 01 24 2a ca 32 2f 96 de fb 6a 69 03 63 6a dd c1 02 c9 65 b3 aa c4 66 96 13 bd a9 f8 c8 44 ab 37 5f f5 af 7e 37 02 8e a2 48 47 75 8e 5b ae d9 2d 07 e7 f2 f3 4f 4f 07 e7 50 13 7a 4d 6b 97 d4 d6 55 9d a6 6e 77 df ef ee 60 ad 55 2e 8e dd 5f ff 91 79 f1 17 e9 d9 af 92 09 c0 95 99 95 db a3 fc 38 b1 17 3b d1 fa 7a 77 7d a3 79 b4 37 b9 bf 3d 5a ad 0a 2a 73 33 1e f3 99 ad 79 86 b7 46 f9 b5 5e 30 88 f5 70 9e c7 35 d3 8f 8c 82 0a 65 af e2 57 85 8d 8b 00 4e 17 58 94 dc Data Ascii: J:R8_zf_J<G=1/m={!'Jzz[]2(B8-s7Qsz\|W]!Nr$2/jicjefD7_~7HGu[-OOPzMkUnw`U._y8;zw}y7=Z*s3yF^0p5eWNX
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: e3 36 1b 00 10 09 b5 81 02 21 88 60 34 9a 8c 8e 27 70 a2 ca 45 f0 19 97 09 9d a2 ca 20 0e 48 03 19 80 4c 87 66 75 b0 f3 a3 7f f6 5f 63 54 2b e7 13 0d 1a 50 ac ee 0a 45 ca af 6a d9 4d f1 4b a5 0c 02 f4 36 d6 75 a5 d7 fd 99 48 ab 88 00 4b a7 d7 d2 d5 19 0f 94 aa 58 a7 93 b7 6b fc 8c a1 89 aa 57 54 21 11 fb d2 b3 27 a5 08 40 6b 5d e1 ee 65 59 2a a5 b4 d6 a5 2d c7 f3 59 1c 46 ed 7a f3 53 80 01 11 cd 96 cb ed bd 07 ae 6a 81 4e c5 31 2c e2 59 aa d7 60 88 08 33 87 61 b4 b1 75 be d3 eb 5b 6b ef 6f df 5a cd a6 2f 5e bb f2 a5 8b 1b dd 7a f4 fe de f8 de 3c b7 a0 0c 69 46 24 a0 55 e9 59 88 72 7f f7 8d 5d 9e ce ce 15 c7 91 9d 3b 50 0f f3 25 11 59 67 c7 d3 e9 72 b5 aa fe 12 86 21 21 66 79 0e 88 f5 38 ae 85 a1 0f 1b 79 73 9d a3 ee 34 99 ae ee 7c 2f 30 41 5c eb 2b 50 5a Data Ascii: 6!`4'pE HLfu_cT+PEjMK6uHKXkWT!'@k]eY*-YFzSjN1,Y`3au[koZ/^z<iF$UYr];P%Ygr!!fy8ys4\|/0A\+PZ
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: cf 5c a7 e7 ea 31 21 b2 e0 a2 b0 db 53 f0 8c 9b 89 5a eb 40 3b 06 e7 f9 78 4e 67 5b 61 a7 66 ee 0c b3 71 e6 11 45 01 66 56 6e 8d f2 59 e1 2f 75 82 66 a0 a7 85 2f ac 2f 3d 84 0a 37 1a 66 5e c8 22 73 ef 1c e5 17 bb d1 e5 5e 14 1b ba 35 ca 6f 8e f2 e7 30 ea c7 11 29 be d4 d6 37 34 94 1b f5 9b d3 a7 6f fe c9 9f cb 5f fc 4d d0 a9 75 2e 9f 57 6b 1b b6 dd a9 77 3a e7 4b cb 99 9d d8 64 be 4a 5d dc 12 0c 7f fa 93 9d f1 de 70 31 99 17 85 f7 68 1c 85 48 75 ea 39 9c 1e c8 49 32 39 f5 16 14 7c a8 62 7e c2 a8 08 7e 44 00 64 22 e2 7a ed cd 9f 7e f4 c1 c1 a2 48 0a 40 41 aa ce f6 0b 78 7b fd d9 67 d7 ce 5f 2c 73 18 f4 5b 71 14 d8 95 03 16 46 c5 00 20 8e 50 3d d4 a7 9f 1e ed 23 40 43 9c 28 9e 91 88 af de 3f 46 a4 3f ad 5b 44 00 04 2a 2d 2f 56 d2 6e c1 49 b9 85 c0 d2 ec 34 Data Ascii: \1!SZ@;xNg[afqEfVnY/uf//=7f^"s^5o0)74o_Mu.Wkw:KdJ]p1hHu9I29\|b~~Dd"z~H@Ax{g_,s[qF P=#@C(?F?[D*-/VnI4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50001	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	623	OUT	GET /-/media/images/corporate/bhm%20graphic%20simple_270x170%20png.png?h=170&iar=0&w=270&hash=ABB107F15E66C1D41B6BAF4A394BD0E3 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	877	IN	HTTP/1.1 200 OK Connection: close Content-Length: 38257 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="bhm graphic simple_270x170 png.png" Content-Type: image/png Etag: "NPMG4KvLdg775Okr7pRq29FbQyvZIt4uql4f1PliyqA" Fastly-Io-Info: ifsz=43649 idim=270x170 ifmt=png ofsz=38257 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010250 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560838 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210178-DFW, cache-pdk-kfty2130091-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460567.551910,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec bd 67 98 1d d7 75 25 ba f6 3e a7 ea d6 bd 7d 3b 07 a0 11 1b 39 12 00 09 80 24 18 c4 28 26 91 b2 32 25 51 94 15 2d f9 d9 0a 0e f2 c8 41 6f 24 fb 8d fd c6 69 ec 71 d0 8c 65 4b 96 69 59 96 25 53 81 12 25 e6 4c 91 20 88 9c 73 ee 1c 6f ac aa 73 f6 9e 1f 75 9b 84 24 7b 7e bc 3f 9e ef 75 2f e0 fb 1a dd 7d 51 75 aa be b3 ce 39 3b ad 4d 98 c5 4c c5 b5 db ae fa e6 37 be 38 67 6e 0b 41 4f 9f b9 f8 99 4f 7f a1 ff c5 57 4a 61 30 75 c3 bc b6 ab ba 55 bc 09 a2 91 47 cf 9e 7f f8 b0 02 00 e6 b6 17 3e fb ae 85 ff f3 e1 0b 87 ce 95 01 00 04 e8 ba b5 cb af da b4 36 c8 e7 ab 75 d9 bd f7 e0 be 7d 07 01 25 62 Data Ascii: PNGIHDR)6sRGB IDATxgu%>};9$(&2%Q-Ao$iqeKiY%S%L sosu${~?u/}Qu9;ML78gnAOOWJa0uUG>6u}%b
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: b4 ef c2 c4 bb 97 8e 2f 6a af fa 58 d3 54 c4 ff db f1 0e 85 31 30 3e f1 49 e2 08 4c 60 85 4c 5b 17 44 44 10 4f 24 d9 ad 0d d1 c2 28 7f 63 df fc 79 f3 3a aa 6d cd eb ba bb fd a1 13 af 94 4a 30 20 a7 44 ca 20 31 2a 4e d3 3a 0e 3b f3 ca 44 5c 75 09 98 12 76 0e 6a 2c 3c a9 0a 58 41 80 27 80 32 6a 92 2a 48 a1 4c 5e c4 10 31 9b 54 04 0c 52 55 15 02 c1 ab 51 18 22 43 c4 0a 16 65 0f 12 6f 95 bc 28 91 02 a9 2a 98 d0 6a f9 2a 6f 3b 3c d7 39 f1 3a 4b 95 99 0a 05 62 af de 92 2a 1c 54 19 50 30 e0 25 7c b6 ba ea d9 a1 a6 cd 6b 96 5d bf 68 e1 91 33 27 5e 3a 7d e4 9f 2f 9e fd 78 74 ae 25 9f 10 a9 f2 bf 7d 41 52 b1 81 15 91 34 89 41 d4 b0 f3 15 4c 10 00 24 c4 60 32 00 40 1e b0 4d 2e bd 6e d3 b2 8d ef ba 6b d2 e4 f9 b1 97 9f df 7d c4 41 8c 02 a4 ca 0a 81 82 d5 ab 3a 7a e1 Data Ascii: /jXT10>IL`L[DDO$(cy:mJ0 D 1N:;D\uvj,<XA'2jHL^1TRUQ"Ceo(jo;<9:Kb*TP0%\|k]h3'^:}/xt%}AR4AL$`2@M.nk}A:z
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 4e a6 a9 4f 45 75 75 df a2 df b9 f1 ce 1f 3d f6 e8 77 cf 1c 9d f0 00 dc 85 d1 4a ec 93 86 31 a2 00 50 f6 52 6e 72 f3 7b c6 4b 65 0c 16 82 8b 17 53 26 ca a8 47 59 3c 46 d4 c7 0e 9e 48 88 40 44 29 ac 57 43 01 93 a6 3e 26 ef 17 74 14 ae 58 dc bc 6d 4d d3 9a a5 02 1e 3d 3f fe e4 ab a7 9f 7f 65 ef 91 e3 a3 27 07 87 87 aa 55 07 cf cc f6 f1 5d 39 a6 7c 6b eb 86 95 73 36 f5 0d 6c 5b db 71 e7 35 f3 af fb e8 f5 df dd d4 f3 e0 0f 8e ed 7f 69 68 f2 62 2d bf bc d0 d4 d7 94 16 82 04 29 09 54 32 53 49 21 a2 c6 28 81 94 67 a9 32 73 21 99 cd a1 e0 cc 4e 21 18 03 97 52 7f bd 35 e8 98 df da d3 bd 79 65 ce 08 e2 d2 48 6d f4 a2 4d c6 c3 a8 c6 0a 10 67 d3 59 d5 ac 5e 50 fc 8b 2f 7e fc d6 db 6e 3e f7 e2 d7 9e 4a 26 08 6d 2a 30 81 d5 a9 a9 b5 c7 0e 6f cd 17 e6 cd ed fd 8b fe fe Data Ascii: NOEuu=wJ1PRnr{KeS&GY<FH@D)WC>&tXmM=?e'U]9\|ks6l[q5ihb-)T2SI!(g2s!N!R5yeHmMgY^P/~n>J&m*0o
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: b7 1e 3e f3 d0 23 7b 00 e5 ff cf 45 92 2a 04 aa c7 f1 97 1f d8 73 76 3c 6c ea 0a 0a 39 1b 92 d5 f6 9e a0 a5 b5 68 14 4a 30 d3 2a 01 97 ec 52 b3 54 99 59 10 51 2f aa c4 5e 99 48 c8 21 49 d4 58 13 57 d3 c9 b1 31 10 76 ef 3e f8 fd ef 3f 7e fa 4c bf 09 82 8d 1b d6 47 b9 30 49 e0 3c 71 16 5a 21 3b 3a 99 1c 3b 5e ca 09 52 b0 ef dd 7c 45 ac b7 f5 9f f3 47 4f 3d f5 d4 73 e1 bc b9 5d db 36 8b d7 58 e9 70 12 2b 60 84 6a 75 49 b3 44 63 02 94 01 8a 94 9b 9b 6d 6b 73 ae 85 73 06 59 2e 0c 01 06 6a 1a 74 34 a4 ac 59 e1 31 13 42 a1 1c d9 e6 8e 05 fb 4e 15 fe e1 9f 5f 45 56 18 49 0a 7a dd 3f a5 ff 16 7e f6 f1 75 ba 80 cb 90 3d 70 f8 d4 3f fd d3 4e cb dc 64 a6 4c 75 c2 26 26 97 6f 66 c3 06 42 2a 80 f0 74 ad 57 86 59 aa cc 30 10 b1 61 1b 10 31 84 18 8c 1c 7c 3a 35 35 6f 6e Data Ascii: >#{Esv<l9hJ0RTYQ/^H!IXW1v>?~LG0I<qZ!;:;^R\|EGO=s]6Xp+`juIDcmkssY.jt4Y1BN_EVIz?~u=p?NdLu&&ofB*tWY0a1\|:55on
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 04 65 42 be 54 4b bc 4a 23 95 3f a3 4b 96 e6 a5 58 18 04 bf d9 db 7d fd 86 f9 dd 1f 78 5b db 96 cb 6d 14 09 33 5c bd 38 35 d2 75 f9 b3 4b 96 3e d9 fa c0 d8 03 3b c6 45 a7 05 f9 f0 fa 51 4f 53 71 61 af 6f 0e 53 1a e7 60 38 84 ba ac 0e 4d 49 7f 9a d2 b3 98 59 a0 24 51 ad 78 11 b5 a9 9c 1b c9 35 55 a3 9a 13 28 31 23 2a c0 24 a9 f8 d4 18 b2 79 aa 89 3d 36 6c c9 68 4d cd 44 cd 43 a0 ca 1b 36 b4 dc 74 05 c1 d7 84 d8 88 92 06 42 41 66 ef b3 48 ca 65 5e 9a ef 38 2a 1f f3 c5 23 d5 fa ce 4a 25 2b 79 57 64 c1 f3 74 79 6b cb 5d 4b 7a 36 2c 6a e9 5e 54 6c 6a 47 a1 05 4b b6 5c d6 3c f6 ca e6 91 ca 0f f6 b5 0e ed 29 03 0a ef 54 14 4a 8d 14 4d 9f ba f2 40 3e 24 82 55 75 d3 c5 f4 59 d5 0c 85 86 ee ed 6a bb ba ab d8 f2 fe f7 b5 df 7c 1b 62 ef a5 0e 15 18 cb 9d 1d 51 c7 92 Data Ascii: eBTKJ#?KX}x[m3\85uK>;EQOSqaoS`8MIY$Qx5U(1#$y=6lhMDC6tBAfHe^8#J%+yWdtyk]Kz6,j^TljGK\<)TJM@>$UuYj\|bQ
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 59 38 13 94 c8 b4 af 89 00 aa 27 6e 61 58 b8 7b cd e2 2b 16 f7 b6 e6 f2 d5 14 87 87 46 1e 3f 7a 6a d7 c8 90 cb 29 13 33 b1 12 25 ea 7d 5d 39 4b 50 67 c7 b6 2a 11 c7 1e 50 0f 10 41 02 cf 64 6b 6c 59 7c c4 8e cb e2 26 b2 f4 16 ef 77 ef 39 5c 68 6a 57 f5 4c a8 d7 eb d6 9a 37 de 72 cb 9c de de dd 3b 0e a9 4b 48 58 9c 99 ae 29 51 15 01 83 a1 a2 a2 2a 56 9c 86 41 9c e2 8d 37 ac bb ef 6d 37 fe fd b7 9e 54 35 d6 a2 e9 e8 b9 2f 7e e8 b7 b6 fe c2 7b 6e df b0 be 76 ee 42 d1 db a0 35 af 85 b6 6f ff f1 57 fa cf 1f bf fa f3 f7 b5 df b1 60 b4 34 9a 86 69 77 57 df de 3d 7b bf fc a7 5f 69 eb eb 0a ac 49 bc 17 60 d9 e2 79 1f 79 e7 ea 22 25 69 dd 82 2b 5e 4a c4 ac cc d2 08 71 fe b4 e8 d9 2c 55 66 06 5e d7 22 9a 2e 71 52 cd aa 37 e2 44 b6 16 9a 3f 77 dd aa 55 cb 56 14 ba 17 Data Ascii: Y8'naX{+F?zj)3%}]9KPgPAdklY\|&w9\hjWL7r;KHX)QVA7m7T5/~{nvB5oW`4iwW={_iI`yy"%i+^Jq,Uf^".qR7D?wUV
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: c2 2e 28 85 f6 b1 6a 7d 6f 35 cd 1b 3f 3f b5 e7 f7 97 b9 37 8f 79 61 3d a9 2f 2a cc fd e5 cf bc f3 c6 cb 16 af 9c 2f 4d 3c 50 4d 62 35 cd 5a 2f 79 5f 62 1e 0f 0b bd b6 6b a9 6d cf 71 fe 89 40 7d 96 92 89 ac e8 80 66 c5 8d 66 2e 32 e3 5e 89 20 a2 73 8d b6 51 42 17 f7 9e 8e 9b 0f 9e 96 3b df b0 fa a9 57 4f fe de ef 9d fc 9d df a6 2d d7 5c 69 50 a0 d0 46 64 a2 94 2a ed bc 77 83 75 c2 d5 7d 13 e1 b2 a6 17 7b 0b bb f7 4b df be 70 71 e8 7b 53 0d a6 92 fa 54 b9 54 a2 29 47 62 72 55 8a f7 96 2b fd 2a 0c 23 f0 69 9a d6 eb 88 0a f3 05 75 63 0d b1 67 f8 ee ae ae a8 50 68 6d dd ef bd 63 66 eb 84 a5 11 4a b7 41 a8 cc 22 0a 10 ab 56 fb b7 27 12 e7 b8 39 cc 87 62 e2 ba af 09 85 86 4d e2 7c ef 9c d2 bb 3f bd 71 40 fa dd 63 17 02 c9 75 23 bc b2 98 ef 36 3a 18 63 94 c3 c3 Data Ascii: .(j}o5??7ya=//M<PMb5Z/y_bkmq@}ff.2^ sQB;WO-\iPFdwu}{Kpq{STT)GbrU+*#iucgPhmcfJA"V'9bM\|?q@cu#6:c
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 5a f3 b6 85 7f f2 a7 bf c9 6c fe fe 81 6f 56 24 ae 00 10 ac 5d b9 fc f3 bf f7 89 77 be eb 8e 52 ff c0 be a7 9e 9c df 39 d1 5b 4c 3d 69 22 ea 24 02 c3 44 e4 0c c4 16 84 72 64 13 f6 69 42 46 11 06 00 7b 52 23 0a 99 6d 45 34 83 41 80 a2 30 50 bb b2 a9 5d c6 2e ce 99 d3 fe ea b9 f2 f3 7b 46 de 72 75 eb 65 2b cc 37 f6 95 76 8d d2 e1 32 1f 56 3f 44 ec ba 9a 38 e7 65 34 d6 9a 9b f4 f2 d2 93 db 6b 03 f5 30 17 72 21 4a d8 a4 a1 70 1a d9 49 8d 2a 6e 6d d0 be 64 d8 3c 7a f6 d8 d4 d5 dd dc 16 90 78 61 22 f6 1c b1 02 b9 5c f8 d6 b7 bc b5 af 6f 91 8b 13 2f 52 af c7 f9 28 bc 6c fd 86 96 d6 b6 28 5f 30 d6 c0 32 1a f4 00 41 21 62 b2 56 12 a2 e2 b3 16 dd de 68 de 16 db a8 6b 55 cc 4d 47 07 ca 3f 7a e2 e0 23 8f ec de 72 74 f2 fd 1f 5d eb de 5c eb ea e9 fa ab bf fc cf 2b 96 Data Ascii: ZloV$]wR9[L=i"$DrdiBF{R#mE4A0P].{Frue+7v2V?D8e4k0r!JpI*nmd<zxa"\o/R(l(_02A!bVhkUMG?z#rt]\+
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 7c 5f 5b 4a 1e 0d 8d 3a f2 5e ff ea af bf f4 ad 6f 3e 98 3a 21 43 49 5a 2f 44 b9 4f fe d2 47 ae bc 7a 8b 17 27 59 a9 8a 57 64 de 62 02 bc 67 11 26 28 91 84 94 33 88 3d 31 08 24 22 6a 08 6f 6a 6f 5b 91 93 b2 f3 d6 84 08 73 23 47 4e b8 c3 a7 b1 f1 86 9b 6f b9 76 5e 6f cf 9d 77 dc b4 78 c9 42 40 4e 0f 0c 1f 3c 72 e2 9a b0 28 e4 73 5e af 6b b2 df 9c b0 c3 a9 07 20 e4 8c 92 80 52 95 87 5f 18 3c 7d 2a fd b5 77 77 ff dc aa d4 19 43 04 02 67 b9 c5 af 89 28 61 96 2a 33 05 af c7 20 33 09 79 15 ca d6 4e 28 b1 b7 20 eb dc f1 f2 f8 c1 b1 ae 39 5d 0b e6 a6 9b aa c9 0d 53 e1 ba 29 b4 a5 71 8e 95 0b 36 5d d4 e5 16 f7 a0 ab d5 38 ef 4f 5e ac 3c 77 b6 56 ae e7 97 2f ee f8 e0 fd d8 f3 ea f8 89 e3 c1 9a f5 f9 d6 dc 15 a5 e0 89 f1 9a d6 03 44 92 89 a9 02 20 36 43 43 63 93 e3 Data Ascii: \|_[J:^o>:!CIZ/DOGz'YWdbg&(3=1$"jojo[s#GNov^owxB@N<r(s^k R_<}wwCg(a3 3yN( 9]S)q6]8O^<wV/D 6CCc
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: f8 52 5a 3e 70 e2 d8 43 7f 5b 7a 71 7b fd d0 51 3b e6 f2 c4 6a 7d 5c ad 98 de ce e5 83 03 73 ab da 3f 51 b5 ad 85 ec d6 5e fc ee 3d bb da da a2 24 16 6b 20 8a 5a cd 5d 71 c5 15 0b 17 2d ce e7 8b 0a 25 63 42 46 e6 9b 53 91 49 49 49 03 12 56 55 15 64 ca ab 02 22 c0 51 7a 75 a1 e5 37 3b 3b 96 4b b5 2c 12 0a 59 f2 04 7a c1 a5 9b a5 f9 da 8a e6 5a a6 7c 14 3c 7b 7e f8 68 bf 58 63 7c 98 23 4f 2d 0e 9d f3 72 53 ad 5d a3 73 26 dc d1 aa 8e 3a 6d 34 a0 7c fd e5 60 ba e3 57 43 a9 43 41 0d 99 c9 46 4b a3 59 aa cc 10 34 f2 45 48 38 a4 7c 65 b4 96 6c 9f 7a f7 f5 d7 7c e2 be eb e6 74 b8 82 5c 74 55 df ba ea da c9 8b 07 e7 cf 3d 2b c5 60 34 95 8e 72 6c fa 16 9a 5d 07 ea 3b 0e f6 be fd 9d ab de f1 2e a4 71 e5 c8 d1 93 7f fc 8f 93 4f bf ec 8e 9c 0c 2a d5 50 a5 25 08 28 c8 Data Ascii: RZ>pC[zq{Q;j}\s?Q^=$k Z]q-%cBFSIIIVUd"Qzu7;;K,YzZ\|<{~hXc\|#O-rS]s&:m4\|`WCCAFKY4EH8\|elz\|t\tU=+`4rl];.qO*P%(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50002	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	626	OUT	GET /-/media/images/lnrs/content/runaway-children-story_270x170%20jpg.jpg?h=170&iar=0&w=270&hash=3136CC6D5BF8B0C93796551094BA84B0 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	884	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11828 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="runaway-children-story_270x170 jpg.jpg" Content-Type: image/jpeg Etag: "pbSD7QnBRrH4oYRe9LVQziBMp08JDhmkC0ZAvCd7xaE" Fastly-Io-Info: ifsz=14104 idim=270x170 ifmt=jpeg ofsz=11828 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010213 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210157-DFW, cache-pdk-kfty2130026-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460567.665625,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 47 15 67 b3 a5 e0 de 7c bf 78 2a 93 55 b7 d1 dd db d2 2d 6c c7 10 fe cd fd 90 d1 bb 99 be 64 35 4c 3c cc ec 46 ff 00 ed 11 92 65 ca 9b a2 ba 75 57 73 5b df 7a c4 1a fd d6 de 69 6c 36 9b 70 cf 2f 3f f8 4e 87 1f 60 47 ff 00 8e 9c 3a f7 a0 99 dc 75 97 ba d3 b0 c4 af 99 07 f7 bc 41 5f 0c e7 fe 53 8f 48 6d c4 cb d0 b0 1e 9a de b2 51 6a 49 78 26 f2 73 fc 2e 63 8d 95 22 4c f9 d2 4b d4 55 ac 3c 8d e1 93 87 b0 8b 8a e2 dc ba 44 e5 d4 87 17 7e 86 84 98 8c 61 55 9b 17 28 2d bb d1 31 e0 fe ef 16 e4 e0 ff 00 fb 34 fd 6f 15 d3 f6 af b2 53 6d b4 da a3 5b e7 f2 d1 b2 cc 0c 8d 3f 86 d8 89 40 0f 26 1c a1 b7 3b c9 a6 e6 39 ae 0c 4b 95 d9 4a 54 a1 99 60 05 39 72 b8 87 4c e5 3b 54 c0 cb 56 a1 59 c1 bc 00 10 a2 66 2f 4b 75 3c eb fb f5 86 61 49 a5 61 d8 2c 2e 1f 01 27 b1 95 a4 Data Ascii: Gg\|x*U-ld5L<FeuWs[zil6p/?N`G:uA_SHmQjIx&s.c"LKU<D~aU(-14oSm[?@&;9KJT`9rL;TVYf/Ku<aIa,.'
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 19 d7 54 fc 53 2c b9 4c da 8d 2b 4b 53 91 f4 86 ec eb 3c c2 64 f9 62 e2 b1 d8 a4 96 bb 6f de 7e 81 47 33 0d bc 1d c4 bf db f8 19 f8 a9 12 1f 0f 28 62 4c a1 7a b1 00 56 a6 1a 6e da 12 18 45 9b 80 c3 e1 70 df e6 b6 a9 bd 41 a6 9f e2 04 29 79 ba 16 6a 8d 8b 92 06 d4 3c c2 98 41 81 c2 b3 33 4c 6e f1 17 14 b1 3d 7a 41 f2 65 eb 66 96 cc bf 15 af 73 c8 5a 15 a6 e8 6c 2b b0 ac 4a bc ce c8 05 f9 b9 7e de 10 e7 84 95 34 a4 d0 5d 48 37 4a ec 47 f0 3d 60 e5 cb d9 95 58 cf a7 2d b6 e5 4a f2 22 14 cb c0 26 aa 19 e4 1a 54 d3 bb 6e 66 97 ac 36 9a 6a ed 50 93 9c 5d 53 d9 1d aa 85 a6 a6 5e 54 6e bc af e1 15 d7 b4 09 f4 e1 dc da 58 4b 7e 19 27 95 4b 0a db 91 8b 35 30 2a bd e9 73 6a 74 fc 0d 53 a8 73 16 ad 47 88 8a cb da 40 79 5c 35 99 8e 44 a9 07 af 78 5c 1e 71 41 15 66 8c Data Ascii: TS,L+KS<dbo~G3(bLzVnEpA)yj<A3Ln=zAefsZl+J~4]H7JG=`X-J"&Tnf6jP]S^TnXK~'K50*sjtSsG@y\5Dx\qAf
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 48 10 e7 32 6a cb d3 30 b3 0b 5d c1 22 87 f3 57 90 eb 5f 58 3e 54 ca b5 34 ab a3 59 c7 50 c3 6f 1a f2 8d 4b c1 2b d8 c7 ca f5 45 a2 f2 fe ab 0c 58 8e e4 d6 d3 13 4e 21 c0 ff 00 65 e7 b9 b6 04 59 25 e2 1b 47 fa 5b bc 3f 58 85 62 2d 36 6f fa a2 75 4c e8 7e d4 fc 9a bb de 30 8a df f1 4a 3c 2c 56 be 95 bc 0e 6e 2b 0b a6 a5 90 77 aa 08 63 4f 1b 11 4b c3 24 89 39 83 a3 53 0b a2 9c 88 15 fb d2 a2 0c 9b 81 cf 52 4a 99 5a 53 c4 28 fb ef 14 b5 7b 91 af 92 75 c2 13 56 66 2b 31 2a ca 7f 05 48 20 da cd fc e2 72 bd c6 a9 bf c4 7c af 7b 78 c5 79 c1 18 6c 5f bd 66 cb 8c 6a 4c 6c 32 ae be 5f 11 a1 b1 36 89 ec 93 34 2b c9 99 28 37 72 e0 35 09 07 9a d7 7a 52 38 f5 ff 00 b8 fe 91 d5 a3 ec 5f 62 d6 ed 55 6a 34 b0 52 0a 12 48 a8 06 c4 53 9d 20 54 45 d4 97 20 ed d0 1e 8d 7b 6f Data Ascii: H2j0]"W_X>T4YPoK+EXN!eY%G[?Xb-6ouL~0J<,Vn+wcOK$9SRJZS({uVf+1*H r\|{xyl_fjLl2_64+(7r5zR8_bUj4RHS TE {o
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: e4 72 3e 04 53 eb 13 4f 28 a5 61 86 a9 ab 79 b5 c1 17 da 96 a1 bf 97 a8 81 28 61 dd 2c a4 06 34 06 c7 a9 17 ae f0 43 ea 75 60 d6 36 20 f2 60 76 60 46 d5 e7 f5 83 d1 94 ab 1e f5 45 03 83 4f 4a 8e b1 58 92 7b 8a 13 49 6d 42 e3 61 f9 80 fc ad d4 08 f0 75 3d ee e9 35 a5 08 a1 de 94 3e 10 10 ba 55 aa f4 25 85 0f 38 11 5d 3b b3 35 6d 5b 5f ce 1c 07 01 69 53 69 70 86 a2 e6 b6 17 17 81 b1 a6 ae ee ff 00 73 fc e0 4d a8 af 7b c2 fb 10 7d 36 26 39 a7 bb 5b f7 ac 7c c7 e9 18 c5 63 c6 4c c9 9d 48 75 5d 44 e1 80 70 7f d4 69 e5 bc 47 0b 76 8b 49 4c d5 1f 23 37 e9 5a 5a 1e 78 b8 bf f7 81 82 b5 c6 1c 0f bd 69 eb 11 d0 d3 99 58 76 af e3 b1 03 ec 6d 1d 11 f6 c7 e8 8b e7 ec 3a 4e 31 95 f4 69 40 fc a8 00 6f 10 6b b1 83 f0 58 fc 44 d9 b3 41 d9 4d 87 51 b1 dc 54 11 09 96 44 e7 Data Ascii: r>SO(ay(a,4Cu`6 `v`FEOJX{ImBau=5>U%8];5m[_iSipsM{}6&9[\|cLHu]DpiGvIL#7ZZxiXvm:N1i@okXDAMQTD
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: e4 b2 33 0e 30 c9 f0 ef a6 54 d7 9d 35 cf 65 45 00 0d 5d 09 3e 51 54 63 78 97 30 c7 e3 b2 71 25 bb 29 53 e7 cd 59 89 4b d1 3c 7d 21 91 26 2c be cb af bc 93 4f 20 7f 8c 27 cb cb 36 23 86 fa f6 b8 86 82 c2 95 0d f8 65 7f ee e7 1a b3 cd 66 0f 8c a5 cd 69 7f b4 32 71 70 51 88 ca 42 d8 2e 06 57 e9 0e cb 37 4f 0b f1 27 46 cc 69 f7 86 be 2f 2a 31 d8 30 39 60 e5 7e 91 39 7b 7f 08 65 c3 19 32 30 bf db 58 13 b7 c5 ff 00 69 8d 0d ec fa 6f 65 c3 9a 79 19 93 4f df 78 ce f9 22 2c ec f7 2e 94 75 00 5e 95 1b 8b 46 95 c2 4c c2 e4 d8 6c 2e 17 03 85 a8 d5 62 4d ea 7f 8c 08 fb 06 4c 8c 71 bf 6b fd dc c5 03 b5 ad ff 00 57 51 14 31 d2 12 f1 7a fb 51 9b 3b 0b 97 e5 92 83 d0 62 49 33 07 fa 79 79 18 a2 e6 a3 6a a2 af f0 81 b8 5b b2 7d ec ef 8a f2 9e 19 95 98 8c 4c a9 87 13 3c 83 Data Ascii: 30T5eE]>QTcx0q%)SYK<}!&,O '6#efi2qpQB.W7O'Fi/*109`~9{e20XioeyOx",.u^FLl.bMLqkWQ1zQ;bI3yyj[}L<
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: a5 69 5f eb d2 05 37 14 a8 bf b4 34 99 d3 45 b5 41 7a ab bc 0e ff 00 05 29 0e 4f 99 4e 65 d2 1a 82 13 19 f3 5f 76 68 24 19 4b f2 c0 5a 6a f2 58 1d cf 96 6a f0 2a 59 ba 16 90 4b cf e8 cc 21 21 98 d0 6c 89 0f 89 7d 29 be f7 81 dc de 11 a9 72 16 d3 18 ed 53 05 82 cf 06 21 f7 7c 45 26 ca a6 93 42 21 f3 1b 96 eb 92 b8 ec 1a d4 05 ab a0 e6 3a 8f 18 ca 2e 49 bf 1b a3 37 55 f3 c8 ca 06 9d d6 14 a1 a0 fe 64 41 f8 60 b3 12 ab 7a 72 83 82 01 f2 c3 c6 3f 20 6c be 56 74 91 a7 f1 e5 f9 d6 0f 13 70 fb 76 e8 c7 c1 80 a7 a3 44 3a 47 f8 99 5d 99 56 35 1b d0 fa 44 c2 4f 0f 65 ed 85 ef 35 27 50 11 a8 8a 7a 47 0e a3 d2 d2 cc e7 57 f9 1b 49 6a 6a df 6c 53 14 cc cc 70 88 a8 87 13 29 5c d8 0a 83 7a 53 97 58 b6 f8 1e 77 63 c2 52 10 fc b8 c6 07 c3 54 d1 51 f7 8a 1b 17 91 4e 94 9a Data Ascii: i_74EAz)ONe_vh$KZjXj*YK!!l})rS!\|E&B!:.I7UdA`zr? lVtpvD:G]V5DOe5'PzGWIjjlSp)\zSXwcRTQN
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 0b da ee 24 10 0f 3a 15 a8 f2 15 84 bf 1f 91 92 f3 47 04 8d 3b ad 2b ca df b5 60 f4 55 5b 0d c7 db e9 05 f6 73 b4 f7 5d 82 1b d1 a9 f6 e9 1d 18 79 c7 79 a8 47 2a 0a 9f af 38 29 bb 58 60 69 56 e8 3c 96 d3 de a1 4f 48 0d 14 68 d2 bf 6b 1f 1a 83 1e 54 ee ad 15 c7 88 ff 00 cc 0c 8a 5b b5 f4 3f ad e9 14 4c 98 9e 74 b7 98 8c bc b4 d2 db 8e 95 14 16 88 de 33 2b 5c 5c 9e cc 2d 26 1e 55 a5 18 7e 5a 9b d7 a6 f1 2c 35 2b 40 c1 81 f1 a6 de 23 9c 14 47 67 35 95 9b 4e ba 1a 8a 5f a8 20 d6 0a 4e 2e d0 6d 34 d3 2a 3c 47 0d e6 12 dd 8c 89 12 a6 8b 9d 1a 82 b0 f2 06 10 36 5f 8d 95 63 21 07 91 14 3e 75 a5 e2 ed 9c ac 7b a5 88 e8 3b 35 20 f4 3c e1 8b 15 87 46 6a 95 26 bb d0 53 d4 02 04 74 47 5e 5c c5 12 7a 31 79 4d d9 57 76 7a 5a ad 2b ea 6b 7e 82 16 ae 2a 88 aa d2 b5 20 e5 Data Ascii: $:G;+`U[s]yyG8)X`iV<OHhkT[?Lt3+\\-&U~Z,5+@#Gg5N_ N.m4<G6_c!>u{;5 <Fj&StG^\z1yMWvzZ+k~*
2024-04-18 17:16:06 UTC	796	IN	Data Raw: 43 9a b4 49 30 78 79 59 8e 01 55 d0 06 93 32 9a b9 90 45 6f 14 8e 94 75 65 87 56 14 d5 3b 79 4b 0b c9 f4 1f 5a e9 a0 9a fe bd d1 fb 47 03 56 c3 52 8a 7e 60 01 fa d6 d0 54 ef 8e 52 f2 b5 b9 41 b3 19 91 bb 84 af 7b 95 b9 47 cb a6 d9 e8 f6 a4 8f 06 aa d3 4a 35 3a 1d bd 49 11 d5 0f f1 2e 85 ee dc 5d 87 da 05 be ff 00 98 c1 12 89 79 ad a8 d7 6d ef ce 0d e6 80 92 c6 37 3a 66 b9 b8 60 a0 d8 8b d7 e9 c8 41 f2 92 73 ad 55 57 47 53 50 df 41 b8 87 45 55 41 45 00 0d 5c ad 09 f1 7d c9 b3 34 f7 7b c3 6b 72 86 50 c2 cb c8 9d fe 22 82 54 51 6e ca c3 73 62 07 d2 b5 ac 70 87 55 95 d9 db cc 31 fa 9b 18 38 80 0b d0 7c 90 98 59 66 d3 a4 3a 49 2d 85 df 27 a6 4a 47 b9 9f 32 d7 22 b4 23 fd 44 52 00 30 f2 43 7c f6 e4 c4 b7 a8 a1 da 0d 17 75 af 4f de 0a a9 12 66 50 fc 27 bb e1 71 Data Ascii: CI0xyYU2EoueV;yKZGVR~`TRA{GJ5:I.]ym7:f`AsUWGSPAEUAE\}4{krP"TQnsbpU18\|Yf:I-'JG2"#DR0C\|uOfP'q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50003	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	608	OUT	GET /-/media/images/corporate/battle-climate-change.png?h=170&iar=0&w=270&hash=87197225C830C3E4A9EFE2B9DFF28CA1 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	909	IN	HTTP/1.1 200 OK Connection: close Content-Length: 82985 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="battle-climate-change.png" Content-Type: image/png Etag: "AaX8CK1ZPsBbaV2VYMiZ2+j1OYXMO4tOUOjlqKTSxJU" Fastly-Io-Info: ifsz=84683 idim=270x170 ifmt=png ofsz=82985 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210021-DFW, cache-pdk-kfty2130093-PDK X-Cache: HIT, HIT X-Cache-Hits: 4, 0 X-Timer: S1713460567.669753,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 06 00 00 00 5c 4b a1 e9 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 01 43 db 49 44 41 54 78 da 84 fd 77 98 a5 c9 79 dd 09 fe 22 3e 7f 7d de f4 ae b2 7c 55 97 e9 ae f6 1e de 92 04 ad 68 04 82 14 25 ee 70 25 91 a2 28 8e cc 83 d9 dd 91 34 92 76 34 1c 0d 29 43 49 33 72 a4 c8 a5 07 48 80 00 d8 70 dd 8d f6 be ab ba bc af 4a 6f af 37 9f 8f d8 3f be 9b 59 59 0d 70 37 fb a9 e7 a9 ea cc 9b 79 f3 de 88 37 ce 7b de 73 4e 88 77 5e 78 61 45 1a e6 64 b9 58 ec b8 8e 83 93 73 31 0c 13 d3 34 51 06 a0 14 46 a2 88 50 80 81 50 8a 38 8e 40 6b c2 28 a1 de 6a 70 6b 71 95 af 5c ba cd 7f fb ce 2b a8 f3 97 c0 02 dc 02 68 83 7f f4 8b 7f 83 1f 7f ec 04 bf f8 1b ff 17 6f 3c fb 0a f6 f0 28 Data Ascii: PNGIHDR\KpHYs+CIDATxwy">}\|Uh%p%(4v4)CI3rHpJo7?YYp7y7{sNw^xaEdXs14QFPP8@k(jpkq\+ho<(
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 60 60 61 5a 36 9d 5e 40 14 a6 8c 0f 0f d1 ed b5 59 59 5b c5 30 2d 2c 69 70 6c ff 21 f6 ef 9d 23 8c 42 e6 d7 6a 24 69 4c c5 ab e0 e5 52 36 d6 57 98 18 ae b0 67 6a 06 c3 72 49 14 e8 34 45 27 f0 da c5 2b d8 8e c9 63 27 8f 11 f9 21 eb b5 1a dd 5e 9f bd 96 c5 be e9 69 fa 37 6f 10 39 16 d3 c3 23 74 3b 3e a7 6f 2f d3 0f 7d 7e f1 b3 3f c1 d7 5e 7e 85 eb cf be 05 71 c8 f0 e1 c3 cc 9d 38 c6 cc 48 99 d5 66 93 cd cd 06 9b ed 0e 95 52 8e 38 d5 88 d4 a0 92 2b 33 bf be c6 57 de 7a 87 f9 66 87 e3 d3 93 3c b4 77 06 43 c0 cc f8 18 b5 76 87 e3 b3 b3 bc 77 63 9e f5 4e 87 24 8d f8 f8 23 0f 23 43 0d ad 75 d2 7e 9f 95 b1 2a 0f 3d 78 1f 37 16 96 b8 b1 b2 cc ca c2 06 e4 73 88 bc a2 79 63 83 5f fd 0f 5f e5 73 4f 1c a4 58 f4 e8 44 09 61 bd 85 14 1a 6c 1b 1d 45 d0 dc e4 b1 8f ff 28 Data Ascii: ``aZ6^@YY[0-,ipl!#Bj$iLR6WgjrI4E'+c'!^i7o9#t;>o/}~?^~q8HfR8+3Wzf<wCvwcN$##Cu~*=x7syc__sOXDalE(
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 7d e0 7e 3e 70 e2 30 9f 3a 75 82 87 f7 4d 73 74 cf 14 cb b5 06 df 3e 7b 91 24 55 0c 57 87 48 55 4a 29 ef f1 e8 3d 87 f8 f4 43 f7 33 35 54 e1 c6 ea 16 cf 9f bb c2 9b d7 af 53 f6 1c a6 87 aa e4 3c 93 f1 4a 85 fd 63 a3 4c 8c 0c 93 b3 6d 2c 4b e0 58 26 1b ed 1e 5f 7c f9 75 de ba 78 9d 9e d6 b4 fa 1d 2c 29 b0 90 08 21 39 30 3e ce ec c4 28 a6 61 e0 fb 31 b7 b7 6a 5c be 75 93 5c de a5 5a 2e b1 d9 e8 70 e1 d6 02 4a 2b 2c d3 c6 f7 43 d6 5a 1d 56 9a 75 26 ab 43 4c 0f 55 f0 3c 1b c3 14 38 96 c5 fc da 3a a7 6f de 60 6e 62 86 99 d1 31 aa 93 a3 14 cb 15 94 52 34 1a 0d d6 57 96 c9 59 82 03 fb f6 33 36 32 ca d0 70 95 ea f0 30 68 83 38 4e b1 5c 17 cf 73 31 25 b8 96 c9 d8 d0 30 45 db a1 52 2e e2 b8 0e 86 06 21 04 fd 28 e1 ea fc 3c 29 02 ad 35 b5 46 83 46 3f e4 b9 f3 e7 39 Data Ascii: }~>p0:uMst>{$UWHUJ)=C35TS<JcLm,KX&_\|ux,)!90>(a1j\u\Z.pJ+,CZVu&CLU<8:o`nb1R4WY362p0h8N\s1%0ER.!(<)5FF?9
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 85 91 ca 30 9e eb d0 e9 f7 89 c2 90 9c e7 d0 ed b4 40 80 65 59 e4 73 39 40 13 a5 70 65 75 03 53 2a c6 cb 65 5c d7 65 7f de 61 b6 5a 02 01 7e e8 67 15 57 08 fa 61 44 9a 2a fc c0 27 4c 62 a4 94 a4 89 22 42 53 b0 6d 3c cb 25 41 e1 39 0e 62 80 00 5c 7b 9c 66 bb 85 56 50 2a 14 b0 0c 41 14 24 b4 fb 21 dd 24 21 ac d5 b1 10 54 8b 45 72 79 07 69 b8 bc 7d 7b 99 ae 1f f0 cf 3e f7 d3 8c 16 5c 4c 21 28 4b c8 17 f2 74 7b 3e e8 98 91 a1 11 66 c7 26 50 a4 44 86 c4 0f 62 d6 57 57 e9 f6 63 d6 3a 3e cf 9e bb 48 10 47 fc fd 9f fb 49 be ef be a3 e8 34 61 be de a4 8a 20 8a d6 09 a2 18 69 58 48 a5 79 e3 e6 02 5f 7d f9 5d d2 66 06 75 85 65 b3 77 6c 98 a7 8f ee 67 ae 32 c4 f5 95 35 c6 2a 45 8e 4c 4f 72 6d 75 85 ab 0b 2b 38 86 e4 e8 dc 3e a4 84 a2 67 13 44 29 f7 4c 4c 32 51 2d 51 Data Ascii: 0@eYs9@peuSe\eaZ~gWaD'Lb"BSm<%A9b\{fVPA$!$!TEryi}{>\L!(Kt{>f&PDbWWc:>HGI4a iXHy_}]fuewlg25ELOrmu+8>gD)LL2Q-Q
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 97 97 df 3d 4f 92 2f 70 f2 91 21 3e f2 f0 fd 2c 6d d5 81 90 87 0f 1f 60 c4 75 30 4d 03 84 81 52 1a a5 52 20 01 34 a9 86 30 4a 19 2e 16 a9 16 72 e4 5c 97 38 4d f0 c3 80 bc e7 62 98 16 a6 a9 29 0a 8f df 7f f3 34 bf fb ca 0b fc e2 27 3e c1 9e ea 10 85 9c 47 2e 97 27 e7 79 c4 69 42 b1 58 44 eb ec fb 6b 95 d0 8f 02 22 15 33 56 2e 13 a7 29 9d 30 c0 44 20 85 24 4e 53 e2 38 26 4d 53 6c cb c2 32 0c 88 53 1c d3 41 29 81 6b 67 23 2d 54 8a 01 08 cb 42 0a 49 e0 07 04 41 40 d7 ef e3 b9 0e 86 34 e9 fb 01 fd 28 42 5b 26 4b eb 35 36 9b 6d 94 94 ec 1b af 72 62 6e 0f 41 92 f2 ca c5 f3 f4 fb 29 4e ce 61 6a b4 8c 61 4a 9a 7e 8c 56 8a f5 46 93 7a 27 a6 d5 ed 30 3a 54 60 df 70 95 bc 61 93 c6 8a 72 c1 65 b9 d3 e6 f5 8b d7 38 7d ed 26 5b bd 2e 4f 1c d8 c7 07 8f 1d 24 4a 52 6c 29 Data Ascii: =O/p!>,m`u0MRR 40J.r\8Mb)4'>G.'yiBXDk"3V.)0D $NS8&MSl2SA)kg#-TBIA@4(B[&K56mrbnA)NajaJ~VFz'0:T`pare8}&[.O$JRl)
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: dc e6 38 b6 39 4b b4 ce c8 51 c4 f7 ae 1b bb 0b 83 99 11 ab ef ff 32 21 c5 60 24 bb f3 99 c8 18 3e 76 df e7 ff f4 bd 4b ce fa 66 93 f1 42 8e 7f fe d9 1f e6 d3 8f 9e c2 cd 95 48 45 06 4f d3 38 61 75 65 93 fa e6 3a 79 c3 a0 e4 15 70 4c c9 93 fb 66 f8 c9 27 4e 31 56 1d 22 56 12 47 4a 0a 8e 85 e3 98 d8 76 f6 4b 25 2a 25 55 83 89 b0 94 98 b6 8d 6d d9 98 d2 40 1a 92 54 2b 7a 61 44 ad dd 63 79 ab 86 21 0d e6 c6 46 98 9b 1c c5 31 4d 86 72 1e 4f 1d 3f 4c a5 90 c3 30 0d 74 9a 31 c3 a9 4e 49 d3 84 30 4e 08 82 88 ae ef d3 ea f4 a9 b5 3b cc b7 9a f4 c3 98 92 e7 e1 59 06 79 cb a2 50 f0 b0 2c 1b 14 ac 35 1a 9c 9b 5f 65 a1 de 64 a5 d5 c2 f7 43 5c d3 26 41 13 25 09 51 1a 61 59 26 e5 7c 81 bc eb a2 b5 42 a1 48 a2 98 76 b7 0f d2 a4 1f 46 8c 96 cb 94 f3 36 a6 63 90 a6 82 e9 Data Ascii: 89KQ2!`$>vKfBHEO8aue:ypLf'N1V"VGJvK%*%Um@T+zaDcy!F1MrO?L0t1NI0N;YyP,5_edC\&A%QaY&\|BHvF6c
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 45 65 6a 9c a2 5b 80 24 86 5c 0e dd 69 f1 e7 7f fe 75 5e 38 bb 8f 0f 3d 78 8a 48 2b 1a 67 ce 43 0a 49 75 3f ff f8 4b ef f2 2b 1f be 87 cf 3d 76 94 5f f8 cd 3f 86 30 81 66 8b 6e a4 e8 a5 8a 07 f6 4c 12 76 a1 17 c6 54 72 16 82 88 03 23 65 0a 07 e7 b8 fa f6 69 b4 53 1c 8c 59 75 76 40 e7 8b 94 2a 15 fa cd 36 ff ff 3e 84 10 83 09 e3 1d d2 54 bc af 3d d9 1e e1 6e 7f 18 33 0f 3d f6 f9 53 b3 53 ce ff f9 3f 7c 96 fb f6 cd 12 6b 45 aa 41 28 05 42 10 85 01 dd 66 83 b7 6f 2f f0 de d2 2a 12 98 ca 15 78 fa f0 7e f6 4d 8d 61 5a 36 96 69 61 99 26 3d df 27 4d 52 4a a5 12 ae e3 60 18 12 d3 32 b1 2c 0b d3 32 33 ce 03 d0 5a ed 54 32 44 56 14 52 a5 e8 45 31 71 9c 50 f4 72 4c 8f 8d 63 e7 1c 20 c5 10 03 28 1a 04 98 42 20 a5 81 4a 35 3d 3f 60 a3 dd 26 49 92 ec e7 99 16 96 6d 93 Data Ascii: Eej[$\iu^8=xH+gCIu?K+=v_?0fnLvTr#eiSYuv@6>T=n3=SS?\|kEA(Bfo/x~MaZ6ia&='MRJ`2,23ZT2DVRE1qPrLc (B J5=?`&Im
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: cb 4b 4b 7c f2 83 4f f0 da 37 9f 65 73 71 0d 26 a7 59 6a b4 68 f9 21 67 be f2 0d 3e fe 43 9f 40 09 c9 d5 e5 05 6c c7 c1 73 5d 1e d9 37 c9 b0 67 f0 fc 73 2f a2 c3 08 6d db e4 a7 26 f8 e4 93 8f 72 ef 74 a6 16 7d ea f8 3d d8 c2 64 a5 b3 c1 4f 1f 19 a3 10 f5 f8 fa 5b ef f0 57 3f fa 08 ff f2 f7 be 0e 69 ca f0 d4 1c 71 9a 10 a6 11 a1 1f 31 bf b1 c1 78 b1 c4 e3 f7 1d e7 76 bd 81 59 af 41 b1 04 4a a1 00 6d 4a 44 0c bd 76 8b 5e da d8 a5 c3 88 d1 18 99 30 4c cb ef 42 18 db 0d 8c 94 02 a5 34 77 cd 75 d1 77 d7 1a c0 2c ba 16 27 26 c6 48 0d 1b 5c 13 5b 98 28 a5 49 75 42 ce 75 d8 88 14 67 6f 2f 51 36 4d 7e f2 c9 87 39 38 31 4a 22 74 b6 28 07 6d 47 14 07 d4 ea 0d 84 10 e4 f3 85 cc e7 22 c0 30 24 28 b1 f3 75 5a 93 3d 29 4d 46 42 02 4a 65 08 c2 cb e5 18 d7 12 d7 b1 b0 6d Data Ascii: KK\|O7esq&Yjh!g>C@ls]7gs/m&rt}=dO[W?iq1xvYAJmJDv^0LB4wuw,'&H\[(IuBugo/Q6M~981J"t(mG"0$(uZ=)MFBJem
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: af bd fe 1e c1 e6 26 c4 31 f5 cd 1a 4b cd 0e cd 4e 87 a2 e7 f1 c8 89 e3 ac 85 09 d6 70 85 a5 cb 97 b8 7d e9 3a 91 52 5c bb 78 81 ba 52 ec dd 37 c7 be 89 71 6e 5f bf 41 77 7e 1e 73 64 84 db 6b 1b 5c da aa b3 d0 ec f1 d6 f3 2f 12 cc cf 23 47 47 a9 96 73 74 12 45 d4 8f a9 ad 2c 71 ea e8 7e 94 d2 fc ee 73 2f f3 ce cd db 8c 54 cb b8 c5 02 ff e2 8f bf c6 6f fc e1 b7 78 f7 c2 22 eb 1d 9f 2b 97 17 e8 4b 03 2a c3 34 23 9f 4f df 7f 92 53 73 7b 28 e5 5d 0a a6 4d ab 1b 62 1b 50 a8 94 f8 f6 eb ef b0 79 f3 36 b8 4e b6 7c d2 6c 7d 18 db a8 54 6b 90 29 1f 3d 71 98 87 a6 ab f8 ed 2e 8d 66 1b 5c 77 70 4a ed 5a 5f fa bb a9 53 2d 80 20 e0 fe 7b 4f 30 3d 3b cd ea ea 3a a0 23 73 ef f8 24 8e 65 11 2a 8d a1 44 a6 b7 10 09 0b f3 2b 5c bc 76 83 ca 50 89 0f 3d 78 82 b1 ca 10 86 6d Data Ascii: &1KNp}:R\xR7qn_Aw~sdk\/#GGstE,q~s/Tox"+K4#OSs{(]MbPy6N\|l}Tk)=q.f\wpJZ_S- {O0=;:#s$eD+\vP=xm
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 0f 3e cc f2 bb 6f 13 d7 37 51 69 82 63 7b f4 1a 75 66 8e 1c 20 50 8a 97 be fc 0c c4 29 bf d9 fb 73 bc a1 11 7e f0 e9 87 11 4a 73 fe dd d3 48 c7 1d bc 3e 8a fe 46 8d 21 d7 65 dc 73 61 7e 01 65 09 84 e3 d2 8d 62 6c d7 84 cd 0e bd f5 16 0f 3c f6 10 0f 1c 3a c0 d7 3c 87 57 ff e2 eb 60 58 88 28 24 5c dd 40 98 12 8a 79 ce 5f bd c9 d2 f2 0a 1f 3f 79 94 3f 1a ad 40 3c c4 f5 f9 4d fe fc f5 37 c8 e7 1d 6c 7b 92 37 ce 5c 20 f1 fb 08 12 84 67 a1 fa 21 b9 e9 49 1e 7f f4 61 ee db b3 07 69 08 0e 4e 8c 32 3d 54 a6 5c ca d1 ec 07 7c fd dd f3 9c dc 7f 80 d0 f7 f9 d3 6f 3c 4f a1 54 cc a6 36 83 83 c6 f6 3c 10 10 76 5b 99 73 36 67 d3 4e 35 ef 5e ba c6 c1 07 0e d3 ea 74 20 ef 0d ce 6e bd e3 a0 15 e2 0e 9d 70 57 9b a2 40 e7 5c 5e 7e f9 4d 5e 7d fd 0c b3 47 0f e2 da 2e e6 68 21 Data Ascii: >o7Qic{uf P)s~JsH>F!esa~ebl<:<W`X($\@y_?y?@<M7l{7\ g!IaiN2=T\\|o<OT6<v[s6gN5^t npW@\^~M^}G.h!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50004	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	622	OUT	GET /-/media/images/corporate/road%20to%20zero%20thumbnail2%20jpg.jpg?h=170&iar=0&w=270&hash=A15673A378D6B17FDDC8AFD66C93A728 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:06 UTC	875	IN	HTTP/1.1 200 OK Connection: close Content-Length: 19220 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="road to zero thumbnail2 jpg.jpg" Content-Type: image/jpeg Etag: "xGrjkphLKvv26YShOJAhlUov+30cTMmBhxkxFIralfI" Fastly-Io-Info: ifsz=32873 idim=270x170 ifmt=jpeg ofsz=19220 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:06 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210118-DFW, cache-pdk-kfty2130023-PDK X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1713460567.685265,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 5f 89 dc e1 2e 38 b5 ea 66 f0 c6 bd 4f f4 1e 64 e1 af 21 a8 cb 29 e1 af 9a 48 94 3f 32 25 8d 64 f1 d9 58 31 6b 5c 58 f4 1b f5 18 5a e0 6a 8c a8 62 37 19 23 9f b5 16 2c 06 c9 50 76 e4 6a 11 3b 8f c5 89 56 7f e2 c0 ef 7a ff 00 ba 5c 73 ef 3f ba b8 67 4f a5 53 57 ad 14 13 e3 b0 9b f7 bf 96 05 89 db f0 ae 25 49 18 b6 fa 46 23 48 a9 d4 68 90 96 df 8b f2 c7 ce ec df 8c 7c 86 3a c2 35 35 b5 db 04 16 0e c5 b0 22 40 34 45 52 45 0b e5 31 6d b5 fe 98 94 44 dd db f9 60 a7 bb 2f 52 c7 11 bc 31 0f bd 8f 07 cf 5a 9d 18 e9 46 32 16 a4 a7 49 de b2 96 9d a9 f9 8a b2 cf 24 4e ef 1a ba 30 f0 14 91 34 9d b6 f3 3d c6 2d c7 44 b9 7d 12 ba f1 44 93 65 01 d2 58 e0 58 83 37 39 bc 45 26 85 98 a0 02 c6 fb 93 d3 cf 0b 66 95 5a 9f 9b 1a c6 5d 65 5b 49 cc b3 8d be ca a5 f7 07 b9 b6 dd Data Ascii: _.8fOd!)H?2%dX1k\XZjb7#,Pvj;Vz\s?gOSW%IF#Hh\|:55"@4ERE1mD`/R1ZF2I$N04=-D}DeXX79E&fZ]e[I
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: b1 b0 2b 6d b0 bf 14 fc 9e 6d 13 d5 37 b9 a7 32 51 11 d4 16 57 8d 99 50 1d 20 10 48 3e 98 d9 b4 91 85 9c e2 45 01 dd 13 61 d1 83 0d fe 55 93 3a 2b ce 85 32 42 31 c6 79 e0 8a 32 f3 fb 8c 2d 14 39 3d 22 49 51 06 94 92 39 84 81 79 6e ae 0a 00 ce 2e 74 d8 de dd 70 db c2 5c 3b 51 c4 55 73 d7 d4 e5 d1 d4 50 a5 e2 90 99 7d db eb e4 21 92 c5 01 d8 0b f6 b5 b6 c6 7c 83 25 a8 6a c9 c7 36 87 5d 30 29 4c b1 f3 50 1d 56 d2 ae ef a8 83 6b df b7 4c 15 a0 15 cb 0f 3a 05 79 4a c9 cb 78 a3 59 0d c1 04 16 62 bd 07 ce f8 03 03 a5 c2 1d 2c 7f 16 0e d9 a3 c6 76 df 90 e9 5a 54 3e cf 65 83 8a b3 f6 a9 c8 a2 fa 1e 91 8a 88 a4 9c 9b f3 45 90 46 ea 18 92 0a 9b f9 63 3f e3 fc 81 f2 1e 20 aa 87 dc 63 a6 a7 98 2c 94 e9 0c 9a e3 2b a4 02 54 ed df e1 6c 59 92 74 f7 5b 2d 1d 42 18 62 60 Data Ascii: +mm72QWP H>EaU:+2B1y2-9="IQ9yn.tp\;QUsP}!\|%j6]0)LPVkL:yJxYb,vZT>eEFc? c,+TlYt[-Bb`
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: d7 62 aa 57 71 6e b7 db 04 a4 97 36 c8 29 33 6a 3a d8 21 81 2b 96 19 3e ae 15 76 68 dd bb 1e 60 b0 5b 6d dc 9e b8 53 80 52 c3 32 e9 97 9b 0a aa 81 e1 08 ee 08 3b 8b db 63 f2 db 16 b3 2c d3 2d 99 65 11 65 cd 48 fc b8 84 71 f8 59 6c 19 98 ea 2c 4d fa db e5 be f8 dd 8c 11 9d 85 20 fb 91 4b b9 8b 54 43 4f 5d 49 ef d2 ae 8a f1 fb 37 28 9d 4e a0 90 c1 c0 20 10 0f 4d 58 12 19 5d 98 bb 39 7d 07 47 42 4b 96 bf 8a e4 75 b9 f3 df 13 d5 2d 54 ae d2 26 86 89 a4 e6 49 12 90 aa 2e 6e 40 16 00 79 6d db 1f 52 fb dc 50 d5 34 5a a1 d6 86 39 0f 35 55 0c 4e c1 4a b0 36 d8 93 fd 70 fa fd dc 67 98 cd 26 41 46 e5 8c 9f 6a 39 4d 98 d2 65 b4 8d 4c 72 98 27 aa 59 03 19 2a a2 2c dc a5 36 2a 42 91 a6 e4 6e 09 38 fa 39 ea 1d e7 99 75 a4 41 8b 68 56 2b 12 96 63 60 c0 91 b0 f9 f4 c0 da Data Ascii: bWqn6)3j:!+>vh`[mSR2;c,-eeHqYl,M KTCO]I7(N MX]9}GBKu-T&I.n@ymRP4Z95UNJ6pg&AFj9MeLr'Y,6Bn89uAhV+c`
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 27 a3 a7 49 26 94 c8 62 2a 04 60 b7 86 c5 6e 6c b6 ed bd 8e 18 b8 9b 84 a9 28 12 45 92 78 4f 87 9a 07 a9 26 d6 1e 62 f8 f9 cd df ed 00 82 63 a2 dc 3c 4b 20 46 65 04 80 c7 96 e7 bd 75 b1 58 c4 3c 38 a4 9c ac ce 99 55 3f da bc db 37 1b d5 b2 fe d9 97 41 2b b5 c3 ee c9 73 6d 98 8d c1 dc 5e df 2c 03 6e 2f 57 d4 2a e9 54 86 9a 49 49 8f c2 c0 14 2b d7 bb d8 f5 f2 c7 dc 4f 4f 51 0d 77 26 05 2f 62 42 6c 2c 0f 7d cd ac 77 c0 45 c9 9e a3 2e 82 a0 d6 53 46 ed 33 d3 9a 62 0f 34 10 a1 b5 30 00 00 a6 f6 bd f1 d5 5b 4f 03 c3 14 cd 85 d4 07 2e 83 1d 85 64 ce 93 24 92 46 a4 9d 24 f3 df af ad 47 36 70 cb f5 79 7c 14 d4 b1 2a 44 6c b0 a6 a2 c1 6c 75 3b 02 58 1f 5c 7c 73 56 83 dd 63 ac a5 a2 a9 45 e5 93 aa 9e 2d 44 5a e6 e5 6c 48 1d 3a e1 7b 31 a7 ae a3 6d 2d 06 94 f0 8b 8b Data Ascii: 'I&b`nl(ExO&bc<K FeuX<8U?7A+sm^,n/WTII+OOQw&/bBl,}wE.SF3b40[O.d$F$G6py\|*Dllu;X\\|sVcE-DZlH:{1m-
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 89 09 93 ea a3 a7 2c a9 26 9d 2c 54 33 29 01 bc b6 b5 f0 97 c7 12 d5 7d 3b 55 4c 2b 16 58 a0 8e 09 23 41 10 8d 50 bc 60 9d 2a 09 dc db ae 09 2c 51 fd 88 b3 2e 49 20 06 c9 fc a8 d6 b7 13 fd bd d0 cb e4 5d c2 69 1c b1 de b4 0e 19 cf e5 9b 95 4e ab e3 3d ba 74 de ff 00 01 8d 36 1e 27 a8 a5 49 60 15 4e a1 7a 85 26 d8 f2 fd 06 7c f9 44 b3 93 2b b5 43 02 0c 64 90 43 7e 2b 82 6e 06 0e c3 c6 15 53 4b 02 1a a7 82 67 65 00 4c 42 83 a8 80 18 b3 00 00 f8 ed 8e 0e ef 80 f8 97 26 58 95 77 cf 70 7d 71 ef 5d 9a 71 18 5a 25 4b 88 c3 11 dc 66 b4 3c ff 00 8a a1 68 65 09 2d 9f d7 be 31 ff 00 f4 87 31 cb aa e2 cc 69 60 99 25 59 c8 8a 78 cb 8f 1e 9f b2 a5 6d 62 41 c1 0a aa 8a aa 5c d6 29 67 82 9f 31 90 cc c4 53 c6 cb 55 1b a2 5d 08 94 42 4b 28 27 75 dc 5f 09 d9 be 68 8d 57 3c Data Ascii: ,&,T3)};UL+X#AP`*,Q.I ]iN=t6'I`Nz&\|D+CdC~+nSKgeLB&Xwp}q]qZ%Kf<he-11i`%YxmbA\)g1SU]BK('u_hW<
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 25 40 c6 c5 fc 41 4b 31 b6 e5 89 1f cb 0e e3 d8 77 17 53 c4 a0 d0 c2 08 17 d7 cc 62 ac 2d e7 a6 db 63 a0 85 a4 93 f7 81 0a e4 0d 24 93 9e b5 9c e9 1c 4b a0 be ac 73 e5 e9 49 51 71 85 74 8e ab 58 d2 f2 0c 0b 13 a4 35 2e a0 d8 69 37 0a e2 e0 df 7c 56 cb ea 72 d1 96 66 6b 35 55 3c 12 25 50 9a 9e 9f c4 da c1 50 9e 03 b8 16 b7 de dc e1 f1 fd 91 71 44 3b 35 1d c9 5d 82 95 24 fc 01 23 6c 55 aa f6 51 c4 b1 2b 01 97 3d c1 b9 27 42 9b 0b dc 00 48 b9 c5 e4 81 d9 46 18 0c e0 e5 71 9d b7 aa 45 24 51 93 fb b6 03 96 08 20 52 55 1e 62 e3 91 2c 52 c6 b2 c5 72 04 92 1f ac 02 de 0b 01 6b 9b fd ed bc f0 f3 92 e6 79 7d 14 d4 b9 a5 46 67 4d 48 4b 18 2a 60 8e 23 24 ba 6d 62 da 50 d8 83 fb b8 a5 99 fb 36 cf a9 e1 8a 4a 0c 82 b2 52 12 f2 de 1d 60 0f c5 e1 26 c7 09 75 02 af 2d 7a Data Ascii: %@AK1wSb-c$KsIQqtX5.i7\|Vrfk5U<%PPqD;5]$#lUQ+='BHFqE$Q RUb,Rrky}FgMHK*`#$mbP6JR`&u-z
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 1d 42 44 65 03 55 c1 6d 77 3b df 0f f5 1e cd f2 5a b2 ab 5f 55 04 30 9b b0 9e 1a 75 37 71 61 a4 e9 be c4 1b fc b1 8b 71 fb 65 05 9d f4 b6 77 10 61 d1 d9 73 9d 39 c1 c6 77 18 df de 9b 4e 0b 1c d0 c7 22 5d 0c ba 06 d3 82 c7 7e 9b 6f 5e 71 c8 b3 f8 92 69 e7 93 de da b2 42 ba e3 89 98 86 b1 d4 09 0a 40 22 e0 6d be 1a b2 9e 14 e3 6c c2 47 ab ca fe 98 a4 85 9f c1 11 88 95 50 3b 9e 69 0a 01 b5 fe d6 3e ff 00 b5 7c ea 91 14 50 d1 e5 f9 60 ec 14 05 b0 f8 27 2c 77 f2 c5 0a 9e 3b e3 6c c5 39 8f 99 d7 bc 67 bc 10 30 5d f7 d9 d5 47 5f 8e 36 96 cd d6 47 91 23 78 c9 01 46 b7 51 b0 e8 00 0e 28 2d 3a 15 54 69 15 b0 49 f2 29 dc 9e a7 3a 4d 6c b9 77 0f 71 85 3b b7 bf 67 54 94 b1 2d be b2 4a 8e 69 6d b7 2d 12 07 00 9f 90 c1 fa 8c cf 84 a8 74 9a 9c c6 8a 69 52 56 92 da b9 69 Data Ascii: BDeUmw;Z_U0u7qaqewas9wN"]~o^qiB@"mlGP;i>\|P`',w;l9g0]G_6G#xFQ(-:TiI):Mlwq;gT-Jim-tiRVi
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: 40 6d a5 82 b9 2b 77 3f 71 54 80 bd 4d f1 83 25 f3 a9 6d 37 32 30 3a 86 9d 0b 85 23 b1 07 7a e9 6d ed 23 c6 5e d2 05 c6 3f 9c 93 9e fd b6 e5 d4 d7 9d 66 f6 43 9e a4 5c e8 9a 13 16 9d dc 96 51 d4 8d 8e 91 71 8e 73 ae 00 e3 0a e8 a9 6a 2b 79 6d c9 84 53 c0 e4 c5 00 29 1e c1 47 d9 d4 47 9f 5c 7a 7a 5c ba a9 1b e9 6a 79 c8 a7 a6 75 12 d6 4f 52 03 08 e2 1a 8c 40 86 16 0d d1 dd ae cd e5 8a 54 a6 1a f8 ea aa 2a 6b 26 a4 c8 a3 8d 96 a2 59 e2 12 f3 9c 31 21 d4 38 60 a0 dc 72 fb db 13 05 d5 d3 b4 6a 5c 85 7c 92 e5 7c bb 1d 86 db 1f 81 da 8d 35 9d 87 82 d2 78 11 b3 27 45 63 90 4f e1 1b 93 aa bc 81 2f 02 71 6d 23 7f b2 65 29 72 2e a5 58 02 3b 30 de d8 ec bc 25 c4 7c 9e 6a e5 cd 30 55 d5 20 88 12 f1 f9 86 53 6d 85 ba 8b 8c 7a 82 6a 58 68 b2 d9 5b 33 5a 94 cb 4c ed 2c Data Ascii: @m+w?qTM%m720:#zm#^?fC\Qqsj+ymS)GG\zz\jyuOR@T*k&Y1!8`rj\\|\|5x'EcO/qm#e)r.X;0%\|j0U SmzjXh[3ZL,
2024-04-18 17:16:06 UTC	1379	IN	Data Raw: cd c8 ca a8 d6 a2 40 b6 fa 88 da a1 cf c4 d8 01 7f 89 c5 1a 1d 03 5d c4 ca 31 cf 51 c9 15 64 92 49 08 4b 78 49 3f e9 15 94 9c bf 88 b3 b6 46 9f 9c e2 d7 b3 78 13 cb 64 16 e9 f0 c7 4a 9c be 8a 85 22 35 35 89 cc 3b 72 97 77 f9 28 f5 c6 ea 38 7b 38 cd bc 22 8e c4 6d a2 49 c9 61 7d ae 52 00 6d 6f fe 71 3d 2f b3 3e 1f a2 7b e6 12 c2 66 3b bc 14 fa a4 91 89 fb ac 11 98 df d0 b8 f8 61 69 2e e1 55 66 8d 1d d1 79 be 02 a0 1d f5 36 17 eb 4e c3 61 23 37 ef 5d 50 f6 39 66 3f 01 93 5e 6d 6a 89 83 aa 52 c0 d1 92 db 6d aa 53 da c0 0b 81 7b f7 c6 83 c2 9e cf ab 73 6f ae cc e2 9a 9a 36 37 77 6d 42 52 2f d3 71 df d6 c3 1b 66 59 43 4f e2 83 87 3d 9f 72 51 6e af 5b 59 a6 36 16 d8 b0 44 bf 43 f8 9b 11 55 c0 b9 63 c4 d9 9f 13 13 24 49 a9 28 29 02 96 0c 2e 09 73 62 14 79 74 38 Data Ascii: @]1QdIKxI?FxdJ"55;rw(8{8"mIa}Rmoq=/>{f;ai.Ufy6Na#7]P9f?^mjRmS{so67wmBR/qfYCO=rQn[Y6DCUc$I().sbyt8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50005	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	605	OUT	GET /-/media/financial%20inclusion_banner270x170.png?h=170&iar=0&w=270&hash=11A79D8E6FA505DA6B1E1965DD928F02 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:07 UTC	880	IN	HTTP/1.1 200 OK Connection: close Content-Length: 84177 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Financial Inclusion_banner270x170.png" Content-Type: image/png Etag: "OLb2Aw0MJL+k9+8x/UbWdpt37P5gTm2sAqumrvhtjos" Fastly-Io-Info: ifsz=95543 idim=270x170 ifmt=png ofsz=84177 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010230 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560838 Date: Thu, 18 Apr 2024 17:16:07 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120104-DFW, cache-pdk-kfty2130087-PDK X-Cache: HIT, MISS X-Cache-Hits: 4, 0 X-Timer: S1713460567.095477,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ac bc 59 b3 25 49 72 1e e6 4b 44 e4 7a b6 bb 55 dd 5a 7a 5f 06 b3 f5 cc 00 33 d8 86 1b 48 8a 22 05 c9 64 06 33 3e e9 51 ff 4e 66 32 3d e8 41 12 21 d1 24 48 20 01 13 07 24 38 0b 06 83 9e 9e ee ea ae aa 5b 77 3d 4b 6e 11 e1 ee 7a c8 5b 8d 69 1a 4c 4f 4c 4b bb 96 e7 dc 38 19 99 79 dc c3 dd bf ef f3 83 8b e5 12 31 a9 4e 8e 9d 2a 02 a2 01 10 38 26 06 54 d1 49 35 8b 1a 18 17 a1 46 24 00 51 c9 0a 66 06 60 46 0c 2a aa a0 ce 85 aa 58 11 01 1a 01 01 00 22 19 1a 19 e8 a1 bb 41 24 ef 4b ef ca c5 72 e9 9c 23 74 cc 54 55 65 db 34 08 60 00 00 80 88 88 28 22 bb dd d6 d4 10 09 11 e1 7e 33 22 8e 63 ff 93 9f Data Ascii: PNGIHDR)6sRGB IDATxY%IrKDzUZz_3H"d3>QNf2=A!$H $8[w=Knz[iLOLK8y1N8&TI5F$Qf`FX"A$Kr#tTUe4`("~3"c
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: bc 5b 6e 36 b5 2f 00 a8 3d 3d 1b 0c 86 dd 4e 40 cb c5 26 3e 7f 61 60 a6 1a 42 b9 5a 6d 5c e1 0c 92 28 0f 5d bf df ef d5 14 89 1e 9e 3f 02 80 69 1c 4d 6d b5 5c 13 53 5d b7 e3 38 21 a2 63 37 df 6c 3f 8c 8b c5 6a d1 b4 66 86 08 c4 ac 41 1f 3d 3c 67 ef 98 88 d0 00 00 11 14 00 88 45 c1 0c 18 70 b3 5e 2f d6 cb f1 d0 25 e6 45 d3 18 20 3b 3e 3d 39 41 62 47 24 22 ec 9c 63 67 a6 08 60 86 a0 26 31 85 e0 44 e4 30 8e aa 86 44 6d 5d 86 b2 72 a0 08 8a 68 88 68 06 ed 72 f5 f4 ed 77 c0 05 03 44 62 24 24 66 43 53 15 85 64 6a 90 01 4c cc 94 9d 13 cd a6 19 01 e7 47 61 20 00 0e 00 91 94 55 0d 01 e6 0b 40 44 35 42 0c 4c 06 64 6a 53 1a d1 9c 0b 9e 00 d5 b2 dc c7 0a 04 43 24 40 50 35 54 c5 39 fd 31 43 43 35 40 66 42 60 01 33 13 00 43 40 02 53 20 00 32 13 03 81 a9 87 50 eb 7b df Data Ascii: [n6/==N@&>a`BZm\(]?iMm\S]8!c7l?jfA=<gEp^/%E ;>=9AbG$"cg`&1D0Dm]rhhrwDb$$fCSdjLGa U@D5BLdjSC$@P5T91CC5@fB`3C@S 2P{
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: cb 0c 58 96 a5 a8 a5 18 c9 2c 0e 83 54 b5 a9 aa 99 73 0e 18 35 09 19 21 80 81 79 1f 44 84 08 52 8a a6 3a 1c 3a 26 66 40 33 53 30 22 56 55 15 61 66 00 34 40 cf 30 a6 e8 98 9d 77 2f 2f af 90 88 d9 31 11 33 96 25 97 1e a7 9c ab a6 ad aa 6a bb 3b 6c f7 07 20 6a 9b 3a e7 74 18 7a 55 13 b5 9b 9b 9b cd b2 dd b4 8d 63 8a 71 ba be db 1f fa 9e 9d 03 83 e0 b8 2c 8a 14 e3 b3 cf 9f 1b c0 d3 a7 4f 14 ee 00 68 9a a6 aa 6e bb 31 0e fd e1 64 b1 64 e6 71 8a 06 10 d8 19 53 d1 b6 fb fe 62 bf bf 03 c6 e5 11 75 5b 63 0f c3 d4 e7 84 a1 e0 29 8e 8c 5d 77 18 6f ef ee 16 8b 55 51 78 66 92 2c 06 08 06 a6 12 63 c7 0c aa 11 09 57 eb cd 7a bd 89 7d 8f 48 49 f2 ed f6 d2 31 66 4d fb c3 de 4c 87 ab 17 67 67 8f f7 c3 64 60 a2 b6 59 2d ea 9a 87 b1 03 25 57 b8 4f 5f fc d2 bb f2 64 79 d2 0d Data Ascii: X,Ts5!yDR::&f@3S0"VUaf4@0w//13%j;l j:tzUcq,Ohn1ddqSbu[c)]woUQxf,cWz}HI1fMLggd`Y-%WO_dy
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 84 2c 26 0a 06 e4 d0 87 50 96 cd 64 70 15 87 17 fb eb dd c5 73 57 d4 7f ef 07 ff 70 b3 39 f7 a1 26 d6 c0 01 c9 46 cc c0 84 2e 28 40 e2 e8 0a ee ba c3 ab cb fe 70 37 38 47 7c 09 b4 90 08 ec 16 2e 4a 9f 79 2a c2 c6 d1 d1 54 51 dc df c8 ab 9f d9 fa d4 c2 bb c6 c1 f2 84 71 b2 f6 b8 7f fb 5b fd a7 9f a6 2e 4d 85 f0 c9 66 ad aa 92 25 a6 71 db 0d dd 94 d6 27 a7 82 2c ec 36 c7 67 55 d3 26 80 38 4d ad 0f 0a 06 80 39 a7 18 23 ce 60 07 18 98 81 f3 d7 77 bb 61 18 01 f1 d0 8f 0f cf 4e 91 08 11 c1 6c 18 86 bb bb bb 71 9a da b6 ad aa 4a 55 0d 40 4d e7 58 45 88 a2 56 37 35 21 48 be 2f 73 b3 58 d9 34 66 40 88 48 38 4d d3 38 8e 8c 48 44 80 84 00 17 97 17 29 4b 56 5b ad 37 c7 9b 4d 55 56 75 5d 37 55 85 39 97 65 81 3e 18 50 28 43 53 d7 65 59 84 a2 10 d1 b2 aa 5e 5d 5e ea 0c Data Ascii: ,&PdpsWp9&F.(@p78G\|.Jy*TQq[.Mf%q',6gU&8M9#`waNlqJU@MXEV75!H/sX4f@H8M8HD)KV[7MUVu]7U9e>P(CSeY^]^
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: e8 54 75 8a b1 9b 12 68 a6 61 9a d6 cb e5 f1 59 5d 17 8d a4 a9 0c 75 3f 4e 2f ae 6e 31 78 12 2e 2a c7 8e ba 7d 34 40 00 23 c0 b2 aa 1e 3c 3c 6f da 86 10 08 00 bc 27 34 57 d4 0d fa 85 f3 cd ea a8 6a 1a 30 01 c3 61 b8 bd be bd 75 ae 3d 3e 6d 45 25 e7 9c b2 64 d3 69 4a 84 ee f1 db ef c7 2c 75 27 65 8d 63 9c 90 09 01 40 a4 aa ca d5 e2 64 71 74 66 cc 92 92 22 a1 f7 4a 13 14 8b d5 19 af d8 97 cb 13 51 73 4c ce 87 f1 70 2d 9c b5 cc 49 4c 92 a0 0c 12 93 99 84 d2 d5 75 55 b7 2b 23 af aa 4c 44 84 d9 a8 1f a6 bb ed 4b d3 ab af bf 53 bc f7 f4 0d 2c eb 67 db eb 67 17 af ba 18 5d 70 e4 08 11 8c a1 5c 90 b5 8c 05 16 ad 05 0f 34 51 9e 20 4a 06 03 03 99 c6 49 21 af 8a b3 93 93 73 22 da ef b7 5d 77 b0 42 ab b2 0c 35 77 3a 26 89 25 07 35 1b a6 c9 14 00 01 1d b2 37 00 c7 dc Data Ascii: TuhaY]u?N/n1x.*}4@#<<o'4Wj0au=>mE%diJ,u'ec@dqtf"JQsLp-ILuU+#LDKS,gg]p\4Q JI!s"]wB5w:&%57
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 31 03 dc 6c f7 57 db 2d b2 03 84 94 c5 f9 10 42 60 a2 be 1f bc f7 55 51 20 c0 cd cd 0d 00 1a 00 02 a5 34 69 4e 8b c5 62 b5 5a 22 80 77 ce 31 39 e2 b6 6d ca 10 52 ca de 33 00 dc de de 31 63 dd 04 21 e9 e2 68 48 49 34 4e a9 ef a7 c5 6a 1d 9c cf 39 aa 99 8a b1 f3 55 d3 2e 57 6b 1f 0a 22 72 21 38 5f 38 be 27 5e 91 90 88 c8 39 66 26 e7 9c 0b ec 1d 39 47 f7 59 15 a8 99 88 a4 94 25 a5 18 d3 34 a6 98 53 8a 29 65 c9 32 2b 08 70 66 d9 70 56 fb 31 cd 42 46 62 87 4c c4 73 59 f7 6b 3b bf 3e 40 02 44 20 9a 25 32 88 04 f3 ac 38 03 c3 af 07 dc ef bf 7e 7c ef 81 b3 73 c2 eb 18 02 f7 6a ce 2f 0f 66 5f 82 7b 9c fd cb 91 f8 eb c3 ee 9d 73 e6 28 7f 6d c0 fd f6 65 80 fa ca fb 88 46 ac 2e 80 c2 62 ea 4f 8e 4e 56 47 27 be 2a 88 31 67 eb 3a 42 d4 8f be d9 ff 77 ff b2 f8 a3 3f fa Data Ascii: 1lW-B`UQ 4iNbZ"w19mR31c!hHI4Nj9U.Wk"r!8_8'^9f&9GY%4S)e2+pfpV1BFbLsYk;>@D %28~\|sj/f_{s(meF.bONVG'*1g:Bw?
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: ba 59 2e 17 8a 00 00 8b b6 6d db 05 80 8d c3 98 52 96 bc cf 54 14 05 13 62 e1 9d 69 ce 7a af 9c cd 59 53 ca b7 77 77 92 73 a8 ea a6 f5 eb 93 d3 d3 87 8f 7d 70 39 4e 08 66 01 ee ed 72 d6 e9 20 21 62 16 1d ba 7e 18 06 03 b0 19 d1 03 25 9c 65 77 44 44 f7 a6 42 08 38 77 55 30 11 21 33 11 13 b3 0f 9e 43 00 22 34 bb 37 38 9d 91 11 50 40 53 03 13 04 43 44 23 40 9b 6b 8f fb 73 1a 7e e9 4e 04 f6 77 79 86 fd 1d 47 5f b5 70 b0 ff 9f 88 f4 65 54 b1 2f 07 c3 0c 42 da 57 df 7f 3d f2 d7 66 b1 af cc ae f7 ae 02 60 60 08 6a 06 28 a1 28 fc a3 37 e2 70 e0 97 cf 20 e6 2c e0 4b 7a ff bd f8 fb bf 9d de 7a 83 00 3a 88 1f e3 e7 7b fa 49 8b cf bc db b4 1c df c2 a3 0b 78 fb 3f e0 f2 27 a7 c7 6f fc f6 f7 be f1 7f fe db 37 ff e2 67 57 62 e2 08 63 9f 25 69 d1 12 7b 02 c7 38 2d 8e fa Data Ascii: Y.mRTbizYSwws}p9Nfr !b~%ewDDB8wU0!3C"478P@SCD#@ks~NwyG_peT/BW=f``j((7p ,Kzz:{Ix?'o7gWbc%i{8-
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 38 81 ca 83 87 e7 2e e0 e1 76 df 0d fd 7e d7 3b 17 9a e5 72 b5 de 54 55 29 6a 88 7c e8 87 db dd 7e bf ef 1e 9d 9d 94 55 15 ca 82 88 4d 24 8b d6 f5 f2 9d 77 3e 20 62 53 c9 39 1b 48 9a a2 69 0e 58 63 b0 c0 52 35 6b 17 ca e1 70 cb 04 04 42 e8 96 8b 60 06 65 15 f6 fb 8e 1d 85 b2 2a ca ca 4c c1 80 99 90 10 08 0c 91 09 11 41 44 62 16 ef dc f9 d9 89 1d 1f ed 0f 5d 4e 91 99 d9 f9 7b 04 8a 19 67 69 0d 31 d2 7d 43 c0 6c 70 48 3c 2f f5 88 00 c4 c1 3b ef 3d 00 19 a3 89 c4 9c a6 c3 1d 21 d5 c1 2f 56 0d cc c9 bd 01 00 ea 5c f9 28 18 9a ce 12 48 40 25 03 42 42 06 9c 31 00 ba 57 87 22 98 01 20 ea 3d 8a 85 08 f7 15 90 cd 91 e4 5e 58 34 2a 88 01 c2 ac b8 fb 32 2c 20 cc 53 d8 7d 9d 81 70 af 20 05 00 53 44 03 7c ed 2a a0 36 bb 9f e9 eb a8 25 6a 32 67 c9 30 4b 98 6c 32 d8 25 Data Ascii: 8.v~;rTU)j\|~UM$w> bS9HiXcR5kpB`eLADb]N{gi1}ClpH</;=!/V\(H@%BB1W" =^X42, S}p SD\|*6%j2g0Kl2%
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: ae 10 c4 41 26 60 80 c7 e0 d6 51 9e 4d a3 48 76 10 a8 50 20 c9 b6 1b 3a c4 f8 5b 4f ce fe fb 8f de f9 af bf 76 72 7a 16 c1 47 30 82 69 02 37 6e de 3d fb 47 7f f8 0f da 76 da 7c fc e3 bf 04 2d 43 4d 54 0a 38 54 43 00 1c c6 30 1c 6f 3e fc da e9 c3 d3 a5 63 07 09 ec 66 80 4f af e1 62 6b b0 03 67 f6 42 e1 39 63 f0 fa 16 c2 83 26 93 2e 1a fe bd f7 8e c2 1a 3f 2e db cb 5d ef 72 ce a1 08 c8 24 32 dd ed 6f e3 70 77 7a bc 22 5f 85 d2 13 81 a8 02 58 70 ed db 6f 7c 00 e0 10 2c a6 8e d0 7b 57 c6 ee d0 1d 76 84 48 de cf b6 85 08 45 51 88 e6 db ed 36 a9 18 98 21 48 52 30 be d9 bd 84 6c ed a2 5d 6d 8e 7c f0 39 0b 02 9e 9f 9f a7 94 d6 29 b6 65 10 c9 a6 6a cc 00 26 2a 86 18 ca c5 d1 69 e5 9d 03 f2 c3 38 4d 29 0f 51 44 61 e8 b6 0f 4f d7 47 27 a7 39 27 34 dc 76 c3 ed b6 0b Data Ascii: A&`QMHvP :[OvrzG0i7n=Gv\|-CMT8TC0o>cfObkgB9c&.?.]r$2opwz"_Xpo\|,{WvHEQ6!HR0l]m\|9)ej&*i8M)QDaOG'9'4v
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 3b 5f 0c 11 10 bc 77 b5 73 e7 ce ee be 7b e3 e6 de ee 99 e0 fd 6c 3e af aa 86 14 01 86 88 0b 47 2c 3b 30 47 da 67 19 3a 96 96 4e c0 b0 f2 1c 40 42 02 12 16 00 d6 04 3e 08 90 d5 36 f5 01 3d 43 ed 42 ed 82 73 c1 39 5e c2 d3 20 c0 42 2c ce 33 b9 e0 5c d3 78 0e 2c 20 24 41 7c 40 1f 5a 57 89 93 bc 38 04 09 6d c5 b5 2a 9e 10 10 82 02 c1 80 86 b5 63 ed 82 02 d4 00 aa 55 8b 45 57 59 be 43 a2 f8 8c 08 21 8a 6f d5 29 ca 91 56 81 25 b6 7d b6 1f 2f 24 cb d5 41 44 82 40 15 68 3d c5 eb 03 fe af b7 cb fb f3 f4 eb b9 f5 a8 74 9a 70 39 59 3c f8 44 bd fa 82 ca fa eb 12 fd e7 48 a9 f9 de de 70 34 4a 8b d9 d4 05 2f 36 13 95 70 68 12 f2 00 be db 1d 0c ba e6 e1 61 fd f7 9f 36 bf f8 46 e9 d4 ec 8c b4 17 51 40 1f d8 ee ff a4 77 cf 37 c9 5f c1 fe c7 b9 f3 0c 54 a3 af 7d 90 26 a9 Data Ascii: ;_ws{l>G,;0Gg:N@B>6=CBs9^ B,3\x, $A\|@ZW8m*cUEWYC!o)V%}/$AD@h=tp9Y<DHp4J/6pha6FQ@w7_T}&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50006	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	623	OUT	GET /-/media/images/corporate/our%20stories/traffic270%20170%20png.png?h=170&iar=0&w=270&hash=462A40E91F079D87E5F29BC8A96AC035 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:07 UTC	865	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21361 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Traffic270 170 png.png" Content-Type: image/png Etag: "mdTuTxKHJxx78eCaexEJA4xstxJ8N0QA09zXm3IT8WE" Fastly-Io-Info: ifsz=25236 idim=270x170 ifmt=png ofsz=21361 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010246 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560838 Date: Thu, 18 Apr 2024 17:16:07 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120053-DFW, cache-pdk-kfty2130063-PDK X-Cache: HIT, MISS X-Cache-Hits: 4, 0 X-Timer: S1713460567.111146,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 02 00 00 00 d3 29 36 be 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec bd 77 9c a4 67 75 e7 7b ce 79 9e f7 7d 2b 75 ce d3 dd 93 83 34 49 33 a3 2c 46 01 25 40 42 12 08 89 68 64 ac 6b af 6d 6c e0 7a d7 eb 7b 8d 77 b1 f9 d8 77 bd 7b d7 eb ec bb be eb 80 2d 96 35 ce 60 13 04 02 84 24 90 50 9c 19 4d ce d3 dd d3 d3 a1 ba ab ba f2 1b 9e e7 9c fd e3 a9 1a 61 2c 30 41 33 63 66 ea fb 91 3e d3 a1 ba ba ab ea fd d5 79 4e 06 11 f9 f2 97 bf 0c 6d da b4 79 35 94 52 00 f0 e0 83 0f ea 0b fd 97 b4 71 20 11 02 80 88 00 00 22 02 a0 88 88 f0 85 fe c3 da 34 69 4b e5 02 e3 24 c2 cc cc 72 f6 8b 4e 30 0e 22 02 00 e6 b6 66 2e 30 6d a9 5c 30 10 09 80 85 59 00 52 1d bd db af d9 79 d9 Data Ascii: PNGIHDR)6sRGB IDATxwgu{y}+u4I3,F%@Bhdkmlz{ww{-5`$PMa,0A3cf>yNmy5Rq "4iK$rN0"f.0m\0YRy
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: f6 cd ee 8b ab 1a 13 11 6b 39 95 ca f8 41 0a 9a df 69 73 ae 68 bb f5 e7 0a 24 05 04 96 9b 35 91 08 82 00 e8 32 28 22 00 a0 a8 99 8d 07 14 40 40 20 01 d1 0a 09 38 8a 8d 6d 79 26 8a 48 6b 8d 00 84 60 c4 8a 80 08 0a 37 63 cd 2c 42 4a 69 ed 5d e0 47 7b 09 d0 96 ca b9 42 d8 c6 61 a8 94 12 66 a5 14 20 b8 b6 2d 67 5c 88 9c bb ee a4 e2 1c 12 f6 14 59 e6 5a 18 29 cf f7 95 46 00 16 97 8a 64 85 e4 0a 28 99 19 91 9a f1 b2 a6 77 df e6 7c d0 96 ca 39 01 11 45 a4 5e ab 8a 08 3a 0f 1c 41 98 5d 68 58 c1 2b 05 92 84 84 08 71 92 b0 70 1c 83 20 a5 82 34 60 53 56 8a 90 50 59 66 cb d6 0a 8a 20 a1 72 b1 66 77 8e 23 24 b6 c6 24 f1 85 7e c4 17 3f 6d a9 9c 13 9c 54 2a e5 92 af bd 88 90 a8 e9 d7 bb c9 45 04 e0 42 bf 8a 10 51 12 cb 02 a0 75 80 88 5a 91 0b fb 0a ba f0 b1 70 ab 8c 85 Data Ascii: k9Aish$52("@@ 8my&Hk`7c,BJi]G{Baf -g\YZ)Fd(w\|9E^:A]hX+qp 4`SVPYf rfw#$$~?mT*EBQuZp
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: be 6c a8 6b c7 f6 ab c6 ba 06 17 ce 1c 46 a5 b2 f5 06 6a 4c 77 8f 46 95 79 35 38 f6 d4 d7 bf f6 db bf fe e1 f1 e5 6b c2 46 63 76 66 f2 42 3f fa 4b 85 b6 54 7e 50 10 71 c7 b6 ad 3f 76 cf b6 2f 7f ee af f7 1e 3c 55 37 99 d8 b2 31 a6 5e ad ec d8 b6 f1 67 de ff 13 a3 9d 7c e8 85 2f 62 75 7a f5 f6 2b 66 4f 1e fa db bf f8 fd d3 33 d3 51 84 3d 59 ff cc dc e9 74 c7 e0 aa 2b af ed e8 1d cd 76 0f 67 bb 06 aa 8b 53 f5 d2 7c 69 6e a2 56 cd 9f 9e 3c 15 d6 4b a4 d3 9d 75 59 2a 15 90 8e 05 99 d4 ec 89 03 4f 7e 63 af d6 5e a3 de 08 1b 95 0b fd e8 2f 21 da 52 f9 81 20 44 3f 9d bd e9 ea 8d b3 27 76 1d 9d 98 ac 45 4c 3a eb 7b dc d3 9d 7d c7 03 0f dd 71 cb f5 f9 33 c7 9f f9 c6 ee a9 63 c7 6e ba e5 9e 27 9f 79 fe b9 67 1f 0b ad b9 f2 75 6f d6 99 ec c0 f0 da ae a1 75 1d 3d 23 Data Ascii: lkFjLwFy58kFcvfB?KT~Pq?v/<U71^g\|/buz+fO3Q=Yt+vgS\|inV<KuY*O~c^/!R D?'vEL:{}q3cn'yguou=#
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 1c 33 0c 6c 59 98 41 18 44 10 84 40 08 44 21 68 05 04 02 08 5a 91 52 24 6e a3 84 35 49 12 c7 51 68 92 98 93 28 8e ea 61 a3 c6 6c 39 aa 74 f5 f6 5f 73 dd 0d e5 6a 75 62 2e c9 66 b3 5d d9 54 b5 21 2f 1f 9b 5b 28 56 66 e7 f3 e5 c2 a9 ed 97 8d 01 50 5b 27 e7 88 b6 55 f9 6e 71 97 e0 bf fd c0 fb d7 0e a7 ff ea 63 bf 13 59 93 e6 8c f6 52 5e a6 6f 6e ae 38 5f aa fc dc 7f f8 af 37 de 7c 7b a9 54 f4 3c df 2d 07 66 9b 48 c2 9e 9f 3e 3b 39 55 31 32 00 20 b2 00 8a 9b 87 0f c2 cc c2 0c e4 d6 ad 18 6b d8 1a 61 36 49 84 1c 0f 76 fa 81 2d 45 8d 93 b5 85 e2 f5 2b 29 f3 9e 9b 5e 3a 70 4c 50 23 d5 52 be 9a 2f 54 72 1e f4 75 05 da eb 1a cc aa 75 2b 87 8e 9e 9a b9 b0 4f d4 c5 4a 5b 2a ff 32 ce 9e a4 52 99 8f fe e2 bf bb 72 55 ea e3 7f fe 87 31 07 6a 60 fb 88 50 a5 ba 34 7d e6 Data Ascii: 3lYAD@D!hZR$n5IQh(al9t_sjub.f]T!/[(VfP['UnqcYR^on8_7\|{T<-fH>;9U12 ka6Iv-E+)^:pLP#R/Truu+OJ[*2RrU1j`P4}
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: ef 79 12 57 1a e5 c5 ea e9 03 81 26 13 55 3b b3 59 0c 67 66 cf 1c 39 93 af 1c 3d 95 9f 99 99 ba fd d6 9b 0e ec 7d ba 51 af 1f 3b 79 38 34 38 38 34 94 ce ea 5c b6 a7 7f fc b2 9e d1 ad a8 b3 a0 48 43 14 26 26 db dd a5 15 69 b0 56 08 84 95 17 60 1c 79 81 cf 49 a3 52 29 9b cc 98 0c e2 e4 e4 01 98 dd d7 3b ba 76 70 68 88 4b a7 6f b9 6a 5d a5 d2 d8 73 e8 50 7b e0 f7 6b 4b 5b 2a af 82 7b 4b be fe ca ad b7 5e b5 e1 d1 47 ff aa 16 f3 e9 85 98 6d c2 6c 6e bc eb 6d bf f8 4b bf ca 49 23 01 d2 a4 c3 7a 1d 90 6c 7d 09 48 e5 02 6c 2c 1e 5f 98 3e 50 5a 98 3f ba ef 1b 6b 37 5e 31 b0 62 6b a3 2c c7 8f ed 9d 9c 9a 9c 9e 9d 9f 99 cf 7b 98 5c be 66 79 fe cc a1 5a bc bc 6f 6c eb fa 6b af 08 b2 5d 51 c2 41 e7 a0 f2 b2 42 9e 65 6b e2 ba 35 35 8d 90 ca 64 99 03 10 eb 61 e2 a7 32 Data Ascii: yW&U;Ygf9=}Q;y84884\HC&&iV`yIR);vphKoj]sP{kK[*{K^GmlnmKI#zl}Hl,_>PZ?k7^1bk,{\fyZolk]QABek55da2
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: e1 d6 bb ee b8 71 7c e5 da 52 71 21 4c 6c 6c 24 5a 98 58 ca 4f f7 8c 6f c2 74 df ae 5d 4f 7d e1 eb bb 6f 79 f3 4f dc 7e ef bb 83 ce 3e 4f eb 28 0c cb e5 25 e1 66 48 36 31 c6 58 4b 48 8a 3c 63 e3 7a 54 35 c6 82 b0 b1 6c 6d a4 b4 af b4 62 36 81 e7 13 41 92 24 71 1c 1b 36 0a c5 b2 61 b1 c2 22 80 5a 2b 00 d0 3a 48 67 3a 83 54 56 29 ad 5d f3 17 12 12 aa 56 eb bd 65 56 a4 b4 16 01 5f 6b 3f 15 a4 d2 99 ce 6a b5 90 ed 1c be e7 ed 9d 8f 7e ea 13 8b 85 45 ad 7a 6a d5 d9 d7 6d ea 7d f1 64 47 a1 54 2b 2e ce 5e d0 67 fa 87 9b b6 54 40 d8 76 e4 3a b6 6e d9 fc 81 9f 7c 78 d3 da b1 98 d5 fc cc e9 7a 92 9c 38 7c 00 4a 47 bc 4c b6 63 78 d3 4b 2f 3d 5f ac 26 8b 8d c1 db ee 7d ff db 7e fc df 56 2b 65 36 49 64 62 10 04 11 63 6d 18 46 b1 31 6c ad 88 b8 c5 bf 00 90 18 66 11 22 Data Ascii: q\|Rq!Lll$ZXOot]O}oyO~>O(%fH61XKH<czT5lmb6A$q6a"Z+:Hg:TV)]VeV_k?j~Ezjm}dGT+.^gT@v:n\|xz8\|JGLcxK/=_&}~V+e6IdbcmF1lf"
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 5d a7 7d 73 2c 85 52 da f7 d3 9e 17 68 a5 09 15 11 21 21 12 39 77 1e 11 9c 08 10 00 dc 9d 48 73 5a 92 65 61 6b 45 c0 32 5b cb c2 20 2e 3b c3 62 58 18 00 b4 be 72 e7 1b 1a fe 8a bd 13 f5 44 f5 d7 1a a5 c2 ec a1 b0 70 ea a6 cd 5d 0f dc 79 8d a7 7d 27 ad 36 ff 22 97 96 54 b4 d6 83 c3 cb 1e fe d1 f7 bd ef 9d 6f 3e b5 eb 0b 87 9e ff c7 c3 33 8d d9 d9 e9 4a 7e df fe 83 47 73 e3 af eb 19 5a 71 e6 d4 d1 4a a5 92 5f 58 3c 79 74 4f a3 94 0f 52 69 e7 25 58 6b 92 24 4a 92 28 8e c3 c4 84 2c 06 00 40 80 b4 87 28 8a 50 6b ed 79 1a 89 5a f3 23 15 91 12 37 b8 a8 39 f8 de 75 4a a2 1b 22 89 88 a4 3c a5 7d ed 05 da 4f 29 ed 13 69 24 75 76 d2 b7 22 02 00 61 3e 7b 29 bb 01 95 ad d9 c7 e2 9c 19 cb cd 53 1c 20 b0 b8 95 13 60 45 c4 59 1e 11 2f d5 71 fb 3d ef 3a 3a 0b 4f ed 99 90 Data Ascii: ]}s,Rh!!9wHsZeakE2[ .;bXrDp]y}'6"To>3J~GsZqJ_X<ytORi%Xk$J(,@(PkyZ#79uJ"<}O)i$uv"a>{)S `EY/q=::O
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 50 29 ad 49 3b ff 1b 11 95 1b 6f 0c 48 44 ce d9 50 d6 a2 88 65 b6 c6 70 73 4d 8b b8 c7 25 80 cc cc 6c cf ba 30 67 7d 7a 76 1f 8b 20 34 8f 61 84 88 40 c2 b6 77 d9 9a 63 b3 27 ba 23 e9 f2 ec 74 69 36 eb 45 5b d7 ad 48 6a 0b a0 fd f1 d1 70 f2 f4 99 0b fc 82 fd 6b e5 e2 89 80 61 2b cc 05 00 ea 15 34 33 f7 f5 f6 3d 78 df dd 3e 70 79 71 b6 b4 38 5d ac 46 51 cc 43 63 5b d3 b9 ee 4a 79 69 71 66 3a 0e ab bd 43 63 da 4f 47 f5 0a 29 7f 78 64 9c 54 6a f2 f0 8b 67 8e be 04 88 71 d8 10 4e 98 e3 28 aa 25 71 18 d7 4b 81 47 08 f0 99 bf fa d3 af fe e5 af 37 66 5e 0a 3c 34 d6 86 61 18 c7 91 49 a2 24 89 2d 5b 17 ab 55 5a 6b ed 07 5e 10 f8 a9 20 48 07 41 2a 9d ca f8 da 77 35 5d 4a 79 4a 79 4d 11 91 72 19 15 17 27 00 04 42 d4 8a 32 29 3f 08 02 df f7 53 a9 94 52 6e 9a 2b ba b4 Data Ascii: P)I;oHDPepsM%l0g}zv 4a@wc'#ti6E[Hjpka+43=x>pyq8]FQCc[Jyiqf:CcOG)xdTjgqN(%qKG7f^<4aI$-[UZk^ HA*w5]JyJyMr'B2)?SRn+
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 5c f2 d1 c5 64 45 84 04 b5 ab a4 74 bd 5e ad 03 97 d3 8f 5b 01 e9 0c 86 52 ae 1c 52 5c 93 63 6b b3 3d 40 d3 b0 08 37 a3 5b 42 cd b5 c4 22 00 9e a7 4f 4f 4d ed 7a fe e9 c2 dc d4 2f fc e4 db df fb 53 3f 7f d7 bd 0f c4 51 23 0a 23 a5 50 93 62 24 66 76 77 d7 ac 40 63 56 00 82 e4 ce 61 20 42 41 7a c5 e6 1b 16 8b 8b 07 8f ec 3f 35 55 51 3a 98 cd d7 9c 8a da fc 73 2e 9e 08 58 b3 e2 1d 00 11 12 c3 93 d3 73 b9 6c 90 f5 0c d6 67 eb d5 25 8b 10 c7 f5 99 b9 85 52 a5 d6 08 1b cb 56 ef ec 1b dd 56 9e 39 70 fc 1b 1f 3b b3 ef b1 c2 e4 01 66 44 34 04 31 02 20 48 26 93 5e b6 7c ed f8 d6 5b 29 b7 a6 52 a9 d7 ea 8d 85 52 a3 5c ad fb 58 bf 7a d3 e0 eb af 5e 93 cf 4f cd e5 17 ab 35 13 c7 c6 0b 52 80 44 ca 15 4c fa 5a fb 9e e7 69 57 6c 4c e4 69 a5 b5 56 ce 83 47 6c fe 95 82 f2 Data Ascii: \dEt^[RR\ck=@7[B"OOMz/S?Q##Pb$fvw@cVa BAz?5UQ:s.Xslg%RVV9p;fD41 H&^\|[)RR\Xz^O5RDLZiWlLiVGl
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 03 44 ba bd 41 f2 3b 73 d1 4a 25 8a 42 00 50 4a 4d 9c 3a 54 3a 73 4a 54 4a a4 62 6d d4 d3 93 ab 45 76 cf be 13 4a fb 5d 9d d9 94 1a 05 c9 c7 61 d1 c6 89 15 e5 f9 41 a3 12 95 eb 45 c3 3a d0 e0 79 41 b9 b4 58 aa 44 b3 c5 38 4c 44 30 9a 2d c4 95 6a bd 3b 07 51 08 d5 6a e5 c4 e9 c2 d0 a6 ad d9 6c 87 bb 6c c9 65 d5 b5 26 40 6e 66 4a 10 00 ad ab 2d 26 b1 ae 1c bf 35 a9 c8 99 0d 22 00 68 26 e3 9d dd 60 01 04 21 44 61 b0 c8 c2 48 d4 1c d3 02 ad 69 48 dc 3a 47 fd 73 9a 43 c9 00 0e ef f9 c6 47 3f f4 8d 9b ee 7e e7 7d 6f 7f 68 d5 9a 75 68 93 7a 23 64 e0 56 1f 4b b3 d2 2c 8e e2 b6 4e fe 45 2e 5a a9 38 44 20 ae 57 6b e5 d9 62 5d 6b 25 95 a5 5a 3a 23 e9 4c 86 6b 75 b1 29 61 0f 33 9d 93 53 d3 9d 99 5c 3a e5 31 27 71 6c 32 5d 43 d6 a8 93 d3 85 65 43 c3 9e d5 d5 24 55 4e Data Ascii: DA;sJ%BPJM:T:sJTJbmEvJ]aAE:yAXD8LD0-j;Qjlle&@nfJ-&5"h&`!DaHiH:GsCG?~}ohuhz#dVK,NE.Z8D Wkb]k%Z:#Lku)a3S\:1'ql2]CeC$UN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50008	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:06 UTC	546	OUT	GET /-/media/images/privacyoptions29x14%20png.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:07 UTC	861	IN	HTTP/1.1 200 OK Connection: close Content-Length: 694 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="privacyoptions29x14 png.png" Content-Type: image/png Etag: "sY5Z3526QkiuqzukLj9+rl+W92Ecgyqc0xAme6yMTVE" Fastly-Io-Info: ifsz=697 idim=29x14 ifmt=png ofsz=694 odim=29x14 ofmt=png Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560865 Date: Thu, 18 Apr 2024 17:16:07 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120117-DFW, cache-pdk-kfty2130065-PDK X-Cache: HIT, MISS X-Cache-Hits: 32, 0 X-Timer: S1713460567.136309,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:07 UTC	694	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 0e 08 03 00 00 00 e4 0f e7 08 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 17 50 4c 54 45 00 00 00 00 66 ff 00 66 ff 00 66 ff 00 66 ff 00 68 ff 0f 6f ff 99 c2 ff de eb ff e8 f1 ff e8 f1 ff e6 f0 ff e4 ee ff e4 ee ff 00 65 ff 9c c3 ff ff ff ff fb fd ff 00 67 ff 9d c4 ff 9f c5 ff 02 68 ff 0f 6f ff 0a 6c ff b4 d2 ff 34 85 ff 66 a3 ff 36 86 ff 08 6b ff 00 66 ff 03 68 ff 9a c2 ff 25 7c ff 21 7a ff 32 84 ff 62 a1 ff 31 83 ff 60 a0 ff 00 66 ff e1 ed ff d9 e8 ff 52 97 ff fe fe ff ec f4 ff 67 a4 ff e2 ee ff f2 f7 ff a0 c6 ff 8e bb ff f1 f6 ff 83 b4 ff 28 7e ff 5c 9d ff 03 68 ff 9d c4 ff c7 dd ff 78 ae ff d3 e5 ff 19 75 ff 24 7b ff 75 ac ff 39 88 ff 5a 9c ff 00 66 ff 02 68 ff 12 71 ff c6 dd ff Data Ascii: PNGIHDRsRGBPLTEffffhoeghol4f6kfh%\|!z2b1`fRg(~\hxu${u9Zfhq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50007	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:07 UTC	542	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:07 UTC	757	IN	HTTP/1.1 200 OK Connection: close Content-Length: 33656 Content-Type: image/png Etag: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg" Fastly-Io-Info: ifsz=33715 idim=320x360 ifmt=png ofsz=33656 odim=320x360 ofmt=png Fastly-Io-Served-By: vpop-kiad7010250 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:07 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210128-DFW, cache-pdk-kpdk1780131-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460567.133871,VS0,VE20 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 68 08 06 00 00 00 26 6f 22 f1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 20 00 49 44 41 54 78 9c ec 9d 79 7c 1d 55 d9 c7 bf cf cc bd d9 9a 26 4d d3 85 16 4a d7 b4 49 5b 96 72 53 4b a0 c8 26 a0 22 af 88 20 a8 e0 f6 aa a0 2f 20 e0 02 22 42 05 14 57 e0 55 c4 7d 17 51 f1 45 44 51 70 03 b4 1a 90 a4 14 68 9a b4 e9 4a 4b e9 92 74 cd 7a ef cc 79 de 3f 66 6e 73 73 9b 9b a5 59 4b ce f7 f3 99 cf 9d e5 9c 33 cf cc bd f7 37 cf 39 e7 39 67 44 55 b1 58 2c 96 d1 88 33 dc 06 58 2c 16 cb 70 61 05 d0 62 b1 8c 5a ac 00 5a 2c 96 51 8b 15 40 8b c5 32 6a b1 02 68 b1 58 46 2d 56 00 2d 16 cb a8 c5 0a a0 c5 62 19 b5 58 01 b4 58 2c a3 16 2b 80 16 8b 65 d4 32 aa 04 50 44 b2 44 e4 29 11 59 2f 22 ab 45 24 36 dc 36 Data Ascii: PNGIHDR@h&o"sRGB IDATxy\|U&MJI[rSK&" / "BWU}QEDQphJKtzy?fnssYK3799gDUX,3X,pabZZ,Q@2jhXF-V-bXX,+e2PDD)Y/"E$66
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 52 da 8d 10 38 c0 7a e0 18 e0 51 e0 6d e1 a1 45 c0 93 04 7f d8 07 80 43 7a 5e 45 e4 db c0 15 74 78 c5 11 c0 13 91 2d c0 55 aa fa e7 2e 4e e9 00 6b 80 77 84 e7 73 80 77 8b c8 4a 55 fd 6a 4f f7 a2 3b 44 e4 5c e0 26 e0 04 82 ce 16 44 a4 15 f8 13 f0 f1 a4 68 85 4c 06 9e 06 c6 02 2a 22 77 ab ea a7 bb 29 fb 46 82 fb ea 13 3c 00 93 1d 66 3f 03 ce 21 e8 0d 5e 02 d4 a7 e5 8b 85 69 4a 92 bb 00 57 44 f6 02 4f aa ea 45 29 69 a7 00 3f 0d 6d 42 44 be ab aa 3f ec e3 6d 18 12 62 b1 d8 f7 1d c7 b9 4c 55 93 4d 3b 3e f0 52 55 55 d5 a2 e1 b4 ab 9f ec 02 d2 43 99 7a 6c 9e e9 2b 87 1d 07 f8 5d 91 bc f1 a7 9d f2 8f 71 63 c7 8e a9 ff c5 c3 bc fa 93 87 48 34 ee 61 c2 bb df ce 31 77 dd 4c c1 25 17 d0 be 66 3d db 3f 7c 03 bb 6e bd 0b c9 8e 32 fe ba 0f 91 55 36 97 d6 ca 6a 24 3f 0f Data Ascii: R8zQmECz^Etx-U.NkwswJUjO;D\&DhL*"w)F<f?!^iJWDOE)i?mBD?mbLUM;>RUUCzl+]qcH4a1wL%f=?\|n2U6j$?
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 04 a9 bc 89 8e 00 eb 77 88 c8 85 61 f9 77 11 fc 01 1a 43 1b fb 42 59 f8 e9 00 5d 0e 7f 4c 6f 97 55 d5 2f 01 3f 24 78 80 6c 23 a8 ba 8f 28 44 64 6a ea b6 31 e6 cc aa aa aa f2 aa aa aa 8a aa aa aa ab 87 cb ae 01 20 35 46 f5 07 83 79 a2 3e 0b e0 ce f7 fd f7 8d 4d 6b 37 8c df 52 bf 8e fc e9 c7 70 d4 99 4b 71 b3 b2 68 f8 c7 33 ec fc c3 5f 90 82 7c 26 5d 79 05 39 25 33 31 07 0e d0 78 ef f7 69 af 59 c3 a4 cf df 82 38 0e 8d 77 fd 2f e6 40 13 ea 1b cc fe 03 c1 b2 67 1f fe ee bd f8 8d 7b 82 cf dd 7b 51 df 27 5e bb 96 f6 17 6a 10 d7 45 db e3 e0 79 a0 4a 13 86 31 e2 64 ef 8b eb 97 7b b6 b8 5b 7a 6c 02 08 ab 4f c9 9e 27 03 7c a7 87 2c 6b c3 cf 62 c2 6a 70 0a ff 45 d0 86 08 81 97 78 1b 41 bb df 58 e0 77 aa 7a 67 6f 8c 4e 12 7a a1 7e b8 59 2a 22 7d 19 cd 91 a9 cc 57 08 Data Ascii: wawCBY]LoU/?$xl#(Ddj1 5Fy>Mk7RpKqh3_\|&]y9%31xiY8w/@g{{Q'^jEyJ1d{[zlO'\|,kbjpExAXwzgoNz~Y*"}W
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: ce be ea 17 20 1a 25 ff f8 f9 88 08 f1 cd af 10 df be 0b b2 b3 30 1a 34 c6 f8 12 08 5b d2 9b 53 55 8c d1 e0 93 e0 98 1f 2e a9 5e df c1 f4 40 42 c1 75 9d f1 af 96 97 0f 66 d0 64 1d 1d 21 10 39 22 32 b3 9f e5 3d 4b 10 e4 f9 6b 82 b8 bf a4 87 74 6f 18 6e d3 2f 54 f5 59 55 fd 94 aa 1e 4d d0 c1 92 e4 b2 4c 79 7a 28 6f 07 f0 2e 3a ec bc 9c ae db 61 d6 a6 ac 9f 78 38 e7 4a 12 c6 03 7e 3e 3c e7 62 02 6f 12 82 d0 98 47 fa 53 36 80 aa 36 a9 ea 8f 54 f5 8d 40 05 1d e2 7d 2c 41 93 c7 11 cf 61 b6 95 0e 27 45 29 4b 2a 4f 13 d4 b6 04 f8 e4 40 9f b4 4f 02 98 50 1d 37 66 5c 21 59 11 97 b6 03 cd 1c d8 be 13 10 f2 8f 39 1a d7 8d 20 0a cd 9b b7 d2 b4 7d 27 d1 a3 26 92 73 cc 14 4c 7b 9c d6 cd 5b f0 e3 71 8c eb 74 12 31 9f 50 04 bb 5a e8 7a f1 e9 f0 00 e3 28 ed 2a 59 db 1a 5a Data Ascii: %04[SU.^@Bufd!9"2=Kkton/TYUMLyz(o.:ax8J~><boGS66T@},Aa'E)KO@OP7f\!Y9 }'&sL{[qt1PZz(YZ
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: dd df 84 31 06 37 3b 8b a4 a7 88 08 46 0d 9a 12 ca 02 1d dd 3a a4 6c 27 d1 b4 f5 4e db 29 1d 24 59 22 88 9a b8 9f e3 6d a7 17 84 7f b6 13 08 84 bf 37 13 21 38 04 7f a6 83 f9 81 b7 85 0d f5 97 11 f4 20 1e 4d 20 50 d5 c0 2f ba 18 7d 71 1d 41 5b 4d 8f 5d f8 aa 7a 56 d8 13 6c e8 1c 44 fd 3c 30 87 a0 a3 a4 31 25 bd 21 a8 02 df 12 7a 9a 67 13 fc a1 95 40 98 7f d1 95 27 45 20 a2 0b c3 eb eb 71 f2 d1 2e ec 7c 24 6c 53 4b 6f 84 4f 1e 7f 0c 78 4c 44 ce 26 88 4d 3c 8e a0 2a be 19 f8 73 17 5e f0 f3 04 f7 72 9b f6 30 a5 99 aa 3e 2b 22 c7 12 4c 0f 36 96 ce 42 f7 5e 82 49 1c e2 74 74 5c 25 7b 44 cf 04 08 6d 3a 03 98 46 30 69 ec 23 87 1b 5b 68 39 f2 e9 db 50 38 cf 5f 15 31 fe 14 e3 f9 18 55 70 84 08 82 26 7c d4 f1 88 b7 b6 e2 3b 4e 30 db b3 31 10 8f 43 24 82 21 a8 fe 22 Data Ascii: 17;F:l'N)$Y"m7!8 M P/}qA[M]zVlD<01%!zg@'E q.\|$lSKoOxLD&M<*s^r0>+"L6B^Itt\%{Dm:F0i#[h9P8_1Up&\|;N01C$!"
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 73 c5 09 39 b9 d3 89 b8 b4 88 b0 ae a5 85 56 63 18 9f 95 c5 ec f1 45 c4 c3 d9 9e dd 68 16 eb 76 ec 64 7f 5b 1b 51 a7 77 ce a7 8b 90 ef 3a 34 f9 89 3d 88 ff fa b3 37 6c 38 ac 17 fd 24 d9 ba b0 ec be 5c 91 ff 69 f1 8d 1a 09 34 58 c0 89 82 b6 c2 8f 67 d5 d4 7d 00 60 f3 fc d2 7f 2a 2c cd f6 75 de 94 35 6b d6 ae 3b a1 64 71 be ef fe c5 20 85 09 63 12 2a 38 51 1c d7 15 9a 13 6a 6e 9c 56 b3 e6 9b 2f 2f 2c b9 20 4a e4 d1 38 7c 73 fa aa da ab 3b ce 39 f7 f9 3c 89 9c b8 df f3 ee 9b 51 bb f6 9a ae ec da b4 60 de e3 39 38 e7 c5 d5 18 23 ea 3b 38 d1 a8 88 c6 d1 e5 0d 39 f9 17 c5 aa aa 1a 00 aa e7 cf 3f 71 b2 c3 9f 1c cc 51 09 a3 06 21 21 38 59 ae 28 82 f3 f8 d4 55 ab df 9c 2c 73 c3 fc f9 cb c6 ba dc d6 ec e9 c7 66 d4 1e da 64 b0 71 41 d9 43 8e 9a 8b 7d 89 54 cc aa a9 Data Ascii: s9VcEhvd[Qw:4=7l8$\i4Xg}`,u5k;dq c8QjnV//, J8\|s;9<Q`98#;89?qQ!!8Y(U,sfdqAC}T
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 6d 7d 49 da 1d 6e c9 73 5d c7 89 67 5f 07 a0 22 11 4f d1 84 3a e7 1b 94 ac 2c e7 09 de f1 8e ac ae f2 e2 79 55 fb 7d 9f b1 ae dc fd f2 c2 92 0b 52 0f 2d a9 af 7f 85 ae 67 c2 b1 58 0e 32 a0 02 08 70 8d ea fe 63 d7 d5 5c be 25 7e e0 98 42 47 6e 6f f7 75 f5 1e df 6f 5d d3 d6 46 5b 3c 41 4e c2 23 1a 8f 33 d1 28 27 64 67 73 94 eb e2 19 43 5c fd 78 8b e7 af 17 c3 57 db 5c 33 eb 8c 0d b5 17 bc a9 be be cf 53 35 f5 16 cd ce ce af 2e 2f cf 7b 48 24 6b c3 ec d9 d3 e2 85 63 9f 1c eb ba 78 a2 bf 04 30 e1 d0 e5 ec ac ac 1c 54 3d 47 fd 8f 21 98 62 c7 bd 63 49 d9 dc 96 57 17 cc af d9 b6 a0 f4 ce 65 1d 73 f6 85 05 ab ba 0e f3 73 7c 7e 6b 90 ed c7 ac aa 2b ed d1 96 96 f6 1b 1a 7c 7f c3 b8 88 b3 d8 51 ef 85 6d 0b ca 76 6d 5a 58 fa db ba b2 b2 a5 c9 34 4e 24 72 b2 83 38 90 Data Ascii: m}Ins]g_"O:,yU}R-gX2pc\%~BGnouo]F[<AN#3('dgsC\xW\3S5./{H$kcx0T=G!bcIWess\|~k+\|QmvmZX4N$r8
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: e8 1d cd aa ab bb 64 cb 82 d2 c6 88 a3 f7 6c 5a b0 e0 a9 19 35 35 2f 4a f0 86 31 29 06 9a 3d af d0 71 64 62 a1 23 f7 6c 5d 58 f6 31 55 ad f4 15 89 28 6f c8 8f ba 13 12 78 3f 8b 55 55 b5 bc bc a0 a4 20 c7 71 68 57 73 b0 3d 6b e6 aa 35 ef d9 bc a0 6c 76 91 eb 5c f1 f2 82 d2 c6 63 57 af f9 78 17 bd 93 39 63 1d 77 c9 b6 f9 a5 4d de c2 d2 a7 8c f2 aa eb 68 59 be e3 54 b4 fa fe 81 ac 68 ce 9d 00 33 5e ac ff fa 86 f9 f3 4e 29 70 dd 4b 3f 54 56 7a 60 cb 82 b2 bf 18 b4 c1 41 16 e6 11 59 8c 90 f0 7d de 3a 27 6c 43 8d a8 4a be 1b e1 80 ef 7f 7d f3 c2 d2 db 50 13 75 70 70 71 68 91 c4 27 e6 ac aa ff fd a6 05 a5 0f 16 bb ee 3b b7 2d 28 db 9b 80 3f 1b 68 8f 0a 67 14 b9 ce 31 3b 3d 7f d5 cc d5 75 df 4e b3 15 11 c9 1a e3 38 34 79 fe a1 bf 1f d5 08 d2 f1 bb 9a 56 53 fb d6 Data Ascii: dlZ55/J1)=qdb#l]X1U(ox?UU qhWs=k5lv\cWx9cwMhYTh3^N)pK?TVz`AY}:'lCJ}Puppqh';-(?hg1;=uN84yVS
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 1d 06 b3 ef 73 c5 9b 15 fd 08 20 a0 ff 29 bc b5 c1 ed 4e fc 00 26 7c 6a d7 ab 46 9c 1b c2 cd a9 fb 6e 2f be b1 0f a7 7c 23 c1 53 b0 0d 68 49 5b 5a 09 44 6b 3b f0 b9 0c f9 eb c3 74 e9 79 d3 cb 69 07 2e 0f f3 4c 4f d9 bf bb 17 36 1a e0 d7 40 02 50 e0 d5 0c e9 2e 01 fc 30 fd 76 e0 84 70 ff 2f 81 75 e1 39 b7 02 0f 01 1f 08 af 6d 76 98 e6 7f e8 2c d0 03 8a 9c 74 ed b5 a1 f8 ad 26 12 9f 04 e6 ad 80 47 5e f4 b4 30 45 2b e2 bc 0d c8 45 64 0c 12 99 8d 43 33 46 7f 2b e5 1f 3b 79 b0 ec 4a 65 d7 82 05 93 f7 2c 88 6d 13 95 8f 09 07 c5 0f 82 df f3 74 15 fd c5 9e 05 e5 8f 67 2e e1 c8 a2 af e2 57 5f 11 3b b7 be 22 76 47 7d 45 6c 59 7d 45 ec 8d 83 65 d7 10 d1 0e 7c b8 a4 b2 5a 80 0f 87 db a9 5c da 9f c2 0f ab 0a bc ef f6 09 7b 10 19 07 a0 a2 8f 8c fb 6c e3 db 7a 9b b7 c8 Data Ascii: s )N&\|jFn/\|#ShI[ZDk;tyi.LO6@P.0vp/u9mv,t&G^0E+EdC3F+;yJe,mtg.W_;"vG}ElY}Ee\|Z\{lz
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 6e 99 44 28 9e 93 c7 35 5d 57 65 ba c1 01 de 45 10 2e 52 44 10 a2 32 1d f8 62 4a 9a 03 c0 63 19 f2 5f 47 30 25 4f aa 28 15 11 fc 60 06 b2 d7 70 79 b8 a4 0b d6 87 ba c9 63 80 e7 52 b6 77 84 4b 12 0f 78 7e 40 ac eb 4c d0 91 a4 7a 1f 00 22 63 80 0f a0 fc 0b 74 45 b0 8f 2b 51 d9 07 fa cb 60 db b9 10 74 2a aa f7 87 65 4c 44 e4 32 54 07 2d 66 cd 28 b5 22 9c 00 2c 6c 3c 2e 76 7e f1 4b d5 87 7c c7 7b 16 c6 1e 40 83 9e 72 47 75 40 86 4c 1d 01 24 4a 2a ab d3 03 c1 37 75 91 ee 18 a0 6e f0 cd 39 32 e8 8b 00 e6 26 1f f3 6a 74 15 80 a8 34 a9 68 14 09 ba ea 53 5a ee 9b 30 dc 51 b8 ac a1 db 6a 72 53 a4 f8 3c dd db 38 6d 6c 87 87 d3 17 bb 1f e8 21 cd d7 ba 39 36 91 64 5b 52 67 06 23 66 ea 4a 20 b5 1a 59 4b d0 46 33 b2 10 5d 8d ca 5b 19 93 b5 4c ff 7d f7 6e 00 39 f1 9a 0f Data Ascii: nD(5]WeE.RD2bJc_G0%O(`pycRwKx~@Lz"ctE+Q`teLD2T-f(",l<.v~K\|{@rGu@L$J7un92&jt4hSZ0QjrS<8ml!96d[Rg#fJ YKF3][L}n9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50009	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:07 UTC	815	OUT	GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:07 UTC	886	IN	HTTP/1.1 200 OK Connection: close Content-Length: 140804 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="United_For_Wildlife_Carousel jpg.jpg" Content-Type: image/webp Etag: "Chuo9hirVNuJ+KcFDIRpUZg/oPkc+b8RBAHNiS9PE6o" Fastly-Io-Info: ifsz=174179 idim=1230x420 ifmt=jpeg ofsz=140804 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560837 Date: Thu, 18 Apr 2024 17:16:07 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120027-DFW, cache-pdk-kfty2130030-PDK X-Cache: HIT, HIT X-Cache-Hits: 10, 0 X-Timer: S1713460567.322586,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 52 49 46 46 fc 25 02 00 57 45 42 50 56 50 38 20 f0 25 02 00 30 4f 05 9d 01 2a ce 04 a4 01 3e 51 20 8c 44 23 a2 21 21 2e d9 fa 60 70 0a 09 4d 91 36 fb af f7 b8 b6 7e 37 42 1f df fb 90 50 d1 8f 27 04 95 7a 2c 3f 47 f2 a3 ce db a0 dd 5f ff 1b d3 e5 fc ef 75 9e cd fa 34 f2 c7 cf 8b cc 5e 7b 5e 5b bb a3 5d 3f 9b 7f cd f0 78 df f8 ff 2d fd a9 39 77 c4 ef 9e 7e 3f fc df fd 8f 8e bf ec 7f e8 ef 67 e7 3f ea f9 89 7b 57 f4 1f f9 ff ce fe 54 fc e5 ff bf eb 03 fb 77 fa 6f fd 3f e9 bf 7f fe 83 3f ad 7f 8c ff af fe 53 d7 b3 f7 37 df c7 ef 27 a9 1f da df fe 3f e9 3f e5 fc 4e 7f cc ff e5 fe d3 fe c7 c4 3f f0 df f0 ff 6d ff e8 fc 82 ff 75 ff 39 ff c3 da 9b ff 37 ff 5f fa 1f 09 7f de bf e9 ff f3 f7 19 fe 9d fe ef ff 97 b4 97 fe df de 3f 86 cf ef bf f8 ff 76 7f f8 7c 3d 7f Data Ascii: RIFF%WEBPVP8 %0O*>Q D#!!.`pM6~7BP'z,?G_u4^{^[]?x-9w~?g?{WTwo??S7'??N?mu97_?v\|=
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 66 bb 14 a6 33 e6 b8 2e e0 42 c2 bb 87 e4 45 9d 8b 50 4c e0 f5 70 60 38 0e ed 3a 74 6c d8 e6 59 75 22 86 e0 9b b3 db bb dd 5d 7a 9d e1 a0 a0 b7 9c 34 b7 da e0 a7 af c0 fe 62 c6 fd b3 56 82 19 63 0e cb 60 76 24 81 f1 12 48 2c c8 aa 03 c3 98 4b 66 51 04 cf 74 4e f9 61 6a d3 99 b1 9a 35 6f f0 56 ba a9 bd 45 96 65 7a 38 c3 7f c7 f6 ec 90 d7 ac 5c 34 81 32 a6 ee 42 a3 4d eb 8e 4d 7a 84 3a b1 1d 57 14 06 ce c6 b0 1f 7c 94 7f 84 5a ae 86 10 83 2d 08 22 49 43 26 85 87 d9 7f f3 2d 31 d9 eb 47 40 e2 ef de cb 79 f3 b6 4b b9 89 10 5f 14 8d 6b 64 9e fd 76 ec ab 2e 03 c1 1c c0 69 57 b1 46 38 67 eb c7 08 2e 80 c0 1b 15 de 8d df 87 0a 8e e9 83 12 a7 21 f4 07 22 3d 66 4d 3b 96 48 da 0e fb 91 7b cf c1 68 ad a0 ef 30 f7 fe 6b c2 4b a1 7f b8 ab 06 dd 78 7d 71 d2 8c 61 70 df Data Ascii: f3.BEPLp`8:tlYu"]z4bVc`v$H,KfQtNaj5oVEez8\42BMMz:W\|Z-"IC&-1G@yK_kdv.iWF8g.!"=fM;H{h0kKx}qap
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 8c 8e a9 d1 c6 27 23 de 57 27 5a 3b 34 1c ad e0 fb b9 f5 1d 99 14 f8 a0 38 74 7f a6 63 2f 7d 06 4e 03 3e 47 5d 65 21 45 58 a8 bd 82 a6 af f5 e6 93 73 a8 35 10 77 de 7b f4 01 b4 37 af 95 ce 1a b2 60 1f 96 af 9f 24 ba f6 1a 52 81 e9 c0 65 05 16 1b ef fc 6f 7b b2 82 29 86 15 8d dc f9 af da 25 a1 b5 07 11 b4 a3 4b 47 64 14 b1 f3 87 0d 8a 93 66 7a ad a2 9b d6 ea 99 1e a9 4f 5a 2a 6e 54 bb da 1a ed 4c 7d e6 ea de 78 ad 1a f2 8e cc 8f a1 e5 db a7 b8 37 21 7c c2 b6 24 e5 2e fa bb 00 c0 8f 44 30 a3 98 ec c9 cc 8d d6 9f 30 93 59 8c a5 8b db b7 d7 e1 0b e8 fa 69 05 10 16 f9 0a 6d 45 5a 0d 95 53 21 10 2f d2 34 ec b4 67 5c 38 63 dc fa 36 66 be 9c 0a ca 82 17 d9 01 47 e2 93 5b 8c 44 bb 5e b9 85 3d 9c e8 07 7d 80 42 58 e7 5a 50 d3 32 f9 ef 11 a0 11 63 e1 3a 65 91 2d 34 Data Ascii: '#W'Z;48tc/}N>G]e!EXs5w{7`$Reo{)%KGdfzOZ*nTL}x7!\|$.D00YimEZS!/4g\8c6fG[D^=}BXZP2c:e-4
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 94 1f 3c 7d ad 4b 1e 83 c7 f5 83 1c f3 e1 8a 96 6a 8e ab f3 55 86 5d b9 b2 9e 49 ee dd 2c 55 62 3e ef 99 f2 bb 7e 2b c9 c3 58 2b b5 89 ef 8c 80 c0 41 07 3a 92 db b8 82 e2 e2 31 ce 2b 2f bf 36 9f dd 96 fe 65 ce a2 79 0a 96 89 83 29 83 c3 6a fc 63 97 50 53 9b 0b 81 63 49 6c a7 14 52 b8 3a 0a 19 6c 2d 44 69 5f f5 05 60 98 b1 5e 8b 32 34 26 58 d3 f4 de eb 15 07 e2 7b ab 1d 4b 88 a9 13 36 80 fd 40 73 14 d9 bc 42 ba d0 cc b8 8b 3f 45 e5 1a d4 ab d0 dd 3b 92 2e c6 6b c1 8e d8 7a 6b d9 0f 5c e8 a1 ec ba a0 a6 4d 5d d7 21 b6 7e 05 3d 80 c9 76 02 f9 62 0c b5 62 c8 d4 4d 4d 6c d4 4b 78 b5 88 bf 17 d9 d1 2d f2 73 0b b6 3c 97 7a a4 86 d6 d5 d2 74 b5 bb 42 e2 78 f6 e8 c6 0e 4c ff 32 f4 e5 30 14 cb 5e 62 71 31 b1 31 b6 86 fa f9 27 16 9a 10 84 56 0c c1 ce 66 21 51 ae 8b Data Ascii: <}KjU]I,Ub>~+X+A:1+/6ey)jcPScIlR:l-Di_`^24&X{K6@sB?E;.kzk\M]!~=vbbMMlKx-s<ztBxL20^bq11'Vf!Q
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 9a a8 bb 3d a0 51 58 e7 11 98 c1 00 ce c2 c9 c2 0a eb 09 66 3e f8 00 e3 b0 b5 b8 3c 4b 15 cc 63 bd 06 03 e4 04 16 f7 ea 9c bc ce ca eb 2d 45 89 4b 8b 8f 13 dc db ba 6f 04 b6 42 11 e5 48 91 68 3b 9d ff 3b a8 d5 e1 bc 78 27 fb d1 ac ae 07 d2 c9 fd b2 74 ab 23 de 8a a2 8f 3f ba d7 34 4f 27 7f a8 42 f5 c6 bd 84 d0 61 4f 75 c8 bf 10 99 f7 04 eb d6 a8 42 12 6f 27 0e 15 4e df a2 19 7c e6 ea 05 1a 58 0f 98 93 28 21 9f 0e f5 21 ac e1 bd f0 ab af 10 07 03 dd 92 8a 6d 8f 8f e0 e7 7a 80 c3 56 3e cb ed 0c 09 d8 ca 67 8e 9c be b1 ff 2f 46 65 00 5c 1d 06 02 d5 6c 1e c5 b2 9e 92 08 a0 79 4d 89 4f a6 fc 94 cb c8 29 f4 f1 5c 81 13 57 19 64 a2 b1 bc 8b b7 ed 13 ce c9 69 35 4b c0 7d 9b 0e e7 07 4b f7 4d 32 b8 2b 0e 76 91 f8 16 d8 9c 18 b8 38 80 52 b1 f0 ab 75 d1 9e ba e5 e8 Data Ascii: =QXf><Kc-EKoBHh;;x't#?4O'BaOuBo'N\|X(!!mzV>g/Fe\lyMO)\Wdi5K}KM2+v8Ru
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 2b 7a 0b d1 c5 0e 4f cf 55 65 aa fa e1 8e 99 0d 8b 10 88 43 7b b1 6b 2e 69 7d 20 c4 06 cd 7a cf 0e 05 cc dd 5d 28 93 a0 4f ad 6a d9 55 44 2f 63 e4 3b 44 be 23 71 e3 02 01 8e 7f be de 28 f3 69 6c 2f ee c3 35 e1 53 a2 a9 38 d5 5c 82 ae ee 10 f8 3e 3c 91 a2 24 6f 62 04 3a a1 d7 cc bc 71 4e 08 b3 80 1a c9 31 2e f0 7d 3a 8e 5d ab 47 c9 ef bb ab 84 30 05 f9 f1 ca 10 54 b2 9c 21 bc ba c5 48 e5 23 34 b4 41 49 01 97 99 11 86 2d f2 10 a7 6a 18 52 c0 f5 a3 4b 8e 9a 44 8a 65 62 c4 45 f3 b5 fe 6a 8f 25 25 47 e2 69 91 2b 15 1f 06 9b d9 e5 d9 8b 0b 20 92 5c 98 3f d0 d5 01 59 c5 f5 7f 77 5c f0 4e 7e 05 2b 0c c7 77 29 b0 23 6f 7c b9 7d 26 38 bd 57 33 3d bc a5 0e 77 75 74 d0 81 b1 21 7a ab 09 8b bf 5b e8 2e c7 ee 55 77 47 cf c3 80 57 19 cb 67 06 23 bb e2 37 2b bf 48 c0 e7 Data Ascii: +zOUeC{k.i} z](OjUD/c;D#q(il/5S8\><$ob:qN1.}:]G0T!H#4AI-jRKDebEj%%Gi+ \?Yw\N~+w)#o\|}&8W3=wut!z[.UwGWg#7+H
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 0e 5a 98 52 71 e3 b6 1c 4c c1 80 38 ff 04 f5 ac 1a c0 f3 3b c4 61 5e cb e5 9a 93 32 4c 16 c2 61 8d ec 67 37 18 06 e3 dc 18 8c 89 04 4a a3 78 a0 7e ab 42 1f 91 7c 99 ab 60 98 d2 2b 74 4a fd 72 13 ed 2a 5c a9 2c ed 88 69 62 90 3f a0 0d fa 0a e8 16 06 c5 bb 3d 17 a2 a3 77 db 77 36 04 83 1c f1 2c e2 4e f3 ce d9 bf a7 93 b7 60 87 68 9f 5c 39 8e cc 4a d2 2a f6 f5 89 b6 95 67 d6 f4 8d 61 25 98 79 41 42 34 fa 8d ac 56 0b e4 3b e0 6f e5 ad 22 76 74 9a 9f 68 ea a6 34 da 3d a4 68 53 e0 39 46 65 1f 30 5b 05 84 9f 14 0e ed b3 93 84 cf ac e7 61 7d 1a 7b f9 44 d0 a0 84 9a f7 12 ab 5f 58 6c fc 0c dd 47 0f 3f 3c c2 d3 8a 7b 31 c5 ac a0 f8 41 25 28 88 4d b1 b9 8b 13 03 9d 49 67 13 be 7f 64 e9 e7 46 59 d0 14 5a ca d3 52 9d 54 82 41 82 ae 49 c8 6e 79 98 b0 b5 14 e2 77 47 bd Data Ascii: ZRqL8;a^2Lag7Jx~B\|`+tJr\,ib?=ww6,N`h\9Jga%yAB4V;o"vth4=hS9Fe0[a}{D_XlG?<{1A%(MIgdFYZRTAInywG
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 48 30 c1 73 7d e9 ad 3a 8b be c1 24 d2 1b 9d 53 80 bb 53 8b 08 87 8b 13 de 8c c5 71 b4 5b 4e 4b 9e 64 72 22 c1 a4 75 a2 57 32 2c cb a3 bc 49 64 19 86 ed c4 a0 ca 76 0a cd 0b 2b 1b 6a 43 5d 53 94 ca d0 0f 46 d2 23 55 db 84 03 f6 b5 f9 ff d8 07 ed a8 08 04 a8 17 a0 6e b2 d5 69 a5 f3 04 99 7e 16 54 67 35 b5 90 13 72 45 fc 32 ce e0 f9 c8 a0 6d ba d2 f1 21 6e 03 27 34 79 a6 f7 71 73 e0 59 19 20 81 f9 fd 03 03 15 24 3f b3 18 53 c5 53 66 aa 71 89 47 6a cf 04 1f 65 83 a6 90 5b c3 b7 9c a7 2e 78 1a 1b 41 91 ee 36 83 4a 60 ce 06 0e f0 3c 35 5c ee f8 d5 27 74 57 24 1e a4 87 fc c7 d4 09 a4 c6 e1 60 c2 0c d4 51 df 6e da 98 b5 77 c3 80 f2 81 55 88 47 6c a7 30 31 60 22 bf 4b 72 42 3e 9d a5 dd 94 0b b6 fc 74 02 ec e7 ba 5c 5d 99 7e 87 f3 ba b4 93 8a 82 e9 89 25 f3 07 dc Data Ascii: H0s}:$SSq[NKdr"uW2,Idv+jC]SF#Uni~Tg5rE2m!n'4yqsY $?SSfqGje[.xA6J`<5\'tW$`QnwUGl01`"KrB>t\]~%
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 0d 27 85 bd e2 88 5a 19 b7 bb 66 01 fc bc 42 83 30 22 80 45 1d 94 03 1f 2c a6 d9 14 4d 89 13 59 41 e9 82 89 e8 ad 36 1c 67 8c 5d 26 ee 78 3b cb e4 11 3c b0 e9 b6 34 27 3c 62 e3 20 8e 2b 65 5e 3e 3d e6 44 e9 4a 31 20 20 a0 1c b7 48 66 84 5a a1 dc a0 13 cc 74 5a ee 08 9a 52 10 0b 4d 44 05 00 ce a5 78 ee 2c 16 36 27 de 3d df a7 f8 0c 66 98 8f c8 07 ee ed 3c 67 8f 17 fb f7 ec 07 04 17 70 93 b6 58 18 c5 36 7f 06 0a 35 d9 f6 5d 40 de ea c5 9c 14 7d ef 19 35 9a f0 1c b8 cc e4 cc 21 6b 0a ca 7f 54 dd 42 5c 00 14 ba 98 1e 2b 48 09 1c 25 ef 7a 71 c8 82 0d bc e3 5b 05 d5 54 aa 36 ca b8 8a 0e 89 bd 08 13 79 ae 0d 08 83 c6 43 18 24 dd 32 ed 8b b0 22 a6 07 d4 c3 fc f5 47 e0 e4 33 f9 11 40 1a 55 f9 2f bb 3e 1b be ce d8 96 67 61 cc d7 fc d9 c8 03 a5 4b 20 0d 2c a9 c9 98 Data Ascii: 'ZfB0"E,MYA6g]&x;<4'<b +e^>=DJ1 HfZtZRMDx,6'=f<gpX65]@}5!kTB\+H%zq[T6yC$2"G3@U/>gaK ,
2024-04-18 17:16:07 UTC	1379	IN	Data Raw: 21 74 77 61 92 c8 2d 56 44 d7 5d 3d 7e a3 c1 b2 e3 56 62 a1 b3 24 43 99 72 2d 2c 12 aa 85 da 58 b6 6b 2e 47 7f 45 e9 82 c9 8d 63 15 cd 7b e4 4c e2 12 55 3a 2f c0 a6 12 d3 3b 24 67 26 44 69 12 00 41 07 3b e4 77 d9 e4 c2 ab 5e 6c 78 19 c6 00 00 f5 98 40 9b 8e 21 2c 20 6e e7 d3 10 40 2a bd 70 07 8d 2a e9 9d c7 99 64 80 74 02 cd 36 8f af 00 b7 53 c4 73 ab f7 28 87 48 c8 f4 0b 88 87 4b 8c 3d a5 40 62 f2 76 33 22 6e d4 06 a8 96 8d 83 d9 c6 92 2c 80 0e 79 5b 2f 80 eb ce 25 06 02 3d bb 42 b0 44 6c 71 74 29 85 ad 2a 2e ce 5f d1 de ac a4 70 1c 04 c0 1b 2e 7a 4e a1 c5 d9 e8 e0 8a 2d 82 92 80 6b 2c 50 02 0c fc 56 1b 36 3e 2e a4 5f 21 ff f0 5d 41 ef 4a 1f 5b e4 44 f2 0e 32 da f9 2f 46 2b fa b1 8f 50 4d c5 fc 39 8c fe d3 79 2f cd 6e 03 e3 d0 c7 67 7d e4 15 14 02 97 6c Data Ascii: !twa-VD]=~Vb$Cr-,Xk.GEc{LU:/;$g&DiA;w^lx@!, n@pdt6Ss(HK=@bv3"n,y[/%=BDlqt)*._p.zN-k,PV6>._!]AJ[D2/F+PM9y/ng}l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50012	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:07 UTC	595	OUT	GET /ajax/libs/algoliasearch/3.33.0/algoliasearch.min.js?v=638484963592761859 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:07 UTC	956	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03cfd-110a8" Last-Modified: Mon, 04 May 2020 16:04:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 24977 Expires: Tue, 08 Apr 2025 17:16:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T6Ed06qZGk6roCJdFUxUHIYuBIe9AglurwDWAR%2BgV%2FPSnhGt7GHtpwf8g9vdhduIFNj2DQA3f9AmPA4Bqu30ue4zkXDrevrN87wxdCNOQtJg01sRNeofkewMdFl1SzK6vodJQSNd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664d021e5b071d-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:07 UTC	413	IN	Data Raw: 33 39 39 38 0d 0a 2f 2a 21 20 61 6c 67 6f 6c 69 61 73 65 61 72 63 68 20 33 2e 33 33 2e 30 20 7c 20 c2 a9 20 32 30 31 34 2c 20 32 30 31 35 20 41 6c 67 6f 6c 69 61 20 53 41 53 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 6c 67 6f 6c 69 61 2f 61 6c 67 6f 6c 69 61 73 65 61 72 63 68 2d 63 6c 69 65 6e 74 2d 6a 73 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 74 3d 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 28 74 3d 73 65 6c 66 29 2c 74 2e 41 4c 47 4f 4c 49 41 5f 4d 49 47 52 41 54 49 4f 4e 5f 4c 41 59 45 52 3d 65 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: 3998/! algoliasearch 3.33.0 \| 2014, 2015 Algolia SAS \| github.com/algolia/algoliasearch-client-js /!function(e){var t;"undefined"!=typeof window?t=window:"undefined"!=typeof self&&(t=self),t.ALGOLIA_MIGRATION_LAYER=e()}(function(){return function
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 64 20 6d 6f 64 75 6c 65 20 27 22 2b 73 2b 22 27 22 29 3b 74 68 72 6f 77 20 75 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 75 7d 76 61 72 20 6c 3d 72 5b 73 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 73 5d 5b 30 5d 2e 63 61 6c 6c 28 6c 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 5b 73 5d 5b 31 5d 5b 65 5d 3b 72 65 74 75 72 6e 20 6e 28 72 3f 72 3a 65 29 7d 2c 6c 2c 6c 2e 65 78 70 6f 72 74 73 2c 65 2c 74 2c 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 5b 73 5d 2e 65 78 70 6f 72 74 73 7d 66 6f 72 28 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 28 6f Data Ascii: d module '"+s+"'");throw u.code="MODULE_NOT_FOUND",u}var l=r[s]={exports:{}};t[s][0].call(l.exports,function(e){var r=t[s][1][e];return n(r?r:e)},l,l.exports,e,t,r,o)}return r[s].exports}for(var i="function"==typeof require&&require,s=0;s<o.length;s++)n(o
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 76 61 72 20 72 3d 65 28 31 29 2c 6f 3d 22 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 61 6c 67 6f 6c 69 61 73 65 61 72 63 68 2f 32 2f 22 2b 74 2b 22 2e 6d 69 6e 2e 6a 73 22 2c 69 3d 22 2d 2d 20 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 20 60 6c 61 74 65 73 74 60 20 77 61 72 6e 69 6e 67 20 2d 2d 5c 6e 57 61 72 6e 69 6e 67 2c 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 74 68 65 20 60 6c 61 74 65 73 74 60 20 76 65 72 73 69 6f 6e 20 73 74 72 69 6e 67 20 66 72 6f 6d 20 6a 73 44 65 6c 69 76 72 20 74 6f 20 6c 6f 61 64 20 74 68 65 20 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 20 6c 69 62 72 61 72 79 2e 5c 6e 55 73 69 6e 67 20 60 6c 61 74 65 73 74 60 20 Data Ascii: (e,t,r){"use strict";function o(t){var r=e(1),o="//cdn.jsdelivr.net/algoliasearch/2/"+t+".min.js",i="-- AlgoliaSearch `latest` warning --\nWarning, you are using the `latest` version string from jsDelivr to load the AlgoliaSearch library.\nUsing `latest`
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 72 63 68 2d 63 6c 69 65 6e 74 2d 6a 73 2f 77 69 6b 69 2f 4d 69 67 72 61 74 69 6f 6e 2d 67 75 69 64 65 2d 66 72 6f 6d 2d 32 2e 78 2e 78 2d 74 6f 2d 33 2e 78 2e 78 5c 6e 2d 2d 20 2f 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 20 56 32 20 3d 3e 20 56 33 20 65 72 72 6f 72 20 2d 2d 22 3b 77 69 6e 64 6f 77 2e 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 77 69 6e 64 6f 77 2e 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 48 65 6c 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 77 69 6e 64 6f 77 2e 41 6c 67 6f 6c 69 61 45 78 70 6c 61 69 6e 52 65 73 75 6c 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 Data Ascii: rch-client-js/wiki/Migration-guide-from-2.x.x-to-3.x.x\n-- /AlgoliaSearch V2 => V3 error --";window.AlgoliaSearch=function(){throw new Error(e)},window.AlgoliaSearchHelper=function(){throw new Error(e)},window.AlgoliaExplainResults=function(){throw new Er
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 65 6d 65 6e 74 2e 73 74 79 6c 65 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 66 69 72 65 62 75 67 7c 7c 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 78 63 65 70 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 74 61 62 6c 65 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 74 6f 4c Data Ascii: ement.style&&document.documentElement.style.WebkitAppearance\|\|"undefined"!=typeof window&&window.console&&(window.console.firebug\|\|window.console.exception&&window.console.table)\|\|"undefined"!=typeof navigator&&navigator.userAgent&&navigator.userAgent.toL
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 72 73 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 5b 55 6e 65 78 70 65 63 74 65 64 4a 53 4f 4e 50 61 72 73 65 45 72 72 6f 72 5d 3a 20 22 2b 74 2e 6d 65 73 73 61 67 65 7d 7d 2c 72 2e 65 6e 61 62 6c 65 28 63 28 29 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 28 31 32 29 29 7d 2c 7b 31 32 3a 31 32 2c 32 3a 32 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 2c 6f 3d 30 3b 66 6f 72 28 74 20 69 6e 20 65 29 6f 3d 28 6f 3c 3c 35 29 2d 6f 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 74 29 2c 6f 7c 3d 30 3b 72 65 74 75 72 6e 20 72 2e 63 6f 6c 6f 72 73 5b 4d 61 Data Ascii: rs.j=function(e){try{return JSON.stringify(e)}catch(t){return"[UnexpectedJSONParseError]: "+t.message}},r.enable(c())}).call(this,e(12))},{12:12,2:2}],2:[function(e,t,r){function o(e){var t,o=0;for(t in e)o=(o<<5)-o+e.charCodeAt(t),o\|=0;return r.colors[Ma
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 2e 73 74 61 63 6b 7c 7c 65 2e 6d 65 73 73 61 67 65 3a 65 7d 72 3d 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 65 62 75 67 3d 6e 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6e 2c 72 2e 63 6f 65 72 63 65 3d 63 2c 72 2e 64 69 73 61 62 6c 65 3d 73 2c 72 2e 65 6e 61 62 6c 65 3d 69 2c 72 2e 65 6e 61 62 6c 65 64 3d 61 2c 72 2e 68 75 6d 61 6e 69 7a 65 3d 65 28 39 29 2c 72 2e 6e 61 6d 65 73 3d 5b 5d 2c 72 2e 73 6b 69 70 73 3d 5b 5d 2c 72 2e 66 6f 72 6d 61 74 74 65 72 73 3d 7b 7d 3b 76 61 72 20 75 7d 2c 7b 39 3a 39 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6f 26 26 22 75 6e 64 Data Ascii: nceof Error?e.stack\|\|e.message:e}r=t.exports=n.debug=n["default"]=n,r.coerce=c,r.disable=s,r.enable=i,r.enabled=a,r.humanize=e(9),r.names=[],r.skips=[],r.formatters={};var u},{9:9}],3:[function(t,r,o){(function(n,i){!function(t,n){"object"==typeof o&&"und
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 6e 65 77 20 74 28 6d 29 3b 72 65 74 75 72 6e 20 52 28 72 2c 65 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 59 6f 75 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 61 20 70 72 6f 6d 69 73 65 20 77 69 74 68 20 69 74 73 65 6c 66 22 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 73 20 63 61 6c 6c 62 61 63 6b 20 63 61 6e 6e 6f 74 20 72 65 74 75 72 6e 20 74 68 61 74 20 73 61 6d 65 20 70 72 6f 6d 69 73 65 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 Data Ascii: &&e.constructor===t)return e;var r=new t(m);return R(r,e),r}function m(){}function v(){return new TypeError("You cannot resolve a promise with itself")}function g(){return new TypeError("A promises callback cannot return that same promise.")}function b(e)
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 74 5b 73 2b 72 5d 2c 6f 3f 45 28 72 2c 6f 2c 6e 2c 69 29 3a 6e 28 69 29 3b 65 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2e 6c 65 6e 67 74 68 3d 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 71 28 65 2c 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 20 75 65 2e 65 72 72 6f 72 3d 72 2c 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 72 28 6f 29 2c 73 3d 76 6f 69 64 20 30 2c 61 3d 76 6f 69 64 20 30 2c 63 3d 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 3b 69 66 28 69 29 7b 69 66 28 73 3d 71 28 6f 2c 6e 29 2c 73 3d 3d 3d 75 65 3f 28 75 3d 21 30 2c 61 3d 73 2e 65 72 72 6f 72 2c 73 2e 65 72 72 Data Ascii: t[s+r],o?E(r,o,n,i):n(i);e._subscribers.length=0}}function O(){this.error=null}function q(e,t){try{return e(t)}catch(r){return ue.error=r,ue}}function E(e,t,o,n){var i=r(o),s=void 0,a=void 0,c=void 0,u=void 0;if(i){if(s=q(o,n),s===ue?(u=!0,a=s.error,s.err
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 69 73 65 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 27 50 72 6f 6d 69 73 65 27 3a 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 27 6e 65 77 27 20 6f 70 65 72 61 74 6f 72 2c 20 74 68 69 73 20 6f 62 6a 65 63 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 63 61 6e 6e 6f 74 20 62 65 20 63 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 74 68 69 73 5b 6e 65 5d 3d 50 28 29 2c 74 68 69 73 2e 5f 72 65 73 75 6c 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 5f 73 75 62 73 63 72 69 62 65 72 73 3d 5b 5d 2c 6d 21 3d Data Ascii: ise constructor")}function J(){throw new TypeError("Failed to construct 'Promise': Please use the 'new' operator, this object constructor cannot be called as a function.")}function B(e){this[ne]=P(),this._result=this._state=void 0,this._subscribers=[],m!=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50010	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:07 UTC	596	OUT	GET /ajax/libs/autocomplete.js/0.37.1/autocomplete.min.js?v=638484963592761859 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:07 UTC	965	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03d61-df7e" Last-Modified: Mon, 04 May 2020 16:05:53 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 26755 Expires: Tue, 08 Apr 2025 17:16:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I68KsEW7%2F0E1TCKlK2atTttUxcuUzGdG%2FX2VJPkfL27sKoXnvUVFMCKG%2Fb2jUE7DvD%2B6%2FgwTGVrObMK9iQkO17CCDIf19cuX9V3TwDZ%2Bg6cBwv%2BUAnrwG6FwldTUWjhNOTVvcUr5"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664d021890451a-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:07 UTC	404	IN	Data Raw: 37 62 65 61 0d 0a 2f 2a 21 0a 20 2a 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 20 30 2e 33 37 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 61 6c 67 6f 6c 69 61 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 20 41 6c 67 6f 6c 69 61 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 Data Ascii: 7bea/! autocomplete.js 0.37.1 * https://github.com/algolia/autocomplete.js * Copyright 2020 Algolia, Inc. and other contributors; Licensed MIT */!function(a,b){"object"==typeof exports&&"object"==typeof module?module.exports=b():"function"==type
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 62 28 64 29 7b 69 66 28 63 5b 64 5d 29 72 65 74 75 72 6e 20 63 5b 64 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 63 5b 64 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 64 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 61 5b 64 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 62 29 2c 65 2e 6c 6f 61 64 65 64 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 63 3d 7b 7d 3b 72 65 74 75 72 6e 20 62 2e 6d 3d 61 2c 62 2e 63 3d 63 2c 62 2e 70 3d 22 22 2c 62 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e Data Ascii: b(d){if(c[d])return c[d].exports;var e=c[d]={exports:{},id:d,loaded:!1};return a[d].call(e.exports,e,e.exports,b),e.loaded=!0,e.exports}var c={};return b.m=a,b.c=c,b.p="",b(0)}([function(a,b,c){"use strict";a.exports=c(1)},function(a,b,c){"use strict";fun
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 3b 64 2e 73 6f 75 72 63 65 73 3d 68 2e 73 6f 75 72 63 65 73 2c 64 2e 65 73 63 61 70 65 48 69 67 68 6c 69 67 68 74 65 64 53 74 72 69 6e 67 3d 66 2e 65 73 63 61 70 65 48 69 67 68 6c 69 67 68 74 65 64 53 74 72 69 6e 67 3b 76 61 72 20 6a 3d 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 69 6e 20 77 69 6e 64 6f 77 2c 6b 3d 77 69 6e 64 6f 77 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3b 64 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 3f 77 69 6e 64 6f 77 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 6b 3a 64 65 6c 65 74 65 20 77 69 6e 64 6f 77 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 64 7d 2c 61 2e 65 78 70 6f 72 74 73 3d 64 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 21 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 65 Data Ascii: ;d.sources=h.sources,d.escapeHighlightedString=f.escapeHighlightedString;var j="autocomplete"in window,k=window.autocomplete;d.noConflict=function(){return j?window.autocomplete=k:delete window.autocomplete,d},a.exports=d},function(a,b){!function(b,c){a.e
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 6e 22 69 6e 20 61 3f 47 2e 63 61 6c 6c 28 61 2e 63 68 69 6c 64 72 65 6e 29 3a 7a 2e 6d 61 70 28 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 61 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 61 3f 61 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 63 3d 30 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 61 5b 63 5d 3b 74 68 69 73 2e 6c 65 6e 67 74 68 3d 64 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 62 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 2c 63 29 7b 66 6f 72 28 79 20 69 6e 20 62 29 63 26 26 28 67 28 62 5b 79 5d 29 7c 7c 24 28 62 5b 79 5d 29 29 3f 28 67 28 62 5b 79 5d 29 26 26 21 67 28 61 5b 79 5d 29 26 Data Ascii: n"in a?G.call(a.children):z.map(a.childNodes,function(a){if(1==a.nodeType)return a})}function p(a,b){var c,d=a?a.length:0;for(c=0;c<d;c++)this[c]=a[c];this.length=d,this.selector=b\|\|""}function q(a,b,c){for(y in b)c&&(g(b[y])\|\|$(b[y]))?(g(b[y])&&!g(a[y])&
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 3d 7b 7d 2c 57 3d 56 2e 74 6f 53 74 72 69 6e 67 2c 58 3d 7b 7d 2c 59 3d 48 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 5a 3d 7b 74 61 62 69 6e 64 65 78 3a 22 74 61 62 49 6e 64 65 78 22 2c 72 65 61 64 6f 6e 6c 79 3a 22 72 65 61 64 4f 6e 6c 79 22 2c 66 6f 72 3a 22 68 74 6d 6c 46 6f 72 22 2c 63 6c 61 73 73 3a 22 63 6c 61 73 73 4e 61 6d 65 22 2c 6d 61 78 6c 65 6e 67 74 68 3a 22 6d 61 78 4c 65 6e 67 74 68 22 2c 63 65 6c 6c 73 70 61 63 69 6e 67 3a 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 63 65 6c 6c 70 61 64 64 69 6e 67 3a 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 72 6f 77 73 70 61 6e 3a 22 72 6f 77 53 70 61 6e 22 2c 63 6f 6c 73 70 61 6e 3a 22 63 6f 6c 53 70 61 6e 22 2c 75 73 65 6d 61 70 3a 22 75 73 65 4d 61 70 22 2c 66 72 61 6d 65 62 6f Data Ascii: ={},W=V.toString,X={},Y=H.createElement("div"),Z={tabindex:"tabIndex",readonly:"readOnly",for:"htmlFor",class:"className",maxlength:"maxLength",cellspacing:"cellSpacing",cellpadding:"cellPadding",rowspan:"rowSpan",colspan:"colSpan",usemap:"useMap",framebo
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 29 69 66 28 61 3d 61 2e 74 72 69 6d 28 29 2c 22 3c 22 3d 3d 61 5b 30 5d 26 26 4c 2e 74 65 73 74 28 61 29 29 64 3d 58 2e 66 72 61 67 6d 65 6e 74 28 61 2c 52 65 67 45 78 70 2e 24 31 2c 62 29 2c 61 3d 6e 75 6c 6c 3b 65 6c 73 65 7b 69 66 28 62 21 3d 3d 78 29 72 65 74 75 72 6e 20 7a 28 62 29 2e 66 69 6e 64 28 61 29 3b 64 3d 58 2e 71 73 61 28 48 2c 61 29 7d 65 6c 73 65 7b 69 66 28 63 28 61 29 29 72 65 74 75 72 6e 20 7a 28 48 29 2e 72 65 61 64 79 28 61 29 3b 69 66 28 58 2e 69 73 5a 28 61 29 29 72 65 74 75 72 6e 20 61 3b 69 66 28 24 28 61 29 29 64 3d 69 28 61 29 3b 65 6c 73 65 20 69 66 28 66 28 61 29 29 64 3d 5b 61 5d 2c 61 3d 6e 75 6c 6c 3b 65 6c 73 65 20 69 66 28 4c 2e 74 65 73 74 28 61 29 29 64 3d 58 2e 66 72 61 Data Ascii: tring"==typeof a)if(a=a.trim(),"<"==a[0]&&L.test(a))d=X.fragment(a,RegExp.$1,b),a=null;else{if(b!==x)return z(b).find(a);d=X.qsa(H,a)}else{if(c(a))return z(H).ready(a);if(X.isZ(a))return a;if($(a))d=i(a);else if(f(a))d=[a],a=null;else if(L.test(a))d=X.fra
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 74 6f 74 79 70 65 2e 74 72 69 6d 2e 63 61 6c 6c 28 61 29 7d 2c 7a 2e 75 75 69 64 3d 30 2c 7a 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 7a 2e 65 78 70 72 3d 7b 7d 2c 7a 2e 6e 6f 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 7a 2e 6d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 5b 5d 3b 69 66 28 68 28 61 29 29 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 6e 75 6c 6c 21 3d 28 63 3d 62 28 61 5b 64 5d 2c 64 29 29 26 26 66 2e 70 75 73 68 28 63 29 3b 65 6c 73 65 20 66 6f 72 28 65 20 69 6e 20 61 29 6e 75 6c 6c 21 3d 28 63 3d 62 28 61 5b 65 5d 2c 65 29 29 26 26 66 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 6a 28 66 29 7d 2c 7a 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 Data Ascii: totype.trim.call(a)},z.uuid=0,z.support={},z.expr={},z.noop=function(){},z.map=function(a,b){var c,d,e,f=[];if(h(a))for(d=0;d<a.length;d++)null!=(c=b(a[d],d))&&f.push(c);else for(e in a)null!=(c=b(a[e],e))&&f.push(c);return j(f)},z.each=function(a,b){var
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 28 74 68 69 73 29 7d 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 44 2e 65 76 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 21 3d 3d 21 31 7d 29 2c 74 68 69 73 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 61 29 3f 74 68 69 73 2e 6e 6f 74 28 74 68 69 73 2e 6e 6f 74 28 61 29 29 3a 7a 28 46 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 58 2e 6d 61 74 63 68 65 73 28 62 2c 61 29 7d 29 29 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 7a 28 43 28 74 68 69 73 2e 63 6f 6e 63 61 74 28 7a 28 61 2c 62 29 29 29 29 Data Ascii: (this)})},each:function(a){return D.every.call(this,function(b,c){return a.call(b,c,b)!==!1}),this},filter:function(a){return c(a)?this.not(this.not(a)):z(F.call(this,function(b){return X.matches(b,a)}))},add:function(a,b){return z(C(this.concat(z(a,b))))
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 26 26 21 65 28 61 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 29 72 65 74 75 72 6e 20 62 2e 70 75 73 68 28 61 29 2c 61 7d 29 3b 72 65 74 75 72 6e 20 72 28 62 2c 61 29 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 28 43 28 74 68 69 73 2e 70 6c 75 63 6b 28 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 29 2c 61 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 29 7d 29 2c 61 29 7d 2c 63 6f 6e 74 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 Data Ascii: &&!e(a)&&b.indexOf(a)<0)return b.push(a),a});return r(b,a)},parent:function(a){return r(C(this.pluck("parentNode")),a)},children:function(a){return r(this.map(function(){return o(this)}),a)},contents:function(){return this.map(function(){return this.conte
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 7d 29 7d 2c 68 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 29 7d 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 7a 28 74 68 69 73 29 3b 28 61 3d 3d 3d 78 3f 22 6e 6f 6e 65 22 3d 3d 62 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3a 61 29 3f 62 2e 73 68 6f 77 28 29 3a 62 2e 68 69 64 65 28 29 7d 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e Data Ascii: ction(){return this.map(function(){return this.cloneNode(!0)})},hide:function(){return this.css("display","none")},toggle:function(a){return this.each(function(){var b=z(this);(a===x?"none"==b.css("display"):a)?b.show():b.hide()})},prev:function(a){return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50011	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:07 UTC	574	OUT	GET /ajax/libs/vue/2.2.6/vue.min.js?v=638484963592761859 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:07 UTC	941	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:07 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb0402c-12b7a" Last-Modified: Mon, 04 May 2020 16:17:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Tue, 08 Apr 2025 17:16:07 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jux3EyQULOQLN7Ug05LiSJtnlh10sSg3k6Yw41ptjh8rwV7gWst0YSNwCw4mNipgAwbDgEMrHXqKqfdl5uVvTStIoWftfDu5D0XMdrFoo7lM37pPuBx5yLj0QIOUM3zUDqNjttf9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664d021a8c4551-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:07 UTC	428	IN	Data Raw: 33 38 62 62 0d 0a 2f 2a 21 0a 20 2a 20 56 75 65 2e 6a 73 20 76 32 2e 32 2e 36 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 31 37 20 45 76 61 6e 20 59 6f 75 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 56 75 65 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 Data Ascii: 38bb/! Vue.js v2.2.6 * (c) 2014-2017 Evan You * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.Vue=t()}(this,function(){"
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 72 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 2c 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 72 5b 69 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 5b 65 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 3b 69 66 28 6e 3e 2d 31 29 72 65 74 75 72 6e 20 65 2e 73 70 6c 69 63 65 28 6e 2c 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 69 2e 63 61 6c 6c 28 65 2c 74 Data Ascii: ar n=Object.create(null),r=e.split(","),i=0;i<r.length;i++)n[r[i]]=!0;return t?function(e){return n[e.toLowerCase()]}:function(e){return n[e]}}function r(e,t){if(e.length){var n=e.indexOf(t);if(n>-1)return e.splice(n,1)}}function i(e,t){return $i.call(e,t
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 65 3d 65 5b 74 5b 6e 5d 5d 7d 72 65 74 75 72 6e 20 65 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 72 65 74 75 72 6e 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 71 69 2e 74 61 72 67 65 74 26 26 57 69 2e 70 75 73 68 28 71 69 2e 74 61 72 67 65 74 29 2c 71 69 2e 74 61 72 67 65 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 71 69 2e 74 61 72 67 65 74 3d 57 69 2e 70 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 6e Data Ascii: ;n<t.length;n++){if(!e)return;e=e[t[n]]}return e}}}function b(e){return/native code/.test(e.toString())}function $(e){qi.target&&Wi.push(qi.target),qi.target=e}function w(){qi.target=Wi.pop()}function x(e,t){e.__proto__=t}function C(e,t,n){for(var r=0,i=n
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 26 26 74 2e 5f 5f 6f 62 5f 5f 2e 64 65 70 2e 64 65 70 65 6e 64 28 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 26 26 53 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 6f 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 73 3d 30 3b 73 3c 61 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 61 5b 73 5d 2c 72 3d 65 5b 6e 5d 2c 6f 3d 74 5b 6e 5d 2c 69 28 65 2c 6e 29 3f 66 28 72 29 26 26 66 28 6f 29 26 26 45 28 72 2c 6f 29 3a 4f 28 65 2c 6e 2c 6f 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 65 3f 65 2e 63 6f 6e 63 61 74 28 74 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 3a 5b 74 5d 3a Data Ascii: &&t.__ob__.dep.depend(),Array.isArray(t)&&S(t)}function E(e,t){if(!t)return e;for(var n,r,o,a=Object.keys(t),s=0;s<a.length;s++)n=a[s],r=e[n],o=t[n],i(e,n)?f(r)&&f(o)&&E(r,o):O(e,n,o);return e}function j(e,t){return t?e?e.concat(t):Array.isArray(t)?t:[t]:
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 51 69 2e 73 68 6f 75 6c 64 43 6f 6e 76 65 72 74 3d 63 7d 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 6e 29 7b 69 66 28 69 28 74 2c 22 64 65 66 61 75 6c 74 22 29 29 7b 76 61 72 20 72 3d 74 2e 64 65 66 61 75 6c 74 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 24 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 44 61 74 61 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 24 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 44 61 74 61 5b 6e 5d 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 5f 70 72 6f 70 73 5b 6e 5d 3f 65 2e 5f 70 72 6f 70 73 5b 6e 5d 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 22 46 75 6e 63 74 69 6f 6e 22 21 3d 3d 46 28 74 2e 74 79 70 65 29 3f 72 2e 63 61 6c 6c 28 65 29 3a 72 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 76 61 72 Data Ascii: Qi.shouldConvert=c}return s}function R(e,t,n){if(i(t,"default")){var r=t.default;return e&&e.$options.propsData&&void 0===e.$options.propsData[n]&&void 0!==e._props[n]?e._props[n]:"function"==typeof r&&"Function"!==F(t.type)?r.call(e):r}}function F(e){var
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 5b 61 2c 69 5d 29 3a 6f 3d 4a 28 5b 69 5d 29 2c 6f 2e 6d 65 72 67 65 64 3d 21 30 2c 65 5b 74 5d 3d 6f 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 5b 74 5d 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 65 29 3f 5b 42 28 65 29 5d 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 47 28 65 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 61 3d 5b 5d 3b 66 6f 72 28 6e 3d 30 3b 6e 3c 65 2e Data Ascii: [a,i]):o=J([i]),o.merged=!0,e[t]=o}function W(e){for(var t=0;t<e.length;t++)if(Array.isArray(e[t]))return Array.prototype.concat.apply([],e);return e}function Z(e){return o(e)?[B(e)]:Array.isArray(e)?G(e):void 0}function G(e,t){var n,r,i,a=[];for(n=0;n<e.
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 3b 29 6e 3d 6e 2e 24 70 61 72 65 6e 74 3b 6e 2e 24 63 68 69 6c 64 72 65 6e 2e 70 75 73 68 28 65 29 7d 65 2e 24 70 61 72 65 6e 74 3d 6e 2c 65 2e 24 72 6f 6f 74 3d 6e 3f 6e 2e 24 72 6f 6f 74 3a 65 2c 65 2e 24 63 68 69 6c 64 72 65 6e 3d 5b 5d 2c 65 2e 24 72 65 66 73 3d 7b 7d 2c 65 2e 5f 77 61 74 63 68 65 72 3d 6e 75 6c 6c 2c 65 2e 5f 69 6e 61 63 74 69 76 65 3d 6e 75 6c 6c 2c 65 2e 5f 64 69 72 65 63 74 49 6e 61 63 74 69 76 65 3d 21 31 2c 65 2e 5f 69 73 4d 6f 75 6e 74 65 64 3d 21 31 2c 65 2e 5f 69 73 44 65 73 74 72 6f 79 65 64 3d 21 31 2c 65 2e 5f 69 73 42 65 69 6e 67 44 65 73 74 72 6f 79 65 64 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 65 2c 74 2c 6e 29 7b 65 2e 24 65 6c 3d 74 2c 65 2e 24 6f 70 74 69 6f 6e 73 2e 72 65 6e 64 65 72 7c 7c 28 65 2e 24 6f 70 Data Ascii: ;)n=n.$parent;n.$children.push(e)}e.$parent=n,e.$root=n?n.$root:e,e.$children=[],e.$refs={},e._watcher=null,e._inactive=null,e._directInactive=!1,e._isMounted=!1,e._isDestroyed=!1,e._isBeingDestroyed=!1}function ae(e,t,n){e.$el=t,e.$options.render\|\|(e.$op
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 72 65 6e 5b 6e 5d 29 3b 66 65 28 65 2c 22 64 65 61 63 74 69 76 61 74 65 64 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 24 6f 70 74 69 6f 6e 73 5b 74 5d 3b 69 66 28 6e 29 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 6e 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 74 72 79 7b 6e 5b 72 5d 2e 63 61 6c 6c 28 65 29 7d 63 61 74 63 68 28 6e 29 7b 55 28 6e 2c 65 2c 74 2b 22 20 68 6f 6f 6b 22 29 7d 65 2e 5f 68 61 73 48 6f 6f 6b 45 76 65 6e 74 26 26 65 2e 24 65 6d 69 74 28 22 68 6f 6f 6b 3a 22 2b 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 29 7b 63 6f 2e 6c 65 6e 67 74 68 3d 30 2c 75 6f 3d 7b 7d 2c 6c 6f 3d 66 6f 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 29 7b 66 6f 3d 21 30 3b 76 61 72 20 65 2c 74 2c 6e 3b 66 6f 72 Data Ascii: ren[n]);fe(e,"deactivated")}}function fe(e,t){var n=e.$options[t];if(n)for(var r=0,i=n.length;r<i;r++)try{n[r].call(e)}catch(n){U(n,e,t+" hook")}e._hasHookEvent&&e.$emit("hook:"+t)}function pe(){co.length=0,uo={},lo=fo=!1}function de(){fo=!0;var e,t,n;for
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 6e 20 74 29 21 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 2e 70 75 73 68 28 6f 29 3b 76 61 72 20 61 3d 50 28 6f 2c 74 2c 6e 2c 65 29 3b 41 28 72 2c 6f 2c 61 29 2c 6f 20 69 6e 20 65 7c 7c 67 65 28 65 2c 22 5f 70 72 6f 70 73 22 2c 6f 29 7d 28 61 29 3b 51 69 2e 73 68 6f 75 6c 64 43 6f 6e 76 65 72 74 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 76 61 72 20 74 3d 65 2e 24 6f 70 74 69 6f 6e 73 2e 64 61 74 61 3b 74 3d 65 2e 5f 64 61 74 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 24 65 28 74 2c 65 29 3a 74 7c 7c 7b 7d 2c 66 28 74 29 7c 7c 28 74 3d 7b 7d 29 3b 66 6f 72 28 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 72 3d 65 2e 24 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 2c 6f 3d 6e 2e 6c 65 6e 67 74 68 3b 6f 2d 2d Data Ascii: n t)!function(o){i.push(o);var a=P(o,t,n,e);A(r,o,a),o in e\|\|ge(e,"_props",o)}(a);Qi.shouldConvert=!0}function be(e){var t=e.$options.data;t=e._data="function"==typeof t?$e(t,e):t\|\|{},f(t)\|\|(t={});for(var n=Object.keys(t),r=e.$options.props,o=n.length;o--
2024-04-18 17:16:07 UTC	1369	IN	Data Raw: 69 6f 6e 73 2c 74 29 3b 76 61 72 20 61 3d 4e 65 28 74 2c 65 2c 69 29 3b 69 66 28 65 2e 6f 70 74 69 6f 6e 73 2e 66 75 6e 63 74 69 6f 6e 61 6c 29 72 65 74 75 72 6e 20 53 65 28 65 2c 61 2c 74 2c 6e 2c 72 29 3b 76 61 72 20 73 3d 74 2e 6f 6e 3b 74 2e 6f 6e 3d 74 2e 6e 61 74 69 76 65 4f 6e 2c 65 2e 6f 70 74 69 6f 6e 73 2e 61 62 73 74 72 61 63 74 26 26 28 74 3d 7b 7d 29 2c 4c 65 28 74 29 3b 76 61 72 20 63 3d 65 2e 6f 70 74 69 6f 6e 73 2e 6e 61 6d 65 7c 7c 69 3b 72 65 74 75 72 6e 20 6e 65 77 20 6e 6f 28 22 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 22 2b 65 2e 63 69 64 2b 28 63 3f 22 2d 22 2b 63 3a 22 22 29 2c 74 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6e 2c 7b 43 74 6f 72 3a 65 2c 70 72 6f 70 73 44 61 74 61 3a 61 2c 6c 69 73 74 65 6e 65 Data Ascii: ions,t);var a=Ne(t,e,i);if(e.options.functional)return Se(e,a,t,n,r);var s=t.on;t.on=t.nativeOn,e.options.abstract&&(t={}),Le(t);var c=e.options.name\|\|i;return new no("vue-component-"+e.cid+(c?"-"+c:""),t,void 0,void 0,void 0,n,{Ctor:e,propsData:a,listene

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50013	64.233.177.100	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:07 UTC	661	OUT	GET /yts/jsbin/www-widgetapi-vflktVMi7/www-widgetapi.js HTTP/1.1 Host: s.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:07 UTC	719	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: https://www.youtube.com Content-Length: 24580 Date: Thu, 18 Apr 2024 17:16:07 GMT Expires: Fri, 26 Apr 2024 17:16:07 GMT Cache-Control: public, max-age=691200 Last-Modified: Fri, 05 May 2017 23:11:10 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:07 UTC	536	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 2c 6b 3d 74 68 69 73 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 6b 2c 63 3b 63 3d 61 2e 73 68 69 66 74 28 29 3b 29 69 66 28 6e 75 6c 6c 21 3d 62 5b 63 5d 29 62 3d 62 5b 63 5d 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 61 61 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 62 29 69 66 28 61 29 7b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 75 72 6e 22 61 72 72 61 79 22 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4f 62 6a 65 63 74 29 72 Data Ascii: (function(){var g,k=this;function m(a){a=a.split(".");for(var b=k,c;c=a.shift();)if(null!=b[c])b=b[c];else return null;return b}function aa(){}function n(a){var b=typeof a;if("object"==b)if(a){if(a instanceof Array)return"array";if(a instanceof Object)r
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 22 3d 3d 63 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 63 61 6c 6c 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 26 26 21 61 2e 70 72 6f 70 65 72 74 79 49 73 45 6e 75 6d 65 72 61 62 6c 65 28 22 63 61 6c 6c 22 29 29 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 7d 65 6c 73 65 20 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 0a 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 62 26 26 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 61 2e 63 61 6c 6c 29 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3b 72 65 74 75 72 6e 20 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 6e 28 61 29 3b 72 65 74 75 72 6e 22 61 72 Data Ascii: "==c\|\|"undefined"!=typeof a.call&&"undefined"!=typeof a.propertyIsEnumerable&&!a.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==b&&"undefined"==typeof a.call)return"object";return b}function p(a){var b=n(a);return"ar
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 57 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 63 2c 68 29 7b 66 6f 72 28 76 61 72 20 64 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 65 3d 32 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 5b 65 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 63 5d 2e 61 70 70 6c 79 28 61 2c 64 29 7d 7d 0a 3b 76 61 72 20 67 61 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 74 72 69 6d 28 29 7d 3a 66 75 Data Ascii: b.prototype;a.prototype=new c;a.prototype.constructor=a;a.W=function(a,c,h){for(var d=Array(arguments.length-2),e=2;e<arguments.length;e++)d[e-2]=arguments[e];return b.prototype[c].apply(a,d)}};var ga=String.prototype.trim?function(a){return a.trim()}:fu
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 0a 72 61 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 30 3c 74 68 69 73 2e 62 29 7b 74 68 69 73 2e 62 2d 2d 3b 76 61 72 20 61 3d 74 68 69 73 2e 61 3b 74 68 69 73 2e 61 3d 61 2e 6e 65 78 74 3b 61 2e 6e 65 78 74 3d 6e 75 6c 6c 7d 65 6c 73 65 20 61 3d 74 68 69 73 2e 63 28 29 3b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 7a 3b 61 3a 7b 76 61 72 20 73 61 3d 6b 2e 6e 61 76 69 67 61 74 6f 72 3b 69 66 28 73 61 29 7b 76 61 72 20 74 61 3d 73 61 2e 75 73 65 72 41 67 65 6e 74 3b 69 66 28 74 61 29 7b 7a 3d 74 61 3b 62 72 65 61 6b 20 61 7d 7d 7a 3d 22 22 7d 66 75 6e 63 74 69 6f 6e 20 41 28 61 29 7b 72 65 74 75 72 6e 2d 31 21 3d 7a 2e 69 6e 64 65 78 4f 66 28 61 29 7d 0a 3b 66 75 6e 63 74 69 6f 6e 20 75 61 28 61 29 7b 76 61 72 20 Data Ascii: ra.prototype.get=function(){if(0<this.b){this.b--;var a=this.a;this.a=a.next;a.next=null}else a=this.c();return a};var z;a:{var sa=k.navigator;if(sa){var ta=sa.userAgent;if(ta){z=ta;break a}}z=""}function A(a){return-1!=z.indexOf(a)};function ua(a){var
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 21 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 53 43 52 49 50 54 22 29 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 53 43 52 49 50 54 22 29 3b 0a 62 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 62 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 3b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 3b 62 3d 6e 75 6c 6c 3b 61 28 29 3b 61 3d 6e 75 6c 6c 7d 3b 0a 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d Data Ascii: !==typeof document&&"onreadystatechange"in document.createElement("SCRIPT")?function(a){var b=document.createElement("SCRIPT");b.onreadystatechange=function(){b.onreadystatechange=null;b.parentNode.removeChild(b);b=null;a();a=null};document.documentElem
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 2e 61 3d 61 29 7d 46 3d 21 31 7d 0a 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 63 3d 74 68 69 73 2e 63 3b 74 68 69 73 2e 66 3d 74 68 69 73 2e 66 7d 0a 47 2e 70 72 6f 74 6f 74 79 70 65 2e 63 3d 21 31 3b 47 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 63 7c 7c 28 74 68 69 73 2e 63 3d 21 30 2c 74 68 69 73 2e 41 28 29 29 7d 3b 0a 47 2e 70 72 6f 74 6f 74 79 70 65 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 66 29 66 6f 72 28 3b 74 68 69 73 2e 66 2e 6c 65 6e 67 74 68 3b 29 74 68 69 73 2e 66 2e 73 68 69 66 74 28 29 28 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 45 61 3b 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: .a=a)}F=!1};function G(){this.c=this.c;this.f=this.f}G.prototype.c=!1;G.prototype.dispose=function(){this.c\|\|(this.c=!0,this.A())};G.prototype.A=function(){if(this.f)for(;this.f.length;)this.f.shift()()};function Da(a,b){var c=Ea;Object.prototype.hasOw
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 30 3d 3d 6c 5b 31 5d 2e 6c 65 6e 67 74 68 3f 30 3a 70 61 72 73 65 49 6e 74 28 6c 5b 31 5d 2c 31 30 29 29 7c 7c 77 28 30 3d 3d 66 5b 32 5d 2e 6c 65 6e 67 74 68 2c 30 3d 3d 6c 5b 32 5d 2e 6c 65 6e 67 74 68 29 7c 7c 77 28 66 5b 32 5d 2c 6c 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 6c 3d 6c 5b 33 5d 7d 77 68 69 6c 65 28 30 3d 3d 62 29 7d 72 65 74 75 72 6e 20 30 3c 3d 62 7d 29 7d 0a 76 61 72 20 50 61 3b 76 61 72 20 51 61 3d 6b 2e 64 6f 63 75 6d 65 6e 74 3b 50 61 3d 51 61 26 26 48 3f 49 61 28 29 7c 7c 28 22 43 53 53 31 43 6f 6d 70 61 74 22 3d 3d 51 61 2e 63 6f 6d 70 61 74 4d 6f 64 65 3f 70 61 72 73 65 49 6e 74 28 4e 61 2c 31 30 29 3a 35 29 3a 76 6f 69 64 20 30 3b 76 61 72 20 Data Ascii: [1].length?0:parseInt(f[1],10),0==l[1].length?0:parseInt(l[1],10))\|\|w(0==f[2].length,0==l[2].length)\|\|w(f[2],l[2]);f=f[3];l=l[3]}while(0==b)}return 0<=b})}var Pa;var Qa=k.document;Pa=Qa&&H?Ia()\|\|("CSS1Compat"==Qa.compatMode?parseInt(Na,10):5):void 0;var
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 68 28 63 29 7b 69 66 28 63 21 3d 3d 4a 29 74 68 72 6f 77 20 63 3b 7d 65 6c 73 65 7b 61 3d 56 61 28 61 29 3b 74 72 79 7b 66 6f 72 28 3b 3b 29 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 2e 6e 65 78 74 28 29 2c 76 6f 69 64 20 30 2c 61 29 7d 63 61 74 63 68 28 63 29 7b 69 66 28 63 21 3d 3d 4a 29 74 68 72 6f 77 20 63 3b 7d 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 29 7b 69 66 28 70 28 61 29 29 72 65 74 75 72 6e 20 79 28 61 29 3b 61 3d 56 61 28 61 29 3b 76 61 72 20 62 3d 5b 5d 3b 57 61 28 61 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 2e 70 75 73 68 28 61 29 7d 29 3b 0a 72 65 74 75 72 6e 20 62 7d 0a 3b 76 61 72 20 59 61 3d 6b 2e 4a 53 4f 4e 2e 70 61 72 73 65 2c 5a 61 3d 6b 2e 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 Data Ascii: h(c){if(c!==J)throw c;}else{a=Va(a);try{for(;;)b.call(void 0,a.next(),void 0,a)}catch(c){if(c!==J)throw c;}}}function Xa(a){if(p(a))return y(a);a=Va(a);var b=[];Wa(a,function(a){b.push(a)});return b};var Ya=k.JSON.parse,Za=k.JSON.stringify;function L(a
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 61 2e 61 70 70 6c 79 28 62 2c 63 29 7d 29 7d 0a 67 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 7b 76 61 72 20 62 3d 74 68 69 73 2e 62 5b 61 5d 3b 62 26 26 28 78 28 62 2c 74 68 69 73 2e 46 2c 74 68 69 73 29 2c 64 65 6c 65 74 65 20 74 68 69 73 2e 62 5b 61 5d 29 7d 65 6c 73 65 20 74 68 69 73 2e 61 2e 6c 65 6e 67 74 68 3d 30 2c 74 68 69 73 2e 62 3d 7b 7d 7d 3b 0a 67 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 2e 44 2e 41 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 69 73 2e 63 6c 65 61 72 28 29 3b 74 68 69 73 2e 67 2e 6c 65 6e 67 74 68 3d 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 62 28 29 7b 7d 0a 3b 66 75 6e 63 74 69 6f 6e 20 63 62 28 29 7b 7d 0a 76 28 63 62 2c 62 62 29 3b 63 62 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: nction(){a.apply(b,c)})}g.clear=function(a){if(a){var b=this.b[a];b&&(x(b,this.F,this),delete this.b[a])}else this.a.length=0,this.b={}};g.A=function(){L.D.A.call(this);this.clear();this.g.length=0};function bb(){};function cb(){}v(cb,bb);cb.prototype
2024-04-18 17:16:07 UTC	1255	IN	Data Raw: 29 3b 76 61 72 20 67 62 3d 2f 5e 28 3f 3a 28 5b 5e 3a 2f 3f 23 2e 5d 2b 29 3a 29 3f 28 3f 3a 5c 2f 5c 2f 28 3f 3a 28 5b 5e 2f 3f 23 5d 2a 29 40 29 3f 28 5b 5e 2f 23 3f 5d 2a 3f 29 28 3f 3a 3a 28 5b 30 2d 39 5d 2b 29 29 3f 28 3f 3d 5b 2f 23 3f 5d 7c 24 29 29 3f 28 5b 5e 3f 23 5d 2b 29 3f 28 3f 3a 5c 3f 28 5b 5e 23 5d 2a 29 29 3f 28 3f 3a 23 28 5b 5c 73 5c 53 5d 2a 29 29 3f 24 2f 3b 66 75 6e 63 74 69 6f 6e 20 68 62 28 61 2c 62 2c 63 29 7b 69 66 28 22 61 72 72 61 79 22 3d 3d 6e 28 62 29 29 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 68 62 28 61 2c 53 74 72 69 6e 67 28 62 5b 64 5d 29 2c 63 29 3b 65 6c 73 65 20 6e 75 6c 6c 21 3d 62 26 26 63 2e 70 75 73 68 28 22 26 22 2c 61 2c 22 22 3d 3d 3d 62 3f 22 22 3a 22 3d 22 2c 65 6e Data Ascii: );var gb=/^(?:([^:/?#.]+):)?(?:\/\/(?:([^/?#])@)?([^/#?]?)(?::([0-9]+))?(?=[/#?]\|$))?([^?#]+)?(?:\?([^#]))?(?:#([\s\S]))?$/;function hb(a,b,c){if("array"==n(b))for(var d=0;d<b.length;d++)hb(a,String(b[d]),c);else null!=b&&c.push("&",a,""===b?"":"=",en

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50014	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:08 UTC	764	OUT	GET /Areas/LNRS/favicon.ico HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:08 UTC	654	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1150 Content-Type: image/x-icon Last-Modified: Fri, 12 Apr 2024 05:09:34 GMT ETag: "0bba39b978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:08 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210164-DFW, cache-pdk-kfty2130082-PDK X-Cache: HIT, MISS X-Cache-Hits: 32, 0 X-Timer: S1713460569.752752,VS0,VE21 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:08 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 04 fe fe ff 08 fa fb ff 0c f7 f8 ff 0e f7 f8 fe 0e fb fb fe 0c fe fe ff 08 ff ff ff 04 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 04 fd fd ff 10 e9 eb fc 5a cd d1 f8 9a 9d a7 f6 ce 69 7a f5 f2 68 77 e9 f2 9e a7 ec ce ce d3 f6 9a ee ef fb 5a fe fe ff 10 ff ff ff 04 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 06 fb fb fe 37 ce d4 fb a0 50 64 e8 f5 07 23 db ff 18 35 f0 ff 0e 2a e1 ff 02 1c cb ff 01 1b c9 ff 08 1e cb ff 6b 70 dd f5 dc df f8 a0 fd fd fe 37 ff ff ff 06 ff ff ff 00 ff Data Ascii: h( ZizhwZ7Pd#5*kp7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50016	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:09 UTC	575	OUT	GET /-/media/images/homepage%20carousel/united_for_wildlife_carousel%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:09 UTC	887	IN	HTTP/1.1 200 OK Connection: close Content-Length: 150251 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="United_For_Wildlife_Carousel jpg.jpg" Content-Type: image/jpeg Etag: "0jo6LhilKtTNfHvN+bbS1O0ZiGO/kZT83WOzfgPQEMM" Fastly-Io-Info: ifsz=174179 idim=1230x420 ifmt=jpeg ofsz=150251 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560839 Date: Thu, 18 Apr 2024 17:16:09 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120027-DFW, cache-pdk-kfty2130062-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460569.100539,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: 49 4f dd e7 bf de 9b 90 7b f6 a8 f0 45 78 7d b8 a3 0a 29 17 a6 a7 00 54 a1 97 b0 aa c5 72 69 39 a1 12 8c ab 99 51 da bc 0a 93 cd 55 50 d9 ab 28 b8 e4 ff 00 3a 42 21 49 95 32 e3 f5 a9 42 e4 71 51 a8 cd 58 55 e2 90 a7 48 ab 52 84 e2 9c ab c5 48 31 4a a2 8d 63 c9 ff 00 4a 98 28 14 aa 31 4f 14 a7 64 c9 02 8a 70 15 ec d2 d0 51 2d 7a 93 75 7b 75 45 13 f1 5e a8 cb 8a 4d e2 a2 8a 5c d7 b3 51 6e a5 cd 45 14 81 ab c0 d3 3b 57 b2 28 15 14 99 af 66 a3 dd 5e dd 41 44 fc d7 b3 51 ee af 6e a8 a2 97 35 ec d4 59 a5 06 a2 89 f9 af 53 33 5e cd 45 13 eb d4 cd d4 9b aa 23 0a 4a 5c 8a 87 7f f2 a4 dd 51 48 53 66 93 22 ab 97 a6 17 a8 a4 2b 05 a9 0b 8a a8 64 fb d3 4b 8f 9f d2 a2 96 0a d9 90 53 3a 9c d5 53 20 14 c3 28 a3 08 ab 66 4a 61 92 aa 99 b8 ff 00 4a 8f ad f7 a9 95 05 77 a8 Data Ascii: IO{Ex})Tri9QUP(:B!I2BqQXUHRH1JcJ(1OdpQ-zu{uE^M\QnE;W(f^ADQn5YS3^E#J\QHSf"+dKS:S (fJaJw
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: 79 52 3f 4a 8c b0 1d f8 a8 1a 10 95 60 cd e0 71 4d 32 9f 26 a1 c3 11 ed 04 fc e2 99 86 1d c1 fe 46 9f 28 52 54 c6 51 f2 69 86 5f 03 9a 8b 72 e7 93 4a a0 54 ca 02 92 a4 dc 69 37 35 2e 07 6f e7 4a 00 f8 a9 6e 8a 4a f0 24 d3 86 69 46 71 4f 15 20 74 51 26 1b 1f 6a 50 1b bf f3 a5 c1 a9 00 18 e6 95 14 c0 a6 bd b4 79 3c d4 80 0f 8a 5c 54 51 45 b4 78 a7 88 c9 e7 15 22 81 52 02 05 09 51 42 21 f9 fd 45 48 b0 28 a7 ee 1e 29 0b ff 00 c5 4b a8 94 44 a0 52 ed 51 e2 a3 2d e3 34 c2 d4 60 a8 a6 ca 8a 42 ea 2a b9 7c 79 a6 19 00 f3 44 34 94 b2 14 c6 53 e0 53 49 63 fe b5 01 99 7c 53 3a b9 f3 c5 1c 91 b2 12 14 ff 00 9d 26 e4 f9 a8 32 c7 b5 28 53 9e 69 a0 21 2a 5e a2 f8 1f 95 21 66 3d a9 a0 01 4e ed e2 a4 05 0a f1 dc 4d 2e d1 e4 d2 6e 18 a6 33 9f 14 61 02 55 85 2a 3b 57 b7 63 Data Ascii: yR?J`qM2&F(RTQi_rJTi75.oJnJ$iFqO tQ&jPy<\TQEx"RQB!EH()KDRQ-4`B\|yD4SSIc\|S:&2(Si!^!f=NM.n3aU*;Wc
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: 9c 44 42 d9 5b 5f c3 71 14 ae 96 3c a0 52 47 19 c3 76 a6 9b d8 59 49 fa 75 18 e0 9f bd 52 b1 ca 8b d4 59 55 9d 76 ee db c0 51 d8 0f cc 55 53 23 6f 16 ea b9 f0 30 3f bd 26 40 5c e8 da 13 4c 00 ae 45 74 d2 31 65 db b4 64 00 47 c7 f1 1f f4 a6 35 d3 5a c7 34 8d 1a fb c6 00 3f df f3 fb 53 6d b6 19 2e 22 da 57 a5 b3 04 8c 6f dd fc 40 fc 64 63 14 1e e6 61 7d ab 5a 69 ed 65 70 f0 e7 79 99 47 ee 80 5e fb 8e 7b 8e e2 9c 34 49 b5 80 93 e4 96 4c 5b 53 64 7f 4d 54 09 b6 45 06 61 86 6c fe 21 9f 07 e3 8e 6a a6 a7 7b 2c 03 74 58 57 8d 77 39 39 db 8f f4 e2 96 f6 cd 64 79 21 8e e6 48 a4 38 0b 24 6d fb c5 20 64 37 3d f1 8c f3 c5 08 81 ee 35 48 6e ed b5 13 03 46 c0 a3 4b 16 57 a8 ad ed e0 77 56 cd 46 b4 17 67 37 6e 84 28 e3 03 28 f4 5a 49 6f ad 55 3a a7 51 8e 35 da 09 46 60 Data Ascii: DB[_q<RGvYIuRYUvQUS#o0?&@\LEt1edG5Z4?Sm."Wo@dca}ZiepyG^{4IL[SdMTEal!j{,tXWw99dy!H8$m d7=5HnFKWwVFg7n((ZIoU:Q5F`
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: ca bd 9f be 6a 65 47 32 b0 64 04 f1 48 5f ed f9 54 20 1c 1a f6 4f 7c 76 a1 94 29 25 4a 64 07 b1 fd 29 37 ff 00 2f 15 10 f9 ef 4b ff 00 a1 47 28 08 4c a9 4b 13 8a 5d d8 23 e2 98 07 34 e0 3f e4 50 23 50 98 14 ff 00 d2 9e 3b 62 91 71 8f 8a 70 06 91 30 4f 5c 91 4e a4 1c 53 b9 c7 db e2 81 4d 29 c0 62 9e b5 18 26 9d 9a 54 65 48 2a 4c f1 9a 83 3f 14 e0 f8 02 96 11 05 4c 1c ff 00 cd 29 99 48 c6 30 45 57 2f 51 96 e6 a6 5e ca 67 56 0c 84 8c 63 8a 8c 9a 8f 76 45 7b b9 ef 47 28 0a 66 ee a4 f3 4a a7 e2 93 da 3e f8 f1 5e 2f cf 02 84 4a 32 88 c4 8a 17 dc d9 34 8e 30 72 ad c5 0e 6b ae 42 a2 92 c7 8c 0a 1b 7d 7d 6d 6a 09 9e e8 2b 28 0d b3 3e ef b7 02 94 53 71 72 72 e1 08 95 c5 e1 88 7b 23 dd ce 32 7f da 86 9b e7 73 86 8d cb 10 08 41 e7 3e 2a b4 33 49 76 8d 74 d1 3c 16 e8 Data Ascii: jeG2dH_T O\|v)%Jd)7/KG(LK]#4?P#P;bqp0O\NSM)b&TeHL?L)H0EW/Q^gVcvE{G(fJ>^/J240rkB}}mj+(>Sqrr{#2sA>3Ivt<
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: c8 8a 7d aa c8 43 6c f1 ed c7 15 7b dc 5e da 67 4d ba 09 55 b0 65 2f 0a 7d 1e 35 b6 5d 4e cd ac 7a 10 09 37 a3 02 36 bf 50 64 90 07 63 9e f5 0d b6 9e d6 72 5d cb a6 5e b4 6d bc 3c b0 b1 32 46 58 0e 46 33 c0 61 f1 e7 9a a9 a4 5d 49 75 ea 0f 52 99 23 65 8e 21 0c 71 23 67 93 b7 71 f3 8e 73 da a7 b4 bc b1 92 f7 53 5b 63 8b 98 36 3d cd b0 c6 e0 1b b7 6e 32 71 c5 07 35 c1 cf 1d 9a 4f 44 41 10 d3 e8 16 a5 6e d1 a1 0d 2a f0 70 08 1c e1 8f 82 2b d1 dd 43 35 c3 a2 06 2d 17 0c 78 da 37 0c fc f9 ac 14 cd 05 f5 d3 4d a3 eb b7 76 f7 12 29 12 58 22 46 59 9a 3e 77 15 98 1c 30 ee 08 c6 45 31 35 7b 6d 2b 53 8a 7d 6e e1 ed 5d ca c3 15 d3 47 d0 ea 1d a4 88 a6 0a 4a c9 8e e1 80 00 55 7c 03 78 1c c0 7b bb a6 0f 13 db e4 ba 3c b0 c5 3a e4 8c 9f 0c bd e8 3d d5 ac 90 6d 2b 2e 41 Data Ascii: }Cl{^gMUe/}5]Nz76Pdcr]^m<2FXF3a]IuR#e!q#gqsS[c6=n2q5ODAn*p+C5-x7Mv)X"FY>w0E15{m+S}n]GJU\|x{<:=m+.A
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: a8 ea 12 f4 d6 12 1a da 04 1b db 9e 01 6c fe 39 09 ec 3b 0a 03 f4 5a c7 a8 e7 81 2c 82 d9 ad a3 31 8e 4e 55 1d d0 82 22 8f 8e 54 0f c6 dd cd 74 a9 af 84 2b 05 ab cf 04 b7 ca 03 3b 7e 18 e3 6c 60 b6 32 71 f6 14 95 09 a7 95 ac 89 3e f0 1a 80 13 b3 9a ee d1 57 87 49 9a fa 30 da 99 c4 79 dd f4 ca 70 9f ff 00 73 c9 23 cd 5d ba ba 94 40 c2 d2 10 ca ab b6 22 c7 6a c8 e0 8c 2a e3 f8 47 93 43 25 ba 9f 59 99 74 fb 79 d9 21 00 fd 55 c0 1b 19 95 3b aa 8f 03 9c 64 56 5b d5 5a f8 82 3b 5d 2a d6 4f a4 98 7b 5d d7 dc 23 45 18 d9 18 ee 5c e7 c5 56 ca 6f a9 51 ad 22 fa c6 c0 75 4e e7 b5 a0 99 d3 e6 b4 d2 6a 30 ed 92 d2 dc e6 e0 14 5b 99 97 dc a1 db 80 a4 af 93 f0 3b 0a 0b 75 a9 43 69 1c d6 d6 f2 7d 4d f1 21 04 48 01 c1 ff 00 2a 8e c1 47 c9 ac 5d a6 ae d6 b1 c4 90 4b 71 65 Data Ascii: l9;Z,1NU"Tt+;~l`2q>WI0yps#]@"jGC%Yty!U;dV[Z;]O{]#E\VoQ"uNj0[;uCi}M!H*G]Kqe
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: 46 01 53 e0 73 83 f3 58 db 86 7e 6c b9 74 91 f0 d9 68 35 5a 1a 0c eb 08 87 d6 e9 ba 9e a7 aa 7a 71 e6 9b ad 25 b8 b8 92 48 f8 52 1f 82 14 fc f1 9e 28 de ad 32 e9 fa 65 e5 c8 50 dd 34 2c 06 70 a4 81 c0 24 76 ae 4a 2e ed f4 ef 56 c3 ae 59 0b 99 ed 26 99 a1 bb da d9 8a 20 98 8f a9 83 c8 04 73 c7 1c 73 57 fd 43 aa d8 59 e8 1e ac b8 4d 52 2b 9f aa 6e b4 28 84 a8 66 60 15 46 09 e0 e3 be 38 38 cd 69 38 62 6a d2 00 1c a7 2d a3 79 82 a8 e3 0e 1b c9 20 38 7d 13 7d 1b 35 cb 69 ba f6 a7 73 a9 48 a2 f6 e9 e4 81 5f 18 88 e0 22 2f f3 1d aa 39 74 0d 6f 49 f4 f5 fd e5 a0 5b ad 5f 52 78 d6 e1 e2 52 19 e3 27 9c e4 83 c0 f8 fd 2a b7 a4 b5 3d 3e eb d2 3a cc 37 0c 18 46 bd 51 08 1e f3 14 58 dc dc 77 c1 fe 55 ab d3 3d 48 ba 9a 2e a7 1d bf d5 5b 24 7f b9 30 48 0e cc 83 96 65 f0 Data Ascii: FSsX~lth5Zzq%HR(2eP4,p$vJ.VY& ssWCYMR+n(f`F88i8bj-y 8}}5isH_"/9toI[_RxR'*=>:7FQXwU=H.[$0He
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: 8d 3c 1a 04 4a 33 2a 6a 55 c5 46 0f fe d4 e1 48 99 4b d8 71 4a 29 83 27 8a 77 22 a2 80 a9 29 ca 45 43 9e 29 c0 d0 21 30 21 4e 31 e3 f9 53 c7 6f ed 51 2e 6a 45 34 a9 82 90 2f f2 a7 74 f3 5e 06 a4 56 14 09 4c a1 31 91 5e db f3 fc aa 62 7e 29 1b 9a 92 84 28 08 c5 7a 9c c2 98 78 a2 a2 5a f5 25 2d 45 17 bf f4 29 d4 d1 4b 8a 87 42 8a f0 26 94 1a 5c 52 60 d0 46 42 90 1a 91 5a a2 14 f0 0d 2a 70 a5 53 52 86 a8 57 15 2a 9c d2 10 a3 4e ca 65 6e 2a 65 61 55 85 48 0d 57 0a d0 55 80 c2 9f 9a ac 08 a9 41 a5 84 c1 d2 a5 cd 28 a6 64 53 b3 52 13 ca 94 1e 29 41 a8 83 52 86 a5 84 65 4c 1a 9e 1a a1 06 9c 1a 84 27 0e 85 30 34 b5 18 6e 29 c0 d2 c2 70 e0 54 a3 ff 00 42 9c 2a 20 69 c0 9a 58 28 c2 92 9e 05 44 0d 38 1a 0a 68 a6 18 a7 8c 54 59 a7 2b 52 c2 20 c2 93 8f 14 e0 05 30 30 Data Ascii: <J3jUFHKqJ)'w")EC)!0!N1SoQ.jE4/t^VL1^b~)(zxZ%-E)KB&\R`FBZpSRWNeneaUHWUA(dSR)AReL'04n)pTB* iX(D8hTY+R 00
2024-04-18 17:16:09 UTC	1379	IN	Data Raw: d3 4f 89 9c 6d 79 14 05 62 a0 60 0c 8f 18 18 c5 2b 30 21 ad 12 fd a0 28 fc 66 63 61 6d 56 ff 00 59 d7 f4 54 49 34 cd 35 da 0d 22 02 cd 23 64 b4 f7 f2 f1 82 77 72 50 7d ea 1b 5b f8 56 c4 5d 24 af a5 5b 48 3a 10 18 70 f7 97 25 7f 12 a9 61 84 53 d8 91 5c f9 5e 48 89 29 83 91 82 58 67 23 f5 a8 e5 eb 5e c9 d4 9a 46 91 c0 c6 5b c0 f8 1e 00 fb 0a d4 cc 33 5a d8 06 df 19 f3 59 4e 21 c4 c8 d7 a6 cb a0 9d 49 a5 5b 3b 55 90 45 0c b3 47 17 57 fe a4 50 26 71 c9 63 99 65 1f e6 6e 07 81 49 ae 7a 8d ee 23 b3 d3 ec ee a4 b7 d2 2c f6 c6 09 e7 73 2b 60 c8 c3 bb b1 c6 79 ae 7f d2 2a a1 0b 12 07 61 93 81 fa 54 6d 1b 11 83 c8 f3 ce 7f 95 37 01 84 b2 46 9a 7e ea 7b 43 c4 f7 5d be c7 d3 d1 6b 7e 8e bc 6d 36 f6 01 f5 64 a3 ca cc 15 a6 54 24 b2 12 39 0c 08 da 33 e3 14 47 4f 3a 6f Data Ascii: Omyb`+0!(fcamVYTI45"#dwrP}[V]$[H:p%aS\^H)Xg#^F[3ZYN!I[;UEGWP&qcenIz#,s+`y*aTm7F~{C]k~m6dT$93GO:o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50017	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:09 UTC	524	OUT	GET /Areas/LNRS/favicon.ico HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True
2024-04-18 17:16:09 UTC	652	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1150 Content-Type: image/x-icon Last-Modified: Fri, 12 Apr 2024 05:09:34 GMT ETag: "0bba39b978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:09 GMT Age: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210164-DFW, cache-pdk-kfty2130076-PDK X-Cache: HIT, HIT X-Cache-Hits: 32, 1 X-Timer: S1713460569.415773,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:09 UTC	1150	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 04 fe fe ff 08 fa fb ff 0c f7 f8 ff 0e f7 f8 fe 0e fb fb fe 0c fe fe ff 08 ff ff ff 04 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 04 fd fd ff 10 e9 eb fc 5a cd d1 f8 9a 9d a7 f6 ce 69 7a f5 f2 68 77 e9 f2 9e a7 ec ce ce d3 f6 9a ee ef fb 5a fe fe ff 10 ff ff ff 04 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 06 fb fb fe 37 ce d4 fb a0 50 64 e8 f5 07 23 db ff 18 35 f0 ff 0e 2a e1 ff 02 1c cb ff 01 1b c9 ff 08 1e cb ff 6b 70 dd f5 dc df f8 a0 fd fd fe 37 ff ff ff 06 ff ff ff 00 ff Data Ascii: h( ZizhwZ7Pd#5*kp7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50024	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:10 UTC	548	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:10 UTC	859	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:10 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Wed, 17 Apr 2024 06:40:28 GMT x-ms-request-id: 4732fd52-501e-0032-7de1-9039f4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 7 Expires: Fri, 19 Apr 2024 17:16:10 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d15ce1a453d-ATL
2024-04-18 17:16:10 UTC	510	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d Data Ascii: T","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d Data Ascii: (!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!=
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b Data Ascii: er,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 Data Ascii: t("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 28 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 70 74 75 72 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 Data Ascii: ,this.captureNonce()},h.prototype.captureNonce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptEleme
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 3f 28 69 3d 69 2e 4f 6e 65 54 72 75 73 74 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 52 65 73 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 Data Ascii: ocationResponse?(i=i.OneTrust.geolocationResponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],th
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 65 72 22 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b Data Ascii: er"}},h.prototype.setGeoLocation=function(t,e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 67 69 6f 6e 53 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 2c 6e 2c 61 3d 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 Data Ascii: gionSet=function(t){var e,i,n,a=p.userLocation,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.Rule
2024-04-18 17:16:10 UTC	1369	IN	Data Raw: 61 73 49 41 42 47 6c 6f 62 61 6c 53 63 6f 70 65 3d 21 31 2c 70 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 74 68 69 73 2e 67 65 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 Data Ascii: asIABGlobalScope=!1,p.IABCookieValue=this.getCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50020	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:10 UTC	898	OUT	GET /copyright HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0
2024-04-18 17:16:10 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 119467 Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Date: Thu, 18 Apr 2024 17:16:10 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120069-DFW, cache-pdk-kfty2130036-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460570.487096,VS0,VE167 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 74 61 72 67 65 74 2d 64 65 6e 73 69 74 79 44 70 69 3d 64 65 76 69 63 65 2d 64 70 69 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, target-densityDpi=device-dpi, initial-scale=1, user-scalable=no
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 37 33 39 38 38 38 37 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 70 72 65 6c 6f 61 64 27 20 61 73 3d 27 73 74 79 6c 65 27 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 2f 31 2e 31 32 2e 31 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6d 69 6e 2e 63 73 73 27 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 70 79 72 69 67 68 74 20 7c 20 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f Data Ascii: 7398887" rel="stylesheet" /> <link rel='preload' as='style' href='//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css'> <title>Copyright \| LexisNexis Risk Solutions</title> <meta property="og:site_
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 79 2d 63 6f 6f 6b 69 65 2d 64 6f 6d 61 69 6e 3d 22 74 72 61 63 6b 69 6e 67 2e 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 0d 0a 20 20 20 20 20 20 63 6c 61 73 73 3d 22 6c 6e 72 73 2d 63 6f 6e 74 65 6e 74 2d 70 61 67 65 20 65 6e 2d 75 73 20 6d 6f 64 65 2d 6c 69 76 65 20 77 65 62 22 0d 0a 20 20 20 20 20 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 3d 22 50 72 6f 64 75 63 74 69 6f 6e 22 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 09 09 09 76 61 72 20 5f 65 6c 71 51 20 3d 20 5f 65 6c 71 51 20 7c 7c 20 5b 5d 3b 0d 0a 09 09 09 5f 65 6c 71 51 2e 70 75 73 68 28 5b 27 65 6c 71 53 65 74 53 69 74 65 49 64 27 2c 20 27 39 30 33 27 5d 29 3b 0d 0a 09 09 09 5f 65 6c 71 51 2e 70 75 73 68 28 5b 27 Data Ascii: y-cookie-domain="tracking.risk.lexisnexis.com" class="lnrs-content-page en-us mode-live web" environment="Production"><script type="text/javascript">var _elqQ = _elqQ \|\| [];_elqQ.push(['elqSetSiteId', '903']);_elqQ.push(['
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 3d 20 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 20 3d 20 67 72 6f 75 70 2e 43 6f 6f 6b 69 65 73 5b 6b 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6f 6b 69 65 2e 4e 61 6d 65 20 3d 3d 3d 20 22 45 4c 4f 51 55 41 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 6f 71 75 61 43 6f 6f 6b 69 65 47 72 6f 75 70 20 3d 20 67 72 6f 75 70 2e 50 61 72 65 6e 74 20 3f 20 67 72 6f 75 70 2e 50 61 72 65 6e 74 2e 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 20 3a 20 67 72 6f 75 70 2e 4f 70 74 61 6e 6f 6e 47 72 6f 75 Data Ascii: = 1) { var cookie = group.Cookies[k]; if (cookie.Name === "ELOQUA") { eloquaCookieGroup = group.Parent ? group.Parent.OptanonGroupId : group.OptanonGrou
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6d 65 67 61 6d 65 6e 75 22 20 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6e 61 76 2d 77 72 61 70 70 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6e 61 76 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 63 6f 72 65 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 69 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 68 65 61 64 65 72 20 73 63 6f 72 65 2d 6e 61 76 62 61 72 2d 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <nav class="score-megamenu" > <div class="score-nav-wrapper"> <div class="score-nav"> ... score-nav-wrapper is the container --> <div class="navbar-header score-navbar-header">
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 62 6f 78 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 49 73 45 78 70 65 72 69 65 6e 63 65 45 64 69 74 6f 72 45 64 69 74 69 6e 67 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 53 65 61 72 63 68 52 65 73 75 6c 74 73 50 61 67 65 55 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 73 65 61 72 63 68 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 53 65 61 72 63 68 42 6f 78 49 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 36 66 62 61 66 66 37 37 63 38 32 32 34 61 62 38 39 34 65 64 64 64 33 38 38 32 39 36 30 65 33 30 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 41 6c 67 6f 6c 69 61 41 70 69 4b 65 79 26 71 75 6f 74 3b Data Ascii: s="global-search-box" data-ux-args="{"IsExperienceEditorEditing":false,"SearchResultsPageUrl":"https://risk.lexisnexis.com/search","SearchBoxId":"6fbaff77c8224ab894eddd3882960e30","AlgoliaApiKey"
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 74 72 75 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 6d 6f 64 61 6c 2d 37 64 34 65 36 64 62 34 2d 39 30 38 32 2d 34 61 38 37 2d 61 35 62 66 2d 39 39 31 32 36 38 65 61 38 36 63 63 2d 4c 61 62 65 6c 22 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 20 73 63 6f 72 65 2d 6d 6f 64 61 6c 20 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 53 74 61 74 65 43 68 61 6e 67 65 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 2c 26 71 75 6f 74 3b 53 68 6f 77 41 63 74 69 6f 6e 4d 65 73 73 61 67 65 73 26 71 75 6f 74 3b 3a 5b 26 71 75 6f 74 3b 4f 70 65 6e 20 4c 61 6e 67 75 61 67 65 20 53 65 6c 65 63 74 6f 72 20 4d 6f 64 61 6c 26 71 75 6f 74 Data Ascii: true" aria-labelledby="modal-7d4e6db4-9082-4a87-a5bf-991268ea86cc-Label" class="modal fade score-modal language-selector" data-ux-args="{"StateChangeMessagesTransmitting":[],"ShowActionMessages":["Open Language Selector Modal&quot
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 75 73 2d 66 6c 61 67 32 32 78 31 36 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 2d 20 45 6e 67 6c 69 73 68 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 Data Ascii: data-ux-state="pending" href="https://risk.lexisnexis.com"><span class="sprite-image"> <span class="icon-us-flag22x16"></span></span><span class="" >United States - English</span></a></div><div class="score-left-text " > <a class="score-c
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 2e 6a 70 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: " > <a class="score-composite-link" data-ux-args="{"ClickMessagesTransmitting":[]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href="https://risk.lexisnexis.co.jp"><span class="sprite-image"> <span class
2024-04-18 17:16:10 UTC	1379	IN	Data Raw: 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2f 65 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 67 6c 6f 62 61 6c 32 30 78 32 30 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 45 6e 67 6c 69 73 68 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d Data Ascii: itting":[]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href="https://risk.lexisnexis.com/global/en"><span class="sprite-image"> <span class="icon-global20x20"></span></span><span class="" >English</span></a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50025	54.71.166.176	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:10 UTC	786	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460568891 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:10 UTC	824	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:10 GMT Content-Type: application/json;charset=utf-8 Content-Length: 382 Connection: close X-TID: CkVRjIgFT4Y= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://risk.lexisnexis.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-2-v056-0fcfc99d7.edge-usw2.demdex.com 2 ms set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:10 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:10 UTC	382	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"72321666800473193042525972382318204557","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50027	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:10 UTC	639	OUT	GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:11 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:11 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664d196c4a8bb9-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1908 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:16:11 GMT Last-Modified: Fri, 29 Mar 2024 16:23:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: +c9VWhQ6txyfasImp6wmeQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1f527521-901e-0094-58f5-818eea000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:16:11 UTC	468	IN	Data Raw: 31 30 38 35 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 62 66 37 62 Data Ascii: 1085{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"bf7b
2024-04-18 17:16:11 UTC	1369	IN	Data Raw: 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 38 36 63 62 2d 31 30 36 37 2d 37 30 64 39 2d 61 34 65 34 2d 37 34 64 31 61 33 35 35 62 30 38 61 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 43 6f 6f 6b 69 65 20 43 6f 6d 70 6c 69 61 6e 63 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 63 61 22 2c 22 63 6f 22 2c 22 76 61 22 2c 22 63 74 22 2c 22 75 74 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 43 50 52 41 22 2c 22 55 Data Ascii: ":[{"Id":"018e86cb-1067-70d9-a4e4-74d1a355b08a","Name":"US Cookie Compliance","Countries":[],"States":{"us":["ca","co","va","ct","ut"]},"LanguageSwitcherPlaceholder":{"default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"CPRA","U
2024-04-18 17:16:11 UTC	1369	IN	Data Raw: 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d 22 2c 22 6d 6e 22 2c 22 6d 6f 22 2c 22 6d 70 22 2c 22 6d 72 22 2c 22 6d 73 22 2c 22 6d 75 22 2c 22 6d 76 22 2c 22 6d 77 22 2c 22 6d 78 22 2c 22 6d 79 22 2c 22 6d 7a 22 2c 22 6e 61 22 2c 22 6e 63 22 2c 22 6e 65 22 2c 22 6e 66 22 2c 22 6e 67 22 2c 22 6e 69 22 2c 22 6e 70 22 2c 22 6e 72 22 2c 22 6e 75 22 2c 22 6e 7a 22 2c 22 6f 6d 22 2c 22 70 61 22 2c 22 70 65 22 2c 22 70 66 22 2c 22 70 67 22 2c 22 70 68 22 2c 22 70 6b 22 2c 22 70 6d 22 2c 22 70 6e 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 Data Ascii: "lk","lr","ls","ly","ma","md","me","mg","mh","mk","ml","mm","mn","mo","mp","mr","ms","mu","mv","mw","mx","my","mz","na","nc","ne","nf","ng","ni","np","nr","nu","nz","om","pa","pe","pf","pg","ph","pk","pm","pn"],"States":{},"LanguageSwitcherPlaceholder":{"
2024-04-18 17:16:11 UTC	1031	IN	Data Raw: 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 56 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 Data Ascii: ","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2V2Data.json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlist
2024-04-18 17:16:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50021	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:10 UTC	977	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0 If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"
2024-04-18 17:16:11 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:11 GMT Via: 1.1 varnish ETag: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" Age: 7 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kpdk1780044-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460571.162568,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50030	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	548	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:11 UTC	1264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:11 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow set-cookie: visitorId=17ec1c6cb1dbe86f1ebfabe36449cda3fec4dfbeb0455abf2f3d7ab5aeb84c60; Max-Age=31536000; Domain=ws.zoominfo.com; Path=/; Expires=Fri, 18 Apr 2025 17:16:11 GMT; Secure; SameSite=None via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=9xYwmkIGIlL4PcAeCSZV6b4hYCSQ5dvmOA8IKRLicuc-1713460571-1.0.1.1-84RcLvrIwDzzmPPQ9iZSUigDP8O_.c_6nytNHwhwseStqiMOPSqXXisooqMcKwRlGJfJJXWBPpmjVrBifQxhhA; path=/; expires=Thu, 18-Apr-24 17:46:11 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=xMSX2K.aVjN7LaVnOD96vBkM9H6yNCL4ZuPxO5C4axU-1713460571442-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87664d1a6cc6b04e-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:11 UTC	105	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,c
2024-04-18 17:16:11 UTC	1369	IN	Data Raw: 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 29 3a 65 2b 2b 7d 2c 32 65 33 29 7d 7d 76 61 72 20 6c 2c 72 2c 69 2c 64 3b 61 7c 7c 28 63 3d 7b 2e 2e 2e 63 2c 77 73 3a 31 7d 29 2c 6c 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 72 3d 22 5f 69 6e 69 74 43 6c 69 63 6b 61 67 79 22 2c 74 3d 22 73 63 72 69 Data Ascii: m:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),clearInterval(t)):e++},2e3)}}var l,r,i,d;a\|\|(c={...c,ws:1}),l=window,e=document,r="_initClickagy",t="scri
2024-04-18 17:16:11 UTC	1369	IN	Data Raw: 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 29 3b 74 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 65 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 78 2d 77 73 2d 63 6f 6c 6c 65 63 74 2d 74 79 70 65 22 2c 22 78 68 72 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 22 2c 62 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 6e Data Ascii: rage.getItem("unifiedScriptVerified");t.open("POST",e),t.setRequestHeader("Content-type","application/json; charset=UTF-8"),t.setRequestHeader("x-ws-collect-type","xhr"),t.setRequestHeader("requestFromZITag",b),t.setRequestHeader("unifiedScriptVerified",n
2024-04-18 17:16:11 UTC	1369	IN	Data Raw: 65 6e 74 2e 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 28 6e 3d 22 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 6d 73 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 3d 22 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 2c 6e 75 6c 6c 21 3d 73 26 26 6e 75 6c 6c 21 3d 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 61 2c 21 31 29 2c 77 69 6e 64 6f 77 5b 70 5d 2e 69 6e 74 72 76 6c 3d 73 65 74 49 6e 74 65 72 76 61 Data Ascii: ent.msVisibilityState?(n="msVisibilityState",s="msvisibilitychange"):"undefined"!=typeof document.webkitVisibilityState&&(n="webkitVisibilityState",s="webkitvisibilitychange"),null!=s&&null!=n&&document.addEventListener(s,a,!1),window[p].intrvl=setInterva
2024-04-18 17:16:11 UTC	434	IN	Data Raw: 64 22 3a 22 31 37 65 63 31 63 36 63 62 31 64 62 65 38 36 66 31 65 62 66 61 62 65 33 36 34 34 39 63 64 61 33 66 65 63 34 64 66 62 65 62 30 34 35 35 61 62 66 32 66 33 64 37 61 62 35 61 65 62 38 34 63 36 30 22 2c 22 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 7a 69 77 73 4b 65 79 22 3a 22 7a 69 77 73 22 2c 22 65 76 65 6e 74 49 64 22 3a 22 36 63 65 31 38 35 64 61 2d 64 63 64 65 2d 34 37 34 39 2d 62 34 61 36 2d 39 66 35 32 30 30 38 36 38 65 33 62 22 2c 22 6e 65 77 53 65 73 73 69 6f 6e 49 64 22 3a 22 63 37 33 63 34 66 63 64 62 64 65 35 66 37 36 64 61 38 62 64 66 33 33 39 61 66 31 31 32 37 66 65 35 32 62 62 39 32 35 66 35 61 32 34 30 38 32 39 65 33 61 32 30 34 36 65 39 37 66 61 36 37 31 38 22 2c 22 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 Data Ascii: d":"17ec1c6cb1dbe86f1ebfabe36449cda3fec4dfbeb0455abf2f3d7ab5aeb84c60","collectIntent":false,"ziwsKey":"ziws","eventId":"6ce185da-dcde-4749-b4a6-9f5200868e3b","newSessionId":"c73c4fcdbde5f76da8bdf339af1127fe52bb925f5a240829e3a2046e97fa6718","durationsVersi
2024-04-18 17:16:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50031	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	976	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0 If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"
2024-04-18 17:16:11 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:11 GMT Via: 1.1 varnish ETag: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" Age: 5 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kpdk1780052-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460571.372533,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50033	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	525	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460568891 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:11 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:11 GMT Content-Type: application/json;charset=utf-8 Content-Length: 382 Connection: close X-TID: db9f5+s0RAM= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-2-v059-0af7ac172.edge-va6.demdex.com 2 ms set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:11 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:11 UTC	382	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"72321666800473193042525972382318204557","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50034	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	693	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0 If-None-Match: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw"
2024-04-18 17:16:11 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:11 GMT Via: 1.1 varnish ETag: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw" Age: 6 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130088-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460572.689473,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50035	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	427	OUT	GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:11 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:11 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664d1d5ab812eb-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 23442 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:16:11 GMT Last-Modified: Fri, 29 Mar 2024 16:23:31 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: +c9VWhQ6txyfasImp6wmeQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 599d15a4-301e-0024-08f8-81cf23000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:16:11 UTC	467	IN	Data Raw: 31 30 38 35 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 62 66 37 62 Data Ascii: 1085{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"bf7b
2024-04-18 17:16:11 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 38 36 63 62 2d 31 30 36 37 2d 37 30 64 39 2d 61 34 65 34 2d 37 34 64 31 61 33 35 35 62 30 38 61 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 43 6f 6f 6b 69 65 20 43 6f 6d 70 6c 69 61 6e 63 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 63 61 22 2c 22 63 6f 22 2c 22 76 61 22 2c 22 63 74 22 2c 22 75 74 22 5d 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b 22 64 65 66 61 75 6c 74 22 3a 22 65 6e 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 43 50 52 41 22 2c 22 Data Ascii: t":[{"Id":"018e86cb-1067-70d9-a4e4-74d1a355b08a","Name":"US Cookie Compliance","Countries":[],"States":{"us":["ca","co","va","ct","ut"]},"LanguageSwitcherPlaceholder":{"default":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"CPRA","
2024-04-18 17:16:11 UTC	1369	IN	Data Raw: 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 2c 22 6d 6c 22 2c 22 6d 6d 22 2c 22 6d 6e 22 2c 22 6d 6f 22 2c 22 6d 70 22 2c 22 6d 72 22 2c 22 6d 73 22 2c 22 6d 75 22 2c 22 6d 76 22 2c 22 6d 77 22 2c 22 6d 78 22 2c 22 6d 79 22 2c 22 6d 7a 22 2c 22 6e 61 22 2c 22 6e 63 22 2c 22 6e 65 22 2c 22 6e 66 22 2c 22 6e 67 22 2c 22 6e 69 22 2c 22 6e 70 22 2c 22 6e 72 22 2c 22 6e 75 22 2c 22 6e 7a 22 2c 22 6f 6d 22 2c 22 70 61 22 2c 22 70 65 22 2c 22 70 66 22 2c 22 70 67 22 2c 22 70 68 22 2c 22 70 6b 22 2c 22 70 6d 22 2c 22 70 6e 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 7d 2c 22 4c 61 6e 67 75 61 67 65 53 77 69 74 63 68 65 72 50 6c 61 63 65 68 6f 6c 64 65 72 22 3a 7b Data Ascii: ,"lk","lr","ls","ly","ma","md","me","mg","mh","mk","ml","mm","mn","mo","mp","mr","ms","mu","mv","mw","mx","my","mz","na","nc","ne","nf","ng","ni","np","nr","nu","nz","om","pa","pe","pf","pg","ph","pk","pm","pn"],"States":{},"LanguageSwitcherPlaceholder":{
2024-04-18 17:16:11 UTC	1032	IN	Data Raw: 31 22 2c 22 63 6f 6e 73 65 6e 74 4c 61 6e 67 75 61 67 65 22 3a 6e 75 6c 6c 2c 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6d 61 78 56 65 6e 64 6f 72 49 64 22 3a 30 2c 22 65 6e 63 6f 64 69 6e 67 54 79 70 65 22 3a 22 30 22 2c 22 67 6c 6f 62 61 6c 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 69 61 62 32 56 32 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 47 6f 6f 67 6c 65 44 61 74 61 22 3a 7b 22 76 65 6e 64 6f 72 4c 69 73 74 56 65 72 73 69 6f 6e 22 3a 31 2c 22 67 6f 6f 67 6c 65 56 65 6e 64 6f 72 4c 69 73 74 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 Data Ascii: 1","consentLanguage":null,"vendorListVersion":0,"maxVendorId":0,"encodingType":"0","globalVendorListUrl":"https://cdn.cookielaw.org/vendorlist/iab2V2Data.json"},"GoogleData":{"vendorListVersion":1,"googleVendorListUrl":"https://cdn.cookielaw.org/vendorlis
2024-04-18 17:16:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50036	54.71.166.176	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	795	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460570393 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:12 UTC	824	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:11 GMT Content-Type: application/json;charset=utf-8 Content-Length: 382 Connection: close X-TID: NkwpQD9lRXo= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://risk.lexisnexis.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-usw2-1-v056-0e508e953.edge-usw2.demdex.com 2 ms set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:11 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:12 UTC	382	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 39 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"72321666800473193042525972382318204557","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":9,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50039	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	608	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	1264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow set-cookie: visitorId=bb969011697ae51f81bee4bffb7912e3cd53285f23960d89ed98713ed9e56708; Max-Age=31536000; Domain=ws.zoominfo.com; Path=/; Expires=Fri, 18 Apr 2025 17:16:11 GMT; Secure; SameSite=None via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=wZPjEFDaR4a9fV2Viq_rkxLfuXK1K6COeBr26iSRlHI-1713460572-1.0.1.1-.8clC.ER56KXHZCzuCb.uttDw0pTDLHTZK7wmEic5qVBbt5USa4fNyaRvzXr.MnT2su8T3k5wKKsBLsrfQ_9Ow; path=/; expires=Thu, 18-Apr-24 17:46:12 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=fz4rxhIKfrZlp.iY4fshn4lBuHU4585Ygidc441X_Kc-1713460572068-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87664d1e8bf24582-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:12 UTC	105	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,c
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 29 3a 65 2b 2b 7d 2c 32 65 33 29 7d 7d 76 61 72 20 6c 2c 72 2c 69 2c 64 3b 61 7c 7c 28 63 3d 7b 2e 2e 2e 63 2c 77 73 3a 31 7d 29 2c 6c 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 72 3d 22 5f 69 6e 69 74 43 6c 69 63 6b 61 67 79 22 2c 74 3d 22 73 63 72 69 Data Ascii: m:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),clearInterval(t)):e++},2e3)}}var l,r,i,d;a\|\|(c={...c,ws:1}),l=window,e=document,r="_initClickagy",t="scri
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 29 3b 74 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 65 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 78 2d 77 73 2d 63 6f 6c 6c 65 63 74 2d 74 79 70 65 22 2c 22 78 68 72 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 22 2c 62 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 6e Data Ascii: rage.getItem("unifiedScriptVerified");t.open("POST",e),t.setRequestHeader("Content-type","application/json; charset=UTF-8"),t.setRequestHeader("x-ws-collect-type","xhr"),t.setRequestHeader("requestFromZITag",b),t.setRequestHeader("unifiedScriptVerified",n
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 65 6e 74 2e 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 28 6e 3d 22 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 6d 73 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 3d 22 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 2c 6e 75 6c 6c 21 3d 73 26 26 6e 75 6c 6c 21 3d 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 61 2c 21 31 29 2c 77 69 6e 64 6f 77 5b 70 5d 2e 69 6e 74 72 76 6c 3d 73 65 74 49 6e 74 65 72 76 61 Data Ascii: ent.msVisibilityState?(n="msVisibilityState",s="msvisibilitychange"):"undefined"!=typeof document.webkitVisibilityState&&(n="webkitVisibilityState",s="webkitvisibilitychange"),null!=s&&null!=n&&document.addEventListener(s,a,!1),window[p].intrvl=setInterva
2024-04-18 17:16:12 UTC	434	IN	Data Raw: 64 22 3a 22 62 62 39 36 39 30 31 31 36 39 37 61 65 35 31 66 38 31 62 65 65 34 62 66 66 62 37 39 31 32 65 33 63 64 35 33 32 38 35 66 32 33 39 36 30 64 38 39 65 64 39 38 37 31 33 65 64 39 65 35 36 37 30 38 22 2c 22 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 7a 69 77 73 4b 65 79 22 3a 22 7a 69 77 73 22 2c 22 65 76 65 6e 74 49 64 22 3a 22 31 66 32 35 62 32 30 66 2d 66 35 33 64 2d 34 65 62 33 2d 38 38 62 37 2d 33 61 33 31 66 35 65 61 32 63 32 61 22 2c 22 6e 65 77 53 65 73 73 69 6f 6e 49 64 22 3a 22 34 35 31 61 62 33 33 31 36 34 32 38 39 65 63 38 63 63 37 37 36 33 39 38 36 62 65 31 39 66 37 38 37 61 63 35 36 62 64 35 65 61 31 32 30 37 66 63 33 32 61 31 34 39 39 38 32 32 34 30 38 66 31 64 22 2c 22 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 Data Ascii: d":"bb969011697ae51f81bee4bffb7912e3cd53285f23960d89ed98713ed9e56708","collectIntent":false,"ziwsKey":"ziws","eventId":"1f25b20f-f53d-4eb3-88b7-3a31f5ea2c2a","newSessionId":"451ab33164289ec8cc7763986be19f787ac56bd5ea1207fc32a1499822408f1d","durationsVersi
2024-04-18 17:16:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50040	104.18.32.137	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	614	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:11 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664d1eaabb4503-ATL
2024-04-18 17:16:12 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50041	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	931	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; gpv_Page=home; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065370%7C9%7CMCAAMB-1714065370%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467770s%7CNONE%7CvVersion%7C5.5.0 If-None-Match: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg"
2024-04-18 17:16:12 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:11 GMT Via: 1.1 varnish ETag: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg" Age: 5 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130086-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460572.956693,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50044	35.169.212.254	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	780	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: lexisnexisrisksolutions.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:12 UTC	604	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: /WVqfbdbQDA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Tue, 9 Apr 2024 12:56:25 GMT DCS: dcs-prod-va6-2-v059-0e0be9b31.edge-va6.demdex.com 0 ms
2024-04-18 17:16:12 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50045	63.140.39.65	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:11 UTC	752	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460570626 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	683	IN	HTTP/1.1 200 OK access-control-allow-origin: https://risk.lexisnexis.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 17:16:12 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557; Path=/; Domain=lexisnexisrisk.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:16 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:12 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 7d Data Ascii: {"mid":"72321666800473193042525972382318204557"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50046	104.18.32.137	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	605	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664d21b8a11d80-ATL
2024-04-18 17:16:12 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50047	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	570	OUT	GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	814	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: s7qm2vbmUNglr6Jt5k9KHA== Last-Modified: Thu, 21 Mar 2024 07:04:35 GMT x-ms-request-id: 09dec6d6-901e-0084-36c2-7b4b82000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 4543 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d21cdd9ad5c-ATL
2024-04-18 17:16:12 UTC	555	IN	Data Raw: 37 63 37 30 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 33 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c70/** * onetrust-banner-sdk * v202403.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 77 Data Ascii: type,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 67 Data Ascii: .label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function F(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=arg
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 65 6f 66 20 6a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 58 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 57 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d Data Ascii: eof j)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void X((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){W(t,e)}var n,r}function W(e,t){e._state=2,e._value=t,J(e)}function J(e){2===e._state&&0===
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 6a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6a 3f 74 3a 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 6a 2e 72 61 63 65 3d 66 75 6e 63 74 Data Ascii: turn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},j.resolve=function(t){return t&&"object"==typeof t&&t.constructor===j?t:new j(function(e){e(t)})},j.reject=function(o){return new j(function(e,t){t(o)})},j.race=funct
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 51 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 3a Data Ascii: :!0,configurable:!0})},Q.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable:
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 Data Ascii: initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max(
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 5a 3d 5a 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 5d 3d 22 Data Ascii: [e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=Z=Z\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=ee=ee\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=te=te\|\|{})[e.Purpose=1]="
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 70 65 3d 70 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 5b 65 Data Ascii: =5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=pe=pe\|\|{}).Active="1",e.InActive="0",(e=he=he\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ge=ge\|\|{})[e
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e 45 Data Ascii: nted="granted",e.denied="denied",0,(e=Ae=Ae\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Ie=Ie\|\|{}).cookies="cookies",e.vendors="vendors",(e=Le=Le\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GENE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50048	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664d21cbed6730-ATL
2024-04-18 17:16:12 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50049	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	525	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&d_nsid=0&ts=1713460570393 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:12 UTC	710	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: application/json;charset=utf-8 Content-Length: 382 Connection: close X-TID: N3fKk8PxSqU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-05fbb2dad.edge-va6.demdex.com 2 ms set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:12 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:12 UTC	382	IN	Data Raw: 7b 22 64 5f 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 2c 22 69 64 5f 73 79 6e 63 5f 74 74 6c 22 3a 36 30 34 38 30 30 2c 22 64 5f 62 6c 6f 62 22 3a 22 52 4b 68 70 52 7a 38 6b 72 67 32 74 4c 4f 36 70 67 75 58 57 70 35 6f 6c 6b 41 63 55 6e 69 51 59 50 48 61 4d 57 57 67 64 4a 33 78 7a 50 57 51 6d 64 6a 30 79 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 64 5f 6f 74 74 6c 22 3a 37 32 30 30 2c 22 69 62 73 22 3a 5b 7b 22 69 64 22 3a 22 34 31 31 22 2c 22 74 74 6c 22 3a 31 30 30 38 30 2c 22 74 61 67 22 3a 22 69 6d 67 22 2c 22 66 69 72 65 55 52 4c 53 79 6e 63 22 3a 31 2c 22 73 79 6e 63 4f 6e 50 61 67 65 22 3a 31 2c 22 75 72 6c 22 3a 5b 22 2f 2f 63 6d 2e 65 76 65 72 Data Ascii: {"d_mid":"72321666800473193042525972382318204557","id_sync_ttl":604800,"d_blob":"RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y","dcs_region":7,"d_ottl":7200,"ibs":[{"id":"411","ttl":10080,"tag":"img","fireURLSync":1,"syncOnPage":1,"url":["//cm.ever

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50050	63.140.39.65	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	761	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460571119 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	683	IN	HTTP/1.1 200 OK access-control-allow-origin: https://risk.lexisnexis.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 17:16:12 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557; Path=/; Domain=lexisnexisrisk.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:16 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:12 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 7d Data Ascii: {"mid":"72321666800473193042525972382318204557"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50051	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	557	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	1264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow set-cookie: visitorId=660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3; Max-Age=31536000; Domain=ws.zoominfo.com; Path=/; Expires=Fri, 18 Apr 2025 17:16:12 GMT; Secure; SameSite=None via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=z7ti9jrvloktojrwyZgmE_eapBYKBJEo8ia9acrgvxw-1713460572-1.0.1.1-FMCNbjP.6R2S4dtFlTdzBMHTajsuN0.Usq_dWuJmSpjcZtVyJ3dCsLQjkxy1nPBWm2mpJLnUO4ZgMG_qsFnGkQ; path=/; expires=Thu, 18-Apr-24 17:46:12 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=5wGzFgXEOnoIrKfoD2GHk1KTuQ5JHmfsNqJ0lLMzXqo-1713460572691-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87664d22689a455d-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:12 UTC	105	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,c
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 29 3a 65 2b 2b 7d 2c 32 65 33 29 7d 7d 76 61 72 20 6c 2c 72 2c 69 2c 64 3b 61 7c 7c 28 63 3d 7b 2e 2e 2e 63 2c 77 73 3a 31 7d 29 2c 6c 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 72 3d 22 5f 69 6e 69 74 43 6c 69 63 6b 61 67 79 22 2c 74 3d 22 73 63 72 69 Data Ascii: m:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),clearInterval(t)):e++},2e3)}}var l,r,i,d;a\|\|(c={...c,ws:1}),l=window,e=document,r="_initClickagy",t="scri
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 29 3b 74 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 65 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 78 2d 77 73 2d 63 6f 6c 6c 65 63 74 2d 74 79 70 65 22 2c 22 78 68 72 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 22 2c 62 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 6e Data Ascii: rage.getItem("unifiedScriptVerified");t.open("POST",e),t.setRequestHeader("Content-type","application/json; charset=UTF-8"),t.setRequestHeader("x-ws-collect-type","xhr"),t.setRequestHeader("requestFromZITag",b),t.setRequestHeader("unifiedScriptVerified",n
2024-04-18 17:16:12 UTC	1369	IN	Data Raw: 65 6e 74 2e 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 28 6e 3d 22 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 6d 73 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 3d 22 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 2c 6e 75 6c 6c 21 3d 73 26 26 6e 75 6c 6c 21 3d 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 61 2c 21 31 29 2c 77 69 6e 64 6f 77 5b 70 5d 2e 69 6e 74 72 76 6c 3d 73 65 74 49 6e 74 65 72 76 61 Data Ascii: ent.msVisibilityState?(n="msVisibilityState",s="msvisibilitychange"):"undefined"!=typeof document.webkitVisibilityState&&(n="webkitVisibilityState",s="webkitvisibilitychange"),null!=s&&null!=n&&document.addEventListener(s,a,!1),window[p].intrvl=setInterva
2024-04-18 17:16:12 UTC	434	IN	Data Raw: 64 22 3a 22 36 36 30 65 38 32 39 33 38 34 35 66 31 39 31 33 37 61 37 66 36 34 34 37 38 61 34 31 36 64 38 32 34 35 63 33 35 62 62 35 32 34 66 35 66 39 35 64 35 31 63 61 34 33 65 62 37 39 61 62 65 39 65 33 22 2c 22 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 7a 69 77 73 4b 65 79 22 3a 22 7a 69 77 73 22 2c 22 65 76 65 6e 74 49 64 22 3a 22 37 36 34 66 32 30 36 36 2d 39 30 36 39 2d 34 61 33 33 2d 61 63 64 30 2d 36 32 35 31 33 36 36 66 30 31 30 62 22 2c 22 6e 65 77 53 65 73 73 69 6f 6e 49 64 22 3a 22 36 34 39 65 31 35 62 33 64 36 35 34 38 32 31 39 65 38 34 37 37 65 64 65 34 30 62 63 62 38 64 33 63 38 32 64 32 66 36 33 64 38 32 31 30 32 62 65 63 65 38 31 61 37 39 33 31 37 36 66 39 65 65 31 22 2c 22 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 Data Ascii: d":"660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3","collectIntent":false,"ziwsKey":"ziws","eventId":"764f2066-9069-4a33-acd0-6251366f010b","newSessionId":"649e15b3d6548219e8477ede40bcb8d3c82d2f63d82102bece81a793176f9ee1","durationsVersi
2024-04-18 17:16:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50054	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	1184	OUT	POST /lnrs/logerror HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive Content-Length: 165 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; gpv_Page=home; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE
2024-04-18 17:16:12 UTC	165	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 43 6f 6e 74 65 6e 74 2b 73 6d 61 6c 6c 65 72 2b 74 68 61 6e 2b 34 30 30 70 78 2b 75 72 6c 25 33 41 2b 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 63 6f 70 79 72 69 67 68 74 2b 70 61 67 65 49 64 25 33 41 2b 41 36 32 35 46 38 42 43 46 45 43 41 34 33 46 31 42 32 31 34 43 30 39 33 46 32 32 37 46 31 37 33 2b 70 61 67 65 56 65 73 69 6f 6e 25 33 41 2b 31 35 2b 6c 61 6e 67 75 61 67 65 25 33 41 2b 65 6e 2d 55 53 Data Ascii: message=Content+smaller+than+400px+url%3A+https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright+pageId%3A+A625F8BCFECA43F1B214C093F227F173+pageVesion%3A+15+language%3A+en-US
2024-04-18 17:16:12 UTC	592	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Pragma: no-cache Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 18 Apr 2024 17:16:12 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210159-DFW, cache-pdk-kpdk1780089-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460573.547898,VS0,VE78 Vary: Origin Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50052	35.169.212.254	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	789	OUT	GET /dest5.html?d_nsid=0 HTTP/1.1 Host: lexisnexisrisksolutions.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:12 UTC	604	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: text/html;charset=UTF-8 Content-Length: 6983 Connection: close X-TID: +g/9MaXsSl4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Accept-Ranges: bytes last-modified: Tue, 9 Apr 2024 11:58:15 GMT DCS: dcs-prod-va6-1-v059-0d7a7446a.edge-va6.demdex.com 0 ms
2024-04-18 17:16:12 UTC	6983	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 6c 6f 6f 73 65 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 74 69 74 6c 65 3e 41 64 6f 62 65 20 41 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd"><html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javas

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50055	99.84.208.103	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	545	OUT	GET /data.js?rnd=62fe5c0e6ad95 HTTP/1.1 Host: tags.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	819	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 36572 Connection: close Date: Thu, 18 Apr 2024 01:19:18 GMT Last-Modified: Thu, 08 Feb 2024 19:03:11 GMT ETag: "9d6129b555ace3efebf194d38a3e562d" x-amz-server-side-encryption: AES256 x-amz-version-id: 9OWM.Z0Dh.HHVWQAeO49BBTVx4LoDSWJ Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c208eb85ab071bce3678151b6fd6ca36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD79-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: eMG7kVhZyrhcAK22MuCNHVx7Cv49xt1_n0_be6PGuK91_75gCasAgA== Age: 57415 X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Vary: Origin
2024-04-18 17:16:12 UTC	15565	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 61 29 7b 69 66 28 65 5b 61 5d 29 72 65 74 75 72 6e 20 65 5b 61 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 65 5b 61 5d 3d 7b 69 3a 61 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 74 5b 61 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 69 29 2c 6e 2e 6c 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 74 2c 69 2e 63 3d 65 2c 69 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 61 29 7b 69 2e 6f 28 74 2c 65 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 61 7d 29 7d 2c 69 2e 72 3d 66 75 6e Data Ascii: !function(t){var e={};function i(a){if(e[a])return e[a].exports;var n=e[a]={i:a,l:!1,exports:{}};return t[a].call(n.exports,n,n.exports,i),n.l=!0,n.exports}i.m=t,i.c=e,i.d=function(t,e,a){i.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:a})},i.r=fun
2024-04-18 17:16:12 UTC	16384	IN	Data Raw: 63 63 6f 75 6e 74 5f 69 64 3d 22 2b 61 2e 65 6e 63 6f 64 65 55 72 69 28 74 68 69 73 2e 61 63 63 6f 75 6e 74 5f 69 64 29 3b 6f 3d 6f 2e 63 6f 6e 63 61 74 28 22 26 75 3d 22 2b 61 2e 65 6e 63 6f 64 65 55 72 69 28 74 68 69 73 2e 75 72 6c 29 29 2c 74 68 69 73 2e 72 65 71 75 65 73 74 4e 61 74 69 76 65 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3c 31 26 26 6e 2e 65 72 72 6f 72 28 22 4e 6f 20 61 64 73 20 72 65 74 75 72 6e 65 64 20 66 6f 72 20 61 64 47 65 6e 65 72 61 74 6f 72 20 75 6e 69 74 2e 22 29 2c 28 69 3d 22 62 6c 6f 63 6b 22 3d 3d 74 3f 6e 2e 67 65 6e 65 72 61 74 65 42 6c 6f 63 6b 41 64 28 61 29 3a 6e 2e 67 65 6e 65 72 61 74 65 46 6c 6f 61 74 41 64 28 74 2c 61 29 29 3f 65 28 6e 2e 72 65 6e 64 65 72 46 72 61 Data Ascii: ccount_id="+a.encodeUri(this.account_id);o=o.concat("&u="+a.encodeUri(this.url)),this.requestNative(o,(function(a){return a.length<1&&n.error("No ads returned for adGenerator unit."),(i="block"==t?n.generateBlockAd(a):n.generateFloatAd(t,a))?e(n.renderFra
2024-04-18 17:16:12 UTC	4623	IN	Data Raw: 74 68 3d 61 2c 72 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 69 2c 72 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 30 70 78 22 2c 72 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 46 46 46 22 2c 72 2e 73 74 79 6c 65 2e 73 65 61 6d 6c 65 73 73 3d 22 73 65 61 6d 6c 65 73 73 22 2c 72 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 2c 72 2e 73 74 79 6c 65 2e 73 63 72 6f 6c 6c 69 6e 67 3d 22 6e 6f 22 2c 6f 26 26 28 72 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 69 2e 6f 6e 65 72 72 6f 72 3d 66 Data Ascii: th=a,r.style.height=i,r.style.padding="0px",r.style.margin="0px",r.style.border="0px",r.style.borderWidth="0px",r.style.borderColor="#FFF",r.style.seamless="seamless",r.style.overflow="hidden",r.style.scrolling="no",o&&(r.onerror=function(t,i){i.onerror=f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50056	18.67.60.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	534	OUT	GET /up_loader.1.1.0.js HTTP/1.1 Host: js.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 10104 Connection: close Date: Thu, 18 Apr 2024 07:06:17 GMT Last-Modified: Fri, 12 Apr 2024 16:30:50 GMT ETag: "cd056b72a31972be87dbbf0927dc2dfd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1b6db55df4d0459558669f7d008cda9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: IAD89-P1 X-Amz-Cf-Id: Q0Ifvlcuz2IxO9_VPmzOKKltpn9c_kiSYw4lDZs6INhaoD7zlw2vow== Age: 36596
2024-04-18 17:16:12 UTC	10104	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6c 65 74 20 63 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 75 3d 5b 22 64 65 62 75 67 22 2c 22 69 6e 66 6f 22 2c 22 77 61 72 6e 22 2c 22 65 72 72 6f 72 22 5d 3b 6c 65 74 20 61 3d 75 2e 72 65 64 75 63 65 28 28 65 2c 64 2c 61 29 3d 3e 28 65 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 22 64 65 62 75 67 22 3d 3d 3d 64 3f 22 6c 6f 67 22 3a 64 3b 69 66 28 63 26 26 63 6f 6e 73 6f 6c 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 6f 6e 73 6f 6c 65 5b 65 5d 29 7b 76 61 72 20 74 3d 75 2e 69 6e 64 65 78 4f 66 28 63 2e 74 6f 53 74 72 69 6e 67 28 29 2e 74 6f 4c 6f 63 61 6c 65 4c 6f 77 65 72 43 61 73 65 28 29 29 3b 69 66 28 21 30 3d 3d 3d 63 7c 7c 2d 31 3c 74 26 Data Ascii: !function(){"use strict";let c=null;const u=["debug","info","warn","error"];let a=u.reduce((e,d,a)=>(e[d]=function(){var e="debug"===d?"log":d;if(c&&console&&"function"==typeof console[e]){var t=u.indexOf(c.toString().toLocaleLowerCase());if(!0===c\|\|-1<t&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50057	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	491	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460570626 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:12 UTC	617	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 17:16:12 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557; Path=/; Domain=lexisnexisrisk.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:16 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:12 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 7d Data Ascii: {"mid":"72321666800473193042525972382318204557"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50058	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:12 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664d24db2053b4-ATL
2024-04-18 17:16:13 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50059	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	491	OUT	GET /id?d_visid_ver=5.5.0&d_fieldgroup=A&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&mid=72321666800473193042525972382318204557&ts=1713460571119 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	617	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 17:16:13 GMT p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557; Path=/; Domain=lexisnexisrisk.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:16 GMT; SameSite=Lax; vary: Origin content-type: application/x-javascript;charset=utf-8 content-length: 48 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:13 UTC	48	IN	Data Raw: 7b 22 6d 69 64 22 3a 22 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 22 7d Data Ascii: {"mid":"72321666800473193042525972382318204557"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50062	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	976	OUT	GET /lnrs/logerror HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; gpv_Page=home; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=1; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE
2024-04-18 17:16:13 UTC	600	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Pragma: no-cache Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:13 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120102-DFW, cache-pdk-kfty2130066-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460573.047571,VS0,VE84 Vary: Origin Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50063	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	617	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	1264	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow set-cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; Max-Age=31536000; Domain=ws.zoominfo.com; Path=/; Expires=Fri, 18 Apr 2025 17:16:13 GMT; Secure; SameSite=None via: 1.1 google CF-Cache-Status: DYNAMIC Set-Cookie: __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; path=/; expires=Thu, 18-Apr-24 17:46:13 GMT; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000; path=/; domain=.zoominfo.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 87664d264f5c7ba8-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:13 UTC	105	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,c
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 29 3a 65 2b 2b 7d 2c 32 65 33 29 7d 7d 76 61 72 20 6c 2c 72 2c 69 2c 64 3b 61 7c 7c 28 63 3d 7b 2e 2e 2e 63 2c 77 73 3a 31 7d 29 2c 6c 3d 77 69 6e 64 6f 77 2c 65 3d 64 6f 63 75 6d 65 6e 74 2c 72 3d 22 5f 69 6e 69 74 43 6c 69 63 6b 61 67 79 22 2c 74 3d 22 73 63 72 69 Data Ascii: m:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),clearInterval(t)):e++},2e3)}}var l,r,i,d;a\|\|(c={...c,ws:1}),l=window,e=document,r="_initClickagy",t="scri
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 29 3b 74 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 65 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 78 2d 77 73 2d 63 6f 6c 6c 65 63 74 2d 74 79 70 65 22 2c 22 78 68 72 22 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 22 2c 62 29 2c 74 2e 73 65 74 52 65 71 75 65 73 74 48 65 61 64 65 72 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 6e Data Ascii: rage.getItem("unifiedScriptVerified");t.open("POST",e),t.setRequestHeader("Content-type","application/json; charset=UTF-8"),t.setRequestHeader("x-ws-collect-type","xhr"),t.setRequestHeader("requestFromZITag",b),t.setRequestHeader("unifiedScriptVerified",n
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 65 6e 74 2e 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 28 6e 3d 22 6d 73 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 6d 73 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 28 6e 3d 22 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 22 2c 73 3d 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 29 2c 6e 75 6c 6c 21 3d 73 26 26 6e 75 6c 6c 21 3d 6e 26 26 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 73 2c 61 2c 21 31 29 2c 77 69 6e 64 6f 77 5b 70 5d 2e 69 6e 74 72 76 6c 3d 73 65 74 49 6e 74 65 72 76 61 Data Ascii: ent.msVisibilityState?(n="msVisibilityState",s="msvisibilitychange"):"undefined"!=typeof document.webkitVisibilityState&&(n="webkitVisibilityState",s="webkitvisibilitychange"),null!=s&&null!=n&&document.addEventListener(s,a,!1),window[p].intrvl=setInterva
2024-04-18 17:16:13 UTC	434	IN	Data Raw: 64 22 3a 22 33 66 36 62 64 61 36 63 66 33 65 35 66 37 33 33 31 32 35 36 36 65 66 35 30 62 64 38 63 31 64 63 33 63 62 33 62 30 61 64 32 65 66 31 61 66 61 38 66 32 64 61 64 65 31 34 65 66 33 63 39 37 37 32 22 2c 22 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 22 3a 66 61 6c 73 65 2c 22 7a 69 77 73 4b 65 79 22 3a 22 7a 69 77 73 22 2c 22 65 76 65 6e 74 49 64 22 3a 22 62 32 66 32 33 36 33 34 2d 62 66 63 33 2d 34 64 35 62 2d 39 35 33 35 2d 36 33 31 31 34 32 34 35 35 31 39 35 22 2c 22 6e 65 77 53 65 73 73 69 6f 6e 49 64 22 3a 22 30 33 32 65 65 38 64 64 34 34 35 66 38 65 34 35 64 61 36 66 39 38 34 39 62 30 32 61 63 64 35 31 34 63 39 38 38 31 65 37 66 36 62 35 37 63 35 32 62 66 33 63 35 63 35 34 31 30 39 65 36 32 34 33 22 2c 22 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 Data Ascii: d":"3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772","collectIntent":false,"ziwsKey":"ziws","eventId":"b2f23634-bfc3-4d5b-9535-631142455195","newSessionId":"032ee8dd445f8e45da6f9849b02acd514c9881e7f6b57c52bf3c5c54109e6243","durationsVersi
2024-04-18 17:16:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50061	54.71.166.176	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:12 UTC	674	OUT	GET /ibs:dpid=411&dpuuid=ZiFVXAAAADfeEAOj HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:13 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: s+wAgZE6TsI= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-1-v056-0c2d396ee.edge-usw2.demdex.com 2 ms set-cookie: dpm=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:13 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50067	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	651	OUT	GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/018e86cb-0f61-72d5-abc5-660accde9ba2/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	901	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664d26ef1b677c-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 1909 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:16:13 GMT Last-Modified: Fri, 29 Mar 2024 16:23:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: mFpRzDY3RcHLI5Ey5p+RFQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5e765765-601e-005b-7df5-8100b8000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:16:13 UTC	468	IN	Data Raw: 37 63 31 32 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 72 65 66 Data Ascii: 7c12{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Pref
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 73 65 20 74 6f 20 72 65 6a 65 63 74 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 48 6f 77 65 76 65 72 2c 20 62 6c 6f 63 6b 69 6e 67 20 73 6f 6d 65 20 74 79 70 65 73 20 6d 61 79 20 69 6d 70 61 63 74 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 6f 66 20 6f 75 72 20 73 69 74 65 20 61 6e 64 20 74 68 65 20 73 65 72 76 69 63 65 73 20 77 65 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6f 66 66 65 72 2e 20 43 6c 69 63 6b 20 74 68 65 20 63 61 74 65 67 6f 72 79 20 68 65 61 64 69 6e 67 73 20 62 65 6c 6f 77 20 74 6f 20 66 69 6e 64 20 6f 75 74 20 6d 6f 72 65 20 6f 72 20 63 68 61 6e 67 65 20 79 6f 75 72 20 73 65 74 74 69 6e 67 73 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 6f 75 72 20 3c 61 20 68 72 65 Data Ascii: se to reject some types of cookies. However, blocking some types may impact your experience of our site and the services we are able to offer. Click the category headings below to find out more or change your settings. For more information, see our <a hre
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 61 3e 2e 22 2c 22 41 6c 65 72 74 43 6c 6f 73 65 54 65 78 74 22 3a 22 43 6c 6f 73 65 22 2c 22 41 6c 65 72 74 4d 6f 72 65 49 6e 66 6f 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 22 2c 22 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 22 2c 22 41 6c 65 72 74 41 6c 6c 6f 77 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 41 63 63 65 70 74 20 43 6f 6f 6b 69 65 73 22 2c 22 43 6c 6f 73 65 53 68 6f 75 6c 64 41 63 63 65 70 74 41 6c 6c 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 42 61 Data Ascii: a>.","AlertCloseText":"Close","AlertMoreInfoText":"Cookie Settings","CookieSettingButtonText":"Cookie Settings","AlertAllowCookiesText":"Accept Cookies","CloseShouldAcceptAllCookies":false,"LastReconsentDate":null,"BannerTitle":"","ForceConsent":false,"Ba
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 75 72 70 6f 73 65 73 3a 22 2c 22 47 72 6f 75 70 73 22 3a 5b 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 31 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 31 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 65 Data Ascii: ing technologies for the following purposes:","Groups":[{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"1","OptanonGroupId":"1","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupDe
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 49 61 62 50 75 72 70 6f 73 65 22 3a 66 61 6c 73 65 2c 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 36 36 31 38 35 35 61 31 2d 64 66 38 38 2d 34 35 63 34 2d 38 63 33 63 2d 34 35 34 35 64 35 32 61 30 34 38 32 22 2c 22 4e 61 6d 65 22 3a 22 4f 70 74 61 6e 6f 6e 41 6c 65 72 74 42 6f 78 43 6c 6f 73 65 64 22 2c 22 48 6f 73 74 22 3a 22 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 77 65 62 73 69 74 65 73 20 75 73 69 6e 67 20 63 65 72 Data Ascii: IabPurpose":false,"GeneralVendorsIds":[],"FirstPartyCookies":[{"id":"661855a1-df88-45c4-8c3c-4545d52a0482","Name":"OptanonAlertBoxClosed","Host":"risk.lexisnexis.com","IsSession":false,"Length":"365","description":"This cookie is set by websites using cer
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 36 62 64 36 62 39 66 33 2d 30 66 61 30 2d 34 38 31 31 2d 62 35 34 63 2d 37 35 62 33 36 39 37 36 33 36 62 37 22 2c 22 4e 61 6d 65 22 3a 22 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 22 2c 22 48 6f 73 74 22 3a 22 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 65 6e 65 72 61 6c 20 70 75 72 70 6f 73 65 20 70 6c 61 74 66 6f 72 6d 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 2c 20 75 73 65 64 20 62 79 20 73 69 74 65 73 20 77 72 69 74 74 65 6e 20 77 69 74 68 20 4d 69 73 63 72 6f 73 6f 66 74 20 2e 4e 45 54 20 62 61 73 65 64 Data Ascii: sThirdParty":false},{"id":"6bd6b9f3-0fa0-4811-b54c-75b3697636b7","Name":"ASP.NET_SessionId","Host":"risk.lexisnexis.com","IsSession":true,"Length":"0","description":"General purpose platform session cookie, used by sites written with Miscrosoft .NET based
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 65 22 3a 22 66 6f 6e 74 73 2e 6e 65 74 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 66 6f 6e 74 73 2e 6e 65 74 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 31 35 38 39 31 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 66 31 35 36 62 65 33 32 2d 31 61 30 37 2d 34 31 64 65 2d 39 37 63 30 2d 30 32 37 30 32 32 33 39 33 62 33 32 22 2c 22 4e 61 6d 65 22 3a 22 5f 5f 63 66 5f 62 6d 22 2c 22 48 6f 73 74 22 3a 22 66 6f 6e 74 73 2e 6e 65 74 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 69 73 20 61 20 43 6c 6f 75 64 46 6f 75 6e 64 72 79 Data Ascii: e":"fonts.net","DisplayName":"fonts.net","HostId":"H15891","Description":"","PrivacyPolicy":"","Cookies":[{"id":"f156be32-1a07-41de-97c0-027022393b32","Name":"__cf_bm","Host":"fonts.net","IsSession":false,"Length":"0","description":"This is a CloudFoundry
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 20 5f 63 66 75 76 69 64 20 63 6f 6f 6b 69 65 20 69 73 20 6f 6e 6c 79 20 73 65 74 20 77 68 65 6e 20 61 20 73 69 74 65 20 75 73 65 73 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 6e 20 61 20 52 61 74 65 20 4c 69 6d 69 74 69 6e 67 20 52 75 6c 65 2c 20 61 6e 64 20 69 73 20 6f 6e 6c 79 20 75 73 65 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 43 6c 6f 75 64 66 6c 61 72 65 20 57 41 46 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 69 6e 64 69 76 69 64 75 61 6c 20 75 73 65 72 73 20 77 68 6f 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 2e 20 56 69 73 69 74 6f 72 73 20 77 68 6f 20 64 6f 20 6e 6f 74 20 70 72 Data Ascii: ssion":true,"Length":"0","description":"The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address. Visitors who do not pr
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 20 62 79 20 74 68 65 20 73 65 72 76 65 72 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 5d 2c 22 50 75 72 70 6f 73 65 49 64 22 3a 22 43 32 31 36 42 38 30 37 2d 31 41 34 38 2d 34 32 35 38 2d 39 32 37 45 2d 39 38 34 39 38 45 46 44 44 43 31 37 22 2c 22 43 75 73 74 6f 6d 47 72 6f 75 70 49 64 22 3a 22 31 22 2c 22 47 72 6f 75 70 49 64 22 3a 22 31 32 34 33 34 61 35 31 2d 66 66 32 30 2d 34 34 37 66 2d 62 65 64 39 2d 32 38 31 35 38 66 31 34 64 35 62 62 22 2c 22 53 74 61 74 75 73 22 3a 22 61 6c 77 61 79 73 20 61 63 74 69 76 65 22 2c 22 49 73 44 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 43 Data Ascii: ssion by the server.","DurationType":1,"category":null,"isThirdParty":false}]}],"PurposeId":"C216B807-1A48-4258-927E-98498EFDDC17","CustomGroupId":"1","GroupId":"12434a51-ff20-447f-bed9-28158f14d5bb","Status":"always active","IsDntEnabled":false,"Type":"C
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 5d 2c 22 48 6f 73 74 73 22 3a 5b 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 31 35 34 31 35 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 39 66 35 32 30 65 34 31 2d 30 31 37 66 2d 34 65 33 62 2d 62 37 35 31 2d 37 32 65 66 35 62 30 38 38 65 61 39 22 2c 22 4e 61 6d 65 22 3a 22 5f 47 52 45 43 41 50 54 43 48 41 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 22 2c 22 49 73 53 65 73 73 69 Data Ascii: tyCookies":[],"Hosts":[{"HostName":"www.recaptcha.net","DisplayName":"www.recaptcha.net","HostId":"H15415","Description":"","PrivacyPolicy":"","Cookies":[{"id":"9f520e41-017f-4e3b-b751-72ef5b088ea9","Name":"_GRECAPTCHA","Host":"www.recaptcha.net","IsSessi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50066	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	629	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 255 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	255	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 2d 31 32 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 34 32 33 30 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 26 61 63 63 6f 75 6e 74 5f 69 64 3d 61 77 72 7a 68 33 32 63 35 68 6a 66 37 78 32 26 6c 69 73 74 3d 65 32 34 67 6d 38 65 79 35 6b 34 6c 6c 26 63 68 3d 32 37 38 26 63 6d 3d 31 37 65 63 31 63 36 63 62 31 64 62 65 38 36 66 31 65 62 66 61 62 65 33 36 34 34 39 63 64 61 33 66 65 63 34 64 66 62 65 62 30 34 35 35 61 62 66 32 66 33 64 37 61 62 35 61 65 62 38 34 63 36 30 26 63 73 3d 66 61 6c 73 65 Data Ascii: ws=1&lang=en-US&cookies=true&tz=-120&screen_res=1280x1024&browser_res=1280x4230&ref=&url=https%3A%2F%2Frisk.lexisnexis.com%2F&account_id=awrzh32c5hjf7x2&list=e24gm8ey5k4ll&ch=278&cm=17ec1c6cb1dbe86f1ebfabe36449cda3fec4dfbeb0455abf2f3d7ab5aeb84c60&cs=false
2024-04-18 17:16:13 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://risk.lexisnexis.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=ZiFVXWQVq-SwGm2G6T_zDoOT; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:37 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:37 GMT; SameSite=None; Secure
2024-04-18 17:16:13 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 69 46 56 58 57 51 56 71 2d 53 77 47 6d 32 47 36 54 5f 7a 44 6f 4f 54 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"ZiFVXWQVq-SwGm2G6T_zDoOT","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.4	50064	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	638	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 263 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	263	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 2d 31 32 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 39 37 38 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 63 6f 70 79 72 69 67 68 74 26 61 63 63 6f 75 6e 74 5f 69 64 3d 61 77 72 7a 68 33 32 63 35 68 6a 66 37 78 32 26 6c 69 73 74 3d 65 32 34 67 6d 38 65 79 35 6b 34 6c 6c 26 63 68 3d 32 37 38 26 63 6d 3d 36 36 30 65 38 32 39 33 38 34 35 66 31 39 31 33 37 61 37 66 36 34 34 37 38 61 34 31 36 64 38 32 34 35 63 33 35 62 62 35 32 34 66 35 66 39 35 64 35 31 63 61 34 33 65 62 37 39 61 62 65 39 65 33 26 Data Ascii: ws=1&lang=en-US&cookies=true&tz=-120&screen_res=1280x1024&browser_res=1280x978&ref=&url=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&account_id=awrzh32c5hjf7x2&list=e24gm8ey5k4ll&ch=278&cm=660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3&
2024-04-18 17:16:13 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: eae44b614222 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://risk.lexisnexis.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:37 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:37 GMT; SameSite=None; Secure
2024-04-18 17:16:13 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 69 46 56 58 61 61 39 67 66 37 75 4d 6a 66 6e 52 59 74 45 75 73 73 76 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"ZiFVXaa9gf7uMjfnRYtEussv","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.4	50069	35.174.21.144	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	596	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	425	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://risk.lexisnexis.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-04-18 17:16:13 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.4	50065	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	609	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	904	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: eae44b614222 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://aa.agkn.com/adscores/g.pixel?sid=9212289188&_puid=ZiFVXXDhCtzE4SDixudDNfFr&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D set-cookie: cb=ZiFVXXDhCtzE4SDixudDNfFr; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:37 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.4	50068	52.223.40.198	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	768	OUT	GET /track/up?adv=tthfdvo&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&upid=rw95j4b&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	136	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.4	50070	54.71.166.176	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	683	OUT	GET /ibs:dpid=411&dpuuid=ZiFVXQAAADbhbAOj HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:13 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: n5O+jb8TRk0= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-usw2-2-v056-039b355f0.edge-usw2.demdex.com 3 ms set-cookie: dpm=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:13 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.4	50071	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	618	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	1004	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: eae44b614222 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D set-cookie: cb=ZiFVXY7IHCL1JRUBV94o5H49; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:37 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.4	50074	3.161.188.80	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	723	OUT	GET /adscores/g.pixel?sid=9212289188&_puid=ZiFVXXDhCtzE4SDixudDNfFr&_redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D HTTP/1.1 Host: aa.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	1003	IN	HTTP/1.1 302 Found Transfer-Encoding: chunked Connection: close Date: Thu, 18 Apr 2024 17:16:13 GMT Server: AAWebServer P3P: policyref="https://www.agkn.com/p3p/p3p.xml",CP="NOI NID" Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: accept, cache-control, origin, x-requested-with, x-file-name, content-type Set-Cookie: ab=0001%3AbRnmeV4GDedoZSAAHo%2FGOdhwxO4NB42U; Path=/; Domain=.agkn.com; Expires=Fri, 18-Apr-2025 17:16:13 GMT; Max-Age=31536000; Secure; SameSite=None Location: https://d.agkn.com/pixel/10751/?che=1713460573794&ip=81.181.57.52&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D214410604856006788229 X-Cache: Miss from cloudfront Via: 1.1 51f668a91bae8bddb47ed0ddef0f2984.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL59-P7 X-Amz-Cf-Id: QRkRvMNUgAzimTehskYnO5r3ap4s8PBW4owBRUTvpbcCgLgdLxL0ug==
2024-04-18 17:16:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.4	50072	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	479	OUT	GET /ibs:dpid=411&dpuuid=ZiFVXAAAADfeEAOj HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
2024-04-18 17:16:13 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: eqyBumNzRf4= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-2-v059-0493cc48a.edge-va6.demdex.com 2 ms set-cookie: dpm=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:13 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:13 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:13 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.4	50073	35.174.21.144	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	605	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	425	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://risk.lexisnexis.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-04-18 17:16:13 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.4	50075	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	607	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	808	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 0c94112d-c01e-001f-2ff5-818a87000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 1909 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d2abdc2ad9a-ATL
2024-04-18 17:16:13 UTC	561	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 70 Data Ascii: CI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHRp
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 Data Ascii: 9uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-c
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e Data Ascii: #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-bann
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d Data Ascii: ner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust-
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a Data Ascii: k .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float:
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 3b Data Ascii: -sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px;
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 Data Ascii: dk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 Data Ascii: ust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrus
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 Data Ascii: anslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bott

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.4	50076	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	614	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 79df5d63-a01e-007b-5771-807b1f000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 42566 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d2aca06b0dc-ATL
2024-04-18 17:16:13 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c76 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 Data Ascii: BsaW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvd
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 76 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 Data Ascii: vbGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMT
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 59 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a Data Ascii: YWdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.4	50077	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	614	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:13 UTC	826	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: faab5e13-601e-0064-4671-80c81b000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 82168 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d2acba8138e-ATL
2024-04-18 17:16:13 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-04-18 17:16:13 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.4	50078	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	430	OUT	GET /consent/bf7bd77c-7b68-4d29-8fc8-56fe629dc57e/018e86cb-0f61-72d5-abc5-660accde9ba2/en.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	902	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87664d2af9890711-ATL CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 23442 Cache-Control: public, max-age=86400 Expires: Fri, 19 Apr 2024 17:16:13 GMT Last-Modified: Fri, 29 Mar 2024 16:23:38 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: mFpRzDY3RcHLI5Ey5p+RFQ== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 13bca701-201e-0017-1cf8-819088000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-18 17:16:14 UTC	467	IN	Data Raw: 37 63 31 38 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 72 65 66 Data Ascii: 7c18{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Cookie Pref
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 6f 73 65 20 74 6f 20 72 65 6a 65 63 74 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 2e 20 48 6f 77 65 76 65 72 2c 20 62 6c 6f 63 6b 69 6e 67 20 73 6f 6d 65 20 74 79 70 65 73 20 6d 61 79 20 69 6d 70 61 63 74 20 79 6f 75 72 20 65 78 70 65 72 69 65 6e 63 65 20 6f 66 20 6f 75 72 20 73 69 74 65 20 61 6e 64 20 74 68 65 20 73 65 72 76 69 63 65 73 20 77 65 20 61 72 65 20 61 62 6c 65 20 74 6f 20 6f 66 66 65 72 2e 20 43 6c 69 63 6b 20 74 68 65 20 63 61 74 65 67 6f 72 79 20 68 65 61 64 69 6e 67 73 20 62 65 6c 6f 77 20 74 6f 20 66 69 6e 64 20 6f 75 74 20 6d 6f 72 65 20 6f 72 20 63 68 61 6e 67 65 20 79 6f 75 72 20 73 65 74 74 69 6e 67 73 2e 20 46 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2c 20 73 65 65 20 6f 75 72 20 3c 61 20 68 72 Data Ascii: ose to reject some types of cookies. However, blocking some types may impact your experience of our site and the services we are able to offer. Click the category headings below to find out more or change your settings. For more information, see our <a hr
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 2f 61 3e 2e 22 2c 22 41 6c 65 72 74 43 6c 6f 73 65 54 65 78 74 22 3a 22 43 6c 6f 73 65 22 2c 22 41 6c 65 72 74 4d 6f 72 65 49 6e 66 6f 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 22 2c 22 43 6f 6f 6b 69 65 53 65 74 74 69 6e 67 42 75 74 74 6f 6e 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 22 2c 22 41 6c 65 72 74 41 6c 6c 6f 77 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 41 63 63 65 70 74 20 43 6f 6f 6b 69 65 73 22 2c 22 43 6c 6f 73 65 53 68 6f 75 6c 64 41 63 63 65 70 74 41 6c 6c 43 6f 6f 6b 69 65 73 22 3a 66 61 6c 73 65 2c 22 4c 61 73 74 52 65 63 6f 6e 73 65 6e 74 44 61 74 65 22 3a 6e 75 6c 6c 2c 22 42 61 6e 6e 65 72 54 69 74 6c 65 22 3a 22 22 2c 22 46 6f 72 63 65 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 42 Data Ascii: /a>.","AlertCloseText":"Close","AlertMoreInfoText":"Cookie Settings","CookieSettingButtonText":"Cookie Settings","AlertAllowCookiesText":"Accept Cookies","CloseShouldAcceptAllCookies":false,"LastReconsentDate":null,"BannerTitle":"","ForceConsent":false,"B
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 6b 69 6e 67 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 20 66 6f 72 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 70 75 72 70 6f 73 65 73 3a 22 2c 22 47 72 6f 75 70 73 22 3a 5b 7b 22 53 68 6f 77 49 6e 50 6f 70 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 49 6e 50 6f 70 75 70 4e 6f 6e 49 41 42 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 44 4b 4c 69 73 74 4c 69 6e 6b 22 3a 74 72 75 65 2c 22 4f 72 64 65 72 22 3a 22 31 22 2c 22 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 22 3a 22 31 22 2c 22 50 61 72 65 6e 74 22 3a 22 22 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 47 72 6f 75 70 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 74 72 75 65 2c 22 53 68 6f 77 53 75 62 67 72 6f 75 70 54 6f 67 67 6c 65 22 3a 66 61 6c 73 65 2c 22 47 72 6f 75 70 44 Data Ascii: king technologies for the following purposes:","Groups":[{"ShowInPopup":true,"ShowInPopupNonIAB":true,"ShowSDKListLink":true,"Order":"1","OptanonGroupId":"1","Parent":"","ShowSubgroup":true,"ShowSubGroupDescription":true,"ShowSubgroupToggle":false,"GroupD
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 73 49 61 62 50 75 72 70 6f 73 65 22 3a 66 61 6c 73 65 2c 22 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 49 64 73 22 3a 5b 5d 2c 22 46 69 72 73 74 50 61 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 36 36 31 38 35 35 61 31 2d 64 66 38 38 2d 34 35 63 34 2d 38 63 33 63 2d 34 35 34 35 64 35 32 61 30 34 38 32 22 2c 22 4e 61 6d 65 22 3a 22 4f 70 74 61 6e 6f 6e 41 6c 65 72 74 42 6f 78 43 6c 6f 73 65 64 22 2c 22 48 6f 73 74 22 3a 22 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 35 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 73 65 74 20 62 79 20 77 65 62 73 69 74 65 73 20 75 73 69 6e 67 20 63 65 Data Ascii: sIabPurpose":false,"GeneralVendorsIds":[],"FirstPartyCookies":[{"id":"661855a1-df88-45c4-8c3c-4545d52a0482","Name":"OptanonAlertBoxClosed","Host":"risk.lexisnexis.com","IsSession":false,"Length":"365","description":"This cookie is set by websites using ce
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 36 62 64 36 62 39 66 33 2d 30 66 61 30 2d 34 38 31 31 2d 62 35 34 63 2d 37 35 62 33 36 39 37 36 33 36 62 37 22 2c 22 4e 61 6d 65 22 3a 22 41 53 50 2e 4e 45 54 5f 53 65 73 73 69 6f 6e 49 64 22 2c 22 48 6f 73 74 22 3a 22 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 47 65 6e 65 72 61 6c 20 70 75 72 70 6f 73 65 20 70 6c 61 74 66 6f 72 6d 20 73 65 73 73 69 6f 6e 20 63 6f 6f 6b 69 65 2c 20 75 73 65 64 20 62 79 20 73 69 74 65 73 20 77 72 69 74 74 65 6e 20 77 69 74 68 20 4d 69 73 63 72 6f 73 6f 66 74 20 2e 4e 45 54 20 62 61 73 65 Data Ascii: isThirdParty":false},{"id":"6bd6b9f3-0fa0-4811-b54c-75b3697636b7","Name":"ASP.NET_SessionId","Host":"risk.lexisnexis.com","IsSession":true,"Length":"0","description":"General purpose platform session cookie, used by sites written with Miscrosoft .NET base
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 6d 65 22 3a 22 66 6f 6e 74 73 2e 6e 65 74 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 66 6f 6e 74 73 2e 6e 65 74 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 31 35 38 39 31 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 66 31 35 36 62 65 33 32 2d 31 61 30 37 2d 34 31 64 65 2d 39 37 63 30 2d 30 32 37 30 32 32 33 39 33 62 33 32 22 2c 22 4e 61 6d 65 22 3a 22 5f 5f 63 66 5f 62 6d 22 2c 22 48 6f 73 74 22 3a 22 66 6f 6e 74 73 2e 6e 65 74 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 69 73 20 61 20 43 6c 6f 75 64 46 6f 75 6e 64 72 Data Ascii: me":"fonts.net","DisplayName":"fonts.net","HostId":"H15891","Description":"","PrivacyPolicy":"","Cookies":[{"id":"f156be32-1a07-41de-97c0-027022393b32","Name":"__cf_bm","Host":"fonts.net","IsSession":false,"Length":"0","description":"This is a CloudFoundr
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 65 20 5f 63 66 75 76 69 64 20 63 6f 6f 6b 69 65 20 69 73 20 6f 6e 6c 79 20 73 65 74 20 77 68 65 6e 20 61 20 73 69 74 65 20 75 73 65 73 20 74 68 69 73 20 6f 70 74 69 6f 6e 20 69 6e 20 61 20 52 61 74 65 20 4c 69 6d 69 74 69 6e 67 20 52 75 6c 65 2c 20 61 6e 64 20 69 73 20 6f 6e 6c 79 20 75 73 65 64 20 74 6f 20 61 6c 6c 6f 77 20 74 68 65 20 43 6c 6f 75 64 66 6c 61 72 65 20 57 41 46 20 74 6f 20 64 69 73 74 69 6e 67 75 69 73 68 20 69 6e 64 69 76 69 64 75 61 6c 20 75 73 65 72 73 20 77 68 6f 20 73 68 61 72 65 20 74 68 65 20 73 61 6d 65 20 49 50 20 61 64 64 72 65 73 73 2e 20 56 69 73 69 74 6f 72 73 20 77 68 6f 20 64 6f 20 6e 6f 74 20 70 Data Ascii: ession":true,"Length":"0","description":"The _cfuvid cookie is only set when a site uses this option in a Rate Limiting Rule, and is only used to allow the Cloudflare WAF to distinguish individual users who share the same IP address. Visitors who do not p
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 65 73 73 69 6f 6e 20 62 79 20 74 68 65 20 73 65 72 76 65 72 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 5d 7d 5d 2c 22 50 75 72 70 6f 73 65 49 64 22 3a 22 43 32 31 36 42 38 30 37 2d 31 41 34 38 2d 34 32 35 38 2d 39 32 37 45 2d 39 38 34 39 38 45 46 44 44 43 31 37 22 2c 22 43 75 73 74 6f 6d 47 72 6f 75 70 49 64 22 3a 22 31 22 2c 22 47 72 6f 75 70 49 64 22 3a 22 31 32 34 33 34 61 35 31 2d 66 66 32 30 2d 34 34 37 66 2d 62 65 64 39 2d 32 38 31 35 38 66 31 34 64 35 62 62 22 2c 22 53 74 61 74 75 73 22 3a 22 61 6c 77 61 79 73 20 61 63 74 69 76 65 22 2c 22 49 73 44 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 Data Ascii: ession by the server.","DurationType":1,"category":null,"isThirdParty":false}]}],"PurposeId":"C216B807-1A48-4258-927E-98498EFDDC17","CustomGroupId":"1","GroupId":"12434a51-ff20-447f-bed9-28158f14d5bb","Status":"always active","IsDntEnabled":false,"Type":"
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 72 74 79 43 6f 6f 6b 69 65 73 22 3a 5b 5d 2c 22 48 6f 73 74 73 22 3a 5b 7b 22 48 6f 73 74 4e 61 6d 65 22 3a 22 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 22 2c 22 44 69 73 70 6c 61 79 4e 61 6d 65 22 3a 22 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 22 2c 22 48 6f 73 74 49 64 22 3a 22 48 31 35 34 31 35 22 2c 22 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 22 2c 22 50 72 69 76 61 63 79 50 6f 6c 69 63 79 22 3a 22 22 2c 22 43 6f 6f 6b 69 65 73 22 3a 5b 7b 22 69 64 22 3a 22 39 66 35 32 30 65 34 31 2d 30 31 37 66 2d 34 65 33 62 2d 62 37 35 31 2d 37 32 65 66 35 62 30 38 38 65 61 39 22 2c 22 4e 61 6d 65 22 3a 22 5f 47 52 45 43 41 50 54 43 48 41 22 2c 22 48 6f 73 74 22 3a 22 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e 6e 65 74 22 2c 22 49 73 53 65 73 73 Data Ascii: rtyCookies":[],"Hosts":[{"HostName":"www.recaptcha.net","DisplayName":"www.recaptcha.net","HostId":"H15415","Description":"","PrivacyPolicy":"","Cookies":[{"id":"9f520e41-017f-4e3b-b751-72ef5b088ea9","Name":"_GRECAPTCHA","Host":"www.recaptcha.net","IsSess

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.4	50079	34.199.102.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	421	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXXDhCtzE4SDixudDNfFr
2024-04-18 17:16:14 UTC	135	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:13 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close
2024-04-18 17:16:14 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.4	50080	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:13 UTC	429	OUT	GET /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; cb=ZiFVXaa9gf7uMjfnRYtEussv
2024-04-18 17:16:14 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: 59eab6b22f27 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:38 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-04-18 17:16:14 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 69 46 56 58 61 61 39 67 66 37 75 4d 6a 66 6e 52 59 74 45 75 73 73 76 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"ZiFVXaa9gf7uMjfnRYtEussv","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.4	50081	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	479	OUT	GET /ibs:dpid=411&dpuuid=ZiFVXQAAADbhbAOj HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
2024-04-18 17:16:14 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: image/gif Content-Length: 42 Connection: close X-TID: 5kWhkXmXRKs= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" X-Content-Type-Options: nosniff DCS: dcs-prod-va6-1-v059-0d7a7446a.edge-va6.demdex.com 3 ms set-cookie: dpm=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:14 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:14 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.4	50082	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	832	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.4	50083	3.163.101.20	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	777	OUT	GET /pixel/10751/?che=1713460573794&ip=81.181.57.52&l1=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D128%26cm%3D214410604856006788229 HTTP/1.1 Host: d.agkn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ab=0001%3AbRnmeV4GDedoZSAAHo%2FGOdhwxO4NB42U
2024-04-18 17:16:14 UTC	771	IN	HTTP/1.1 302 Content-Length: 0 Connection: close Cache-Control: no-cache, must-revalidate Date: Thu, 18 Apr 2024 17:16:13 GMT Expires: Sat, 01 Jan 2000 00:00:00 GMT Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=128&cm=214410604856006788229 P3P: CP="NOI DSP COR CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT" Pragma: no-cache Set-Cookie: ab=0001%3AbRnmeV4GDedoZSAAHo%2FGOdhwxO4NB42U;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure Set-Cookie: u=C\|0AAAAAAAALbQR3gAAAAAA;Path=/;Domain=agkn.com;Max-Age=31536000;SameSite=None;Secure X-Cache: Miss from cloudfront Via: 1.1 93309f2e8a93384beeedfcc4af03fcb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: ATL58-P8 X-Amz-Cf-Id: YjnWHYCDgxrIx38HVQBeoq9Yb36FoEN7JAg9iIyPeEaPPtLD9jgIFQ==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.4	50084	34.199.102.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	421	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXY7IHCL1JRUBV94o5H49
2024-04-18 17:16:14 UTC	135	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close
2024-04-18 17:16:14 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.4	50085	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	429	OUT	GET /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; cb=ZiFVXaa9gf7uMjfnRYtEussv
2024-04-18 17:16:14 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: f6b9be6c3f1f X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:38 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-04-18 17:16:14 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 69 46 56 58 61 61 39 67 66 37 75 4d 6a 66 6e 52 59 74 45 75 73 73 76 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"ZiFVXaa9gf7uMjfnRYtEussv","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.4	50086	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 2afaf4cb-101e-0033-69c3-7b6628000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 45984 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d2f68845083-ATL
2024-04-18 17:16:14 UTC	560	IN	Data Raw: 37 63 37 36 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c76 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 Data Ascii: BsaW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvd
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 76 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 Data Ascii: vbGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMT
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 59 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a Data Ascii: YWdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.4	50087	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	583	OUT	GET /logos/static/ot_guard_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	829	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: image/svg+xml Content-Length: 497 Connection: close Content-MD5: tXyZydHjxQshFMbbBT1/8A== Last-Modified: Wed, 17 Apr 2024 02:07:28 GMT ETag: 0x8DC5E832222975D x-ms-request-id: ea2ef7c1-c01e-0020-2189-904224000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 62180 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d2f8e92add1-ATL
2024-04-18 17:16:14 UTC	497	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 6f 74 2d 66 6c 6f 61 74 69 6e 67 2d 62 75 74 74 6f 6e 5f 5f 73 76 67 2d 66 69 6c 6c 22 20 64 3d 22 4d 31 34 2e 35 38 38 20 30 6c 2e 34 34 35 2e 33 32 38 63 31 2e 38 30 37 20 31 2e 33 30 33 20 33 2e 39 36 31 20 32 2e 35 33 33 20 36 2e 34 36 31 20 33 2e 36 38 38 20 32 2e 30 31 35 2e 39 33 20 34 2e 35 37 36 20 31 2e 37 34 36 20 37 2e 36 38 32 20 32 2e 34 34 36 20 30 20 31 34 2e 31 37 38 2d 34 2e 37 33 20 32 34 2e 31 33 33 2d 31 34 2e 31 39 20 32 39 2e 38 36 34 6c 2d 2e 33 39 38 2e 32 33 36 43 34 2e 38 36 33 20 33 30 2e 38 37 20 30 20 32 30 2e 38 33 37 20 30 20 36 2e 34 36 32 63 33 2e 31 30 37 2d 2e 37 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.4	50088	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	717	OUT	GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/104ff038-4400-483e-a464-09cc53e8c04f/517eb6c6-b474-40d4-9c47-7b50cbe09d2f/LNRS_RGB_POS_300.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	827	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: image/png Content-Length: 60579 Connection: close Content-MD5: EJyxuV7wBAwZXP0LQzRZ0w== Last-Modified: Fri, 18 Nov 2022 11:28:53 GMT ETag: 0x8DAC95812BC3243 x-ms-request-id: 9a202c6f-901e-004f-0790-1348d7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 62700 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d304e3844d0-ATL
2024-04-18 17:16:14 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 68 00 00 01 a1 08 06 00 00 00 fc db 5d 2b 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 ec 30 49 44 41 54 78 da ec bd 09 74 1c d7 79 e7 fb 55 77 a3 b1 10 3b 08 ee 22 1a 24 45 48 d4 02 c8 92 ac 5d 84 e4 48 de 4d 38 b6 e3 c4 71 42 68 92 cc 24 ef e4 44 d4 99 64 b2 ce 23 34 73 26 c9 cc 39 6f 4c cd e4 65 9b 24 04 fd ec c4 6b 44 7a b7 23 5b a0 36 6b 17 a8 95 a2 48 09 a0 44 71 27 f6 ad d1 5d f5 ea 56 dd aa ba b5 f5 5a 8d de fe bf 83 42 57 d7 5e b7 6b b9 f7 5f 5f fd 3f 49 51 14 02 00 00 00 00 00 00 00 00 00 00 00 00 b0 f2 84 50 04 00 00 00 00 00 00 00 00 00 00 00 00 50 1c 20 Data Ascii: PNGIHDRh]+pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<0IDATxtyUw;"$EH]HM8qBh$Dd#4s&9oLe$kDz#[6kHDq']VZBW^k__?IQPP
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 00 00 00 00 00 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 00 00 00 00 00 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 00 00 00 00 00 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 Data Ascii: E-P$ @@E-P$ @@E-P$ @@E-P$ @@
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 83 bd 89 20 e9 af c8 06 c9 11 94 2c a8 34 20 d0 82 bc 39 f3 cb 5f 78 20 d2 d9 31 10 d9 b8 fe 83 ab ff fc 4f ea 0c 11 d6 ba 08 4b b6 0f a3 a7 66 c3 1a fd 73 6b 17 89 e2 ad 3c 35 a3 09 b5 c9 b3 e7 69 f9 e4 7b 94 18 7f 8f 5c 11 b7 c6 92 04 6b 03 c1 ba 40 48 16 26 46 d9 86 4c 3f 5a bb 38 eb 91 58 cc 29 ce 4a 92 4d b8 35 f7 d1 f2 ba 65 3b b1 5b fd 64 1d 4d fc b7 ff 3a ae 7e 3f 48 4c ac fd d3 ff 7c 10 47 09 00 00 00 10 28 23 da 7d 37 38 a6 e0 37 0a 7c 40 d2 30 00 00 c8 9f c3 14 ec 83 d5 11 14 29 a8 34 20 d0 82 ac 79 3b d6 d3 5a 7f dd 35 bf 17 dd 16 db 1d e9 da b4 a5 f1 13 f7 38 6c 0a d8 9f d9 c3 f5 58 af ef 24 44 d6 5a c3 43 ad 2d 14 6d 6b 21 69 c7 e5 e6 b8 e5 93 a7 28 a1 76 f1 b7 de a6 e4 f9 8b 42 14 ac db f2 40 17 6b 85 88 db 70 c8 61 5d e0 23 ce 9a d3 d9 23 Data Ascii: ,4 9_x 1OKfsk<5i{\k@H&FL?Z8X)JM5e;[dM:~?HL\|G(#}787\|@0)4 y;Z58lX$DZC-mk!i(vB@kpa]##
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: ac e8 4b eb 27 ce b2 7e 87 ff ac 2d 8a 56 13 66 15 5d 94 35 be cb fc 7b 32 c9 05 5b e5 80 fa 39 d4 f6 67 ff f7 18 8e 5e 10 50 c5 08 02 2d 00 a0 d2 ae 6b ec 3a 34 ac 76 5d 69 26 7d 48 ed 86 d0 c8 ab f8 e3 61 88 0a 2b d0 b2 08 ec 3e 24 97 cb f9 5c 85 40 0b 00 ae 05 ec 9c de 43 a9 a3 69 d9 03 55 26 cc 1e 44 89 81 8a 3f 27 20 d0 56 17 4c 98 65 8d 92 55 37 f4 ee 56 96 e2 b4 7c ee 82 26 c8 66 2a c2 66 27 d0 7a d9 21 08 09 b6 42 e2 77 4b f8 0c b7 b7 51 64 c3 1a aa 89 6d a6 f0 7a f5 b3 eb b2 d4 d6 06 42 04 ad e4 21 cc 3a fb 93 e7 2f 50 fc d5 37 29 79 e1 a2 e0 4b 1b b6 47 d7 3a c5 59 21 b1 98 2b 61 98 28 d4 66 9a 24 4c e8 ec c2 ac 19 3d 6b 89 b4 5c a8 55 d4 ef ea a7 2e d4 ee 7d 10 8d 01 90 6f 85 08 02 2d 00 a0 52 af 6f ec f5 c7 01 b5 13 af 4b ec be 39 a2 76 07 21 Data Ascii: K'~-Vf]5{2[9g^P-k:4v]i&}Ha+>$\@CiU&D?' VLeU7V\|&f*f'z!BwKQdmzB!:/P7)yKG:Y!+a(f$L=k\U.}o-RoK9v!
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 26 a6 0f 3f a4 4e b3 a7 f3 af fe 6a ac 22 2e 56 7a 86 4f 16 1d 3e 48 99 3f 84 38 c0 1a 4b 6a 99 8f e0 4a e1 2a 4f 24 09 03 00 00 50 c9 f7 b9 21 5a 99 24 61 4e 0e a9 f7 c4 01 fc 02 29 7f 1b 56 67 40 92 30 00 00 00 40 bc 3f 42 a0 2d 6f 5e d7 ed 0c 86 24 fd a9 bd fe a3 8a 3f 70 86 fd d1 ae 4d 14 59 bb 86 6a d6 75 52 b8 ad 45 13 35 0d c1 54 f2 b4 17 b0 bc 62 33 16 60 7d a6 71 0b bc 64 4f b4 65 0c 0b 49 2e 21 97 8d 67 de b1 f2 dc 1c 25 2f 4e 52 f2 d2 24 c9 13 93 9a 78 29 b1 48 dc 10 b7 22 08 85 28 d4 dc 44 b5 bd 3b a8 a6 7b b3 7f f2 30 a7 7f 2c fb 94 93 ea 3a ce 52 f2 fc 45 4b 9c e5 e2 af c4 45 61 6d 3d 66 94 ad e4 f6 c1 65 18 fe b1 32 f7 a0 d5 44 59 43 7c e5 82 ac 29 c4 2a 0e 21 d6 fa b4 8b b4 b2 4d ac 55 98 60 6d 17 69 a7 d4 71 43 9d 7f fd d7 65 9d b8 82 37 Data Ascii: &?Nj".VzO>H?8KjJO$P!Z$aN)Vg@0@?B-o^$?pMYjuRE5Tb3`}qdOeI.!g%/NR$x)H"(D;{0,:REKEam=fe2DYC\|)!MU`miqCe7
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: ed 33 cc 3d 66 a5 1a 0a 37 35 92 54 5f 4f 21 b5 d3 96 61 d8 90 b0 cf a5 38 25 ce 9e a7 c4 e9 33 ea 3a 17 74 3b 03 c1 f2 41 31 3e 89 3c 92 9e d9 b6 bf 45 fd ba ff ec 17 be 38 a0 2e 63 70 dd d7 ff a5 64 22 3b d4 ed 67 b6 04 62 94 b8 68 49 10 a3 0c 5f 57 54 97 c3 ec 10 06 58 d4 0a eb b8 48 3b 46 ba f0 cb 3a 76 5e f5 e3 2a 03 00 00 00 00 ce 11 72 fb de e7 cb 2e b5 0e b2 4f ad 8b ec 41 f1 02 00 00 00 c0 0f 08 b4 25 cc 2b b1 1e e6 c1 c9 22 09 bb 9c e3 c2 b5 51 aa bf e2 72 6a ec bb 8a c2 ec 75 77 bf c4 54 7e 48 99 2a b6 94 c5 74 12 29 8b 4b 5a 64 27 5b fe f2 db 27 b5 ed 4a 4e 4d 51 72 72 5a df c6 50 88 12 67 ce 91 b2 14 37 bf 6b 7e ad 86 7f ab c7 77 66 1f c0 fc 56 99 18 6a 8c 0f b7 b5 50 b8 a5 45 eb 0f b5 34 a9 5d 33 49 75 75 14 5e dd 9e 66 df 04 cf 5d e1 bb 6d Data Ascii: 3=f75T_O!a8%3:t;A1><E8.cpd";gbhI_WTXH;F:v^r.OA%+"QrjuwT~Ht)KZd'['JNMQrrZPg7k~wfVjPE4]3Iuu^f]m
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: f3 8b 65 d1 ae 6a ef fd 01 2f 7a 27 92 86 01 00 00 00 c0 09 04 da 12 e0 48 ac 67 40 d2 5f c1 6e a9 5d bf 86 da 6e ba 9e 6a 3a da f2 b7 0c 10 71 2c 2b 39 35 43 4b 6f bd 4d 8b 2f bf 4e 89 b3 e7 f5 49 8a b0 ef e1 d6 16 0a 6f 5c 47 35 eb d7 52 88 d9 0f b4 b5 52 4d ec 32 c1 b3 d6 10 4b 25 53 10 95 d2 59 2a 78 f9 cb 1a bd be d3 49 d6 20 29 c5 72 c4 c8 59 5b f4 ac e4 99 34 4d 37 9c 15 c4 59 45 f3 32 d0 97 23 24 01 33 bf 1b cb 30 33 79 29 e6 78 e6 c3 cb 22 6c 99 85 02 b3 41 60 c2 2b 13 d7 69 71 89 e4 a5 b8 e6 07 ac 24 12 ea 8f 2b eb 9f 32 fb d4 2d 12 b4 a4 62 49 3d 02 37 43 d8 83 82 91 f7 3f fc b1 c1 0d 3f fe c1 c1 15 3a 1c 44 a1 74 3c 97 d7 ff 78 14 ee a0 a3 31 35 e2 31 29 1b 66 08 b4 31 5c 85 00 00 00 00 e0 84 89 a8 5c a4 45 d2 30 00 00 00 00 14 14 08 b4 45 e6 Data Ascii: ej/z'Hg@_n]nj:q,+95CKoM/NIo\G5RRM2K%SY*xI )rY[4M7YE2#$303y)x"lA`+iq$+2-bI=7C??:Dt<x151)f1\\E0E
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: ac d3 ac 03 32 12 64 f3 da 48 59 17 8d 67 e7 b4 a8 d7 70 47 5b e6 f3 32 9b 85 c6 55 9a c0 9c b8 78 51 fd 2d 97 29 54 57 ab f9 d1 4a b5 b5 5a 17 62 42 38 db 47 0f 98 58 6b 24 60 23 59 d1 ca 29 39 31 a9 45 11 27 ce 9c d3 13 89 69 02 ab 33 d2 96 84 61 64 7d a6 8f c8 dd a5 4e 37 f2 de 4d b7 f7 6f 7a e6 89 c0 44 5a b5 51 32 a6 1e 53 cc b6 c0 48 c2 61 24 e5 c8 74 7e e6 e3 76 98 37 9a 58 02 b1 3d ea b0 7d ce e9 d4 e1 31 b2 27 fa 18 c1 15 0a 00 00 40 a5 c1 85 44 f6 64 ba 9f 0f 62 fd 7e af d2 1b f7 c2 31 a3 63 f7 65 94 a2 27 85 4a 1a b6 1f 49 c3 00 00 a0 6a ef d9 c6 3d 5a bc 57 1b df 9d 18 f7 6a e2 f7 a3 49 f5 de 81 36 6d 05 00 81 76 05 78 91 45 ce 32 71 b6 ff d6 c0 c4 d9 99 e7 46 69 ee c8 6b 24 3b 84 d9 20 23 65 c3 ad 2d 54 7f cb 0d 54 bb 63 bb 26 00 16 5c e4 e4 Data Ascii: 2dHYgpG[2UxQ-)TWJZbB8GXk$`#Y)91E'i3ad}N7MozDZQ2SHa$t~v7X=}1'@Ddb~1ce'JIj=ZWjI6mvxE2qFik$; #e-TTc&\
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: f9 5b 80 92 f9 ad fb 79 45 d6 68 dc 05 e1 9d 28 3e a1 67 5d c9 47 92 3a ae 1f 41 f2 a0 91 b0 b0 c2 8f 23 56 49 7e 29 8f 45 dc 57 08 7f 4d 75 bb 58 d9 ef cd 73 31 77 95 53 34 8e ba cf 83 bc e1 b2 b3 04 36 67 9c 37 90 58 a3 ef 60 89 95 53 2e c7 46 56 c7 82 ba 0e f1 c1 72 90 1c a8 e4 a4 61 39 5e 8f ab e5 5a 1b e3 a2 44 9f 70 ef 0e c2 4e e3 08 59 d1 f0 23 e5 f0 b0 d5 d1 26 08 0a 56 ff ef af 86 b7 01 f2 bc 3f da da 60 25 d6 06 29 ab 76 07 6f 9b ee e1 f7 ed ae 12 d8 a4 c3 64 09 9b 63 25 56 56 ac 8c 86 72 28 a7 03 6c be 4a 78 68 0c 81 b6 80 bc 7e 13 13 67 6f d4 c5 59 2e d6 99 02 2d b9 85 4b 2f 81 36 39 37 4f 13 87 9f a2 a5 f7 cf ea 83 c4 1f 2f 80 fe c8 da 4e 5a 75 d3 07 a8 fe da 1d 9e 42 6a d6 02 2d 89 82 26 d9 e6 63 af d9 2f bd f8 8a 26 cc 26 a7 a6 59 61 e8 e5 Data Ascii: [yEh(>g]G:A#VI~)EWMuXs1wS46g7X`S.FVra9^ZDpNY#&V?`%)vodc%VVr(lJxh~goY.-K/697O/NZuBj-&c/&&Ya
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 04 d0 70 f1 a3 60 51 a2 45 2e 2f e7 b5 38 ab 2a 51 a1 af b7 95 2c d0 f2 63 75 b8 84 04 9c ac 1b 7b c5 7c 18 ba 52 02 6d 81 45 a4 82 bd 66 5c e4 63 9b d5 19 aa 4e a0 15 04 85 52 79 98 ea 77 cc ed e3 f7 ed c9 12 29 b7 7c ee 43 65 77 ed 0f a0 bc 0e e6 71 df 28 f8 79 56 c9 02 2d bf b6 0d 53 79 3d 50 15 59 d1 37 37 7c da fb 43 d9 bc e5 ea 13 7d 5b b6 ed 7d 08 b4 01 f3 7c 77 cf e0 fa 3b 6f dd 5f b7 a6 c3 db 16 20 e4 1d 3d 6b 08 8a d3 a3 af d2 cc 6b 6f 06 1e 35 1b bd 6c 23 35 dd fe 41 4d a0 f5 13 34 3d 05 5a 63 5b 43 5e a2 a8 3d 9a 95 09 a1 4b 2f bc 4c 4b af bf e9 1d 5d 6b 46 cc 4a ee 08 da 70 88 a2 3b 7a a8 fe b6 1b ed c9 c9 7c a3 7a c9 df 8a 60 76 8e 16 5f 38 42 cb e3 a7 88 92 09 dd 7e a0 be 8e ea ae bf 96 a2 57 f5 78 ec 2f 5f b6 e0 9d cb c4 4b f6 aa 7f f2 c2 Data Ascii: p`QE./8*Q,cu{\|RmEf\cNRyw)\|Cewq(yV-Sy=PY77\|C}[}\|w;o_ =kko5l#5AM4=Zc[C^=K/LK]kFJp;z\|z`v_8B~Wx/_K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.4	50089	104.19.178.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	621	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	830	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Wed, 17 Apr 2024 06:40:30 GMT ETag: 0x8DC5EA946CA59A3 x-ms-request-id: 3bc77349-c01e-006d-2ffa-908dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 72238 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d309df812de-ATL
2024-04-18 17:16:14 UTC	539	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 20 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 30 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 Data Ascii: 0 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0
2024-04-18 17:16:14 UTC	1369	IN	Data Raw: 31 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 Data Ascii: 1.59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 0
2024-04-18 17:16:14 UTC	548	IN	Data Raw: 20 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.4	50092	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	717	OUT	GET /pixel.gif?clkgypv=pxl&ch=128&cm=214410604856006788229 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"}]; cb=ZiFVXaa9gf7uMjfnRYtEussv
2024-04-18 17:16:14 UTC	1069	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://pixel-sync.sitescout.com/connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:38 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:38 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.4	50093	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	584	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: text/html Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.4	50094	63.140.39.65	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	2523	OUT	GET /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3583132725641?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2019%3A16%3A13%204%20-120&mid=72321666800473193042525972382318204557&aamlh=9&ce=UTF-8&cdp=2&pageName=copyright&g=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&c.&getPreviousValue=3.0&getTimeParting=6.3&call_type=page%20view&opt.&perf=1&dmp=Y&sell=Y&.opt&cm.&ssf=1&.cm&.c&cc=USD&ch=copyright&server=risk.lexisnexis.com&events=event21%2Cevent19%2Cevent60%3D14&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=copyright&v1=copyright&c2=D%3Dv14&v2=D%3Dmid&c3=not%20tagged&v3=not%20tagged&c4=home&c6=D%3Dv6&v6=desktop&c7=D%3Dv7&v7=en-us&c8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v9=5.0%20%28windows%20nt%2010.0%3B%20win64%3B%20x64%29%20applewebkit%2F537.36%20%28khtml%2C%20like%20gecko%29%20chrome%2F117.0.0.0%20safari%2F537.36&c10=2.25.0%7Cpage%20view&v10=2.25.0%7Cpage%20view&c11=D%3Dv11&v11=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&v14=copyright&c16=D%3Dv21&c17=D%3Dv42&v20=page_view&v21=united_states&c22=not%20tagged&v22=bj13hp1dwohhdvwlnmv00t12%7C795f63a1528045ecb42c7dd1921764b8%7CTrue&c23=not%20tagged&v24=%2B1&c25=D%3Dv45&v25=not%20tagged&v26=not%20tagged&c34=D%3Dv34&v34=4%2F18%2F2024%201%3A16%3A10%20pm&c40=14&v41=home&v42=last_build%3D2024-04-17t14%3A53%3A26z%7Cenv%3Dproduction%7Cnum_of_files%3D0&v44=%2B1&v45=A625F8BC-FECA-43F1-B214-C093F227F173%7Cen-US&v60=14&v63=%2B1&v65=%2B1&v66=2&c70=home&c71=highestPercentViewed%3D21%7CinitialPercentViewed%3D21&v76=solution%20missing&v78=not%20set&v87=not%20tagged&v88=not%20tagged&v89=660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3&v90=not%20tagged&v101=1%7CY%7CY&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&AQE=1 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	574	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 17:16:14 GMT expires: Wed, 17 Apr 2024 17:16:14 GMT last-modified: Fri, 19 Apr 2024 17:16:14 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679628565177958400-4618476543718165502 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.4	50090	52.223.40.198	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	786	OUT	GET /track/up?adv=tthfdvo&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&upid=rw95j4b&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:14 UTC	136	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:14 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.4	50095	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	1497	OUT	GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&firstPartyCookieDomain=tracking.risk.lexisnexis.com HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright
2024-04-18 17:16:15 UTC	799	IN	HTTP/1.1 302 Found Cache-Control: no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://tracking.risk.lexisnexis.com/visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&elq1pcGUID=5D9E5884886A4AD98F78488A8F12F57C X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:14 GMT Connection: close Content-Length: 300
2024-04-18 17:16:15 UTC	300	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 69 6e 67 2e 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 76 32 30 30 2f 73 76 72 47 50 3f 70 70 73 3d 33 26 61 6d 70 3b 73 69 74 65 69 64 3d 39 30 33 26 61 6d 70 3b 72 65 66 32 3d 65 6c 71 4e 6f 6e 65 26 61 6d 70 3b 74 7a 6f 3d 2d 36 30 26 61 6d 70 3b 6d 73 3d 33 31 36 26 61 6d 70 3b 6f 70 74 69 6e 3d 64 69 73 61 62 6c 65 64 26 61 6d 70 3b 65 6c 71 31 70 63 47 55 49 44 3d 35 44 39 45 35 38 38 34 38 38 36 41 34 41 44 39 38 46 37 38 34 Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://tracking.risk.lexisnexis.com/visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&elq1pcGUID=5D9E5884886A4AD98F784

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.4	50096	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:14 UTC	1506	OUT	GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=571&optin=disabled&firstPartyCookieDomain=tracking.risk.lexisnexis.com HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright
2024-04-18 17:16:15 UTC	609	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:14 GMT Connection: close Content-Length: 49
2024-04-18 17:16:15 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.4	50097	34.36.216.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:15 UTC	711	OUT	GET /connectors/clickagy/usersync?redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:15 UTC	522	IN	HTTP/1.1 302 Found set-cookie: ssi=c5218487-d718-4b42-91be-3fd18ac4d1d4#1713460575544; Domain=.sitescout.com; Expires=Fri, 18-Apr-2025 17:16:15 GMT; Path=/; Secure; SameSite=None location: https://pixel-sync.sitescout.com/connectors/clickagy/usersync?cookieQ=1&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D Content-Length: 0 date: Thu, 18 Apr 2024 17:16:15 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.4	50098	104.19.177.52	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:15 UTC	478	OUT	GET /logos/c7f35e9f-bc78-43c8-9f0e-7cd83009704c/104ff038-4400-483e-a464-09cc53e8c04f/517eb6c6-b474-40d4-9c47-7b50cbe09d2f/LNRS_RGB_POS_300.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:15 UTC	827	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:15 GMT Content-Type: image/png Content-Length: 60579 Connection: close Content-MD5: EJyxuV7wBAwZXP0LQzRZ0w== Last-Modified: Fri, 18 Nov 2022 11:28:53 GMT ETag: 0x8DAC95812BC3243 x-ms-request-id: 9a202c6f-901e-004f-0790-1348d7000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 62701 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87664d363da24583-ATL
2024-04-18 17:16:15 UTC	542	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 05 68 00 00 01 a1 08 06 00 00 00 fc db 5d 2b 00 00 00 09 70 48 59 73 00 00 2e 23 00 00 2e 23 01 78 a5 3f 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 ec 30 49 44 41 54 78 da ec bd 09 74 1c d7 79 e7 fb 55 77 a3 b1 10 3b 08 ee 22 1a 24 45 48 d4 02 c8 92 ac 5d 84 e4 48 de 4d 38 b6 e3 c4 71 42 68 92 cc 24 ef e4 44 d4 99 64 b2 ce 23 34 73 26 c9 cc 39 6f 4c cd e4 65 9b 24 04 fd ec c4 6b 44 7a b7 23 5b a0 36 6b 17 a8 95 a2 48 09 a0 44 71 27 f6 ad d1 5d f5 ea 56 dd aa ba b5 f5 5a 8d de fe bf 83 42 57 d7 5e b7 6b b9 f7 5f 5f fd 3f 49 51 14 02 00 00 00 00 00 00 00 00 00 00 00 00 b0 f2 84 50 04 00 00 00 00 00 00 00 00 00 00 00 00 50 1c 20 Data Ascii: PNGIHDRh]+pHYs.#.#x?vtEXtSoftwareAdobe ImageReadyqe<0IDATxtyUw;"$EH]HM8qBh$Dd#4s&9oLe$kDz#[6kHDq']VZBW^k__?IQPP
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 00 00 00 00 00 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 00 00 00 00 00 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 00 00 00 00 00 00 00 00 45 02 02 2d 00 00 00 00 00 00 00 00 00 00 00 00 14 09 08 b4 00 00 00 00 00 00 00 00 00 00 00 00 50 24 20 d0 02 00 00 00 00 00 00 00 00 00 00 00 40 91 80 40 0b 00 00 00 00 Data Ascii: E-P$ @@E-P$ @@E-P$ @@E-P$ @@
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: 83 bd 89 20 e9 af c8 06 c9 11 94 2c a8 34 20 d0 82 bc 39 f3 cb 5f 78 20 d2 d9 31 10 d9 b8 fe 83 ab ff fc 4f ea 0c 11 d6 ba 08 4b b6 0f a3 a7 66 c3 1a fd 73 6b 17 89 e2 ad 3c 35 a3 09 b5 c9 b3 e7 69 f9 e4 7b 94 18 7f 8f 5c 11 b7 c6 92 04 6b 03 c1 ba 40 48 16 26 46 d9 86 4c 3f 5a bb 38 eb 91 58 cc 29 ce 4a 92 4d b8 35 f7 d1 f2 ba 65 3b b1 5b fd 64 1d 4d fc b7 ff 3a ae 7e 3f 48 4c ac fd d3 ff 7c 10 47 09 00 00 00 10 28 23 da 7d 37 38 a6 e0 37 0a 7c 40 d2 30 00 00 c8 9f c3 14 ec 83 d5 11 14 29 a8 34 20 d0 82 ac 79 3b d6 d3 5a 7f dd 35 bf 17 dd 16 db 1d e9 da b4 a5 f1 13 f7 38 6c 0a d8 9f d9 c3 f5 58 af ef 24 44 d6 5a c3 43 ad 2d 14 6d 6b 21 69 c7 e5 e6 b8 e5 93 a7 28 a1 76 f1 b7 de a6 e4 f9 8b 42 14 ac db f2 40 17 6b 85 88 db 70 c8 61 5d e0 23 ce 9a d3 d9 23 Data Ascii: ,4 9_x 1OKfsk<5i{\k@H&FL?Z8X)JM5e;[dM:~?HL\|G(#}787\|@0)4 y;Z58lX$DZC-mk!i(vB@kpa]##
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: ac e8 4b eb 27 ce b2 7e 87 ff ac 2d 8a 56 13 66 15 5d 94 35 be cb fc 7b 32 c9 05 5b e5 80 fa 39 d4 f6 67 ff f7 18 8e 5e 10 50 c5 08 02 2d 00 a0 d2 ae 6b ec 3a 34 ac 76 5d 69 26 7d 48 ed 86 d0 c8 ab f8 e3 61 88 0a 2b d0 b2 08 ec 3e 24 97 cb f9 5c 85 40 0b 00 ae 05 ec 9c de 43 a9 a3 69 d9 03 55 26 cc 1e 44 89 81 8a 3f 27 20 d0 56 17 4c 98 65 8d 92 55 37 f4 ee 56 96 e2 b4 7c ee 82 26 c8 66 2a c2 66 27 d0 7a d9 21 08 09 b6 42 e2 77 4b f8 0c b7 b7 51 64 c3 1a aa 89 6d a6 f0 7a f5 b3 eb b2 d4 d6 06 42 04 ad e4 21 cc 3a fb 93 e7 2f 50 fc d5 37 29 79 e1 a2 e0 4b 1b b6 47 d7 3a c5 59 21 b1 98 2b 61 98 28 d4 66 9a 24 4c e8 ec c2 ac 19 3d 6b 89 b4 5c a8 55 d4 ef ea a7 2e d4 ee 7d 10 8d 01 90 6f 85 08 02 2d 00 a0 52 af 6f ec f5 c7 01 b5 13 af 4b ec be 39 a2 76 07 21 Data Ascii: K'~-Vf]5{2[9g^P-k:4v]i&}Ha+>$\@CiU&D?' VLeU7V\|&f*f'z!BwKQdmzB!:/P7)yKG:Y!+a(f$L=k\U.}o-RoK9v!
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: 26 a6 0f 3f a4 4e b3 a7 f3 af fe 6a ac 22 2e 56 7a 86 4f 16 1d 3e 48 99 3f 84 38 c0 1a 4b 6a 99 8f e0 4a e1 2a 4f 24 09 03 00 00 50 c9 f7 b9 21 5a 99 24 61 4e 0e a9 f7 c4 01 fc 02 29 7f 1b 56 67 40 92 30 00 00 00 40 bc 3f 42 a0 2d 6f 5e d7 ed 0c 86 24 fd a9 bd fe a3 8a 3f 70 86 fd d1 ae 4d 14 59 bb 86 6a d6 75 52 b8 ad 45 13 35 0d c1 54 f2 b4 17 b0 bc 62 33 16 60 7d a6 71 0b bc 64 4f b4 65 0c 0b 49 2e 21 97 8d 67 de b1 f2 dc 1c 25 2f 4e 52 f2 d2 24 c9 13 93 9a 78 29 b1 48 dc 10 b7 22 08 85 28 d4 dc 44 b5 bd 3b a8 a6 7b b3 7f f2 30 a7 7f 2c fb 94 93 ea 3a ce 52 f2 fc 45 4b 9c e5 e2 af c4 45 61 6d 3d 66 94 ad e4 f6 c1 65 18 fe b1 32 f7 a0 d5 44 59 43 7c e5 82 ac 29 c4 2a 0e 21 d6 fa b4 8b b4 b2 4d ac 55 98 60 6d 17 69 a7 d4 71 43 9d 7f fd d7 65 9d b8 82 37 Data Ascii: &?Nj".VzO>H?8KjJO$P!Z$aN)Vg@0@?B-o^$?pMYjuRE5Tb3`}qdOeI.!g%/NR$x)H"(D;{0,:REKEam=fe2DYC\|)!MU`miqCe7
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: ed 33 cc 3d 66 a5 1a 0a 37 35 92 54 5f 4f 21 b5 d3 96 61 d8 90 b0 cf a5 38 25 ce 9e a7 c4 e9 33 ea 3a 17 74 3b 03 c1 f2 41 31 3e 89 3c 92 9e d9 b6 bf 45 fd ba ff ec 17 be 38 a0 2e 63 70 dd d7 ff a5 64 22 3b d4 ed 67 b6 04 62 94 b8 68 49 10 a3 0c 5f 57 54 97 c3 ec 10 06 58 d4 0a eb b8 48 3b 46 ba f0 cb 3a 76 5e f5 e3 2a 03 00 00 00 00 ce 11 72 fb de e7 cb 2e b5 0e b2 4f ad 8b ec 41 f1 02 00 00 00 c0 0f 08 b4 25 cc 2b b1 1e e6 c1 c9 22 09 bb 9c e3 c2 b5 51 aa bf e2 72 6a ec bb 8a c2 ec 75 77 bf c4 54 7e 48 99 2a b6 94 c5 74 12 29 8b 4b 5a 64 27 5b fe f2 db 27 b5 ed 4a 4e 4d 51 72 72 5a df c6 50 88 12 67 ce 91 b2 14 37 bf 6b 7e ad 86 7f ab c7 77 66 1f c0 fc 56 99 18 6a 8c 0f b7 b5 50 b8 a5 45 eb 0f b5 34 a9 5d 33 49 75 75 14 5e dd 9e 66 df 04 cf 5d e1 bb 6d Data Ascii: 3=f75T_O!a8%3:t;A1><E8.cpd";gbhI_WTXH;F:v^r.OA%+"QrjuwT~Ht)KZd'['JNMQrrZPg7k~wfVjPE4]3Iuu^f]m
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: f3 8b 65 d1 ae 6a ef fd 01 2f 7a 27 92 86 01 00 00 00 c0 09 04 da 12 e0 48 ac 67 40 d2 5f c1 6e a9 5d bf 86 da 6e ba 9e 6a 3a da f2 b7 0c 10 71 2c 2b 39 35 43 4b 6f bd 4d 8b 2f bf 4e 89 b3 e7 f5 49 8a b0 ef e1 d6 16 0a 6f 5c 47 35 eb d7 52 88 d9 0f b4 b5 52 4d ec 32 c1 b3 d6 10 4b 25 53 10 95 d2 59 2a 78 f9 cb 1a bd be d3 49 d6 20 29 c5 72 c4 c8 59 5b f4 ac e4 99 34 4d 37 9c 15 c4 59 45 f3 32 d0 97 23 24 01 33 bf 1b cb 30 33 79 29 e6 78 e6 c3 cb 22 6c 99 85 02 b3 41 60 c2 2b 13 d7 69 71 89 e4 a5 b8 e6 07 ac 24 12 ea 8f 2b eb 9f 32 fb d4 2d 12 b4 a4 62 49 3d 02 37 43 d8 83 82 91 f7 3f fc b1 c1 0d 3f fe c1 c1 15 3a 1c 44 a1 74 3c 97 d7 ff 78 14 ee a0 a3 31 35 e2 31 29 1b 66 08 b4 31 5c 85 00 00 00 00 e0 84 89 a8 5c a4 45 d2 30 00 00 00 00 14 14 08 b4 45 e6 Data Ascii: ej/z'Hg@_n]nj:q,+95CKoM/NIo\G5RRM2K%SY*xI )rY[4M7YE2#$303y)x"lA`+iq$+2-bI=7C??:Dt<x151)f1\\E0E
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: ac d3 ac 03 32 12 64 f3 da 48 59 17 8d 67 e7 b4 a8 d7 70 47 5b e6 f3 32 9b 85 c6 55 9a c0 9c b8 78 51 fd 2d 97 29 54 57 ab f9 d1 4a b5 b5 5a 17 62 42 38 db 47 0f 98 58 6b 24 60 23 59 d1 ca 29 39 31 a9 45 11 27 ce 9c d3 13 89 69 02 ab 33 d2 96 84 61 64 7d a6 8f c8 dd a5 4e 37 f2 de 4d b7 f7 6f 7a e6 89 c0 44 5a b5 51 32 a6 1e 53 cc b6 c0 48 c2 61 24 e5 c8 74 7e e6 e3 76 98 37 9a 58 02 b1 3d ea b0 7d ce e9 d4 e1 31 b2 27 fa 18 c1 15 0a 00 00 40 a5 c1 85 44 f6 64 ba 9f 0f 62 fd 7e af d2 1b f7 c2 31 a3 63 f7 65 94 a2 27 85 4a 1a b6 1f 49 c3 00 00 a0 6a ef d9 c6 3d 5a bc 57 1b df 9d 18 f7 6a e2 f7 a3 49 f5 de 81 36 6d 05 00 81 76 05 78 91 45 ce 32 71 b6 ff d6 c0 c4 d9 99 e7 46 69 ee c8 6b 24 3b 84 d9 20 23 65 c3 ad 2d 54 7f cb 0d 54 bb 63 bb 26 00 16 5c e4 e4 Data Ascii: 2dHYgpG[2UxQ-)TWJZbB8GXk$`#Y)91E'i3ad}N7MozDZQ2SHa$t~v7X=}1'@Ddb~1ce'JIj=ZWjI6mvxE2qFik$; #e-TTc&\
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: f9 5b 80 92 f9 ad fb 79 45 d6 68 dc 05 e1 9d 28 3e a1 67 5d c9 47 92 3a ae 1f 41 f2 a0 91 b0 b0 c2 8f 23 56 49 7e 29 8f 45 dc 57 08 7f 4d 75 bb 58 d9 ef cd 73 31 77 95 53 34 8e ba cf 83 bc e1 b2 b3 04 36 67 9c 37 90 58 a3 ef 60 89 95 53 2e c7 46 56 c7 82 ba 0e f1 c1 72 90 1c a8 e4 a4 61 39 5e 8f ab e5 5a 1b e3 a2 44 9f 70 ef 0e c2 4e e3 08 59 d1 f0 23 e5 f0 b0 d5 d1 26 08 0a 56 ff ef af 86 b7 01 f2 bc 3f da da 60 25 d6 06 29 ab 76 07 6f 9b ee e1 f7 ed ae 12 d8 a4 c3 64 09 9b 63 25 56 56 ac 8c 86 72 28 a7 03 6c be 4a 78 68 0c 81 b6 80 bc 7e 13 13 67 6f d4 c5 59 2e d6 99 02 2d b9 85 4b 2f 81 36 39 37 4f 13 87 9f a2 a5 f7 cf ea 83 c4 1f 2f 80 fe c8 da 4e 5a 75 d3 07 a8 fe da 1d 9e 42 6a d6 02 2d 89 82 26 d9 e6 63 af d9 2f bd f8 8a 26 cc 26 a7 a6 59 61 e8 e5 Data Ascii: [yEh(>g]G:A#VI~)EWMuXs1wS46g7X`S.FVra9^ZDpNY#&V?`%)vodc%VVr(lJxh~goY.-K/697O/NZuBj-&c/&&Ya
2024-04-18 17:16:15 UTC	1369	IN	Data Raw: 04 d0 70 f1 a3 60 51 a2 45 2e 2f e7 b5 38 ab 2a 51 a1 af b7 95 2c d0 f2 63 75 b8 84 04 9c ac 1b 7b c5 7c 18 ba 52 02 6d 81 45 a4 82 bd 66 5c e4 63 9b d5 19 aa 4e a0 15 04 85 52 79 98 ea 77 cc ed e3 f7 ed c9 12 29 b7 7c ee 43 65 77 ed 0f a0 bc 0e e6 71 df 28 f8 79 56 c9 02 2d bf b6 0d 53 79 3d 50 15 59 d1 37 37 7c da fb 43 d9 bc e5 ea 13 7d 5b b6 ed 7d 08 b4 01 f3 7c 77 cf e0 fa 3b 6f dd 5f b7 a6 c3 db 16 20 e4 1d 3d 6b 08 8a d3 a3 af d2 cc 6b 6f 06 1e 35 1b bd 6c 23 35 dd fe 41 4d a0 f5 13 34 3d 05 5a 63 5b 43 5e a2 a8 3d 9a 95 09 a1 4b 2f bc 4c 4b af bf e9 1d 5d 6b 46 cc 4a ee 08 da 70 88 a2 3b 7a a8 fe b6 1b ed c9 c9 7c a3 7a c9 df 8a 60 76 8e 16 5f 38 42 cb e3 a7 88 92 09 dd 7e a0 be 8e ea ae bf 96 a2 57 f5 78 ec 2f 5f b6 e0 9d cb c4 4b f6 aa 7f f2 c2 Data Ascii: p`QE./8*Q,cu{\|RmEf\cNRyw)\|Cewq(yV-Sy=PY77\|C}[}\|w;o_ =kko5l#5AM4=Zc[C^=K/LK]kFJp;z\|z`v_8B~Wx/_K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.4	50099	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:15 UTC	2338	OUT	GET /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3583132725641?AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2019%3A16%3A13%204%20-120&mid=72321666800473193042525972382318204557&aamlh=9&ce=UTF-8&cdp=2&pageName=copyright&g=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&c.&getPreviousValue=3.0&getTimeParting=6.3&call_type=page%20view&opt.&perf=1&dmp=Y&sell=Y&.opt&cm.&ssf=1&.cm&.c&cc=USD&ch=copyright&server=risk.lexisnexis.com&events=event21%2Cevent19%2Cevent60%3D14&aamb=RKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y&c1=copyright&v1=copyright&c2=D%3Dv14&v2=D%3Dmid&c3=not%20tagged&v3=not%20tagged&c4=home&c6=D%3Dv6&v6=desktop&c7=D%3Dv7&v7=en-us&c8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v8=year%3D2024%20%7C%20month%3DApril%20%7C%20date%3D18%20%7C%20day%3DThursday%20%7C%20time%3D1%3A16%20PM&v9=5.0%20%28windows%20nt%2010.0%3B%20win64%3B%20x64%29%20applewebkit%2F537.36%20%28khtml%2C%20like%20gecko%29%20chrome%2F117.0.0.0%20safari%2F537.36&c10=2.25.0%7Cpage%20view&v10=2.25.0%7Cpage%20view&c11=D%3Dv11&v11=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&v14=copyright&c16=D%3Dv21&c17=D%3Dv42&v20=page_view&v21=united_states&c22=not%20tagged&v22=bj13hp1dwohhdvwlnmv00t12%7C795f63a1528045ecb42c7dd1921764b8%7CTrue&c23=not%20tagged&v24=%2B1&c25=D%3Dv45&v25=not%20tagged&v26=not%20tagged&c34=D%3Dv34&v34=4%2F18%2F2024%201%3A16%3A10%20pm&c40=14&v41=home&v42=last_build%3D2024-04-17t14%3A53%3A26z%7Cenv%3Dproduction%7Cnum_of_files%3D0&v44=%2B1&v45=A625F8BC-FECA-43F1-B214-C093F227F173%7Cen-US&v60=14&v63=%2B1&v65=%2B1&v66=2&c70=home&c71=highestPercentViewed%3D21%7CinitialPercentViewed%3D21&v76=solution%20missing&v78=not%20set&v87=not%20tagged&v88=not%20tagged&v89=660e8293845f19137a7f64478a416d8245c35bb524f5f95d51ca43eb79abe9e3&v90=not%20tagged&v101=1%7CY%7CY&s=1280x1024&c=24&j=1.6&v=N&k=Y&bw=1280&bh=907&mcorgid=FE6E472E5909B11F0A495C1E%40AdobeOrg&AQE=1 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557
2024-04-18 17:16:15 UTC	734	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 17:16:15 GMT expires: Wed, 17 Apr 2024 17:16:15 GMT last-modified: Fri, 19 Apr 2024 17:16:15 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557; Path=/; Domain=lexisnexisrisk.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:16 GMT; etag: 3679628567671046144-4618604819929772346 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.4	50100	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:15 UTC	1274	OUT	GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=571&optin=disabled&firstPartyCookieDomain=tracking.risk.lexisnexis.com HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; s_cc=true
2024-04-18 17:16:16 UTC	609	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:15 GMT Connection: close Content-Length: 49
2024-04-18 17:16:16 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.4	50101	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:15 UTC	1504	OUT	GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&elq1pcGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; s_cc=true
2024-04-18 17:16:16 UTC	750	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com Set-Cookie: ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; domain=risk.lexisnexis.com; expires=Sun, 18-May-2025 17:16:15 GMT; path=/; secure P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:15 GMT Connection: close Content-Length: 49
2024-04-18 17:16:16 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.4	50102	34.36.216.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:15 UTC	785	OUT	GET /connectors/clickagy/usersync?cookieQ=1&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D5%26cm%3D%7BuserId%7D HTTP/1.1 Host: pixel-sync.sitescout.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ssi=c5218487-d718-4b42-91be-3fd18ac4d1d4#1713460575544
2024-04-18 17:16:16 UTC	631	IN	HTTP/1.1 302 Found cache-control: max-age=0,no-cache,no-store pragma: no-cache expires: Tue, 11 Oct 1977 12:34:56 GMT p3p: CP="NON DEVa PSAa PSDa OUR NOR NAV",policyref="/w3c/p3p.xml" set-cookie: ssi=c5218487-d718-4b42-91be-3fd18ac4d1d4#1713460575544; Domain=.sitescout.com; Expires=Fri, 18-Apr-2025 17:16:15 GMT; Path=/; Secure; SameSite=None location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=5&cm=c5218487-d718-4b42-91be-3fd18ac4d1d4-6621555f-5553 Content-Length: 0 date: Thu, 18 Apr 2024 17:16:15 GMT server: A via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.4	50103	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:16 UTC	783	OUT	GET /pixel.gif?clkgypv=pxl&ch=5&cm=c5218487-d718-4b42-91be-3fd18ac4d1d4-6621555f-5553 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"}]
2024-04-18 17:16:16 UTC	1066	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:16 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://cm.g.doubleclick.net/pixel?google_nid=clickagy&google_sc&google_cm&google_hm=WmlGVlhhYTlnZjd1TWpmblJZdEV1c3N2 set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:40 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:40 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.4	50104	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:16 UTC	1312	OUT	GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=elqNone&tzo=-60&ms=316&optin=disabled&elq1pcGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
2024-04-18 17:16:16 UTC	750	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com Set-Cookie: ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; domain=risk.lexisnexis.com; expires=Sun, 18-May-2025 17:16:16 GMT; path=/; secure P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:16 GMT Connection: close Content-Length: 49
2024-04-18 17:16:16 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.4	50105	74.125.136.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:16 UTC	749	OUT	GET /pixel?google_nid=clickagy&google_sc&google_cm&google_hm=WmlGVlhhYTlnZjd1TWpmblJZdEV1c3N2 HTTP/1.1 Host: cm.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:17 UTC	656	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Location: https://aorta.clickagy.com/pixel.gif?ch=8&cm=CAESEO96mNRiSkwTTcCWYFFYN5Q&google_cver=1 Date: Thu, 18 Apr 2024 17:16:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 Server: HTTP server (unknown) Content-Length: 291 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:17 UTC	291	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 6f 72 74 61 2e 63 6c 69 63 6b 61 67 79 2e 63 6f 6d 2f 70 69 78 65 6c 2e 67 69 66 3f 63 68 3d 38 26 61 6d 70 3b 63 6d 3d 43 41 45 53 45 4f 39 36 6d 4e 52 69 53 6b 77 54 54 63 43 57 59 46 46 59 4e 35 51 26 61 6d 70 3b 67 6f 6f 67 6c 65 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://aorta.clickagy.com/pixel.gif?ch=8&cm=CAESEO96mNRiSkwTTcCWYFFYN5Q&google

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.4	50106	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:17 UTC	799	OUT	GET /pixel.gif?ch=8&cm=CAESEO96mNRiSkwTTcCWYFFYN5Q&google_cver=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"}]
2024-04-18 17:16:17 UTC	1058	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:17 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://idsync.rlcdn.com/420246.gif?partner_uid=ZiFVXaa9gf7uMjfnRYtEussv set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:41 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:41 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.4	50107	35.244.154.8	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:17 UTC	626	OUT	GET /420246.gif?partner_uid=ZiFVXaa9gf7uMjfnRYtEussv HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:18 UTC	719	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://idsync.rlcdn.com/1000.gif?memo=CJbTGRIkCiAIARD1lgkaGFppRlZYYWE5Z2Y3dU1qZm5SWXRFdXNzdhAAGg0I4qqFsQYSBQjoBxAAQgBKAA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=a7pUoLvmJ1UQ9DtOhZQjvFejgKT79TMTtRM+DtO/x3I=; Path=/; Domain=rlcdn.com; Expires=Fri, 18 Apr 2025 17:16:18 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Mon, 17 Jun 2024 17:16:18 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 18 Apr 2024 17:16:18 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.4	50108	35.244.154.8	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:18 UTC	746	OUT	GET /1000.gif?memo=CJbTGRIkCiAIARD1lgkaGFppRlZYYWE5Z2Y3dU1qZm5SWXRFdXNzdhAAGg0I4qqFsQYSBQjoBxAAQgBKAA HTTP/1.1 Host: idsync.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=a7pUoLvmJ1UQ9DtOhZQjvFejgKT79TMTtRM+DtO/x3I=; pxrc=CAA=
2024-04-18 17:16:18 UTC	749	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://aorta.clickagy.com/pixel.gif?ch=114&cm=c0f183b26b286232d8c67bf30ce5378ca314913c4474d5c990a970ef9594319725abae5358c0e7bc P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=a7pUoLvmJ1UQ9DtOhZQjvFejgKT79TMTtRM+DtO/x3I=; Path=/; Domain=rlcdn.com; Expires=Fri, 18 Apr 2025 17:16:18 GMT; Secure; SameSite=None Set-Cookie: pxrc=COKqhbEGEgUI6AcQABIGCP/qARAA; Path=/; Domain=rlcdn.com; Expires=Mon, 17 Jun 2024 17:16:18 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Thu, 18 Apr 2024 17:16:18 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.4	50109	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:18 UTC	877	OUT	GET /pixel.gif?ch=114&cm=c0f183b26b286232d8c67bf30ce5378ca314913c4474d5c990a970ef9594319725abae5358c0e7bc HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"}]
2024-04-18 17:16:19 UTC	1226	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:19 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: f6b9be6c3f1f X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://sync.crwdcntrl.net/map/c=8545/tp=CKGY/tpid=ZiFVXaa9gf7uMjfnRYtEussv/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:43 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:43 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.4	50110	3.227.94.68	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:19 UTC	755	OUT	GET /map/c=8545/tp=CKGY/tpid=ZiFVXaa9gf7uMjfnRYtEussv/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:19 UTC	551	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:19 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.5.195 Set-Cookie: _cc_cc=ctst;Path=/;Domain=crwdcntrl.net;SameSite=None;Secure Location: https://sync.crwdcntrl.net/map/ct=y/c=8545/tp=CKGY/tpid=ZiFVXaa9gf7uMjfnRYtEussv/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.4	50111	3.227.94.68	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:20 UTC	781	OUT	GET /map/ct=y/c=8545/tp=CKGY/tpid=ZiFVXaa9gf7uMjfnRYtEussv/gdpr=0/gdpr_consent=false/?https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D120%26cm%3D%24%7Bprofile_id%7D HTTP/1.1 Host: sync.crwdcntrl.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _cc_cc=ctst
2024-04-18 17:16:20 UTC	741	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:20 GMT Content-Length: 0 Connection: close P3P: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV Cache-Control: no-cache Pragma: no-cache Expires: 0 X-Server: 10.40.5.249 Set-Cookie: _cc_dc=0;Path=/;Domain=crwdcntrl.net;Expires=Mon, 13-Jan-2025 17:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_id=4058da1893e56f9a9dd2e53119e94f35;Path=/;Domain=crwdcntrl.net;Expires=Mon, 13-Jan-2025 17:01:00 GMT;SameSite=None;Secure Set-Cookie: _cc_cc="";Version=1;Path=/;Domain=crwdcntrl.net;Expires=Thu, 01-Jan-1970 02:01:00 GMT;Max-Age=0;SameSite=None;Secure Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=120&cm=4058da1893e56f9a9dd2e53119e94f35 Server: Jetty(9.4.38.v20210224)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.4	50112	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:20 UTC	880	OUT	GET /pixel.gif?clkgypv=pxl&ch=120&cm=4058da1893e56f9a9dd2e53119e94f35 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"}]
2024-04-18 17:16:21 UTC	1333	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:21 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: 59eab6b22f27 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:45 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:54:45 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.4	50113	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:21 UTC	823	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:21 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 18 Apr 2024 17:16:21 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:21 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.4	50114	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:21 UTC	584	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:22 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 18 Apr 2024 17:16:21 GMT Content-Type: text/html Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:22 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.4	50115	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:23 UTC	1705	OUT	GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
2024-04-18 17:16:23 UTC	884	IN	HTTP/1.1 200 OK Connection: close Content-Length: 123686 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="insurance_december_carousel jpg.jpg" Content-Type: image/webp Etag: "yzPXnlB6y9nk1SMCyWS+Eg2wGvnZDsZgsmzgflSXt6Q" Fastly-Io-Info: ifsz=590559 idim=1230x420 ifmt=jpeg ofsz=123686 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560642 Date: Thu, 18 Apr 2024 17:16:23 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210041-DFW, cache-pdk-kfty2130056-PDK X-Cache: HIT, HIT X-Cache-Hits: 8, 0 X-Timer: S1713460583.142443,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 52 49 46 46 1e e3 01 00 57 45 42 50 56 50 38 20 12 e3 01 00 70 3e 05 9d 01 2a ce 04 a4 01 3e 51 20 8d 44 a3 a2 21 26 2b 76 ac 98 c0 0a 09 4d a2 b7 57 9c c4 eb f8 f9 94 fd a9 e8 ea 68 a7 99 cf 1c 9c f8 e5 68 00 6c d9 12 a2 5d af 98 5c 4f 71 33 c3 42 c0 d4 00 a5 a9 e5 bb 96 95 73 f4 67 94 df 57 61 ff 6b cd 8f 97 fb fa fa 17 e0 bf d2 fc 2a 7f 93 aa ef c0 ff ad e5 99 f0 ff da 7c eb fc d5 ff 69 ff cb fd 57 fc 2f 84 bf cf 7f c7 ff e6 ff 41 fb f9 ff 07 ec 43 f5 8b fe bf f7 ff f4 9e fc ff ec 7e e4 fb d5 fe bf ff 23 ff 9f fb 9f f6 ff ff fe 4e 7f 48 ff 45 ff ab fd 7f fc cf ff 7f 3b 1f f9 bf 75 3d ec ff b9 ff a9 fb 7d f0 23 fe 2b fd f7 ff af 6f 4f fd de cc 3f bb 3f fa 3f fb fc 17 7e cf 7f ff f6 9e ff cf fb a5 ff 2f ff ff d4 37 f7 bf fa bf b9 9f 08 df db 7f e3 7f f9 Data Ascii: RIFFWEBPVP8 p>>Q D!&+vMWhhl]\Oq3BsgWak\|iW/AC~#NHE;u=}#+oO???~/7
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: a7 e5 ae df 76 07 df 0b 21 4a 2a bf bf fb 06 6b 5d e5 34 f1 b3 dc ff bf e5 a4 2b a4 8c ff a0 83 fc b4 ae b6 58 43 b9 dd a2 f5 d4 08 9f 7b ed 62 ee 6a 30 8d 81 d2 11 6b 8e 0a ef db 2b 68 f9 d1 bb 60 f9 45 68 d8 f4 09 98 7e 33 be b2 8d 98 c0 f3 29 ef b2 14 0c 62 bd b3 81 6e d7 24 27 b5 b0 ac b7 b7 ae 97 25 bd c8 40 3c e5 86 fb 89 b1 fe 3f dc e9 ad 75 11 87 6a d0 d5 ca b6 a1 16 bb 62 e6 98 d3 c8 5d dc e8 37 e9 f8 b0 d9 6f 48 e1 3c a2 c3 85 69 e8 b9 fb 5a 6d 11 ba 77 ba d8 20 5b bb 19 db 64 e8 6a 17 97 9a 14 a7 b0 c9 12 a1 9a e2 14 ee 3a c7 1f 4d 73 74 ec 99 4f e1 3f b1 b9 16 07 e0 db a6 51 91 e2 0f 46 64 e7 ab 16 93 d3 0e 83 15 c6 3d 1f cd 12 df 21 6e 48 51 fe 4f 53 af 8f f1 e0 c8 cf e1 85 75 3e 0c 68 54 b2 53 1a 0d d2 d7 cc b4 c8 e2 03 7e 0e 2e 2e 97 a1 00 Data Ascii: v!J*k]4+XC{bj0k+h`Eh~3)bn$'%@<?ujb]7oH<iZmw [dj:MstO?QFd=!nHQOSu>hTS~..
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 2e f8 97 8a ee 6f 13 ff eb 1e 58 f6 4a 2d 34 0a db 70 33 e8 39 fb 2d 61 26 b3 48 28 ce 18 57 6e 3a 73 f2 ed 9e 96 d1 09 d8 2c 10 10 ff fc bd 6f ac eb e6 ce fb 5e 1f 3f d0 2b 45 2c e6 ed b5 42 e7 9f 1b 1d 43 21 17 bb ab a1 99 f6 89 28 d1 3e d3 d5 9f 58 88 37 77 40 88 16 86 c6 88 58 9b 7e f0 65 97 bd 2d bc 94 88 53 a6 de ee 6d 1b 5b c4 3a 73 30 a3 71 33 f8 8b 0c c6 1e b2 bd 53 cf ea 11 fc c6 a3 20 e8 e6 7b 79 d1 17 eb 05 f5 81 1c 87 71 ac f9 66 08 ee df 52 7a d8 19 f0 3d b8 ee 75 51 aa 05 1d 3f 50 19 49 94 22 2f f2 13 61 2a 80 6c d8 54 a5 10 da 1e d1 86 91 a2 5b bb 6a 2a 17 66 bc d9 47 cd 1d b8 b5 cc 5b 95 ca f7 a7 73 73 62 b6 5e 8e 68 ec e3 e2 9b e1 62 55 ee 4c 04 9d 13 2d 6e 5b 78 87 1d 51 3f f6 5c 97 90 95 e7 07 0e 17 c1 7a af fa 94 ba e4 d5 a2 82 91 ba Data Ascii: .oXJ-4p39-a&H(Wn:s,o^?+E,BC!(>X7w@X~e-Sm[:s0q3S {yqfRz=uQ?PI"/alT[jfG[ssb^hbUL-n[xQ?\z
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 53 13 74 d5 13 c8 98 a5 50 46 05 c1 08 af 64 44 a5 ee b1 c3 e8 77 e9 ea af 61 8e 0d cc 69 8e 7d f2 57 2c 72 a2 8b 43 d5 09 e9 44 12 1e ee 60 18 e9 7e 0a cb 03 ed 85 b0 06 93 82 3e 94 26 db cf 70 44 d6 d0 ba d4 29 67 30 40 f2 72 98 c5 9a 9c 86 ca 55 17 e7 df 89 3a 75 27 c1 42 c3 a2 10 1b 3c 47 35 6a a4 99 08 ea 84 77 1e 91 c4 9c 3b d6 f4 df 37 b4 dc 28 b1 54 f8 29 ca 49 69 0a d4 5b d3 16 f3 09 58 9c 01 a1 32 f3 c9 16 de 3c 0d 71 db b3 d1 14 5c a0 cd d2 5e e6 ff 79 b6 01 b5 36 84 a3 c9 91 6f e9 23 1f 18 13 0b 2a 4b a1 82 b4 39 dd 6c 02 c4 14 8c c8 31 1b 31 55 d9 a0 c9 4f 58 90 6b fe 9a 75 fa 35 f9 54 fe 28 e2 15 0e fd ee 8e 84 5d 9c a3 68 3c f9 b1 ff b0 44 12 5c c8 10 ef eb 1c 55 dd 6d ff 2e ad 74 7e 7e e7 f5 9b c7 1a 0f e2 4f cc 24 1f 3f 51 42 92 5d a7 bf Data Ascii: StPFdDwai}W,rCD`~>&pD)g0@rU:u'B<G5jw;7(T)Ii[X2<q\^y6o#*K9l11UOXku5T(]h<D\Um.t~~O$?QB]
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: da 92 2f f2 aa 07 3d 50 5f b5 ce d8 48 82 cc ce 73 a4 ba 19 1e b6 38 ad 1a d2 b9 6f 20 c9 9b 79 08 44 a8 5f e8 b0 ff bc f5 33 80 82 37 95 c6 a0 22 a4 1a b7 01 d3 71 0f f4 93 1b 4f b1 6a 0a 53 3f 92 44 4c 16 72 75 fe 84 b7 04 51 ee e8 5e bf e9 bd ef c2 c3 3f d9 cb e8 ff d9 16 52 ba bf c0 34 03 84 1e dd db 73 39 5a 9a cd a9 c5 03 37 bc 24 99 8b a2 dd 27 a5 31 0d 67 60 9d 09 e1 ad 34 68 1e 5b 6b 0b c0 87 fe 69 99 5c ff 3d 2b c9 d2 f9 e2 98 27 39 91 25 50 fd af 9c e9 cb dc 46 f9 06 e1 3e c6 1e 9d 2b 6b 19 d8 43 26 1f 58 0f 8d ce 2e ae 59 cc 5b 46 c9 e6 1e ed 75 9d e0 a4 b2 10 6f f5 42 fb 61 9f 74 ca c8 37 7a e4 11 13 bf 34 59 44 ca 47 9b 14 07 27 a0 4f bd 43 b9 39 c3 b5 69 f1 4f 70 4e e8 4b 7f 45 07 80 5d aa b2 af ba 2c 9c e5 32 c5 9c 0b 1f f5 c9 7b 25 7b e6 Data Ascii: /=P_Hs8o yD_37"qOjS?DLruQ^?R4s9Z7$'1g`4h[ki\=+'9%PF>+kC&X.Y[FuoBat7z4YDG'OC9iOpNKE],2{%{
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: c8 d4 a5 3e 30 8e b8 e4 f1 17 43 36 13 2c 55 c6 ab 55 93 ba 9d 7e d5 ae 71 c0 22 86 62 b0 82 bd aa 5d bb 25 bf 6a 6b 37 27 52 85 35 87 98 56 3c a6 06 fb 98 66 59 56 86 d3 57 00 41 45 b2 25 e5 fe 18 55 f0 d7 8f 43 08 49 0d 7f 55 9e a5 ed 73 6c 8e 07 08 9b 6f ff f7 9d 62 05 6e b1 41 ce 55 09 77 91 01 1c cf 73 d5 85 35 25 e6 42 b2 b8 65 84 6e 67 96 ac 19 6e 47 76 43 54 d9 4c 82 12 1c 8b d2 5d a9 f6 ff d8 7a 59 13 a4 e5 a8 b3 75 36 49 19 b7 2d 3c 0d ec 79 bc a6 fd bc f6 93 df 70 d1 ba 52 ab 41 28 7e 36 fe 62 34 d6 3f a6 6a 73 6f b0 37 ee c6 d0 eb f9 ab f1 56 81 6e a0 5e c5 f2 e1 ed c6 21 68 b5 86 28 31 de 0c 51 c1 12 ae 24 0e 05 eb 2a 0e 5b d1 79 6b a3 fe 3e e0 3a 44 1e 45 4d 94 9a 60 57 f7 7a 9d 93 d5 32 8d 37 ee d2 d3 a3 fe 47 1b f4 3c 8f b4 77 93 c7 60 23 Data Ascii: >0C6,UU~q"b]%jk7'R5V<fYVWAE%UCIUslobnAUws5%BengnGvCTL]zYu6I-<ypRA(~6b4?jso7Vn^!h(1Q$*[yk>:DEM`Wz27G<w`#
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 2d 68 6e 52 0e 7e 15 00 0f e4 fb 28 fe 3d 27 65 df d3 cc ea 8f 57 35 1e dc 1a e0 35 61 0e 3f 2a ad 01 fa fc eb 3a 41 ce 4b b0 36 0a b3 b7 7a e9 49 80 25 36 27 26 1f 1c cc 2e 5c 05 36 1c fb b5 08 83 95 d6 02 e5 39 ae c1 93 57 b9 ac e7 44 b6 7f 39 c3 df b5 48 5f 19 f0 25 d7 a9 d9 0a e2 e8 59 f6 2d fd 53 f6 7e 68 b4 e5 9f 54 31 b2 fa ba ca 8a e6 a3 b0 be b3 85 95 ed 94 6a 53 20 92 a5 04 58 66 e3 6e 91 64 65 73 dd 7e 61 7a 05 b4 ea 52 e3 b3 6b 6e db 94 ba 4b c2 93 e4 86 90 10 11 e9 7d 37 a6 5a 37 54 09 b1 78 d2 32 53 d7 81 db 5d a3 6e 98 1f a2 f4 e9 4b 26 25 cc f7 9b 20 dc 2c 76 b8 5a c9 3d 9b 37 d4 a5 0a df 8e b9 db c4 76 20 40 d4 fa ed 9f 7d b2 4f 49 1a c2 d7 4a 99 5d 20 7e 10 9a 9c ec 57 c6 d5 b0 b8 5c de 28 4c 63 33 10 60 35 08 ec 4d fc 36 f6 13 32 eb 49 Data Ascii: -hnR~(='eW55a?*:AK6zI%6'&.\69WD9H_%Y-S~hT1jS Xfndes~azRknK}7Z7Tx2S]nK&% ,vZ=7v @}OIJ] ~W\(Lc3`5M62I
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: ff 7e fc 1d 9e c4 0e e7 16 92 18 57 2d 0a 73 66 8e 2e af 9f 4d e4 53 fe f0 d9 fb 09 75 07 a6 13 d2 57 7e cd 35 54 2b 8e 81 b2 e2 e9 91 63 f9 18 78 81 a1 b8 a7 22 dd 2b 49 25 e8 c6 f8 17 ff 74 8b 61 e4 10 f1 c1 6f 92 ac c5 db ec 30 3a e7 e6 97 c1 04 70 bd 83 19 22 d0 c6 6e 54 42 fe 67 92 b9 ab 5e a0 13 07 11 5b d2 fa 36 bf 55 3a 2e ba 0b 8a 70 35 e0 9b 21 6a a1 f1 e7 27 7c dc cd 3d 82 b5 25 fe a3 01 52 56 31 1a b4 8e 2a c8 ba 58 aa 26 a6 e2 2e 14 d9 7a 8e 4e 18 0e c0 e7 94 3b 9b 4d e8 30 cf 27 0f 97 97 94 21 57 82 8b 96 af 5b 31 82 ed 63 2c 22 2c 26 d4 87 61 69 64 1c 7f 5f cd d8 12 ad 2e bf 4d 67 5b ec b3 d4 64 b3 32 72 41 96 d0 47 d9 13 3a 4e 37 c2 4d e9 f8 34 6d 1a 39 bf bc 73 2f 1f 02 7f 71 40 8e 00 ac 10 fd 2c f8 cd 7b c3 3c 8b 70 01 f1 17 d1 b0 30 f5 Data Ascii: ~W-sf.MSuW~5T+cx"+I%tao0:p"nTBg^[6U:.p5!j'\|=%RV1*X&.zN;M0'!W[1c,",&aid_.Mg[d2rAG:N7M4m9s/q@,{<p0
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 60 a2 5c d5 62 6a bf 7f 0f cb 29 df 6e ab e0 ad a2 24 ed 0d fb d4 95 9d 9d 63 ab 4a f4 bb 94 ff c8 91 8b 6f 17 5e 22 64 e9 67 ce 40 28 d8 c8 c6 92 d4 88 80 2e 00 78 4f 45 6e 9e 94 d6 6a c7 b7 4b 6a 71 a9 74 0d da 29 80 41 d4 27 b2 17 47 e8 6a 3f 3b 9d 95 51 c2 91 d5 9c 68 cf 2d 3f be 2a b7 6f 9e 0c cb 44 d3 ba f5 bb 7b c0 0e 6d 76 20 fe 79 02 ee 2e 93 2f 53 ac 14 0e 7b ba 6f 06 ea 91 e4 37 c4 45 15 fe 6d 2d d8 9b bc 98 08 5c 04 e6 83 92 dc 93 51 21 96 46 26 54 3b 77 c2 25 f6 d4 b3 b3 7e de db 1d 4a a0 42 77 06 e7 94 cb 2d a4 45 0c 83 fc 60 ea 33 4f f4 93 1b 44 01 4a f4 d4 8a 40 4e 99 ba ec 0f 19 22 95 57 3e cf 97 8f 79 4b 8d e3 4e ae 30 bd ec 7b 49 8b 18 d8 14 ae c5 bd af 34 8e a6 a3 2e d4 e8 29 cf 79 14 b7 f5 56 2d 3c 0f b3 b7 05 8f f5 33 6b 1a 1a 7c 7d Data Ascii: `\bj)n$cJo^"dg@(.xOEnjKjqt)A'Gj?;Qh-?*oD{mv y./S{o7Em-\Q!F&T;w%~JBw-E`3ODJ@N"W>yKN0{I4.)yV-<3k\|}
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 43 37 fa 57 17 d4 19 03 c6 c0 fa 15 25 d4 7e ef 5c e5 c0 35 1b 2f 58 6f 3b f8 52 08 5b aa 04 29 11 bb 50 29 31 c8 dd ba d2 d0 bb 5a 59 c0 bf 97 af ac 1b 78 20 65 c4 21 db 1a a6 30 12 76 63 3d 66 8c 90 ac 9f 32 5d e8 08 75 04 5c c7 98 9b 22 27 a1 f2 9c 6b b2 28 ea e6 0c 2c a4 fc cf 57 a5 02 00 95 a6 5c 17 f9 38 c7 a2 d0 be 9a 10 9a 1a 36 fc 77 0e 84 2c c4 d3 34 9d 0a a9 12 85 91 a4 b1 97 8a dc 9b ca 87 67 06 29 da bb e1 4f b6 11 69 5d ed 6a 08 0c 52 84 da 23 f2 54 c7 ef 16 e3 c6 93 f8 69 94 6c ef 0f 56 49 bd 09 09 22 63 aa b5 ec 4d fa 4c dc 47 23 cb 8e 4c 48 68 cf a3 5b 3a 6e a6 26 60 9d ce ef 1e b0 17 a5 4d 65 62 82 27 c5 55 82 c0 8c 6d b6 91 ea 11 eb 26 71 e5 95 03 6f 4e 61 12 8e eb 60 7f f2 5b e6 14 86 3a 66 48 b3 b8 41 e2 36 12 b8 34 54 5f dc 29 f8 bf Data Ascii: C7W%~\5/Xo;R[)P)1ZYx e!0vc=f2]u\"'k(,W\86w,4g)Oi]jR#TilVI"cMLG#LHh[:n&`Meb'Um&qoNa`[:fHA64T_)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.4	50116	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:23 UTC	1465	OUT	GET /-/media/images/homepage%20carousel/insurance_december_carousel%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
2024-04-18 17:16:23 UTC	886	IN	HTTP/1.1 200 OK Connection: close Content-Length: 133156 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="insurance_december_carousel jpg.jpg" Content-Type: image/jpeg Etag: "Obxv5dIkmYwRzXH6xDr5Xs3Yo/MLpkMdW+cdAjIkrhc" Fastly-Io-Info: ifsz=590559 idim=1230x420 ifmt=jpeg ofsz=133156 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560642 Date: Thu, 18 Apr 2024 17:16:23 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210041-DFW, cache-pdk-kfty2130069-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460584.809445,VS0,VE29 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: d2 b8 12 5d 37 c7 75 4f d6 aa 8c bb 1d 23 63 cc f5 34 55 d4 b2 dc 4a f2 ca da 9d d8 b3 1f 53 50 28 a5 c3 50 34 a9 d9 cd dd 8e 67 6e 2c 7f ad 27 62 b1 3c f5 5b a7 45 14 65 41 c1 44 84 2e 28 88 a3 0c c0 74 e6 7e 03 9d 61 a3 23 7a 96 04 70 0b 0c 02 4e d9 20 72 f8 fa d5 88 2b a5 a4 01 cd 0f 4d 39 77 6d 82 f4 f5 f2 fb b6 f8 52 d9 0e b6 66 ea 4e 68 b9 f3 1c 69 10 04 13 b9 ce c7 7e 5f 76 3e 79 a9 f8 6d 89 ba 93 53 a9 31 a9 03 1f c4 c7 92 8f 8f 53 d0 52 b3 ad 34 67 6d 82 56 95 27 ad 51 69 ae d2 61 3c 32 c8 20 f6 99 7c 38 1a 94 9e 4a 07 db 3f 82 8f 3a 0e fe f0 dd 3e 17 68 93 64 5f cc fa 9e b4 77 13 ba 2e c6 da 22 34 29 f1 b0 d8 33 0d b0 3d 07 21 5a 47 69 15 82 24 d7 4a 1e 66 1a a3 80 f9 1e 4c fe 43 c8 73 35 92 90 25 b9 ea 80 97 6f 51 7a a7 a3 59 82 53 f4 7a 2c 02 Data Ascii: ]7uO#c4UJSP(P4gn,'b<[EeAD.(t~a#zpN r+M9wmRfNhi~_v>ymS1SR4gmV'Qia<2 \|8J?:>hd_w."4)3=!ZGi$JfLCs5%oQzYSz,
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 32 09 66 f0 eb 38 f5 e4 0e 72 6a 11 65 67 67 17 10 ef 6e f3 23 83 ab bb 19 2a ba c7 53 d4 d7 5a ed 0d c7 b5 76 72 d6 40 9a 62 ef 1b 0b d3 0a 30 6b 8a 68 33 3d c8 2c 5a 69 65 5f 0a 6f 8c 64 e3 d3 1f 8d 35 45 61 95 4b e5 b7 ac 17 52 4d f8 cc fc 9f 88 5a eb 52 af 31 9b a7 64 2f a0 02 c3 74 32 25 b1 48 d1 d2 d1 7b 88 46 a9 19 fc 59 20 90 14 67 e1 bd 01 7f c4 b8 ac 93 34 eb 78 f6 a3 bb 8f 18 25 34 ae 06 14 01 b9 f5 a2 6f 2e a3 b7 b2 8a da 12 b1 24 47 7f b4 cc c3 56 49 f8 55 62 e6 e5 5a 49 b0 a5 88 89 08 67 39 3b e9 df 1e 74 a9 45 0b 66 c9 73 c5 b5 3e f9 bd f1 2e 17 29 7b 0f b2 9d 11 ee d6 37 8e fe 29 a2 91 6e 38 6d b5 fe eb 97 65 ee 5b e2 5a 3d 2c 7e 66 b0 f0 70 2b 90 54 dc dd 58 93 f6 02 ac d1 fd 46 8c 7d f5 5b ef 99 e3 7d 4c 79 af c3 ad 66 39 5f 60 ac 77 db Data Ascii: 2f8rjeggn#*SZvr@b0kh3=,Zie_od5EaKRMZR1d/t2%H{FY g4x%4o.$GVIUbZIg9;tEfs>.){7)n8me[Z=,~fp+TXF}[}Lyf9_`w
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: d8 32 99 64 60 3b d6 58 c9 76 2e dc 97 61 e7 b7 9d 3a e1 5c 56 de ee fe e1 de e4 b9 b3 6b 8b af 69 5d 90 16 01 55 37 c1 6f 11 04 9d 86 69 37 05 87 8b 3d 87 17 4b 6e 1e f0 85 b5 29 02 2f 22 66 3a 0b bb 9c 64 85 cf 3f 95 49 6d 0c 1c 07 84 dc 98 96 2b db cb d9 84 20 63 31 2f 76 3b dd 81 f7 fc 44 0f 2a c4 ea 84 b8 df a2 80 36 eb b4 93 d9 34 a9 6b 2f 79 fc a6 dc 07 80 de 9b d8 6f 2f e4 82 7b 18 d9 ae 4c ad fc eb 24 5e 3f 02 ec cc 49 c6 7a 7a d0 1c 5e de cb bd 59 6c e4 92 29 2f cb 96 67 60 1d e5 67 20 a3 30 0d a4 8f 2a 6e f6 b7 31 58 f1 1e 23 c4 da 56 9a ed 23 8a 38 87 bf a5 7f 7b 22 1f e0 56 38 5f 4f 2a cf 00 b7 e2 dc 5a ea 39 6e ac 12 4b 7b 58 de 74 8d 86 34 b8 3e 1f 19 39 c9 e6 49 35 36 aa aa cc ed 51 6c 34 b5 ec 25 97 0f 51 d4 01 4c f6 99 4c ed 34 02 cd ad Data Ascii: 2d`;Xv.a:\Vki]U7oi7=Kn)/"f:d?Im+ c1/v;D64k/yo/{L$^?Izz^Yl)/g`g 0n1X#V#8{"V8_O*Z9nK{Xt4>9I56Ql4%QLL4
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 32 0e 01 f3 34 58 ec ff 00 16 b8 d2 d7 9c 41 6d e1 8d d6 45 8d 4e 5c 29 1b ae 07 36 fb b9 d2 89 bb 3d c2 b8 7d d8 76 93 c1 18 21 16 4d 24 88 f7 c8 09 ee e4 f3 39 ce 4f 5a 99 75 3e de bf c2 3e 72 a9 48 8f 67 f1 19 4a e2 b6 f0 59 c9 7d 64 62 73 2c 33 2b 6b 2b 9c 8d ce 32 d8 c0 c1 db 3d 29 6d 94 f0 4a ad 14 96 ed 28 93 03 54 8d 95 0c 39 1c b0 e7 e8 2a fd 2c 9d 97 b5 b8 2b 3d e0 b9 91 c2 b4 4e ec d3 9c 8d 97 03 75 c6 06 36 e5 4b ee 7b 4b c1 ec 9f 16 fc 3c 8c f2 60 00 6d 3e 87 f0 23 a5 50 39 23 4a 6e 4f 13 a4 62 a8 bb 5d 07 60 bf c6 23 b3 5e 26 0b c3 fb 3d 44 2f e1 6f dd 1d 00 f4 6f 16 59 80 3b d6 e7 83 76 8a e2 52 25 56 c6 74 b2 33 e9 4f 86 94 cd 13 73 db 4b 89 a3 69 60 b2 8c 48 a4 06 2e 49 c8 e8 d8 18 f9 8a 4b 3f 68 b8 d5 da 92 6e 42 60 61 82 28 f7 4f c7 27 Data Ascii: 24XAmEN\)6=}v!M$9OZu>>rHgJY}dbs,3+k+2=)mJ(T9*,+=Nu6K{K<`m>#P9#JnOb]`#^&=D/ooY;vR%Vt3OsKi`H.IK?hnB`a(O'
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: d4 67 35 f6 d9 a7 c6 43 14 93 ca a5 19 15 02 12 39 0a 24 29 35 41 ac 53 a4 c6 4d 64 31 1d 6b 70 a2 b5 68 f3 c8 d3 58 c1 71 3d ae b6 d7 51 88 9b ce b7 11 79 b5 11 9b 84 1a 4d 83 d6 7b c1 59 11 81 59 10 87 6c 67 03 a9 f2 14 dd 2b 45 d2 6c a5 70 5c f2 1c 87 99 a8 1d 8b 12 4e e4 d4 ac 80 90 07 ba 39 0a c8 8e bb 53 3a 0b 93 59 cd 15 dc ad 63 b8 f5 c5 2e 56 86 f2 0c d6 a7 06 8b 16 e4 f3 60 2b 7e e1 76 f3 a3 91 8c 17 8b ca 67 a5 60 46 7c a9 98 88 0a 90 28 c5 1e 6f ae 76 68 b5 23 24 e3 14 6c 70 00 35 9e 9c bd 4d 4c a9 92 00 15 bb 10 48 03 dd 1c bf 5a 21 00 82 f7 90 2c 60 1c 9d cf 9d 4a 31 5a d6 db d3 81 68 26 f9 ad b9 d6 82 b7 07 1c e8 de 0d 27 b1 e9 58 c1 a9 06 2b 6d 3e b4 62 de 44 45 6b d6 a4 22 bc 91 3b ba a2 8c 96 20 01 ea 68 69 b4 c3 b6 d6 db ba 64 2a c7 0b Data Ascii: g5C9$)5ASMd1kphXq=QyM{YYlg+Elp\N9S:Yc.V`+~vg`F\|(ovh#$lp5MLHZ!,`J1Zh&'X+m>bDEk"; hid*
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: a7 95 69 d2 c4 35 1c 2e 15 4a 11 9b 3b 5e f9 78 9d 2d d7 6e 13 85 bd f4 4f 33 c5 6b 1b cc e3 9a c4 3b b5 03 fa 4c db e3 e3 8a 06 6e 22 90 06 d7 30 2f fe ea d8 95 1f 06 94 f8 8f c0 6d 4a 6e 2f 66 9d 4c 68 16 28 33 b4 51 8c 2f cf cc fa 9a 07 45 3d 3c 0a df 33 0b 75 6d 3d e7 ca 69 ad ca f5 48 ca 8f e1 a0 f0 df df 26 b9 be b8 b9 1a 01 11 c5 9c 88 d0 69 5f 9f 99 f5 34 08 8b 6a 32 2b 69 a6 6c 47 1b 31 f4 19 a3 c7 0c 74 19 b9 9a 38 47 91 39 6f a0 ad 40 d1 a2 02 8b 0e a1 b4 cf 3f 2e 27 12 73 1c cc 38 9d 00 f1 88 4a 54 91 db 3c 84 04 42 c4 f9 0c d3 82 dc 3a 0f 72 27 9c f9 bf 85 7e 82 a3 7e 21 76 ca 52 32 b0 a1 fb 31 8d 3f 7d 76 7a 8d ea 53 3d ad a7 ba 1e 6a 85 3f d6 57 04 fd 94 19 bd fb 24 69 c2 a5 51 aa e2 44 81 7f a6 77 fa 0d e8 95 fd 97 6f c8 49 70 c3 fb 0b fa Data Ascii: i5.J;^x-nO3k;Ln"0/mJn/fLh(3Q/E=<3um=iH&i_4j2+ilG1t8G9o@?.'s8JT<B:r'~~!vR21?}vzS=j?W$iQDwoIp
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 46 48 67 f2 0a 3a 03 f5 35 65 4b 28 38 6c 46 5b dc 49 72 7c 6b 6f 9c 85 fe 93 9f 3a 47 75 73 71 79 23 39 6d b7 1a b1 b6 3c 94 79 54 79 c7 72 6c c6 dc 7c a3 9b ad af 7b fd 9f 38 45 8c 56 72 5f 5b db 2a e8 84 e5 34 0c 69 55 3c cb 79 fc 39 55 d2 0b 3d 0f 68 1a 4d d6 e9 1d 89 eb aa 57 3b 63 e3 54 eb 1e 1f 2c 52 43 3c 8a c8 a1 c1 55 03 c6 df a5 5e ec 6c ae 25 60 ee 4a aa ac 6d cb 91 0c 18 8d f1 e7 59 aa d4 55 75 fa c0 05 ad ac a0 a5 5e a5 23 d0 62 6f 78 17 b1 cc 6d 38 72 28 d5 a6 e6 71 b7 96 84 a4 37 31 c7 6d 7f 14 b3 92 ce 24 53 a4 6f a4 87 18 d5 f3 23 6a e8 92 a7 b3 c3 a2 dd 88 3d fc be 32 bc bc 2a 36 de 91 af 09 e1 31 96 96 fa e0 49 28 21 b4 96 c6 00 3a 86 71 93 d3 95 3d 4e 54 a4 11 90 74 89 bf aa 38 99 e7 e1 b9 0f 14 31 09 59 ec 8a 32 e8 7a 80 9c 9d 52 e3 Data Ascii: FHg:5eK(8lF[Ir\|ko:Gusqy#9m<yTyrl\|{8EVr_[4iU<y9U=hMW;cT,RC<U^l%`JmYUu^#boxm8r(q71m$So#j=261I(!:q=NTt81Y2zR
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: cb a9 61 8c 69 2d 8e 4d dd 8c 96 2d 9c 02 e7 07 3c e9 bf 0a b2 e2 cf 1a ce bc 39 6c 21 8b 22 29 a7 c9 97 bb 23 4b 08 97 70 0f 23 b0 3b e6 9b 47 da 4b 34 b6 51 c0 78 2a c6 51 82 99 ae 0a a3 36 47 87 19 07 3e 5b 6f 42 fe d8 e2 d7 77 d0 cb 15 a7 79 de 6f 33 b8 60 8b 8d 9b 56 71 cb c8 ee 07 4a 56 0e c0 fd 58 5e d3 f2 8e 39 b1 6b d4 fc 22 13 67 6c f1 32 dd d9 da 96 b8 43 dd fb 54 ac 14 64 7b a7 42 92 9a 40 f3 3d 29 b7 16 e0 6b c5 6e 92 7b c2 ee 92 a2 b2 ad b0 2a e9 de 28 0e a7 04 e4 67 c8 62 a9 5c 4f 8d 47 69 3c b0 5d f1 77 95 48 09 1d bd ae 10 01 b1 46 2c 31 82 79 ed 8a 49 0f 15 e2 bc 4a ca e9 1b fd 4e da 30 24 8f 53 10 65 c7 35 19 cb 39 38 e6 33 8d e9 39 8a ba 36 60 bd 7d b1 8d 5a 5b 2c 5b b4 cb ec fd 92 e0 76 3a ae 4f 10 45 b7 94 9c 88 c8 d4 5d 77 24 85 df Data Ascii: ai-M-<9l!")#Kp#;GK4QxQ6G>[oBwyo3`VqJVX^9k"gl2CTd{B@=)kn{(gb\OGi<]wHF,1yIJN0$Se598396`}Z[,[v:OE]w$
2024-04-18 17:16:23 UTC	1379	IN	Data Raw: 5e 4c c3 0d a3 dd 20 dc ad 57 d9 a6 a2 74 2b ce 32 38 8c e7 d8 de 66 3c 89 c6 84 27 a7 89 b1 8a af 7f a4 52 5a 48 c2 47 00 83 87 45 fd e3 79 6f 9f 0f c6 aa 8f 75 73 33 03 24 8c cc 3d d2 c4 9c 7a 6f 53 cb 19 bf 88 cc 83 f7 c8 3f 78 bd 58 0f b5 f1 1d 7d 2a a3 03 86 43 a2 44 6e 56 c6 30 b0 70 3b 04 61 7b c6 a4 04 49 04 59 89 8f 85 9c 96 20 8e 98 db ef cd 27 b8 e2 77 f3 ae 7b f2 14 ec 55 76 1f 30 2b 16 cb 20 26 23 19 74 93 62 83 9f c5 47 98 a3 4f 04 b9 86 52 92 49 16 18 02 32 e0 6a 52 76 38 dc 8f a5 38 a1 45 74 c8 3c 24 1b 1d 8b 7d b5 db c6 d2 bc f2 4c f9 cc 8d f5 ad e1 1a f3 14 9a 8c 6c 79 f3 d0 7f 88 7e 63 ad 59 e1 ec f1 97 3a 2e 51 b3 ee f7 71 bc 80 ef 83 93 80 05 31 ff 00 47 38 7c 1d db 5e de 48 83 19 61 21 48 d8 fa 28 05 f6 a3 91 07 fb 48 9a b5 5b d6 76 Data Ascii: ^L Wt+28f<'RZHGEyous3$=zoS?xX}*CDnV0p;a{IY 'w{Uv0+ &#tbGORI2jRv88Et<$}Lly~cY:.Qq1G8\|^Ha!H(H[v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.4	50117	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:24 UTC	2602	OUT	GET /help-and-support/keep-me-logged-in/16393/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460619\|session#1713460549104-847971#1713462419; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:24 UTC	384	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:24 GMT Content-Type: text/html; charset=utf-8 Content-Length: 21503 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 53-16553787-16553840 NNNY CT(12 19 0) RT(1713460583442 217) q(0 0 0 -1) r(0 2) U24
2024-04-18 17:16:24 UTC	1068	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 0d 0a 20 20 20 20 63 6c 61 73 73 3d 22 6e 6f 2d 73 63 72 69 70 74 20 61 72 74 69 63 6c 65 2d 70 61 67 65 20 6e 6f 2d 73 69 64 65 62 61 72 20 78 68 72 2d 68 65 6c 70 20 63 68 72 6f 6d 65 2d 62 74 20 31 32 33 2d 62 76 20 22 0d 0a 20 20 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 20 64 61 74 61 2d 78 70 65 72 74 68 72 2d 70 61 67 65 6e 61 6d 65 3d 22 41 72 74 69 63 6c 65 50 61 67 65 22 3e 0d 0a 20 20 20 20 0a 20 20 20 20 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 Data Ascii: <!DOCTYPE html><html class="no-script article-page no-sidebar xhr-help chrome-bt 123-bv " lang="en-US"><head id="head" data-xperthr-pagename="ArticlePage"> <meta charset="utf-8"><meta http-equiv="X-UA-Compatible"
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 69 6e 2e 6a 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 4f 6e 65 54 72 75 73 74 20 43 6f 6f 6b 69 65 73 20 43 6f 6e 73 65 6e 74 20 4e 6f 74 69 63 65 20 65 6e 64 20 2d 2d 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 75 73 65 2e 74 79 70 65 6b 69 74 2e 6e 65 74 2f 78 6b 7a 31 66 65 71 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 74 72 79 20 7b 20 54 79 70 65 6b 69 74 2e 6c 6f 61 64 28 29 3b 20 7d 20 63 61 74 63 68 20 28 65 Data Ascii: in.js?v=2.0.769" type="text/javascript"></script> ... OneTrust Cookies Consent Notice end --> <script type="text/javascript" src="//use.typekit.net/xkz1feq.js"></script> <script type="text/javascript">try { Typekit.load(); } catch (e
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 2f 57 65 62 2f 41 73 73 65 74 73 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 61 72 74 69 63 6c 65 2e 6d 69 6e 2e 63 73 73 3f 76 3d 36 39 35 31 22 20 2f 3e 0d 0a 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 0d 0a 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 74 6f 6f 6c 49 63 6f 6e 73 2d 65 6e 2d 55 53 2e 63 73 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 Data Ascii: <link rel="stylesheet" href="/Web/Assets/Full/Bundle/article.min.css?v=6951" /> <link rel="stylesheet" type="text/css" href="//assets.us.brightmine.com/latest/Full/Bundle/toolIcons-en-US.css?v=2.0.769" /> <script type="text/javascr
2024-04-18 17:16:24 UTC	1328	IN	Data Raw: 20 20 20 20 20 20 20 20 63 75 73 74 6f 6d 41 64 64 4f 6e 41 62 62 72 65 76 69 61 74 65 64 4e 61 6d 65 3a 20 22 22 0d 0a 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 2f 2a 20 43 6c 69 65 6e 74 20 73 69 64 65 20 66 65 61 74 75 72 65 20 66 6c 61 67 73 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 73 65 74 28 27 46 65 61 74 75 72 65 46 6c 61 67 73 27 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 53 75 67 67 65 73 74 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 75 6c 73 65 53 75 72 76 65 79 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 67 61 6c 54 69 6d 65 74 61 62 6c 65 Data Ascii: customAddOnAbbreviatedName: "" }); /* Client side feature flags */ AssetShared.Helpers.modelDataLibrary.set('FeatureFlags', { autoSuggest: true, pulseSurvey: false, legalTimetable
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 63 72 69 70 74 20 73 72 63 3d 22 2f 57 65 62 2f 41 73 73 65 74 73 2f 53 68 61 72 65 64 2f 41 6e 67 75 6c 61 72 42 75 6e 64 6c 65 2f 70 6f 6c 79 66 69 6c 6c 73 2e 6a 73 22 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 64 61 74 61 2d 6f 74 2d 69 67 6e 6f 72 65 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 57 65 62 2f 41 73 73 65 74 73 2f 53 68 61 72 65 64 2f 41 6e 67 75 6c 61 72 42 75 6e 64 6c 65 2f 6d 61 69 6e 2e 6a 73 22 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 64 61 74 61 2d 6f 74 2d 69 67 6e 6f 72 65 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 57 65 62 2f 41 73 73 65 74 73 2f 53 68 61 72 65 Data Ascii: cript src="/Web/Assets/Shared/AngularBundle/polyfills.js" type="module" data-ot-ignore></script><script src="/Web/Assets/Shared/AngularBundle/main.js" type="module" data-ot-ignore></script><link rel="stylesheet" type="text/css" href="/Web/Assets/Share
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 63 6f 6e 74 65 6e 74 49 44 22 20 63 6f 6e 74 65 6e 74 3d 22 31 36 33 39 33 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 63 6f 6e 74 65 6e 74 54 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4b 65 65 70 20 4d 65 20 4c 6f 67 67 65 64 20 69 6e 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 63 6f 6e 74 65 6e 74 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 41 72 74 69 63 6c 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 77 61 5f 61 63 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 72 62 69 75 73 2d 78 70 65 72 74 68 72 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 Data Ascii: ta name="gwa_contentID" content="16393" /> <meta name="gwa_contentTitle" content="Keep Me Logged in" /> <meta name="gwa_contentType" content="Article" /> <meta name="gwa_account" content="rbius-xperthr" /> <meta name="g
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 74 22 20 73 72 63 3d 22 2f 2f 61 73 73 65 74 73 2e 61 64 6f 62 65 64 74 6d 2e 63 6f 6d 2f 63 38 39 61 66 37 30 36 61 63 64 61 2f 61 65 36 30 33 34 64 34 61 31 35 37 2f 6c 61 75 6e 63 68 2d 34 35 39 64 65 35 63 66 39 36 61 36 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 69 64 3d 22 74 61 72 67 65 74 4d 62 6f 78 53 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 61 6e 61 6c 79 74 69 63 73 4a 73 2e 6d 69 6e 2e 6a 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 Data Ascii: t" src="//assets.adobedtm.com/c89af706acda/ae6034d4a157/launch-459de5cf96a6.min.js"></script> <script id="targetMboxScript" src="//assets.us.brightmine.com/latest/Full/Bundle/analyticsJs.min.js?v=2.0.769" type="text/javascri
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 68 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 69 64 3d 22 6c 6f 63 61 6c 53 65 61 72 63 68 4d 65 74 68 6f 64 22 20 6e 61 6d 65 3d 22 73 65 61 72 63 68 4d 65 74 68 6f 64 22 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 76 61 6c 75 65 3d 22 64 65 66 61 75 6c 74 20 73 65 61 72 63 68 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 66 69 65 6c 64 73 65 74 3e 0a 3c 2f 66 6f 72 6d 3e 20 20 20 20 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 6f 63 61 6c 2d 68 65 61 64 65 72 2d 66 6c 6f 61 74 2d 63 6f 6e 74 61 69 6e 65 72 20 78 68 72 6f Data Ascii: h </button> <input id="localSearchMethod" name="searchMethod" type="hidden" value="default search" /> </fieldset></form> </div></div></div> <div class="local-header-float-container xhro
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 22 61 63 74 69 6f 6e 2d 6c 69 6e 6b 73 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 73 75 70 70 6f 72 74 65 64 2d 77 65 62 2d 62 72 6f 77 73 65 72 73 2f 32 32 36 35 38 2f 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 64 61 74 61 2d 62 69 6e 64 3d 22 63 6c 69 63 6b 3a 20 75 Data Ascii: "action-links-container"> <span> <a href="/help-and-support/supported-web-browsers/22658/">Learn More</a> </span> \| <span> <a data-bind="click: u
2024-04-18 17:16:24 UTC	1452	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 3c 78 68 72 2d 6d 61 74 65 72 69 61 6c 2d 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d 70 72 69 6e 74 2d 62 75 74 74 6f 6e 20 70 72 69 6e 74 42 75 74 74 6f 6e 22 20 6c 61 62 65 6c 3d 22 50 72 69 6e 74 22 20 69 63 6f 6e 2d 6e 61 6d 65 3d 22 70 72 69 6e 74 22 20 69 64 3d 22 70 72 69 6e 74 42 75 74 74 6f 6e 22 3e 3c 2f 78 68 72 2d 6d 61 74 65 72 69 61 6c 2d 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 3c 2f 6c 69 3e 0d 0a 20 20 20 20 3c 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 3c 78 68 72 2d 6d 61 74 65 72 69 61 6c 2d 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 61 72 74 69 63 6c 65 2d 65 6d 61 69 6c 2d 62 75 74 74 6f 6e 22 20 6c 61 62 65 6c 3d 22 45 6d 61 69 6c 22 20 69 63 6f 6e 2d 6e 61 6d 65 3d 22 65 6d 61 69 6c 22 Data Ascii: <xhr-material-button class="article-print-button printButton" label="Print" icon-name="print" id="printButton"></xhr-material-button> </li> <li> <xhr-material-button class="article-email-button" label="Email" icon-name="email"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.4	50119	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:24 UTC	688	OUT	GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1 Host: rbi.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; rbi=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:24 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:24 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 108 Connection: close X-TID: BXfUZA/RQ74= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-05351c1ac.edge-va6.demdex.com 5 ms set-cookie: DST=; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:24 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: rbi=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:24 GMT; Path=/; Domain=.rbi.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:24 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:24 UTC	108	IN	Data Raw: 61 61 6d 5f 74 6e 74 5f 63 62 28 7b 22 73 74 75 66 66 22 3a 5b 5d 2c 22 75 75 69 64 22 3a 22 37 32 34 38 37 31 33 32 37 37 34 34 38 32 37 36 30 35 38 32 35 37 39 32 33 31 35 33 35 35 33 31 32 30 36 36 32 33 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 42 58 66 55 5a 41 2f 52 51 37 34 3d 22 7d 29 Data Ascii: aam_tnt_cb({"stuff":[],"uuid":"72487132774482760582579231535531206623","dcs_region":7,"tid":"BXfUZA/RQ74="})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.4	50120	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:24 UTC	1772	OUT	GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460583884-867507&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=16393&gwa_contentTitle=Keep%20Me%20Logged%20in&gwa_contentType=Article&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_author=&gwa_pubDate=2018-05-10&gwa_localVar4=2014-11-26&gwa_aboutness=&gwa_localVar2=unlocked&gwa_localVar1=&gwa_localVar3=&gwa_siteSection1=tools-and-services&gwa_siteSection2=help-and-support&gwa_siteSection3=Keep%20Me%20Logged%20in&gwa_siteSection4=&gwa_pageName=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_contentHierarchy=tools-and-services%7Chelp-and-support%7CKeep%20Me%20Logged%20in&gwa_server=desktop%20platform&mboxMCSDID=098376FFA2BFF1D1-172618600D8287A7&mbox=target-global-mbox&mboxId=0&mboxTime=1713467783890&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1 Host: reedbusinessinternat.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:24 UTC	418	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:24 GMT content-type: application/javascript; charset=utf-8 referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-18 17:16:24 UTC	759	IN	Data Raw: 32 65 62 0d 0a 20 2f 2a 20 44 49 53 41 42 4c 45 44 3a 20 46 6f 6c 6c 6f 77 69 6e 67 20 6d 62 6f 78 2e 6a 73 20 64 65 70 72 65 63 61 74 69 6f 6e 2c 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 20 69 73 20 64 69 73 61 62 6c 65 64 2e 20 2a 2f 0a 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 33 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 6f 72 69 65 73 2e 67 65 74 28 27 64 65 66 61 75 6c 74 27 29 2e 67 65 74 4d 62 6f 78 65 73 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 73 65 74 4f 66 66 65 72 28 6e 65 77 20 6d 62 6f 78 4f 66 66 65 72 44 65 66 61 75 6c 74 28 29 29 2e 6c 6f 61 64 65 64 28 29 3b 7d 29 3b 0a 7d 20 65 6c 73 65 20 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 31 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 Data Ascii: 2eb /* DISABLED: Following mbox.js deprecation, this endpoint is disabled. */if (mboxVersion >= 33) { mboxFactories.get('default').getMboxes().each(function(m){m.setOffer(new mboxOfferDefault()).loaded();});} else if (mboxVersion >= 31) { mboxFact

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.4	50125	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:24 UTC	619	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:25 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:25 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664d712fff53f0-ATL
2024-04-18 17:16:25 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.4	50118	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	2726	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
2024-04-18 17:16:25 UTC	387	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 55-23612906-23613263 NNNY CT(12 17 0) RT(1713460583446 1006) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:25 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.4	50128	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:25 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:25 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664d7449657bc0-ATL
2024-04-18 17:16:25 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.4	50129	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	2726	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
2024-04-18 17:16:25 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 53-16554135-16554189 NNNY CT(14 14 0) RT(1713460584745 214) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:25 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.4	50130	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	2444	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
2024-04-18 17:16:25 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 56-26210509-26210573 NNNY CT(14 14 0) RT(1713460584753 223) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:25 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.4	50132	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	2578	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A00+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444
2024-04-18 17:16:25 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:25 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 53-16554145-16554194 NNNY CT(14 14 0) RT(1713460584784 211) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:16:25 UTC	1142	IN	Data Raw: 32 66 66 36 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 Data Ascii: 2ff6{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Su
2024-04-18 17:16:25 UTC	1452	IN	Data Raw: 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f Data Ascii: ary":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}],"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigatio
2024-04-18 17:16:25 UTC	1452	IN	Data Raw: 68 2d 63 61 72 65 2d 62 65 6e 65 66 69 74 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 43 61 72 65 20 42 65 6e 65 66 69 74 73 22 2c 22 69 64 22 3a 31 34 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 77 61 67 65 2d 61 6e 64 2d 68 6f 75 72 2f 6d 69 6e 69 6d 75 6d 2d 77 61 67 65 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c Data Ascii: h-care-benefits/","title":"Health Care Benefits","id":14},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/minimum-wage/","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/",
2024-04-18 17:16:25 UTC	1452	IN	Data Raw: 65 65 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 65 61 6c 74 68 20 61 6e 64 20 53 61 66 65 74 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 65 61 6c 74 68 2d 61 6e 64 2d 73 61 66 65 74 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 69 72 69 6e 67 20 61 6e 64 20 4f 6e 62 6f 61 72 64 69 6e 67 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 69 72 69 6e 67 2d 61 6e 64 2d 6f 6e 62 6f 61 72 64 69 6e 67 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 52 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 72 2d 61 64 6d 69 6e 69 73 74 72 61 Data Ascii: ee Relations","urlSlug":"/tasks/employee-relations/"},{"text":"Health and Safety","urlSlug":"/tasks/health-and-safety/"},{"text":"Hiring and Onboarding","urlSlug":"/tasks/hiring-and-onboarding/"},{"text":"HR Administration","urlSlug":"/tasks/hr-administra
2024-04-18 17:16:25 UTC	1452	IN	Data Raw: 6e 61 6c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 6d 61 6e 75 61 6c 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 62 65 73 74 2d 70 72 61 63 74 69 63 65 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 4c 65 61 64 69 6e 67 20 50 72 61 63 74 69 63 65 20 47 75 69 64 65 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6c 65 61 64 69 6e 67 2d 70 72 61 63 74 69 63 65 2d 67 75 69 64 65 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 6d 70 6c 61 74 65 73 20 61 6e 64 20 50 6f 73 74 65 72 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 74 65 6d 70 6c 61 74 65 73 2d 61 6e 64 2d 70 6f 73 74 65 72 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 Data Ascii: nal","urlSlug":"/international-manual/"},{"cssClass":"best-practice-manual","text":"Leading Practice Guides","urlSlug":"/leading-practice-guides/"}]},{"name":"Templates and Posters","cssClass":"templates-and-posters","dropDownPosition":1,"toolLinks":[{"cs
2024-04-18 17:16:25 UTC	1452	IN	Data Raw: 78 74 22 3a 22 45 64 69 74 6f 72 27 73 20 43 68 6f 69 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 22 2c 22 74 65 78 74 22 3a 22 4e 65 77 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6e 65 77 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 51 75 69 63 6b 20 52 65 66 65 72 65 6e 63 65 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 71 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 34 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 66 61 71 73 22 2c 22 74 65 78 74 22 3a 22 46 41 51 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 66 61 71 2f 22 7d 2c 7b 22 63 73 73 43 6c Data Ascii: xt":"Editor's Choice","urlSlug":"/editors-choice/"},{"cssClass":"news","text":"News","urlSlug":"/news/"}]},{"name":"Quick Reference","cssClass":"quick-reference","dropDownPosition":4,"toolLinks":[{"cssClass":"faqs","text":"FAQs","urlSlug":"/faq/"},{"cssCl
2024-04-18 17:16:25 UTC	1452	IN	Data Raw: 43 6f 6c 75 6d 62 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 69 73 74 72 69 63 74 2d 6f 66 2d 63 6f 6c 75 6d 62 69 61 2f 55 53 57 44 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 46 6c 6f 72 69 64 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 46 4c 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 67 65 6f 72 67 69 61 2f 47 41 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 61 77 61 69 69 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 68 61 77 61 69 69 2f 48 49 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 64 61 68 6f 22 2c 22 Data Ascii: Columbia","urlSlug":"/jurisdictions/district-of-columbia/USWDC/"},{"text":"Florida","urlSlug":"/jurisdictions/florida/FL/"},{"text":"Georgia","urlSlug":"/jurisdictions/georgia/GA/"},{"text":"Hawaii","urlSlug":"/jurisdictions/hawaii/HI/"},{"text":"Idaho","
2024-04-18 17:16:25 UTC	1452	IN	Data Raw: 22 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 4e 59 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 63 61 72 6f 6c 69 6e 61 2f 4e 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 64 61 6b 6f 74 61 2f 4e 44 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 68 69 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6f 68 69 6f 2f 4f 48 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 6b Data Ascii: "New York","urlSlug":"/jurisdictions/new-york/NY/"},{"text":"North Carolina","urlSlug":"/jurisdictions/north-carolina/NC/"},{"text":"North Dakota","urlSlug":"/jurisdictions/north-dakota/ND/"},{"text":"Ohio","urlSlug":"/jurisdictions/ohio/OH/"},{"text":"Ok
2024-04-18 17:16:25 UTC	980	IN	Data Raw: 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 61 6c 69 66 6f 72 6e 69 61 2f 6c 6f 73 2d 61 6e 67 65 6c 65 73 2f 43 41 31 31 34 36 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4d 69 61 6d 69 2d 44 61 64 65 20 43 6f 75 6e 74 79 2c 20 46 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 6d 69 61 6d 69 2d 64 61 64 65 2d 63 6f 75 6e 74 79 2f 46 4c 30 34 30 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 2c 20 4e 59 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 6e 65 77 2d 79 6f 72 6b 2d 63 69 74 79 2f 4e 59 31 30 33 37 22 7d 2c 7b 22 74 65 78 74 22 3a 22 50 68 69 6c 61 64 65 6c 70 68 69 61 2c 20 50 41 22 2c 22 Data Ascii: :"/jurisdictions/california/los-angeles/CA1146"},{"text":"Miami-Dade County, FL","urlSlug":"/jurisdictions/florida/miami-dade-county/FL040"},{"text":"New York City, NY","urlSlug":"/jurisdictions/new-york/new-york-city/NY1037"},{"text":"Philadelphia, PA","
2024-04-18 17:16:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.4	50135	64.233.185.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	1362	OUT	GET /pagead/viewthroughconversion/950188369/?random=1713460584429&cv=11&fst=1713460584429&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:25 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:25 UTC	552	IN	Data Raw: 39 34 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 943(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:25 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:25 UTC	571	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 39 31 32 33 35 37 36 39 31 30 7a 38 38 35 38 30 38 30 30 30 32 7a 61 32 30 31 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 25 32 46 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 25 32 46 6b 65 65 70 2d 6d 65 2d 6c 6f Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v9123576910z8858080002za201\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-lo
2024-04-18 17:16:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.4	50136	142.250.105.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	1486	OUT	GET /td/rul/950188369?random=1713460584429&cv=11&fst=1713460584429&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&hn=www.googleadservices.com&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:25 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:25 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.4	50139	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	838	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460584539 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
2024-04-18 17:16:25 UTC	661	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:25 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: Ur/BSCdsRq8= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://hrcenter.us.brightmine.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-2-v059-0aafa8357.edge-va6.demdex.com 1 ms
2024-04-18 17:16:25 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.4	50140	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:25 UTC	2444	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:26 UTC	387	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 59-35342007-35342052 NNNN CT(150 59 0) RT(1713460585209 742) q(0 0 2 -1) r(2 2) U24
2024-04-18 17:16:26 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.4	50141	108.177.122.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:26 UTC	1189	OUT	GET /pagead/1p-user-list/950188369/?random=1713460584429&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqjzmByJwT00an2qav7NPPu8lO3mxZJXVo2cGwKwqzAsMPWAu2&random=3626280790&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:26 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.4	50146	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:26 UTC	2296	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:26 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:26 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 58-31096556-31096636 NNNY CT(13 14 0) RT(1713460585321 231) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:16:26 UTC	1142	IN	Data Raw: 66 34 34 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 70 Data Ascii: f44{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Sup
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f 6e Data Ascii: ry":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}],"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigation
2024-04-18 17:16:26 UTC	1321	IN	Data Raw: 2d 63 61 72 65 2d 62 65 6e 65 66 69 74 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 43 61 72 65 20 42 65 6e 65 66 69 74 73 22 2c 22 69 64 22 3a 31 34 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 77 61 67 65 2d 61 6e 64 2d 68 6f 75 72 2f 6d 69 6e 69 6d 75 6d 2d 77 61 67 65 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c 22 Data Ascii: -care-benefits/","title":"Health Care Benefits","id":14},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/minimum-wage/","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/","
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 32 30 62 32 0d 0a 67 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 45 45 4f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 65 6f 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 65 65 20 42 65 6e 65 66 69 74 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 62 65 6e 65 66 69 74 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 65 65 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 65 61 6c 74 68 20 61 6e 64 20 53 61 66 65 74 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 65 61 6c 74 68 2d 61 6e 64 2d 73 61 66 65 74 79 Data Ascii: 20b2gations/"},{"text":"EEO","urlSlug":"/tasks/eeo/"},{"text":"Employee Benefits","urlSlug":"/tasks/employee-benefits/"},{"text":"Employee Relations","urlSlug":"/tasks/employee-relations/"},{"text":"Health and Safety","urlSlug":"/tasks/health-and-safety
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 22 3a 22 65 6d 70 6c 6f 79 6d 65 6e 74 2d 6c 61 77 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 6d 65 6e 74 20 4c 61 77 20 47 75 69 64 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 6d 70 6c 6f 79 6d 65 6e 74 2d 6c 61 77 2d 67 75 69 64 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 2c 22 74 65 78 74 22 3a 22 49 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 6d 61 6e 75 61 6c 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 62 65 73 74 2d 70 72 61 63 74 69 63 65 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 4c 65 61 64 69 6e 67 20 50 72 61 63 74 69 63 65 20 47 75 69 64 65 73 22 2c 22 75 72 6c 53 6c 75 67 Data Ascii: ":"employment-law-manual","text":"Employment Law Guide","urlSlug":"/employment-law-guide/"},{"cssClass":"international","text":"International","urlSlug":"/international-manual/"},{"cssClass":"best-practice-manual","text":"Leading Practice Guides","urlSlug
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 67 22 3a 22 2f 74 72 61 69 6e 69 6e 67 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 4e 65 77 73 20 61 6e 64 20 55 70 64 61 74 65 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 2d 75 70 64 61 74 65 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 33 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 22 2c 22 74 65 78 74 22 3a 22 45 64 69 74 6f 72 27 73 20 43 68 6f 69 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 22 2c 22 74 65 78 74 22 3a 22 4e 65 77 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6e 65 77 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 51 Data Ascii: g":"/training/"}]},{"name":"News and Updates","cssClass":"news-updates","dropDownPosition":3,"toolLinks":[{"cssClass":"editors-choice","text":"Editor's Choice","urlSlug":"/editors-choice/"},{"cssClass":"news","text":"News","urlSlug":"/news/"}]},{"name":"Q
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 43 6f 6e 6e 65 63 74 69 63 75 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 6f 6e 6e 65 63 74 69 63 75 74 2f 43 54 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 44 65 6c 61 77 61 72 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 65 6c 61 77 61 72 65 2f 44 45 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 44 69 73 74 72 69 63 74 20 6f 66 20 43 6f 6c 75 6d 62 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 69 73 74 72 69 63 74 2d 6f 66 2d 63 6f 6c 75 6d 62 69 61 2f 55 53 57 44 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 46 6c 6f 72 69 64 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 Data Ascii: Connecticut","urlSlug":"/jurisdictions/connecticut/CT/"},{"text":"Delaware","urlSlug":"/jurisdictions/delaware/DE/"},{"text":"District of Columbia","urlSlug":"/jurisdictions/district-of-columbia/USWDC/"},{"text":"Florida","urlSlug":"/jurisdictions/florida
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 4a 65 72 73 65 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 6a 65 72 73 65 79 2f 4e 4a 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 4d 65 78 69 63 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 6d 65 78 69 63 6f 2f 4e 4d 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 4e 59 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 63 61 72 6f 6c 69 6e 61 Data Ascii: },{"text":"New Jersey","urlSlug":"/jurisdictions/new-jersey/NJ/"},{"text":"New Mexico","urlSlug":"/jurisdictions/new-mexico/NM/"},{"text":"New York","urlSlug":"/jurisdictions/new-york/NY/"},{"text":"North Carolina","urlSlug":"/jurisdictions/north-carolina
2024-04-18 17:16:26 UTC	1118	IN	Data Raw: 2f 6d 61 72 79 6c 61 6e 64 2f 62 61 6c 74 69 6d 6f 72 65 2f 4d 44 31 30 39 35 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 68 69 63 61 67 6f 2c 20 49 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 69 6c 6c 69 6e 6f 69 73 2f 63 68 69 63 61 67 6f 2f 49 4c 31 31 34 39 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4c 6f 73 20 41 6e 67 65 6c 65 73 2c 20 43 41 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 61 6c 69 66 6f 72 6e 69 61 2f 6c 6f 73 2d 61 6e 67 65 6c 65 73 2f 43 41 31 31 34 36 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4d 69 61 6d 69 2d 44 61 64 65 20 43 6f 75 6e 74 79 2c 20 46 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 6d 69 Data Ascii: /maryland/baltimore/MD1095"},{"text":"Chicago, IL","urlSlug":"/jurisdictions/illinois/chicago/IL1149"},{"text":"Los Angeles, CA","urlSlug":"/jurisdictions/california/los-angeles/CA1146"},{"text":"Miami-Dade County, FL","urlSlug":"/jurisdictions/florida/mi
2024-04-18 17:16:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.4	50148	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:26 UTC	2577	OUT	GET /jurisdiction/getalljurisdictions/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/help-and-support/keep-me-logged-in/16393/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A24+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:26 UTC	392	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:26 GMT Content-Type: application/json; charset=utf-8 Content-Length: 49755 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 59-35342032-35342053 NNNN CT(147 59 0) RT(1713460585336 616) q(0 0 2 -1) r(2 3) U24
2024-04-18 17:16:26 UTC	1060	IN	Data Raw: 7b 22 4a 75 72 69 73 64 69 63 74 69 6f 6e 44 61 74 61 22 3a 5b 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 4b 31 34 35 32 22 2c 22 4e 61 6d 65 22 3a 22 41 64 61 2c 20 50 6f 6e 74 6f 74 6f 63 2c 20 4f 6b 6c 61 68 6f 6d 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 64 61 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 4b 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 64 61 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 37 Data Ascii: {"JurisdictionData":[{"Selected":false,"TaggingCode":"OK1452","Name":"Ada, Pontotoc, Oklahoma","SimplifiedName":"Ada","Country":"","State":"","StateCode":"OK","County":null,"Municipality":"Ada","Level":"municipality"},{"Selected":false,"TaggingCode":"OH17
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 41 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 59 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 31 30 30 30 22 2c 22 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 2c 20 41 6c 62 61 6e 79 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 Data Ascii: Albany County","Country":"","State":"","StateCode":"NY","County":null,"Municipality":"Albany County","Level":"municipality"},{"Selected":false,"TaggingCode":"NY1000","Name":"Albany, Albany, New York","SimplifiedName":"Albany","Country":"","State":"","Stat
2024-04-18 17:16:26 UTC	145	IN	Data Raw: 6f 64 65 22 3a 22 4d 49 32 33 35 36 22 2c 22 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 2c 20 57 61 73 68 74 65 6e 61 77 2c 20 4d 69 63 68 69 67 61 6e 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 49 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 Data Ascii: ode":"MI2356","Name":"Ann Arbor, Washtenaw, Michigan","SimplifiedName":"Ann Arbor","Country":"","State":"","StateCode":"MI","County":null,"Munici
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 70 61 6c 69 74 79 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 41 5a 22 2c 22 4e 61 6d 65 22 3a 22 41 72 69 7a 6f 6e 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 72 69 7a 6f 6e 61 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 41 5a 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 6e 75 6c 6c 2c 22 4c 65 76 65 6c 22 3a 22 73 74 61 74 65 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 41 52 22 2c 22 Data Ascii: pality":"Ann Arbor","Level":"municipality"},{"Selected":false,"TaggingCode":"AZ","Name":"Arizona","SimplifiedName":"Arizona","Country":"","State":"","StateCode":"AZ","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode":"AR","
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4d 49 31 31 39 38 22 2c 22 4e 61 6d 65 22 3a 22 42 61 74 74 6c 65 20 43 72 65 65 6b 2c 20 43 61 6c 68 6f 75 6e 2c 20 4d 69 63 68 69 67 61 6e 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 61 74 74 6c 65 20 43 72 65 65 6b 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 49 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 61 74 74 6c 65 20 43 72 65 65 6b 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 57 41 31 32 33 36 22 2c 22 4e 61 6d 65 22 3a 22 42 65 Data Ascii: TaggingCode":"MI1198","Name":"Battle Creek, Calhoun, Michigan","SimplifiedName":"Battle Creek","Country":"","State":"","StateCode":"MI","County":null,"Municipality":"Battle Creek","Level":"municipality"},{"Selected":false,"TaggingCode":"WA1236","Name":"Be
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 69 6e 67 68 61 6d 74 6f 6e 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 41 4c 31 32 34 38 22 2c 22 4e 61 6d 65 22 3a 22 42 69 72 6d 69 6e 67 68 61 6d 2c 20 4a 65 66 66 65 72 73 6f 6e 20 5c 75 30 30 32 36 20 53 68 65 6c 62 79 2c 20 41 6c 61 62 61 6d 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 69 72 6d 69 6e 67 68 61 6d 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 41 4c 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 69 72 Data Ascii: ull,"Municipality":"Binghamton","Level":"municipality"},{"Selected":false,"TaggingCode":"AL1248","Name":"Birmingham, Jefferson \u0026 Shelby, Alabama","SimplifiedName":"Birmingham","Country":"","State":"","StateCode":"AL","County":null,"Municipality":"Bir
2024-04-18 17:16:26 UTC	1452	IN	Data Raw: 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 43 4f 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 6f 75 6c 64 65 72 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 46 4c 30 31 33 22 2c 22 4e 61 6d 65 22 3a 22 42 72 6f 77 61 72 64 20 43 6f 75 6e 74 79 2c 20 46 6c 6f 72 69 64 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 72 6f 77 61 72 64 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 Data Ascii: implifiedName":"Boulder","Country":"","State":"","StateCode":"CO","County":null,"Municipality":"Boulder","Level":"municipality"},{"Selected":false,"TaggingCode":"FL013","Name":"Broward County, Florida","SimplifiedName":"Broward County","Country":"","State
2024-04-18 17:16:26 UTC	32	IN	Data Raw: 61 74 74 61 72 61 75 67 75 73 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c Data Ascii: attaraugus County","Country":"",
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 59 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 61 74 74 61 72 61 75 67 75 73 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 49 4c 30 38 36 22 2c 22 4e 61 6d 65 22 3a 22 43 68 61 6d 70 61 69 67 6e 2c 20 49 6c 6c 69 6e 6f 69 73 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 68 61 6d 70 61 69 67 6e 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 49 4c 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c Data Ascii: "State":"","StateCode":"NY","County":null,"Municipality":"Cattaraugus County","Level":"municipality"},{"Selected":false,"TaggingCode":"IL086","Name":"Champaign, Illinois","SimplifiedName":"Champaign","Country":"","State":"","StateCode":"IL","County":null,
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 22 3a 22 43 6f 6c 6f 72 61 64 6f 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 43 4f 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 6e 75 6c 6c 2c 22 4c 65 76 65 6c 22 3a 22 73 74 61 74 65 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4d 4f 31 30 36 30 22 2c 22 4e 61 6d 65 22 3a 22 43 6f 6c 75 6d 62 69 61 2c 20 42 6f 6f 6e 65 2c 20 4d 69 73 73 6f 75 72 69 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 6f 6c 75 6d 62 69 61 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 4f 22 2c 22 43 6f 75 6e Data Ascii: ":"Colorado","Country":"","State":"","StateCode":"CO","County":null,"Municipality":null,"Level":"state"},{"Selected":false,"TaggingCode":"MO1060","Name":"Columbia, Boone, Missouri","SimplifiedName":"Columbia","Country":"","State":"","StateCode":"MO","Coun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.4	50149	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:26 UTC	563	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460584539 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
2024-04-18 17:16:26 UTC	542	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:26 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: uN+u7YlIRHA= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-07198aba8.edge-va6.demdex.com 2 ms
2024-04-18 17:16:26 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.4	50150	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:26 UTC	943	OUT	GET /pagead/1p-user-list/950188369/?random=1713460584429&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fhelp-and-support%2Fkeep-me-logged-in%2F16393%2F&frm=0&tiba=Keep%20Me%20Logged%20in%20%7C%20Help%20and%20Support%20%7C%20Tools%20%7C%20hrcenter.us.brightmine.com&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqjzmByJwT00an2qav7NPPu8lO3mxZJXVo2cGwKwqzAsMPWAu2&random=3626280790&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:26 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.4	50152	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:27 UTC	2295	OUT	GET /jurisdiction/getalljurisdictions/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:27 UTC	391	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 49755 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-1 X-CDN: Imperva X-Iinfo: 59-35342218-35342278 NNNY CT(13 14 0) RT(1713460586652 214) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:16:27 UTC	1061	IN	Data Raw: 7b 22 4a 75 72 69 73 64 69 63 74 69 6f 6e 44 61 74 61 22 3a 5b 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 4b 31 34 35 32 22 2c 22 4e 61 6d 65 22 3a 22 41 64 61 2c 20 50 6f 6e 74 6f 74 6f 63 2c 20 4f 6b 6c 61 68 6f 6d 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 64 61 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 4b 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 64 61 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 37 Data Ascii: {"JurisdictionData":[{"Selected":false,"TaggingCode":"OK1452","Name":"Ada, Pontotoc, Oklahoma","SimplifiedName":"Ada","Country":"","State":"","StateCode":"OK","County":null,"Municipality":"Ada","Level":"municipality"},{"Selected":false,"TaggingCode":"OH17
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 59 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6c 62 61 6e 79 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 31 30 30 30 22 2c 22 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 2c 20 41 6c 62 61 6e 79 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6c 62 61 6e 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 Data Ascii: lbany County","Country":"","State":"","StateCode":"NY","County":null,"Municipality":"Albany County","Level":"municipality"},{"Selected":false,"TaggingCode":"NY1000","Name":"Albany, Albany, New York","SimplifiedName":"Albany","Country":"","State":"","State
2024-04-18 17:16:27 UTC	1320	IN	Data Raw: 64 65 22 3a 22 4d 49 32 33 35 36 22 2c 22 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 2c 20 57 61 73 68 74 65 6e 61 77 2c 20 4d 69 63 68 69 67 61 6e 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 49 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 41 6e 6e 20 41 72 62 6f 72 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 41 5a 22 2c 22 4e 61 6d 65 22 3a 22 41 72 69 7a 6f 6e 61 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 Data Ascii: de":"MI2356","Name":"Ann Arbor, Washtenaw, Michigan","SimplifiedName":"Ann Arbor","Country":"","State":"","StateCode":"MI","County":null,"Municipality":"Ann Arbor","Level":"municipality"},{"Selected":false,"TaggingCode":"AZ","Name":"Arizona","SimplifiedNa
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 69 70 61 6c 69 74 79 22 3a 22 42 61 6c 74 69 6d 6f 72 65 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4d 44 31 30 39 35 22 2c 22 4e 61 6d 65 22 3a 22 42 61 6c 74 69 6d 6f 72 65 2c 20 4d 61 72 79 6c 61 6e 64 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 61 6c 74 69 6d 6f 72 65 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4d 44 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 61 6c 74 69 6d 6f 72 65 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 Data Ascii: ipality":"Baltimore County","Level":"municipality"},{"Selected":false,"TaggingCode":"MD1095","Name":"Baltimore, Maryland","SimplifiedName":"Baltimore","Country":"","State":"","StateCode":"MD","County":null,"Municipality":"Baltimore","Level":"municipality"
2024-04-18 17:16:27 UTC	8	IN	Data Raw: 22 2c 22 43 6f 75 6e 74 Data Ascii: ","Count
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e 4d 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 65 72 6e 61 6c 69 6c 6c 6f 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 31 30 33 39 22 2c 22 4e 61 6d 65 22 3a 22 42 69 6e 67 68 61 6d 74 6f 6e 2c 20 42 72 6f 6f 6d 65 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 69 6e 67 68 61 6d 74 6f 6e 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4e Data Ascii: ry":"","State":"","StateCode":"NM","County":null,"Municipality":"Bernalillo County","Level":"municipality"},{"Selected":false,"TaggingCode":"NY1039","Name":"Binghamton, Broome, New York","SimplifiedName":"Binghamton","Country":"","State":"","StateCode":"N
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 22 3a 22 43 4f 30 30 37 22 2c 22 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 2c 20 43 6f 6c 6f 72 61 64 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 43 4f 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 42 6f 75 6c 64 65 72 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 43 4f 31 30 32 37 22 2c 22 4e 61 6d 65 22 3a 22 42 6f 75 6c 64 65 72 2c 20 42 6f 75 6c 64 65 72 2c Data Ascii: ":"CO007","Name":"Boulder County, Colorado","SimplifiedName":"Boulder County","Country":"","State":"","StateCode":"CO","County":null,"Municipality":"Boulder County","Level":"municipality"},{"Selected":false,"TaggingCode":"CO1027","Name":"Boulder, Boulder,
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 64 65 22 3a 22 4f 48 31 37 32 34 22 2c 22 4e 61 6d 65 22 3a 22 43 61 6e 74 6f 6e 2c 20 53 74 61 72 6b 2c 20 4f 68 69 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 61 6e 74 6f 6e 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 48 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 61 6e 74 6f 6e 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4e 59 30 30 35 22 2c 22 4e 61 6d 65 22 3a 22 43 61 74 74 61 72 61 75 67 75 73 20 43 6f 75 6e 74 79 2c 20 4e 65 77 20 59 6f 72 6b 22 2c 22 53 69 6d 70 6c Data Ascii: de":"OH1724","Name":"Canton, Stark, Ohio","SimplifiedName":"Canton","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Canton","Level":"municipality"},{"Selected":false,"TaggingCode":"NY005","Name":"Cattaraugus County, New York","Simpl
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 4f 48 31 31 35 33 22 2c 22 4e 61 6d 65 22 3a 22 43 6c 65 76 65 6c 61 6e 64 2c 20 43 75 79 61 68 6f 67 61 2c 20 4f 68 69 6f 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 6c 65 76 65 6c 61 6e 64 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 4f 48 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 6c 65 76 65 6c 61 6e 64 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e Data Ascii: l":"municipality"},{"Selected":false,"TaggingCode":"OH1153","Name":"Cleveland, Cuyahoga, Ohio","SimplifiedName":"Cleveland","Country":"","State":"","StateCode":"OH","County":null,"Municipality":"Cleveland","Level":"municipality"},{"Selected":false,"Taggin
2024-04-18 17:16:27 UTC	1452	IN	Data Raw: 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 49 4c 30 34 35 22 2c 22 4e 61 6d 65 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 2c 20 49 6c 6c 69 6e 6f 69 73 22 2c 22 53 69 6d 70 6c 69 66 69 65 64 4e 61 6d 65 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 22 2c 22 43 6f 75 6e 74 72 79 22 3a 22 22 2c 22 53 74 61 74 65 22 3a 22 22 2c 22 53 74 61 74 65 43 6f 64 65 22 3a 22 49 4c 22 2c 22 43 6f 75 6e 74 79 22 3a 6e 75 6c 6c 2c 22 4d 75 6e 69 63 69 70 61 6c 69 74 79 22 3a 22 43 6f 6f 6b 20 43 6f 75 6e 74 79 22 2c 22 4c 65 76 65 6c 22 3a 22 6d 75 6e 69 63 69 70 61 6c 69 74 79 22 7d 2c 7b 22 53 65 6c 65 63 74 65 64 22 3a 66 61 6c 73 65 2c 22 54 61 67 67 69 6e 67 43 6f 64 65 22 3a 22 54 58 31 36 38 35 22 2c 22 4e 61 6d 65 22 3a 22 43 6f 72 70 75 73 20 43 68 72 69 73 Data Ascii: e,"TaggingCode":"IL045","Name":"Cook County, Illinois","SimplifiedName":"Cook County","Country":"","State":"","StateCode":"IL","County":null,"Municipality":"Cook County","Level":"municipality"},{"Selected":false,"TaggingCode":"TX1685","Name":"Corpus Chris

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.4	50154	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:28 UTC	2579	OUT	GET /forgottenpassword/ HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460644\|session#1713460549104-847971#1713462444; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:28 UTC	384	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:28 GMT Content-Type: text/html; charset=utf-8 Content-Length: 13629 Connection: close Cache-Control: private Server: Microsoft-IIS/10.0 Set-Cookie: flow=; path=/; secure; HttpOnly; SameSite=Lax X-Web-Server: Consumer-2 X-CDN: Imperva X-Iinfo: 57-29370712-29370771 NNNY CT(13 14 0) RT(1713460587430 213) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:16:28 UTC	1068	IN	Data Raw: 0d 0a 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 0d 0a 20 20 20 20 63 6c 61 73 73 3d 22 6e 6f 2d 73 63 72 69 70 74 20 20 63 68 72 6f 6d 65 2d 62 74 20 31 32 33 2d 62 76 20 22 0d 0a 20 20 20 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 0d 0a 3c 68 65 61 64 20 69 64 3d 22 68 65 61 64 22 20 64 61 74 61 2d 78 70 65 72 74 68 72 2d 70 61 67 65 6e 61 6d 65 3d 22 46 6f 72 67 6f 74 74 65 6e 50 61 73 73 77 6f 72 64 50 61 67 65 22 3e 0d 0a 20 20 20 20 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 3c 6d 65 74 61 20 6e Data Ascii: <!DOCTYPE html><html class="no-script chrome-bt 123-bv " lang="en-US"><head id="head" data-xperthr-pagename="ForgottenPasswordPage"> <meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><meta n
2024-04-18 17:16:28 UTC	1452	IN	Data Raw: 72 79 20 7b 20 54 79 70 65 6b 69 74 2e 6c 6f 61 64 28 29 3b 20 7d 20 63 61 74 63 68 20 28 65 29 20 7b 20 7d 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 21 2d 2d 5b 69 66 20 49 45 5d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 62 6f 6f 74 73 74 72 61 70 2f 63 73 73 2f 62 6f 6f 74 73 74 72 61 70 2d 66 75 6c 6c 2e 6d 69 6e 2e 63 73 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 Data Ascii: ry { Typekit.load(); } catch (e) { }</script> ...[if IE]> <link rel="stylesheet" type="text/css" href="//assets.us.brightmine.com/latest/Full/Bundle/bootstrap/css/bootstrap-full.min.css?v=2.0.769" /> <link rel="stylesheet" type="te
2024-04-18 17:16:28 UTC	1320	IN	Data Raw: 76 3d 32 2e 30 2e 37 36 39 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 61 73 73 65 74 73 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 2f 6c 61 74 65 73 74 2f 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 63 68 65 63 6b 53 63 72 69 70 74 2e 6d 69 6e 2e 6a 73 3f 76 3d 32 2e 30 2e 37 36 39 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 57 65 62 2f 41 73 73 65 74 73 2f 53 68 61 72 65 64 2f 43 6c 69 65 6e 74 53 69 64 65 43 6f 6e 66 69 67 2f 6e 67 2d 61 70 70 2d 73 65 74 74 69 6e 67 73 2e 6a 73 3f 76 3d 36 39 35 31 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 Data Ascii: v=2.0.769" /> <script type="text/javascript" src="//assets.us.brightmine.com/latest/Full/Bundle/checkScript.min.js?v=2.0.769"></script> <script src="/Web/Assets/Shared/ClientSideConfig/ng-app-settings.js?v=6951"></script> <script type="te
2024-04-18 17:16:28 UTC	1452	IN	Data Raw: 65 20 66 65 61 74 75 72 65 20 66 6c 61 67 73 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 73 65 74 28 27 46 65 61 74 75 72 65 46 6c 61 67 73 27 2c 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 75 74 6f 53 75 67 67 65 73 74 3a 20 74 72 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 75 6c 73 65 53 75 72 76 65 79 3a 20 66 61 6c 73 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 67 61 6c 54 69 6d 65 74 61 62 6c 65 53 65 61 72 63 68 3a 20 74 72 75 65 0d 0a 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 41 73 73 65 74 53 68 61 72 65 64 2e 48 65 6c 70 65 72 73 2e 6d 6f 64 65 6c 44 61 74 61 4c 69 62 72 61 72 79 2e 73 65 Data Ascii: e feature flags */ AssetShared.Helpers.modelDataLibrary.set('FeatureFlags', { autoSuggest: true, pulseSurvey: false, legalTimetableSearch: true }); AssetShared.Helpers.modelDataLibrary.se
2024-04-18 17:16:28 UTC	1452	IN	Data Raw: 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 35 32 78 31 35 32 22 20 68 72 65 66 3d 22 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 35 32 78 31 35 32 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 36 37 78 31 36 37 22 20 68 72 65 66 3d 22 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 2d 31 36 37 78 31 36 37 2e 70 6e 67 22 20 2f 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 73 69 7a 65 73 3d 22 31 38 30 78 31 38 30 22 20 68 72 65 66 3d 22 2f 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 Data Ascii: /> <link rel="apple-touch-icon" sizes="152x152" href="/apple-touch-icon-152x152.png" /> <link rel="apple-touch-icon" sizes="167x167" href="/apple-touch-icon-167x167.png" /> <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-ic
2024-04-18 17:16:28 UTC	1452	IN	Data Raw: 46 75 6c 6c 2f 42 75 6e 64 6c 65 2f 61 6e 61 6c 79 74 69 63 73 4a 73 2e 6d 69 6e 2e 6a 73 3f 76 3d 32 2e 30 2e 37 36 39 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6c 61 6e 67 75 61 67 65 3d 22 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 3c 73 63 72 69 70 74 20 69 64 3d 22 61 75 64 69 65 6e 63 65 4d 61 6e 61 67 65 72 53 63 72 69 70 74 22 20 73 72 63 3d 22 2f 2f 72 62 69 2e 64 65 6d 64 65 78 2e 6e 65 74 2f 65 76 65 6e 74 3f 64 5f 73 74 75 66 66 3d 31 26 64 5f 64 73 74 3d 31 26 64 5f 72 74 62 64 3d 6a 73 6f 6e 26 64 5f 63 74 73 3d 31 26 64 5f 63 62 3d 61 61 6d 5f 74 6e 74 5f 63 62 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 0d 0a 0d Data Ascii: Full/Bundle/analyticsJs.min.js?v=2.0.769" type="text/javascript" language="javascript"></script><script id="audienceManagerScript" src="//rbi.demdex.net/event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb" type="text/javascript"></script>
2024-04-18 17:16:28 UTC	1452	IN	Data Raw: 64 69 66 5d 2d 2d 3e 0d 0a 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 61 67 65 2d 62 6f 64 79 20 73 69 6d 70 6c 65 2d 70 61 67 65 73 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 65 6e 74 65 72 2d 61 6c 69 67 6e 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 52 65 73 65 74 20 70 61 73 73 77 6f 72 64 3c 2f 68 31 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 78 68 72 6f 62 2d 6c 6f 67 69 6e 2d 72 65 71 75 69 72 65 64 22 20 69 64 3d 22 6c 6f 67 69 6e 53 65 63 74 69 6f 6e 22 3e 0d 0a 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 2f 66 6f 72 67 6f 74 74 65 6e 70 61 73 73 77 6f 72 64 2f 22 20 63 6c 61 73 73 3d 22 78 68 72 2d 66 6f 72 6d Data Ascii: dif]--> <div class="page-body simple-pages"> <div class="center-align-form"> <h1>Reset password</h1> <div class="xhrob-login-required" id="loginSection"><form action="/forgottenpassword/" class="xhr-form
2024-04-18 17:16:28 UTC	1452	IN	Data Raw: 61 69 6c 41 64 64 72 65 73 73 22 20 63 6c 61 73 73 3d 22 74 65 78 74 22 20 76 61 6c 75 65 3d 22 22 20 6f 6e 70 61 73 74 65 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 6f 6e 64 72 6f 70 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 6f 6e 63 6f 70 79 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 6f 6e 64 72 61 67 3d 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 69 65 6c 64 73 65 74 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 69 65 6c Data Ascii: ailAddress" class="text" value="" onpaste="return false;" ondrop="return false;" oncopy="return false;" ondrag="return false;" /> </p> </div> </fieldset> <fiel
2024-04-18 17:16:28 UTC	1452	IN	Data Raw: 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 20 28 43 61 6c 69 66 6f 72 6e 69 61 29 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 66 6f 6f 74 65 72 2d 6c 69 6e 6b 20 6f 70 74 61 6e 6f 6e 2d 74 6f 67 67 6c 65 2d 64 69 73 70 6c 61 79 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 32 70 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 6f 6f 6b 69 65 20 53 65 74 74 69 6e 67 73 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 65 70 61 72 61 74 6f 72 22 3e 20 7c 3c 2f 73 70 61 6e 3e 20 59 6f 75 72 Data Ascii: risk.lexisnexis.com/group/privacy-policy" target="_blank">Privacy Policy (California)</a> <a class="footer-link optanon-toggle-display" style="margin-top: -2px"> Cookie Settings<span class="separator"> \|</span> Your
2024-04-18 17:16:28 UTC	1077	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 65 66 73 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 64 3d 22 4d 30 20 30 68 33 30 76 31 34 48 30 7a 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 63 6c 69 70 50 61 74 68 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 65 66 73 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: </g> <defs> <clipPath id="a"> <path fill="#fff" d="M0 0h30v14H0z" /> </clipPath> </defs>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.4	50155	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:28 UTC	688	OUT	GET /event?d_stuff=1&d_dst=1&d_rtbd=json&d_cts=1&d_cb=aam_tnt_cb HTTP/1.1 Host: rbi.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; rbi=72487132774482760582579231535531206623; DST=
2024-04-18 17:16:28 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:28 GMT Content-Type: application/javascript;charset=utf-8 Content-Length: 108 Connection: close X-TID: gltx6zOhSpU= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-07c49f6aa.edge-va6.demdex.com 9 ms set-cookie: DST=; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None set-cookie: rbi=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:28 GMT; Path=/; Domain=.rbi.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:28 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None
2024-04-18 17:16:28 UTC	108	IN	Data Raw: 61 61 6d 5f 74 6e 74 5f 63 62 28 7b 22 73 74 75 66 66 22 3a 5b 5d 2c 22 75 75 69 64 22 3a 22 37 32 34 38 37 31 33 32 37 37 34 34 38 32 37 36 30 35 38 32 35 37 39 32 33 31 35 33 35 35 33 31 32 30 36 36 32 33 22 2c 22 64 63 73 5f 72 65 67 69 6f 6e 22 3a 37 2c 22 74 69 64 22 3a 22 67 6c 74 78 36 7a 4f 68 53 70 55 3d 22 7d 29 Data Ascii: aam_tnt_cb({"stuff":[],"uuid":"72487132774482760582579231535531206623","dcs_region":7,"tid":"gltx6zOhSpU="})

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.4	50156	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:29 UTC	1470	OUT	GET /m2/reedbusinessinternat/mbox/standard?mboxHost=hrcenter.us.brightmine.com&mboxSession=1713460549104-847971&mboxPage=1713460588402-661231&screenHeight=1024&screenWidth=1280&browserWidth=1280&browserHeight=907&browserTimeOffset=120&colorDepth=24&mboxCount=1&gwa_contentID=&gwa_contentTitle=Forgotten%20password&gwa_contentType=&gwa_account=rbius-xperthr&gwa_authStatus=logged%20out&gwa_userID=logged%20out&gwa_userType=anonymous&gwa_userEntitlement=&gwa_siteSection1=forgottenpassword&gwa_siteSection2=&gwa_siteSection3=&gwa_siteSection4=&gwa_pageName=forgottenpassword&gwa_contentHierarchy=forgottenpassword&gwa_server=desktop%20platform&mboxMCSDID=2148D62479FDDBC4-0CD37E5C55CA8F67&mbox=target-global-mbox&mboxId=0&mboxTime=1713467788413&mboxURL=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&mboxReferrer=&mboxVersion=51 HTTP/1.1 Host: reedbusinessinternat.tt.omtrdc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:29 UTC	418	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:29 GMT content-type: application/javascript; charset=utf-8 referrer-policy: strict-origin-when-cross-origin server: jag strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close transfer-encoding: chunked
2024-04-18 17:16:29 UTC	759	IN	Data Raw: 32 65 62 0d 0a 20 2f 2a 20 44 49 53 41 42 4c 45 44 3a 20 46 6f 6c 6c 6f 77 69 6e 67 20 6d 62 6f 78 2e 6a 73 20 64 65 70 72 65 63 61 74 69 6f 6e 2c 20 74 68 69 73 20 65 6e 64 70 6f 69 6e 74 20 69 73 20 64 69 73 61 62 6c 65 64 2e 20 2a 2f 0a 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 33 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 6f 72 69 65 73 2e 67 65 74 28 27 64 65 66 61 75 6c 74 27 29 2e 67 65 74 4d 62 6f 78 65 73 28 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6d 2e 73 65 74 4f 66 66 65 72 28 6e 65 77 20 6d 62 6f 78 4f 66 66 65 72 44 65 66 61 75 6c 74 28 29 29 2e 6c 6f 61 64 65 64 28 29 3b 7d 29 3b 0a 7d 20 65 6c 73 65 20 69 66 20 28 6d 62 6f 78 56 65 72 73 69 6f 6e 20 3e 3d 20 33 31 29 20 7b 0a 20 20 6d 62 6f 78 46 61 63 74 Data Ascii: 2eb /* DISABLED: Following mbox.js deprecation, this endpoint is disabled. */if (mboxVersion >= 33) { mboxFactories.get('default').getMboxes().each(function(m){m.setOffer(new mboxOfferDefault()).loaded();});} else if (mboxVersion >= 31) { mboxFact

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.4	50158	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:29 UTC	619	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:29 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:29 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664d8dbadf7ba2-ATL
2024-04-18 17:16:29 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.4	50153	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:30 UTC	2703	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449
2024-04-18 17:16:30 UTC	387	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:30 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 55-23614219-23614849 NNNY CT(13 14 0) RT(1713460587432 2007) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:30 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.4	50161	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:30 UTC	2703	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449
2024-04-18 17:16:31 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 62-46613517-46613563 NNNY CT(13 13 0) RT(1713460589673 629) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:31 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.4	50164	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:31 UTC	2555	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 Authorization: Bearer null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/forgottenpassword/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A25+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449
2024-04-18 17:16:32 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:32 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 61-43393046-43393145 NNNY CT(13 15 0) RT(1713460591006 214) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:32 UTC	1142	IN	Data Raw: 34 66 38 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 70 Data Ascii: 4f8{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Sup
2024-04-18 17:16:32 UTC	137	IN	Data Raw: 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 0d 0a Data Ascii: ry":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}]
2024-04-18 17:16:32 UTC	1452	IN	Data Raw: 62 36 38 0d 0a 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f 6e 4d 61 69 6e 43 6f 6e 74 61 69 6e 65 72 22 3a 7b 22 63 6f 6e 74 61 69 6e 65 72 48 74 6d 6c 49 64 22 3a 22 43 6f 6e 74 61 69 6e 65 72 5f 54 6f 70 69 63 4e 61 76 69 67 61 74 69 6f 6e 4d 61 69 6e 22 2c 22 63 6f 6e 74 61 69 6e 65 72 43 73 73 43 6c 61 73 73 22 3a 22 63 6f 6e 74 61 69 6e 65 72 2d 74 68 72 65 65 2d 63 6f 6c 22 2c 22 63 6f 6e 74 65 6e 74 4d 6f 64 75 6c 65 73 22 3a 5b 7b 22 70 61 Data Ascii: b68,"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigationMainContainer":{"containerHtmlId":"Container_TopicNavigationMain","containerCssClass":"container-three-col","contentModules":[{"pa
2024-04-18 17:16:32 UTC	1452	IN	Data Raw: 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4e 65 77 20 48 69 72 65 20 50 61 70 65 72 77 6f 72 6b 22 2c 22 69 64 22 3a 32 38 36 7d 5d 7d 2c 7b 22 68 65 61 64 65 72 22 3a 7b 22 74 69 74 6c 65 22 3a 22 22 7d 2c 22 6c 69 6e 6b 73 22 3a 5b 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e Data Ascii: ","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/","title":"New Hire Paperwork","id":286}]},{"header":{"title":""},"links":[{"summary":null,"type":"Topic","url":"/topics/organization
2024-04-18 17:16:32 UTC	23	IN	Data Raw: 69 72 69 6e 67 20 61 6e 64 20 4f 6e 62 6f 61 72 64 69 6e 67 22 0d 0a Data Ascii: iring and Onboarding"
2024-04-18 17:16:32 UTC	1452	IN	Data Raw: 31 36 64 30 0d 0a 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 69 72 69 6e 67 2d 61 6e 64 2d 6f 6e 62 6f 61 72 64 69 6e 67 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 52 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 72 2d 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4c 61 62 6f 72 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 6c 61 62 6f 72 2d 72 65 6c 61 74 69 6f 6e 73 2d 32 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 20 45 78 69 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 61 6c 2d 65 78 69 74 2f 22 7d 2c 7b 22 Data Ascii: 16d0,"urlSlug":"/tasks/hiring-and-onboarding/"},{"text":"HR Administration","urlSlug":"/tasks/hr-administration/"},{"text":"Labor Relations","urlSlug":"/tasks/labor-relations-2/"},{"text":"Organizational Exit","urlSlug":"/tasks/organizational-exit/"},{"
2024-04-18 17:16:32 UTC	1452	IN	Data Raw: 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 6d 70 6c 61 74 65 73 20 61 6e 64 20 50 6f 73 74 65 72 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 74 65 6d 70 6c 61 74 65 73 2d 61 6e 64 2d 70 6f 73 74 65 72 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 65 6d 70 6c 6f 79 65 65 2d 68 61 6e 64 62 6f 6f 6b 73 22 2c 22 74 65 78 74 22 3a 22 45 6d 70 6c 6f 79 65 65 20 48 61 6e 64 62 6f 6f 6b 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 6d 70 6c 6f 79 65 65 2d 68 61 6e 64 62 6f 6f 6b 73 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6a 6f 62 2d 64 65 73 63 72 69 70 74 69 6f 6e 73 22 2c 22 74 65 78 74 22 3a 22 4a 6f 62 20 44 65 73 63 72 69 70 74 69 6f 6e 73 Data Ascii: }]},{"name":"Templates and Posters","cssClass":"templates-and-posters","dropDownPosition":1,"toolLinks":[{"cssClass":"employee-handbooks","text":"Employee Handbooks","urlSlug":"/employee-handbooks/"},{"cssClass":"job-descriptions","text":"Job Descriptions
2024-04-18 17:16:32 UTC	1452	IN	Data Raw: 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 34 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 66 61 71 73 22 2c 22 74 65 78 74 22 3a 22 46 41 51 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 66 61 71 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 71 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 22 2c 22 74 65 78 74 22 3a 22 51 75 69 63 6b 20 52 65 66 65 72 65 6e 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 71 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 43 6f 6d 6d 65 6e 74 61 72 79 20 61 6e 64 20 54 72 65 6e 64 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 63 6f 6d 6d 65 6e 74 61 72 79 2d 61 6e 64 2d 74 72 65 6e 64 73 Data Ascii: uick-reference","dropDownPosition":4,"toolLinks":[{"cssClass":"faqs","text":"FAQs","urlSlug":"/faq/"},{"cssClass":"quick-reference","text":"Quick Reference","urlSlug":"/quick-reference/"}]},{"name":"Commentary and Trends","cssClass":"commentary-and-trends
2024-04-18 17:16:32 UTC	1452	IN	Data Raw: 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 67 65 6f 72 67 69 61 2f 47 41 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 61 77 61 69 69 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 68 61 77 61 69 69 2f 48 49 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 64 61 68 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 69 64 61 68 6f 2f 49 44 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 6c 6c 69 6e 6f 69 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 69 6c 6c 69 6e 6f 69 73 2f 49 4c 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 6e 64 69 61 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 69 6e 64 69 61 Data Ascii: Slug":"/jurisdictions/georgia/GA/"},{"text":"Hawaii","urlSlug":"/jurisdictions/hawaii/HI/"},{"text":"Idaho","urlSlug":"/jurisdictions/idaho/ID/"},{"text":"Illinois","urlSlug":"/jurisdictions/illinois/IL/"},{"text":"Indiana","urlSlug":"/jurisdictions/india
2024-04-18 17:16:32 UTC	40	IN	Data Raw: 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 64 61 6b 6f 74 0d 0a Data Ascii: ,"urlSlug":"/jurisdictions/north-dakot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.4	50169	64.233.185.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:32 UTC	1254	OUT	GET /pagead/viewthroughconversion/950188369/?random=1713460590852&cv=11&fst=1713460590852&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:32 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:32 UTC	552	IN	Data Raw: 38 64 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 8d7(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:32 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:32 UTC	463	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 39 31 32 33 35 37 36 39 31 30 7a 38 38 35 38 30 38 30 30 30 32 7a 61 32 30 31 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 68 72 63 65 6e 74 65 72 2e 75 73 2e 62 72 69 67 68 74 6d 69 6e 65 2e 63 6f 6d 25 32 46 66 6f 72 67 6f 74 74 65 6e 70 61 73 73 77 6f 72 64 25 32 46 5c 78 32 36 66 72 6d 5c 78 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v9123576910z8858080002za201\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F\x26frm\x
2024-04-18 17:16:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.4	50170	142.250.105.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:32 UTC	1378	OUT	GET /td/rul/950188369?random=1713460590852&cv=11&fst=1713460590852&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&hn=www.googleadservices.com&frm=0&tiba=Forgotten%20password&npa=0&pscdl=noapi&auid=1505451102.1713460552&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&fledge=1 HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:32 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:32 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:32 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.4	50171	44.216.52.108	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:32 UTC	838	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460590958 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://hrcenter.us.brightmine.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
2024-04-18 17:16:32 UTC	661	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:32 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: nr3IQ7+oQWw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Access-Control-Allow-Origin: https://hrcenter.us.brightmine.com Vary: Origin Access-Control-Allow-Credentials: true DCS: dcs-prod-va6-1-v059-039cfd27c.edge-va6.demdex.com 8 ms
2024-04-18 17:16:32 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.4	50174	108.177.122.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:33 UTC	1081	OUT	GET /pagead/1p-user-list/950188369/?random=1713460590852&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqLu9FVaOSyCG4emrz3CMFlyX1dz9db6_reGsCOQ9mOhWzWy0l&random=2199991498&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://hrcenter.us.brightmine.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:33 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:33 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:33 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.4	50175	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:33 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:33 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:33 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664da44d0a6756-ATL
2024-04-18 17:16:33 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.4	50176	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:33 UTC	2444	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A30+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:33 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 59-35343566-35343679 NNNY CT(13 14 0) RT(1713460592371 219) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:16:33 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.4	50173	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:33 UTC	1706	OUT	GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
2024-04-18 17:16:33 UTC	887	IN	HTTP/1.1 200 OK Connection: close Content-Length: 52634 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="solving-crimes-at-the-speed-of-now.jpg" Content-Type: image/webp Etag: "UNidWKRq6jNKFKvWtJ70fy4bonSu9YBsSTgcMmwrrKA" Fastly-Io-Info: ifsz=371160 idim=1230x420 ifmt=jpeg ofsz=52634 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560643 Date: Thu, 18 Apr 2024 17:16:33 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120130-DFW, cache-pdk-kfty2130040-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460593.273587,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: 52 49 46 46 92 cd 00 00 57 45 42 50 56 50 38 20 86 cd 00 00 50 c6 03 9d 01 2a ce 04 a4 01 3e 51 26 8f 46 23 a2 21 27 a3 f3 7b 10 f0 0a 09 65 6d c4 b3 3a 8b 8d f1 9c 69 d5 9f 0e ab 4f 53 21 99 83 c4 d3 97 7e 0f c0 fb d1 7f c5 f4 a1 ff 89 de 51 d9 bf df 7b 03 79 84 e6 f4 e2 0e 6b 9d 96 b5 3a a7 ec 67 c8 c9 1f e6 3f 3a 23 7d fe df 06 fe 1f ff 0f 9c cf b6 7f 49 ff 8b ee b7 e6 2f fd af 5f 7f d7 3f e4 7b 14 ff 54 ff 03 ea b7 ff 87 ee 47 c1 8f ef 3f f8 7d 59 7f 5c ff 8f fb 73 ee df e9 eb fc 67 a8 1f f4 0f f4 1d 75 5f bb 3e c5 df b8 de b2 df fc bf 76 be 23 3f b6 7f d9 fd d8 f6 b7 ff f5 ec 01 ff bf db 67 a2 5f bd 9e 76 fe 5f f7 6b c3 9f 3f 5f 5a fe 23 f7 83 e2 3b f6 6c e5 fb bf fa 3e 67 7f 46 fd 59 fd 9f f3 be a7 fe d8 79 9f f3 df fe 8f 51 1f cf 3f b4 7f c0 f4 f2 Data Ascii: RIFFWEBPVP8 P*>Q&F#!'{em:iOS!~Q{yk:g?:#}I/_?{TG?}Y\sgu_>v#?g_v_k?_Z#;l>gFYyQ?
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: 2c f4 24 b4 e5 41 f6 bb 74 2c 4f 00 39 43 ed cb 58 59 d4 21 df 87 59 43 ba 92 52 ac 8d 5d d8 dc a2 20 cb ec 37 3d 28 d4 3f ae f1 39 f4 4a ce ac cc c6 a9 0c 30 0d 44 22 13 6c 69 0c 78 25 9c e6 1f 43 1c c1 15 c0 56 0a 9b 9f c4 2c 47 72 e6 32 2d b4 0f 43 7b 18 e3 b1 9b ed 49 18 54 3a 4e 2a 85 55 65 85 f2 af 8e 49 78 cd 25 6f 22 cd 80 fe cd e9 cf f0 a7 16 e6 34 13 91 12 99 c9 f1 37 eb 0c 53 53 be c5 75 42 94 06 a5 91 c8 28 5c a4 77 27 b6 52 98 8e 95 99 81 42 6b d3 fe d1 45 5d 44 fe 26 52 d8 4e cd d3 05 48 a6 1c 11 68 b1 2c 4e 5d d7 87 d2 19 03 7d 35 0b 14 94 c6 ae d4 69 7e a1 ce 19 9e 83 d1 c7 5d ce 69 bd e7 7a cd 2e 19 fe 05 10 44 0b da 93 d2 48 c8 ea b0 a6 9d ed 8e db 71 4e 7b 74 e4 8c 27 b2 ff f7 d5 3f ef 7c fa 8a 01 1f bf 92 1e 15 7b f6 b4 e1 d2 e2 b4 5c Data Ascii: ,$At,O9CXY!YCR] 7=(?9J0D"lix%CV,Gr2-C{IT:N*UeIx%o"47SSuB(\w'RBkE]D&RNHh,N]}5i~]iz.DHqN{t'?\|{\
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: f8 27 8f 90 14 00 83 9d ce 91 a3 5e 0f 56 35 80 71 16 08 14 94 d7 ea 94 f0 a7 2a 59 1e 39 88 40 97 6d d5 de 3e 0e 3a f8 7d 8e cb 3b 83 dd 84 c1 67 d9 32 2a 3f d2 d0 f2 18 4b 85 24 b4 69 4c d0 67 22 2e 81 71 72 8e 3a 6a 78 57 0f 47 98 19 68 c8 68 4d 2a f9 11 f0 d7 b9 3e d6 c3 f5 fc 53 83 de b5 31 d0 05 94 2e f8 51 b2 d1 29 2d 7d 06 ea 67 1c c3 7b 39 b3 e7 b8 53 d7 8c aa 5b 8f 78 45 1e 8e c0 7b e9 24 69 f4 08 e3 57 0b 62 14 85 4f b8 dc d6 6d 91 db 5c e6 b7 1e b0 f3 2a 24 aa a6 33 7b 56 35 8d 8b 0b 7d 89 7b 05 d3 0b 8d 63 18 2e 96 b6 90 66 23 11 37 a8 d0 fe 8f 15 59 f0 98 67 e9 a0 10 4c 8b 11 93 50 b0 cc 1e e4 c1 5c 0c 4d 87 63 41 30 76 54 1b 3a 21 85 89 d2 b9 64 39 cb 4a b2 36 c6 2d 47 52 65 71 db 0b 44 15 7a 58 32 f9 ec fe f4 c8 41 15 e0 cd 50 79 29 ca a7 Data Ascii: '^V5qY9@m>:};g2?K$iLg".qr:jxWGhhM>S1.Q)-}g{9S[xE{$iWbOm\$3{V5}{c.f#7YgLP\McA0vT:!d9J6-GReqDzX2APy)
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: dc 0f 48 21 6f cc 87 53 ee f8 27 ae 10 be a4 91 79 31 37 e8 cb a9 51 d5 99 b1 f6 0a 0a 78 86 9a 0c db ef 25 16 d4 c6 51 39 b3 3c ec a1 24 c8 49 36 2e c8 f7 20 76 97 b3 f1 7d 08 61 2b 14 97 82 3e bf d5 1c 15 6c a1 c0 be 43 98 94 b8 1b ee 61 44 62 45 40 4d 07 32 02 c4 f3 62 3a 4e 09 e8 7a 71 c9 b3 20 5c b5 5c 06 27 09 6f 9d b1 39 fb fe 39 9d a2 53 75 0e 43 d3 a0 af 0b ee 3e a9 9d c9 10 38 0e bc 34 1e 47 a5 f8 b8 6c 8b 35 dd d6 00 67 84 8b cc a3 ab 17 fc 54 cd d2 10 b4 4b 36 19 5e 91 41 64 38 dc 54 05 ff f9 c0 f5 07 3b ce 4a de 73 04 b7 57 dc 6a 69 85 6a 37 c5 81 21 7e dd db ca d7 26 50 fb ec b6 d6 e7 29 62 45 9f 12 c0 cf 3a 2d 56 f4 a6 19 2c 5c a7 5a 98 55 ed 53 73 3e 46 1c 69 19 87 5e e0 64 0c 20 11 20 8a f5 ca a4 7a 19 c3 46 1c 3d 66 a2 6d 1a 13 b6 ae 76 Data Ascii: H!oS'y17Qx%Q9<$I6. v}a+>lCaDbE@M2b:Nzq \\'o99SuC>84Gl5gTK6^Ad8T;JsWjij7!~&P)bE:-V,\ZUSs>Fi^d zF=fmv
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: c4 ec 79 23 d2 d0 fb 5b 3f 69 29 80 e1 1b 2e 87 a1 20 37 6f b3 14 36 90 a5 2b cd 75 70 d1 eb 6d e0 60 95 57 51 24 28 40 a4 7d 19 e3 b5 5d 04 1e 86 39 d3 2d a4 3e f9 9a dd 97 b9 5b e8 05 71 df d0 1b e7 f3 32 0f 55 03 ea f7 47 57 4c 7c a3 7b 1f 8d ed 73 50 da be d1 b3 44 81 95 9b 64 1a b0 1d f2 d5 42 c0 87 db e2 93 79 13 70 76 12 cd d6 6a b5 7c 3a 6e a0 fd db ce a2 bb 6b f9 e8 3b 0b 76 3e d9 12 48 fe 3d 40 84 43 e2 52 b4 db 81 9d 97 c2 59 a4 69 c5 13 bf b4 3b 51 a2 19 8e 36 71 9d 69 64 6d d2 6a 9e 40 13 f0 a1 9b b3 d7 b6 11 3d 65 3c 55 00 ab 71 a2 1c 52 7e b1 db 08 bd f1 45 c1 87 a3 fe d9 66 81 52 15 c0 a5 a9 d2 23 84 e2 bf 25 7f 03 8a b7 bd 88 63 65 63 77 c3 55 fa e4 b7 3f e6 1b eb 6f 01 6c 6c fe e7 03 6e cc d2 63 88 b7 13 3c 57 03 69 f4 d1 8c a0 93 2d 00 Data Ascii: y#[?i). 7o6+upm`WQ$(@}]9->[q2UGWL\|{sPDdBypvj\|:nk;v>H=@CRYi;Q6qidmj@=e<UqR~EfR#%cecwU?ollnc<Wi-
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: 69 d3 bd 9f 25 64 1d 66 a3 77 69 57 81 8c d5 8a a6 f7 2f ba a7 e0 fc 67 38 06 87 d2 a8 60 db 8a fd 3b 35 36 94 ca d3 28 0c d1 b3 f0 b9 14 6e 80 35 b1 0b 6e 06 b7 e6 ec 3a c6 ee 0d bb 5c 3b ee 15 81 c9 48 a9 b1 4c 76 c1 e9 05 6e 5d 64 e4 3d 0d 05 a2 8e 3b cf f5 b2 71 96 8a ff 74 51 49 45 1d 78 a0 53 26 d4 7f 5a 23 07 1d ab d1 5f f0 96 6e b6 7b 95 75 c1 54 52 b2 69 82 d6 c9 4b 51 5d d4 43 42 ce 52 77 cd ff 61 b9 56 73 36 e1 ed a0 2e 93 93 db 58 ee ed ce b9 78 3b dc 72 45 d8 af 8c c5 3c 0d 48 65 9e cc 3a e6 16 e3 50 1b 6d 4e 0c bc 88 80 4c 1b 93 25 92 2c a8 3c 70 9f f6 5f 78 7c 22 6f ae 88 4f 8c 01 86 51 6c f2 86 97 b5 05 12 57 ec 4e 56 47 c0 05 b8 75 9b 9c ff 75 fb 57 e1 66 a5 33 82 18 b7 18 74 0c 59 e3 6e d9 ec 3e 1d 17 97 68 d8 9d cf 4e 4b be 3f f9 86 04 Data Ascii: i%dfwiW/g8`;56(n5n:\;HLvn]d=;qtQIExS&Z#_n{uTRiKQ]CBRwaVs6.Xx;rE<He:PmNL%,<p_x\|"oOQlWNVGuuWf3tYn>hNK?
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: fe 97 5f 39 2f e6 d1 01 0d c4 35 f0 ad 5d 11 ce 66 6f 9c b9 ca c0 32 a8 8b cb 29 8e 5e cc 9b 42 fc 73 fa 50 bb 49 11 47 05 57 db f8 b4 74 55 f3 8d 8b db 0c b8 74 10 84 27 2c 7d 8f d2 52 5b 22 90 d2 b8 62 bd f4 e9 f0 58 65 eb 4e bf c5 a8 90 16 a4 9b 88 88 46 a3 aa 3c 40 cd 44 e9 c0 76 54 d1 cb 94 89 46 5b f0 46 28 a8 60 68 8c 7c ef 21 11 7c af 4a 55 6a ae cc e4 79 de 8f f9 aa f6 c8 fd cd ae 71 64 ce 33 e0 45 ec 94 12 5c 48 af fb 89 b7 ee 5e 99 f2 ca d8 f8 77 84 ae 5c ce aa 4c 15 c7 b7 6e 00 d1 6b d7 18 e0 45 8d 61 c6 3c 7e aa 83 93 93 5e 3c 17 2e a6 e8 f9 01 db dc 7e 21 9d 3e 86 a2 61 cc c9 0c 52 98 74 0a 6d e0 f4 01 e9 0a a9 c3 45 9a 2f 9e b9 8c 32 7c 76 c8 5c 0e 52 5a 03 1d 73 9a 80 3a cb 8d f8 6d de 11 c7 85 cb 66 f4 74 0b 78 67 8f d8 e2 23 0f 48 9d 95 Data Ascii: _9/5]fo2)^BsPIGWtUt',}R["bXeNF<@DvTF[F(`h\|!\|JUjyqd3E\H^w\LnkEa<~^<.~!>aRtmE/2\|v\RZs:mftxg#H
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: 06 9f 7c b9 00 c6 91 b3 6b aa 05 33 b0 5c 2a 96 0b 4b 22 c4 1f 4f 61 24 d8 12 5b 7e f0 73 33 2c 9f 88 b1 dd 12 6c 82 54 f2 3f 1f cf 47 c5 10 96 03 1a 48 99 1d b7 56 f2 19 cf 47 8c 9b f2 f7 ca 27 c7 0b d4 09 88 4c e6 db 81 86 e3 ec 35 a4 fb 4b 32 f2 f3 3a 7c ee ff 9a 3c 21 25 d7 2c 84 30 e6 fa 43 a0 81 09 2f 45 3d b1 04 25 82 20 01 06 b6 4f 67 a1 39 d8 d8 70 f6 52 cc 2d 02 0f 71 88 3a d2 87 8f 2e 61 54 4c e5 de ee d5 3d 8d 03 ad d5 fd dd 9c ab 65 ce 2e 65 cf 14 b5 76 be 12 7f 38 c1 41 92 d2 73 ba de e5 3e ee b8 75 e7 b4 cf 2e bb 4f 1e 2e 04 72 ce fd 08 37 7b 8b e1 10 ac 42 c1 09 6a 72 3c 22 e3 fc ac 12 84 c5 f5 c1 e8 13 49 35 73 9e a1 02 47 bc d7 6a 20 1f ca db 0c 1a 3b 45 52 25 1d 9a 88 9a 02 be ac f0 b7 ad 2d 01 a4 c0 af 5d 60 5c 97 0f b9 fb 74 99 32 46 Data Ascii: \|k3\*K"Oa$[~s3,lT?GHVG'L5K2:\|<!%,0C/E=% Og9pR-q:.aTL=e.ev8As>u.O.r7{Bjr<"I5sGj ;ER%-]`\t2F
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: f0 c4 fa 3a 8d 91 b0 c1 d2 8e 69 d1 f5 c0 14 4b ac af 9f 8b 20 63 5b 1c 9d 3a 6a 01 c0 a6 d7 76 99 cc 11 35 f7 7b 3a 5d b0 df fc 73 fd 84 3c 83 a8 89 f9 55 42 93 0e 1b e0 9d ba b1 24 b6 8a cb 6f de 33 ed 0c e1 09 a7 71 96 96 c6 78 f5 45 04 4a 75 a6 54 2d a9 9e 6a 39 0c e2 55 89 cd e1 48 96 1a e9 bc 01 1c 8c 3c 7b 89 ca b7 86 cf 1c 27 6c 46 22 4a a6 b6 d1 84 79 27 3d f8 15 d5 f7 86 3f 49 63 e5 a7 72 a0 2a be 29 b5 ce 96 fa 11 fb d3 81 49 b6 b1 3f f1 b3 e8 b8 30 03 19 28 13 1a 88 52 69 01 e6 e4 dd 42 d0 fd 06 01 94 c6 d8 aa 66 77 e1 f5 85 5a 7c 39 50 0f 10 62 56 78 9f 94 58 0b 2a fd 91 38 08 46 2f 3b cb 79 7f 98 2c d8 75 2a 80 af 3a 8d 1b 42 a1 cf c8 73 10 9f 02 8c 7f 85 4c 53 cb e3 89 be ff 20 58 8d 5d 99 61 0c 97 b3 0b e7 55 18 b6 b0 52 e9 12 64 54 c5 16 Data Ascii: :iK c[:jv5{:]s<UB$o3qxEJuT-j9UH<{'lF"Jy'=?Icr)I?0(RiBfwZ\|9PbVxX8F/;y,u*:BsLS X]aURdT
2024-04-18 17:16:33 UTC	1379	IN	Data Raw: 10 18 84 b9 ac 91 c3 cc c8 fc 42 32 74 c1 27 50 d9 2b af a6 e0 e2 c7 5b 14 ed e7 c9 ec 58 ef 43 6d e2 5c 4f 52 98 42 3f fc 6d 58 22 6b 01 94 4a 63 ae 9d 06 b8 ed 9a 1f 86 31 ff 6a 36 4e 08 ec fd 4c 14 8b 26 e1 24 06 69 b5 38 b0 4b e4 be 32 98 37 a3 5f d7 63 83 a2 9a 2f bb 19 b9 3d 1a 22 d4 6d b3 db 0d e4 78 7c 37 ca df 4f 7b 61 52 d9 ab 4a a5 0f 08 9f f6 11 ff c9 8c be 04 6c 05 34 48 53 df 03 5e 65 51 b5 25 45 a2 3c be fb 0d 21 e7 83 eb e4 74 87 28 0e b4 4d 81 0b f8 13 da bb a1 a4 69 34 e3 78 f2 9e 89 82 1f 95 58 1d c7 e0 03 55 54 39 02 93 0d 78 9e 35 80 9f 15 2d 8e 0b 4a 90 2f 75 0b 7c 69 cc b9 cb 76 f7 e3 ba 36 e7 b0 29 58 1a d6 02 40 3d 89 ac 82 13 8c 9d 8a 65 8e e2 d9 2f 06 a3 4c 2a 19 be 36 08 c8 8c 11 a1 8c 0c 01 2d 5a f6 98 4b 63 4b 30 2d 97 07 c2 Data Ascii: B2t'P+[XCm\ORB?mX"kJc1j6NL&$i8K27_c/="mx\|7O{aRJl4HS^eQ%E<!t(Mi4xXUT9x5-J/u\|iv6)X@=e/L*6-ZKcK0-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.4	50179	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:33 UTC	2296	OUT	GET /headerfooterservice/v1/header/full HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A30+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:33 UTC	310	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:33 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: Microsoft-IIS/10.0 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 61-43393705-43393822 NNNY CT(13 14 0) RT(1713460592408 222) q(0 0 0 -1) r(0 1) U24
2024-04-18 17:16:33 UTC	1142	IN	Data Raw: 32 66 66 36 0d 0a 7b 22 67 6c 6f 62 61 6c 4c 69 6e 6b 73 22 3a 5b 5b 7b 22 74 65 78 74 22 3a 22 48 65 6c 70 20 61 6e 64 20 53 75 70 70 6f 72 74 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 68 65 6c 70 2d 61 6e 64 2d 73 75 70 70 6f 72 74 2f 22 7d 5d 5d 2c 22 6c 65 67 61 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 74 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 72 6f 75 70 2f 70 72 69 76 61 63 79 2d 70 6f 6c 69 63 79 22 7d 2c 7b 22 74 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 50 6f 6c 69 63 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 70 61 67 65 73 2f 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 53 75 Data Ascii: 2ff6{"globalLinks":[[{"text":"Help and Support","urlSlug":"/help-and-support/"}]],"legalLinks":[{"text":"Privacy Policy","urlSlug":"https://risk.lexisnexis.com/group/privacy-policy"},{"text":"Cookie Policy","urlSlug":"/pages/cookie-policy/"},{"text":"Su
2024-04-18 17:16:33 UTC	1452	IN	Data Raw: 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 65 6d 70 6c 6f 79 65 65 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 77 6f 72 6b 70 6c 61 63 65 2d 72 75 6c 65 73 2f 77 6f 72 6b 70 6c 61 63 65 2d 70 6f 73 74 65 72 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 57 6f 72 6b 70 6c 61 63 65 20 50 6f 73 74 65 72 73 22 2c 22 69 64 22 3a 31 39 33 7d 5d 7d 5d 2c 22 69 64 22 3a 33 33 33 38 2c 22 6d 6f 64 75 6c 65 57 69 64 74 68 43 73 73 43 6c 61 73 73 22 3a 22 6f 6e 65 2d 63 6f 6c 22 2c 22 6d 6f 64 75 6c 65 53 74 79 6c 65 43 73 73 43 6c 61 73 73 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 69 73 56 69 73 69 62 6c 65 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 32 7d 5d 7d 2c 22 74 6f 70 69 63 4e 61 76 69 67 61 74 69 6f Data Ascii: ary":null,"type":"Topic","url":"/topics/employee-management/workplace-rules/workplace-posters/","title":"Workplace Posters","id":193}]}],"id":3338,"moduleWidthCssClass":"one-col","moduleStyleCssClass":"default","isVisible":true,"type":2}]},"topicNavigatio
2024-04-18 17:16:33 UTC	1452	IN	Data Raw: 68 2d 63 61 72 65 2d 62 65 6e 65 66 69 74 73 2f 22 2c 22 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 43 61 72 65 20 42 65 6e 65 66 69 74 73 22 2c 22 69 64 22 3a 31 34 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 77 61 67 65 2d 61 6e 64 2d 68 6f 75 72 2f 6d 69 6e 69 6d 75 6d 2d 77 61 67 65 2f 22 2c 22 74 69 74 6c 65 22 3a 22 4d 69 6e 69 6d 75 6d 20 57 61 67 65 22 2c 22 69 64 22 3a 31 30 31 7d 2c 7b 22 73 75 6d 6d 61 72 79 22 3a 6e 75 6c 6c 2c 22 74 79 70 65 22 3a 22 54 6f 70 69 63 22 2c 22 75 72 6c 22 3a 22 2f 74 6f 70 69 63 73 2f 72 65 63 72 75 69 74 69 6e 67 2d 61 6e 64 2d 68 69 72 69 6e 67 2f 6e 65 77 2d 68 69 72 65 2d 70 61 70 65 72 77 6f 72 6b 2f 22 2c Data Ascii: h-care-benefits/","title":"Health Care Benefits","id":14},{"summary":null,"type":"Topic","url":"/topics/wage-and-hour/minimum-wage/","title":"Minimum Wage","id":101},{"summary":null,"type":"Topic","url":"/topics/recruiting-and-hiring/new-hire-paperwork/",
2024-04-18 17:16:33 UTC	1452	IN	Data Raw: 65 65 20 52 65 6c 61 74 69 6f 6e 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 65 6d 70 6c 6f 79 65 65 2d 72 65 6c 61 74 69 6f 6e 73 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 65 61 6c 74 68 20 61 6e 64 20 53 61 66 65 74 79 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 65 61 6c 74 68 2d 61 6e 64 2d 73 61 66 65 74 79 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 69 72 69 6e 67 20 61 6e 64 20 4f 6e 62 6f 61 72 64 69 6e 67 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 69 72 69 6e 67 2d 61 6e 64 2d 6f 6e 62 6f 61 72 64 69 6e 67 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 52 20 41 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 74 61 73 6b 73 2f 68 72 2d 61 64 6d 69 6e 69 73 74 72 61 Data Ascii: ee Relations","urlSlug":"/tasks/employee-relations/"},{"text":"Health and Safety","urlSlug":"/tasks/health-and-safety/"},{"text":"Hiring and Onboarding","urlSlug":"/tasks/hiring-and-onboarding/"},{"text":"HR Administration","urlSlug":"/tasks/hr-administra
2024-04-18 17:16:33 UTC	1452	IN	Data Raw: 6e 61 6c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 69 6e 74 65 72 6e 61 74 69 6f 6e 61 6c 2d 6d 61 6e 75 61 6c 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 62 65 73 74 2d 70 72 61 63 74 69 63 65 2d 6d 61 6e 75 61 6c 22 2c 22 74 65 78 74 22 3a 22 4c 65 61 64 69 6e 67 20 50 72 61 63 74 69 63 65 20 47 75 69 64 65 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6c 65 61 64 69 6e 67 2d 70 72 61 63 74 69 63 65 2d 67 75 69 64 65 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 54 65 6d 70 6c 61 74 65 73 20 61 6e 64 20 50 6f 73 74 65 72 73 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 74 65 6d 70 6c 61 74 65 73 2d 61 6e 64 2d 70 6f 73 74 65 72 73 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 Data Ascii: nal","urlSlug":"/international-manual/"},{"cssClass":"best-practice-manual","text":"Leading Practice Guides","urlSlug":"/leading-practice-guides/"}]},{"name":"Templates and Posters","cssClass":"templates-and-posters","dropDownPosition":1,"toolLinks":[{"cs
2024-04-18 17:16:33 UTC	1452	IN	Data Raw: 78 74 22 3a 22 45 64 69 74 6f 72 27 73 20 43 68 6f 69 63 65 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 65 64 69 74 6f 72 73 2d 63 68 6f 69 63 65 2f 22 7d 2c 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 6e 65 77 73 22 2c 22 74 65 78 74 22 3a 22 4e 65 77 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6e 65 77 73 2f 22 7d 5d 7d 2c 7b 22 6e 61 6d 65 22 3a 22 51 75 69 63 6b 20 52 65 66 65 72 65 6e 63 65 22 2c 22 63 73 73 43 6c 61 73 73 22 3a 22 71 75 69 63 6b 2d 72 65 66 65 72 65 6e 63 65 22 2c 22 64 72 6f 70 44 6f 77 6e 50 6f 73 69 74 69 6f 6e 22 3a 34 2c 22 74 6f 6f 6c 4c 69 6e 6b 73 22 3a 5b 7b 22 63 73 73 43 6c 61 73 73 22 3a 22 66 61 71 73 22 2c 22 74 65 78 74 22 3a 22 46 41 51 73 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 66 61 71 2f 22 7d 2c 7b 22 63 73 73 43 6c Data Ascii: xt":"Editor's Choice","urlSlug":"/editors-choice/"},{"cssClass":"news","text":"News","urlSlug":"/news/"}]},{"name":"Quick Reference","cssClass":"quick-reference","dropDownPosition":4,"toolLinks":[{"cssClass":"faqs","text":"FAQs","urlSlug":"/faq/"},{"cssCl
2024-04-18 17:16:33 UTC	1452	IN	Data Raw: 43 6f 6c 75 6d 62 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 64 69 73 74 72 69 63 74 2d 6f 66 2d 63 6f 6c 75 6d 62 69 61 2f 55 53 57 44 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 46 6c 6f 72 69 64 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 46 4c 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 47 65 6f 72 67 69 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 67 65 6f 72 67 69 61 2f 47 41 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 48 61 77 61 69 69 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 68 61 77 61 69 69 2f 48 49 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 49 64 61 68 6f 22 2c 22 Data Ascii: Columbia","urlSlug":"/jurisdictions/district-of-columbia/USWDC/"},{"text":"Florida","urlSlug":"/jurisdictions/florida/FL/"},{"text":"Georgia","urlSlug":"/jurisdictions/georgia/GA/"},{"text":"Hawaii","urlSlug":"/jurisdictions/hawaii/HI/"},{"text":"Idaho","
2024-04-18 17:16:33 UTC	1452	IN	Data Raw: 22 4e 65 77 20 59 6f 72 6b 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 4e 59 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 43 61 72 6f 6c 69 6e 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 63 61 72 6f 6c 69 6e 61 2f 4e 43 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 6f 72 74 68 20 44 61 6b 6f 74 61 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 6f 72 74 68 2d 64 61 6b 6f 74 61 2f 4e 44 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 68 69 6f 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6f 68 69 6f 2f 4f 48 2f 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4f 6b Data Ascii: "New York","urlSlug":"/jurisdictions/new-york/NY/"},{"text":"North Carolina","urlSlug":"/jurisdictions/north-carolina/NC/"},{"text":"North Dakota","urlSlug":"/jurisdictions/north-dakota/ND/"},{"text":"Ohio","urlSlug":"/jurisdictions/ohio/OH/"},{"text":"Ok
2024-04-18 17:16:33 UTC	980	IN	Data Raw: 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 63 61 6c 69 66 6f 72 6e 69 61 2f 6c 6f 73 2d 61 6e 67 65 6c 65 73 2f 43 41 31 31 34 36 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4d 69 61 6d 69 2d 44 61 64 65 20 43 6f 75 6e 74 79 2c 20 46 4c 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 66 6c 6f 72 69 64 61 2f 6d 69 61 6d 69 2d 64 61 64 65 2d 63 6f 75 6e 74 79 2f 46 4c 30 34 30 22 7d 2c 7b 22 74 65 78 74 22 3a 22 4e 65 77 20 59 6f 72 6b 20 43 69 74 79 2c 20 4e 59 22 2c 22 75 72 6c 53 6c 75 67 22 3a 22 2f 6a 75 72 69 73 64 69 63 74 69 6f 6e 73 2f 6e 65 77 2d 79 6f 72 6b 2f 6e 65 77 2d 79 6f 72 6b 2d 63 69 74 79 2f 4e 59 31 30 33 37 22 7d 2c 7b 22 74 65 78 74 22 3a 22 50 68 69 6c 61 64 65 6c 70 68 69 61 2c 20 50 41 22 2c 22 Data Ascii: :"/jurisdictions/california/los-angeles/CA1146"},{"text":"Miami-Dade County, FL","urlSlug":"/jurisdictions/florida/miami-dade-county/FL040"},{"text":"New York City, NY","urlSlug":"/jurisdictions/new-york/new-york-city/NY1037"},{"text":"Philadelphia, PA","
2024-04-18 17:16:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.4	50183	107.154.193.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:33 UTC	2444	OUT	GET /displaymodeservice/v1/displaymode/TW96aWxsYS81LjAgKFdpbmRvd3MgTlQgMTAuMDsgV2luNjQ7IHg2NCkgQXBwbGVXZWJLaXQvNTM3LjM2IChLSFRNTCwgbGlrZSBHZWNrbykgQ2hyb21lLzExNy4wLjAuMCBTYWZhcmkvNTM3LjM2 HTTP/1.1 Host: hrcenter.us.brightmine.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visid_incap_3085453=dtfG/u2jRX21lvFgfcnrXjVVIWYAAAAAQUIPAAAAAAA3+9R1tgGuNmytI3U2fzP8; nlbi_3085453=MN/+epan2iONK2a8uGgMMAAAAABelSb00Su3Ujwnw5fu+Oq6; incap_ses_1815_3085453=/7D7Fe21vUGJ8UTq5iwwGTVVIWYAAAAAVahSrbsvbEMcgIwHAfsKvw==; flow=; visid_incap_3085444=572sG56zQumsB6y54KnTmDVVIWYAAAAAQUIPAAAAAADk4hFu3rmIRenP5jyGwcxe; nlbi_3085444=uObqJEisWFBHQZFY1VdD3wAAAABAkutsGXg1uT+q0gK7gpaa; incap_ses_1815_3085444=WE1rNZ8VMn7Z80Tq5iwwGTVVIWYAAAAAJB9N2HaFGVAKM2BPtPKnog==; xhr_gateway_theme=core; OpenIdConnect.nonce.PXx1RBBCe%2F1HrqHHEUjpehG8iTwapPPXm%2FN7tTOWtf4%3D=VEF3enh3b2R3VHBMUXNWOTllX20tZjVNX1B2TXFRdUxaVmxBOXZ5a2p0Y3pBR0xLdjhkQkMtRzJuQzNyWV9HNXRJdHc1Zlp4dnM4QXdUNnFzQkdXcGZCNmZQT3lSSWZVdEp0cFo5SUwtM0F5VUV2bGtqLTRDOGN3dHppU1JKMkVGY1k5T1pwZEJBbFdYLWdwcWFxNU9LTm5yTXRlSldJSkpaYTRWaDJMbTZkWUxCZVZZZk5UUjV1NEd4elhlZHVYRE41NFYybjJGZW9HWDlDTW1wc1JCcE1xQkl3; visid_incap_3085445=wsEbWSO7Q1SzcTRRicdU0TlVIWYAAAAAQUIPAAAAAAAi9i9FIXDcHpe7ichWcPMI; nlbi_3085445=TUFtDY+lqgaSpf+H6DoT2QAAAADZGWXcKIzQB15XFYLQa6vb; incap_ses_1815_3085445=VAO7De4eG3PQAEXq5iwwGTlVIWYAAAAAX7B0xLwjfaBYLpujJcfm6A==; _gcl_au=1.1.1505451102.1713460552; _ga=GA1.2.1717981528.1713460552; _gid=GA1.2.1780739987.1713460552; _gat_UA-135618937-1=1; adobeujs-optin=%7B%22aam%22%3Afalse%2C%22adcloud%22%3Afalse%2C%22aa%22%3Afalse%2C%22campaign%22%3Afalse%2C%22ecid%22%3Afalse%2C%22livefyre%22%3Afalse%2C%22target%22%3Afalse%2C%22mediaaa%22%3Afalse%7D; mbox=check#true#1713460649\|session#1713460549104-847971#1713462449; _uetsid=4f279100fda711ee920917fe2661e1e3; _uetvid=4f27ae80fda711eea855034be5d8fa93; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A30+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=1d9edf4e-c738-471d-8bbc-bbfedc5fb99e&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&groups=1%3A1%2C2%3A0%2C3%3A0%2C4%3A0&AwaitingReconsent=false
2024-04-18 17:16:33 UTC	386	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:33 GMT Content-Type: application/json; charset=utf-8 Content-Length: 6 Connection: close Cache-Control: no-cache Expires: -1 Pragma: no-cache Server: Microsoft-IIS/10.0 X-Aspnet-Version: 4.0.30319 X-Powered-By: ASP.NET X-CDN: Imperva X-Iinfo: 59-35343753-35343836 NNNY CT(13 14 0) RT(1713460592828 236) q(0 0 0 -1) r(0 0) U24
2024-04-18 17:16:33 UTC	6	IN	Data Raw: 22 66 75 6c 6c 22 Data Ascii: "full"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.4	50182	3.215.140.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:33 UTC	563	OUT	GET /optOutStatus?d_visid_ver=5.5.0&d_rtbd=json&d_ver=2&d_orgid=164E38B352784F380A490D4C%40AdobeOrg&d_nsid=0&ts=1713460590958 HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
2024-04-18 17:16:33 UTC	542	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:33 GMT Content-Type: application/json;charset=utf-8 Content-Length: 41 Connection: close X-TID: SSZFrULJR70= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" DCS: dcs-prod-va6-1-v059-0ed34e5e1.edge-va6.demdex.com 2 ms
2024-04-18 17:16:33 UTC	41	IN	Data Raw: 7b 0a 20 20 22 64 5f 6f 70 74 6f 75 74 22 20 3a 20 5b 20 5d 2c 0a 20 20 22 64 5f 6f 74 74 6c 22 20 3a 20 37 32 30 30 0a 7d Data Ascii: { "d_optout" : [ ], "d_ottl" : 7200}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.4	50184	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:35 UTC	1642	OUT	GET /layouts/system/VIChecker.aspx?tstamp=638490573626029594 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
2024-04-18 17:16:35 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 18 Pragma: no-cache Content-Type: text/css; charset=utf-8 Expires: -1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:35 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210055-DFW, cache-pdk-kfty2130034-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460595.311433,VS0,VE80 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:35 UTC	18	IN	Data Raw: 0d 0a 2e 73 63 5f 43 6f 6e 74 61 63 74 20 7b 0d 0a 7d Data Ascii: .sc_Contact {}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.4	50186	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:35 UTC	1466	OUT	GET /-/media/images/homepage%20carousel/solving-crimes-at-the-speed-of-now.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
2024-04-18 17:16:35 UTC	887	IN	HTTP/1.1 200 OK Connection: close Content-Length: 75463 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="solving-crimes-at-the-speed-of-now.jpg" Content-Type: image/jpeg Etag: "jlu706ohCZ5MINyENX15CGonf98Vc5c1b6MiMKIdUZg" Fastly-Io-Info: ifsz=371160 idim=1230x420 ifmt=jpeg ofsz=75463 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560646 Date: Thu, 18 Apr 2024 17:16:35 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120130-DFW, cache-pdk-kfty2130049-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460595.463671,VS0,VE25 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 2f 44 12 10 ba 40 28 d9 25 0b a0 80 08 84 9b 25 5d 26 e9 08 24 11 5d 24 b9 03 16 80 29 92 f4 a0 e0 80 1e 47 64 d8 3e 51 dc a0 42 ee 8d 35 74 2f e1 31 8e a0 90 1c 8f 32 00 34 69 19 90 cc 98 ac 5d 90 48 cc 86 64 0a c5 a3 48 cc 93 99 01 7e e3 88 f4 4d 87 23 cc 81 0b 44 91 74 77 40 06 89 24 94 59 90 1c c5 20 91 99 1d d0 02 b4 41 22 e8 20 28 5a 2b a4 a2 ba 00 5d d2 51 5d 0b a4 49 72 0d 02 42 49 29 24 a4 02 ee 10 04 26 c2 50 28 01 68 24 dd 16 64 d0 c5 dd 29 35 74 a0 53 44 18 b4 12 73 22 2e 4c 54 2b 44 12 2f e5 16 6f 29 80 ea 3b a6 b3 20 5e 8d c0 76 e8 5c 26 33 21 9d 31 0f dc 22 ba 8f 9d 17 31 00 49 b8 49 25 47 32 24 f3 10 04 9b af 3b 7e 34 c5 4b 8c 63 38 06 19 4d 4a d7 57 d2 c4 6a 6a 26 d8 88 5e 6c c8 c9 ec 48 2e 5e 82 33 47 13 1f 24 af 0d 8d 8d 2e 7b 8e 96 6b Data Ascii: /D@(%%]&$]$)Gd>QB5t/124i]HdH~M#Dtw@$Y A" (Z+]Q]IrBI)$&P(h$d)5tSDs".LT+D/o); ^v\&3!1"1II%G2$;~4Kc8MJWjj&^lH.^3G$.{k
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 15 ec 9f c3 5e 1b 38 17 0f d1 cf 57 14 67 11 a8 84 67 94 5c 91 0d f3 32 3b 9e 9d 4f 95 87 c1 b8 2f 0d e3 6a 98 f1 2a a8 59 05 24 52 87 08 63 1e b2 d0 73 08 c9 d8 0e fe 17 7c ca 00 00 00 00 16 00 6c 00 e8 a2 a4 e4 93 7b 7b 14 65 4b 1b 78 e2 ee 9e ec 19 ed d5 17 30 22 2d 43 20 4f 62 90 f3 02 94 1d e5 10 68 47 94 23 60 0f 3f 94 33 24 d9 1a 00 19 8a 2c c7 b2 34 57 08 00 af e1 1e 64 34 41 00 15 ca 50 ba 08 c1 45 80 61 0b a3 b8 45 70 90 09 4a 17 47 a2 09 80 05 d2 92 6e 94 90 04 85 d0 ee 93 a2 00 88 63 6d ce 89 26 36 f6 4f b9 36 56 64 69 6c 61 cc 1d 92 72 02 9f 22 e8 06 a2 82 c6 c4 7e 12 84 7e 13 ed 68 4e 65 4f 48 b5 11 b2 78 49 2c 3d 94 cc a9 25 a8 d2 2d 44 50 d4 e3 47 84 6e 08 02 02 43 bb 1c 00 23 b2 46 60 3a a5 07 5f aa 90 80 5a 8b 64 b4 48 a1 06 10 44 81 4c Data Ascii: ^8Wgg\2;O/j*Y$Rcs\|l{{eKx0"-C ObhG#`?3$,4Wd4APEaEpJGncm&6O6Vdilar"~~hNeOHxI,=%-DPGnC#F`:_ZdHDL
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 27 41 7d ca a4 e6 0f 48 1b 5e c2 ca c2 9c d3 3a 4e 5c f2 b9 b1 b4 7e 91 99 5d 19 2d 9f 6e 46 6a 97 99 27 b4 b9 96 f1 53 d5 c0 c7 92 c9 58 f9 9c 6f 20 b6 5d 3a 5d 48 6c 8e 82 cd 63 a5 2f 3e c4 1b 78 4e d3 63 34 d2 01 04 b2 c8 04 7a 36 42 46 57 0e 99 87 75 24 c9 46 c7 36 59 63 0d 86 40 5b cf 87 52 d3 d1 d6 3f d9 41 65 a7 ba dc db f8 78 4a 37 8f 22 aa e4 fa 7c 94 f5 13 55 56 b5 b1 b6 36 b5 c1 d6 76 63 94 8f ba a4 9e 17 c6 f8 d9 1b b3 bd ce f9 46 a6 e5 5c 3c fc 63 b2 43 2c 6f 71 79 6f 30 8b 13 f4 e9 74 30 da 1a d8 f1 02 d8 a8 5e 65 67 a4 36 c4 82 e3 a6 e9 ca 49 ab e6 fb 94 43 14 dc d2 de 9b ae 56 52 cd 15 65 21 01 d1 b9 9a fc fd 05 d3 d4 fc b7 ce 03 a6 b4 6d f9 dd df d9 6e 69 30 da fa bc 3a 68 e6 8e 53 03 a4 7b 44 a0 5d a1 e3 70 7d 97 3b 8d 91 43 52 f1 3b 4b Data Ascii: 'A}H^:N\~]-nFj'SXo ]:]Hlc/>xNc4z6BFWu$F6Yc@[R?AexJ7"\|UV6vcF\<cC,oqyo0t0^eg6ICVRe!mni0:hS{D]p};CR;K
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: af d0 34 b7 e5 b0 d8 69 ba 84 c7 c4 f7 3d d2 89 65 79 1a b8 5f 2b 4f 85 63 87 b6 a1 a5 ae a4 6c ce 96 e4 3a 57 db d2 de cc 0e ea 7b a9 2a 7d 3f dc 4e df 22 3c d5 c1 f0 80 e6 b3 2e cd b6 87 4e b6 4d b6 4e 67 2c 38 be 66 1b 5a 22 75 bf f9 a7 8c 75 d4 75 3f 15 25 2e 43 27 f2 e4 36 2d 1f ea 54 d7 54 83 56 2a 0c ad 7b da d0 2e 1b 62 5d 6d 98 07 40 a5 5b b4 dd 3f 82 3b ec e8 89 1b aa 5b 34 ac a7 84 80 01 2f 61 1a 34 20 e8 83 e8 ea 27 00 b0 92 3d 20 d8 58 9b 5e c8 e4 af 9a 01 33 df 1b d8 6a 0d ce 96 d3 6d 10 87 37 24 cb 33 1e ca 72 40 16 d7 33 bb 1b a1 be 9b be 7c fa 0e 31 57 75 42 3e 01 92 4d 10 a6 63 dc 32 02 6c 7f 57 ba 65 cd aa 73 e4 7c cd 79 8a 27 d9 e4 8d 42 d9 0c 57 0f a5 8b 0f 91 94 6d 73 63 05 ce 37 fe 61 23 63 6e ca 87 10 c6 66 ad 77 25 91 36 36 6a e2 Data Ascii: 4i=ey_+Ocl:W{}?N"<.NMNg,8fZ"uuu?%.C'6-TTV{.b]m@[?;[4/a4 '= X^3jm7$3r@3\|1WuB>Mc2lWes\|y'BWmsc7a#cnfw%66j
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 8a 9a d6 c8 c6 b4 9b 02 46 7b 6a 6d ff 00 75 56 22 70 92 47 8b ef 7d 3a 05 54 72 3d db 7f 05 92 c5 17 49 2f 92 b5 92 51 f0 f7 35 f0 42 e0 f2 df 98 58 5d 62 b1 6c 62 a2 a9 f9 44 72 b5 d2 3a e0 3c dc 9f 65 b1 af 6c b2 67 6b 1e 1a d3 b1 b5 dc 4f 71 7e 8a 9a 1a 68 a8 73 ce e8 8c 93 93 72 5d ab 87 6b 76 0b 56 3c 89 6e d7 99 98 b2 e3 93 7a 53 a8 a3 32 ec 0f 1c 31 39 ee a1 91 d1 01 79 00 17 3a 8b eb 6d ac aa 65 6c 52 36 46 47 0b a9 e3 d0 b4 88 ee f7 38 6e 6f d1 6b eb f8 ae b9 ad 74 10 0c b9 ae 3d 1a 9d 74 b6 8b 39 2d 6c d5 3c b7 55 e6 14 ed 19 4b 80 cb b7 6b 6e 56 98 ca 6e af 4d 19 25 18 ad a3 a9 b4 51 1c 42 b5 b1 18 22 73 9b 10 1a 8b 0b 9b 75 36 dd 24 1e 6b 83 df 56 1e ec ba 34 5c ea 7b d9 58 3a 4a 46 4a 64 76 47 46 e1 95 b0 c6 0e 67 bb f4 b4 fb f5 b2 91 59 41 Data Ascii: F{jmuV"pG}:Tr=I/Q5BX]blbDr:<elgkOq~hsr]kvV<nzS219y:melR6FG8nokt=t9-l<UKknVnM%QB"su6$kV4\{X:JFJdvGFgYA
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 2a e1 42 e6 14 39 83 ba 34 b1 6a 44 c2 42 2d 14 33 30 1d d2 0d 47 82 9a 8b 0b 44 fc c0 21 98 2a c3 31 45 ce 3d d3 d2 c8 ea 45 a6 60 8f 30 ee aa f9 c8 73 8a 34 86 a4 5a 67 1d d1 e7 0a af 9c 51 f3 8a 34 06 b4 59 66 f2 81 70 55 c2 67 77 4b 12 93 d5 1a 43 52 64 2e 22 a4 f8 dc 22 a9 8d b6 78 db cc 6f d3 7f e8 bc fb 2c 05 8d 99 af d4 eb 62 3a db aa f4 a3 5e d7 02 d7 6c 41 07 d8 e8 b9 4d 76 0a 21 ad 9e 31 73 6b dc 01 ad bc 1f 2a b9 c3 75 ef b1 a7 06 5a 52 5f 73 8f cc c3 19 71 70 3a ef db d9 55 54 19 25 b8 f5 69 6d 06 80 5b 60 b6 5c 41 4a da 37 39 a6 e1 e4 1c c7 c7 65 8e 92 71 60 d0 08 eb 60 b2 e4 8b 83 3a 58 9a 9c 53 1a ce d3 67 01 f9 a3 ab b6 fb 27 60 a8 cc e7 ba 57 16 92 74 b6 de ca 29 94 1d af 74 03 33 fe a3 73 d3 b0 54 3d fa 17 25 ee 2e a6 28 a6 98 4b a3 9c Data Ascii: B94jDB-30GD!1E=E`0s4ZgQ4YfpUgwKCRd.""xo,b:^lAMv!1sk*uZR_sqp:UT%im[`\AJ79eq``:XSg'`Wt)t3sT=%.(K
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 76 c5 48 4f 2d 2f 96 95 cc 68 ea 8b 9c ce e1 16 2a 13 90 a3 c9 e1 11 9e 3f dc 12 4d 43 3a 38 23 70 db b8 ee 51 d9 0e 5b 4a 8d f1 23 b8 47 f1 23 b8 4e 9f 60 d8 91 cb 01 2c 34 28 9f 14 3b 84 7f 14 11 4f b0 ad 13 32 84 61 a1 42 f8 a0 8b e2 da 9e 97 d8 2d 13 ec 10 d1 57 7c 60 45 f1 40 f5 46 97 d8 56 8b 0d 10 b8 55 e2 a0 77 29 7c f1 dd 3d 2c 35 22 6d d2 49 0a 2f 38 77 45 cc bf ea 46 96 1a 91 20 b9 27 30 4c 67 ff 00 12 41 73 bf 72 34 0b 51 30 38 20 5c d5 04 bd fd 1e 92 5c ee af 46 8f 70 d5 ec 4c 32 35 27 9a 14 4c c7 ba 19 bd 93 d0 1a bd 89 7c df 28 b9 c3 ba 8f 7f 64 2c 11 a1 0b 50 f7 3f ca 2e 7f 94 ce 50 88 b4 1e 88 d0 85 ac 91 cf ee 52 4c e3 b8 51 cc 63 b2 65 cd 1d 93 d0 83 5b 25 9a 80 8b 9e 0a ae 76 89 37 f7 52 d0 83 5b ec 58 f3 87 64 7c e5 5e 0f ba 72 e9 e8 Data Ascii: vHO-/h*?MC:8#pQ[J#G#N`,4(;O2aB-W\|`E@FVUw)\|=,5"mI/8wEF '0LgAsr4Q08 \\FpL25'L\|(d,P?.PRLQce[%v7R[Xd\|^r
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 21 1e 81 00 47 11 04 ae 50 ec 9e d1 28 10 10 03 3c a1 d9 18 88 04 ee 60 8b 30 ee 80 10 22 08 f9 4d 47 9c 21 cc 09 8a d0 5c b6 a2 31 b5 19 91 bd d1 19 1a 8a 0b 0b 20 ec 86 5f 09 26 56 dd 11 99 bd d2 a6 1a 90 bc a8 65 f0 99 35 0d 45 f1 01 14 c3 52 1e b2 2b 68 98 33 dd 17 3b c2 7a 58 6a 43 e0 25 28 a6 52 8b 9a 53 51 62 d4 49 d1 0b b5 43 32 14 d1 95 e9 e8 62 d4 58 e6 1d d2 4b ec ab b9 af 43 3b 8a 7a 03 51 3f 98 3b a1 9c 28 20 b9 2b 52 8d 34 1a 99 24 bc 77 49 e6 79 51 f5 42 c8 d2 83 53 1f 32 94 83 39 ee 13 45 a9 05 9e 13 d0 85 a9 8f 73 fc a2 e7 95 1f 22 2c 9e 4a 7a 62 16 c9 1c f2 93 ce 29 8c a7 ba 49 69 da e9 e9 88 ad 8f 99 7c 24 19 4a 6f 96 ef dc 87 2d dd d3 a4 2b 7d 83 32 92 9a 73 c9 e8 97 ca 77 74 46 27 27 b0 bc c4 72 e7 76 48 24 95 27 90 ee e8 72 0a 7b 06 Data Ascii: !GP(<`0"MG!\1 _&Ve5ER+h3;zXjC%(RSQbIC2bXKC;zQ?;( +R4$wIyQBS29Es",Jzb)Ii\|$Jo-+}2swtF''rvH$'r{
2024-04-18 17:16:35 UTC	1379	IN	Data Raw: 9a be a3 0c 95 d6 01 b5 b1 16 b2 e7 a7 31 99 87 dd 75 f8 a4 82 a6 18 a7 82 66 4b 0c 8d cd 1c b1 b8 3d 8f 07 ab 48 d0 85 e1 dc 4b f0 ba 8a 36 b9 f0 61 93 3d a0 5f fd de a6 ce ff 00 e1 20 37 fb ab 2f c3 be 30 a8 fc 3c c5 a3 c2 fe 36 aa 6c 2a aa 5c 92 e1 f5 6c c8 e8 1e 76 96 22 34 f7 03 75 77 84 a4 ae 19 61 2f 87 5f b3 a6 55 2b 8d ea 84 97 ca ff 00 74 7b 4f 28 45 94 2c af 0f f1 9e 07 c4 95 13 51 d2 4e e8 eb 62 b9 75 34 ba 38 81 b9 61 d9 c3 fa ad 61 6b 95 72 8c a0 ea 49 a6 25 e6 56 b7 43 0e 01 34 5a a4 18 dc 52 39 4f 42 92 ee 1a 5f 61 8c a0 21 a2 5b a0 79 44 20 78 ea 9e a5 dc 5a 5f 61 bb 03 d1 02 cb f4 52 1b 01 ee 9d 10 f9 28 d6 97 51 e8 7d 88 26 3f 09 26 3f 0a cc 44 10 e4 84 bc 44 1e 1b ec 54 3a 1b f4 45 c8 1d 95 c7 24 23 10 8e c8 f1 10 78 6c a7 e4 81 fa 52 Data Ascii: 1ufK=HK6a=_ 7/0<6l*\lv"4uwa/_U+t{O(E,QNbu48aakrI%VC4ZR9OB_a![yD xZ_aR(Q}&?&?DDT:E$#xlR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.4	50185	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:35 UTC	835	OUT	GET /pagead/1p-user-list/950188369/?random=1713460590852&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v9123576910z8858080002za201&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Fhrcenter.us.brightmine.com%2Fforgottenpassword%2F&frm=0&tiba=Forgotten%20password&npa=0&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqLu9FVaOSyCG4emrz3CMFlyX1dz9db6_reGsCOQ9mOhWzWy0l&random=2199991498&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:35 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.4	50187	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:36 UTC	1692	OUT	GET / HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C
2024-04-18 17:16:36 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210318 Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Date: Thu, 18 Apr 2024 17:16:36 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120062-DFW, cache-pdk-kfty2130047-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460596.309223,VS0,VE215 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 74 61 72 67 65 74 2d 64 65 6e 73 69 74 79 44 70 69 3d 64 65 76 69 63 65 2d 64 70 69 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, target-densityDpi=device-dpi, initial-scale=1, user-scalable=no
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 37 33 39 38 38 38 37 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 70 72 65 6c 6f 61 64 27 20 61 73 3d 27 73 74 79 6c 65 27 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 2f 31 2e 31 32 2e 31 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6d 69 6e 2e 63 73 73 27 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 20 7c 20 54 72 61 6e 73 66 6f 72 6d 20 59 6f 75 72 20 52 69 73 6b 20 44 65 63 69 73 69 6f 6e 20 4d 61 6b 69 6e 67 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 Data Ascii: 7398887" rel="stylesheet" /> <link rel='preload' as='style' href='//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css'> <title>LexisNexis Risk Solutions \| Transform Your Risk Decision Making</title>
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 0d 0a 7b 0d 0a 22 40 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 22 2c 0d 0a 22 40 74 79 70 65 22 3a 20 22 57 65 62 53 69 74 65 22 2c 0d 0a 22 6e 61 6d 65 22 3a 20 22 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 22 2c 0d 0a 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 2c 0d 0a 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 20 7b 0d 0a 22 40 74 79 70 65 22 3a 20 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 0d 0a 22 74 61 72 67 65 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 Data Ascii: <script type="application/ld+json">{"@context": "https://schema.org/","@type": "WebSite","name": "LexisNexis Risk Solutions","url": "https://risk.lexisnexis.com","potentialAction": {"@type": "SearchAction","target": "https://risk.lexi
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 63 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 75 73 68 70 2d 69 6e 64 75 73 74 72 79 20 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 30 70 78 3b 7d 0d 0a 0d 0a 3c 2f 73 74 79 6c 65 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4a 65 31 55 49 30 61 58 6a 75 56 69 51 44 4a 71 59 6b 67 72 41 5f 38 74 6f 56 55 2d 43 53 58 70 72 55 4d 47 46 32 59 70 44 6c 59 22 20 2f 3e 20 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 42 38 36 45 37 45 42 44 45 36 31 44 44 35 35 39 34 35 46 43 30 39 38 44 44 39 39 35 31 35 39 44 22 20 2f 3e 0d 0a 0d 0a 0d 0a 0d 0a Data Ascii: c !important;}.ushp-industry {padding-left: 20px;}</style> <meta name="google-site-verification" content="Je1UI0aXjuViQDJqYkgrA_8toVU-CSXprUMGF2YpDlY" /> <meta name="msvalidate.01" content="B86E7EBDE61DD55945FC098DD995159D" />
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 3b 0d 0a 09 09 09 09 20 7d 0d 0a 09 09 09 09 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 0d 0a 09 09 09 09 20 61 73 79 6e 63 5f 6c 6f 61 64 2c 20 66 61 6c 73 65 29 3b 0d 0a 09 09 09 09 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 27 6f 6e 6c 6f 61 64 27 2c 20 61 73 79 6e 63 5f 6c 6f 61 64 29 3b 0d 0a 09 09 09 20 7d 29 28 29 3b 0d 0a 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 20 63 6c 61 73 Data Ascii: ; } if (window.addEventListener) window.addEventListener('DOMContentLoaded', async_load, false); else if (window.attachEvent) window.attachEvent('onload', async_load); })();</script> <script type="text/plain" clas
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 53 65 74 45 6c 6f 71 75 61 54 72 61 63 6b 69 6e 67 28 6f 70 74 49 6e 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 72 61 63 6b 69 6e 67 53 74 61 74 75 73 20 3d 20 6f 70 74 49 6e 20 3f 20 22 65 6c 71 4f 70 74 49 6e 22 20 3a 20 22 65 6c 71 4f 70 74 4f 75 74 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 5f 65 6c 71 51 2e 70 75 73 68 28 5b 74 72 61 63 6b 69 6e 67 53 74 61 74 75 73 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d Data Ascii: } } } function SetEloquaTracking(optIn) { var trackingStatus = optIn ? "elqOptIn" : "elqOptOut"; _elqQ.push([trackingStatus]); }
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 6e 2d 62 61 72 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 62 61 72 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 22 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 62 72 61 6e 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: n-bar"></span> <span class="icon-bar"></span> </button> <a href="https://risk.lexisnexis.com/" class="navbar-brand"> </a> </div>
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 3e 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 77 72 61 70 70 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 2d 6c 61 62 65 6c 22 20 66 6f 72 3d 22 36 66 62 61 66 66 37 37 63 38 32 32 34 61 62 38 39 34 65 64 64 64 33 38 38 32 39 36 30 65 33 30 22 3e 53 65 61 72 63 68 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 69 6e 70 75 74 22 20 69 64 3d 22 36 66 62 61 66 66 37 37 63 38 32 32 34 61 62 38 39 34 65 64 64 64 33 38 38 32 39 36 30 65 33 30 22 20 70 6c 61 Data Ascii: ate="pending"> <div class="global-search-wrapper"> <label class="global-search-input-label" for="6fbaff77c8224ab894eddd3882960e30">Search</label> <input type="text" class="global-search-input" id="6fbaff77c8224ab894eddd3882960e30" pla
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 74 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 68 65 61 64 65 72 22 20 69 64 3d 22 6d 6f 64 61 6c 2d 37 64 34 65 36 64 62 34 2d 39 30 38 32 2d 34 61 38 37 2d 61 35 62 66 2d 39 39 31 32 36 38 65 61 38 36 63 63 2d 4c 61 62 65 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 22 20 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 6d 6f 64 61 6c 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 43 6c 6f 73 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e Data Ascii: tent"> <div class="modal-header" id="modal-7d4e6db4-9082-4a87-a5bf-991268ea86cc-Label"> <button type="button" class="close" data-dismiss="modal" aria-label="Close"> <span
2024-04-18 17:16:36 UTC	1379	IN	Data Raw: 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2e 62 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: score-left-text " > <a class="score-composite-link" data-ux-args="{"ClickMessagesTransmitting":[]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href="https://risk.lexisnexis.com.br" target="_blank"><span class

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.4	50188	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:36 UTC	1780	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"
2024-04-18 17:16:36 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:36 GMT Via: 1.1 varnish ETag: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" Age: 32 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kpdk1780035-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460597.772032,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.4	50193	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:37 UTC	1779	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"
2024-04-18 17:16:37 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:37 GMT Via: 1.1 varnish ETag: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" Age: 31 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130041-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460597.260793,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.4	50195	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:37 UTC	1496	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C If-None-Match: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw"
2024-04-18 17:16:37 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:37 GMT Via: 1.1 varnish ETag: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw" Age: 32 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130071-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460598.740429,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.4	50198	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:37 UTC	1495	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A13+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C If-None-Match: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg"
2024-04-18 17:16:37 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:37 GMT Via: 1.1 varnish ETag: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg" Age: 31 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130039-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460598.832029,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.4	50199	104.18.16.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:37 UTC	554	OUT	GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1 Host: js.qualified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:38 UTC	782	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:38 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=14400 Etag: W/"e4cfb76386f1f61f399d299928b57ee3" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains Vary: Accept,Accept-Encoding Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 9d76afec-cc54-234d-0f90-750f49132266 X-Runtime: 0.029427 X-Xss-Protection: 1; mode=block CF-Cache-Status: MISS Expires: Thu, 18 Apr 2024 21:16:38 GMT Server: cloudflare CF-RAY: 87664dc12fa053b1-ATL
2024-04-18 17:16:38 UTC	587	IN	Data Raw: 37 63 38 66 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 71 75 61 6c 69 66 69 65 64 2d 61 64 36 36 62 64 32 63 32 36 36 31 34 63 35 31 66 61 32 30 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 69 29 7b 69 66 28 74 5b 69 5d 29 72 65 74 75 72 6e 20 74 5b 69 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 61 3d 74 5b 69 5d 3d 7b 69 3a 69 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 69 5d 2e 63 61 6c 6c 28 61 2e 65 78 70 6f 72 74 73 2c 61 2c 61 2e 65 78 70 6f 72 74 73 2c 6e Data Ascii: 7c8f(function() { /! For license information please see qualified-ad66bd2c26614c51fa20.js.LICENSE.txt /var init=function(e){var t={};function n(i){if(t[i])return t[i].exports;var a=t[i]={i:i,l:!1,exports:{}};return e[i].call(a.exports,a,a.exports,n
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 29 72 65 74 75 72 6e 20 65 3b 69 66 28 34 26 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 69 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 69 66 28 6e 2e 72 28 69 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 69 2c 22 64 65 66 61 75 6c 74 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 65 7d 29 2c 32 26 74 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 66 6f 72 28 76 61 72 20 61 20 69 6e 20 65 29 6e 2e 64 28 69 2c 61 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 5b 74 5d 7d 2e 62 69 6e 64 28 6e 75 6c 6c 2c 61 29 29 3b 72 65 74 75 72 6e 20 69 7d 2c Data Ascii: )return e;if(4&t&&"object"===typeof e&&e&&e.__esModule)return e;var i=Object.create(null);if(n.r(i),Object.defineProperty(i,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var a in e)n.d(i,a,function(t){return e[t]}.bind(null,a));return i},
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 74 73 3d 6e 28 34 34 34 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 39 32 29 2c 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 72 3d 61 2e 63 61 6c 6c 2c 6f 3d 69 26 26 61 2e 62 69 6e 64 2e 62 69 6e 64 28 72 2c 72 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 3f 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 6c 79 28 65 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 21 30 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e Data Ascii: ts=n(444)},function(e,t,n){var i=n(92),a=Function.prototype,r=a.call,o=i&&a.bind.bind(r,r);e.exports=i?o:function(e){return function(){return r.apply(e,arguments)}}},function(e,t){e.exports=function(e){try{return!!e()}catch(t){return!0}}},function(e,t){e.
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 33 29 2c 61 3d 6e 28 33 39 29 2c 72 3d 69 28 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 29 3b 65 2e 65 78 70 6f 72 74 73 3d 4f 62 6a 65 63 74 2e 68 61 73 4f 77 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 61 28 65 29 2c 74 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 32 31 38 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 39 32 29 2c 61 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 3b 65 2e 65 78 70 6f 72 74 73 3d 69 3f 61 2e 62 69 6e 64 28 61 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 6c 79 28 61 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 Data Ascii: 3),a=n(39),r=i({}.hasOwnProperty);e.exports=Object.hasOwn\|\|function(e,t){return r(a(e),t)}},function(e,t,n){e.exports=n(218)},function(e,t,n){var i=n(92),a=Function.prototype.call;e.exports=i?a.bind(a):function(){return a.apply(a,arguments)}},function(e,t
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 69 66 28 6f 28 65 29 2c 74 3d 73 28 74 29 2c 6f 28 6e 29 2c 61 29 74 72 79 7b 72 65 74 75 72 6e 20 64 28 65 2c 74 2c 6e 29 7d 63 61 74 63 68 28 69 29 7b 7d 69 66 28 22 67 65 74 22 69 6e 20 6e 7c 7c 22 73 65 74 22 69 6e 20 6e 29 74 68 72 6f 77 20 6c 28 22 41 63 63 65 73 73 6f 72 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 29 3b 72 65 74 75 72 6e 22 76 61 6c 75 65 22 69 6e 20 6e 26 26 28 65 5b 74 5d 3d 6e 2e 76 61 6c 75 65 29 2c 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 32 32 29 2c 61 3d 53 74 72 69 6e 67 2c 72 3d 54 79 70 65 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 69 28 65 29 29 72 65 74 75 72 6e 20 65 3b Data Ascii: d:function(e,t,n){if(o(e),t=s(t),o(n),a)try{return d(e,t,n)}catch(i){}if("get"in n\|\|"set"in n)throw l("Accessors not supported");return"value"in n&&(e[t]=n.value),e}},function(e,t,n){var i=n(22),a=String,r=TypeError;e.exports=function(e){if(i(e))return e;
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 72 2c 65 28 7b 7d 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 2c 6e 29 29 7d 2c 77 69 74 68 43 6f 6e 76 65 72 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 28 65 28 7b 7d 2c 74 68 69 73 2e 63 6f 6e 76 65 72 74 65 72 2c 6e 29 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 29 7d 7d 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 7b 76 61 6c 75 65 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 69 29 7d 2c 63 6f 6e 76 65 72 74 65 72 3a 7b 76 61 6c 75 65 3a 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 29 7d 7d 29 7d 76 61 72 20 6e 3d 74 28 7b 72 65 61 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 27 22 27 3d 3d 3d 65 5b 30 5d 26 26 28 65 3d 65 2e 73 6c 69 63 65 28 31 2c 2d 31 29 29 2c 65 2e 72 65 70 6c 61 63 65 28 2f 28 25 5b Data Ascii: r,e({},this.attributes,n))},withConverter:function(n){return t(e({},this.converter,n),this.attributes)}},{attributes:{value:Object.freeze(i)},converter:{value:Object.freeze(n)}})}var n=t({read:function(e){return'"'===e[0]&&(e=e.slice(1,-1)),e.replace(/(%[
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 32 29 2c 6f 3d 69 28 69 2e 62 69 6e 64 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 28 65 29 2c 76 6f 69 64 20 30 3d 3d 3d 74 3f 65 3a 72 3f 6f 28 65 2c 74 29 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 35 33 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 61 29 7b 72 65 74 75 72 6e 20 61 26 26 61 2e 65 6e 75 6d 65 72 61 62 6c 65 3f 65 5b 74 5d 3d 6e 3a 69 28 65 2c 74 2c 6e 29 2c 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 3b 65 2e 65 78 70 6f 72 Data Ascii: 2),o=i(i.bind);e.exports=function(e,t){return a(e),void 0===t?e:r?o(e,t):function(){return e.apply(t,arguments)}}},function(e,t,n){var i=n(53);e.exports=function(e,t,n,a){return a&&a.enumerable?e[t]=n:i(e,t,n),e}},function(e,t){var n=Array.isArray;e.expor
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 29 2c 73 5b 64 5d 3d 73 2e 41 72 72 61 79 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 36 33 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 37 33 29 2c 61 3d 54 79 70 65 45 72 72 6f 72 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 69 28 65 29 29 74 68 72 6f 77 20 61 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 65 29 3b 72 65 74 75 72 6e 20 65 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 69 3d 6e 28 33 37 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 28 22 6e 61 76 69 67 61 74 6f 72 22 2c 22 75 73 65 72 41 67 65 6e 74 22 29 7c 7c 22 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 Data Ascii: ),s[d]=s.Array}},function(e,t,n){e.exports=n(563)},function(e,t,n){var i=n(73),a=TypeError;e.exports=function(e){if(i(e))throw a("Can't call method on "+e);return e}},function(e,t,n){var i=n(37);e.exports=i("navigator","userAgent")\|\|""},function(e,t,n){va
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 3d 6e 28 36 31 29 2c 73 3d 6e 28 33 31 29 2e 66 2c 6c 3d 6e 28 31 34 37 29 2c 64 3d 6e 28 31 35 32 29 2c 63 3d 6e 28 33 36 29 2c 75 3d 6e 28 32 35 29 2c 6d 3d 22 41 72 72 61 79 20 49 74 65 72 61 74 6f 72 22 2c 76 3d 6f 2e 73 65 74 2c 70 3d 6f 2e 67 65 74 74 65 72 46 6f 72 28 6d 29 3b 65 2e 65 78 70 6f 72 74 73 3d 6c 28 41 72 72 61 79 2c 22 41 72 72 61 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 28 74 68 69 73 2c 7b 74 79 70 65 3a 6d 2c 74 61 72 67 65 74 3a 69 28 65 29 2c 69 6e 64 65 78 3a 30 2c 6b 69 6e 64 3a 74 7d 29 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 70 28 74 68 69 73 29 2c 74 3d 65 2e 74 61 72 67 65 74 2c 6e 3d 65 2e 6b 69 6e 64 2c 69 3d 65 2e 69 6e 64 65 78 2b 2b 3b 72 65 74 75 72 6e 21 74 7c 7c 69 3e 3d 74 2e Data Ascii: =n(61),s=n(31).f,l=n(147),d=n(152),c=n(36),u=n(25),m="Array Iterator",v=o.set,p=o.getterFor(m);e.exports=l(Array,"Array",(function(e,t){v(this,{type:m,target:i(e),index:0,kind:t})}),(function(){var e=p(this),t=e.target,n=e.kind,i=e.index++;return!t\|\|i>=t.
2024-04-18 17:16:38 UTC	1369	IN	Data Raw: 73 2e 72 65 73 75 6c 74 3d 74 7d 2c 68 3d 70 2e 70 72 6f 74 6f 74 79 70 65 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 66 2c 67 2c 5f 2c 62 2c 6b 2c 79 2c 45 2c 53 3d 6e 26 26 6e 2e 74 68 61 74 2c 77 3d 21 28 21 6e 7c 7c 21 6e 2e 41 53 5f 45 4e 54 52 49 45 53 29 2c 41 3d 21 28 21 6e 7c 7c 21 6e 2e 49 53 5f 52 45 43 4f 52 44 29 2c 4e 3d 21 28 21 6e 7c 7c 21 6e 2e 49 53 5f 49 54 45 52 41 54 4f 52 29 2c 78 3d 21 28 21 6e 7c 7c 21 6e 2e 49 4e 54 45 52 52 55 50 54 45 44 29 2c 46 3d 69 28 74 2c 53 29 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 26 26 6d 28 66 2c 22 6e 6f 72 6d 61 6c 22 2c 65 29 2c 6e 65 77 20 70 28 21 30 2c 65 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 Data Ascii: s.result=t},h=p.prototype;e.exports=function(e,t,n){var f,g,_,b,k,y,E,S=n&&n.that,w=!(!n\|\|!n.AS_ENTRIES),A=!(!n\|\|!n.IS_RECORD),N=!(!n\|\|!n.IS_ITERATOR),x=!(!n\|\|!n.INTERRUPTED),F=i(t,S),T=function(e){return f&&m(f,"normal",e),new p(!0,e)},C=function(e){retu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.4	50202	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:38 UTC	797	OUT	GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=12ad48b0-2785-42b9-8a9d-64a5609cdfa1&ca=2024-04-18T17%3A16%3A37.520Z&tz=Europe%2FZurich&bis=5&referrer=&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=true HTTP/1.1 Host: ws.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://risk.lexisnexis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: cjBHzyT+ne2EH4+TttWYtw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.4	50201	151.101.12.157	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:38 UTC	531	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:39 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:39 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-pdk-katl1840035-PDK X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-18 17:16:39 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.4	50203	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	798	OUT	GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=12ad48b0-2785-42b9-8a9d-64a5609cdfa1&ca=2024-04-18T17%3A16%3A37.520Z&tz=Europe%2FZurich&bis=5&referrer=&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=false HTTP/1.1 Host: ws.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://risk.lexisnexis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 0nLipIdt3Ml3+qrdKpj3QA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
2024-04-18 17:16:39 UTC	259	IN	HTTP/1.1 400 Bad Request Content-Length: 12 Content-Type: text/plain; charset=utf-8 Date: Thu, 18 Apr 2024 17:16:39 GMT Sec-Websocket-Version: 13 Server: nginx Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff Connection: close
2024-04-18 17:16:39 UTC	12	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 0a Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.4	50204	104.244.42.131	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	937	OUT	GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:39 UTC	571	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:38 GMT perf: 7402827104 server: tsa_b set-cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:39 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d12ba780505aa91b strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: b25361992da4c5b5ba595b8abb0b8c6a8389893570350130791a324b0f07c864 connection: close
2024-04-18 17:16:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.4	50205	104.244.42.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	920	OUT	GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:39 UTC	551	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:38 GMT perf: 7402827104 server: tsa_b set-cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:39 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5dc877950093a646 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: ad85b4c70937ee29c244678b2eab589fe82422d4c277ed9e62715f57a141b841 connection: close
2024-04-18 17:16:39 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.4	50209	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1135	OUT	GET /pagead/viewthroughconversion/940382430/?random=1713460598535&cv=11&fst=1713460598535&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	516	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f 6c 75 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20Solu
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.4	50211	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1135	OUT	GET /pagead/viewthroughconversion/978398205/?random=1713460598569&cv=11&fst=1713460598569&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	516	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f 6c 75 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20Solu
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.4	50207	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1137	OUT	GET /pagead/viewthroughconversion/10896111711/?random=1713460598583&cv=11&fst=1713460598583&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90e(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	518	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20So
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.4	50214	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1279	OUT	GET /td/rul/940382430?random=1713460598535&cv=11&fst=1713460598535&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	609	IN	Data Raw: 38 34 65 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 84e<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 35 39 34 30 39 33 33 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 54 35 5a 42 79 77 21 32 73 5a 6b 6a 69 65 41 21 33 73 41 41 70 74 44 56 36 37 69 4d 50 53 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 37 38 35 39 38 37 32 32 32 30 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 30 30 30 37 37 31 39 35 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a Data Ascii: 59409331","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sT5ZByw!2sZkjieA!3sAAptDV67iMPS"],"userBiddingSignals":[["7859872220"],null,1713460600077195],"executionMode":"group-by-origin","biddingWasmHelperUrl":
2024-04-18 17:16:40 UTC	269	IN	Data Raw: 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f Data Ascii: .leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.4	50208	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1135	OUT	GET /pagead/viewthroughconversion/938539671/?random=1713460598597&cv=11&fst=1713460598597&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	516	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f 6c 75 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20Solu
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.4	50212	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1279	OUT	GET /td/rul/978398205?random=1713460598569&cv=11&fst=1713460598569&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.4	50213	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1281	OUT	GET /td/rul/10896111711?random=1713460598583&cv=11&fst=1713460598583&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.4	50216	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1279	OUT	GET /td/rul/938539671?random=1713460598597&cv=11&fst=1713460598597&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.4	50206	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1137	OUT	GET /pagead/viewthroughconversion/10827142419/?random=1713460598612&cv=11&fst=1713460598612&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90e(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	518	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20So
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.4	50217	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1281	OUT	GET /td/rul/10827142419?random=1713460598612&cv=11&fst=1713460598612&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.4	50215	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1279	OUT	GET /td/rul/527644678?random=1713460598626&cv=11&fst=1713460598626&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.4	50210	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	1135	OUT	GET /pagead/viewthroughconversion/527644678/?random=1713460598626&cv=11&fst=1713460598626&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	516	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f 6c 75 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20Solu
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.4	50218	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:39 UTC	798	OUT	GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=12ad48b0-2785-42b9-8a9d-64a5609cdfa1&ca=2024-04-18T17%3A16%3A37.520Z&tz=Europe%2FZurich&bis=5&referrer=&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=false HTTP/1.1 Host: ws.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://risk.lexisnexis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: nbDe95j5v3y/nD5Sjm5dew== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
2024-04-18 17:16:40 UTC	259	IN	HTTP/1.1 400 Bad Request Content-Length: 12 Content-Type: text/plain; charset=utf-8 Date: Thu, 18 Apr 2024 17:16:40 GMT Sec-Websocket-Version: 13 Server: nginx Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff Connection: close
2024-04-18 17:16:40 UTC	12	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 0a Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.4	50221	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	876	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
2024-04-18 17:16:40 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:40 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87664dcf6a39b097-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:40 UTC	736	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-04-18 17:16:40 UTC	1369	IN	Data Raw: 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e 77 69 6e 64 6f 77 5b 70 5d 2c 66 6e 3a 6e 75 6c 6c 7d 2c 77 69 6e 64 Data Ascii: ,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...window[p],fn:null},wind
2024-04-18 17:16:40 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 73 43 68 61 6e 67 65 64 3d 21 30 2c 77 69 6e 64 6f 77 5b 70 5d 2e 73 Data Ascii: ssion",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.hasChanged=!0,window[p].s
2024-04-18 17:16:40 UTC	1172	IN	Data Raw: 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 6e 64 Data Ascii: ++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystatechange=function(){"und
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.4	50222	104.18.32.137	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	605	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:40 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664dcf6d1e4533-ATL
2024-04-18 17:16:40 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.4	50223	104.244.42.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	735	OUT	GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c
2024-04-18 17:16:40 UTC	392	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:39 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 1de508d84fecb0da strict-transport-security: max-age=0 x-response-time: 9 x-connection-hash: 75340da7fc6ab7b0d53785685fe6abf2c3be20ce11627e787dc4f0908a5ed1e1 connection: close
2024-04-18 17:16:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.4	50224	104.244.42.3	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	756	OUT	GET /i/adsct?bci=3&eci=2&event_id=b7472564-6f1a-4171-a881-52e32cc4a543&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=22b63e74-dcc9-4a3b-b82d-268eb3fd7d43&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2F&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="
2024-04-18 17:16:40 UTC	400	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:39 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 228d99c27331890b strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: ea16d0c8a9ce268896b0ef4a9c5b085c52957a8ccc8fdbdbce38f1df050108d9 connection: close
2024-04-18 17:16:40 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.4	50225	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1135	OUT	GET /pagead/viewthroughconversion/936886275/?random=1713460598639&cv=11&fst=1713460598639&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	516	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f 6c 75 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20Solu
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.4	50226	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1135	OUT	GET /pagead/viewthroughconversion/938545461/?random=1713460598652&cv=11&fst=1713460598652&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90c(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	516	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f 6c 75 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20Solu
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.4	50227	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1136	OUT	GET /pagead/viewthroughconversion/1048135065/?random=1713460598672&cv=11&fst=1713460598672&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	552	IN	Data Raw: 39 30 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 90d(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:40 UTC	517	IN	Data Raw: 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 5c 78 32 36 66 72 6d 5c 78 33 64 30 5c 78 32 36 74 69 62 61 5c 78 33 64 4c 65 78 69 73 4e 65 78 69 73 25 32 30 52 69 73 6b 25 32 30 53 6f 6c Data Ascii: fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2F\x26frm\x3d0\x26tiba\x3dLexisNexis%20Risk%20Sol
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.4	50228	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1279	OUT	GET /td/rul/936886275?random=1713460598639&cv=11&fst=1713460598639&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	609	IN	Data Raw: 35 62 31 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 5b1<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:40 UTC	855	IN	Data Raw: 30 37 33 39 31 37 34 30 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 57 47 32 46 6c 67 21 32 73 5a 6b 6a 69 65 41 21 33 73 41 41 70 74 44 56 36 44 38 55 68 4f 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 30 30 35 35 30 33 38 35 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 Data Ascii: 07391740","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWG2Flg!2sZkjieA!3sAAptDV6D8UhO"],"userBiddingSignals":[null,null,1713460600550385],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://t
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.4	50230	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1279	OUT	GET /td/rul/938545461?random=1713460598652&cv=11&fst=1713460598652&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	609	IN	Data Raw: 38 34 38 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 848<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:40 UTC	1255	IN	Data Raw: 30 34 31 33 38 39 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 73 4c 70 34 78 41 21 32 73 5a 6b 6a 69 65 41 21 33 73 41 41 70 74 44 56 36 4b 64 69 75 48 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 34 37 36 33 32 37 31 35 38 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 30 30 35 36 33 34 31 32 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 Data Ascii: 041389","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1ssLp4xA!2sZkjieA!3sAAptDV6KdiuH"],"userBiddingSignals":[["476327158"],null,1713460600563412],"executionMode":"group-by-origin","biddingWasmHelperUrl":"ht
2024-04-18 17:16:40 UTC	263	IN	Data Raw: 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c Data Ascii: AdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></body><
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.4	50229	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1280	OUT	GET /td/rul/1048135065?random=1713460598672&cv=11&fst=1713460598672&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:40 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:40 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.4	50233	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1121	OUT	GET /pagead/1p-user-list/940382430/?random=1713460598535&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqt2vxCGdh_-KR7snwfntA4Ym8_jPckvpGbEdEfwHARSqNJNpK&random=2682472879&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.4	50232	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1121	OUT	GET /pagead/1p-user-list/978398205/?random=1713460598569&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxzAb7MtqgiCdj6IdS-xkQHro7O0Xeic3T1lPdsMzd3UpjWLU&random=2076076556&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.4	50231	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1123	OUT	GET /pagead/1p-user-list/10896111711/?random=1713460598583&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeQz13I9vWjWPFAmCsD_z8DG_7cWa_dHiwpAR3LqpdcA0NQDB&random=2259684138&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.4	50234	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1121	OUT	GET /pagead/1p-user-list/938539671/?random=1713460598597&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqq9l0-oIOctTVbZa_ylso2QtUz3PmK7dXGRADxHsEHp9vfC3B&random=2916656638&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.4	50235	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:40 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664dd2cebd12da-ATL
2024-04-18 17:16:40 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.4	50236	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1123	OUT	GET /pagead/1p-user-list/10827142419/?random=1713460598612&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq9CkvN06-cqQCBSmyay6SSpeNMpZb8Tg8PhtBeUZnm2vWVWWL&random=1184559777&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.4	50238	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	936	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
2024-04-18 17:16:41 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:40 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87664dd33d357b91-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:41 UTC	736	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-04-18 17:16:41 UTC	1369	IN	Data Raw: 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e 77 69 6e 64 6f 77 5b 70 5d 2c 66 6e 3a 6e 75 6c 6c 7d 2c 77 69 6e 64 Data Ascii: ,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...window[p],fn:null},wind
2024-04-18 17:16:41 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 73 43 68 61 6e 67 65 64 3d 21 30 2c 77 69 6e 64 6f 77 5b 70 5d 2e 73 Data Ascii: ssion",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.hasChanged=!0,window[p].s
2024-04-18 17:16:41 UTC	1172	IN	Data Raw: 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 6e 64 Data Ascii: ++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystatechange=function(){"und
2024-04-18 17:16:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
366	192.168.2.4	50239	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1121	OUT	GET /pagead/1p-user-list/527644678/?random=1713460598626&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqrjn7gevXohfm76TOqo60hJvadSULCli3gn_CmJ7Tuoqbzxim&random=4131391049&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:40 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:40 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
367	192.168.2.4	50243	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1121	OUT	GET /pagead/1p-user-list/936886275/?random=1713460598639&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqtU78pFEc-HI-83Puyd01qRjFFh4bCabpvwslW6h0YnzoZqPd&random=3864921354&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
368	192.168.2.4	50244	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1121	OUT	GET /pagead/1p-user-list/938545461/?random=1713460598652&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqY7p5mSXpArU4oNiZIH6FJjw5Us8rtxNid1qLOYiXNy7zuFY7&random=1949043970&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
369	192.168.2.4	50245	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	1122	OUT	GET /pagead/1p-user-list/1048135065/?random=1713460598672&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq323deJXyqVPzoU_tcc8V3DkgXsV7w0SF1if2B25ev-YHLGjj&random=3722380409&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
370	192.168.2.4	50246	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	882	OUT	GET /pagead/1p-user-list/978398205/?random=1713460598569&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqxzAb7MtqgiCdj6IdS-xkQHro7O0Xeic3T1lPdsMzd3UpjWLU&random=2076076556&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
371	192.168.2.4	50248	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	882	OUT	GET /pagead/1p-user-list/940382430/?random=1713460598535&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqt2vxCGdh_-KR7snwfntA4Ym8_jPckvpGbEdEfwHARSqNJNpK&random=2682472879&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
372	192.168.2.4	50247	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	884	OUT	GET /pagead/1p-user-list/10896111711/?random=1713460598583&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeQz13I9vWjWPFAmCsD_z8DG_7cWa_dHiwpAR3LqpdcA0NQDB&random=2259684138&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
373	192.168.2.4	50251	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	882	OUT	GET /pagead/1p-user-list/938539671/?random=1713460598597&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqq9l0-oIOctTVbZa_ylso2QtUz3PmK7dXGRADxHsEHp9vfC3B&random=2916656638&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
374	192.168.2.4	50249	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	903	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 255 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]
2024-04-18 17:16:40 UTC	255	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 2d 31 32 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 34 32 33 30 26 72 65 66 3d 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 26 61 63 63 6f 75 6e 74 5f 69 64 3d 61 77 72 7a 68 33 32 63 35 68 6a 66 37 78 32 26 6c 69 73 74 3d 65 32 34 67 6d 38 65 79 35 6b 34 6c 6c 26 63 68 3d 32 37 38 26 63 6d 3d 33 66 36 62 64 61 36 63 66 33 65 35 66 37 33 33 31 32 35 36 36 65 66 35 30 62 64 38 63 31 64 63 33 63 62 33 62 30 61 64 32 65 66 31 61 66 61 38 66 32 64 61 64 65 31 34 65 66 33 63 39 37 37 32 26 63 73 3d 66 61 6c 73 65 Data Ascii: ws=1&lang=en-US&cookies=true&tz=-120&screen_res=1280x1024&browser_res=1280x4230&ref=&url=https%3A%2F%2Frisk.lexisnexis.com%2F&account_id=awrzh32c5hjf7x2&list=e24gm8ey5k4ll&ch=278&cm=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772&cs=false
2024-04-18 17:16:41 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:41 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: eae44b614222 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://risk.lexisnexis.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:55:05 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-04-18 17:16:41 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 69 46 56 58 61 61 39 67 66 37 75 4d 6a 66 6e 52 59 74 45 75 73 73 76 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"ZiFVXaa9gf7uMjfnRYtEussv","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
375	192.168.2.4	50250	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:40 UTC	883	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]
2024-04-18 17:16:41 UTC	906	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:41 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: 59eab6b22f27 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://dpm.demdex.net/ibs:dpid=79908&dpuuid=ZiFVXaa9gf7uMjfnRYtEussv&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:55:05 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
376	192.168.2.4	50252	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	884	OUT	GET /pagead/1p-user-list/10827142419/?random=1713460598612&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq9CkvN06-cqQCBSmyay6SSpeNMpZb8Tg8PhtBeUZnm2vWVWWL&random=1184559777&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
377	192.168.2.4	50254	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	882	OUT	GET /pagead/1p-user-list/527644678/?random=1713460598626&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqrjn7gevXohfm76TOqo60hJvadSULCli3gn_CmJ7Tuoqbzxim&random=4131391049&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
378	192.168.2.4	50253	35.174.21.144	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	596	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	425	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:41 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://risk.lexisnexis.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-04-18 17:16:41 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
379	192.168.2.4	50258	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	2127	OUT	GET /insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_tp=978; s_ppv=copyright%2C93%2C93%2C907%2C1%2C1; eVar66=2; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:43 UTC	693	IN	HTTP/1.1 200 OK Connection: close Content-Length: 227851 Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Date: Thu, 18 Apr 2024 17:16:43 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210049-DFW, cache-pdk-kfty2130065-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460602.533958,VS0,VE2240 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 74 61 72 67 65 74 2d 64 65 6e 73 69 74 79 44 70 69 3d 64 65 76 69 63 65 2d 64 70 69 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, target-densityDpi=device-dpi, initial-scale=1, user-scalable=no
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 39 34 34 33 32 32 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 70 72 65 6c 6f 61 64 27 20 61 73 3d 27 73 74 79 6c 65 27 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 2f 31 2e 31 32 2e 31 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6d 69 6e 2e 63 73 73 27 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 62 61 74 69 6e 67 20 57 69 6c 64 6c 69 66 65 20 54 72 61 66 66 69 63 6b 69 6e 67 20 7c 20 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 Data Ascii: 9443221" rel="stylesheet" /> <link rel='preload' as='style' href='//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css'> <title>Combating Wildlife Trafficking \| LexisNexis Risk Solutions</title> <me
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 49 4e 44 45 58 2c 20 46 4f 4c 4c 4f 57 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 2f 77 68 69 74 65 2d 70 61 70 65 72 2f 63 6f 6d 62 61 74 69 6e 67 2d 77 69 6c 64 6c 69 66 65 2d 74 72 61 66 66 69 63 6b 69 6e 67 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 2f 3e 0d 0a 0d 0a 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c 64 2b 6a 73 6f 6e 22 3e 0d 0a 7b 0d 0a 20 20 22 40 63 6f 6e 74 65 78 74 22 3a 20 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 22 2c 0d 0a 20 20 22 40 74 79 70 65 22 3a 20 22 41 72 74 69 63 6c 65 22 2c 0d 0a 20 Data Ascii: INDEX, FOLLOW" /> <link href="https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking" rel="canonical" /><script type="application/ld+json">{ "@context": "https://schema.org", "@type": "Article",
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 64 61 74 61 2d 70 61 67 65 2d 69 64 3d 22 46 46 38 44 46 32 34 36 35 37 36 46 34 32 45 31 38 44 38 44 32 31 44 32 34 33 34 36 34 35 31 32 22 0d 0a 20 20 20 20 20 20 64 61 74 61 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 3d 22 33 35 31 38 33 39 64 65 2d 30 61 61 30 2d 34 34 38 61 2d 38 38 33 32 2d 32 34 32 39 32 38 32 63 31 62 37 38 22 0d 0a 20 20 20 20 20 20 64 61 74 61 2d 70 61 67 65 2d 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 3d 22 65 6e 2d 55 53 22 0d 0a 20 20 20 20 20 20 64 61 74 61 2d 70 61 67 65 2d 76 65 72 73 69 6f 6e 3d 22 31 22 0d 0a 20 20 20 20 20 20 69 73 2d 70 72 65 76 69 65 77 3d 22 46 61 6c 73 65 22 0d 0a 20 20 20 20 20 20 65 6c 6f 71 75 61 2d 73 69 74 65 2d 69 64 3d 22 39 30 33 22 0d 0a 20 20 20 Data Ascii: </head><body data-page-id="FF8DF246576F42E18D8D21D243464512" data-page-template="351839de-0aa0-448a-8832-2429282c1b78" data-page-language-name="en-US" data-page-version="1" is-preview="False" eloqua-site-id="903"
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 5f 6f 70 74 69 6e 20 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6a 73 6f 6e 20 3d 20 4f 70 74 61 6e 6f 6e 2e 47 65 74 44 6f 6d 61 69 6e 44 61 74 61 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6a 73 6f 6e 2e 47 72 6f 75 70 73 2e 6c 65 6e 67 74 68 3b 20 69 20 2b 3d 20 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 67 72 6f 75 70 20 3d 20 6a 73 6f 6e 2e 47 72 6f 75 70 73 5b 69 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 6c 6f 71 75 61 43 6f 6f 6b 69 65 47 72 6f 75 70 20 3d Data Ascii: function set_optin (){ var json = Optanon.GetDomainData(); for (var i = 0; i < json.Groups.length; i += 1) { var group = json.Groups[i]; var eloquaCookieGroup =
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 65 74 5f 6f 70 74 69 6e 2c 20 66 61 6c 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 27 4f 6e 65 54 72 75 73 74 47 72 6f 75 70 73 55 70 64 61 74 65 64 27 2c 20 73 65 74 5f 6f 70 74 69 6e 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 73 63 6f 72 Data Ascii: et_optin, false); } else if (window.attachEvent) { window.attachEvent('OneTrustGroupsUpdated', set_optin); } })(); </script> <header class="scor
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 22 73 63 6f 72 65 2d 63 6f 6c 75 6d 6e 31 20 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 65 6e 74 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 62 61 72 2d 6e 61 76 20 73 63 6f 72 65 2d 6e 61 76 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 73 74 79 6c 65 2d 62 6f 78 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 49 73 45 64 69 74 6f 72 45 64 69 74 69 6e 67 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 53 74 61 74 65 43 68 61 6e 67 65 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 2c 26 71 75 6f 74 3b 53 68 6f 77 41 63 74 69 Data Ascii: "score-column1 " > <div class="score-center"> <ul class="nav navbar-nav score-nav" role="menu" > <div class="score-style-box" data-ux-args="{"IsEditorEditing":false,"StateChangeMessagesTransmitting":[],"ShowActi
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 62 61 6c 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 74 65 78 74 22 3e 53 75 62 6d 69 74 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 20 62 74 6e 2d 63 6f 75 6e 74 72 79 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 26 71 75 6f 74 3b 4f 70 65 6e 20 4c 61 6e 67 75 61 67 65 20 53 65 6c 65 63 74 6f 72 20 4d 6f 64 61 6c 26 71 75 6f 74 3b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 Data Ascii: bal-search-button-text">Submit</span></button> </div></div><a class="score-composite-link btn-country-language-selector" data-ux-args="{"ClickMessagesTransmitting":["Open Language Selector Modal"]}" data-ux-module="score_bootstr
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 6f 64 61 6c 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6c 75 6d 6e 32 20 65 71 75 61 6c 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6e 74 65 6e 74 2d 73 70 6f 74 22 20 3e 0d 0a 20 20 20 20 3c 70 3e 53 6f 6c 75 74 69 6f 6e 73 20 62 79 20 43 6f 75 6e 74 72 79 3a 3c 62 72 20 2f 3e 3c 2f 70 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 Data Ascii: odal-body"> <div class="score-column2 equal" > <div class="score-left"> <div class="score-left-text " > <div class="score-content-spot" > <p>Solutions by Country:<br /></p></div></div><div class="score-left
2024-04-18 17:16:43 UTC	1379	IN	Data Raw: 61 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 65 73 22 3e 3c 73 70 61 6e 20 63 6c 61 Data Ascii: a></div><div class="score-left-text " > <a class="score-composite-link" data-ux-args="{"ClickMessagesTransmitting":[]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href="https://risk.lexisnexis.es"><span cla

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
380	192.168.2.4	50261	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	883	OUT	GET /pagead/1p-user-list/1048135065/?random=1713460598672&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq323deJXyqVPzoU_tcc8V3DkgXsV7w0SF1if2B25ev-YHLGjj&random=3722380409&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
381	192.168.2.4	50262	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	882	OUT	GET /pagead/1p-user-list/938545461/?random=1713460598652&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqY7p5mSXpArU4oNiZIH6FJjw5Us8rtxNid1qLOYiXNy7zuFY7&random=1949043970&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
382	192.168.2.4	50263	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	882	OUT	GET /pagead/1p-user-list/936886275/?random=1713460598639&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=LexisNexis%20Risk%20Solutions%20%7C%20Transform%20Your%20Risk%20Decision%20Making&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqtU78pFEc-HI-83Puyd01qRjFFh4bCabpvwslW6h0YnzoZqPd&random=3864921354&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:41 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:41 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
383	192.168.2.4	50260	54.71.166.176	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	830	OUT	GET /ibs:dpid=79908&dpuuid=ZiFVXaa9gf7uMjfnRYtEussv&redir=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fclkgypv%3Dpxl%26ch%3D124%26cm%3D%24%7BDD_UUID%7D HTTP/1.1 Host: dpm.demdex.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: demdex=72487132774482760582579231535531206623; DST=; dpm=72487132774482760582579231535531206623
2024-04-18 17:16:41 UTC	944	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:41 GMT Content-Length: 0 Connection: close X-TID: wswXgjebQsw= Strict-Transport-Security: max-age=31536000; includeSubDomains Cache-Control: no-cache,no-store,must-revalidate,max-age=0,proxy-revalidate,no-transform,private Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 UTC P3P: policyref="/w3c/p3p.xml", CP="NOI NID CURa ADMa DEVa PSAa PSDa OUR SAMa BUS PUR COM NAV INT" Location: https://aorta.clickagy.com/pixel.gif?clkgypv=pxl&ch=124&cm=72487132774482760582579231535531206623 DCS: dcs-prod-usw2-2-v056-039b355f0.edge-usw2.demdex.com 2 ms set-cookie: dpm=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:41 GMT; Path=/; Domain=.dpm.demdex.net; Secure; SameSite=None set-cookie: demdex=72487132774482760582579231535531206623; Max-Age=15552000; Expires=Tue, 15 Oct 2024 17:16:41 GMT; Path=/; Domain=.demdex.net; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
384	192.168.2.4	50264	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	620	OUT	GET /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]
2024-04-18 17:16:41 UTC	721	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:41 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:55:05 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-04-18 17:16:41 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 69 46 56 58 61 61 39 67 66 37 75 4d 6a 66 6e 52 59 74 45 75 73 73 76 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"ZiFVXaa9gf7uMjfnRYtEussv","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
385	192.168.2.4	50265	34.199.102.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:41 UTC	421	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv
2024-04-18 17:16:41 UTC	135	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:41 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close
2024-04-18 17:16:41 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
386	192.168.2.4	50267	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:42 UTC	925	OUT	GET /pixel.gif?clkgypv=pxl&ch=124&cm=72487132774482760582579231535531206623 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"}]
2024-04-18 17:16:42 UTC	1372	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:42 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: de9e36d64b05 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:55:06 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure set-cookie: chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"},{"ch":"124","t":"2024-04-18 17:16:42"}]; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:55:06 GMT; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
387	192.168.2.4	50268	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:42 UTC	823	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:42 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 18 Apr 2024 17:16:42 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:42 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
388	192.168.2.4	50269	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:43 UTC	584	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:43 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 18 Apr 2024 17:16:43 GMT Content-Type: text/html Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:43 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
389	192.168.2.4	50259	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:43 UTC	2470	OUT	GET /Areas/LNRS/css/main.css?v=638484955469443221 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	686	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2443200 Content-Type: text/css Last-Modified: Fri, 12 Apr 2024 05:11:12 GMT ETag: "058dd6978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 554874 Date: Thu, 18 Apr 2024 17:16:43 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120051-DFW, cache-pdk-kpdk1780048-PDK X-Cache: HIT, HIT X-Cache-Hits: 29, 0 X-Timer: S1713460604.973675,VS0,VE3 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: ef bb bf 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 33 2e 36 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 35 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0d 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 40 69 6d 70 Data Ascii: /! Bootstrap v3.3.6 (http://getbootstrap.com) * Copyright 2011-2015 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css */@imp
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 2c 68 74 6d 6c 20 69 6e 70 75 74 5b 64 69 73 61 62 6c 65 64 5d 7b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 62 75 74 74 6f 6e 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 2c 69 6e 70 75 74 3a 3a 2d 6d 6f 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 69 6e 70 75 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 69 6e Data Ascii: ],input[type="reset"],input[type="submit"]{-webkit-appearance:button;cursor:pointer}button[disabled],html input[disabled]{cursor:default}button::-moz-focus-inner,input::-moz-focus-inner{border:0;padding:0}input{line-height:normal}input[type="checkbox"],in
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 7d 70 2c 68 32 2c 68 33 7b 6f 72 70 68 61 6e 73 3a 33 3b 77 69 64 6f 77 73 3a 33 7d 68 32 2c 68 33 7b 70 61 67 65 2d 62 72 65 61 6b 2d 61 66 74 65 72 3a 61 76 6f 69 64 7d 2e 6e 61 76 62 61 72 2c 2e 73 63 6f 72 65 2d 6d 61 69 6e 2d 6d 65 6e 75 2d 73 70 69 64 65 72 2c 2e 73 63 6f 72 65 2d 6d 65 67 61 6d 65 6e 75 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 62 74 6e 3e 2e 63 61 72 65 74 2c 2e 73 63 6f 72 65 2d 62 75 74 74 6f 6e 3e 2e 63 61 72 65 74 2c 2e 73 63 6f 72 65 2d 63 6f 6e 74 65 6e 74 2d 73 70 6f 74 20 62 75 74 74 6f 6e 3e 2e 63 61 72 65 74 2c 2e 6c 65 61 72 6e 6d 6f 72 65 20 73 70 61 6e 3e 2e 63 61 72 65 74 2c 2e 73 63 6f 72 65 2d 6e 65 77 73 2d 66 65 65 64 20 2e 73 63 6f 72 65 2d 6c 69 73 74 2d 67 72 6f 75 Data Ascii: 00% !important}p,h2,h3{orphans:3;widows:3}h2,h3{page-break-after:avoid}.navbar,.score-main-menu-spider,.score-megamenu{display:none}.btn>.caret,.score-button>.caret,.score-content-spot button>.caret,.learnmore span>.caret,.score-news-feed .score-list-grou
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 75 70 3e 2e 73 63 6f 72 65 2d 62 75 74 74 6f 6e 3e 2e 63 61 72 65 74 2c 2e 73 63 6f 72 65 2d 6e 65 77 73 2d 66 65 65 64 20 2e 73 63 6f 72 65 2d 6c 69 73 74 2d 67 72 6f 75 70 20 61 20 2e 63 61 70 74 69 6f 6e 20 2e 73 63 6f 72 65 2d 63 61 6c 6c 2d 74 6f 2d 61 63 74 69 6f 6e 20 2e 64 72 6f 70 75 70 3e 2e 73 63 6f 72 65 2d 62 75 74 74 6f 6e 3e 2e 63 61 72 65 74 2c 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 74 73 20 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 74 73 2d 2d 69 74 65 6d 3e 64 69 76 20 2e 64 72 6f 70 75 70 3e 61 5b 63 6c 61 73 73 2a 3d 22 69 74 65 6d 2d 6c 69 6e 6b 22 5d 3e 2e 63 61 72 65 74 2c 2e 61 69 73 2d 68 69 74 73 20 2e 61 69 73 2d 69 6e 66 69 6e 69 74 65 2d 68 69 74 73 2d 2d 69 74 65 6d 3e 64 69 76 20 2e 64 72 6f 70 75 70 3e 61 5b Data Ascii: up>.score-button>.caret,.score-news-feed .score-list-group a .caption .score-call-to-action .dropup>.score-button>.caret,.ais-infinite-hits .ais-infinite-hits--item>div .dropup>a[class*="item-link"]>.caret,.ais-hits .ais-infinite-hits--item>div .dropup>a[
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 65 6e 74 3a 22 5c 30 30 32 61 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 30 30 32 62 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 75 72 6f 3a 62 65 66 6f 72 65 2c 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 75 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 30 61 63 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 32 31 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6c 6f 75 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 36 30 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 6e 76 65 6c 6f 70 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 32 37 30 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 70 65 6e 63 69 6c 3a 62 65 Data Ascii: ent:"\002a"}.glyphicon-plus:before{content:"\002b"}.glyphicon-euro:before,.glyphicon-eur:before{content:"\20ac"}.glyphicon-minus:before{content:"\2212"}.glyphicon-cloud:before{content:"\2601"}.glyphicon-envelope:before{content:"\2709"}.glyphicon-pencil:be
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 70 6c 61 79 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 32 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 70 65 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 69 73 74 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 33 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 65 61 64 70 Data Ascii: play-circle:before{content:"\e029"}.glyphicon-repeat:before{content:"\e030"}.glyphicon-refresh:before{content:"\e031"}.glyphicon-list-alt:before{content:"\e032"}.glyphicon-lock:before{content:"\e033"}.glyphicon-flag:before{content:"\e034"}.glyphicon-headp
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 61 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 74 69 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 36 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e Data Ascii: ker:before{content:"\e062"}.glyphicon-adjust:before{content:"\e063"}.glyphicon-tint:before{content:"\e064"}.glyphicon-edit:before{content:"\e065"}.glyphicon-share:before{content:"\e066"}.glyphicon-check:before{content:"\e067"}.glyphicon-move:before{conten
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 67 6c 79 70 68 69 63 6f 6e 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 73 68 61 72 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 35 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 36 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 73 69 7a 65 2d 73 6d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 30 39 37 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 73 69 67 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 30 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 67 69 66 74 3a 62 65 66 6f 72 65 7b Data Ascii: glyphicon-arrow-down:before{content:"\e094"}.glyphicon-share-alt:before{content:"\e095"}.glyphicon-resize-full:before{content:"\e096"}.glyphicon-resize-small:before{content:"\e097"}.glyphicon-exclamation-sign:before{content:"\e101"}.glyphicon-gift:before{
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 68 61 6e 64 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 38 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 32 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 68 61 6e 64 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 61 72 72 6f 77 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 33 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 69 72 63 6c 65 2d 61 72 72 6f 77 2d 75 70 3a 62 65 66 6f Data Ascii: hand-left:before{content:"\e128"}.glyphicon-hand-up:before{content:"\e129"}.glyphicon-hand-down:before{content:"\e130"}.glyphicon-circle-arrow-right:before{content:"\e131"}.glyphicon-circle-arrow-left:before{content:"\e132"}.glyphicon-circle-arrow-up:befo
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 35 39 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 63 6f 6c 6c 61 70 73 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 30 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 6f 67 2d 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 31 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 66 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 32 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6c 6f 67 2d 6f 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 33 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 6e 65 77 2d 77 69 6e 64 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 31 36 34 22 7d 2e 67 6c 79 70 68 69 63 6f 6e 2d 72 65 63 6f 72 64 3a 62 65 66 6f 72 65 Data Ascii: {content:"\e159"}.glyphicon-collapse-up:before{content:"\e160"}.glyphicon-log-in:before{content:"\e161"}.glyphicon-flash:before{content:"\e162"}.glyphicon-log-out:before{content:"\e163"}.glyphicon-new-window:before{content:"\e164"}.glyphicon-record:before

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
390	192.168.2.4	50271	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2589	OUT	GET /-/media/images/lnrs/icons/phone-ringing-160x160-wht%20png.png?h=160&iar=0&w=160&hash=04AAD29CAD79C9A6F7B5D2EAD19611A4 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	876	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1382 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Phone-Ringing-160x160-WHT png.png" Content-Type: image/webp Etag: "FHdmbctvazbIPOxB40ru3Mx99w5BRwRNBXjFlfghKlM" Fastly-Io-Info: ifsz=1683 idim=160x160 ifmt=png ofsz=1382 odim=160x160 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 554874 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120093-DFW, cache-pdk-kfty2130059-PDK X-Cache: HIT, MISS X-Cache-Hits: 11, 0 X-Timer: S1713460604.387216,VS0,VE30 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 52 49 46 46 5e 05 00 00 57 45 42 50 56 50 38 4c 52 05 00 00 2f 9f c0 27 10 b7 a1 a0 6d 1b c6 fc 49 b7 3b 20 e6 7f fe 11 a6 6d db e4 a8 9d 74 1b d9 00 45 61 74 08 4e 1e 80 81 28 04 10 42 14 b9 85 00 c1 c7 22 28 2e 06 83 a0 28 16 a2 10 81 b8 08 8a 8b 20 00 00 04 22 f0 3d 21 90 65 db 76 db 36 8f 14 d4 7b b7 4d 89 ea dd 12 c5 76 e7 3f b7 24 c0 c3 03 c4 df 44 f4 7f 02 e8 3f 34 db f1 b3 04 f2 e4 7e de fe 4c 3b 41 f5 f8 2e a1 5f 9c 57 c3 b0 52 ac c1 99 1f 67 f5 ca 30 01 77 79 18 05 3e 53 bd ae 92 f2 cb 06 e0 b9 54 9e 0a 67 17 00 e5 a9 2f a2 07 bb 59 a4 3c 14 cc 5e f8 67 24 61 6e 09 48 97 a1 6f 06 37 e8 46 02 be ac 01 cf b1 57 ea 5b 18 0e ec 2d 04 00 fb 86 3f 26 09 4c 5f ca 5a 5f 04 d2 89 27 6a 1b 30 6e ac d1 53 04 b0 09 7d d0 be 83 75 68 6d 26 04 d7 96 7b fd 14 Data Ascii: RIFF^WEBPVP8LR/'mI; mtEatN(B"(.( "=!ev6{Mv?$D?4~L;A._WRg0wy>STg/Y<^g$anHo7FW[-?&L_Z_'j0nS}uhm&{
2024-04-18 17:16:44 UTC	3	IN	Data Raw: f4 bf a8 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
391	192.168.2.4	50274	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2573	OUT	GET /-/media/images/lnrs/icons/pencil_icon%20png.png?h=20&iar=0&w=20&hash=A7C6AB4BF363E42EA2DCD3CA10ECF939 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	856	IN	HTTP/1.1 200 OK Connection: close Content-Length: 374 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="pencil_icon png.png" Content-Type: image/webp Etag: "ff3wyJOFM88dYaeeKrzLxfWbLucJUSGNuoWn5u10eWU" Fastly-Io-Info: ifsz=1811 idim=20x20 ifmt=png ofsz=374 odim=20x20 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 558750 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210070-DFW, cache-pdk-kfty2130047-PDK X-Cache: HIT, MISS X-Cache-Hits: 10, 0 X-Timer: S1713460604.430347,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	374	IN	Data Raw: 52 49 46 46 6e 01 00 00 57 45 42 50 56 50 38 4c 61 01 00 00 2f 13 c0 04 10 57 c2 28 92 24 29 bd e0 df 0a 6f 2c f1 bc 61 86 99 6a 1b 0a da b6 91 3c 04 c7 9f ea 1b c6 6d 24 49 e9 65 f3 8f 83 20 c8 88 e7 0d b3 db d5 4e 03 00 50 22 0e 77 67 01 68 24 1a 99 89 d8 85 49 18 c1 fd bf 69 73 77 77 09 11 e4 f2 17 7d 44 77 d1 41 e4 83 d6 64 69 16 37 44 df 6a 20 a1 20 d1 d9 e2 0c 32 f6 0e af e3 19 fe 17 11 a6 82 2d f6 20 b3 30 31 d6 59 bd 52 01 97 67 f3 01 a1 24 1a b2 2a 03 8e fe 4f f1 31 aa a7 71 a9 26 aa 69 d9 d7 67 65 75 4f 75 2d be 12 30 0c 83 eb 34 3d c8 fe b7 35 c9 41 00 bd 19 5c 5d 7d 22 01 7f 13 0c 00 0c 00 6c 32 66 9d f8 1b 3d 18 b6 50 26 01 bc 44 e7 66 6a fb 3b f7 7a 2f 2e ff e6 79 54 dc b2 d6 7c dd 9b 5b e6 0d 10 23 d9 36 6d ad 79 b6 6d db d6 b7 7f fe 19 5d Data Ascii: RIFFnWEBPVP8La/W($)o,aj<m$Ie NP"wgh$Iisww}DwAdi7Dj 2- 01YRg$*O1q&igeuOu-04=5A\]}"l2f=P&Dfj;z/.yT\|[#6mym]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
392	192.168.2.4	50273	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2516	OUT	GET /Areas/LNRS/img/placeholders/Download_svg.svg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	653	IN	HTTP/1.1 200 OK Connection: close Content-Length: 959 Content-Type: image/svg+xml Last-Modified: Fri, 12 Apr 2024 05:09:34 GMT ETag: "0bba39b978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120041-DFW, cache-pdk-kfty2130093-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460604.431644,VS0,VE21 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	959	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
393	192.168.2.4	50275	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2605	OUT	GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-270x170.jpg?h=170&iar=0&w=270&hash=7919C829305E7DE80573C4DD67D91B54 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	884	IN	HTTP/1.1 200 OK Connection: close Content-Length: 13836 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="WildlifeTraffickingWhitePaper-270x170.jpg" Content-Type: image/webp Etag: "3plAC2K8YV60Aynkm2+EBsrBMrqAojf0ylb8CmpqHCw" Fastly-Io-Info: ifsz=26170 idim=270x170 ifmt=jpeg ofsz=13836 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210097-DFW, cache-pdk-kfty2130068-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460604.473163,VS0,VE198 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 52 49 46 46 04 36 00 00 57 45 42 50 56 50 38 20 f8 35 00 00 10 a1 00 9d 01 2a 0e 01 aa 00 3e 4d 1c 8b 44 22 a1 a1 19 5c ed bc 28 04 c4 a0 0c 41 be 42 b1 77 fb 73 3e d0 dc 7f dd a7 bd 32 9b dc 7f ca 79 18 7b 97 7b df f9 1e b4 7f 53 7b 05 7e ba fe 33 76 89 f3 45 fb 69 ea ff e9 47 fc 67 a8 9f f9 4f f1 9d 6d de 86 3e 5e 3e d1 5f df 3c f2 74 d6 25 14 d3 6d 29 fd 57 f7 bf f2 bf f8 3f c4 fb 8f 7f af e0 c3 e2 bf b3 fd 96 f5 17 f9 df e4 9f e6 7f 91 f4 c3 ff 17 85 7f 15 7f db ff 1f ec 05 f9 9f f4 bf f6 1e 8b 9f 73 dc fb b4 ff bb f4 0e f7 5f ed ff f6 3d 21 3e af cd 0f b2 7e c0 3f cf 7f b4 fa 53 ff 5f c1 4f ee 9f ed 3d 80 7f ab 7f 9c fd a3 f7 70 ff 1b ff bf 97 1f ad 7f fa 7b 84 fe c4 fa 77 7f ff f7 71 fb c7 ed 1d fb ac a5 ae f8 cd 0e c3 cb c9 af fe 39 af 76 fb d5 7b Data Ascii: RIFF6WEBPVP8 5*>MD"\(ABws>2y{{S{~3vEiGgOm>^>_<t%m)W?s_=!>~?S_O=p{wq9v{
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 1b 3b 10 51 54 d2 c1 7b cb da 76 61 5d a4 a8 c5 bb ee 25 94 c0 5e 40 f6 bc 20 12 d5 ce c1 5c 20 88 53 93 49 01 71 7e 45 f5 4c e2 79 f8 7e 9e 86 60 19 8d 0b b0 e5 d9 a7 0f 31 d8 41 39 b6 64 72 89 89 7c 45 b5 a5 cf e6 15 3b 6c 58 70 1b 47 25 8e 6e 62 2d e1 87 b2 6e 15 29 74 42 0b f8 66 e2 e0 8f d1 f4 76 08 44 2c 0a 48 21 f4 ff b7 12 43 25 f2 dd ad 6e 1b 23 1a 71 4b 07 1a 54 fb d5 1a 75 24 fb f3 13 15 78 40 08 88 a9 f7 5c 95 29 dc 43 b5 a7 3c 5c f5 d1 9a d1 04 c3 de 1d 82 c8 0f 0f 2b b0 58 2f f1 a0 e2 7b 1a 38 0d 92 9d 10 c0 b5 96 10 79 2a 55 bf ff ce b6 13 e4 c1 18 19 6b 1f 80 ce ae 60 59 d1 93 70 76 8c 4a 99 f1 36 89 3e 2d 1d 51 96 45 5f f3 57 7c e2 9b 76 18 30 b5 28 ad dd 21 9a 90 72 77 c6 8d de 2c a6 73 b9 1c 14 43 24 19 c3 45 6c 49 7e 31 f4 6b 83 da b2 Data Ascii: ;QT{va]%^@ \ SIq~ELy~`1A9dr\|E;lXpG%nb-n)tBfvD,H!C%n#qKTu$x@\)C<\+X/{8y*Uk`YpvJ6>-QE_W\|v0(!rw,sC$ElI~1k
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: ed a5 b2 f5 fe 80 8c 5f 17 60 03 9a b1 64 de d6 81 13 b2 bc f0 e0 75 68 a3 d1 c0 43 00 87 62 8d 11 c3 0a 02 3a 7c 9f 12 80 97 f3 2e 08 27 a2 60 95 c6 07 81 a5 f6 03 ed 72 08 f7 3f d2 37 9b ed 79 ac 0d 97 50 bf e1 e5 d3 e5 4a f3 0f 2c c5 cd ef e7 30 85 0a e8 1e ec c4 20 61 c1 82 da 9e 46 d2 56 9f d4 84 38 62 2e 3e 13 53 2a b5 e4 07 5c a4 a7 8a aa 5e 89 44 87 2a 6e dd 09 e6 25 85 53 4b c4 b4 ec bc 8a 7f d4 b6 24 df de 16 28 b1 d7 0f 30 89 3e b2 94 d8 f4 03 c3 4c 73 5d b3 55 7e 76 2b af 9d 03 91 8f 1f 82 fc 86 d0 a6 1c 6b fe 6b b1 fd 08 ef ea a2 79 5a 67 a7 db 33 88 30 16 00 99 e1 44 74 89 a0 9b 47 16 89 aa 7d d2 4a de c4 3b 8b e4 32 4d 66 2b 16 27 aa 84 6d db 95 b2 37 92 11 b8 c1 d4 64 25 03 ae 43 bf a3 da 96 02 b5 e9 e4 fb bb 0e de b3 e0 a2 e8 74 e0 89 5e Data Ascii: _`duhCb:\|.'`r?7yPJ,0 aFV8b.>S\^Dn%SK$(0>Ls]U~v+kkyZg30DtG}J;2Mf+'m7d%Ct^
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 64 b0 4a 4c f7 03 05 4c a0 c0 7a 30 0e c4 b8 79 65 f4 43 81 a6 ca db 2b b7 d6 78 77 c8 05 1a 8c 47 21 17 7a 5f e2 2a f6 9a 62 c3 17 c0 8a 2d 05 2b 1d 16 2c 59 71 e7 d5 9e 37 47 91 71 cd 87 c4 72 09 42 dd 8e 45 30 8b 91 58 3a e1 46 c5 cf 7f bf 80 b2 8e 80 85 b4 b7 ca e3 c0 d5 39 34 f8 84 0a 84 29 b7 07 d5 e9 60 ed db 21 5a 3e 89 1c 08 b1 5a 16 4e b5 78 cb 10 ab bb 7c 35 76 8d e2 42 09 a0 05 e8 9d 3f 08 94 e3 b8 c7 5d a3 e0 3b f5 30 0b 79 6a 8a ce d6 fb 6c 9d 39 47 0e c7 a2 de 7f 04 6e 0e 67 e1 80 0a ce 21 77 8b 53 e5 17 25 2c e3 4d db ff 31 35 88 94 3c 26 02 b8 2f 36 db b8 c7 cd b9 04 46 4b 5d 0f ab bd c4 55 ff 6b 03 19 81 63 b0 25 91 4c 64 45 4b cb 71 b9 46 3f d8 a6 80 04 fa 83 cc c6 00 06 ad 77 f6 34 c0 ce be 8b b0 85 d7 be 53 07 d7 94 f9 d7 e3 a5 53 9c Data Ascii: dJLLz0yeC+xwG!z_*b-+,Yq7GqrBE0X:F94)`!Z>ZNx\|5vB?];0yjl9Gng!wS%,M15<&/6FK]Ukc%LdEKqF?w4SS
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 17 98 39 4e 40 59 46 d9 80 bd 48 2a b7 7d d3 3d 26 69 12 60 e4 35 ed 32 b7 ac 86 d9 3d 12 70 38 d1 2c c9 c6 a1 85 dd a7 10 1c cb b1 71 a7 68 40 ff 1a a0 21 12 62 9e d7 b8 77 56 66 74 82 d0 6f 96 e3 98 23 4a 0c 4e fd 77 44 fe ec 53 03 e1 f4 a0 4c 68 22 bd 8d c4 a3 d3 66 24 31 e5 77 23 fc 0b c6 7c 99 9c d0 48 c3 60 f7 00 dc 05 6a 2e d0 c0 c4 6d 57 bf ab 4e 46 df 88 1a 11 b9 a8 cc b8 48 8a 99 8d aa c9 b6 49 fa f9 a6 08 1f a7 c5 8c eb 42 c6 31 4c e6 66 0c 37 40 b3 38 0b 27 20 41 b6 5a ab c8 a2 51 f1 55 54 61 89 89 76 9e 2b 2c 37 56 65 b5 27 2e 6f 39 17 64 7e 97 7a c5 0d a9 16 96 66 f1 84 09 0c 57 2f ec 06 63 a9 9e ac c0 14 27 4e 95 b9 b0 4e 62 d3 af 7f 76 57 a4 cb d4 71 8a 6c fc b8 7b 87 fb c2 db dc fb c4 ab 4a 3a aa e3 5f aa 43 7a 8b e5 8e 33 4c ac 7a 75 bb Data Ascii: 9N@YFH*}=&i`52=p8,qh@!bwVfto#JNwDSLh"f$1w#\|H`j.mWNFHIB1Lf7@8' AZQUTav+,7Ve'.o9d~zfW/c'NNbvWql{J:_Cz3Lzu
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: d4 92 67 37 13 32 ba 4d 5b d7 ff 2f 2e a8 1c 79 86 f1 6f f8 9c ff 3c 2d 49 db 30 53 f3 3c 94 b5 c5 65 c7 dc f8 56 cb cf fd 64 ff 69 06 61 17 7b f6 5b bc 6b b7 4c f6 68 55 56 56 f8 6e 46 45 ff 52 a1 ed 55 f0 08 4d b4 36 c6 bd 6f e7 10 9c a0 17 82 3e 04 64 da 53 2d 28 41 86 22 bf a5 b4 80 c6 d7 70 9a fa 6e af fc 16 bd b3 ce 70 1e 4a 30 e1 a1 0d 4e 96 d3 8f 13 e5 aa 2e 94 e4 18 12 3b e3 b6 0e 13 8c 4f 9d ae 5d 18 7b 47 96 81 df 40 e1 ea ba 88 c0 14 f3 ab a6 51 4f 1c 50 6f c7 ad 27 f9 2f a9 74 7d f6 1c f0 51 b4 19 91 c7 9b e6 62 57 d7 c5 ce 83 aa af 49 bb f3 20 1b 94 41 f1 55 65 34 e7 4f 84 03 3b 45 0b 28 5f b0 37 fc 93 4f 3e 27 58 d8 c4 62 67 8d b2 b2 c0 ec 31 d0 10 fb 87 2c 4e 01 20 06 8c d1 12 8a 47 33 08 4b 57 40 2d 5d 79 7c 33 7f 6e 64 5f 24 b5 ab 35 86 Data Ascii: g72M[/.yo<-I0S<eVdia{[kLhUVVnFERUM6o>dS-(A"pnpJ0N.;O]{G@QOPo'/t}QbWI AUe4O;E(_7O>'Xbg1,N G3KW@-]y\|3nd_$5
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: ca 74 8f 47 0c 78 53 d9 93 17 be ca bf c7 2c 3d a2 5e ae 89 0c 06 b7 46 89 02 9e c6 ef 47 20 ac fc 3f 67 c7 6a 63 a0 64 fd ab 8e c4 a2 29 74 1c 37 a7 6e dc 0d 73 46 40 25 02 87 a6 74 90 05 16 22 c2 77 94 df a6 98 9c 12 5c 6c 83 45 34 3e f2 76 a9 af 51 ed ac 7c 16 3f 9e bc 93 b9 0d 69 e6 b8 f3 d6 e8 6e d9 3f e0 92 02 f6 1f 2b 26 07 63 65 a6 4e 5a 09 f0 bf 90 50 ed 17 22 91 fc 1f d0 1f a7 ba 9b ee 1a 86 54 71 0c 5b 28 37 db b2 e6 8c 21 f8 dd 2a cd ea f2 5c da 24 95 02 77 07 1c 38 42 a1 9f 9b b3 71 d0 e7 f5 2b 26 ed a5 75 56 36 66 80 e7 10 02 ba 5c 28 69 3e 84 ab f3 21 78 5a c6 42 9d 11 4f ae 3d b5 a4 f6 12 5a 09 cc d5 cc ec 60 18 87 83 69 d9 8b 87 ad ae 04 5e ce b0 81 b5 70 ab d9 5d 05 cf 15 90 fb e8 ea 7c 53 c3 3a fd 84 25 c2 1a eb 4e da e5 a6 6f cf 38 9c Data Ascii: tGxS,=^FG ?gjcd)t7nsF@%t"w\lE4>vQ\|?in?+&ceNZP"Tq[(7!*\$w8Bq+&uV6f\(i>!xZBO=Z`i^p]\|S:%No8
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: c7 34 90 8f a6 3f 66 a6 73 80 2e d9 e4 2b ce 10 bc ce 22 88 e8 68 ef 1b f9 e8 11 66 a9 d8 45 35 4f 97 35 23 a6 10 b9 63 1c 0d 09 37 b8 32 80 d1 b1 09 e5 84 2d 16 c5 c5 07 03 87 db aa 2a f5 32 7b 3b 4f 09 16 83 8e 24 1e 05 b0 98 2d dc c8 60 88 6e 93 dc 1b 5a bc 0c fc 1d cf 71 c6 7d c8 2c 16 a3 d3 2a 09 e7 39 78 d3 33 de ee 99 91 5a b3 6f e1 58 5e 50 90 a2 f0 d1 fe 98 ef 76 34 0b 9a b9 20 bf 83 6e e5 69 b0 bc d7 9f dd 98 46 0c 69 45 7a 1a 65 b9 b3 c8 77 5f bd 53 20 13 1c 33 62 1c 76 cb a7 ca 42 9c 46 bd ed 32 8a 2e 0f 91 8a e9 b9 0d e7 9d 92 5b a7 18 1d 37 38 da fe 39 19 4c 24 be 13 b9 08 0f 95 ad 10 db 6d c1 ae b8 b6 40 5f 18 b8 6e ce 40 da 7c 9e f8 fb 0b ad 20 4d 79 f1 5e f6 44 65 5e 4d 42 b6 66 a0 53 42 f5 15 2e 68 fd c9 39 bc 00 b9 f0 83 2d 65 83 42 e4 Data Ascii: 4?fs.+"hfE5O5#c72-2{;O$-`nZq},9x3ZoX^Pv4 niFiEzew_S 3bvBF2.[789L$m@_n@\| My^De^MBfSB.h9-eB
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: bd a1 59 c8 07 d1 74 49 2b 15 22 04 7a 0e 5e b5 f1 a4 5b cf f8 fb 88 c9 e3 41 21 46 85 36 8d d7 95 52 bb f3 ba 35 21 57 43 fb 1b f0 5e 4d af 95 2a 41 3a f2 b4 42 1b d4 88 aa 33 a0 2b 16 e1 f8 f4 2a 0f c0 61 6a 13 f3 01 c7 83 0a 28 d0 7b 01 24 6e 64 24 33 30 ce 62 7a fb af 8c e6 28 6b 18 10 3e 58 7c 10 26 92 f5 17 bf fd b4 1e c9 93 31 dd 6c 6b e3 fc b1 a6 95 f0 4d c0 48 20 2a 7f 59 14 58 c9 a7 e6 ff f7 8f a3 1b b8 21 10 55 38 44 33 2a 32 ae 0f 71 5b 5f 90 21 7e c5 76 b7 dd 32 63 1f ed 56 2a 56 23 eb 4e 42 29 00 0b cd 07 0e 80 3f 8e 7e 74 c2 61 d3 22 8a ce fc 6a 7d d9 6b 3b 38 98 41 fa 5d 69 1b 0f f6 fc cb 39 c0 87 6a 51 b4 2b 10 65 c9 f9 e3 72 d8 b5 08 11 68 bb e6 f6 10 22 10 31 0c 01 4d a2 00 bb 8f 1c 8d 28 ca 3b f6 51 7f fe a7 81 c7 72 1f 7e d4 a5 c0 e5 Data Ascii: YtI+"z^[A!F6R5!WC^MA:B3+aj({$nd$30bz(k>X\|&1lkMH YX!U8D32q[_!~v2cV*V#NB)?~ta"j}k;8A]i9jQ+erh"1M(;Qr~
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: cb 68 41 c5 58 f7 19 4a 4e 50 dd 2e 2d 8f e0 d1 8d 27 8d 8b 2d 5c 60 c4 c8 1e 9b 93 01 de fc c5 3c 85 a1 4d bf 07 b6 06 f6 de 3c e4 31 bd 21 c4 12 dc 4d d7 95 dd c7 42 6e d1 30 99 c0 0e ff 20 3d fa c4 90 a1 ae 97 79 68 5d bc 42 79 c1 78 dd 94 bd a1 92 83 10 fc 7c c2 84 a8 ad 2d 26 ab ea ca 3b a7 31 d8 e0 6a 8b 41 e2 3c 99 2d d6 fb 3d e3 62 bd 5e 71 50 48 65 37 d1 c6 0c 35 2f 8e 72 c4 19 5d 49 43 6b 92 cb 94 7f 18 25 45 4a 67 d5 f5 a5 2d 80 c5 85 90 39 6f 2e 6c 0e 8c 7b 08 90 f3 db 3c 80 82 11 8f 8f 19 7c fc e0 07 11 ab 8f b8 2f 1b 4d 51 5d 99 a5 1b 7e 35 b9 e3 b1 40 5d e2 4c 62 54 f9 2d ea 5b 66 58 c7 d7 48 a2 a4 7d 94 ca 4f a3 71 8f 68 79 82 3d 85 87 57 90 52 b1 66 b9 9f 2c 43 7b c2 c8 53 50 89 46 36 37 51 35 53 fc 53 4d 8d 29 60 e7 48 61 0f 30 30 0b 22 Data Ascii: hAXJNP.-'-\`<M<1!MBn0 =yh]Byx\|-&;1jA<-=b^qPHe75/r]ICk%EJg-9o.l{<\|/MQ]~5@]LbT-[fXH}Oqhy=WRf,C{SPF67Q5SSM)`Ha00"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
394	192.168.2.4	50272	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2605	OUT	GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-600x570.jpg?h=570&iar=0&w=600&hash=BE1263DEFABDE72A7F0B006766788148 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	889	IN	HTTP/1.1 200 OK Connection: close Content-Length: 44538 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="WildlifeTraffickingWhitePaper-600x570.jpg" Content-Type: image/webp Etag: "mRI2zcVihpR8mg3tzKrrzASqiLbZSRQO0Qba2k1G0ys" Fastly-Io-Info: ifsz=46277 idim=600x570 ifmt=jpeg ofsz=44538 odim=600x570 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010212 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551283 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120074-DFW, cache-pdk-kfty2130063-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460605.518718,VS0,VE203 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 52 49 46 46 f2 ad 00 00 57 45 42 50 56 50 38 20 e6 ad 00 00 10 2d 02 9d 01 2a 58 02 3a 02 3e 51 24 8f 45 a3 a2 21 13 8a 75 48 38 05 04 b3 b7 7c 19 e6 c7 f0 cf 1c e5 62 c0 2c 8e 64 78 35 e3 7f a8 e7 97 d6 2e d1 7e 37 e4 af 8b 2c 8c 3a 0b 34 3a f0 fa fd fd 4d ec 3f fa e5 d5 23 ce ef ee 95 91 2f ac a5 a7 4b 4e fc cb ea ff db 7f 86 ff 45 ff 73 d8 93 fe cf 08 9d 8d e6 37 f4 1f cc 3f c6 ff 27 f9 1d f3 4b fb 9f fd 5e 11 fc bb d4 17 f3 5f ea 3f ed 7e e6 be 2e ff 1b b8 6b 74 ff 7b ff cb d4 77 de 3f be 7f d4 ff 31 fb db fe e3 e1 87 f3 3c e0 fd 83 fd c7 fe bf 70 4f e8 df d8 bf de 7f 8f fd f3 ff 33 f3 d7 fd 5f 0e 6f d1 ff cf fd c3 f8 03 fe bb fe 6b fe bf f8 ef f4 df b9 3f 4d 9f e4 7f f2 ff 8f ff 07 f7 1f de bf eb 3f ec bf f4 7f b2 f8 17 fe 7d fd d7 fe 37 f8 ef f4 bf Data Ascii: RIFFWEBPVP8 -*X:>Q$E!uH8\|b,dx5.~7,:4:M?#/KNEs7?'K^_?~.kt{w?1<pO3_ok?M?}7
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: fd 5f c5 20 34 c5 7a 31 3c d8 07 df 24 0d 25 1d f3 33 b6 a0 f9 96 29 79 56 4e 20 a1 40 df 40 b5 ff 51 82 16 dd 9a bd 85 96 a8 74 0a 96 1c 5b 12 28 21 68 49 2e 98 c7 a1 17 82 f2 7b 9a dd 10 2f bd 4e 00 a9 5d 0f 2a 02 10 a9 a0 98 de b8 e1 8f f2 b6 ff 94 04 53 a5 e0 b0 c9 3e 42 52 8b 23 d7 39 70 90 aa 53 e6 98 16 a8 c1 0f a6 3d 2c 9e ba 89 a7 3e cd 1d 0d ff c0 9e b6 9f c4 a1 49 78 4f 67 db 94 e1 a9 8e 9f 72 1d 78 30 ed 97 97 e4 b3 ad 75 21 0b d3 50 72 49 f1 51 0b 93 c7 e7 42 b6 1e f6 d9 29 9a 1b 83 bb 00 b7 33 9c db 93 d1 56 b4 e0 44 4c 41 ef 4d e5 a1 85 4c 0e 41 d3 5a 6c 75 f9 99 0d ae f3 6e b3 7e 60 68 41 78 02 24 3d 36 fa a3 a3 31 2a bc e8 1c 70 c3 b5 60 33 7e 86 03 d2 87 a0 89 5a ef c6 95 47 8c 4d d3 d2 d6 fa fc a1 c6 ad e1 61 82 76 fd c0 67 ce fa 70 47 Data Ascii: _ 4z1<$%3)yVN @@Qt[(!hI.{/N]S>BR#9pS=,>IxOgrx0u!PrIQB)3VDLAMLAZlun~`hAx$=61p`3~ZGMavgpG
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: b3 d5 84 fa 65 95 31 1e 29 15 a0 76 e3 aa ad 93 9e db 58 d5 1f a0 ee b8 de 82 58 c9 a4 c3 3a 7c 67 fa 10 1e 89 10 fa e5 5f cd 79 28 79 9d 7f a3 d2 78 2b ca 82 2d 27 cd 62 b5 86 97 ca 44 82 28 8a c5 10 00 bc 82 bf c2 3e 96 bb 1e 98 f4 b3 76 48 9b 93 af 27 c2 3f 00 3c 2d 7e 5f af 5f 5d e8 20 4a 8a b4 5b 8e 1d 62 75 d1 48 e6 58 2b d6 34 b8 32 f1 cd 5c a5 bd 19 23 96 4f 41 5f d2 08 cd 85 c9 f7 f7 a8 da 4c bd 56 2d 5e 30 d9 ee 80 b2 04 b7 71 39 81 6d fc cc 17 fa 9e 00 c3 a9 94 aa 4e 45 21 f4 11 c5 ce 5f 71 df 21 82 ea 41 ff ca 96 01 19 65 de e6 41 44 95 06 50 09 dd 5b b4 78 45 8c 31 7e e7 fd 72 11 5a d7 cd c8 11 6f d2 47 a3 70 43 ef 36 9f e6 0b 1b 76 92 19 f1 10 7a 2a 8a 29 c8 93 67 e0 0a 3b a0 12 fc 8a d1 6a be a0 9c 4b da b2 ed be 8a 5a ac b0 50 96 66 49 c0 Data Ascii: e1)vXX:\|g_y(yx+-'bD(>vH'?<-~__] J[buHX+42\#OA_LV-^0q9mNE!_q!AeADP[xE1~rZoGpC6vz*)g;jKZPfI
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 73 95 39 95 38 7b 01 21 61 a5 a6 19 ea 04 f3 7f c8 6d 23 c8 53 36 e6 8f 3f f0 6f bf 32 33 85 20 20 d5 3d 30 7a 2c a4 10 f7 58 fe 86 c8 4a fd 42 58 fd 60 3f ad 69 26 b0 34 2d 9f da fb 63 01 7c 1f 5d 52 a3 60 d5 6b cb 79 21 13 9c 25 75 c7 94 d9 46 ca 36 51 b2 8d 94 6c a3 47 10 f8 64 02 cb 5d 50 ad 91 22 f8 fa 52 3d fd a0 44 c7 f2 dc 30 1f b5 66 d8 9c 69 3a 97 29 9d d3 c0 57 c5 c5 55 d3 6e bf 4b 6b e1 c4 6f fe b7 7f fb 14 93 fe de 70 39 9c 0e 13 45 86 b3 d1 20 e1 69 a7 0b ec 09 5c c8 66 a0 ea 88 7d 31 e9 8f 4c 7a 63 d3 1e 98 ce ba bb 09 1e 9a 12 84 2d 19 bc e9 f2 ac 7f 45 f9 68 26 97 fc 4f b7 fb 8c ff 8a 7e b6 3a 8a 5a 9d ec 59 ee 46 8b b7 fb c1 cf d0 43 b1 fa 13 6d 8a ee c3 bf 7f b7 2a 88 7d 31 e9 8f 4c 7a 63 d3 1e 97 1e bc be aa 7e 18 64 5d 7c d2 fc 8f f2 Data Ascii: s98{!am#S6?o23 =0z,XJBX`?i&4-c\|]R`ky!%uF6QlGd]P"R=D0fi:)WUnKkop9E i\f}1Lzc-Eh&O~:ZYFCm*}1Lzc~d]\|
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 1d cc dc 07 10 d3 48 73 24 37 82 cb 82 4c 13 26 dc 8f 9b 2a ed f2 66 ac b1 74 db 6a 7b 86 62 50 63 dd 42 32 af ac 65 61 38 c6 0d 28 39 03 98 20 3f e0 48 b2 04 cd 27 85 a8 4b 99 0f 97 22 db 26 bb 68 8f f4 d3 9c cf d0 a6 d5 85 60 46 b8 b9 47 16 4c 3f 87 9e e7 8a 2f 39 ff 45 39 09 67 fb 0f f2 00 0e 8a cf 8a 6d d5 ef dd ff 01 c0 29 d9 a8 66 ef af 8c 84 bb c0 7f ba 97 f3 3c d4 0e b7 a8 06 59 a1 54 1f 81 2d 91 75 f3 92 a7 50 37 5f 0a ed 38 a7 d8 51 3b 80 f9 00 19 fb de 01 49 79 be 07 62 8c b9 3d 94 20 d0 b4 be f4 1f ab 75 be 46 e1 7e 26 41 58 dd 8a 1b 8f 2d d1 5d e8 78 6d f4 8c 81 00 22 bb b7 ab 37 e1 a2 48 82 fd fe b7 32 04 c3 e1 8c 72 0b 37 b0 00 d6 99 25 a7 e1 2d e7 89 ee 04 7c c0 9f 51 4e 01 dd a7 cf 8d b7 60 26 de 5c db 3f 97 b8 58 10 d0 19 6b 66 53 25 ce Data Ascii: Hs$7L&*ftj{bPcB2ea8(9 ?H'K"&h`FGL?/9E9gm)f<YT-uP7_8Q;Iyb= uF~&AX-]xm"7H2r7%-\|QN`&\?XkfS%
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 4a 00 95 89 69 43 79 11 14 af 7b 26 d4 fd 83 52 54 0a db 20 dc ec 62 ce 89 c2 f6 6f 3b 12 76 6e f5 7b 46 00 7c 15 b9 32 17 30 a1 8f ea 4a 6e 4d 56 40 28 0c 7b 25 0c 19 db 97 dc 8e 80 22 5d a8 e9 41 75 9e 79 42 de bf 63 f8 fb 9d 9d b7 24 43 a0 55 76 03 4f 9d 72 42 3f 73 ea a9 4b af d5 98 40 e1 b5 68 05 d3 02 9e f9 2c 84 d0 d7 69 6e 43 b7 6f 25 bf 6a 90 52 cf 06 0e 97 c0 b8 00 32 0f f2 73 e8 fc 51 8d 50 64 7e 07 eb 53 85 c2 3a 43 52 f0 f8 35 1f 5a dc dc ff 05 73 21 07 4f 96 bc 17 89 a3 5a 4a a2 36 b7 12 69 6f 3b 7c 66 31 76 55 a5 80 d5 63 fb 00 be b3 fe 71 a3 56 50 69 4f 02 e5 a5 5f 1e ed 6b 9f b2 a9 91 24 2e 3f 24 3c 6b 3d d8 4a 97 6f 48 57 7d d5 21 4f 86 df a9 d2 fd 4e 33 78 46 6e 58 78 2e ae dd a3 ab 43 a9 ef 57 76 37 5d 04 1d 24 8c 53 71 77 95 12 52 a0 Data Ascii: JiCy{&RT bo;vn{F\|20JnMV@({%"]AuyBc$CUvOrB?sK@h,inCo%jR2sQPd~S:CR5Zs!OZJ6io;\|f1vUcqVPiO_k$.?$<k=JoHW}!ON3xFnXx.CWv7]$SqwR
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 3f 90 4f 4c b0 64 ad f0 d5 ce 62 72 15 b3 4e 4d f7 ec 18 90 e6 44 b2 6d 73 a2 62 50 f9 58 2d d8 15 86 a4 72 bc 31 fe ea dd 14 6e 4a f7 04 dc 89 1b 02 03 fc 6c a0 01 e5 e8 a1 05 a6 4e 97 20 d7 80 07 16 3d 3e 3a 44 08 50 0a 28 7f fa 1a a0 81 bd 26 a5 1e 80 5d d6 40 9a 82 e9 a3 e6 ad 47 4f 8e fa a4 0c 1b 99 99 49 a8 cd fb 18 b3 03 7b aa 41 43 c2 d8 21 5c 7e a1 31 36 95 6a 21 42 03 da f6 48 80 2a e5 ea b4 80 09 d3 04 7b 91 50 62 2b f7 4b d1 14 78 ec 07 bd 96 21 a2 5f d7 b6 05 9e d3 7c c3 89 cf ee 00 2c e0 fd c0 9c f3 19 27 33 c5 31 2d 63 75 77 3d e9 6d 91 54 07 7e 92 4a 9b be 97 de ea b7 1c 95 62 6f 2b ae cc 88 5d 81 52 88 b3 ef 00 c9 8b 85 56 cb d1 17 e1 50 86 af 0d b0 93 2b 3e 28 7b 4e 77 a1 23 f7 64 64 12 d5 e3 4a f2 2f d9 48 97 da 2d 6a 15 13 6a 33 d2 9f Data Ascii: ?OLdbrNMDmsbPX-r1nJlN =>:DP(&]@GOI{AC!\~16j!BH*{Pb+Kx!_\|,'31-cuw=mT~Jbo+]RVP+>({Nw#ddJ/H-jj3
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: a3 8f 00 40 46 75 cc c3 e4 7f e6 e3 f3 4c 96 d0 2d 30 61 c5 93 94 6a 8c dd 7f db 40 fb 1f f8 66 cf 1d c8 cc 4a 79 12 ec 90 9d 26 08 29 96 fc f8 17 fe 76 3e 03 05 e3 23 2f 0c b9 30 20 19 45 4e 44 39 6b 71 93 e7 1a ba da fb cc 92 23 7a 23 6d c2 da a3 9c bb 7e 6f 18 98 6a a5 ff 19 13 39 c2 bc e3 fe 5a 36 b4 21 54 61 1c 89 9d 3e 21 8e 40 51 76 87 71 d2 e0 f9 d9 ff 67 51 52 78 4b 6f 1c ff de 61 96 be 60 60 eb ea 70 67 26 5d 43 e0 73 b5 9e 1b a7 cf df 23 c4 25 6e e7 44 93 fb fb 57 2e 0c bd 0a cf 45 01 64 45 6e a7 da 17 01 88 76 43 ea 80 e5 4d 65 bb 6c 7c 4c b9 59 9d 6b 15 5c c2 f7 e5 e8 62 ee 67 eb d8 ea 97 96 8a a7 39 2e 67 42 14 c5 12 d9 33 16 6f 92 76 13 6d cf 25 32 04 60 ea 97 1f b1 9e 60 c4 ed c8 1e d7 bd 26 3c 9a d4 17 5f a4 63 1b 30 3c 6f a7 39 2f 56 33 Data Ascii: @FuL-0aj@fJy&)v>#/0 END9kq#z#m~oj9Z6!Ta>!@QvqgQRxKoa``pg&]Cs#%nDW.EdEnvCMel\|LYk\bg9.gB3ovm%2``&<_c0<o9/V3
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 32 3c 95 c5 d1 54 af 91 e5 32 bb 6a 3a be fc ca 50 8a 77 f5 8d 5a b0 5d 61 1f 39 98 60 9e 84 be 3b 0b a2 ac d2 e3 a1 40 38 3f ca 52 4c d3 dd 86 3d 02 92 1c 8a 40 23 0a 87 c1 ff c7 cd 36 19 fa d0 d4 c4 6c 2f f9 0c 77 51 02 05 50 95 3b 68 66 9e a9 db ef a2 f2 e6 8f 95 23 0f a4 79 79 32 41 89 ac fc a5 ba bc eb 5a 50 8a 11 90 1d 2b 87 67 e2 2f cb 03 59 ba 30 ef 1e c3 55 f1 41 bf ac a9 2f 38 f2 1f c3 8a 1c 24 b2 b8 1d 42 8b e8 8a be 79 6e 25 91 15 f2 e1 cd 0d 3b 91 4d 6e f2 aa 35 f7 f7 36 dd b5 56 31 cc cd 4e a0 7f 7b 1a 6f 51 00 6d 47 db 19 8b 2d 8b 56 11 96 5f f2 38 09 e7 63 4c 1c d5 b3 a5 ea 77 1a fb 16 bb 96 95 f8 ad 77 b0 3d 52 99 f0 12 fc 75 c1 af 98 c0 c1 67 e6 ee 35 40 6e 61 fc e6 e2 e2 db c3 15 61 53 7c 13 9c 2e 07 08 00 0f dc 95 c4 af 15 0e 5c 7a fc Data Ascii: 2<T2j:PwZ]a9`;@8?RL=@#6l/wQP;hf#yy2AZP+g/Y0UA/8$Byn%;Mn56V1N{oQmG-V_8cLww=Rug5@naaS\|.\z
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: b1 0e 72 56 f3 cb 6a 8a 98 13 a5 79 ca 1d fa e5 12 b7 60 a7 4b f8 6f aa 82 64 cd 30 c4 9f 69 c5 a5 f1 74 ad db 40 49 0e 25 8c af 5a cb 23 6f 33 04 35 54 22 d9 8e b7 b9 f2 8d 61 39 bc ef 94 56 fe 79 97 01 10 8d 63 51 a7 31 a4 55 e5 9a d4 2b b2 0a af 44 9e 19 b6 0d 2a f7 9a 65 5e 56 85 e3 71 4a b8 aa 56 4f 03 53 34 10 5e a2 5b ad 3b 6c c5 8f f4 01 c7 ce 69 17 c6 1a 3f f2 2d 3e d7 28 3a b2 f7 4e f6 c4 5a a5 1e 58 22 e1 f3 36 aa 69 16 64 56 af cf 66 94 34 3c 23 6d 00 17 a1 ea 53 df 99 a3 7b 55 0e 52 7e 8e a2 6a 71 91 9d e2 29 0b 28 63 f6 01 9d 04 be 20 4d c4 98 fd db 27 a4 17 4a 59 92 d2 0f 04 52 c5 77 7f e2 17 7d 6e 2f ec 4d 0f dc 16 dc 73 be 11 43 03 45 99 18 1e 1d 40 e2 d5 95 95 50 22 3a 41 2d 42 23 59 3a 50 8b ad 17 14 8b eb d5 db 63 6c 2a 9c d7 ff ad 2c Data Ascii: rVjy`Kod0it@I%Z#o35T"a9VycQ1U+De^VqJVOS4^[;li?->(:NZX"6idVf4<#mS{UR~jq)(c M'JYRw}n/MsCE@P":A-B#Y:Pcl,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
395	192.168.2.4	50276	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2468	OUT	GET /Areas/LNRS/js/LNRS.bundle.config.js?v=638484955474984366 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	696	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7189 Content-Type: application/javascript Last-Modified: Fri, 12 Apr 2024 05:12:28 GMT ETag: "065a3988cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 554874 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210097-DFW, cache-pdk-kfty2130070-PDK X-Cache: HIT, HIT X-Cache-Hits: 20, 0 X-Timer: S1713460605.837341,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 3b 28 66 75 6e 63 74 69 6f 6e 28 67 6c 6f 62 61 6c 29 20 7b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 20 3d 20 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 20 7c 7c 20 7b 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 20 3d 20 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 20 7c 7c 20 7b 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 2e 73 63 6f 72 65 5f 63 63 66 20 3d 20 22 2f 41 72 65 61 73 2f 53 63 6f 72 65 43 43 46 2f 6a 73 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 70 61 74 68 73 2e 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 20 3d 20 22 2f 41 72 65 61 73 2f 53 63 6f 72 65 42 6f 6f 74 73 74 72 61 70 55 49 2f 6a 73 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 Data Ascii: ;(function(global) {global.require = global.require \|\| {};global.require.paths = global.require.paths \|\| {};global.require.paths.score_ccf = "/Areas/ScoreCCF/js";global.require.paths.score_bootstrap = "/Areas/ScoreBootstrapUI/js";global.req
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 6f 6e 73 2f 43 6f 6e 74 61 63 74 56 69 73 69 74 57 69 74 68 54 68 65 50 72 6f 66 69 6c 65 43 61 72 64 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 41 63 74 69 6f 6e 73 2f 53 68 6f 77 41 6c 65 72 74 4d 65 73 73 61 67 65 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 41 63 74 69 6f 6e 73 2f 54 72 61 63 6b 43 6c 69 65 6e 74 45 76 65 6e 74 41 63 74 69 6f 6e 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 43 6f 6e 64 69 74 69 6f 6e 73 2f 43 6c 69 63 6b 65 64 43 6f 6e 64 69 74 69 6f 6e 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 6e 63 65 2f 43 6f 6e 64 69 74 69 6f 6e 73 2f 47 65 74 73 46 6f 63 75 73 43 6f 6e 64 69 74 69 6f 6e 22 2c 22 73 63 6f 72 65 5f 63 63 66 2f 58 50 65 72 69 65 Data Ascii: ons/ContactVisitWithTheProfileCard","score_ccf/XPerience/Actions/ShowAlertMessage","score_ccf/XPerience/Actions/TrackClientEventAction","score_ccf/XPerience/Conditions/ClickedCondition","score_ccf/XPerience/Conditions/GetsFocusCondition","score_ccf/XPerie
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 74 73 74 72 61 70 22 2c 22 6d 61 74 63 68 48 65 69 67 68 74 22 2c 22 6b 6e 6f 63 6b 6f 75 74 22 2c 22 6b 6f 5f 65 78 74 65 6e 64 65 64 22 2c 22 6a 71 75 65 72 79 56 61 6c 69 64 61 74 65 22 2c 22 6a 71 75 65 72 79 55 6e 6f 62 74 72 75 73 69 76 65 41 6a 61 78 22 2c 22 6a 71 75 65 72 79 56 61 6c 69 64 61 74 65 55 6e 6f 62 74 72 75 73 69 76 65 22 2c 22 69 6d 61 67 65 73 4c 6f 61 64 65 64 22 2c 22 74 79 70 65 61 68 65 61 64 22 2c 22 70 69 63 74 75 72 65 66 69 6c 6c 22 2c 22 62 6f 6f 74 73 74 72 61 70 73 6c 69 64 65 72 22 2c 22 63 73 73 45 73 63 61 70 65 22 2c 22 73 6c 69 63 6b 22 2c 22 64 6f 74 64 6f 74 64 6f 74 22 2c 22 6c 69 67 68 74 73 6c 69 64 65 72 22 2c 22 62 6f 6f 74 73 74 72 61 70 53 65 6c 65 63 74 22 2c 22 6d 6f 6d 65 6e 74 22 2c 22 64 61 74 65 74 69 Data Ascii: tstrap","matchHeight","knockout","ko_extended","jqueryValidate","jqueryUnobtrusiveAjax","jqueryValidateUnobtrusive","imagesLoaded","typeahead","picturefill","bootstrapslider","cssEscape","slick","dotdotdot","lightslider","bootstrapSelect","moment","dateti
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 22 62 6f 6f 74 73 74 72 61 70 41 6d 64 46 69 78 22 2c 22 6a 71 75 65 72 79 54 6f 75 63 68 53 77 69 70 65 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 62 6f 6f 74 73 74 72 61 70 41 6d 64 46 69 78 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 62 6f 6f 74 73 74 72 61 70 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 6d 61 74 63 68 48 65 69 67 68 74 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 6a 71 75 65 72 79 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 6a 71 75 65 72 79 56 61 6c 69 64 61 74 65 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 6a 71 75 65 72 79 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 73 68 69 6d 2e 6a 71 75 65 72 79 55 6e 6f 62 74 72 Data Ascii: "bootstrapAmdFix","jqueryTouchSwipe"]};global.require.shim.bootstrapAmdFix = {"deps":["bootstrap"]};global.require.shim.matchHeight = {"deps":["jquery"]};global.require.shim.jqueryValidate = {"deps":["jquery"]};global.require.shim.jqueryUnobtr
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 6e 20 3d 20 7b 22 64 65 70 73 22 3a 5b 22 6a 71 75 65 72 79 22 2c 22 75 6e 64 65 72 73 63 6f 72 65 22 2c 22 73 63 6f 72 65 62 6f 6f 74 73 74 72 61 70 22 2c 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 41 6e 61 6c 79 74 69 63 73 44 69 73 70 61 74 63 68 65 72 22 2c 22 65 76 65 6e 74 4d 61 6e 61 67 65 72 22 2c 22 6d 61 74 63 68 48 65 69 67 68 74 22 2c 22 64 6f 74 64 6f 74 64 6f 74 22 5d 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 20 3d 20 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 20 7c 7c 20 7b 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 2e 6a 71 75 65 72 79 4e 6f 43 6f 6e 66 6c 69 63 74 20 3d 20 7b 22 6a 71 75 65 72 79 22 3a 22 6a 71 75 65 72 79 22 7d 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 Data Ascii: n = {"deps":["jquery","underscore","scorebootstrap","LNRS/Track/AnalyticsDispatcher","eventManager","matchHeight","dotdotdot"]};global.require.map = global.require.map \|\| {};global.require.map.jqueryNoConflict = {"jquery":"jquery"};global.require
2024-04-18 17:16:44 UTC	294	IN	Data Raw: 2e 72 65 71 75 69 72 65 2e 6d 61 70 5b 27 2a 27 5d 5b 27 54 72 61 63 6b 2f 54 72 61 63 6b 46 69 6c 74 65 72 73 27 5d 20 3d 20 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 54 72 61 63 6b 46 69 6c 74 65 72 73 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 5b 27 2a 27 5d 5b 27 54 72 61 63 6b 2f 44 61 74 61 4c 61 79 65 72 4d 61 6e 61 67 65 72 27 5d 20 3d 20 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 44 61 74 61 4c 61 79 65 72 4d 61 6e 61 67 65 72 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 6d 61 70 5b 27 2a 27 5d 5b 27 54 72 61 63 6b 2f 47 6f 61 6c 73 4d 61 6e 61 67 65 72 27 5d 20 3d 20 22 4c 4e 52 53 2f 54 72 61 63 6b 2f 47 6f 61 6c 73 4d 61 6e 61 67 65 72 22 3b 0d 0a 09 67 6c 6f 62 61 6c 2e 72 65 71 75 69 72 65 2e 75 72 6c 41 72 67 73 Data Ascii: .require.map['']['Track/TrackFilters'] = "LNRS/Track/TrackFilters";global.require.map['']['Track/DataLayerManager'] = "LNRS/Track/DataLayerManager";global.require.map['*']['Track/GoalsManager'] = "LNRS/Track/GoalsManager";global.require.urlArgs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
396	192.168.2.4	50277	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2235	OUT	GET /-/media/images/lnrs/icons/phone-ringing-160x160-wht%20png.png?h=160&iar=0&w=160&hash=04AAD29CAD79C9A6F7B5D2EAD19611A4 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	917	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1683 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Phone-Ringing-160x160-WHT png.png" Content-Type: image/png Etag: "ulGsArvNBjc7qm32fDrRsZTi+dPE357KNVryoAQQbmI" Fastly-Io-Info: ifsz=1683 idim=160x160 ifmt=png ofsz=1683 odim=160x160 ofmt=png Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560819 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120093-DFW, cache-pdk-kfty2130063-PDK X-Cache: HIT, MISS X-Cache-Hits: 12, 0 X-Timer: S1713460605.839402,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 03 00 00 00 bc 11 97 1f 00 00 00 a5 50 4c 54 45 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b8 fd e3 55 00 00 00 36 74 52 4e 53 00 0b f1 02 fa f6 ee e4 91 35 2f 9b 7e eb 67 40 05 a4 b5 2a 20 07 d0 84 45 15 db c8 62 5b 49 3a 24 9f 95 4c a8 Data Ascii: PNGIHDRPLTEU6tRNS5/~g@* Eb[I:$L
2024-04-18 17:16:44 UTC	304	IN	Data Raw: bc 25 ff b5 bd 81 b0 36 0d 6a 99 57 a4 3d 36 91 be 66 2f a6 c9 be 57 64 aa 1b cc 61 20 9f 90 cb 11 de dc 77 69 d2 48 61 20 9f 90 bb 61 d3 c3 8b 69 48 b3 41 02 51 5e 9b ef f1 f7 fd 65 97 ef f2 23 c8 ca 69 ab 3f 86 a8 2d 6d 3d 4d 21 ea 40 6b 6d 05 49 11 ad 85 3d 48 9a fb b4 96 2b 08 9a 05 b4 b6 eb 41 50 b2 a3 bd 0e 04 8d 97 ae 27 4c 63 da 6b 42 d2 0f 5a db 40 d4 34 a0 a5 7a 0a 51 f7 0b 5a 4a 20 4b 3d d0 4e 0b d2 32 9f 36 14 c4 25 36 d7 bc 44 09 d2 9c 17 bb 43 29 46 21 2f f3 e5 06 e5 58 c7 4e 1f a0 a6 0e 29 66 8f 12 a9 06 cf 36 43 a9 5a 13 9e a7 8d b2 65 21 cf 10 ae 51 3a d5 f1 59 d8 23 ae 61 dc 28 1a 31 c7 95 7c 2b 16 71 90 e2 6a 56 c3 80 1f e9 de e2 9a 54 34 e0 1b 57 27 69 cd 76 8d 46 e1 f5 f3 bd 48 e7 b1 21 e3 83 33 cf f8 dc f4 86 93 3a ff 16 e4 0e ed 3c Data Ascii: %6jW=6f/Wda wiHa aiHAQ^e#i?-m=M!@kmI=H+AP'LckBZ@4zQZJ K=N26%6DC)F!/XN)f6CZe!Q:Y#a(1\|+qjVT4W'ivFH!3:<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
397	192.168.2.4	50278	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2593	OUT	GET /-/media/images/healthcare/default_videomodal_image-v2-845x403.jpg?h=403&iar=0&w=845&hash=6B5C626A3B68E134F023C3930C5A6220 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	885	IN	HTTP/1.1 200 OK Connection: close Content-Length: 20652 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="default_videomodal_image-v2-845x403.jpg" Content-Type: image/webp Etag: "3CIly6gVgKu79WowZuGCE5QVjeZEmPT9xufxWq+aBZo" Fastly-Io-Info: ifsz=32384 idim=845x403 ifmt=jpeg ofsz=20652 odim=845x403 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551284 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210179-DFW, cache-pdk-kfty2130040-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460605.873641,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 52 49 46 46 a4 50 00 00 57 45 42 50 56 50 38 20 98 50 00 00 f0 ce 01 9d 01 2a 4d 03 93 01 3e 51 26 8f 45 a3 a2 2c 94 39 cc cc c8 05 04 b2 96 ce 88 02 8e f0 0d c3 e4 13 dd 75 0f 72 9b 8d 54 3c e3 79 0f f6 1e d3 1e 16 be 77 fe 6b 5f 58 1f 7c d4 ff 42 ff 7d d3 eb fe 4f 32 1f b7 60 30 6b ae a2 61 bc 7f e6 98 a3 ef 17 a0 63 d6 ff e4 f6 0b fb 0f 7d e7 3a f7 a9 ef ee de 8a bf e5 7a ee bd 1b fa 65 7c ad f5 0e 26 9b e5 3f 71 39 90 bd d5 ce 77 fa 0b fa 1e b4 7a 9b f8 94 fe 3f fd 77 fd 3f e6 47 c8 ef 63 7d 03 e7 f3 33 af d7 5e bc 3e ba fd 9f f6 72 ff a5 fd d4 9d a1 d3 1f fd 7c 74 85 5b 1d 4a 24 f8 86 1b 0c 10 f1 35 25 8d f2 c4 be c7 58 2f 69 ac 43 50 8c bd 1a e3 5b 5f a2 74 e1 53 05 84 6a 64 25 dd cc 80 8b 15 75 c3 1c 82 44 05 e7 8e 2c 5e a9 1c 60 de 18 f9 94 9b 09 Data Ascii: RIFFPWEBPVP8 P*M>Q&E,9urT<ywk_X\|B}O2`0kac}:ze\|&?q9wz?w?Gc}3^>r\|t[J$5%X/iCP[_tSjd%uD,^`
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: ff 33 5e d3 7a c2 59 17 22 a6 95 64 f9 f3 a5 94 4f c8 e6 da f3 3b c0 18 48 30 0e 18 f5 a4 67 77 ef 0a 2d 89 54 42 19 89 90 1f 25 3b 66 f0 84 d1 28 ec 9d b7 16 cf 38 47 26 a8 75 6d 38 0c 5b ad 55 ad 4a 46 9a d3 b8 3e 3d c3 ff e7 e7 85 89 c9 5f 3b b6 e8 9e 14 9f 4a 35 76 cc ed 3e 98 f2 fd a9 b2 5a 5a 4c af 3e e4 38 31 07 87 1f f9 f8 d3 f4 a8 93 3e e8 21 94 10 6d 44 0e c9 ba 4b a5 f7 3f 30 f9 7a 21 98 3c b7 5d 03 b0 57 00 c6 0f 72 40 cf 73 1f 16 82 ff 41 01 1a d8 2e fd 47 1b a7 cb 93 4d e7 07 4d 93 cc cb ef dd 81 32 cc c7 d8 b5 9f 28 4d 06 a9 cd 5f cc 47 aa c4 b5 83 31 48 3a dd 04 5c 50 e7 cf 48 c2 93 7f 81 07 8e d5 5a d4 a4 9a 30 07 af 21 22 75 b4 f7 c0 c1 71 7d d8 df 2d f6 8a 34 1c f1 fa 95 32 84 60 08 72 9c 5c 52 b3 7d ee c2 41 cd 3e 4d ef be 23 07 79 6b Data Ascii: 3^zY"dO;H0gw-TB%;f(8G&um8[UJF>=_;J5v>ZZL>81>!mDK?0z!<]Wr@sA.GMM2(M_G1H:\PHZ0!"uq}-42`r\R}A>M#yk
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 04 3d 4a dc c5 64 73 ba 3d 0d 86 65 22 44 00 e2 11 00 44 49 ff 48 00 cf 66 3a 41 b1 bf 24 68 b0 ee 63 c6 c9 cc 33 da b7 b1 ea 4a c8 75 b7 3e 8a 5f 4b 2f 0e aa 39 eb 31 a3 83 e9 d9 1c 45 c9 4b 56 f5 20 1e c3 d4 95 46 65 e4 cf 8e 04 69 f4 74 65 a4 15 a5 20 ca 80 c6 00 23 60 0a 52 a4 98 eb eb 50 c0 c0 15 75 74 5f b4 27 37 6b f7 55 03 a6 25 ae b5 9f 07 19 bf 3f a3 d9 d3 20 fa 9b 6e b3 2a f3 4a e5 f8 4c 4c 31 fe 3a b7 73 f3 52 81 9d 43 34 ee 79 b6 40 79 88 a3 28 a9 10 e5 47 df 88 75 b2 18 0b 0c 44 19 1f e5 7f a4 06 8d f2 9c a3 e5 4a f9 9a 4a d9 65 01 a3 c8 19 ea 4c 7e 3a 94 89 0a b4 a7 c4 f3 5f ed 98 0a c8 bd bf cc 70 51 59 25 3b 11 67 49 99 00 81 5e f3 1f d6 02 17 3c 79 8e 50 08 71 92 85 bd a4 d3 1f 60 db 1f c0 1a c6 6d 49 ca 7a 97 b3 4a cc 8b 58 db 3e 4c cd Data Ascii: =Jds=e"DDIHf:A$hc3Ju>_K/91EKV Feite #`RPut_'7kU%? n*JLL1:sRC4y@y(GuDJJeL~:_pQY%;gI^<yPq`mIzJX>L
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: d9 36 8e bc 0d cf 99 f4 e7 00 e1 34 f5 2c 6c af e3 46 c4 17 2b f9 68 75 11 79 02 f2 17 97 ee d2 79 02 97 57 6f a3 61 b8 31 07 c7 72 d5 ff 3b a1 ee 8c 63 93 3c e0 2b c3 ce 7d d4 46 8e f1 43 71 73 f8 00 22 4e 79 53 7b 11 2a 85 75 11 8b aa 8e 3b 80 c9 e4 ac f2 72 8b 39 2e af 64 54 79 99 f7 ff f7 15 cc f4 a7 f4 94 d7 d7 01 87 dd 9b 7a 25 bc ce 2f 43 2f 05 c6 40 b8 0f 95 a7 8b d2 96 9a b5 b1 bf 3a 75 95 ec 37 24 df 29 ec 75 90 05 fc 0a a6 fd a0 00 bc a6 42 bc d1 61 49 c3 a5 ef d7 5a 45 b0 de d9 1f 25 4b e8 53 a9 4b 31 3a a4 35 f1 26 3a 56 83 cc 3a 13 b3 0f e6 a8 f1 fd d2 b9 11 e8 1e 9a f5 71 0f a4 53 06 5d e5 be 3f 1b b6 ca 70 8f e9 98 6f c1 3a 37 3f 2f 04 c1 55 82 d2 77 9f 78 01 b3 cb 9d ab 55 a5 d7 ee 02 57 07 be dd e4 7d f3 1c 07 33 e1 bb 93 78 e8 7a e8 7b Data Ascii: 64,lF+huyyWoa1r;c<+}FCqs"NyS{*u;r9.dTyz%/C/@:u7$)uBaIZE%KSK1:5&:V:qS]?po:7?/UwxUW}3xz{
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 44 41 87 99 3a 33 a4 85 e8 fa fc b5 83 a5 b1 ab 02 0d db 59 67 32 e7 b7 30 9c c0 ea 6d c5 44 30 0d 35 f4 44 51 cc c2 0f 61 6c d7 8d f5 e5 97 2b 47 1c 73 1a 59 c0 25 b5 7f 64 54 9a bb 08 9f 54 03 4f 1a 92 a8 2c cb d7 2f 91 1c c9 eb 42 b9 d6 dd 3d 81 70 27 e4 b5 82 de 23 84 d8 0a bd 13 e1 c1 2f 8f fe c5 9f 65 93 d5 b5 23 94 74 ea ba 1a 25 cd 6d 44 9b 63 97 ec d4 ce 27 ba 41 55 71 b6 19 34 09 3b 28 ac fd 91 a1 03 7a c7 86 7e bf da 7f 0b 40 ef 82 5c 6a e2 18 23 76 fc 7a 8f 4a 71 0b 51 45 b8 02 ce de 28 7d 1e 81 1b 9e 35 dd 93 b4 f2 11 85 1c 54 ab d2 47 83 5b 44 d2 04 54 30 30 29 d5 bb 13 1e 53 01 99 b2 23 1d ed f5 83 ff 5b 38 a9 90 09 de fb 5f a4 6b a1 d0 50 cf 39 0f 14 85 f3 72 06 d4 07 02 9a fe 2f c9 d5 ae 71 24 2f d9 e7 b8 89 9c df 91 5a dd 1b 6d 96 dd a2 Data Ascii: DA:3Yg20mD05DQal+GsY%dTTO,/B=p'#/e#t%mDc'AUq4;(z~@\j#vzJqQE(}5TG[DT00)S#[8_kP9r/q$/Zm
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: b4 53 0a cc a7 f5 5f b6 da 57 a9 78 75 f4 c2 1a 61 45 28 07 7e b4 64 4b 8e 98 f6 60 f3 e8 a3 95 ed 1f c4 f6 d9 ce df 32 44 d0 98 9b 51 03 d7 44 80 d6 b0 00 f2 53 4d cc 25 25 90 35 10 17 8b 98 fe e9 0d d0 b0 55 b5 ac c5 da b4 fa ed 7c e0 b4 24 9c c7 56 62 7c 62 eb 58 af 95 c5 6a 54 07 47 cc 18 fb 83 93 6f 9c 81 45 49 c6 a1 3f ed cd 18 5b ec ec de 38 f3 b4 60 c1 29 5f 18 e4 c5 fd 85 6b c7 7e df 34 cb d9 5d 41 a0 01 71 59 07 28 f0 a4 a3 a4 04 08 0f d3 66 f3 d1 2e cb 9a 56 55 e6 33 8b ab 3e b8 b9 d9 13 ab 56 92 91 34 c4 09 32 03 39 4e 1b 5a 07 23 74 ee 46 ad 35 39 ba 52 22 13 ec af 75 ec 58 dc 14 83 ce 27 2e 48 50 53 95 e9 e9 95 62 ff 46 7f d0 94 44 3d bf 39 60 de 51 ee 4d a4 b3 a9 44 b3 2f 5f 5e 42 6a 6f 00 da 20 2c e7 8b 42 c9 ac 74 b3 1e 0c 49 32 09 81 71 Data Ascii: S_WxuaE(~dK`2DQDSM%%5U\|$Vb\|bXjTGoEI?[8`)_k~4]AqY(f.VU3>V429NZ#tF59R"uX'.HPSbFD=9`QMD/_^Bjo ,BtI2q
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: db a3 43 04 d4 6b aa ac cd 2a 33 0b 31 75 18 0f fd 8a c0 05 30 d0 4f 61 64 cd ce c7 f7 57 06 dd 2a 59 09 04 1f b0 1a b5 f2 62 f6 75 eb 68 fa b1 64 cb 70 8a 6b 80 5d 0b 42 4e 0d 92 a5 ec cf 0e fd 30 f6 5b ef f0 3b 8b 71 46 35 fb a4 66 41 a4 e2 d1 8f bf 7c 52 76 08 b8 84 ca 21 36 85 f3 48 a5 b0 2e cb bd 1a a0 6c 7d 3d 7c 66 84 71 7a a5 be 29 5f 36 02 7f 0f 6b 42 38 db 36 9e ef dc 4d 77 34 a0 57 22 db 48 78 c0 2f c7 d4 35 42 f4 4a 10 69 f1 a2 92 ce a8 58 98 43 6d 78 01 11 48 dc ad 9d 08 c6 9e 78 d4 f8 f7 19 1e 21 28 52 c8 f0 7e a7 10 21 19 e3 bb 60 81 d0 20 50 83 5a d9 88 a3 75 d4 f9 c0 89 d0 fa 33 6b fc b5 e4 9d b8 69 5e 2c 92 78 67 ca 65 bc 62 29 27 5d 29 f1 92 3e 7f 14 2e 5c 1f 03 0e 54 df cc d9 c0 40 b5 18 36 04 70 7b 67 00 9e 83 3e 1b b3 a1 86 6f e0 b4 Data Ascii: Ck31u0OadWYbuhdpk]BN0[;qF5fA\|Rv!6H.l}=\|fqz)_6kB86Mw4W"Hx/5BJiXCmxHx!(R~!` PZu3ki^,xgeb)'])>.\T@6p{g>o
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 9e f5 3b aa 87 6c a4 83 1f 19 ac 34 30 d7 46 02 72 18 b1 bb 0c cf 5b 79 67 ab 9e f7 96 c5 55 67 bf 3a 16 ed fa ff 9f 43 88 3e 82 7f d4 23 26 1a c5 2e fb 6b f0 01 e6 53 f5 e3 c6 92 31 22 1a b6 d0 dc 47 02 bc de 7a 57 23 3a 4f a2 34 cc b0 8d b1 65 5a e7 5c 83 61 4b e7 c1 6a 1f d2 78 f3 e4 bf ce 9f 87 10 44 a7 eb 37 a1 1e f6 18 7c 82 5c 4d 44 df 3f 2f a8 d2 48 0c 8f d2 4f 10 8d 14 af c7 7c 33 5e f3 29 d8 a8 c9 84 60 f3 38 4f 71 aa 52 74 d8 1d f4 ee eb 7a 8a 8b 1e e6 97 3c f6 d5 4f cc 82 9a 93 a5 be 48 08 ae f8 af 41 82 22 de 93 23 58 68 96 81 61 6f b0 0a 8e c6 25 5f 6b 98 d8 6c 2b ef c4 1f e9 c0 6e 29 51 71 04 ed d4 bd 7b 92 21 7a 95 c4 38 a1 3c 2d 3a 23 71 b7 d6 46 6f 23 74 32 ce 3b e1 17 bc 15 50 da 3c 99 a6 4a 07 2b bc f3 60 4c 87 39 02 2d 09 26 50 4d 97 Data Ascii: ;l40Fr[ygUg:C>#&.kS1"GzW#:O4eZ\aKjxD7\|\MD?/HO\|3^)`8OqRtz<OHA"#Xhao%_kl+n)Qq{!z8<-:#qFo#t2;P<J+`L9-&PM
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 0a 14 96 a2 d8 04 6d ce 67 64 37 c2 c0 2b 1d ab 81 b7 7e 07 79 23 8d 8b 45 7f d8 f4 cc 0c 6f f5 75 88 50 1b 7a 8f 57 0b 3c cd 1e b1 06 dc d6 28 db ed f3 82 9f 6b 3e f4 47 ac 96 ec b3 30 e2 c9 82 3c c7 e2 30 36 09 5f e9 72 10 37 09 32 17 ca 05 95 13 b9 45 60 42 cd 84 99 aa 01 9c 15 4c 2a f2 fc d0 b9 06 15 4f 56 a8 24 e8 d6 12 56 4a 49 58 d9 e5 1d 30 56 85 ac 35 cf f0 df 31 0c 5f 93 59 26 df 97 9b 7c 5d ce 57 c3 94 bc b1 71 04 c5 b8 45 bf b5 f0 5e 8e 38 45 07 ea cc 42 e0 f6 69 ce e4 74 e2 1e d4 7c 7a 1c d3 fc a5 80 39 cd da 95 10 20 18 21 30 5c c7 10 4c 53 5f 95 f1 15 34 65 ac 5b 74 be a1 b6 18 05 2c c4 a2 1b 27 5f 79 f9 79 fd a0 27 bf 72 2f 84 78 d6 73 20 93 ca 7c dc 8e 79 28 af 7c a4 ed b5 2f fd a2 fd ce 58 55 19 84 11 90 31 29 05 72 fb cd 1b 61 32 95 2a Data Ascii: mgd7+~y#EouPzW<(k>G0<06_r72E`BLOV$VJIX0V51_Y&\|]WqE^8EBit\|z9 !0\LS_4e[t,'_yy'r/xs \|y(\|/XU1)ra2
2024-04-18 17:16:44 UTC	1379	IN	Data Raw: 7c de 29 9f fa c9 21 e0 a2 5f 46 59 da 5d 6f 9d 14 2f 28 b9 e9 5d 1f 74 87 ce 7d ea 5e 73 38 b9 4b f2 3a 76 b8 4d 64 2e 5a b7 21 ba d4 03 58 10 e5 18 37 b8 bd e1 3f e6 ae ce 41 4e 57 b9 01 7e bd 0e 9b 5e 67 62 91 65 0c 50 bf 31 1b aa ea 03 01 75 a6 b7 19 b5 2f b6 73 8b 4d 95 9e 34 33 a2 d1 f5 80 98 d2 99 41 52 c5 09 b1 5d e5 b8 bd 29 85 43 a0 fb b6 41 3f 0f 36 ff 72 31 ee 68 2f fb 73 22 18 e1 ea b2 4b 22 5c 54 ea b3 ea 4b 66 ed 27 d0 83 46 ca 12 2e 99 59 00 ff 14 38 02 de 58 38 5c f6 9e f4 fa f9 75 da 74 fd 6c 76 e5 1c 95 0a 78 f4 9a 47 69 03 d3 f5 2e fa 93 9e 63 bd 06 b9 ef 6b 51 99 c5 b9 b9 e2 d9 88 9e da fc 00 14 cf c2 cc 3f 99 96 c5 37 90 c1 c5 1d 26 0f 01 61 97 2a 4e 69 6f 92 f7 63 5b 96 54 bb e7 61 ac 1a ff 3f 9f 80 1a 44 0f fc 5b b4 c3 60 c2 89 76 Data Ascii: \|)!_FY]o/(]t}^s8K:vMd.Z!X7?ANW~^gbeP1u/sM43AR])CA?6r1h/s"K"\TKf'F.Y8X8\utlvxGi.ckQ?7&a*Nioc[Ta?D[`v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
398	192.168.2.4	50279	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2560	OUT	GET /-/media/images/lnrs/icons/download%20svg.svg?iar=0&hash=06D88EFA3785CDBEE6D8D56186DBFC35 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	729	IN	HTTP/1.1 200 OK Connection: close Content-Length: 943 Content-Type: image/svg+xml Last-Modified: Fri, 31 Mar 2017 20:02:13 GMT Content-Disposition: inline; filename="Download svg.svg" Xhost: SC102CD2 cache-control: public, max-age=604800 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 397029 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120133-DFW, cache-pdk-kfty2130091-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460605.876010,VS0,VE22 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	943	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
399	192.168.2.4	50280	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2219	OUT	GET /-/media/images/lnrs/icons/pencil_icon%20png.png?h=20&iar=0&w=20&hash=A7C6AB4BF363E42EA2DCD3CA10ECF939 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	854	IN	HTTP/1.1 200 OK Connection: close Content-Length: 772 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="pencil_icon png.png" Content-Type: image/png Etag: "cMGDurCU51PO+smyO9yfVBmrzwlZJ6nWyzcOu756KUE" Fastly-Io-Info: ifsz=1811 idim=20x20 ifmt=png ofsz=772 odim=20x20 ofmt=png Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560825 Date: Thu, 18 Apr 2024 17:16:44 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210070-DFW, cache-pdk-kfty2130043-PDK X-Cache: HIT, MISS X-Cache-Hits: 10, 0 X-Timer: S1713460605.880847,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	772	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 14 08 03 00 00 00 ba 57 ed 3f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 01 59 50 4c 54 45 fe f0 f1 ff ff ff f9 b8 ba f4 79 7d f3 74 79 f2 67 6c f2 6a 6f f2 6e 73 ed 2b 32 ec 1f 27 ec 24 2c f2 66 6b f8 ab ad ee 38 3f f1 5d 63 fc de e0 ff ff ff fa be c0 ed 2e 35 f1 5a 60 fc d7 d9 f9 b2 b4 fe f0 f1 fe f0 f1 f9 b8 ba f4 79 7d f0 54 5a fb d2 d3 ff fb fc f3 72 77 ff ff ff fb ce d0 f5 7f 84 f3 73 78 f0 52 58 fb ca cc f4 7d 81 f1 62 67 ff ff ff ff ff ff fb d1 d3 f3 6e 73 f0 4f 55 fa c4 c6 f4 81 86 f1 64 69 f2 66 6b ff fd fd fe ef f0 ff fb fc fb cb ce f3 77 7c f3 79 7e f2 68 6d f0 55 5a f9 bd bf f5 87 8b f1 61 67 f2 6b 70 fe ef f0 ff fb fc fb cb ce f3 77 7c f0 52 58 f9 b6 b9 f5 8d 91 f1 5f 65 Data Ascii: PNGIHDRW?sRGBYPLTEy}tygljons+2'$,fk8?]c.5Z`y}TZrwsxRX}bgnsOUdifkw\|y~hmUZagkpw\|RX_e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
400	192.168.2.4	50281	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2162	OUT	GET /Areas/LNRS/img/placeholders/Download_svg.svg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:44 UTC	651	IN	HTTP/1.1 200 OK Connection: close Content-Length: 959 Content-Type: image/svg+xml Last-Modified: Fri, 12 Apr 2024 05:09:34 GMT ETag: "0bba39b978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:44 GMT Age: 0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120041-DFW, cache-pdk-kfty2130049-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1713460605.883787,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:44 UTC	959	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0d 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
401	192.168.2.4	50284	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2429	OUT	GET /Areas/LNRS/img/tag_icon.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	750	IN	HTTP/1.1 200 OK Connection: close Content-Length: 204 Content-Type: image/webp Etag: "VZkINo36vuh8LFCryg1qraaTi0XFAg/Dbl+A8IfBN2c" Fastly-Io-Info: ifsz=249 idim=17x17 ifmt=png ofsz=204 odim=17x17 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:45 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210063-DFW, cache-pdk-kfty2130038-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460605.138408,VS0,VE79 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:45 UTC	204	IN	Data Raw: 52 49 46 46 c4 00 00 00 57 45 42 50 56 50 38 4c b7 00 00 00 2f 10 00 04 10 a7 a0 a8 91 24 a5 fd fb dc dd 63 be 1f d9 50 dc 36 92 92 fe fb dc dd 63 be 1f 29 6e 1b 49 49 ff 7d ee ee 31 df 8f d4 44 b2 d5 fc fa 13 15 60 81 2a 76 f8 41 16 02 a8 a8 f0 80 08 5c 64 02 80 ff bf 02 34 80 6b ad 12 42 48 ff ff b7 f7 8e 21 84 01 cc 31 46 03 fe 39 a7 8b 48 05 7e 4a 29 b4 d6 f2 7b cf bc f7 38 20 01 04 83 46 92 14 f5 33 f3 f8 37 bb f4 12 22 fa 4f 30 49 d3 dc 33 4d e7 d6 12 d7 c9 6f ce 8a d2 de fb 31 49 ef 4e 7f 98 d8 0d 0c 32 a1 a7 87 49 51 2b e9 1c a7 4b 89 59 7e ff 2d a5 6f c5 14 77 d2 07 c9 13 e1 a9 f2 b0 6c 58 00 00 Data Ascii: RIFFWEBPVP8L/$cP6c)nII}1D`*vA\d4kBH!1F9H~J){8 F37"O0I3Mo1IN2IQ+KY~-owlX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
402	192.168.2.4	50283	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:44 UTC	2505	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:45 GMT Via: 1.1 varnish ETag: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" Age: 41 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130081-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460605.137014,VS0,VE3 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
403	192.168.2.4	50282	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:45 UTC	2251	OUT	GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-270x170.jpg?h=170&iar=0&w=270&hash=7919C829305E7DE80573C4DD67D91B54 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	883	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14278 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="WildlifeTraffickingWhitePaper-270x170.jpg" Content-Type: image/jpeg Etag: "gZu1/avgO7DJ+m/37HKSVDSWTkhW8X63gMmPQC5xuY4" Fastly-Io-Info: ifsz=26170 idim=270x170 ifmt=jpeg ofsz=14278 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1 Date: Thu, 18 Apr 2024 17:16:45 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210097-DFW, cache-pdk-kpdk1780135-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460605.110541,VS0,VE85 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ea 45 9c ff 00 2a 4b 17 a6 cd e9 58 a2 d7 cd f4 ca 6f f3 dd f7 1a c8 6c d5 e2 d1 7b 65 9f 49 e8 08 80 95 eb 2e 01 68 1c 22 6f 24 6b 2b 05 1b 33 5d 66 b3 75 52 67 40 2d a2 4c d5 e7 17 da 4a 99 1b cf 5b f9 db fd 65 fa e7 36 fa 86 e4 60 bd 6f 07 8e 19 8a d0 36 3a a6 9a 57 02 d5 93 7e a0 35 63 64 8d 73 99 cb 69 52 a5 4d 06 2d 74 ad 17 5d 0f df 2f 49 dd 65 b2 8b 98 b6 fe 57 4a 08 75 d2 51 9a ba c3 ee 7d 49 54 73 c1 52 54 bd ad 37 ce ef 66 ed 21 65 47 68 13 17 46 0d 2b 0f d9 96 82 ab ab 6e 08 3c 9c c6 43 0a 77 44 83 30 99 86 33 d5 18 6a 3d ab 4a 34 c3 98 23 27 9a 4f 4b ec 9d 8c f4 b2 0f 5f 67 85 0f 8b 45 ff c4 00 2d 10 00 02 02 02 02 01 03 03 03 04 03 01 00 00 00 00 01 02 00 03 11 12 04 13 21 10 14 22 05 20 31 15 23 32 30 33 42 43 24 34 40 41 ff da 00 08 01 01 Data Ascii: E*KXol{eI.h"o$k+3]fuRg@-LJ[e6`o6:W~5cdsiRM-t]/IeWJuQ}ITsRT7f!eGhF+n<CwD03j=J4#'OK_gE-!" 1#203BC$4@A
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 98 1c f5 d5 64 75 d0 9f 31 dd 90 79 30 2e 4e 0e 37 f3 b0 10 34 e4 59 8a d7 f8 6a 4d 9b 31 3d 24 cd 1c 1c 96 83 7a ec d6 13 f1 75 af 3a c5 af ce 57 24 a1 3e 27 ff 00 49 1b 1d b4 56 72 43 21 54 69 f8 2c 0e e8 ba ab f9 50 98 30 04 81 15 0d a0 83 63 40 5a 26 b3 54 75 5a f0 1e b5 82 99 a1 ae b2 c5 d2 cd b3 e6 c0 15 08 65 51 15 46 7f 11 c9 03 e6 ce 85 d8 6c bb 0b 20 3b 45 fe 4a ea 60 28 02 98 98 c9 1a 8f 04 25 9d 70 b7 85 66 c0 38 1b 82 75 0d 34 57 05 35 00 f8 05 b0 97 00 03 80 4f 8b 1d 45 83 ab 5a de 9a c4 e9 ab d0 7f 66 a9 67 f3 7f c7 1f f1 64 1e 0b 01 93 f9 58 3f 0c 01 29 3f d9 fe 0d f9 3e 58 cf f7 8f 11 04 ab fb 3f e6 bf 96 00 32 c5 fe e3 f8 a9 ff 00 8b f8 53 fc 56 5f fc bf ff c4 00 2b 11 00 02 02 01 03 03 03 03 04 03 00 00 00 00 00 00 00 01 02 11 12 03 10 Data Ascii: du1y0.N74YjM1=$zu:W$>'IVrC!Ti,P0c@Z&TuZeQFl ;EJ`(%pf8u4W5OEZfgdX?)?>X?2SV_+
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ee 97 fb 8d fe eb 75 7e d3 c5 10 bb ff 00 d8 bf dc ea e1 2a f0 11 c9 51 c9 09 23 a6 c9 ad 17 d7 92 27 74 5a 48 13 2b 84 8a b8 a7 65 78 91 70 8d 83 db de 08 8f 58 15 1e 0f 8a e2 70 1d 51 6b 71 1a 4e c0 fd ce 1a 7d 63 b6 6a 80 dc 8d da 6b e6 a5 a1 a3 c1 77 d3 bf a9 f0 53 9c a0 df 5a 63 6b 20 df 58 e8 16 aa ef 76 5f b6 85 56 bd 55 90 2d c5 7c 8f cc 54 38 37 13 ad 0f c1 59 55 5d 77 be cd 5e 07 8a f6 cd 5e d5 7b 4f 82 f7 8f 82 e1 c0 77 89 5c 21 ac f8 ae 37 b9 dd 4a b2 b2 80 d9 3b 2c a4 57 95 56 8d ea 80 0e 69 e8 bb b2 bb 87 c9 77 0a a8 3f d9 f6 23 cd 51 8d 54 21 bd 02 f6 b3 d4 2e f8 ff 00 55 df 1f ea ab 8a e5 57 1f 34 46 a1 53 fb 10 8c 7c 53 b2 90 d4 5d a2 9c d0 bb f3 3c d5 14 cd 17 d5 4b 5b 75 57 b4 2b cf 65 3e c7 75 77 55 95 be c1 31 64 f7 61 57 53 54 00 a3 Data Ascii: u~*Q#'tZH+expXpQkqN}cjkwSZck Xv_VU-\|T87YU]w^^{Ow\!7J;,WViw?#QT!.UW4FS\|S]<K[uW+e>uwU1daWST
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 68 b8 77 53 b5 90 71 05 d5 ba 14 00 ec 9b 6d 3c 51 33 1f 55 dd 26 68 48 42 95 e4 8d 6e a6 65 a2 50 9d 84 9b 5d 6d 45 03 46 d5 0a ee a1 ae 8e 48 41 44 4c 90 6b c9 46 ba c2 cb cc 55 3f 8e 22 fb 2e 17 d4 6b 12 b3 d4 2a 8d 55 90 a0 ea 8c b7 c8 27 65 3a 2c ce ad 35 2a 1c 66 13 40 67 9a 20 0e 2f c4 8e cd 17 47 82 96 28 f1 40 98 47 61 75 fb 04 2b 26 b2 53 a6 f7 46 41 e8 b8 47 82 a9 1c ea 8e 5d e8 81 cd 45 c4 1d 03 49 a2 bd 91 9d 94 32 9a 2e 68 cf 9a db 55 31 ef 49 44 c8 98 50 19 73 f2 51 97 84 89 72 1e e9 81 4e c2 9b d0 a8 d3 64 d4 ef fd 0a c3 e8 99 0a 10 0b f9 b2 c4 eb fb 21 4d 53 bf 9a af 04 cf d2 b0 fa 9e c6 fe 85 8c bf c0 23 e2 bc be 6b 17 f5 a6 7e 92 85 34 4d ff 00 24 fe a5 35 0e 8b 13 f4 85 e0 bc 96 1f e8 5f ff c4 00 27 10 01 00 02 02 02 02 01 04 03 01 01 Data Ascii: hwSqm<Q3U&hHBneP]mEFHADLkFU?".kU'e:,5f@g /G(@Gau+&SFAG]EI2.hU1IDPsQrNd!MS#k~4M$5_'
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 56 76 d8 3a b8 96 40 62 db bc 74 8a b6 c8 51 36 e6 34 05 52 c2 94 89 42 8a c7 45 ff 00 23 ff 00 63 c4 d4 d5 ef db 13 05 e5 38 10 69 dc 61 f9 31 b0 85 88 b5 28 36 f1 70 26 72 62 ec 1e 3a 94 53 0d ed 9e 31 03 76 f4 5c 3d 77 2a 2d b8 b3 9f 79 83 5b b5 af 75 dc 70 b4 5c 20 3d 90 8e 5a c5 e7 33 ee 63 c2 40 42 cc 2b 07 fd 52 a3 05 ba 28 ef 7d c0 6c b0 c0 5a 27 52 bc 62 9a 33 0c 3e aa 07 62 a0 15 4a 86 be c4 af 8d 78 35 ea a5 da 06 2d 36 ee fb 59 4d 22 b9 b7 5a 3c 11 a1 76 4a 06 ae 6f 44 a8 4c cd 5c 3c c2 df 34 7f 7b 84 0c e9 d0 dc 1c 51 6e 39 eb dc b7 73 70 bf 3e 42 c3 ca 6a 3c 58 dd a1 9a 31 97 b0 74 f7 e2 78 c2 17 0f 09 00 e4 61 25 76 13 23 4f f1 28 12 0a d1 40 f6 9a 89 d2 2f 5b ba 99 ac 16 91 5d a5 96 59 72 33 df 89 4c 9a 55 f2 9f 10 12 a4 2e cf ea 6c 95 da Data Ascii: Vv:@btQ64RBE#c8ia1(6p&rb:S1v\=w*-y[up\ =Z3c@B+R(}lZ'Rb3>bJx5-6YM"Z<vJoDL\<4{Qn9sp>Bj<X1txa%v#O(@/[]Yr3LU.l
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: a4 39 ca e0 7c 47 b0 d1 c9 aa b8 91 d2 c1 5c 1b e0 97 eb 3b 1a 57 fa 82 61 bf 93 9f 3f 98 a2 ef 6f df d4 00 d9 55 55 b3 1a f8 88 cd ce 11 9f e2 1b 25 f6 98 d5 64 cf 9f 30 5b d1 82 c7 2e e1 b4 85 d9 c4 67 25 34 0e ae f9 f5 04 21 4b c3 cc cd 6d 02 1a 2a d4 01 30 5d 97 c2 c2 a3 ad 6b c1 fc c6 68 d0 fc a3 c7 42 ef fb 26 c9 ba ff 00 3f 10 ad df 93 67 b8 bd 5d b7 84 aa c7 30 7e 54 fd b4 fc c7 70 f0 f3 58 66 65 e8 b2 39 c5 6b f1 2d a1 45 7a 37 8d 95 89 c3 ef f8 9b 3c d9 38 3f dd 4d be 3f 0c 4d 9e ea fe 99 21 81 59 7e a1 28 ab d7 a8 02 02 ab 50 98 98 ea 6c c1 20 5b 45 f4 9f bc 86 0a c3 fe b7 73 26 f3 93 73 f7 1f 9b 9f b1 99 31 88 07 03 72 94 aa b8 80 b4 5e 38 7c 4c ac 8d 76 4c f8 99 e5 d7 ef 1a d8 dc 34 58 98 51 8c 7f 53 55 8f ec 8d a6 67 47 fc d4 d6 e2 b3 ff da Data Ascii: 9\|G\;Wa?oUU%d0[.g%4!Km*0]khB&?g]0~TpXfe9k-Ez7<8?M?M!Y~(Pl [Es&s1r^8\|LvL4XQSUgG
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 41 cc 48 80 1b d5 e3 50 f0 aa bc 99 3f b8 41 55 a5 2f 2d 45 e8 02 90 5d 27 30 fe 81 bb 38 78 86 18 45 5b c4 a1 bb 20 e7 77 17 90 c1 4b 57 11 00 96 b8 82 b4 02 00 17 72 80 e0 d8 59 c1 fb 85 8b 6b 3a a5 ce a0 01 be 53 1e 25 40 f7 30 97 17 5e e6 e9 48 7d fb 11 c1 e3 10 a6 d4 58 8c c2 d6 42 0f 49 dc b5 46 b3 41 0c c7 a2 e7 64 2f 1d 41 aa 06 2f 3b 95 61 18 36 92 b1 79 cf 70 6f d0 55 6a a2 da ab e5 4b 01 84 f0 b6 23 1c 05 5d 34 d4 18 0f 0a e3 96 2b 8c 9b 7e 67 b4 45 fe 25 28 e1 90 c4 5d 99 76 a4 d5 5b 6c 60 d4 ef a1 8f 5e b1 0a 35 b3 86 a0 e0 1e 2d fe c5 81 83 75 59 e6 0e 2b 76 51 a8 24 80 f1 71 1e 0b 21 45 7f d8 86 f0 75 a3 72 d2 a2 8a 70 a1 15 0c eb 84 a8 b7 93 ed 33 08 70 57 19 85 5c 2b 34 18 f1 29 38 f0 a6 15 12 86 2a 5c 1b 6f 10 56 96 ef 9e a5 02 bd 92 f0 Data Ascii: AHP?AU/-E]'08xE[ wKWrYk:S%@0^H}XBIFAd/A/;a6ypoUjK#]4+~gE%(]v[l`^5-uY+vQ$q!Eurp3pW\+4)8*\oV
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 61 a7 89 d8 84 34 e9 c9 88 9c cb 07 7e b2 62 b7 e0 b5 97 b5 71 0a c1 eb 10 4c 22 58 6b 27 8d 61 22 cc 1d 4c 8f bc 18 d8 52 a5 b3 6d ba 36 1e 88 c1 6b 85 a0 c1 e3 44 b8 09 08 d4 21 ce 3a f4 a2 92 04 8d 1e 70 f9 ec 20 d2 39 11 38 2e c0 1f d9 86 34 8a 08 34 83 eb 05 a6 91 61 b1 c6 46 09 45 68 1c 3b c1 90 d8 2f 22 bd f7 90 58 89 4a 8d 62 a9 71 60 60 3b 9e 5c 66 2b 44 01 8e 65 cd 6f 21 9a 91 09 92 a4 ad 3f 8c 79 25 08 28 90 9f ef 34 a9 cc c1 13 1a d7 8c 50 31 37 e3 07 e0 3f 9c 9a 43 f0 96 45 56 78 27 20 e6 be b1 2a 93 e8 c0 3f f3 80 3f 24 aa c0 b3 94 b8 42 29 34 c0 7a 80 45 26 f5 14 9c 56 29 01 5a 40 ed f0 c3 0a 52 b3 04 52 9e 4e 28 91 3a 94 64 3a 28 15 9e 98 48 20 03 a1 b4 fa 57 8d 62 a7 ce 05 81 09 e5 38 f1 8e c8 69 1a 1b 7f 7e 32 e1 cc 38 87 ef 1b c4 8d 7d Data Ascii: a4~bqL"Xk'a"LRm6kD!:p 98.44aFEh;/"XJbq``;\f+Deo!?y%(4P17?CEVx' *??$B)4zE&V)Z@RRN(:d:(H Wb8i~28}
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: b1 3a 53 9c b9 a6 c2 6a 9f 53 38 c6 4e d4 92 60 fc 30 1d c0 43 58 11 f8 bc e0 07 54 3a 25 64 84 84 72 08 36 cf 5a 8c 12 04 78 12 81 d6 06 06 f5 85 17 9b ac 94 b6 c2 82 92 94 1d e3 64 54 04 44 f7 1f 78 06 0b 80 22 93 1e 7c e4 62 42 a1 05 3f 32 19 71 46 c8 88 84 c8 9d 79 c7 09 b8 01 53 95 de 49 b9 20 48 7c 09 c8 8b 6c 0b 00 d3 f1 fd 61 5d a5 65 a4 41 79 83 59 10 63 e1 16 49 21 81 3a c6 20 60 60 c1 bf 02 16 f2 60 61 fc 91 51 49 49 a4 5e 39 51 25 26 51 d2 33 70 4c ef 19 c8 08 22 28 b8 1d 9a 61 dd 1b c2 ca 24 00 19 84 8b 71 3b 2c 8f 03 cd 6b ac 18 52 a0 f2 3b f3 c6 75 91 50 91 0c 7b ad e6 e1 c4 01 83 8f 15 78 19 67 59 a4 ae c3 e6 be f2 b0 b1 24 52 1d 9e d7 9c 26 5e 40 b0 c8 2c c0 4a 83 e1 90 68 6b b8 c9 c9 16 e6 c3 9b 7f 6c 4b 12 24 c3 a2 8e f1 68 a5 c1 4d 07 Data Ascii: :SjS8N`0CXT:%dr6ZxdTDx"\|bB?2qFySI H\|la]eAyYcI!: ```aQII^9Q%&Q3pL"(a$q;,kR;uP{xgY$R&^@,JhklK$hM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
404	192.168.2.4	50287	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:45 UTC	2251	OUT	GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-600x570.jpg?h=570&iar=0&w=600&hash=BE1263DEFABDE72A7F0B006766788148 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	932	IN	HTTP/1.1 200 OK Connection: close Content-Length: 46277 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="WildlifeTraffickingWhitePaper-600x570.jpg" Content-Type: image/jpeg Etag: "s8jGKVLie0MM1CqVB1ffCyFwXigKo28rS+BDFcxXUVk" Fastly-Io-Info: ifsz=46277 idim=600x570 ifmt=jpeg ofsz=46277 odim=600x570 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010212 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551284 Date: Thu, 18 Apr 2024 17:16:45 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120074-DFW, cache-pdk-kfty2130069-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460605.257049,VS0,VE146 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 05 05 04 06 05 05 05 07 06 06 07 09 0f 0a 09 08 08 09 13 0d 0e 0b 0f 16 13 17 17 16 13 15 15 18 1b 23 1e 18 1a 21 1a 15 15 1e 29 1f 21 24 25 27 28 27 18 1d 2b 2e 2b 26 2e 23 26 27 26 ff db 00 43 01 06 07 07 09 08 09 12 0a 0a 12 26 19 15 19 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 26 ff c2 00 11 08 02 3a 02 58 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 04 05 02 03 06 01 07 08 ff c4 00 1a 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 fd 52 00 00 00 00 Data Ascii: JFIFC#!)!$%'('+.+&.#&'&C&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&:X"R
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 8d 13 f4 3b 1e 1b b8 d3 9b d1 6a 00 00 00 00 00 00 39 ce 8e 39 f9 b3 e9 b5 5c d5 eb f4 cc b5 e7 d1 97 86 b4 67 86 29 8c a9 b4 f1 1d 18 c8 99 c3 e1 d9 87 49 ce e7 b7 5c e3 ee cb 6e 99 c5 dd b7 2b 57 dc b3 e8 79 f7 e6 33 e8 22 f2 75 c5 b2 ea ab bc cf 4a bb 39 31 b9 3b 36 5b cb 8d cf b4 e8 36 55 93 10 62 ef e6 d7 b4 af ce 75 6d 3a c3 9b a8 cf 4b d8 9c c6 dd 69 d1 50 e5 03 5c 7b 3e 87 90 ea eb 16 0a dc 6f 95 8c da 2e 8e f9 d4 eb 99 4f 31 37 6d 6c a9 4d 6b d9 59 f4 d4 99 bd 97 cf ad d4 fa 3a 3c 8d 79 80 00 00 00 00 00 1e 7a 39 3f 85 fe 94 f8 d1 d3 c9 e0 3b be be 6c f4 6f 8f ad 33 e3 78 ca 4e de 4f 33 df 97 5f 3e 59 e5 94 cf 8d d9 2a f7 a1 e7 38 7b f7 c9 b8 8f 86 d3 a9 a9 34 f8 7e f5 a2 1e ca de fe cf 95 8f 59 ec 34 fc eb b4 95 b6 fe 6b 2a cf 4d 02 b4 4c ac f3 Data Ascii: ;j99\g)I\n+Wy3"uJ91;6[6Ubum:KiP\{>o.O17mlMkY:<yz9?;lo3xNO3_>Y8{4~Y4kML
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 00 56 fc 43 ef df 3e 3e 4b cf de 73 5c fb 4c dd ef 3f cb ac da b9 f1 3b f5 91 6b c8 7e 94 ad 7e 37 55 97 5f 4d be a9 f9 63 e8 3f 1e e8 e2 ee 7e 7b d4 f4 98 69 f2 ee aa 37 4b 38 c3 bc e9 7e 79 cf d5 d1 e7 94 bd 75 f2 7f 37 5f e7 e3 ce 75 79 74 d6 c6 3d bd c6 ef 1f a6 2e fb 18 fc d6 87 2b 1c 27 3f 77 44 d0 4e 87 82 d3 96 88 ba ef 59 11 f7 c5 94 4d 16 11 3a 2b 07 4d 8e 5b 4c 1d 5b 62 ea b4 bd e2 fd b5 7e 8d 3b 8c ba e9 a5 ac 5f 5b 67 1f c9 d9 4c 45 d3 67 82 74 25 40 bc f6 ff 00 4d fc f3 f6 ee 8a dc 09 a0 00 00 00 00 00 a7 b8 d6 7e 76 ae fa 77 ca f1 bf 3d cb ca b7 f3 bb fb df 9a fd cb e4 f3 9f 09 fa 4f f3 7b d9 c6 fe 75 64 ce 5e 99 bf 3b ee ef b1 cf e4 9f 5c f9 4f 56 cf b6 a2 e8 29 7c 4d 6d 79 b9 12 76 a5 55 cc b9 fd bb d3 f5 fa 6c fc 9b 48 ce b2 1f 9f 9d b6 Data Ascii: VC>>Ks\L?;k~~7U_Mc?~{i7K8~yu7_uyt=.+'?wDNYM:+M[L[b~;_[gLEgt%@M~vw=O{ud^;\OV)\|MmyvUlH
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ea c2 89 11 f5 ec 98 ae c7 af e8 f6 8f 9c 75 97 d0 f5 4f d1 ae 75 a2 ae 4d bd 91 47 27 b1 e9 4f 9c 5c fd 3e dc f9 c5 f7 6b b8 e7 6c 6c c4 6d d9 8f 3d 00 00 00 00 00 00 00 00 00 08 9f 1e fb 5f 1a 7c 1f 8b ee b9 5e 5b 53 d8 d7 cb e5 be e4 35 63 64 8c bb 8d 51 a5 57 f2 48 ec b9 ca 5d 51 16 b5 3b 6e 2d 14 3b ad f7 d9 8c fe 7a 34 ba 3e 2e 75 ed dc 87 47 16 ba ce a2 17 1b 3a a9 31 ad 7a 69 70 f7 bd 54 3d 19 6f 81 3b 44 4f 2e ac 66 29 26 75 fd 49 f3 ae 83 e9 37 07 0b d1 f4 3b 08 12 f6 0f 3d 00 00 00 00 00 00 00 00 00 00 00 00 04 09 f8 9f 08 e2 be e1 f1 8a cf 05 e5 8d 4f 9f 79 3e c4 d6 6e d7 16 e2 f5 ab d7 d0 4e d2 b5 76 fc 9e 99 8e bf 9b f6 da ca e9 fb ab 62 6f f6 fc d2 6d 57 b5 32 ba 24 f2 9b be 81 ab 55 65 c5 76 dd 59 c6 b5 9f 31 4b 3f a6 ea 0e 06 fb e9 37 a7 Data Ascii: uOuMG'O\>kllm=_\|^[S5cdQWH]Q;n-;z4>.uG:1zipT=o;DO.f)&uI7;=Oy>nNvbomW2$UevY1K?7
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: e0 96 78 a6 82 18 fa d4 4b 16 1e 65 0a f5 7b c8 48 fa 78 ce cc 83 fd db c2 73 79 bc 2f 8c 5b 5b 3d bd 8c 8a 53 e3 2d 80 86 95 9b 2b dd fb f8 3c 5f 51 19 4b 31 54 ad a2 11 e3 fa 62 64 4e 55 be 92 24 b4 24 49 65 b3 39 41 30 e3 ec ea dc 7c c5 42 ee cd 6b 9b e2 bb 2f 82 f5 a7 bd 3f 98 c5 1e b2 1c 83 00 fc 8e ce 0c d8 d6 06 cf e7 fd ba ca 33 fd 3c e1 f0 10 46 c7 ec df f4 e7 3f 65 a1 b9 14 b9 5e 61 34 2b 20 ed 87 64 60 19 c8 54 8e ed 47 ac f6 78 3e 59 37 16 70 ff 00 85 a7 fa 95 9f 91 c8 eb 40 9b d0 f5 f6 de 03 83 f3 de 6f 3b 61 7c ff 00 ec b6 3c b1 a2 f6 90 5a 6e fd 56 5f 5b 38 c7 c6 8d b8 91 23 46 88 75 7f ea 29 75 10 52 fa 80 66 68 a3 8e de 6d 4e ba f2 13 c8 03 7d 25 fb f0 d8 ab 2a ca 39 b9 8d 05 81 ed 5e 96 d7 8c be d9 8e d9 63 de 2a 2a fd 97 22 d8 c8 99 bf Data Ascii: xKe{Hxsy/[[=S-+<_QK1TbdNU$$Ie9A0\|Bk/?3<F?e^a4+ d`TGx>Y7p@o;a\|<ZnV_[8#Fu)uRfhmN}%9^c*"
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: fb cf 3b 47 f0 5a 08 56 4e f6 2c 72 5f fe b3 72 32 36 f6 25 0e 9d c7 ae 84 c9 62 68 98 c6 89 52 c6 d3 21 f2 78 87 51 2e 86 b0 38 d1 ec 65 64 23 b6 b6 bb 0f b5 ce f8 5f 59 1b 7f 8d 06 6e d8 41 d8 39 18 3f cc a4 2c db 68 5f f9 ce 3a c8 7d c2 7f 65 32 f6 5c e7 aa 7a 6c fc 39 63 c5 2b d4 71 f9 37 f9 fc bd 60 ce 53 92 8a 92 f4 15 98 34 33 5d b2 d3 cb 30 d0 6e d2 be db a6 97 d9 55 00 13 f2 7d 01 d3 a8 f4 a9 eb 79 ec 9c 48 9d db aa c5 c7 7c 37 33 d6 a5 10 2c 60 4b 22 60 63 3b 61 f0 79 09 f4 bb 2e 3d 98 a3 90 af 60 7a 2a b0 80 9e f1 97 32 2f a0 5c ff 00 57 1e 70 f1 b2 92 ce 64 f8 c3 30 57 07 23 8d 60 97 e7 2c ee 77 a6 b9 2a f6 8c f9 24 6f 59 f3 27 c8 3c 52 39 0e f6 1e 08 ed 12 dc 79 56 8c 3a c5 28 e9 8f 2f 5f 96 17 67 1e 93 d1 03 23 fd 39 65 7d 7a ed e8 67 f3 8a Data Ascii: ;GZVN,r_r26%bhR!xQ.8ed#_YnA9?,h_:}e2\zl9c+q7`S43]0nU}yH\|73,`K"`c;ay.=`z2/\Wpd0W#`,w$oY'<R9yV:(/_g#9e}zg
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 63 6b 25 f9 7d a2 ed db e2 9e 97 79 d5 59 0a 14 9f ac cf 52 78 d8 c2 e4 67 52 87 71 06 5d 7a de 8e 6c fd d8 7f 8c e2 dc 98 2c 57 c9 7e 3a ef 39 de f2 81 1d 01 cf c5 d6 ba 8a b0 35 59 a7 2e 54 cf 10 b1 11 62 ef 2a 6c 67 8d c0 c2 08 fb e8 7d d6 b4 ed 04 a2 44 e1 ef 2c d1 f6 15 2c 2e b2 27 56 cf d4 ba c9 f8 79 a7 b3 24 89 7f 8c b3 55 7b 15 fd 43 2b 11 1c eb aa b2 89 63 04 c8 03 06 0d 72 a7 8d e3 29 5e 5f 98 18 19 7a ff 00 53 8b 9b 6a 6b b7 ec 5c 6c 67 39 57 6a 72 a7 f4 ed c9 55 ca 15 24 36 b5 ed b6 5b f4 8e c7 ee a9 9a 19 39 3e 02 14 29 eb e5 c4 97 67 78 3c 72 40 c7 2b d7 0b ec b4 de ba ad 97 ec 06 ec b9 76 52 1c f4 3b 02 db 30 05 03 93 8e ff 00 e5 ce 86 f2 ac 43 d9 c4 03 24 0b d7 df 34 9a 92 07 c8 a4 ee 83 cb 1b 10 35 84 8f 6d 80 eb 7d bb 0f fc 9e 41 ac e2 Data Ascii: ck%}yYRxgRq]zl,W~:95Y.Tb*lg}D,,.'Vy$U{C+cr)^_zSjk\lg9WjrU$6[9>)gx<r@+vR;0C$45m}A
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: a9 b5 96 69 5b b7 c6 d9 92 b0 23 60 e7 2f 18 fa 64 9d 78 b6 ef 2b 55 7b 35 d9 09 cf c3 f3 98 ac bc 06 09 7d 6b 24 fe a3 7c 82 aa 0e 86 ff 00 f4 64 2a bd 9e 49 0b 3b ca 57 a1 41 eb 1d fc b5 3a e0 c8 13 bb 6b 02 c9 34 c7 aa 39 ad 38 93 23 b6 8f d2 ca 41 38 48 9f 77 ab 7d 4c 82 78 f8 96 2c 7a 28 31 4b 11 4c 84 c5 11 ea f0 a2 49 06 b2 c5 2b f2 d8 48 31 11 c0 04 5a 95 7a 11 9f 16 b7 e2 65 86 54 42 52 48 99 c9 ce e1 5f 69 f5 7d 7a 20 49 83 fc 96 37 d7 a3 13 79 17 4c e0 1f 81 28 c0 69 3f 4a 61 93 5f 6e e7 d6 9a 4d 60 60 fb c6 2a 40 31 f1 fc 97 d1 5b 56 70 41 1b 1f b0 b2 9d 90 e7 3d 57 ef 9f 87 a7 06 36 ad 27 35 c6 c7 2c a9 62 98 63 15 89 02 56 99 2c 0f 2a 49 3f c7 d4 ac 18 ef 21 51 2c fb ca cd a8 4c 46 57 52 b9 b1 bc 9e d3 c3 60 39 fc 32 52 7e 06 93 ac c9 e3 b1 Data Ascii: i[#`/dx+U{5}k$\|dI;WA:k498#A8Hw}Lx,z(1KLI+H1ZzeTBRH_i}z I7yL(i?Ja_nM``@1[VpA=W6'5,bcV,*I?!Q,LFWR`92R~
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ac cb 91 3f c7 a6 45 f7 2a cb 29 6f 8c 9e 45 67 23 34 ad 22 31 94 92 a4 06 67 1a 39 73 75 fc 99 7d dd 2d 19 02 dd 94 59 55 02 77 74 3a 85 c1 2a e9 04 81 ba 33 84 1b 07 23 62 36 ab 1b 3f 5f 9b 7b 38 48 53 b0 0e f3 5b d8 03 a1 4f 97 01 78 55 b5 d5 bf 60 e3 63 39 ca bb 07 2a 7c 2c cb 51 8e c0 b1 0c b1 03 6d 0a a7 23 d6 3b 11 c4 39 b8 48 7f 29 93 d6 5e bb 66 5a 30 d1 cf c3 c8 66 a7 76 1c ff 00 cb 3f c6 7e 20 86 0e 47 88 4e 47 2b ab 18 9c 65 05 91 41 28 f6 3b 41 f2 32 85 91 15 27 32 46 35 89 56 77 8d a5 4a 54 44 56 bc f9 66 46 8a da 88 93 b7 c1 9b 7a eb e1 90 87 56 55 9a 62 81 89 2c de 42 85 7e 0f dc 16 d9 f9 56 07 ca dd c3 31 2e 03 4a d1 80 19 64 91 fa f5 f3 05 f8 31 93 71 17 c8 ac 87 91 a3 cf 19 93 b8 6f 2e a4 64 7e dd 5b ae 46 59 34 73 aa 9f 66 44 48 e5 0e Data Ascii: ?E)oEg#4"1g9su}-YUwt:3#b6?_{8HS[OxU`c9*\|,Qm#;9H)^fZ0fv?~ GNG+eA(;A2'2F5VwJTDVfFzVUb,B~V1.Jd1qo.d~[FY4sfDH
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 18 86 88 ac 71 f9 49 64 2c df 1e d9 09 d0 3d dc 0f be 17 d0 0d 92 ed 98 69 0e a1 73 1b f8 b8 e9 78 fe 43 1e a7 1f 17 2c f4 24 96 ac 77 38 98 b8 cc ab 6c 71 46 c5 72 39 4b 6f 14 51 c9 24 8c f2 17 7a 90 49 62 c7 8a bf d3 58 96 b4 90 2a 45 5a bf 19 5a f4 f5 7e 9a b3 c5 e2 86 58 aa 56 bb c4 5f 1f 2f 99 57 3f 70 25 20 6f 20 91 59 31 1f a8 d6 40 fb f4 57 d9 f4 de 80 38 ba fb 1f b6 00 be d8 76 0c 70 0e b8 3b 6c 6b 8d 96 69 a9 44 f3 ff 00 df b2 9d d0 e7 3d 57 ef 94 db cb 42 4a e5 59 87 f4 cf 6d 1c f9 6f e3 33 91 8e 4b 7c 90 bf e8 5c 89 ff 00 54 98 f2 77 5d 64 3e 48 88 0f 23 ab 2e b1 a4 62 36 1d ba a1 2d 3f 27 17 89 55 5e f4 e4 15 43 f2 3b 6a 16 5c 44 57 14 a2 86 8d 74 11 99 d7 c9 df d3 cc e0 90 f8 b3 3c ce f2 c9 37 ce 12 1e 3f d2 43 7e b4 7e 8a 25 df 73 23 fc c9 Data Ascii: qId,=isxC,$w8lqFr9KoQ$zIbX*EZZ~XV_/W?p% o Y1@W8vp;lkiD=WBJYmo3K\|\Tw]d>H#.b6-?'U^C;j\DWt<7?C~~%s#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
405	192.168.2.4	50286	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:45 UTC	2504	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:45 GMT Via: 1.1 varnish ETag: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" Age: 39 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130080-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460605.257107,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
406	192.168.2.4	50289	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:45 UTC	2461	OUT	GET /Areas/LNRS/js/LNRS.bundle.js?v=638484955464930367 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2035967 Content-Type: application/javascript Last-Modified: Fri, 12 Apr 2024 05:25:54 GMT ETag: "0ddc3e3998cda1:0" Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Cache-Control: max-age=604800 Accept-Ranges: bytes Age: 554873 Date: Thu, 18 Apr 2024 17:16:45 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210109-DFW, cache-pdk-kfty2130065-PDK X-Cache: HIT, HIT X-Cache-Hits: 29, 0 X-Timer: S1713460605.277696,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 73 2f 56 69 64 65 6f 4d 6f 64 61 6c 42 75 74 74 6f 6e 22 2f 3e 0d 0a 64 65 66 69 6e 65 28 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 73 2f 56 69 64 65 6f 4d 6f 64 61 6c 42 75 74 74 6f 6e 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 6a 71 75 65 72 79 22 2c 20 22 65 76 65 6e 74 4d 61 6e 61 67 65 72 22 2c 20 22 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 69 66 72 61 6d 65 5f 61 70 69 22 2c 20 22 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 61 70 69 2f 70 6c 61 79 65 72 2e 6a 73 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 65 78 70 6f 72 74 73 2c 20 24 29 Data Ascii: ///<amd-module name="Components/Buttons/VideoModalButton"/>define("Components/Buttons/VideoModalButton", ["require", "exports", "jquery", "eventManager", "//www.youtube.com/iframe_api", "//player.vimeo.com/api/player.js"], function (require, exports, $)
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 70 61 75 73 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 2e 62 69 6e 64 28 74 68 69 73 29 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 68 69 73 2e 73 68 6f 77 56 69 6d 65 6f 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 69 64 65 6f 49 64 20 3d 20 74 68 69 73 2e 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 69 66 72 61 6d 65 27 29 2e 61 74 74 72 28 27 69 64 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 76 69 64 65 6f 49 64 29 3b Data Ascii: { this.pause(); } } }.bind(this)); if (this.showVimeo) { var videoId = this.$scope.find('iframe').attr('id'); console.log(videoId);
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 20 20 7d 29 2c 20 22 2a 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 56 69 64 65 6f 4d 6f 64 61 6c 42 75 74 74 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 75 73 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 24 73 63 6f 70 65 2e 66 69 6e 64 28 27 69 66 72 61 6d 65 27 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 67 65 74 28 30 29 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 27 65 76 65 6e 74 27 3a 20 27 63 6f Data Ascii: }), "*"); }; VideoModalButton.prototype.pause = function () { this.$scope.find('iframe') .get(0) .contentWindow .postMessage(JSON.stringify({ 'event': 'co
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 73 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 6a 71 75 65 72 79 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 65 78 70 6f 72 74 73 2c 20 24 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 20 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 20 7b 20 76 61 6c 75 65 3a 20 74 72 75 65 20 7d 29 3b 0d 0a 20 20 20 20 76 61 72 20 55 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 73 20 3d 20 2f 2a 2a 20 40 63 6c 61 73 73 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 20 28 Data Ascii: nobtrusiveValidationExtensions", ["require", "exports", "jquery"], function (require, exports, $) { "use strict"; Object.defineProperty(exports, "__esModule", { value: true }); var UnobtrusiveValidationExtensions = /** @class */ (function (
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 3d 20 24 28 73 65 6c 65 63 74 6f 72 29 2e 66 69 72 73 74 28 29 2e 63 6c 6f 73 65 73 74 28 27 66 6f 72 6d 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 67 65 74 20 74 68 65 20 63 6f 6c 6c 65 63 74 69 6f 6e 73 20 6f 66 20 75 6e 6f 62 73 74 72 75 73 69 76 65 20 76 61 6c 69 64 61 74 6f 72 73 2c 20 61 6e 64 20 6a 71 75 65 72 79 20 76 61 6c 69 64 61 74 6f 72 73 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 61 6e 64 20 63 6f 6d 70 61 72 65 20 74 68 65 20 74 77 6f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 20 3d 20 66 6f 72 6d 2e 64 61 74 61 28 27 75 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 76 61 Data Ascii: = $(selector).first().closest('form'); //get the collections of unobstrusive validators, and jquery validators //and compare the two var unobtrusiveValidation = form.data('unobtrusiveValidation'); var va
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 65 6e 73 69 6f 6e 73 3b 0d 0a 7d 29 3b 0d 0a 2f 2f 65 78 70 6f 72 74 20 3d 20 55 6e 6f 62 74 72 75 73 69 76 65 56 61 6c 69 64 61 74 69 6f 6e 45 78 74 65 6e 73 69 6f 6e 73 3b 20 0d 0a 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 56 61 6c 69 64 61 74 69 6f 6e 2f 52 65 63 61 70 74 63 68 61 41 70 69 4c 6f 61 64 65 72 22 2f 3e 0d 0a 64 65 66 69 6e 65 28 22 56 61 6c 69 64 61 74 69 6f 6e 2f 52 65 63 61 70 74 63 68 61 41 70 69 4c 6f 61 64 65 72 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 65 76 65 6e 74 4d 61 6e 61 67 65 72 22 5d 2c 20 66 75 6e 63 74 69 6f 6e 20 28 72 65 71 75 69 72 65 2c 20 65 78 70 6f 72 74 73 29 20 7b 0d 0a 20 20 20 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 0d 0a 20 20 20 20 4f 62 6a 65 63 Data Ascii: ensions;});//export = UnobtrusiveValidationExtensions; ///<amd-module name="Validation/RecaptchaApiLoader"/>define("Validation/RecaptchaApiLoader", ["require", "exports", "eventManager"], function (require, exports) { "use strict"; Objec
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 53 69 74 65 43 6f 6e 74 65 78 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 43 6f 6e 74 65 78 74 4c 61 6e 67 75 61 67 65 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 6c 61 6e 67 3b 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 53 69 74 65 43 6f 6e 74 65 78 74 3b 0d 0a 20 20 20 20 7d 28 29 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 53 69 74 65 43 6f 6e 74 65 78 74 28 29 3b 0d 0a 7d 29 3b 0d 0a 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 47 6c 6f 62 61 6c 69 7a 61 74 69 6f 6e 2f 44 69 63 74 69 6f 6e 61 Data Ascii: }; SiteContext.prototype.getContextLanguage = function () { return document.documentElement.lang; }; return SiteContext; }()); return new SiteContext();});///<amd-module name="Globalization/Dictiona
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 44 69 63 74 69 6f 6e 61 72 79 3b 0d 0a 20 20 20 20 7d 28 29 29 3b 0d 0a 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 44 69 63 74 69 6f 6e 61 72 79 28 29 3b 0d 0a 7d 29 3b 0d 0a 2f 2f 2f 3c 61 6d 64 2d 6d 6f 64 75 6c 65 20 6e 61 6d 65 3d 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 46 6f 72 6d 73 2f 45 6c 6f 71 75 61 4d 61 73 74 65 72 46 6f 72 6d 22 2f 3e 0d 0a 64 65 66 69 6e 65 28 22 43 6f 6d 70 6f 6e 65 6e 74 73 2f 46 6f 72 6d 73 2f 45 6c 6f 71 75 61 4d 61 73 74 65 72 46 6f 72 6d 22 2c 20 5b 22 72 65 71 75 69 72 65 22 2c 20 22 65 78 70 6f 72 74 73 22 2c 20 22 6a 71 75 65 72 79 22 2c 20 22 56 61 6c 69 64 61 74 69 6f 6e 2f 55 6e 6f 62 74 Data Ascii: }); }; return Dictionary; }()); return new Dictionary();});///<amd-module name="Components/Forms/EloquaMasterForm"/>define("Components/Forms/EloquaMasterForm", ["require", "exports", "jquery", "Validation/Unobt
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 66 6f 72 6d 4e 61 6d 65 20 3d 20 22 42 75 73 69 6e 65 73 73 20 53 65 72 76 69 63 65 73 20 52 65 67 69 73 74 72 61 74 69 6f 6e 20 46 6f 72 6d 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 73 50 72 65 76 69 65 77 20 3d 20 24 28 22 62 6f 64 79 22 29 2e 61 74 74 72 28 22 69 73 2d 70 72 65 76 69 65 77 22 29 20 3d 3d 3d 20 22 54 72 75 65 22 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 5b 6e 61 6d 65 3d 22 43 6f 75 6e 74 72 79 22 5d 27 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 29 2e 6f 6e 28 27 63 68 61 6e 67 65 27 2c 20 74 68 69 73 2e 6f 6e 43 6f 75 6e 74 72 79 43 68 61 6e 67 65 64 2e 62 69 6e 64 28 74 68 69 73 Data Ascii: this.formName = "Business Services Registration Form"; } this.isPreview = $("body").attr("is-preview") === "True"; $('[name="Country"]', this.options.scope).on('change', this.onCountryChanged.bind(this
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 20 66 6f 72 20 73 6f 6d 65 20 72 65 61 73 6f 6e 20 69 6d 70 6c 69 63 69 74 20 69 6e 69 74 69 61 6c 69 7a 61 74 69 6f 6e 20 64 6f 65 73 6e 27 74 20 77 6f 72 6b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 73 65 6c 65 63 74 70 69 63 6b 65 72 27 2c 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 63 6f 70 65 29 2e 73 65 6c 65 63 74 70 69 63 6b 65 72 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 48 69 64 65 20 76 61 6c 69 64 61 74 69 6f 6e 20 65 72 72 6f 72 20 6d 65 73 73 61 67 65 20 66 6f 72 20 73 65 6c 65 63 74 70 69 63 6b 65 72 73 20 69 6e 20 63 61 73 65 20 69 66 20 75 73 65 72 20 73 65 6c 65 63 74 65 64 20 76 61 6c 69 64 20 76 61 6c 75 65 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 73 65 6c 65 63 74 27 2c 20 74 68 69 73 2e 6f 70 Data Ascii: for some reason implicit initialization doesn't work $('.selectpicker', this.options.scope).selectpicker(); // Hide validation error message for selectpickers in case if user selected valid value $('select', this.op

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
407	192.168.2.4	50290	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:45 UTC	2206	OUT	GET /-/media/images/lnrs/icons/download%20svg.svg?iar=0&hash=06D88EFA3785CDBEE6D8D56186DBFC35 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	727	IN	HTTP/1.1 200 OK Connection: close Content-Length: 943 Content-Type: image/svg+xml Last-Modified: Fri, 31 Mar 2017 20:02:13 GMT Content-Disposition: inline; filename="Download svg.svg" Xhost: SC102CD2 cache-control: public, max-age=604800 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:45 GMT Age: 397029 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120133-DFW, cache-pdk-kfty2130059-PDK X-Cache: HIT, HIT X-Cache-Hits: 2, 1 X-Timer: S1713460605.325974,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:45 UTC	943	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 31 2e 30 2e 32 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 21.0.2, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
408	192.168.2.4	50291	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:45 UTC	2239	OUT	GET /-/media/images/healthcare/default_videomodal_image-v2-845x403.jpg?h=403&iar=0&w=845&hash=6B5C626A3B68E134F023C3930C5A6220 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	886	IN	HTTP/1.1 200 OK Connection: close Content-Length: 32248 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="default_videomodal_image-v2-845x403.jpg" Content-Type: image/jpeg Etag: "UsdwIfwxXsckIabBHx8/F7xXM82Pj5NpF7wFe03aEms" Fastly-Io-Info: ifsz=32384 idim=845x403 ifmt=jpeg ofsz=32248 odim=845x403 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010228 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551284 Date: Thu, 18 Apr 2024 17:16:45 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210179-DFW, cache-pdk-kfty2130039-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460605.337220,VS0,VE98 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: ac 7c 9a ee e6 0b 4e 7b 61 ac f6 d1 2b 4b a6 95 6b 52 66 13 d0 23 35 b4 c4 11 66 3d 7a 8a e5 1d 3c 29 db 0b d8 79 24 f4 f9 f7 cf 53 62 ce b6 bb 25 89 1b a3 b4 8f 43 a6 aa e7 b5 ee 9a e7 b7 a7 cc be f0 cd 47 4b 9f 3a 3e 9e 7d e1 aa ca 2e ac 9e fa 91 e7 bf c9 fa 5f 25 3b e1 78 b3 2f 4e 6c 8b de 4b 13 0e 79 a0 67 d6 00 00 00 4c 0c 69 40 1a 56 40 09 08 24 64 00 80 06 49 02 26 07 13 5b 36 56 49 17 0e 73 26 8c ea c1 65 54 d6 03 89 87 1b 00 4a d4 e8 59 65 72 8b e6 ad 0e 2a b7 df fd 06 2f e5 7e cf d4 79 69 d3 d4 5d f2 2f 3c 2f bc e3 fc fd 0e 7e e9 77 c1 34 35 fa 12 ff 00 cf 68 2f d1 1c ef 91 fa 85 7a bc 77 d5 7b 22 fc d0 bf 75 f9 73 3c dc 28 c9 00 06 50 2e 6c ee e6 d1 58 98 d5 9b a5 59 fa 7f 71 f2 af 47 a7 07 17 0d e9 3a 62 5e ad a5 70 0e fc 0f 87 3d 8a 87 4f 7f Data Ascii: \|N{a+KkRf#5f=z<)y$Sb%CGK:>}._%;x/NlKygLi@V@$dI&[6VIs&eTJYer*/~yi]/</~w45h/zw{"us<(P.lXYqG:b^p=O
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: e2 87 5b 15 cb 28 27 42 5a 36 d5 7b cb 75 0b d0 ae 6e 66 7d f9 16 dd 2e 54 f6 08 c8 b7 e8 73 cd c9 d6 e3 ce bb b0 f4 31 05 56 f4 e1 aa b3 56 aa a1 8c ca ea 01 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c ca ed 00 00 43 89 9d 1d e7 65 b4 cb 9b 7e b1 f2 0f b7 67 a6 1f 8c 7d 67 e5 05 56 c4 d2 89 97 73 56 ea ba af 2d fa 79 f8 6f 8f a1 c7 f5 3e 75 5f d1 bd cf 85 f7 5c fe 9c 44 32 b5 97 40 9f 3b df 60 f8 af 93 fd 27 e3 6a 7e 2f 3d 5e 43 18 89 02 60 17 4f 9d a9 6b 2c b1 31 3b 74 bf 43 fe 6d fd 1d 17 f1 0f 33 ee 3c 35 4b 00 d0 00 0e 92 2d 10 4d 67 5c ba a7 10 f2 c4 ba bb 45 6d 95 5b 58 df 74 33 c3 55 55 5e f3 e5 dd 77 2a 7a 7d 1e 9e 67 b3 d3 83 c2 f3 ba 3a 33 ee 9a e8 cc e4 aa cb e7 5a ec b3 9e 4e 6c f6 57 1d 76 ad f4 30 00 60 00 00 00 00 00 00 00 00 00 Data Ascii: [('BZ6{unf}.Ts1VVnCe~g}gVsV-yo>u_\D2@;`'j~/=^C`Ok,1;tCm3<5K-Mg\Em[Xt3UU^w*z}g:3ZNlWv0`
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 7b 2c cb 7b c9 95 94 49 96 ec ab 64 01 6c 41 01 04 c0 13 0e 16 ba 33 ca 56 50 08 89 55 64 d5 2d 3a 28 98 45 63 d8 d4 58 e0 ad ea 1e ef ae 7c 8d d4 fd ef e3 bf 46 f4 31 b7 c5 32 7a df 23 af 9f e8 39 59 77 de 58 b3 d1 92 3a 98 ac 9d fa d4 5d 4d 73 e1 5b 2b 9e 97 94 71 08 e3 2b 86 15 43 b4 12 59 1f 59 4e 7d a5 7f 2c 8d 31 79 3e b4 6b c9 cc d3 5b 15 bb 1f 47 05 62 b6 57 b5 56 7e 6e aa 16 99 d7 5e 95 75 d9 67 36 b3 b7 2b 91 b2 d8 b7 b5 6b 05 62 6b b3 2b cd 39 5a f1 c7 54 41 13 a8 00 c8 98 00 00 00 00 00 00 00 00 d3 4d e8 e2 b0 62 86 25 ad 2a ba 5e 35 32 38 32 45 40 23 2a b4 20 2e 60 00 00 0b d2 e2 08 75 73 0a f5 0c 05 56 24 41 56 35 6e 29 57 81 0e b6 92 b1 6c 39 d5 5d 94 bc f6 fd 77 e5 9a 8c be d9 e0 f2 fd 07 2e cf 80 68 fb 37 cd ab 3f 3d cb ee 72 2a 29 59 16 Data Ascii: {,{IdlA3VPUd-:(EcX\|F12z#9YwX:]Ms[+q+CYYN},1y>k[GbWV~n^ug6+kbk+9ZTAMb%^5282E@# .`usV$AV5n)Wl9]w.h7?=r*)Y
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 00 2e 10 00 01 03 02 05 03 04 02 02 03 01 01 00 00 00 00 01 00 02 03 04 11 05 10 12 20 21 13 30 31 14 22 40 50 23 32 34 41 15 16 24 06 42 ff da 00 08 01 01 00 01 05 02 fa 40 a2 43 29 7c 5b b5 65 65 65 a5 06 5c b2 95 3e 9c b5 5b 2b 2d 2b 4a d2 b4 ab 2b 2b 2b 2b 2b 2b 2b 26 79 78 e4 67 64 05 83 b9 2a 06 dc b1 81 3e 30 43 a3 b2 1c 26 30 c8 25 81 ed 3d 32 9b 18 0b 5d 3b 53 aa a4 0b 54 8f 2c 0a 35 fd 4a 39 97 70 3f 4e c3 64 c7 82 b5 04 f7 5d 1e f4 16 d4 d6 a9 5a 34 b9 a8 b4 f7 9a 79 91 0c d8 14 8e c8 72 a2 f6 96 bc 27 ca 00 f5 16 22 66 b9 51 74 88 ad 63 34 be 42 d4 5c 5c 9a 50 6d d0 6d 95 ec a2 77 20 a9 94 c7 70 57 fa 70 6c b5 64 7b 17 57 57 57 2a ea ea 27 10 59 3f 12 cd 75 a9 5d 69 08 b4 85 75 75 75 75 75 75 75 75 75 75 74 0f 32 78 19 72 57 ea 09 b9 f2 9a db Data Ascii: . !01"@P#24A$B@C)\|[eee\>[+-+J+++++++&yxgd>0C&0%=2];ST,5J9p?Nd]Z4yr'"fQtc4B\\Pmmw pWpld{WWW'Y?u]iuuuuuuuuuut2xrW
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: d5 8f 52 be f6 f8 76 d6 ba e9 d1 db 6b 5d 63 e5 3d b6 ca 0f 74 2f 0a ca 14 7c bd ca 00 a4 28 e5 72 10 7a 0e 5c 7d 36 0b 47 d2 86 a6 76 d3 43 2c 8e 9e 5d 8d c8 ee 08 ee e5 0b aa 78 5f 23 a4 c2 7d 84 36 24 f9 2e 8b 96 0d 5f d2 93 ca c4 e9 3d 25 4e f6 ef 6b d3 d9 b6 37 27 36 e2 d6 54 ce d1 2c 91 e9 2a 24 e3 c9 f2 cf 68 76 d0 e2 10 7f d1 59 69 56 54 34 c6 a6 a4 00 06 37 57 d4 9b 68 d9 7c 83 4a d2 55 91 0a ca cb 4a 11 92 84 05 08 5a 13 58 14 0e 6c 26 7c 4d 86 29 a5 2f 93 20 48 38 6d 57 aa a6 c5 a9 7d 45 2e f6 e4 ed cd 7d 93 99 75 e3 64 4e d4 1f 1e 52 7b 9a ee 14 3c a2 a3 1a a4 25 3f c6 db 7d 0b 42 b6 44 2c 0e 9f 44 55 73 8a 6a 72 4b 9d b4 66 56 1d 87 47 5b 4d 35 04 f4 ce 68 01 58 27 8b 20 d7 39 7a 69 16 88 1a ba 90 35 1a 94 67 71 4d ea 3d 70 c1 24 c5 31 ca 41 Data Ascii: Rvk]c=t/\|(rz\}6GvC,]x_#}6$._=%Nk7'6T,*$hvYiVT47Wh\|JUJZXl&\|M)/ H8mW}E.}udNR{<%?}BD,DUsjrKfVG[M5hX' 9zi5gqM=p$1A
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: d1 4f b8 64 11 28 f6 db 11 2a ec 62 d4 e7 a0 03 43 9f 7e e8 e1 3b c7 c4 6e d3 9b 4e 57 4e 72 c1 ea 7a d4 f8 8c 1e a6 97 94 cf 1a f4 99 1a 1f 19 16 54 fe 4f 2f 93 fe 5a 68 62 d6 a5 7a c2 aa a0 a5 a5 ae c5 a7 94 06 92 b4 a8 1d 65 75 23 ec 84 96 3a a3 91 49 09 08 e5 ce fc 26 03 3d 5a c5 ea 3a f5 7b 86 57 c8 f6 44 25 17 c6 c4 5e e7 20 0b 97 0c 0e 71 3d f6 a2 15 b3 b2 d2 b4 ad 2a dd c0 86 c2 72 ba ba 0e 45 c8 ac 2e a7 d3 55 2c 56 97 d3 d4 84 ef 34 f2 86 99 e2 d0 e8 15 0c 57 91 d7 a9 99 f2 02 08 2b 42 d3 78 5a 9c 57 52 cb d4 14 e9 0b b2 0e 4c 94 84 5b 1c a9 f1 39 b9 d9 5b 66 11 4b e9 e9 ab a7 14 f4 a6 e4 ed 19 13 99 de 21 2b a8 c6 22 e2 e2 9a d2 e5 c4 60 b8 9f 82 ee 46 60 6c 21 1e d0 ce ea ea fd 9c 2e ab d4 d3 d7 52 8a b8 0b 4b 49 f2 99 f9 e2 8a 32 8c 7a 21 b6 Data Ascii: Od(bC~;nNWNrzTO/Zhbzeu#:I&=Z:{WD%^ q=rE.U,V4W+BxZWRL[9[fK!+"`F`l!.RKI2z!
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: a6 65 15 5d 44 72 cd 8a 1a e6 49 1e 87 5b e6 04 c2 86 72 22 dc 86 47 dc dd 91 c5 a8 b6 10 16 84 f6 a2 ad db ba ba b8 5a 82 65 45 93 aa 11 7d d0 2a ea fb ac b4 85 a5 59 47 72 ba 26 46 c9 4e 5a ed 0a c8 a2 09 5a 16 85 a0 2d 2d 5f 8d 6b 8d 75 9a ba e5 75 de ba b2 2d 44 ef b2 80 5e 50 f2 d9 1e 58 e0 f6 3a 37 7c 71 b6 e9 8f 57 08 b9 14 42 23 36 1e 4f 07 26 8b 98 85 90 45 4a 55 d5 d5 d5 d5 d5 d6 a5 a9 6a 5a d6 b5 a8 ab 9e dd ca d4 56 a5 a9 6a 5a 95 d5 d4 4f b3 e1 7b 74 d6 16 a3 20 45 eb 5a d6 b5 ad 45 5c fc 08 85 99 a5 43 ee 0d 72 91 8e 8d d7 f9 81 c8 3d 5d 5f 22 16 94 41 19 1f 73 72 88 26 a0 f0 9d 20 02 49 2e b5 2d 4b 52 d4 ae ae af b8 7c 3b 94 ca c7 b4 49 3b e4 f8 c0 23 c4 39 4e de a3 18 f0 e6 c8 c7 46 ef 97 fd 84 32 3b 0a 62 28 64 3c 27 92 8f 70 7d 60 52 e7 Data Ascii: e]DrI[r"GZeE}*YGr&FNZZ--_kuu-D^PX:7\|qWB#6O&EJUjZVjZO{t EZE\Cr=]_"Asr& I.-KR\|;I;#9NF2;b(d<'p}`R
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 86 ad df 06 95 ed d5 ee 27 6b e5 c9 d0 e4 29 59 64 f2 51 8b 23 d4 8c ae a9 99 72 e8 5a a8 c7 9a 79 24 f6 dc 71 9b 8b b6 46 0d 44 c7 17 36 e5 da f6 22 bd 29 15 43 cf 08 f2 cd 6a 5d cd 48 d4 6a 35 32 ce 25 7e e4 78 e9 45 0c 94 13 31 e2 8a dc a4 52 29 1a 50 a2 86 a0 b9 24 d7 64 2f 85 d5 6d cd ab e5 09 57 97 87 f9 f9 73 e4 62 e7 a4 96 e4 53 b4 35 ae 06 4c 51 71 dc c7 05 82 4b 6d 99 3a d0 cc d2 6a 10 82 e6 42 75 58 e3 fd 91 6a 11 8d be c4 b3 5e c6 47 2d 66 25 34 ad 32 39 7b 49 53 e9 a4 d2 69 43 85 9d ba b1 bd c4 b7 17 47 d1 c9 2e 59 73 97 0a 97 b8 ea 3f 76 46 1d df 3e 77 ba 14 b6 2c 72 35 31 4a fc ad 8f 72 98 a3 5d 29 0b 62 0c ca b8 25 15 28 51 e2 56 37 19 3d d0 b2 6b 94 a7 7f 64 42 69 3f 49 37 26 93 f6 62 8f a8 f0 63 dd 11 8a 4b 62 58 d4 b9 45 64 c7 c6 e8 86 Data Ascii: 'k)YdQ#rZy$qFD6")Cj]Hj52%~xE1R)P$d/mWsbS5LQqKm:jBuXj^G-f%429{ISiCG.Ys?vF>w,r51Jr])b%(QV7=kdBi?I7&bcKbXEd
2024-04-18 17:16:45 UTC	1379	IN	Data Raw: 47 e0 93 0f 43 c0 b2 2b ea f0 63 df 6a 45 82 54 60 99 44 f8 1b 83 35 31 53 f9 67 66 47 5d 0f dd 74 ca 33 4b 15 43 b7 ce 92 3a 84 a4 4a d2 88 23 b6 ac fd c4 36 31 d2 65 12 2a 8e 48 e4 72 32 c5 4f 48 25 44 0d ce 6e ed af 7f 5d 78 a6 85 4a 38 9c 51 17 8b 4d e6 2c b6 6c d7 9e 3d 04 87 d5 59 dd 59 be f8 fd d9 fe 79 d5 9a ea a9 23 c3 c9 13 3d 91 52 22 d9 b4 18 fd 30 63 f0 ff 00 cb 4b 17 c9 c8 d7 9e 49 ea 84 54 c9 24 92 49 f1 49 23 ad 41 3e 3f cb 3f 51 59 fb c8 5f 7c bf ff c4 00 3b 10 00 01 02 03 03 09 05 07 04 02 03 01 00 00 00 00 01 00 02 03 11 21 10 12 31 20 22 30 40 41 50 51 61 71 23 32 42 52 81 04 13 62 72 91 a1 b1 33 34 60 c1 14 92 73 82 d1 63 ff da 00 08 01 01 00 06 3f 02 fe 2f 45 85 99 cf 92 c0 bf ec 17 66 1a ce 81 55 c4 ff 00 1b 9a 96 4e 2b 05 9d 01 ab Data Ascii: GC+cjET`D51SgfG]t3KC:J#61e*Hr2OH%Dn]xJ8QM,l=YYy#=R"0cKIT$II#A>??QY_\|;!1 "0@APQaq#2BRbr34`sc?/EfUN+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
409	192.168.2.4	50292	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:45 UTC	2145	OUT	GET /Areas/LNRS/img/tag_icon.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:45 UTC	791	IN	HTTP/1.1 200 OK Connection: close Content-Length: 249 Content-Type: image/png Etag: "XGVGe9Opio0KJfRjUUuF1sk+35daHCSMSs+AWrBa35g" Fastly-Io-Info: ifsz=249 idim=17x17 ifmt=png ofsz=249 odim=17x17 ofmt=png Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:45 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210063-DFW, cache-pdk-kfty2130025-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460606.640401,VS0,VE83 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:45 UTC	249	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 11 08 03 00 00 00 0c b3 b7 c8 00 00 00 3f 50 4c 54 45 00 00 00 bb bb bb ff ff ff 66 66 66 ad ad ad 66 66 66 68 68 68 d1 d1 d1 6a 6a 6a bb bb bb ff ff ff f3 f3 f3 8e 8e 8e 8e 8e 8e dd dd dd dc dc dc ad ad ad ff ff ff a9 a9 a9 66 66 66 7a 7a 7a b8 61 d0 a2 00 00 00 13 74 52 4e 53 00 91 57 f5 45 e5 d7 af a2 8a 4d 06 c7 c6 71 6f 44 1e 12 bc bf 24 50 00 00 00 56 49 44 41 54 18 d3 75 cc 59 0a 80 30 0c 00 d1 b4 da dd bd de ff ac 46 4b 1d 10 9c 9f 84 07 89 ec f6 29 cb 9b ad 2d 23 08 84 b8 e8 6f 42 dc 21 65 82 54 a2 8e 85 43 15 5f 44 02 bf b2 2e f3 1a ce 0a 99 da fa a5 f4 a5 61 14 08 80 00 25 00 ea 00 75 a0 b4 b5 79 01 04 e8 09 6a a7 14 fb 77 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR?PLTEffffffhhhjjjfffzzzatRNSWEMqoD$PVIDATuY0FK)-#oB!eTC_D.a%uyjwIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
410	192.168.2.4	50300	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:46 UTC	2426	OUT	GET /copyright HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:46 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 119499 Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Date: Thu, 18 Apr 2024 17:16:46 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210093-DFW, cache-pdk-kfty2130051-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460606.334301,VS0,VE171 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 74 61 72 67 65 74 2d 64 65 6e 73 69 74 79 44 70 69 3d 64 65 76 69 63 65 2d 64 70 69 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, target-densityDpi=device-dpi, initial-scale=1, user-scalable=no
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 39 34 34 33 32 32 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 70 72 65 6c 6f 61 64 27 20 61 73 3d 27 73 74 79 6c 65 27 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 2f 31 2e 31 32 2e 31 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6d 69 6e 2e 63 73 73 27 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 70 79 72 69 67 68 74 20 7c 20 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f Data Ascii: 9443221" rel="stylesheet" /> <link rel='preload' as='style' href='//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css'> <title>Copyright \| LexisNexis Risk Solutions</title> <meta property="og:site_
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 79 2d 63 6f 6f 6b 69 65 2d 64 6f 6d 61 69 6e 3d 22 74 72 61 63 6b 69 6e 67 2e 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 0d 0a 20 20 20 20 20 20 63 6c 61 73 73 3d 22 6c 6e 72 73 2d 63 6f 6e 74 65 6e 74 2d 70 61 67 65 20 65 6e 2d 75 73 20 6d 6f 64 65 2d 6c 69 76 65 20 77 65 62 22 0d 0a 20 20 20 20 20 20 65 6e 76 69 72 6f 6e 6d 65 6e 74 3d 22 50 72 6f 64 75 63 74 69 6f 6e 22 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 09 09 09 76 61 72 20 5f 65 6c 71 51 20 3d 20 5f 65 6c 71 51 20 7c 7c 20 5b 5d 3b 0d 0a 09 09 09 5f 65 6c 71 51 2e 70 75 73 68 28 5b 27 65 6c 71 53 65 74 53 69 74 65 49 64 27 2c 20 27 39 30 33 27 5d 29 3b 0d 0a 09 09 09 5f 65 6c 71 51 2e 70 75 73 68 28 5b 27 Data Ascii: y-cookie-domain="tracking.risk.lexisnexis.com" class="lnrs-content-page en-us mode-live web" environment="Production"><script type="text/javascript">var _elqQ = _elqQ \|\| [];_elqQ.push(['elqSetSiteId', '903']);_elqQ.push(['
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 3d 20 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 20 3d 20 67 72 6f 75 70 2e 43 6f 6f 6b 69 65 73 5b 6b 5d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 63 6f 6f 6b 69 65 2e 4e 61 6d 65 20 3d 3d 3d 20 22 45 4c 4f 51 55 41 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 6f 71 75 61 43 6f 6f 6b 69 65 47 72 6f 75 70 20 3d 20 67 72 6f 75 70 2e 50 61 72 65 6e 74 20 3f 20 67 72 6f 75 70 2e 50 61 72 65 6e 74 2e 4f 70 74 61 6e 6f 6e 47 72 6f 75 70 49 64 20 3a 20 67 72 6f 75 70 2e 4f 70 74 61 6e 6f 6e 47 72 6f 75 Data Ascii: = 1) { var cookie = group.Cookies[k]; if (cookie.Name === "ELOQUA") { eloquaCookieGroup = group.Parent ? group.Parent.OptanonGroupId : group.OptanonGrou
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6d 65 67 61 6d 65 6e 75 22 20 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6e 61 76 2d 77 72 61 70 70 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6e 61 76 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 73 63 6f 72 65 2d 6e 61 76 2d 77 72 61 70 70 65 72 20 69 73 20 74 68 65 20 63 6f 6e 74 61 69 6e 65 72 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6e 61 76 62 61 72 2d 68 65 61 64 65 72 20 73 63 6f 72 65 2d 6e 61 76 62 61 72 2d 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <nav class="score-megamenu" > <div class="score-nav-wrapper"> <div class="score-nav"> ... score-nav-wrapper is the container --> <div class="navbar-header score-navbar-header">
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 62 6f 78 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 49 73 45 78 70 65 72 69 65 6e 63 65 45 64 69 74 6f 72 45 64 69 74 69 6e 67 26 71 75 6f 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 53 65 61 72 63 68 52 65 73 75 6c 74 73 50 61 67 65 55 72 6c 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 73 65 61 72 63 68 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 53 65 61 72 63 68 42 6f 78 49 64 26 71 75 6f 74 3b 3a 26 71 75 6f 74 3b 36 66 62 61 66 66 37 37 63 38 32 32 34 61 62 38 39 34 65 64 64 64 33 38 38 32 39 36 30 65 33 30 26 71 75 6f 74 3b 2c 26 71 75 6f 74 3b 41 6c 67 6f 6c 69 61 41 70 69 4b 65 79 26 71 75 6f 74 3b Data Ascii: s="global-search-box" data-ux-args="{"IsExperienceEditorEditing":false,"SearchResultsPageUrl":"https://risk.lexisnexis.com/search","SearchBoxId":"6fbaff77c8224ab894eddd3882960e30","AlgoliaApiKey"
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 74 72 75 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 6d 6f 64 61 6c 2d 37 64 34 65 36 64 62 34 2d 39 30 38 32 2d 34 61 38 37 2d 61 35 62 66 2d 39 39 31 32 36 38 65 61 38 36 63 63 2d 4c 61 62 65 6c 22 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 20 73 63 6f 72 65 2d 6d 6f 64 61 6c 20 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 53 74 61 74 65 43 68 61 6e 67 65 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 2c 26 71 75 6f 74 3b 53 68 6f 77 41 63 74 69 6f 6e 4d 65 73 73 61 67 65 73 26 71 75 6f 74 3b 3a 5b 26 71 75 6f 74 3b 4f 70 65 6e 20 4c 61 6e 67 75 61 67 65 20 53 65 6c 65 63 74 6f 72 20 4d 6f 64 61 6c 26 71 75 6f 74 Data Ascii: true" aria-labelledby="modal-7d4e6db4-9082-4a87-a5bf-991268ea86cc-Label" class="modal fade score-modal language-selector" data-ux-args="{"StateChangeMessagesTransmitting":[],"ShowActionMessages":["Open Language Selector Modal&quot
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 75 73 2d 66 6c 61 67 32 32 78 31 36 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 2d 20 45 6e 67 6c 69 73 68 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 Data Ascii: data-ux-state="pending" href="https://risk.lexisnexis.com"><span class="sprite-image"> <span class="icon-us-flag22x16"></span></span><span class="" >United States - English</span></a></div><div class="score-left-text " > <a class="score-c
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 2e 6a 70 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: " > <a class="score-composite-link" data-ux-args="{"ClickMessagesTransmitting":[]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href="https://risk.lexisnexis.co.jp"><span class="sprite-image"> <span class
2024-04-18 17:16:46 UTC	1379	IN	Data Raw: 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 67 6c 6f 62 61 6c 2f 65 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 67 6c 6f 62 61 6c 32 30 78 32 30 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 45 6e 67 6c 69 73 68 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d Data Ascii: itting":[]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href="https://risk.lexisnexis.com/global/en"><span class="sprite-image"> <span class="icon-global20x20"></span></span><span class="" >English</span></a>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
411	192.168.2.4	50295	151.101.0.217	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:46 UTC	668	OUT	GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:46 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 678 Content-Type: image/avif Etag: "aa27eacd5251968eb1b0a1fa48fe1f4e" X-Viewmaster-Lossless-Format: automatic Viewmaster-Server: viewmaster-glb-prod cache-control: public, max-age=2592000 Via: vvarnish, 1.1 varnish, 1.1 varnish X-Backend-Server: varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 869972 Date: Thu, 18 Apr 2024 17:16:46 GMT X-Served-By: cache-dfw-kdfw8210067-DFW, cache-pdk-kfty2130073-PDK X-Cache: miss, HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1713460606.266343,VS0,VE1 Vary: Accept
2024-04-18 17:16:46 UTC	678	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 01 8c 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 50 00 00 00 2d 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 00 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 02 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispeP-pixiav1Ccolrnclx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
412	192.168.2.4	50297	151.101.14.109	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:46 UTC	573	OUT	GET /p/4.29.7/js/player.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:46 UTC	455	IN	HTTP/1.1 200 OK Connection: close Content-Length: 586757 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:46 GMT Age: 82362 X-Served-By: cache-iad-kcgs7200104-IAD, cache-pdk-katl1840048-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1713460606.266792,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 37 20 2d 20 32 30 32 34 2d 30 34 2d 31 37 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 69 6d 70 6f 72 74 7b 5f 20 61 73 20 65 2c 64 20 61 73 20 74 2c 61 20 61 73 20 6e 2c 69 2c 73 20 61 73 20 6f 2c 43 20 61 73 20 72 2c 63 20 61 73 20 61 2c 62 20 61 73 20 73 2c 65 20 61 73 20 6c 2c 4c 20 61 73 20 63 2c 67 20 61 73 20 64 2c 66 20 61 73 20 75 2c 78 20 61 73 20 70 2c 68 20 61 73 20 5f 2c 6a 20 61 73 20 76 2c 56 20 61 73 20 6d 2c 74 20 61 73 20 66 2c 6b 20 61 73 20 68 2c 72 20 61 73 20 67 2c 6d 20 61 73 20 62 2c 70 20 61 73 20 45 2c 50 20 61 73 20 79 2c 54 20 61 73 20 43 2c 6c 20 61 73 20 54 2c 6e 20 61 73 20 77 Data Ascii: /* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */import{_ as e,d as t,a as n,i,s as o,C as r,c as a,b as s,e as l,L as c,g as d,f as u,x as p,h as _,j as v,V as m,t as f,k as h,r as g,m as b,p as E,P as y,T as C,l as T,n as w
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 2c 69 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 3f 3a 5e 7c 5c 5c 73 29 22 2b 74 2b 22 28 3f 21 5c 5c 53 29 22 2c 22 67 22 29 3b 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 69 2c 22 22 29 2e 74 72 69 6d 28 29 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 6e 29 7d 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 73 28 65 29 3f 74 68 69 73 2e 72 65 6d 6f 76 65 28 65 29 3a 74 68 69 73 2e 61 64 64 28 65 29 7d 7d 7d 7d 29 3b 6c 65 74 20 6f 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 74 28 65 3d 22 22 2c 74 3d 7b 7d 29 7b 76 61 72 20 6e 3b 69 66 28 28 6e 75 6c 6c Data Ascii: function(t){var n=e.getAttribute("class")\|\|"",i=new RegExp("(?:^\|\\s)"+t+"(?!\\S)","g");n=n.replace(i,"").trim(),e.setAttribute("class",n)},toggle:function(e){this.contains(e)?this.remove(e):this.add(e)}}}});let ot={};function rt(e="",t={}){var n;if((null
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 6d 73 46 75 6c 6c 73 63 72 65 65 6e 45 6c 65 6d 65 6e 74 26 26 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 3d 77 69 6e 64 6f 77 26 26 65 2e 6f 66 66 73 65 74 57 69 64 74 68 3c 65 2e 63 6c 69 65 6e 74 57 69 64 74 68 26 26 28 74 3d 7b 62 6f 74 74 6f 6d 3a 31 30 30 2a 74 2e 62 6f 74 74 6f 6d 2c 6c 65 66 74 3a 31 30 30 2a 74 2e 6c 65 66 74 2c 74 6f 70 3a 31 30 30 2a 74 2e 74 6f 70 2c 72 69 67 68 74 3a 31 30 30 2a 74 2e 72 69 67 68 74 2c 77 69 64 74 68 3a 31 30 30 2a 74 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 31 30 30 2a 74 2e 68 65 69 67 68 74 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6e 65 77 20 55 Data Ascii: oundingClientRect();return document.msFullscreenElement&&window.parent!==window&&e.offsetWidth<e.clientWidth&&(t={bottom:100t.bottom,left:100t.left,top:100t.top,right:100t.right,width:100t.width,height:100t.height}),t}function vt(e){try{return new U
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 6d 65 6f 28 77 73 29 3f 7c 76 69 6d 65 6f 2d 28 65 6e 74 65 72 70 72 69 73 65 7c 77 6f 72 6b 29 29 5c 2e 28 63 6f 6d 7c 64 65 76 7c 77 6f 72 6b 29 7c 28 76 69 64 65 6f 6a 69 7c 76 69 64 65 6f 73 68 69 70 69 6e 75 72 6c 29 5c 2e 68 6b 29 5c 2f 76 69 64 65 6f 5c 2f 5c 64 2b 5c 2f 63 6f 6e 66 69 67 28 3f 3d 24 7c 5c 3f 29 2f 2e 74 65 73 74 28 65 29 7d 28 69 29 29 72 65 74 75 72 6e 20 69 3b 63 6f 6e 73 74 20 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 73 74 28 65 29 29 72 65 74 75 72 6e 20 70 61 72 73 65 49 6e 74 28 65 2c 31 30 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 6d 61 74 63 68 28 2f 28 76 69 64 65 6f 7c 5c 2e 63 6f 6d 7c 5c 2e 64 65 76 29 5c 2f 28 5c 64 2b 29 2f 29 3b 69 66 28 21 74 7c 7c 74 2e 6c 65 6e 67 74 68 3c 33 29 74 68 72 6f 77 20 6e 65 77 20 Data Ascii: meo(ws)?\|vimeo-(enterprise\|work))\.(com\|dev\|work)\|(videoji\|videoshipinurl)\.hk)\/video\/\d+\/config(?=$\|\?)/.test(e)}(i))return i;const r=function(e){if(st(e))return parseInt(e,10);const t=e.match(/(video\|\.com\|\.dev)\/(\d+)/);if(!t\|\|t.length<3)throw new
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 6c 79 28 76 6f 69 64 20 30 2c 6e 29 29 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 41 72 72 61 79 2e 66 72 6f 6d 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 68 69 6c 64 72 65 6e 29 2e 69 6e 64 65 78 4f 66 28 65 29 3a 2d 31 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 3b 28 6e 75 6c 6c 3d 3d 28 6e 3d 65 29 3f 76 6f 69 64 20 30 3a 6e 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 29 26 26 21 54 74 28 65 2c 74 29 3b 29 7b 76 61 72 20 6e 3b 65 3d 65 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 72 65 74 75 72 6e 20 54 74 28 65 2c 74 29 3f 65 3a 6e 75 6c 6c 7d 29 29 3b 6c 65 74 20 6b 74 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 49 74 28 65 3d 22 70 22 29 7b 72 65 74 75 72 6e 60 24 7b 65 7d 24 7b 2b 2b 6b 74 7d 60 7d 63 Data Ascii: ly(void 0,n)))}((function(e){return e?Array.from(e.parentNode.children).indexOf(e):-1}),(function(e,t){for(;(null==(n=e)?void 0:n.parentElement)&&!Tt(e,t);){var n;e=e.parentElement}return Tt(e,t)?e:null}));let kt=0;function It(e="p"){return`${e}${++kt}`}c
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 72 65 6d 6f 76 65 43 61 72 64 3a 49 74 28 29 2c 5f 63 68 61 6e 67 65 50 6c 61 79 62 61 63 6b 52 61 74 65 3a 49 74 28 29 2c 5f 64 65 73 74 72 6f 79 3a 49 74 28 29 2c 5f 63 68 61 6e 67 65 41 75 64 69 6f 54 72 61 63 6b 3a 49 74 28 29 2c 5f 72 65 71 75 65 73 74 43 6f 6d 70 6c 65 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 73 3a 49 74 28 29 2c 5f 63 6c 6f 73 65 52 65 6d 6f 74 65 43 6f 6d 70 6f 6e 65 6e 74 3a 49 74 28 29 2c 5f 75 70 64 61 74 65 4c 69 76 65 53 75 62 74 69 74 6c 65 52 65 71 75 65 73 74 73 3a 49 74 28 29 7d 2c 4e 74 3d 7b 77 69 6c 6c 3a 22 77 69 6c 6c 4c 69 6b 65 56 69 64 65 6f 22 2c 64 69 64 3a 22 64 69 64 4c 69 6b 65 56 69 64 65 6f 22 7d 2c 44 74 3d 7b 77 69 6c 6c 3a 22 77 69 6c 6c 55 6e 6c 69 6b 65 56 69 64 65 6f 22 2c 64 69 64 3a 22 64 69 64 55 Data Ascii: removeCard:It(),_changePlaybackRate:It(),_destroy:It(),_changeAudioTrack:It(),_requestCompleteLiveSubtitles:It(),_closeRemoteComponent:It(),_updateLiveSubtitleRequests:It()},Nt={will:"willLikeVideo",did:"didLikeVideo"},Dt={will:"willUnlikeVideo",did:"didU
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 73 63 72 75 62 62 69 6e 67 45 6e 64 65 64 3a 49 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 53 74 61 72 74 65 64 3a 49 74 28 29 2c 5f 76 6f 6c 75 6d 65 53 63 72 75 62 62 69 6e 67 45 6e 64 65 64 3a 49 74 28 29 2c 5f 63 6f 6e 74 72 6f 6c 42 61 72 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 74 6f 61 73 74 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 73 69 64 65 64 6f 63 6b 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 6d 65 6e 75 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 63 61 70 74 69 6f 6e 73 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 63 75 65 50 6f 69 6e 74 41 64 64 65 64 3a 49 74 28 29 2c 5f 63 75 65 50 6f 69 6e 74 52 65 6d 6f 76 Data Ascii: scrubbingEnded:It(),_volumeScrubbingStarted:It(),_volumeScrubbingEnded:It(),_controlBarVisibilityChanged:It(),_toastVisibilityChanged:It(),_sidedockVisibilityChanged:It(),_menuVisibilityChanged:It(),_captionsChanged:It(),_cuePointAdded:It(),_cuePointRemov
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 65 3a 49 74 28 29 2c 5f 63 6f 6c 6f 72 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 63 6f 6e 66 69 67 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 6c 69 76 65 45 76 65 6e 74 53 65 74 74 69 6e 67 73 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 70 61 73 73 77 6f 72 64 55 6e 6c 6f 63 6b 65 64 3a 49 74 28 29 2c 5f 70 72 69 76 61 74 65 55 6e 6c 6f 63 6b 65 64 3a 49 74 28 29 2c 5f 65 6e 74 65 72 65 64 54 69 6e 79 4d 6f 64 65 3a 49 74 28 29 2c 5f 65 6e 74 65 72 65 64 4d 69 6e 69 4d 6f 64 65 3a 49 74 28 29 2c 5f 65 6e 74 65 72 65 64 4e 6f 72 6d 61 6c 4d 6f 64 65 3a 49 74 28 29 2c 5f 72 65 71 75 65 73 74 43 6f 6e 66 69 67 52 65 6c 6f 61 64 65 64 3a 49 74 28 29 2c 5f 65 6d 62 65 64 53 65 74 74 69 6e 67 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 63 72 65 61 74 65 49 6e 74 65 Data Ascii: e:It(),_colorChanged:It(),_configChanged:It(),_liveEventSettingsChanged:It(),_passwordUnlocked:It(),_privateUnlocked:It(),_enteredTinyMode:It(),_enteredMiniMode:It(),_enteredNormalMode:It(),_requestConfigReloaded:It(),_embedSettingChanged:It(),_createInte
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 5f 69 6e 74 65 72 61 63 74 69 76 65 48 6f 74 73 70 6f 74 43 6c 69 63 6b 65 64 3a 49 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 4f 76 65 72 6c 61 79 50 61 6e 65 6c 43 6c 69 63 6b 65 64 3a 49 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 4d 61 72 6b 65 72 43 6c 69 63 6b 65 64 3a 49 74 28 29 2c 5f 69 6e 74 65 72 61 63 74 69 76 65 53 65 65 6b 43 61 6c 6c 3a 49 74 28 29 2c 5f 74 72 61 6e 73 63 72 69 70 74 43 68 61 6e 67 65 64 3a 49 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 56 69 73 69 62 69 6c 69 74 79 43 68 61 6e 67 65 3a 49 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 45 6e 61 62 6c 65 64 3a 49 74 28 29 2c 5f 72 69 67 68 74 43 6f 6e 74 65 6e 74 41 72 65 61 44 69 73 61 62 6c 65 64 3a 49 74 28 29 2c 5f 74 72 61 6e Data Ascii: _interactiveHotspotClicked:It(),_interactiveOverlayPanelClicked:It(),_interactiveMarkerClicked:It(),_interactiveSeekCall:It(),_transcriptChanged:It(),_rightContentAreaVisibilityChange:It(),_rightContentAreaEnabled:It(),_rightContentAreaDisabled:It(),_tran
2024-04-18 17:16:46 UTC	1371	IN	Data Raw: 22 2c 43 55 45 50 4f 49 4e 54 3a 22 63 75 65 70 6f 69 6e 74 22 2c 44 55 52 41 54 49 4f 4e 5f 43 48 41 4e 47 45 3a 22 64 75 72 61 74 69 6f 6e 63 68 61 6e 67 65 22 2c 45 4d 41 49 4c 5f 43 41 50 54 55 52 45 5f 46 41 49 4c 45 44 3a 22 65 6d 61 69 6c 63 61 70 74 75 72 65 66 61 69 6c 65 64 22 2c 45 4d 41 49 4c 5f 43 41 50 54 55 52 45 3a 22 65 6d 61 69 6c 63 61 70 74 75 72 65 22 2c 45 4e 44 45 44 3a 22 65 6e 64 65 64 22 2c 45 52 52 4f 52 3a 22 65 72 72 6f 72 22 2c 46 55 4c 4c 53 43 52 45 45 4e 43 48 41 4e 47 45 3a 22 66 75 6c 6c 73 63 72 65 65 6e 63 68 61 6e 67 65 22 2c 49 4e 54 45 52 41 43 54 49 56 45 5f 48 4f 54 53 50 4f 54 5f 43 4c 49 43 4b 45 44 3a 22 69 6e 74 65 72 61 63 74 69 76 65 68 6f 74 73 70 6f 74 63 6c 69 63 6b 65 64 22 2c 49 4e 54 45 52 41 43 54 49 Data Ascii: ",CUEPOINT:"cuepoint",DURATION_CHANGE:"durationchange",EMAIL_CAPTURE_FAILED:"emailcapturefailed",EMAIL_CAPTURE:"emailcapture",ENDED:"ended",ERROR:"error",FULLSCREENCHANGE:"fullscreenchange",INTERACTIVE_HOTSPOT_CLICKED:"interactivehotspotclicked",INTERACTI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
413	192.168.2.4	50298	151.101.14.109	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:46 UTC	573	OUT	GET /p/4.29.7/js/vendor.module.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://player.vimeo.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:46 UTC	455	IN	HTTP/1.1 200 OK Connection: close Content-Length: 435999 Content-Type: application/javascript Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:46 GMT Age: 82362 X-Served-By: cache-iad-kiad7000097-IAD, cache-pdk-katl1840082-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1713460606.267487,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 37 20 2d 20 32 30 32 34 2d 30 34 2d 31 37 20 2d 20 68 74 74 70 73 3a 2f 2f 70 6c 61 79 65 72 2e 76 69 6d 65 6f 2e 63 6f 6d 2f 4e 4f 54 49 43 45 2e 74 78 74 20 2a 2f 0a 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 20 74 3d 3d 3d 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 65 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 28 74 28 6e 29 29 7d 7d 28 4f 62 6a 65 63 74 2e 6b 65 79 73 2c 4f Data Ascii: /* VimeoPlayer - v4.29.7 - 2024-04-17 - https://player.vimeo.com/NOTICE.txt */var e=Object.prototype,t=function(t){var n=t&&t.constructor;return t===("function"==typeof n&&n.prototype\|\|e)},n=function(e,t){return function(n){return e(t(n))}}(Object.keys,O
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 6c 6c 2c 72 3d 6e 65 77 20 61 74 2c 32 29 29 29 3b 61 3d 61 2e 76 7d 72 3f 73 74 28 72 2c 31 2c 61 29 3a 72 3d 61 7d 63 61 74 63 68 28 46 64 29 7b 73 74 28 72 7c 7c 28 72 3d 6e 65 77 20 61 74 29 2c 32 2c 46 64 29 7d 7d 28 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6c 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 74 68 65 6e 3f 65 2e 74 68 65 6e 28 74 29 3a 74 28 65 29 7d 63 6f 6e 73 74 20 64 74 3d 5b 22 67 65 74 22 2c 22 70 6f 73 74 22 2c 22 70 75 74 22 2c 22 70 61 74 63 68 22 2c 22 68 65 61 64 22 2c 22 64 65 6c 65 74 65 22 5d 2c 68 74 3d 7b 6a 73 6f 6e 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 2c 74 65 78 74 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 2c 61 72 72 61 79 42 75 66 66 65 72 3a 22 2a 2f 2a 22 2c 62 6c 6f 62 3a 22 2a 2f 2a 22 Data Ascii: ll,r=new at,2)));a=a.v}r?st(r,1,a):r=a}catch(Fd){st(r\|\|(r=new at),2,Fd)}}(),r}function lt(e,t){return e&&e.then?e.then(t):t(e)}const dt=["get","post","put","patch","head","delete"],ht={json:"application/json",text:"text/plain",arrayBuffer:"/",blob:"/"
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 72 6f 72 28 22 54 72 69 65 64 20 74 6f 20 72 65 6d 6f 76 65 20 61 6e 20 75 6e 64 65 66 69 6e 65 64 20 65 76 65 6e 74 2e 22 29 3b 69 66 28 73 20 69 6e 20 74 29 69 66 28 72 29 7b 76 61 72 20 61 3d 74 5b 73 5d 2e 69 6e 64 65 78 4f 66 28 72 29 3b 69 66 28 2d 31 3d 3d 3d 61 29 66 6f 72 28 76 61 72 20 75 3d 30 2c 63 3d 74 5b 73 5d 2e 6c 65 6e 67 74 68 3b 75 3c 63 3b 75 2b 2b 29 69 66 28 74 5b 73 5d 5b 75 5d 2e 68 61 6e 64 6c 65 72 3d 3d 3d 72 29 7b 61 3d 69 3b 62 72 65 61 6b 7d 69 66 28 2d 31 3d 3d 3d 61 29 72 65 74 75 72 6e 20 65 3b 74 5b 73 5d 2e 73 70 6c 69 63 65 28 61 2c 31 29 7d 65 6c 73 65 20 64 65 6c 65 74 65 20 74 5b 73 5d 7d 72 65 74 75 72 6e 20 65 7d 2c 65 2e 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 6e 29 74 68 72 6f 77 20 6e 65 Data Ascii: ror("Tried to remove an undefined event.");if(s in t)if(r){var a=t[s].indexOf(r);if(-1===a)for(var u=0,c=t[s].length;u<c;u++)if(t[s][u].handler===r){a=i;break}if(-1===a)return e;t[s].splice(a,1)}else delete t[s]}return e},e.fire=function(n){if(!n)throw ne
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 4f 44 45 4c 5f 49 4e 50 55 54 53 3a 22 62 72 61 69 6e 6d 6c 6d 6f 64 65 6c 69 6e 70 75 74 73 22 7d 2c 79 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 63 6f 2c 6c 6f 2c 68 6f 2c 66 6f 2c 5f 6f 2c 6d 6f 2c 70 6f 2c 76 6f 2c 67 6f 29 3b 6c 65 74 20 45 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 28 6e 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 29 2e 5f 76 69 64 65 6f 45 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 76 69 64 65 6f 22 29 2c 6e 2e 5f 76 69 64 65 6f 45 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 69 72 70 6c 61 79 22 2c 22 22 29 2c 6e 2e 5f 76 69 64 65 6f 45 Data Ascii: ODEL_INPUTS:"brainmlmodelinputs"},yo=Object.assign({},co,lo,ho,fo,_o,mo,po,vo,go);let Eo=function(e){function t(t){var n;return(n=e.call(this,t)\|\|this)._videoElement=document.createElement("video"),n._videoElement.setAttribute("data-airplay",""),n._videoE
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 6e 3d 21 30 7d 2c 74 2e 6f 6e 77 65 62 6b 69 74 65 6e 64 66 75 6c 6c 73 63 72 65 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 6e 46 75 6c 6c 73 63 72 65 65 6e 3d 21 31 7d 2c 74 2e 6f 6e 77 65 62 6b 69 74 70 72 65 73 65 6e 74 61 74 69 6f 6e 6d 6f 64 65 63 68 61 6e 67 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 69 72 65 28 74 68 69 73 2e 70 69 63 74 75 72 65 49 6e 50 69 63 74 75 72 65 41 63 74 69 76 65 3f 63 6f 2e 45 4e 54 45 52 5f 50 49 43 54 55 52 45 5f 49 4e 5f 50 49 43 54 55 52 45 3a 63 6f 2e 4c 45 41 56 45 5f 50 49 43 54 55 52 45 5f 49 4e 5f 50 49 43 54 55 52 45 29 7d 2c 74 2e 73 68 6f 75 6c 64 48 61 6e 64 6c 65 56 69 64 65 6f 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 2c 74 2e 68 Data Ascii: n=!0},t.onwebkitendfullscreen=function(){this._inFullscreen=!1},t.onwebkitpresentationmodechanged=function(){this.fire(this.pictureInPictureActive?co.ENTER_PICTURE_IN_PICTURE:co.LEAVE_PICTURE_IN_PICTURE)},t.shouldHandleVideoEvent=function(e){return!0},t.h
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 65 6e 64 22 2c 69 2c 7b 72 65 71 75 65 73 74 3a 65 2c 72 65 73 70 6f 6e 73 65 3a 73 7d 29 2c 69 73 2e 70 75 73 68 28 7b 75 72 6c 3a 65 2e 64 61 74 61 2e 75 72 6c 2c 73 74 61 74 75 73 3a 32 30 30 2c 64 75 72 61 74 69 6f 6e 3a 65 2e 64 61 74 61 2e 64 75 72 61 74 69 6f 6e 7d 29 2c 6f 73 28 6e 2e 5f 70 72 6f 63 65 73 73 42 75 66 66 65 72 28 65 2c 72 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 28 72 3d 65 29 2c 6e 2e 5f 63 6f 6e 74 69 6e 75 65 50 72 6f 63 65 73 73 69 6e 67 51 75 65 75 65 28 29 7d 29 29 7d 29 29 7d 29 29 7d 2c 74 2e 5f 73 61 76 65 52 65 73 70 6f 6e 73 65 53 70 65 65 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 63 6f 6e 73 74 20 72 3d 65 2e 69 6e 63 6c 75 64 65 57 69 74 68 42 61 6e 64 77 69 64 74 68 43 68 65 63 6b 73 2c 69 3d 74 Data Ascii: end",i,{request:e,response:s}),is.push({url:e.data.url,status:200,duration:e.data.duration}),os(n._processBuffer(e,r),(function(e){o(r=e),n._continueProcessingQueue()}))}))}))},t._saveResponseSpeeds=function(e,t,n){const r=e.includeWithBandwidthChecks,i=t
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 65 64 22 2c 22 62 75 66 66 65 72 71 75 65 75 65 61 64 64 22 5d 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 72 2e 6f 6e 28 65 2c 74 3d 3e 7b 74 68 69 73 2e 66 69 72 65 28 65 2c 74 29 7d 29 7d 29 2c 74 68 69 73 2e 5f 62 75 66 66 65 72 73 46 6f 72 43 6f 64 65 63 5b 6e 5d 2e 61 64 64 53 74 72 65 61 6d 28 72 29 2c 72 7d 2c 74 2e 63 68 65 63 6b 45 6e 64 4f 66 53 74 72 65 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 74 68 69 73 2e 5f 62 75 66 66 65 72 73 2e 65 76 65 72 79 28 65 3d 3e 65 2e 68 61 73 41 70 70 65 6e 64 65 64 46 69 6e 61 6c 53 65 67 6d 65 6e 74 28 29 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 65 3d 28 29 3d 3e 7b 74 68 69 73 2e 5f 76 69 64 65 6f 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 69 6d 65 75 70 64 61 74 65 22 Data Ascii: ed","bufferqueueadd"].forEach(e=>{r.on(e,t=>{this.fire(e,t)})}),this._buffersForCodec[n].addStream(r),r},t.checkEndOfStream=function(){if(!this._buffers.every(e=>e.hasAppendedFinalSegment()))return;const e=()=>{this._video.removeEventListener("timeupdate"
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 74 65 64 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 74 68 69 73 2e 77 68 69 74 65 6c 69 73 74 65 64 5b 30 5d 3c 6e 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 30 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 31 29 3b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 73 63 61 6e 6e 65 72 2e 5f 73 74 72 65 61 6d 73 2e 76 69 64 65 6f 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 31 29 3b 69 66 28 21 74 68 69 73 2e 63 61 6e 50 6f 77 65 72 44 6f 77 6e 28 65 2c 6e 29 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 31 29 3b 69 66 28 74 68 69 73 2e 73 63 72 75 62 49 6e 50 72 6f 67 72 65 73 73 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 21 31 29 3b 63 6f Data Ascii: ted.length)return this.whitelisted[0]<n?Promise.resolve(0):Promise.resolve(!1);if(1===this.scanner._streams.video.length)return Promise.resolve(!1);if(!this.canPowerDown(e,n))return Promise.resolve(!1);if(this.scrubInProgress)return Promise.resolve(!1);co
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 65 6f 2e 64 72 6d 48 61 6e 64 6c 65 72 29 3f 76 6f 69 64 20 30 3a 72 2e 73 74 61 74 65 29 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 5f 6f 6e 52 65 61 64 79 2e 74 68 65 6e 28 28 29 3d 3e 7b 74 68 69 73 2e 73 65 74 56 69 64 65 6f 53 72 63 28 65 2c 21 30 2c 21 31 29 7d 29 2e 63 61 74 63 68 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 29 3b 69 66 28 22 61 75 74 6f 22 3d 3d 3d 74 68 69 73 2e 5f 70 72 65 6c 6f 61 64 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 5f 6f 6e 52 65 61 64 79 2e 74 68 65 6e 28 28 29 3d 3e 7b 74 68 69 73 2e 73 65 74 56 69 64 65 6f 53 72 63 28 65 2c 21 31 2c 21 31 29 7d 29 2e 63 61 74 63 68 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 29 7d 74 26 26 74 68 69 73 2e 72 65 73 65 74 28 29 2c 74 7c 7c 21 74 68 69 73 2e 70 61 75 Data Ascii: eo.drmHandler)?void 0:r.state))return void this._onReady.then(()=>{this.setVideoSrc(e,!0,!1)}).catch(console.error);if("auto"===this._preload)return void this._onReady.then(()=>{this.setVideoSrc(e,!1,!1)}).catch(console.error)}t&&this.reset(),t\|\|!this.pau
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 66 3d 6e 75 6c 6c 3b 74 72 79 7b 66 3d 74 68 69 73 2e 5f 73 74 72 65 61 6d 73 5b 65 5d 5b 75 5d 2e 73 65 67 6d 65 6e 74 73 5b 61 5b 63 5d 5d 2e 73 69 7a 65 7d 63 61 74 63 68 28 46 64 29 7b 7d 6f 2e 61 64 64 53 65 67 6d 65 6e 74 28 73 2c 7b 69 64 65 6e 74 69 66 69 65 72 3a 69 2c 69 73 46 69 6e 61 6c 53 65 67 6d 65 6e 74 3a 72 2c 70 72 69 6f 72 69 74 79 3a 6c 2c 69 6e 63 6c 75 64 65 57 69 74 68 42 61 6e 64 77 69 64 74 68 43 68 65 63 6b 73 3a 64 2c 74 69 6d 65 6f 75 74 3a 68 2c 73 69 7a 65 3a 66 7d 29 2e 63 61 74 63 68 28 65 3d 3e 7b 7d 29 7d 7d 29 2e 63 61 74 63 68 28 65 3d 3e 7b 74 68 72 6f 77 20 65 7d 29 7d 2c 6e 2e 5f 6c 6f 61 64 50 72 65 6c 6f 61 64 53 65 67 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 63 6f 6e 73 74 20 65 20 69 6e 20 Data Ascii: f=null;try{f=this._streams[e][u].segments[a[c]].size}catch(Fd){}o.addSegment(s,{identifier:i,isFinalSegment:r,priority:l,includeWithBandwidthChecks:d,timeout:h,size:f}).catch(e=>{})}}).catch(e=>{throw e})},n._loadPreloadSegments=function(){for(const e in

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
414	192.168.2.4	50299	151.101.14.109	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:46 UTC	551	OUT	GET /p/4.29.7/css/player.css HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:46 UTC	441	IN	HTTP/1.1 200 OK Connection: close Content-Length: 210609 Content-Type: text/css Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:46 GMT Age: 82362 X-Served-By: cache-iad-kjyo7100091-IAD, cache-pdk-katl1840058-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1713460606.267570,VS0,VE2 Vary: Accept-Encoding,x-http-method-override Cache-Control: max-age=1209600 Access-Control-Allow-Origin: *
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 2f 2a 20 56 69 6d 65 6f 50 6c 61 79 65 72 20 2d 20 76 34 2e 32 39 2e 37 20 2d 20 32 30 32 34 2d 30 34 2d 31 37 20 2a 2f 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 7b 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 70 78 29 7d 7d 40 2d 6d 6f 7a 2d 6b 65 79 66 72 61 6d 65 73 20 62 75 66 66 65 72 4c 65 66 74 7b 30 25 7b 6c 65 66 74 3a 30 7d 31 30 30 25 7b 6c 65 66 74 3a 2d 31 30 70 78 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 74 68 72 6f 62 7b 30 25 2c 31 30 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 7d 35 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 34 34 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 77 69 67 67 6c 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 Data Ascii: /* VimeoPlayer - v4.29.7 - 2024-04-17 */@keyframes buffer{100%{transform:translateX(-10px)}}@-moz-keyframes bufferLeft{0%{left:0}100%{left:-10px}}@keyframes throb{0%,100%{background-color:#555}50%{background-color:#444}}@keyframes wiggle{0%{transform:tra
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 61 63 69 74 79 3a 30 3b 77 69 64 74 68 3a 31 35 30 25 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 32 35 25 29 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 73 75 62 74 69 74 6c 65 2d 2d 65 6d 62 65 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 34 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 31 2e 32 65 6d 20 31 65 6d 20 31 2e 35 65 6d 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 68 65 69 67 68 74 3a 31 37 35 70 78 29 7b 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 73 75 62 74 69 74 6c 65 2d 2d 65 6d 62 65 64 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 73 68 61 72 65 2d 66 6f 6f 74 6e 6f 74 65 2d 2d 65 6d 62 Data Ascii: acity:0;width:150%;transform:translateX(125%)}.player .vp-share-subtitle--embed{font-size:1.4em!important;margin:1.2em 1em 1.5em;color:#fff!important}@media (max-height:175px){.player .vp-share-subtitle--embed{display:none}}.player .vp-share-footnote--emb
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 6c 67 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 63 75 73 74 6f 6d 2d 66 69 65 6c 64 2c 2e 70 6c 61 79 65 72 2d 73 6d 20 2e 76 70 2d 65 6d 61 69 6c 2d Data Ascii: re-form-custom-field,.player-lg .vp-email-capture-reg-full .vp-email-capture-form-custom-field,.player-md .vp-email-capture .vp-email-capture-form-custom-field,.player-md .vp-email-capture-reg-full .vp-email-capture-form-custom-field,.player-sm .vp-email-
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 2e 33 73 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 70 6c 61 79 65 72 2d 6c 67 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2c 2e 70 6c 61 79 65 72 2d 6c 67 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 73 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 Data Ascii: 0;transition:transform .3s;border-radius:0}.player-lg .vp-email-capture .vp-email-capture-form-buttons .vp-email-capture-form-button,.player-lg .vp-email-capture-reg-full .vp-email-capture-form-buttons .vp-email-capture-form-button,.player-md .vp-email-ca
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 67 6f 2d 62 61 63 6b 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 62 79 70 61 73 73 2c 2e 70 6c 61 79 65 72 2d 6d 64 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 66 75 6c 6c 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 72 65 67 2d 67 6f 2d 62 61 63 6b 2c 2e 70 6c 61 79 65 72 2d 73 6d 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 20 62 75 74 74 6f 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 Data Ascii: d .vp-email-capture button.vp-email-capture-reg-go-back,.player-md .vp-email-capture-reg-full button.vp-email-capture-reg-bypass,.player-md .vp-email-capture-reg-full button.vp-email-capture-reg-go-back,.player-sm .vp-email-capture button.vp-email-capture
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 64 6f 77 6e 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 76 69 64 65 6f 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6d 65 74 65 72 2d 77 72 61 70 70 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 76 69 64 65 6f 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6d 65 74 65 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 65 6d 61 69 6c 2d 63 61 70 74 75 72 65 2d 76 69 64 65 6f 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6d 65 74 65 72 2d 2d 61 63 74 69 76 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 6c 6c 20 33 73 20 6c Data Ascii: down.vp-email-capture-video-countdown-meter-wrapper{overflow:hidden}.player .vp-email-capture-video-countdown-meter{border-radius:0;position:absolute;top:0;right:0;bottom:0;left:0}.player .vp-email-capture-video-countdown-meter--active{animation:fill 3s l
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 69 74 5d 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 77 69 64 74 68 3a 39 65 6d 3b 63 6f 6c 6f 72 3a 23 34 34 34 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 61 39 61 39 61 39 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 2e 70 61 73 73 77 6f 72 64 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 70 6c 61 79 65 72 20 2e 76 70 2d 6f 76 65 72 6c 61 79 2d 77 72 61 70 70 65 72 20 2e 66 6f 72 6d 20 2e 6c 6f 61 64 69 6e 67 7b 61 6e 69 6d 61 74 69 6f 6e Data Ascii: it]){border-radius:2px;width:9em;color:#444}.player .vp-overlay-wrapper .form input:not([type=submit])::placeholder{color:#a9a9a9}.player .vp-overlay-wrapper .form.password input[type=submit]{width:auto}.player .vp-overlay-wrapper .form .loading{animation
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 73 68 61 72 65 49 63 6f 6e 5f 5f 64 61 38 31 39 39 34 32 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 70 78 29 7d 2e 56 4f 44 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 76 6f 64 42 75 74 74 6f 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 36 35 38 32 34 62 39 65 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 65 6e 64 7d 62 75 74 74 6f 6e 2e 56 4f 44 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 76 6f 64 42 75 74 74 6f 6e 5f 5f 36 35 38 32 34 62 39 65 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 38 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 62 75 74 74 6f 6e 2e 56 4f 44 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 76 6f 64 42 75 74 74 6f 6e 5f 5f 36 35 38 32 34 62 39 65 5b 64 61 Data Ascii: shareIcon__da819942{transform:translateX(-1px)}.VODButton_module_vodButtonContainer__65824b9e{display:flex;justify-content:end}button.VODButton_module_vodButton__65824b9e span{font-size:.88rem;font-weight:700}button.VODButton_module_vodButton__65824b9e[da
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 64 61 74 61 2d 74 69 6e 79 2d 70 6c 61 79 65 64 5d 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 77 6f 2d 6d 6f 6e 6f 63 68 72 6f 6d 65 29 7d 62 75 74 74 6f 6e 2e 50 6c 61 79 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 70 6c 61 79 42 75 74 74 6f 6e 5f 5f 66 63 36 62 65 63 35 37 3a 68 6f 76 65 72 20 5b 64 61 74 61 2d 74 69 6e 79 2d 6c 6f 61 64 65 64 5d 7b 66 69 6c 6c 3a 76 61 72 28 2d 2d 63 6f 6c 6f 72 2d 74 77 6f 2d 6d 6f 6e 6f 63 68 72 6f 6d 65 2d 6f 70 61 63 69 74 79 2d 74 77 65 6e 74 79 29 7d 62 75 74 74 6f 6e 2e 50 6c 61 79 42 75 74 74 6f 6e 5f 6d 6f 64 75 6c 65 5f 70 6c 61 79 42 75 74 74 6f 6e 5f 5f 66 63 36 62 65 63 35 37 3a 68 6f 76 65 72 20 5b 64 61 74 61 2d 74 69 6e 79 2d 62 75 66 66 65 72 2d 70 61 74 74 65 72 6e 5d 20 6c 69 6e 65 7b 73 Data Ascii: data-tiny-played]{fill:var(--color-two-monochrome)}button.PlayButton_module_playButton__fc6bec57:hover [data-tiny-loaded]{fill:var(--color-two-monochrome-opacity-twenty)}button.PlayButton_module_playButton__fc6bec57:hover [data-tiny-buffer-pattern] line{s
2024-04-18 17:16:46 UTC	16384	IN	Data Raw: 35 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 2e 34 65 6d 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 31 2e 36 65 6d 20 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 34 65 6d 7d 2e 50 72 6f 67 72 65 73 73 42 61 72 5f 6d 6f 64 75 6c 65 5f 70 72 6f 67 72 65 73 73 42 61 72 43 6f 6e 74 61 69 6e 65 72 5f 5f 34 63 39 31 37 38 38 35 20 2e 50 72 6f 67 72 65 73 73 42 61 72 5f 6d 6f 64 75 6c 65 5f 70 72 6f 67 72 65 73 73 42 61 72 5f 5f 34 63 39 31 37 38 38 35 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 66 6c 65 78 3a 31 3b 68 65 69 67 68 74 3a 2e 34 65 6d 3b 70 6f 73 69 74 Data Ascii: 5{width:100%;height:.4em;display:flex;align-items:center;padding:1.6em 0;cursor:pointer;margin-right:.4em}.ProgressBar_module_progressBarContainer__4c917885 .ProgressBar_module_progressBar__4c917885{display:flex;align-items:center;flex:1;height:.4em;posit

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
415	192.168.2.4	50302	151.101.0.217	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:46 UTC	432	OUT	GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d?mw=80&q=85 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:46 UTC	589	IN	HTTP/1.1 200 OK Connection: close Content-Length: 886 Cache-Control: max-age=2592000 Content-Type: image/jpeg Etag: "5f19f7138fb1159af9b4cf2b05ffbd02" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 848817 Date: Thu, 18 Apr 2024 17:16:46 GMT X-Served-By: cache-dfw-kdfw8210067-DFW, cache-pdk-kfty2130045-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460607.799908,VS0,VE22 Vary: Accept
2024-04-18 17:16:46 UTC	886	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 2d 00 50 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 01 04 06 05 00 07 ff da 00 08 01 01 00 00 00 00 f8 95 ab 07 a1 b4 9f 50 cc f3 90 3d 0d 2d a5 f7 39 39 ae 26 aa b5 aa b6 8a a4 27 2c 74 8d 8c 35 b0 b3 c7 09 7b 8a 3d 34 0a 5e 64 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}-P"P=-99&',t5{=4^d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
416	192.168.2.4	50301	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:46 UTC	2505	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8"
2024-04-18 17:16:47 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:46 GMT Via: 1.1 varnish ETag: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" Age: 43 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130030-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460607.972750,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
417	192.168.2.4	50303	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:47 UTC	2504	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s"
2024-04-18 17:16:47 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:47 GMT Via: 1.1 varnish ETag: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" Age: 41 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130074-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460607.285563,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
418	192.168.2.4	50191	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:47 UTC	604	OUT	GET /ajax/libs/algoliasearch/3.33.0/algoliasearch.min.js?v=638484955464930367 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:47 UTC	964	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03cfd-110a8" Last-Modified: Mon, 04 May 2020 16:04:13 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 25017 Expires: Tue, 08 Apr 2025 17:16:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=74lJSiAVKHe9PFaX1TrsL3ws0hdUCHJjO903yAeI%2BaLUZxL8TciGtvY1q%2FeseK%2B%2By8G8Me2Ri4oq2B6N6E1O1BkZQqavPQBk%2BU6W4HaZsUTWAQ%2FFPewz59AdRqpFae9DlkTsSQBp"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664dfc9ec7674e-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:47 UTC	405	IN	Data Raw: 33 39 39 39 0d 0a 2f 2a 21 20 61 6c 67 6f 6c 69 61 73 65 61 72 63 68 20 33 2e 33 33 2e 30 20 7c 20 c2 a9 20 32 30 31 34 2c 20 32 30 31 35 20 41 6c 67 6f 6c 69 61 20 53 41 53 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 6c 67 6f 6c 69 61 2f 61 6c 67 6f 6c 69 61 73 65 61 72 63 68 2d 63 6c 69 65 6e 74 2d 6a 73 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 74 3d 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 28 74 3d 73 65 6c 66 29 2c 74 2e 41 4c 47 4f 4c 49 41 5f 4d 49 47 52 41 54 49 4f 4e 5f 4c 41 59 45 52 3d 65 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: 3999/! algoliasearch 3.33.0 \| 2014, 2015 Algolia SAS \| github.com/algolia/algoliasearch-client-js /!function(e){var t;"undefined"!=typeof window?t=window:"undefined"!=typeof self&&(t=self),t.ALGOLIA_MIGRATION_LAYER=e()}(function(){return function
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 73 2b 22 27 22 29 3b 74 68 72 6f 77 20 75 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 75 7d 76 61 72 20 6c 3d 72 5b 73 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 73 5d 5b 30 5d 2e 63 61 6c 6c 28 6c 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 5b 73 5d 5b 31 5d 5b 65 5d 3b 72 65 74 75 72 6e 20 6e 28 72 3f 72 3a 65 29 7d 2c 6c 2c 6c 2e 65 78 70 6f 72 74 73 2c 65 2c 74 2c 72 2c 6f 29 7d 72 65 74 75 72 6e 20 72 5b 73 5d 2e 65 78 70 6f 72 74 73 7d 66 6f 72 28 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 2c 73 3d 30 3b 73 3c 6f 2e 6c 65 6e 67 74 68 Data Ascii: nnot find module '"+s+"'");throw u.code="MODULE_NOT_FOUND",u}var l=r[s]={exports:{}};t[s][0].call(l.exports,function(e){var r=t[s][1][e];return n(r?r:e)},l,l.exports,e,t,r,o)}return r[s].exports}for(var i="function"==typeof require&&require,s=0;s<o.length
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 74 29 7b 76 61 72 20 72 3d 65 28 31 29 2c 6f 3d 22 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 61 6c 67 6f 6c 69 61 73 65 61 72 63 68 2f 32 2f 22 2b 74 2b 22 2e 6d 69 6e 2e 6a 73 22 2c 69 3d 22 2d 2d 20 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 20 60 6c 61 74 65 73 74 60 20 77 61 72 6e 69 6e 67 20 2d 2d 5c 6e 57 61 72 6e 69 6e 67 2c 20 79 6f 75 20 61 72 65 20 75 73 69 6e 67 20 74 68 65 20 60 6c 61 74 65 73 74 60 20 76 65 72 73 69 6f 6e 20 73 74 72 69 6e 67 20 66 72 6f 6d 20 6a 73 44 65 6c 69 76 72 20 74 6f 20 6c 6f 61 64 20 74 68 65 20 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 20 6c 69 62 72 61 72 79 2e 5c 6e 55 73 69 6e 67 20 60 Data Ascii: function(e,t,r){"use strict";function o(t){var r=e(1),o="//cdn.jsdelivr.net/algoliasearch/2/"+t+".min.js",i="-- AlgoliaSearch `latest` warning --\nWarning, you are using the `latest` version string from jsDelivr to load the AlgoliaSearch library.\nUsing `
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 67 6f 6c 69 61 73 65 61 72 63 68 2d 63 6c 69 65 6e 74 2d 6a 73 2f 77 69 6b 69 2f 4d 69 67 72 61 74 69 6f 6e 2d 67 75 69 64 65 2d 66 72 6f 6d 2d 32 2e 78 2e 78 2d 74 6f 2d 33 2e 78 2e 78 5c 6e 2d 2d 20 2f 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 20 56 32 20 3d 3e 20 56 33 20 65 72 72 6f 72 20 2d 2d 22 3b 77 69 6e 64 6f 77 2e 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 77 69 6e 64 6f 77 2e 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 48 65 6c 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 65 29 7d 2c 77 69 6e 64 6f 77 2e 41 6c 67 6f 6c 69 61 45 78 70 6c 61 69 6e 52 65 73 75 6c 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f Data Ascii: goliasearch-client-js/wiki/Migration-guide-from-2.x.x-to-3.x.x\n-- /AlgoliaSearch V2 => V3 error --";window.AlgoliaSearch=function(){throw new Error(e)},window.AlgoliaSearchHelper=function(){throw new Error(e)},window.AlgoliaExplainResults=function(){thro
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 26 26 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 57 65 62 6b 69 74 41 70 70 65 61 72 61 6e 63 65 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 26 26 28 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 66 69 72 65 62 75 67 7c 7c 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 65 78 63 65 70 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 74 61 62 6c 65 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 26 26 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 Data Ascii: cumentElement.style&&document.documentElement.style.WebkitAppearance\|\|"undefined"!=typeof window&&window.console&&(window.console.firebug\|\|window.console.exception&&window.console.table)\|\|"undefined"!=typeof navigator&&navigator.userAgent&&navigator.userA
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 66 6f 72 6d 61 74 74 65 72 73 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 63 61 74 63 68 28 74 29 7b 72 65 74 75 72 6e 22 5b 55 6e 65 78 70 65 63 74 65 64 4a 53 4f 4e 50 61 72 73 65 45 72 72 6f 72 5d 3a 20 22 2b 74 2e 6d 65 73 73 61 67 65 7d 7d 2c 72 2e 65 6e 61 62 6c 65 28 63 28 29 29 7d 29 2e 63 61 6c 6c 28 74 68 69 73 2c 65 28 31 32 29 29 7d 2c 7b 31 32 3a 31 32 2c 32 3a 32 7d 5d 2c 32 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 74 2c 6f 3d 30 3b 66 6f 72 28 74 20 69 6e 20 65 29 6f 3d 28 6f 3c 3c 35 29 2d 6f 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 74 29 2c 6f 7c 3d 30 3b 72 65 74 75 72 6e 20 72 2e 63 Data Ascii: formatters.j=function(e){try{return JSON.stringify(e)}catch(t){return"[UnexpectedJSONParseError]: "+t.message}},r.enable(c())}).call(this,e(12))},{12:12,2:2}],2:[function(e,t,r){function o(e){var t,o=0;for(t in e)o=(o<<5)-o+e.charCodeAt(t),o\|=0;return r.c
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 20 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 65 2e 73 74 61 63 6b 7c 7c 65 2e 6d 65 73 73 61 67 65 3a 65 7d 72 3d 74 2e 65 78 70 6f 72 74 73 3d 6e 2e 64 65 62 75 67 3d 6e 5b 22 64 65 66 61 75 6c 74 22 5d 3d 6e 2c 72 2e 63 6f 65 72 63 65 3d 63 2c 72 2e 64 69 73 61 62 6c 65 3d 73 2c 72 2e 65 6e 61 62 6c 65 3d 69 2c 72 2e 65 6e 61 62 6c 65 64 3d 61 2c 72 2e 68 75 6d 61 6e 69 7a 65 3d 65 28 39 29 2c 72 2e 6e 61 6d 65 73 3d 5b 5d 2c 72 2e 73 6b 69 70 73 3d 5b 5d 2c 72 2e 66 6f 72 6d 61 74 74 65 72 73 3d 7b 7d 3b 76 61 72 20 75 7d 2c 7b 39 3a 39 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 69 29 7b 21 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 Data Ascii: e instanceof Error?e.stack\|\|e.message:e}r=t.exports=n.debug=n["default"]=n,r.coerce=c,r.disable=s,r.enable=i,r.enabled=a,r.humanize=e(9),r.names=[],r.skips=[],r.formatters={};var u},{9:9}],3:[function(t,r,o){(function(n,i){!function(t,n){"object"==typeof
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 65 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 74 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 72 3d 6e 65 77 20 74 28 6d 29 3b 72 65 74 75 72 6e 20 52 28 72 2c 65 29 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 59 6f 75 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 61 20 70 72 6f 6d 69 73 65 20 77 69 74 68 20 69 74 73 65 6c 66 22 29 7d 66 75 6e 63 74 69 6f 6e 20 67 28 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 70 72 6f 6d 69 73 65 73 20 63 61 6c 6c 62 61 63 6b 20 63 61 6e 6e 6f 74 20 72 65 74 75 72 6e 20 74 68 61 74 20 73 61 6d 65 20 70 72 6f 6d 69 73 65 2e 22 29 7d 66 75 6e 63 74 Data Ascii: typeof e&&e.constructor===t)return e;var r=new t(m);return R(r,e),r}function m(){}function v(){return new TypeError("You cannot resolve a promise with itself")}function g(){return new TypeError("A promises callback cannot return that same promise.")}funct
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 3d 74 5b 73 5d 2c 6e 3d 74 5b 73 2b 72 5d 2c 6f 3f 45 28 72 2c 6f 2c 6e 2c 69 29 3a 6e 28 69 29 3b 65 2e 5f 73 75 62 73 63 72 69 62 65 72 73 2e 6c 65 6e 67 74 68 3d 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 29 7b 74 68 69 73 2e 65 72 72 6f 72 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 71 28 65 2c 74 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 65 28 74 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 20 75 65 2e 65 72 72 6f 72 3d 72 2c 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 2c 6f 2c 6e 29 7b 76 61 72 20 69 3d 72 28 6f 29 2c 73 3d 76 6f 69 64 20 30 2c 61 3d 76 6f 69 64 20 30 2c 63 3d 76 6f 69 64 20 30 2c 75 3d 76 6f 69 64 20 30 3b 69 66 28 69 29 7b 69 66 28 73 3d 71 28 6f 2c 6e 29 2c 73 3d 3d 3d 75 65 3f 28 75 3d 21 30 2c 61 3d 73 2e 65 72 72 Data Ascii: =t[s],n=t[s+r],o?E(r,o,n,i):n(i);e._subscribers.length=0}}function O(){this.error=null}function q(e,t){try{return e(t)}catch(r){return ue.error=r,ue}}function E(e,t,o,n){var i=r(o),s=void 0,a=void 0,c=void 0,u=void 0;if(i){if(s=q(o,n),s===ue?(u=!0,a=s.err
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 74 68 65 20 70 72 6f 6d 69 73 65 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 61 69 6c 65 64 20 74 6f 20 63 6f 6e 73 74 72 75 63 74 20 27 50 72 6f 6d 69 73 65 27 3a 20 50 6c 65 61 73 65 20 75 73 65 20 74 68 65 20 27 6e 65 77 27 20 6f 70 65 72 61 74 6f 72 2c 20 74 68 69 73 20 6f 62 6a 65 63 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 63 61 6e 6e 6f 74 20 62 65 20 63 61 6c 6c 65 64 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 74 68 69 73 5b 6e 65 5d 3d 50 28 29 2c 74 68 69 73 2e 5f 72 65 73 75 6c 74 3d 74 68 69 73 2e 5f 73 74 61 74 65 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 5f 73 75 62 73 63 72 69 62 65 72 Data Ascii: the promise constructor")}function J(){throw new TypeError("Failed to construct 'Promise': Please use the 'new' operator, this object constructor cannot be called as a function.")}function B(e){this[ne]=P(),this._result=this._state=void 0,this._subscriber

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
419	192.168.2.4	50305	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:47 UTC	605	OUT	GET /ajax/libs/autocomplete.js/0.37.1/autocomplete.min.js?v=638484955464930367 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:47 UTC	963	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03d61-df7e" Last-Modified: Mon, 04 May 2020 16:05:53 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 26795 Expires: Tue, 08 Apr 2025 17:16:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FnTETk9s0f6a91rW5LoaeG0aM1eexf0CSAqgEdXPTycfb72SGx%2B8cFMO6%2FMHvqW3ETgN5DuzGkcujp%2B2KHjebf6BuwGWcnPEXsmjJr9uJUrb%2FcLSoSgT9xyjmT38BYmx%2FuVepg6C"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664dfedf667bb1-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:47 UTC	406	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 2a 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 20 30 2e 33 37 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 61 6c 67 6f 6c 69 61 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 30 20 41 6c 67 6f 6c 69 61 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 62 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 Data Ascii: 7bec/! autocomplete.js 0.37.1 * https://github.com/algolia/autocomplete.js * Copyright 2020 Algolia, Inc. and other contributors; Licensed MIT */!function(a,b){"object"==typeof exports&&"object"==typeof module?module.exports=b():"function"==type
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 64 29 7b 69 66 28 63 5b 64 5d 29 72 65 74 75 72 6e 20 63 5b 64 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 65 3d 63 5b 64 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 64 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 61 5b 64 5d 2e 63 61 6c 6c 28 65 2e 65 78 70 6f 72 74 73 2c 65 2c 65 2e 65 78 70 6f 72 74 73 2c 62 29 2c 65 2e 6c 6f 61 64 65 64 3d 21 30 2c 65 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 63 3d 7b 7d 3b 72 65 74 75 72 6e 20 62 2e 6d 3d 61 2c 62 2e 63 3d 63 2c 62 2e 70 3d 22 22 2c 62 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 65 78 70 6f 72 74 73 3d 63 28 31 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 Data Ascii: d){if(c[d])return c[d].exports;var e=c[d]={exports:{},id:d,loaded:!1};return a[d].call(e.exports,e,e.exports,b),e.loaded=!0,e.exports}var c={};return b.m=a,b.c=c,b.p="",b(0)}([function(a,b,c){"use strict";a.exports=c(1)},function(a,b,c){"use strict";funct
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 2e 73 6f 75 72 63 65 73 3d 68 2e 73 6f 75 72 63 65 73 2c 64 2e 65 73 63 61 70 65 48 69 67 68 6c 69 67 68 74 65 64 53 74 72 69 6e 67 3d 66 2e 65 73 63 61 70 65 48 69 67 68 6c 69 67 68 74 65 64 53 74 72 69 6e 67 3b 76 61 72 20 6a 3d 22 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 69 6e 20 77 69 6e 64 6f 77 2c 6b 3d 77 69 6e 64 6f 77 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3b 64 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 3f 77 69 6e 64 6f 77 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3d 6b 3a 64 65 6c 65 74 65 20 77 69 6e 64 6f 77 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 64 7d 2c 61 2e 65 78 70 6f 72 74 73 3d 64 7d 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 21 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 61 2e 65 78 70 Data Ascii: .sources=h.sources,d.escapeHighlightedString=f.escapeHighlightedString;var j="autocomplete"in window,k=window.autocomplete;d.noConflict=function(){return j?window.autocomplete=k:delete window.autocomplete,d},a.exports=d},function(a,b){!function(b,c){a.exp
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 69 6e 20 61 3f 47 2e 63 61 6c 6c 28 61 2e 63 68 69 6c 64 72 65 6e 29 3a 7a 2e 6d 61 70 28 61 2e 63 68 69 6c 64 4e 6f 64 65 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 61 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 61 3f 61 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 63 3d 30 3b 63 3c 64 3b 63 2b 2b 29 74 68 69 73 5b 63 5d 3d 61 5b 63 5d 3b 74 68 69 73 2e 6c 65 6e 67 74 68 3d 64 2c 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 62 7c 7c 22 22 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 2c 62 2c 63 29 7b 66 6f 72 28 79 20 69 6e 20 62 29 63 26 26 28 67 28 62 5b 79 5d 29 7c 7c 24 28 62 5b 79 5d 29 29 3f 28 67 28 62 5b 79 5d 29 26 26 21 67 28 61 5b 79 5d 29 26 26 28 Data Ascii: in a?G.call(a.children):z.map(a.childNodes,function(a){if(1==a.nodeType)return a})}function p(a,b){var c,d=a?a.length:0;for(c=0;c<d;c++)this[c]=a[c];this.length=d,this.selector=b\|\|""}function q(a,b,c){for(y in b)c&&(g(b[y])\|\|$(b[y]))?(g(b[y])&&!g(a[y])&&(
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 7d 2c 57 3d 56 2e 74 6f 53 74 72 69 6e 67 2c 58 3d 7b 7d 2c 59 3d 48 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 5a 3d 7b 74 61 62 69 6e 64 65 78 3a 22 74 61 62 49 6e 64 65 78 22 2c 72 65 61 64 6f 6e 6c 79 3a 22 72 65 61 64 4f 6e 6c 79 22 2c 66 6f 72 3a 22 68 74 6d 6c 46 6f 72 22 2c 63 6c 61 73 73 3a 22 63 6c 61 73 73 4e 61 6d 65 22 2c 6d 61 78 6c 65 6e 67 74 68 3a 22 6d 61 78 4c 65 6e 67 74 68 22 2c 63 65 6c 6c 73 70 61 63 69 6e 67 3a 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 63 65 6c 6c 70 61 64 64 69 6e 67 3a 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 72 6f 77 73 70 61 6e 3a 22 72 6f 77 53 70 61 6e 22 2c 63 6f 6c 73 70 61 6e 3a 22 63 6f 6c 53 70 61 6e 22 2c 75 73 65 6d 61 70 3a 22 75 73 65 4d 61 70 22 2c 66 72 61 6d 65 62 6f 72 64 Data Ascii: },W=V.toString,X={},Y=H.createElement("div"),Z={tabindex:"tabIndex",readonly:"readOnly",for:"htmlFor",class:"className",maxlength:"maxLength",cellspacing:"cellSpacing",cellpadding:"cellPadding",rowspan:"rowSpan",colspan:"colSpan",usemap:"useMap",framebord
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 29 69 66 28 61 3d 61 2e 74 72 69 6d 28 29 2c 22 3c 22 3d 3d 61 5b 30 5d 26 26 4c 2e 74 65 73 74 28 61 29 29 64 3d 58 2e 66 72 61 67 6d 65 6e 74 28 61 2c 52 65 67 45 78 70 2e 24 31 2c 62 29 2c 61 3d 6e 75 6c 6c 3b 65 6c 73 65 7b 69 66 28 62 21 3d 3d 78 29 72 65 74 75 72 6e 20 7a 28 62 29 2e 66 69 6e 64 28 61 29 3b 64 3d 58 2e 71 73 61 28 48 2c 61 29 7d 65 6c 73 65 7b 69 66 28 63 28 61 29 29 72 65 74 75 72 6e 20 7a 28 48 29 2e 72 65 61 64 79 28 61 29 3b 69 66 28 58 2e 69 73 5a 28 61 29 29 72 65 74 75 72 6e 20 61 3b 69 66 28 24 28 61 29 29 64 3d 69 28 61 29 3b 65 6c 73 65 20 69 66 28 66 28 61 29 29 64 3d 5b 61 5d 2c 61 3d 6e 75 6c 6c 3b 65 6c 73 65 20 69 66 28 4c 2e 74 65 73 74 28 61 29 29 64 3d 58 2e 66 72 61 67 6d Data Ascii: ing"==typeof a)if(a=a.trim(),"<"==a[0]&&L.test(a))d=X.fragment(a,RegExp.$1,b),a=null;else{if(b!==x)return z(b).find(a);d=X.qsa(H,a)}else{if(c(a))return z(H).ready(a);if(X.isZ(a))return a;if($(a))d=i(a);else if(f(a))d=[a],a=null;else if(L.test(a))d=X.fragm
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 74 79 70 65 2e 74 72 69 6d 2e 63 61 6c 6c 28 61 29 7d 2c 7a 2e 75 75 69 64 3d 30 2c 7a 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 7a 2e 65 78 70 72 3d 7b 7d 2c 7a 2e 6e 6f 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 7a 2e 6d 61 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 5b 5d 3b 69 66 28 68 28 61 29 29 66 6f 72 28 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 6e 75 6c 6c 21 3d 28 63 3d 62 28 61 5b 64 5d 2c 64 29 29 26 26 66 2e 70 75 73 68 28 63 29 3b 65 6c 73 65 20 66 6f 72 28 65 20 69 6e 20 61 29 6e 75 6c 6c 21 3d 28 63 3d 62 28 61 5b 65 5d 2c 65 29 29 26 26 66 2e 70 75 73 68 28 63 29 3b 72 65 74 75 72 6e 20 6a 28 66 29 7d 2c 7a 2e 65 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c Data Ascii: type.trim.call(a)},z.uuid=0,z.support={},z.expr={},z.noop=function(){},z.map=function(a,b){var c,d,e,f=[];if(h(a))for(d=0;d<a.length;d++)null!=(c=b(a[d],d))&&f.push(c);else for(e in a)null!=(c=b(a[e],e))&&f.push(c);return j(f)},z.each=function(a,b){var c,
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 68 69 73 29 7d 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 44 2e 65 76 65 72 79 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 21 3d 3d 21 31 7d 29 2c 74 68 69 73 7d 2c 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 63 28 61 29 3f 74 68 69 73 2e 6e 6f 74 28 74 68 69 73 2e 6e 6f 74 28 61 29 29 3a 7a 28 46 2e 63 61 6c 6c 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 58 2e 6d 61 74 63 68 65 73 28 62 2c 61 29 7d 29 29 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 7a 28 43 28 74 68 69 73 2e 63 6f 6e 63 61 74 28 7a 28 61 2c 62 29 29 29 29 7d 2c Data Ascii: his)})},each:function(a){return D.every.call(this,function(b,c){return a.call(b,c,b)!==!1}),this},filter:function(a){return c(a)?this.not(this.not(a)):z(F.call(this,function(b){return X.matches(b,a)}))},add:function(a,b){return z(C(this.concat(z(a,b))))},
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 21 65 28 61 29 26 26 62 2e 69 6e 64 65 78 4f 66 28 61 29 3c 30 29 72 65 74 75 72 6e 20 62 2e 70 75 73 68 28 61 29 2c 61 7d 29 3b 72 65 74 75 72 6e 20 72 28 62 2c 61 29 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 28 43 28 74 68 69 73 2e 70 6c 75 63 6b 28 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 29 2c 61 29 7d 2c 63 68 69 6c 64 72 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 28 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 28 74 68 69 73 29 7d 29 2c 61 29 7d 2c 63 6f 6e 74 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 74 65 6e 74 Data Ascii: !e(a)&&b.indexOf(a)<0)return b.push(a),a});return r(b,a)},parent:function(a){return r(C(this.pluck("parentNode")),a)},children:function(a){return r(this.map(function(){return o(this)}),a)},contents:function(){return this.map(function(){return this.content
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 7d 29 7d 2c 68 69 64 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 22 6e 6f 6e 65 22 29 7d 2c 74 6f 67 67 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 7a 28 74 68 69 73 29 3b 28 61 3d 3d 3d 78 3f 22 6e 6f 6e 65 22 3d 3d 62 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3a 61 29 3f 62 2e 73 68 6f 77 28 29 3a 62 2e 68 69 64 65 28 29 7d 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 7a Data Ascii: ion(){return this.map(function(){return this.cloneNode(!0)})},hide:function(){return this.css("display","none")},toggle:function(a){return this.each(function(){var b=z(this);(a===x?"none"==b.css("display"):a)?b.show():b.hide()})},prev:function(a){return z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
420	192.168.2.4	50306	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:47 UTC	583	OUT	GET /ajax/libs/vue/2.2.6/vue.min.js?v=638484955464930367 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:47 UTC	951	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:47 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb0402c-12b7a" Last-Modified: Mon, 04 May 2020 16:17:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 40 Expires: Tue, 08 Apr 2025 17:16:47 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lAVEvKjRoyzYsN2Uoq8mh7N2zaIGPHRFmqZhHNZyamhJ7nluZP05ND7dAQ7KxcHk3rrCyQdkxWFtKprx1vk%2FwwgwBlQWw0dit2IwkmFeCXA0aIXL2M9qd7WNZiniAi2BCSklcpSx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664dfeebcc4507-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:47 UTC	418	IN	Data Raw: 37 62 66 37 0d 0a 2f 2a 21 0a 20 2a 20 56 75 65 2e 6a 73 20 76 32 2e 32 2e 36 0a 20 2a 20 28 63 29 20 32 30 31 34 2d 32 30 31 37 20 45 76 61 6e 20 59 6f 75 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 74 29 3a 65 2e 56 75 65 3d 74 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 Data Ascii: 7bf7/! Vue.js v2.2.6 * (c) 2014-2017 Evan You * Released under the MIT License. */!function(e,t){"object"==typeof exports&&"undefined"!=typeof module?module.exports=t():"function"==typeof define&&define.amd?define(t):e.Vue=t()}(this,function(){"
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 2c 72 3d 65 2e 73 70 6c 69 74 28 22 2c 22 29 2c 69 3d 30 3b 69 3c 72 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 6e 5b 72 5b 69 5d 5d 3d 21 30 3b 72 65 74 75 72 6e 20 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 5b 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 5b 65 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 69 66 28 65 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 6e 3d 65 2e 69 6e 64 65 78 4f 66 28 74 29 3b 69 66 28 6e 3e 2d 31 29 72 65 74 75 72 6e 20 65 2e 73 70 6c 69 63 65 28 6e 2c 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 69 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 Data Ascii: e,t){for(var n=Object.create(null),r=e.split(","),i=0;i<r.length;i++)n[r[i]]=!0;return t?function(e){return n[e.toLowerCase()]}:function(e){return n[e]}}function r(e,t){if(e.length){var n=e.indexOf(t);if(n>-1)return e.splice(n,1)}}function i(e,t){return $
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 3b 65 3d 65 5b 74 5b 6e 5d 5d 7d 72 65 74 75 72 6e 20 65 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 72 65 74 75 72 6e 2f 6e 61 74 69 76 65 20 63 6f 64 65 2f 2e 74 65 73 74 28 65 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 71 69 2e 74 61 72 67 65 74 26 26 57 69 2e 70 75 73 68 28 71 69 2e 74 61 72 67 65 74 29 2c 71 69 2e 74 61 72 67 65 74 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 77 28 29 7b 71 69 2e 74 61 72 67 65 74 3d 57 69 2e 70 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 Data Ascii: or(var n=0;n<t.length;n++){if(!e)return;e=e[t[n]]}return e}}}function b(e){return/native code/.test(e.toString())}function $(e){qi.target&&Wi.push(qi.target),qi.target=e}function w(){qi.target=Wi.pop()}function x(e,t){e.__proto__=t}function C(e,t,n){for(v
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 26 26 74 2e 5f 5f 6f 62 5f 5f 26 26 74 2e 5f 5f 6f 62 5f 5f 2e 64 65 70 2e 64 65 70 65 6e 64 28 29 2c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 26 26 53 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 45 28 65 2c 74 29 7b 69 66 28 21 74 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 6f 2c 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 73 3d 30 3b 73 3c 61 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 6e 3d 61 5b 73 5d 2c 72 3d 65 5b 6e 5d 2c 6f 3d 74 5b 6e 5d 2c 69 28 65 2c 6e 29 3f 66 28 72 29 26 26 66 28 6f 29 26 26 45 28 72 2c 6f 29 3a 4f 28 65 2c 6e 2c 6f 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 6a 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 65 3f 65 2e 63 6f 6e 63 61 74 28 74 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 Data Ascii: &&t.__ob__&&t.__ob__.dep.depend(),Array.isArray(t)&&S(t)}function E(e,t){if(!t)return e;for(var n,r,o,a=Object.keys(t),s=0;s<a.length;s++)n=a[s],r=e[n],o=t[n],i(e,n)?f(r)&&f(o)&&E(r,o):O(e,n,o);return e}function j(e,t){return t?e?e.concat(t):Array.isArray
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 74 3d 21 30 2c 6b 28 73 29 2c 51 69 2e 73 68 6f 75 6c 64 43 6f 6e 76 65 72 74 3d 63 7d 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 52 28 65 2c 74 2c 6e 29 7b 69 66 28 69 28 74 2c 22 64 65 66 61 75 6c 74 22 29 29 7b 76 61 72 20 72 3d 74 2e 64 65 66 61 75 6c 74 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 24 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 44 61 74 61 26 26 76 6f 69 64 20 30 3d 3d 3d 65 2e 24 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 44 61 74 61 5b 6e 5d 26 26 76 6f 69 64 20 30 21 3d 3d 65 2e 5f 70 72 6f 70 73 5b 6e 5d 3f 65 2e 5f 70 72 6f 70 73 5b 6e 5d 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 22 46 75 6e 63 74 69 6f 6e 22 21 3d 3d 46 28 74 2e 74 79 70 65 29 3f 72 2e 63 61 6c 6c 28 65 29 3a 72 7d 7d 66 75 6e 63 74 69 6f Data Ascii: t=!0,k(s),Qi.shouldConvert=c}return s}function R(e,t,n){if(i(t,"default")){var r=t.default;return e&&e.$options.propsData&&void 0===e.$options.propsData[n]&&void 0!==e._props[n]?e._props[n]:"function"==typeof r&&"Function"!==F(t.type)?r.call(e):r}}functio
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 68 28 69 29 29 3a 6f 3d 4a 28 5b 61 2c 69 5d 29 3a 6f 3d 4a 28 5b 69 5d 29 2c 6f 2e 6d 65 72 67 65 64 3d 21 30 2c 65 5b 74 5d 3d 6f 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 65 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 5b 74 5d 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 29 7b 72 65 74 75 72 6e 20 6f 28 65 29 3f 5b 42 28 65 29 5d 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 3f 47 28 65 29 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 61 3d 5b 5d 3b 66 6f Data Ascii: h(i)):o=J([a,i]):o=J([i]),o.merged=!0,e[t]=o}function W(e){for(var t=0;t<e.length;t++)if(Array.isArray(e[t]))return Array.prototype.concat.apply([],e);return e}function Z(e){return o(e)?[B(e)]:Array.isArray(e)?G(e):void 0}function G(e,t){var n,r,i,a=[];fo
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 26 6e 2e 24 70 61 72 65 6e 74 3b 29 6e 3d 6e 2e 24 70 61 72 65 6e 74 3b 6e 2e 24 63 68 69 6c 64 72 65 6e 2e 70 75 73 68 28 65 29 7d 65 2e 24 70 61 72 65 6e 74 3d 6e 2c 65 2e 24 72 6f 6f 74 3d 6e 3f 6e 2e 24 72 6f 6f 74 3a 65 2c 65 2e 24 63 68 69 6c 64 72 65 6e 3d 5b 5d 2c 65 2e 24 72 65 66 73 3d 7b 7d 2c 65 2e 5f 77 61 74 63 68 65 72 3d 6e 75 6c 6c 2c 65 2e 5f 69 6e 61 63 74 69 76 65 3d 6e 75 6c 6c 2c 65 2e 5f 64 69 72 65 63 74 49 6e 61 63 74 69 76 65 3d 21 31 2c 65 2e 5f 69 73 4d 6f 75 6e 74 65 64 3d 21 31 2c 65 2e 5f 69 73 44 65 73 74 72 6f 79 65 64 3d 21 31 2c 65 2e 5f 69 73 42 65 69 6e 67 44 65 73 74 72 6f 79 65 64 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 61 65 28 65 2c 74 2c 6e 29 7b 65 2e 24 65 6c 3d 74 2c 65 2e 24 6f 70 74 69 6f 6e 73 2e 72 65 6e 64 Data Ascii: &n.$parent;)n=n.$parent;n.$children.push(e)}e.$parent=n,e.$root=n?n.$root:e,e.$children=[],e.$refs={},e._watcher=null,e._inactive=null,e._directInactive=!1,e._isMounted=!1,e._isDestroyed=!1,e._isBeingDestroyed=!1}function ae(e,t,n){e.$el=t,e.$options.rend
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 65 28 65 2e 24 63 68 69 6c 64 72 65 6e 5b 6e 5d 29 3b 66 65 28 65 2c 22 64 65 61 63 74 69 76 61 74 65 64 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 24 6f 70 74 69 6f 6e 73 5b 74 5d 3b 69 66 28 6e 29 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 6e 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 74 72 79 7b 6e 5b 72 5d 2e 63 61 6c 6c 28 65 29 7d 63 61 74 63 68 28 6e 29 7b 55 28 6e 2c 65 2c 74 2b 22 20 68 6f 6f 6b 22 29 7d 65 2e 5f 68 61 73 48 6f 6f 6b 45 76 65 6e 74 26 26 65 2e 24 65 6d 69 74 28 22 68 6f 6f 6b 3a 22 2b 74 29 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 29 7b 63 6f 2e 6c 65 6e 67 74 68 3d 30 2c 75 6f 3d 7b 7d 2c 6c 6f 3d 66 6f 3d 21 31 7d 66 75 6e 63 74 69 6f 6e 20 64 65 28 29 7b 66 6f 3d 21 30 3b 76 61 72 Data Ascii: e(e.$children[n]);fe(e,"deactivated")}}function fe(e,t){var n=e.$options[t];if(n)for(var r=0,i=n.length;r<i;r++)try{n[r].call(e)}catch(n){U(n,e,t+" hook")}e._hasHookEvent&&e.$emit("hook:"+t)}function pe(){co.length=0,uo={},lo=fo=!1}function de(){fo=!0;var
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 61 20 69 6e 20 74 29 21 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 2e 70 75 73 68 28 6f 29 3b 76 61 72 20 61 3d 50 28 6f 2c 74 2c 6e 2c 65 29 3b 41 28 72 2c 6f 2c 61 29 2c 6f 20 69 6e 20 65 7c 7c 67 65 28 65 2c 22 5f 70 72 6f 70 73 22 2c 6f 29 7d 28 61 29 3b 51 69 2e 73 68 6f 75 6c 64 43 6f 6e 76 65 72 74 3d 21 30 7d 66 75 6e 63 74 69 6f 6e 20 62 65 28 65 29 7b 76 61 72 20 74 3d 65 2e 24 6f 70 74 69 6f 6e 73 2e 64 61 74 61 3b 74 3d 65 2e 5f 64 61 74 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 3f 24 65 28 74 2c 65 29 3a 74 7c 7c 7b 7d 2c 66 28 74 29 7c 7c 28 74 3d 7b 7d 29 3b 66 6f 72 28 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 74 29 2c 72 3d 65 2e 24 6f 70 74 69 6f 6e 73 2e 70 72 6f 70 73 2c 6f 3d 6e 2e Data Ascii: or(var a in t)!function(o){i.push(o);var a=P(o,t,n,e);A(r,o,a),o in e\|\|ge(e,"_props",o)}(a);Qi.shouldConvert=!0}function be(e){var t=e.$options.data;t=e._data="function"==typeof t?$e(t,e):t\|\|{},f(t)\|\|(t={});for(var n=Object.keys(t),r=e.$options.props,o=n.
2024-04-18 17:16:47 UTC	1369	IN	Data Raw: 26 26 4d 65 28 65 2e 6f 70 74 69 6f 6e 73 2c 74 29 3b 76 61 72 20 61 3d 4e 65 28 74 2c 65 2c 69 29 3b 69 66 28 65 2e 6f 70 74 69 6f 6e 73 2e 66 75 6e 63 74 69 6f 6e 61 6c 29 72 65 74 75 72 6e 20 53 65 28 65 2c 61 2c 74 2c 6e 2c 72 29 3b 76 61 72 20 73 3d 74 2e 6f 6e 3b 74 2e 6f 6e 3d 74 2e 6e 61 74 69 76 65 4f 6e 2c 65 2e 6f 70 74 69 6f 6e 73 2e 61 62 73 74 72 61 63 74 26 26 28 74 3d 7b 7d 29 2c 4c 65 28 74 29 3b 76 61 72 20 63 3d 65 2e 6f 70 74 69 6f 6e 73 2e 6e 61 6d 65 7c 7c 69 3b 72 65 74 75 72 6e 20 6e 65 77 20 6e 6f 28 22 76 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 22 2b 65 2e 63 69 64 2b 28 63 3f 22 2d 22 2b 63 3a 22 22 29 2c 74 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 2c 6e 2c 7b 43 74 6f 72 3a 65 2c 70 72 6f 70 73 44 61 74 61 Data Ascii: &&Me(e.options,t);var a=Ne(t,e,i);if(e.options.functional)return Se(e,a,t,n,r);var s=t.on;t.on=t.nativeOn,e.options.abstract&&(t={}),Le(t);var c=e.options.name\|\|i;return new no("vue-component-"+e.cid+(c?"-"+c:""),t,void 0,void 0,void 0,n,{Ctor:e,propsData

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
421	192.168.2.4	50307	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:47 UTC	2404	OUT	GET /-/media/csr%20wellness_mantle%201_1230x420.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:47 UTC	883	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69866 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="CSR Wellness_Mantle 1_1230x420.jpg" Content-Type: image/webp Etag: "BdtRYDDlcu2W0X0iXNbJtpvqsjyg6iEBuTqVru02kTM" Fastly-Io-Info: ifsz=422634 idim=1230x420 ifmt=jpeg ofsz=69866 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010210 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560649 Date: Thu, 18 Apr 2024 17:16:47 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210102-DFW, cache-pdk-kfty2130044-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460608.800843,VS0,VE26 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:47 UTC	16384	IN	Data Raw: 52 49 46 46 e2 10 01 00 57 45 42 50 56 50 38 20 d6 10 01 00 90 93 04 9d 01 2a ce 04 a4 01 3e 51 22 8e 45 a3 a2 25 21 26 52 8c a0 a0 0a 09 63 6e 1f 74 32 b0 e3 8d e7 9d 01 21 a7 e6 7b e5 6d f6 22 96 20 39 2f 70 a7 34 e6 8f ec 5f 55 bf 5f 81 05 e1 76 ff f9 3c f3 39 27 c4 ef b9 68 f9 fe 9e f2 fd db ff 17 9e 0f ad 7f 69 ff ab ef 0f e6 37 fd bf db df 7f 9f d2 ff e3 fb 10 7f 49 ff 21 fb 1d fe 6b e1 97 fe bf dd 8f 83 1f e1 bf f0 fa a8 fe b1 fe eb f7 23 dd f7 f3 3f df ef f6 9f 51 1f ec 5f ed ff f6 76 4b 7f a0 ff e1 ec 47 fb a5 e9 df fb 97 f1 23 fd d3 fe cf ee df b5 47 fe df 60 0f ff f9 a4 1e 5d fd 17 fc 6f 0f 7c eb fc cf f8 5f f4 df f6 ff cc fb c3 e7 5f b7 2d 4b 3e 71 f9 db fa 3f e5 bf 7a bd c2 ff cb fe bf cd 1f 9c bf f0 ff a6 f6 1a fc db fa cf fb 8f b9 cf 95 1f Data Ascii: RIFFWEBPVP8 *>Q"E%!&Rcnt2!{m" 9/p4_U_v<9'hi7I!k#?Q_vKG#G`]o\|__-K>q?z
2024-04-18 17:16:47 UTC	16384	IN	Data Raw: 6c 0c 79 06 5b f8 86 50 50 49 5a f3 88 5e 65 a4 f7 22 fb d9 80 5b 89 68 48 f3 8e 92 04 fd c5 13 19 b7 12 db d3 79 3f 3c 88 4f d4 d5 a7 90 eb 41 a0 be 05 b8 6b 43 a5 b7 51 86 a9 33 c2 5d 74 d7 53 7e ea 39 e6 04 ef 93 96 b3 d1 52 29 7a 05 62 e8 92 c3 80 a7 09 a6 82 7c b3 dc 23 8c 05 69 94 ba 07 2e 84 eb d5 04 4d 42 75 0e 4b 38 a9 2f a5 e9 23 6c b1 8c 60 77 57 3a f8 49 af 7c e4 9d 6f a7 b3 e5 34 20 9d 4f d9 19 29 36 3c e4 54 13 b7 95 1e 17 ce 0f 92 50 ff af 4d 7b 1d 0d 0a 39 f5 8b c5 90 50 c0 9a c5 3a 7e 9b df 89 34 94 4b 27 7a 74 f5 96 f3 03 13 b0 f4 25 c7 79 0a 50 ea 43 25 f4 21 78 9b f1 bc bd 80 b7 17 ec 59 5d 36 b5 f7 e4 90 17 84 6a 3c bc 64 da 8a ef 9b 95 eb 5a ec 19 ab 72 fd d2 0f f0 aa 55 77 be a4 e1 cb aa 7c 61 1d fe 5c 7c 5e 47 df 21 68 bc 61 13 24 Data Ascii: ly[PPIZ^e"[hHy?<OAkCQ3]tS~9R)zb\|#i.MBuK8/#l`wW:I\|o4 O)6<TPM{9P:~4K'zt%yPC%!xY]6j<dZrUw\|a\\|^G!ha$
2024-04-18 17:16:47 UTC	16384	IN	Data Raw: 25 fb 7b 79 1c 95 b3 da ad 8d c2 f3 71 50 58 ba ec 2f 12 30 f3 c0 29 48 80 6d 31 21 27 27 4d a4 cf 18 19 d8 66 72 83 86 45 c7 b4 c4 0e 1d f1 c8 6e 70 62 42 0f b1 9e ba 2f 46 bf 50 1c e4 70 3e 10 d2 14 93 3c 00 08 c8 98 19 14 dd f8 62 f2 73 bb c8 ad 24 34 b7 a1 a8 4a cd e3 75 89 a0 cf 6f 45 b9 c1 d7 1e 97 e5 ed cd db 78 1d 5c 55 0d 83 57 a8 25 0f 67 b5 97 58 01 a1 65 57 8b 5d b6 3c 5d 5f 01 f7 a1 01 04 54 17 88 d4 a0 77 ae 23 a2 c6 3e a7 c1 81 3d 0c db b4 b5 4a ca 1d 0d 86 44 82 40 4e 28 b4 ec 85 e6 52 dd b3 6f ae 88 91 64 c0 9b ba e2 cd 0b b1 3e b4 e3 1c 83 cc 1e 33 ff f8 35 ca 46 10 4a 7f ab d1 9b b3 2d eb 24 78 2e 2f 1a 2f 45 f8 df 5c 26 82 e7 be cf f4 f1 7e 61 a5 bd b8 0e 0c 71 f5 1b ce 2b 7e fc d8 d1 1c 2e 9c 35 2c c9 07 d3 b1 a8 bd 71 ff 77 6c d6 3c Data Ascii: %{yqPX/0)Hm1!''MfrEnpbB/FPp><bs$4JuoEx\UW%gXeW]<]_Tw#>=JD@N(Rod>35FJ-$x.//E\&~aq+~.5,qwl<
2024-04-18 17:16:48 UTC	16384	IN	Data Raw: 4f d2 a1 e5 cf 4e 74 86 3f 2e 04 ea 51 bf b0 d9 3a 7e 30 a7 a8 ed 51 6f 49 d7 6a 68 bf 72 01 de 83 2e 52 07 60 b4 28 80 64 2d c3 9b a3 e7 5f 83 6a 0b ed 9a 58 9e f6 f0 df fa 76 a9 52 f5 11 2e a3 54 2e 97 81 a5 96 be c3 9d 7c d7 12 ae ab d3 2f 5f b3 ab 03 b8 8f 3f d3 2c c7 cf f9 2b a7 da 83 f9 41 ad 6c 70 db d5 d1 02 20 20 46 bb f2 94 92 34 2e fa 80 a3 f8 c6 60 34 cc 0e a4 f5 db e4 b1 26 b7 4b 47 fe cb 9c e4 b2 29 3a 80 cf c9 82 af fc 22 a7 10 93 c0 4e ff 76 5a ab 79 94 4e 7b d2 8b 86 ad a4 9a a7 51 1c 39 5a 29 8b 15 2a 28 76 df 0e 69 e9 6f cc a2 5d 05 e1 fb e8 9b bd 30 30 17 1f 12 fb 30 10 1e ff 04 35 c4 93 06 6d 63 d6 4e 37 15 2b 50 47 fd bb e8 32 60 ad 35 8f 37 8a 97 b3 35 c0 c9 13 b2 96 cc 5e 14 4d 2b e6 2e 03 85 b8 aa fd 07 f6 69 37 ff cf 61 b4 b4 b5 Data Ascii: ONt?.Q:~0QoIjhr.R`(d-_jXvR.T.\|/_?,+Alp F4.`4&KG):"NvZyN{Q9Z)*(vio]0005mcN7+PG2`575^M+.i7a
2024-04-18 17:16:48 UTC	4330	IN	Data Raw: c6 64 fc ab e1 5a 35 7b 36 dc 60 97 33 ab 4d e0 9d 3a ae 8d 5a 59 9e 9f 45 5d 8f ab e5 f1 08 f2 12 52 23 e9 67 c5 f5 94 9c f8 94 3d 08 8f 69 94 17 b5 11 89 27 1b e8 fd a8 1f e4 c0 16 f1 4d 80 47 98 d3 11 34 76 e7 b2 bb 11 66 48 49 86 1f 67 a0 8c 2e 0d 3e 63 b3 15 30 76 c3 59 55 40 d7 93 cd d2 4f f5 2a 49 64 65 dd 59 9e 6e 2b e9 a0 4d cb 8c 63 67 48 25 ca 10 5e c2 ae 3a 95 69 93 71 d0 e3 99 fd 84 ec 52 b0 93 0f 13 58 68 33 d4 eb 29 99 ed b7 c4 69 12 41 d9 75 af a6 26 71 a2 d3 c2 ad 4b 55 00 0e 66 d0 38 75 2d 69 fa be 04 6e 39 89 93 99 57 39 70 89 ba b6 4c e6 2a 39 82 c6 2d a0 6c ca 07 1c 2c f5 1c 24 ec 69 74 6d 33 73 e2 62 4a 6b ac 9c e7 40 a9 35 47 8e e4 d0 50 72 89 1b 6f d9 f9 54 a7 1e 3a 81 07 81 c3 e4 fb 19 f3 48 bd d2 52 ed 1f 67 f1 3f 99 6b d4 38 63 Data Ascii: dZ5{6`3M:ZYE]R#g=i'MG4vfHIg.>c0vYU@OIdeYn+McgH%^:iqRXh3)iAu&qKUf8u-in9W9pL9-l,$itm3sbJk@5GProT:HRg?k8c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
422	192.168.2.4	50308	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:47 UTC	2221	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA If-None-Match: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw"
2024-04-18 17:16:47 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:47 GMT Via: 1.1 varnish ETag: "iENFaMZjE+y7ZR8nUfcouinKksNs8Fp5mBlhMHFSmmw" Age: 43 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130078-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460608.930968,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
423	192.168.2.4	50309	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:47 UTC	2220	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA If-None-Match: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg"
2024-04-18 17:16:47 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:47 GMT Via: 1.1 varnish ETag: "oL/OIJ1We7J0nbNLBxpp1d2U9G0Lm/UWlVp3GfkQ7Gg" Age: 41 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130054-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460608.932418,VS0,VE4 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
424	192.168.2.4	50311	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:48 UTC	701	OUT	GET /ajax/libs/mustache.js/2.3.0/mustache.min.js?v=638484955464930367 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:48 UTC	968	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03f29-2538" Last-Modified: Mon, 04 May 2020 16:13:29 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 234209 Expires: Tue, 08 Apr 2025 17:16:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RBVn76lAfs970GNIIO5PcC0DQ1zco%2FdUhENU8a8LSGXDhV5S5XQ6AOtMBzsl5rk%2FLwJzRR6%2FwctQVoR0Ib5d%2FH0Mgr7p9DPLP05b%2FN%2FRPIuxAQ4zgo1%2B94k%2Fj0bIcoNexjQBMFtE"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664e032e5e4576-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:48 UTC	401	IN	Data Raw: 32 35 33 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 4d 75 73 74 61 63 68 65 28 67 6c 6f 62 61 6c 2c 66 61 63 74 6f 72 79 29 7b 69 66 28 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 65 78 70 6f 72 74 73 26 26 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 6e 6f 64 65 4e 61 6d 65 21 3d 3d 22 73 74 72 69 6e 67 22 29 7b 66 61 63 74 6f 72 79 28 65 78 70 6f 72 74 73 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 64 65 66 69 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 7b 64 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 5d 2c 66 61 63 74 6f 72 79 29 7d 65 6c 73 65 7b 67 6c 6f 62 61 6c 2e 4d 75 73 74 61 63 68 65 3d 7b 7d 3b 66 61 63 74 6f 72 79 28 67 6c 6f 62 61 6c 2e 4d Data Ascii: 2538(function defineMustache(global,factory){if(typeof exports==="object"&&exports&&typeof exports.nodeName!=="string"){factory(exports)}else if(typeof define==="function"&&define.amd){define(["exports"],factory)}else{global.Mustache={};factory(global.M
2024-04-18 17:16:48 UTC	1369	IN	Data Raw: 6c 6c 28 6f 62 6a 65 63 74 29 7b 72 65 74 75 72 6e 20 6f 62 6a 65 63 74 54 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 6f 62 6a 65 63 74 29 3d 3d 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 73 46 75 6e 63 74 69 6f 6e 28 6f 62 6a 65 63 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 65 63 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 66 75 6e 63 74 69 6f 6e 20 74 79 70 65 53 74 72 28 6f 62 6a 29 7b 72 65 74 75 72 6e 20 69 73 41 72 72 61 79 28 6f 62 6a 29 3f 22 61 72 72 61 79 22 3a 74 79 70 65 6f 66 20 6f 62 6a 7d 66 75 6e 63 74 69 6f 6e 20 65 73 63 61 70 65 52 65 67 45 78 70 28 73 74 72 69 6e 67 29 7b 72 65 74 75 72 6e 20 73 74 72 69 6e 67 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 2d 5c 5b 5c 5d 7b 7d 28 29 2a 2b Data Ascii: ll(object){return objectToString.call(object)==="[object Array]"};function isFunction(object){return typeof object==="function"}function typeStr(obj){return isArray(obj)?"array":typeof obj}function escapeRegExp(string){return string.replace(/[\-\[\]{}()*+
2024-04-18 17:16:48 UTC	1369	IN	Data Raw: 73 54 6f 43 6f 6d 70 69 6c 65 2e 6c 65 6e 67 74 68 21 3d 3d 32 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 74 61 67 73 3a 20 22 2b 74 61 67 73 54 6f 43 6f 6d 70 69 6c 65 29 3b 6f 70 65 6e 69 6e 67 54 61 67 52 65 3d 6e 65 77 20 52 65 67 45 78 70 28 65 73 63 61 70 65 52 65 67 45 78 70 28 74 61 67 73 54 6f 43 6f 6d 70 69 6c 65 5b 30 5d 29 2b 22 5c 5c 73 2a 22 29 3b 63 6c 6f 73 69 6e 67 54 61 67 52 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 73 2a 22 2b 65 73 63 61 70 65 52 65 67 45 78 70 28 74 61 67 73 54 6f 43 6f 6d 70 69 6c 65 5b 31 5d 29 29 3b 63 6c 6f 73 69 6e 67 43 75 72 6c 79 52 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 73 2a 22 2b 65 73 63 61 70 65 52 65 67 45 78 70 28 22 7d 22 2b 74 61 67 73 54 6f 43 6f 6d Data Ascii: sToCompile.length!==2)throw new Error("Invalid tags: "+tagsToCompile);openingTagRe=new RegExp(escapeRegExp(tagsToCompile[0])+"\\s");closingTagRe=new RegExp("\\s"+escapeRegExp(tagsToCompile[1]));closingCurlyRe=new RegExp("\\s*"+escapeRegExp("}"+tagsToCom
2024-04-18 17:16:48 UTC	1369	IN	Data Raw: 53 65 63 74 69 6f 6e 5b 31 5d 21 3d 3d 76 61 6c 75 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 55 6e 63 6c 6f 73 65 64 20 73 65 63 74 69 6f 6e 20 22 27 2b 6f 70 65 6e 53 65 63 74 69 6f 6e 5b 31 5d 2b 27 22 20 61 74 20 27 2b 73 74 61 72 74 29 7d 65 6c 73 65 20 69 66 28 74 79 70 65 3d 3d 3d 22 6e 61 6d 65 22 7c 7c 74 79 70 65 3d 3d 3d 22 7b 22 7c 7c 74 79 70 65 3d 3d 3d 22 26 22 29 7b 6e 6f 6e 53 70 61 63 65 3d 74 72 75 65 7d 65 6c 73 65 20 69 66 28 74 79 70 65 3d 3d 3d 22 3d 22 29 7b 63 6f 6d 70 69 6c 65 54 61 67 73 28 76 61 6c 75 65 29 7d 7d 6f 70 65 6e 53 65 63 74 69 6f 6e 3d 73 65 63 74 69 6f 6e 73 2e 70 6f 70 28 29 3b 69 66 28 6f 70 65 6e 53 65 63 74 69 6f 6e 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 27 55 6e 63 6c 6f 73 65 64 20 Data Ascii: Section[1]!==value)throw new Error('Unclosed section "'+openSection[1]+'" at '+start)}else if(type==="name"\|\|type==="{"\|\|type==="&"){nonSpace=true}else if(type==="="){compileTags(value)}}openSection=sections.pop();if(openSection)throw new Error('Unclosed
2024-04-18 17:16:48 UTC	1369	IN	Data Raw: 72 20 73 74 72 69 6e 67 3d 6d 61 74 63 68 5b 30 5d 3b 74 68 69 73 2e 74 61 69 6c 3d 74 68 69 73 2e 74 61 69 6c 2e 73 75 62 73 74 72 69 6e 67 28 73 74 72 69 6e 67 2e 6c 65 6e 67 74 68 29 3b 74 68 69 73 2e 70 6f 73 2b 3d 73 74 72 69 6e 67 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 73 74 72 69 6e 67 7d 3b 53 63 61 6e 6e 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 61 6e 55 6e 74 69 6c 3d 66 75 6e 63 74 69 6f 6e 20 73 63 61 6e 55 6e 74 69 6c 28 72 65 29 7b 76 61 72 20 69 6e 64 65 78 3d 74 68 69 73 2e 74 61 69 6c 2e 73 65 61 72 63 68 28 72 65 29 2c 6d 61 74 63 68 3b 73 77 69 74 63 68 28 69 6e 64 65 78 29 7b 63 61 73 65 2d 31 3a 6d 61 74 63 68 3d 74 68 69 73 2e 74 61 69 6c 3b 74 68 69 73 2e 74 61 69 6c 3d 22 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 30 3a 6d 61 Data Ascii: r string=match[0];this.tail=this.tail.substring(string.length);this.pos+=string.length;return string};Scanner.prototype.scanUntil=function scanUntil(re){var index=this.tail.search(re),match;switch(index){case-1:match=this.tail;this.tail="";break;case 0:ma
2024-04-18 17:16:48 UTC	1369	IN	Data Raw: 75 6c 6c 29 74 6f 6b 65 6e 73 3d 63 61 63 68 65 5b 74 65 6d 70 6c 61 74 65 5d 3d 70 61 72 73 65 54 65 6d 70 6c 61 74 65 28 74 65 6d 70 6c 61 74 65 2c 74 61 67 73 29 3b 72 65 74 75 72 6e 20 74 6f 6b 65 6e 73 7d 3b 57 72 69 74 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 3d 66 75 6e 63 74 69 6f 6e 20 72 65 6e 64 65 72 28 74 65 6d 70 6c 61 74 65 2c 76 69 65 77 2c 70 61 72 74 69 61 6c 73 29 7b 76 61 72 20 74 6f 6b 65 6e 73 3d 74 68 69 73 2e 70 61 72 73 65 28 74 65 6d 70 6c 61 74 65 29 3b 76 61 72 20 63 6f 6e 74 65 78 74 3d 76 69 65 77 20 69 6e 73 74 61 6e 63 65 6f 66 20 43 6f 6e 74 65 78 74 3f 76 69 65 77 3a 6e 65 77 20 43 6f 6e 74 65 78 74 28 76 69 65 77 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6e 64 65 72 54 6f 6b 65 6e 73 28 74 6f 6b 65 Data Ascii: ull)tokens=cache[template]=parseTemplate(template,tags);return tokens};Writer.prototype.render=function render(template,view,partials){var tokens=this.parse(template);var context=view instanceof Context?view:new Context(view);return this.renderTokens(toke
2024-04-18 17:16:48 UTC	1369	IN	Data Raw: 70 75 73 68 28 76 61 6c 75 65 5b 6a 5d 29 2c 70 61 72 74 69 61 6c 73 2c 6f 72 69 67 69 6e 61 6c 54 65 6d 70 6c 61 74 65 29 7d 7d 65 6c 73 65 20 69 66 28 74 79 70 65 6f 66 20 76 61 6c 75 65 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 76 61 6c 75 65 3d 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 74 79 70 65 6f 66 20 76 61 6c 75 65 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 7b 62 75 66 66 65 72 2b 3d 74 68 69 73 2e 72 65 6e 64 65 72 54 6f 6b 65 6e 73 28 74 6f 6b 65 6e 5b 34 5d 2c 63 6f 6e 74 65 78 74 2e 70 75 73 68 28 76 61 6c 75 65 29 2c 70 61 72 74 69 61 6c 73 2c 6f 72 69 67 69 6e 61 6c 54 65 6d 70 6c 61 74 65 29 7d 65 6c 73 65 20 69 66 28 69 73 46 75 6e 63 74 69 6f 6e 28 76 61 6c 75 65 29 29 7b 69 66 28 74 79 70 65 6f 66 20 6f 72 69 67 69 6e 61 6c 54 65 Data Ascii: push(value[j]),partials,originalTemplate)}}else if(typeof value==="object"\|\|typeof value==="string"\|\|typeof value==="number"){buffer+=this.renderTokens(token[4],context.push(value),partials,originalTemplate)}else if(isFunction(value)){if(typeof originalTe
2024-04-18 17:16:48 UTC	921	IN	Data Raw: 6e 20 72 61 77 56 61 6c 75 65 28 74 6f 6b 65 6e 29 7b 72 65 74 75 72 6e 20 74 6f 6b 65 6e 5b 31 5d 7d 3b 6d 75 73 74 61 63 68 65 2e 6e 61 6d 65 3d 22 6d 75 73 74 61 63 68 65 2e 6a 73 22 3b 6d 75 73 74 61 63 68 65 2e 76 65 72 73 69 6f 6e 3d 22 32 2e 33 2e 30 22 3b 6d 75 73 74 61 63 68 65 2e 74 61 67 73 3d 5b 22 7b 7b 22 2c 22 7d 7d 22 5d 3b 76 61 72 20 64 65 66 61 75 6c 74 57 72 69 74 65 72 3d 6e 65 77 20 57 72 69 74 65 72 3b 6d 75 73 74 61 63 68 65 2e 63 6c 65 61 72 43 61 63 68 65 3d 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 43 61 63 68 65 28 29 7b 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 57 72 69 74 65 72 2e 63 6c 65 61 72 43 61 63 68 65 28 29 7d 3b 6d 75 73 74 61 63 68 65 2e 70 61 72 73 65 3d 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 28 74 65 6d 70 6c Data Ascii: n rawValue(token){return token[1]};mustache.name="mustache.js";mustache.version="2.3.0";mustache.tags=["{{","}}"];var defaultWriter=new Writer;mustache.clearCache=function clearCache(){return defaultWriter.clearCache()};mustache.parse=function parse(templ
2024-04-18 17:16:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
425	192.168.2.4	50312	151.101.14.109	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:48 UTC	546	OUT	GET /js_opt/modules/utils/vuid.min.js HTTP/1.1 Host: f.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:48 UTC	457	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1862 Content-Type: application/javascript Cache-Control: public, max-age=2592000 Timing-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2422449 Date: Thu, 18 Apr 2024 17:16:48 GMT X-Served-By: cache-iad-kiad7000106-IAD, cache-pdk-katl1840021-PDK X-Cache: HIT, HIT X-Cache-Hits: 313, 0 X-Timer: S1713460608.479498,VS0,VE1 Vary: Accept-Encoding,x-http-method-override
2024-04-18 17:16:48 UTC	1371	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 66 61 6c 73 65 2c 6e 2c 6f 2c 69 2c 72 3d 74 79 70 65 6f 66 20 74 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 75 3d 22 68 74 74 70 73 3a 2f 2f 76 69 6d 65 6f 2e 63 6f 6d 2f 61 62 6c 69 6e 63 6f 6c 6e 2f 76 75 69 64 22 2c 61 3b 66 75 6e 63 74 69 6f 6e 20 66 28 29 7b 72 65 74 75 72 6e 20 32 31 34 37 34 38 33 36 34 37 7d 66 75 6e 63 74 69 6f 6e 20 63 28 74 2c 65 29 7b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3d 3d 3d 30 29 7b 65 3d 30 3b 74 3d 66 28 29 7d 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 74 2d 65 2b 31 29 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 76 Data Ascii: (function(t){var e=false,n,o,i,r=typeof t.navigator.sendBeacon==="function",u="https://vimeo.com/ablincoln/vuid",a;function f(){return 2147483647}function c(t,e){if(arguments.length===0){e=0;t=f()}return Math.floor(Math.random()*(t-e+1))+e}function d(t){v
2024-04-18 17:16:48 UTC	491	IN	Data Raw: 2b 22 2e 22 2b 28 28 67 28 29 5e 6c 28 74 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 29 2e 74 6f 53 74 72 69 6e 67 28 29 26 32 31 34 37 34 38 33 36 34 37 29 3b 65 3d 74 72 75 65 7d 6f 3d 74 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 22 2e 22 29 3b 69 66 28 6f 2e 6c 65 6e 67 74 68 3e 32 29 7b 6f 2e 73 68 69 66 74 28 29 7d 73 28 22 76 75 69 64 22 2c 6e 2e 63 6f 6f 6b 69 65 2c 33 36 35 2a 32 2c 22 2f 22 2c 22 2e 22 2b 6f 2e 6a 6f 69 6e 28 22 2e 22 29 2c 74 72 75 65 2c 22 4e 6f 6e 65 22 29 3b 69 66 28 65 26 26 73 28 22 76 75 69 64 22 29 29 7b 69 66 28 74 79 70 65 6f 66 20 74 2e 5f 76 75 69 64 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 2e 5f 76 75 69 64 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 3d 30 3b 61 3c Data Ascii: +"."+((g()^l(t.navigator.userAgent)).toString()&2147483647);e=true}o=t.location.hostname.split(".");if(o.length>2){o.shift()}s("vuid",n.cookie,365*2,"/","."+o.join("."),true,"None");if(e&&s("vuid")){if(typeof t._vuid==="object"&&t._vuid.length){for(a=0;a<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
426	192.168.2.4	50313	64.233.176.93	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:48 UTC	760	OUT	GET /iframe_api?v=638484955464930367 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:48 UTC	2088	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Thu, 18 Apr 2024 17:16:48 GMT Date: Thu, 18 Apr 2024 17:16:48 GMT Cache-Control: private, max-age=0 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=LWeoQZa0y10; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=zNOZkN78gTc; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 17:16:48 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgYw%3D%3D; Domain=.youtube.com; Expires=Tue, 15-Oct-2024 17:16:48 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:48 UTC	1062	IN	Data Raw: 34 31 66 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 66 39 32 30 38 37 66 32 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 77 69 6e 64 6f 77 5b 27 79 74 5f 65 6d 62 65 64 73 45 6e 61 62 6c 65 49 66 72 61 6d 65 44 65 66 61 75 6c 74 52 65 66 65 72 72 65 72 50 6f 6c 69 63 79 27 5d 20 3d 20 20 74 72 75 65 20 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: 41fvar scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/f92087f2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScrip
2024-04-18 17:16:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
427	192.168.2.4	50315	34.120.202.204	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:48 UTC	703	OUT	POST /add/player-stats?beacon=1&session-id=899dcab14c80eeb37d6c0ea6b092cb943189edf51713460605 HTTP/1.1 Host: fresnel.vimeocdn.com Connection: keep-alive Content-Length: 1222 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://player.vimeo.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:48 UTC	1222	OUT	Data Raw: 5b 7b 22 61 75 74 6f 70 6c 61 79 22 3a 66 61 6c 73 65 2c 22 62 61 63 6b 67 72 6f 75 6e 64 22 3a 66 61 6c 73 65 2c 22 63 6c 69 70 5f 69 64 22 3a 39 30 33 36 38 32 36 35 35 2c 22 63 6f 6e 74 65 78 74 22 3a 22 65 6d 62 65 64 2e 6d 61 69 6e 22 2c 22 64 65 76 69 63 65 5f 70 69 78 65 6c 5f 72 61 74 69 6f 22 3a 31 2c 22 64 72 6d 22 3a 66 61 6c 73 65 2c 22 65 6d 62 65 64 22 3a 74 72 75 65 2c 22 69 73 5f 6d 6f 64 22 3a 66 61 6c 73 65 2c 22 69 73 5f 73 70 61 74 69 61 6c 22 3a 66 61 6c 73 65 2c 22 6c 6f 6f 70 69 6e 67 22 3a 74 72 75 65 2c 22 6f 77 6e 65 72 5f 69 64 22 3a 33 33 32 30 35 30 36 2c 22 70 72 6f 64 75 63 74 22 3a 22 76 69 6d 65 6f 2d 76 6f 64 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e Data Ascii: [{"autoplay":false,"background":false,"clip_id":903682655,"context":"embed.main","device_pixel_ratio":1,"drm":false,"embed":true,"is_mod":false,"is_spatial":false,"looping":true,"owner_id":3320506,"product":"vimeo-vod","referrer":"https://risk.lexisnexis.
2024-04-18 17:16:48 UTC	263	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://player.vimeo.com Date: Thu, 18 Apr 2024 17:16:48 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
428	192.168.2.4	50317	151.101.0.217	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:48 UTC	657	OUT	GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:48 UTC	591	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23213 Cache-Control: max-age=2592000 Content-Type: image/avif Etag: "8c8b3458f7f203ca6bec9b891daf064c" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 1154316 Date: Thu, 18 Apr 2024 17:16:48 GMT X-Served-By: cache-dfw-kdfw8210074-DFW, cache-pdk-kfty2130059-PDK X-Cache: HIT, HIT X-Cache-Hits: 11, 0 X-Timer: S1713460609.684244,VS0,VE1 Vary: Accept
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 59 93 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 07 80 00 00 04 38 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 08 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 02 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocDY(iinfinfeav01ColorjiprpKipcoispe8pixiav1Ccolrnclx
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 2a ea 38 c7 82 04 8f ee 06 5e 25 11 13 44 76 49 d0 72 10 fa e8 11 6e 80 94 cf b4 e8 d7 7c 8c 27 42 af ec 51 79 f2 25 00 bb 32 f4 a5 e0 2d f5 15 36 cf eb f7 13 32 7f 5a 58 46 68 3e 80 c9 d8 ea 7c 07 5d 6a 4f 05 e2 2f 84 d1 5f 2f d6 cc 05 56 ca 5c c1 85 7d 4d 19 d8 ef 2b 75 ae 22 85 47 e9 a5 e0 41 25 2a 4e 57 28 b5 af 3b 9a 1c 9f 67 15 17 f3 1d 12 a7 2a 4f 91 b6 c4 15 9f f1 87 75 13 9d 12 2d 1b 2a ed ce 04 f5 21 9f 55 4e 0e a8 07 63 5d f9 81 01 f7 2e a2 6c ec ca bd 8e 38 2a 4e e2 ac 05 69 1b 6d 5f fd 1c ab 80 08 be 2a 88 03 11 0c 86 13 04 0c 0a 82 82 b6 ab ff 8e 79 8d 31 82 11 14 98 85 e0 0a 0b 7b 6a 32 03 28 7a bf 21 43 9d d0 d8 66 dc 79 74 80 69 36 58 b6 f4 1c e8 80 bc 15 7d 36 90 3d b3 3f 71 a5 ea 2b c5 30 43 23 49 43 aa e3 c5 32 ac 5b da 41 b1 86 d5 71 Data Ascii: 8^%DvIrn\|'BQy%2-62ZXFh>\|]jO/_/V\}M+u"GA%NW(;gOu-!UNc].l8Nim_y1{j2(z!Cfyti6X}6=?q+0C#IC2[Aq
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 9e 57 b6 60 d0 32 7f 24 97 7e 1b bc 8d 98 e3 f0 b3 39 12 af a8 69 86 be e3 21 15 17 f0 b1 64 20 2b 7f ee d0 75 99 ca ad 2f 6d 15 d2 1c 96 26 ce 62 1b 57 58 8b e3 7c 09 4a 03 c7 1a 73 3c 50 1e 4a a2 d5 0c 35 2d 91 b2 73 ec 7a 69 3d ad 77 ca a0 58 b4 cc 26 ff ad 5b 9d db 35 d1 f3 f3 a2 31 98 65 41 2a 49 b7 34 bf ac 9e d1 bf d5 72 bd 20 fc 9c 66 c2 73 92 e5 bc fb 8e c4 2d ed e6 b9 1c ed 3a 7c e7 dd 9a 9a e2 69 28 bf d3 42 cc 69 4e dc b4 40 83 89 c8 3c eb 1c df ac c7 4f e0 7c bd c9 a9 a7 30 67 6c 9d ca 1e a1 2d 73 d6 09 78 c1 46 51 2a 40 f2 31 8a 73 5e 48 d1 16 fb 9f b7 48 30 b6 d5 d4 56 23 73 3f 84 c6 e3 ee f0 78 98 a2 82 26 dd 52 ee 69 82 03 fa bf 40 b8 70 c8 f2 90 2c 13 c1 8f 57 2b 60 8e 7d d8 4c b9 92 c2 f3 f6 3d b1 6e 8f 14 8c ae c3 88 0e 99 6d 9c 63 89 Data Ascii: W`2$~9i!d +u/m&bWX\|Js<PJ5-szi=wX&[51eAI4r fs-:\|i(BiN@<O\|0gl-sxFQ@1s^HH0V#s?x&Ri@p,W+`}L=nmc
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 0c 37 d9 f0 ed e8 5e b2 c5 f5 e1 6b dd 87 65 e3 3c 46 f6 da 81 92 58 38 b5 c4 d3 53 eb 4f 19 f4 6d 56 f2 b3 31 34 c4 84 a8 37 d4 77 40 04 a0 06 f6 b7 01 33 8f 17 ce f4 a2 e5 e3 d3 4e de d6 a3 1c 2c 55 bc d3 38 c3 b6 62 ea e8 5d 63 f4 01 d9 1d df cc 15 4a 61 f2 42 01 ed 3f 0d a0 57 94 e4 7b 2f 88 ce 52 7e e4 ad 93 fe 2f e1 b2 06 90 38 ac c6 24 5d 0b a3 a5 84 2c 47 71 9c 49 ae 47 f0 ad 00 22 68 3e 0c 51 b5 ce 05 9a 5f 92 b3 18 58 73 06 5f 49 d5 2e 62 a1 8c f9 f4 1a 39 b8 92 59 ef 22 b1 a9 37 c6 f2 2c 28 df 6a 14 d9 39 a0 dd 34 03 f2 9c 46 46 62 ff ad 5e 8d 5c 18 cb 15 fb 0f b3 3a b9 ac 55 1d f9 ed 8c 9f 79 fb 5c eb 90 a6 66 3b 4c 19 a9 19 fb 96 82 c1 1f e1 cf 96 ed 01 94 91 b4 ae cb 30 4e 00 e5 4c 0c 21 49 b7 f6 06 49 5c 51 05 53 9e 88 8f a1 c5 41 22 34 db Data Ascii: 7^ke<FX8SOmV147w@3N,U8b]cJaB?W{/R~/8$],GqIG"h>Q_Xs_I.b9Y"7,(j94FFb^\:Uy\f;L0NL!II\QSA"4
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: f1 59 9e 49 7f f0 5d f8 70 49 88 90 2b d8 d6 d3 c7 62 94 41 e4 3c a0 7d 49 63 9f 23 3e 91 bb 3c bf 20 92 83 8b bd a8 55 e6 d1 f1 5f 5f 69 1b 94 01 a5 5f 6c 0d 3b c1 49 35 4f 8f 2c a6 08 6a 47 03 6f a9 61 b0 e5 29 77 4d 85 80 dd a2 c2 85 78 5e 26 b6 27 44 e9 5f db 25 d0 2c 64 65 1d 90 31 f7 5e 00 79 9f 00 ee fd f3 e0 e1 65 0b b1 c4 d7 cb 7c f0 57 bb 46 c8 ff 18 68 1a c1 80 c2 85 2a ea ab d8 54 bd 65 90 47 58 25 07 fc 7a 1a f8 a9 c0 35 37 5c de b9 07 89 b1 a4 83 ca e6 29 0f c6 69 d7 7a 5c 48 b1 3b 8d dd e6 1f 3d 77 ea 6f 1d e5 d3 92 bb d9 24 b0 23 75 7e 28 64 1e b1 e7 4e 80 4b f0 f7 3a d7 33 07 52 a8 62 ef d5 48 48 24 a1 97 4b 69 34 31 30 d1 38 ce 29 b0 bd 7d a5 9e dd 31 63 94 f5 93 e8 72 3f 09 65 db 69 a7 94 9c a6 30 56 b7 f4 58 e9 84 cc be 24 ae fe 19 16 Data Ascii: YI]pI+bA<}Ic#>< U__i_l;I5O,jGoa)wMx^&'D_%,de1^ye\|WFh*TeGX%z57\)iz\H;=wo$#u~(dNK:3RbHH$Ki4108)}1cr?ei0VX$
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 19 eb 03 81 cd 71 37 44 61 f9 96 bb db ef d3 49 80 52 f1 86 85 60 a4 b2 cb 98 bc 18 cc fb 35 45 56 e7 27 23 ac 28 b8 3d 2d 35 9a 79 ef 22 e0 c1 8c 12 ea 70 e4 2d f1 98 52 5d 6f ed 62 a7 5e 8c 45 f8 ba fb 1d f3 34 c6 8d 7b a0 8a 2c 5f 8f eb 35 c1 94 4a b9 ca a7 97 fd 4c 3d a7 20 64 c1 8c cf c7 ac b6 f7 95 ed fb f7 a1 b8 2c 0e 73 ee cd 91 ab 60 88 a6 32 5f 1f 1e 18 2d 07 00 ca 13 e4 c5 18 28 21 6e a3 f4 ed 0e 32 a3 ea 87 8e 2f 6d 2d aa 35 3c f2 ef 77 94 4e b4 d1 29 b7 6f 52 c4 dd 19 5b 08 b8 6c 0d 07 51 a2 c4 dd 07 d0 b5 bc 89 21 39 d8 94 a3 90 de ef f1 2c b6 1a e6 59 19 78 c2 19 ab f4 f5 d2 ba 13 44 20 38 23 8f e7 90 18 70 0d 64 e7 fe 86 7c cc f6 ca b3 29 46 26 29 6b a6 fe 48 af 70 b8 89 ce aa 2f 28 77 c8 20 34 6f a9 42 73 de 27 a6 32 a9 a8 69 1a 9f 57 f7 Data Ascii: q7DaIR`5EV'#(=-5y"p-R]ob^E4{,_5JL= d,s`2_-(!n2/m-5<wN)oR[lQ!9,YxD 8#pd\|)F&)kHp/(w 4oBs'2iW
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 79 c9 54 97 6a 78 2a 91 53 09 57 db 5d e3 01 22 d5 d2 b7 bc ef 40 bd d2 a5 e2 b2 5d b1 42 a7 cb 41 ce f9 7f be f9 20 05 af 9a a5 04 fe 4c e1 fe fe 3a a8 4b 3e 52 6b c0 40 8e b4 73 63 0b 1e aa df 6f db 4d 1c 12 66 33 65 97 7f db 30 d8 10 5f c7 a4 c4 2a 3a e9 4a 86 45 da d7 6c 9d 34 87 7f 55 fa 04 b4 06 ec fc 80 06 06 b7 38 7f 68 19 c7 72 a7 5a 00 85 2d 53 c7 c0 13 b3 c1 fa d2 ae 61 06 63 ae 62 7b 31 a4 ea d5 cc bc 88 35 85 85 e6 82 06 cd 70 c6 4d 13 a1 07 0a fa f8 82 d2 69 98 37 da 5a 51 1a 61 59 55 29 05 d1 4e 19 0f 70 8c dd 0d ac 39 26 35 9b 87 4f ba fd 4d 63 f8 0e 35 e2 39 9c 98 b7 64 2a b2 89 75 f0 71 b6 8f 00 1e 4c 02 cb d7 ea 64 e0 53 bb 10 0d 53 b7 bb cd b2 59 56 fb 3e bc 7a 8e 25 fa 50 51 01 ad a9 f7 6b bf 7a bc 6c 4f 78 24 d0 ec 79 02 cf 09 dd b1 Data Ascii: yTjxSW]"@]BA L:K>Rk@scoMf3e0_:JEl4U8hrZ-Sacb{15pMi7ZQaYU)Np9&5OMc59d*uqLdSSYV>z%PQkzlOx$y
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 04 f0 2e 49 aa 4b 81 e4 5d 84 23 89 90 00 83 81 eb a9 20 2a 90 5f d4 6f c9 cd 40 5d 2c 1b 6e 4f a9 28 15 22 b2 97 4f ec 31 b3 1a ff 74 2f 40 e1 0a 26 70 c7 4d fa 90 12 62 d8 cb b2 07 ec f6 2d 30 6a 07 fd 9f a5 b4 44 3f fd 70 9b 7d 96 6c a5 f8 97 ea b1 ed 42 aa 87 e7 f5 6c e5 86 19 1f ab b9 34 74 08 35 51 fb 61 2e 0e 82 80 75 06 f7 f6 f1 cc 09 c2 02 b1 51 0b e9 fc 96 99 c7 44 f8 ae 1a 86 c3 e8 48 b4 78 1b 86 8e a6 62 95 eb c1 62 9c 3a cc f2 b0 81 aa 67 cc 48 98 ab 8b 21 e2 9c 26 91 2d ce dc 8a 27 c7 14 e9 69 2a 56 19 c3 73 d5 86 18 4a d1 db 0f 44 8f b1 3c 10 66 80 0f 43 39 26 5e 01 79 4a 82 d6 d2 cc 53 00 a1 a4 94 f0 bd 16 41 1f ab 05 eb 64 25 f8 1b 79 55 4c 1c 4d 95 4a 97 9b da f8 28 9e 7e 85 aa 93 ac 15 11 77 1e a8 05 67 5e 83 ea 00 51 50 e9 70 eb b9 fd Data Ascii: .IK]# _o@],nO("O1t/@&pMb-0jD?p}lBl4t5Qa.uQDHxbb:gH!&-'iVsJD<fC9&^yJSAd%yULMJ(~wg^QPp
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: aa d8 04 41 35 d0 e3 ee 28 57 6a 7c c5 58 76 0c a0 2d ba 0f bd 15 54 c0 a9 d6 1a 85 83 27 17 2c 44 a7 33 b5 f7 62 c7 4f 9b 0e 03 76 86 56 01 18 6e a1 b4 9e 0e f9 6c c3 3b ab 8e 54 64 20 f1 93 a3 7d 1e 60 cb 4b 15 24 52 98 b5 9e 3e 38 7e 2d c5 bf 3a ee 67 05 c4 a0 62 3e c9 fc 38 04 ec ed e2 86 66 9e a5 fb 63 c7 01 ea eb 27 7e c4 22 c3 5f ff 60 ef 82 f9 02 ee 01 da b2 cf 48 39 6d 75 94 b1 f8 48 ff f0 c0 47 90 7f ac 33 85 c0 57 a2 5a f7 85 75 39 bd 8a a2 66 33 9d 9e a3 c3 45 16 d5 57 27 d7 d1 b4 fb 96 e2 03 29 59 29 bb 85 ef 0a d8 f4 50 68 4e 04 fa 41 df b0 66 83 ed d8 9d 5f 8c 88 42 44 e9 2c 41 84 1d 43 95 06 c4 47 64 d6 d6 6d 6f 05 0d 33 78 bf 5b dd 95 c4 9d 65 4c c9 6e 9c f9 ec 82 66 a6 70 d3 d1 24 b1 6e aa 16 f9 24 0f 7b 52 f5 1e bb 12 77 ce 43 62 7f 3f Data Ascii: A5(Wj\|Xv-T',D3bOvVnl;Td }`K$R>8~-:gb>8fc'~"_`H9muHG3WZu9f3EW')Y)PhNAf_BD,ACGdmo3x[eLnfp$n${RwCb?
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 87 a6 e0 88 1d 5c 69 c9 cb 7e 00 5d 41 ea 24 4e db 5f 10 47 21 23 69 9e 8b 83 f3 6b 2d 8f 73 5b e9 d6 66 4c 0c 7a 33 a4 f0 ef cb 85 98 77 7b fb 69 99 13 63 29 cb e6 a6 7f a5 fa 96 c3 e8 c5 19 88 5b 86 64 dc 17 f5 a2 b1 07 6f 9b 7f bf 3d 06 c0 47 65 8b a0 15 35 38 89 08 dd 85 4d 15 f0 38 34 f5 b0 ca 44 6c ac 16 dc 81 14 eb c5 2e 73 af 77 4a 7b 5b 07 75 79 d5 b2 eb 9a b6 e0 63 3e 65 b7 7f 30 3a f5 f8 ac 91 af 82 0d e8 bd 78 8f 30 4f 56 15 0c ff 05 77 af 22 e3 c7 41 67 99 36 91 59 34 3a a7 e1 df 0e 7d 48 cc 75 7a fe 24 e9 b0 4b 99 87 23 45 2e 65 71 63 4b 39 ea ef 68 7e 91 b6 cd a6 80 e4 c0 c2 67 8c 02 39 41 65 4c 13 91 2e 6a 87 d8 ff a9 8d 3a 12 1b 28 43 7d 50 23 26 85 ca c1 8e f0 44 1a cd 3b 5b bb e0 fe 84 bf 69 6f 3e c3 d3 ce ad 66 e4 fc 73 3a 88 81 b8 89 Data Ascii: \i~]A$N_G!#ik-s[fLz3w{ic)[do=Ge58M84Dl.swJ{[uyc>e0:x0OVw"Ag6Y4:}Huz$K#E.eqcK9h~g9AeL.j:(C}P#&D;[io>fs:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
429	192.168.2.4	50316	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:48 UTC	2473	OUT	POST /lnrs/logerror HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive Content-Length: 165 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:48 UTC	165	OUT	Data Raw: 6d 65 73 73 61 67 65 3d 43 6f 6e 74 65 6e 74 2b 73 6d 61 6c 6c 65 72 2b 74 68 61 6e 2b 34 30 30 70 78 2b 75 72 6c 25 33 41 2b 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 63 6f 70 79 72 69 67 68 74 2b 70 61 67 65 49 64 25 33 41 2b 41 36 32 35 46 38 42 43 46 45 43 41 34 33 46 31 42 32 31 34 43 30 39 33 46 32 32 37 46 31 37 33 2b 70 61 67 65 56 65 73 69 6f 6e 25 33 41 2b 31 35 2b 6c 61 6e 67 75 61 67 65 25 33 41 2b 65 6e 2d 55 53 Data Ascii: message=Content+smaller+than+400px+url%3A+https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright+pageId%3A+A625F8BCFECA43F1B214C093F227F173+pageVesion%3A+15+language%3A+en-US
2024-04-18 17:16:48 UTC	593	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Pragma: no-cache Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Date: Thu, 18 Apr 2024 17:16:48 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210179-DFW, cache-pdk-kpdk1780074-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460609.748172,VS0,VE159 Vary: Origin Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
430	192.168.2.4	50319	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:48 UTC	2164	OUT	GET /-/media/csr%20wellness_mantle%201_1230x420.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:48 UTC	883	IN	HTTP/1.1 200 OK Connection: close Content-Length: 95184 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="CSR Wellness_Mantle 1_1230x420.jpg" Content-Type: image/jpeg Etag: "lisjCXrw7uIL8JBvOSjlBtb/wpvoeVLSBSCVmqYtIRU" Fastly-Io-Info: ifsz=422634 idim=1230x420 ifmt=jpeg ofsz=95184 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010210 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560651 Date: Thu, 18 Apr 2024 17:16:48 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210102-DFW, cache-pdk-kfty2130032-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460609.787566,VS0,VE28 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 5a 19 12 7b 76 c6 db f2 d4 ff 00 86 74 db 7b e4 94 5f f3 45 2b a8 31 96 f5 73 ed 04 f5 aa 97 48 bc 2f 34 56 f2 ee ac e0 13 e5 bd 5a 9c 7b a8 47 a5 ae 87 14 2c 19 59 0f 43 d3 00 56 43 a6 7d 8c 49 0c 53 e5 5a eb 20 61 c9 02 84 15 c5 3c 33 a9 5b dc 5b b4 41 e6 8a 4e 8c aa 4e 31 e7 8a b6 6c 99 a1 b5 b4 c8 1f d1 a8 c8 f7 54 57 41 e2 bb ab 45 48 2e a1 12 46 62 05 4f 7c 54 8f 4a d4 74 ed 5a 29 9a d1 f7 19 f5 3c 8d 72 f5 58 c6 7c 5a 75 c1 a8 d8 e8 4d e3 2b 44 57 3c 1e f1 88 76 b3 16 5b 0d de 23 3c 91 ac ae 9c c7 7e a7 df 46 f4 f9 4c 11 e1 48 f6 d0 61 6c 9e 2b 24 d9 f5 ba 9a 50 91 6f 1f 2c 59 60 b9 1e fa e0 7b 14 e5 c3 af d5 e7 0f d1 e8 00 68 af 94 d7 94 2b a2 af 5e 20 a4 37 16 fa a5 c4 d9 39 93 25 85 00 d6 20 17 33 45 d7 9a 42 43 fb 29 88 e2 ec 6a 8c 39 14 80 dc Data Ascii: Z{vt{_E+1sH/4VZ{G,YCVC}ISZ a<3[[ANN1lTWAEH.FbO\|TJtZ)<rX\|ZuM+DW<v[#<~FLHal+$Po,Y`{h+^ 79% 3EBC)j9
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 39 17 3e ca 19 fc f5 89 e5 8c 2e 7c eb 4b 63 f7 6e 96 09 ae a0 08 60 d8 9d 5e 24 51 f2 81 81 ec a1 c6 40 0e d4 bc 9a 75 c4 8c ad 24 dd 4f 41 da 9e c5 a4 c2 98 2c ec c7 db 58 b2 61 d4 67 cc e5 31 ed 5b 1d 4c 60 65 55 16 60 a1 2b 16 18 1f 65 3b 48 ee 24 fd 02 3d f4 72 3b 78 63 03 0a 05 6d a6 8a 31 d4 53 57 d9 c4 51 c9 9a 87 80 95 ef 7c 16 0d 5d 3d db 77 6a ed a0 8a 32 3b d2 8f 7a 5b 21 57 e3 4d 50 16 62 cc 72 6a db f0 d8 85 62 5d c7 b9 32 be 36 ea 6a 14 85 50 0d 87 6a 5e 99 db 93 92 29 d3 9e 55 cd 75 30 b0 6c 4a c0 50 8a 61 44 ce 0b 10 71 4d e4 76 8c 83 8d a9 a4 ba 82 2c 98 1b e2 96 fa 42 cd 11 ce d9 15 91 f5 78 9f de 22 e5 a7 5e 47 d2 18 46 1b 49 5e 0c 75 14 e9 27 42 29 c5 46 6d 25 68 67 c7 50 4e 2a 48 0e 45 57 b3 b5 a7 59 84 96 14 ea c4 34 99 71 fb b6 e3 Data Ascii: 9>.\|Kcn`^$Q@u$OA,Xag1[L`eU`+e;H$=r;xcm1SWQ\|]=wj2;z[!WMPbrjb]26jPj^)Uu0lJPaDqMv,Bx"^GFI^u'B)Fm%hgPN*HEWY4q
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 2b a3 aa c9 a8 3a 66 3a 5e 72 d7 c2 0f 8c 4e 30 9e f0 0c 9f 2f 78 de 3e 57 94 38 1d 71 4f 2f ac e2 bf b3 9e da 42 42 4a 85 49 1d 70 69 bc 71 78 6c ab 9e 80 51 4a 76 97 7f b9 4f 78 3e 3a 1b bd 7b c1 cb 45 b8 f9 7b 7a 48 55 86 95 aa e9 b1 3e 97 14 8a d6 61 89 8a 63 f5 c2 b6 e4 1f 75 46 78 ce 2b 7d 0a 0d 22 5b 40 a2 e6 de e0 ca ac 7a 92 46 f9 f7 d5 b7 55 07 a4 0d 36 79 6f a1 9e 30 cc 19 00 2b 8d 86 2b 43 ee 38 dc 28 e6 a6 7d aa a5 0b 31 ad c3 9f 01 2b ed 72 e8 ea f7 52 ea 8d 22 46 ce 8a a5 06 e3 6a 87 c8 ac e4 a6 06 05 6f 56 91 a3 63 16 e0 86 dc 7b 69 ac 6e 63 4f 10 cb 9e 9b 79 d7 07 31 62 e4 9e bd fd 67 47 1d 01 5d bb 45 1a 32 30 39 47 5c 56 5d 46 91 b7 84 18 1d b3 9a e0 5d c9 ce ac 10 60 f9 d6 c3 25 cc a5 89 c3 79 56 57 df c1 1d 3b c3 24 55 08 ea c6 31 10 Data Ascii: +:f:^rN0/x>W8qO/BBJIpiqxlQJvOx>:{E{zHU>acuFx+}"[@zFU6yo0++C8(}1+rR"FjoVc{incOy1bgG]E209G\V]F]`%yVW;$U1
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: bb 08 8c d9 7b 2c ed 17 98 e4 d3 b5 5a 4d 16 8a d9 da 3c ce 30 a4 ef 59 c8 ee 7a 4c 95 7d 63 9d 37 49 9b 50 95 51 41 00 90 33 8a f4 47 05 f0 25 be 9d 1c 37 93 9d c1 cf ac 31 8a 87 70 c7 0d 6a 17 4c 9e 02 10 72 3d 6c 74 ab f2 d3 87 26 7b 78 16 fa fa 49 79 00 f5 06 00 db ce b6 fb 3d 53 2b b1 0a 48 51 c3 76 b9 ab 1a 00 2f 6d 98 f0 6a 56 76 e0 45 00 33 38 e8 b1 ee 3e d1 4e 22 97 51 b9 19 f0 12 15 3f ad eb 1f c2 9f db 58 5b da aa ac 48 00 1e ca 74 e7 15 db 3d 3c 23 42 9e e6 0a 4d 25 0c 82 49 a5 69 1b 39 c7 41 45 d1 16 35 0a a3 00 57 2a 72 05 29 42 aa 05 d0 87 30 d6 b1 5b ad 1a b3 24 1f 71 37 86 c0 95 38 06 9b 3e a2 ec 3d 54 c0 a5 2e cf ae 01 3b 1a 6a fe 1a 0d cd 73 33 fb e5 67 d9 96 81 3c f1 cc 6a ed a1 62 67 d2 66 90 fa c7 02 b6 7c 30 a4 96 fb ea 3d ac ea 32 Data Ascii: {,ZM<0YzL}c7IPQA3G%71pjLr=lt&{xIy=S+HQv/mjVvE38>N"Q?X[Ht=<#BM%Ii9AE5W*r)B0[$q78>=T.;js3g<jbgf\|0=2
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 87 43 ef 35 33 e1 bf f0 79 ff 00 6c 7c ab 3e a7 1e 35 c2 c5 50 03 63 b4 d1 a5 cb 91 b3 a8 67 24 51 e0 99 23 ad d6 56 8d 73 27 56 66 d5 ba d6 2b 2a 49 37 59 59 59 52 49 aa ca ca dd 49 26 56 56 56 54 92 65 6a b7 59 52 54 15 77 1c ac d1 32 8d 80 19 a4 56 76 69 19 02 6f d2 8a 2b ab 46 09 23 a5 0a 49 23 17 d8 04 60 e3 ed ae 4e 6d 20 4c e7 22 e4 3f da b0 dd e5 c5 4d 09 92 d2 88 f9 7a 47 70 ca eb 21 8d 94 f4 a5 a5 9a 45 20 2a 67 34 ec a2 93 9c 57 24 29 04 f9 56 dc 38 5b 12 95 39 2c 59 af 48 b6 60 c6 f6 f6 e6 31 66 3e 2a 93 4f d4 e4 0a 19 2c 81 66 19 38 cd 10 8d 81 51 bd 31 3e 67 e7 bc 8d d1 3d 22 94 da e6 de 3b 88 d9 5d 41 38 d8 f9 53 8c d3 73 70 9c fc 99 a7 0b 07 88 b3 44 51 9e 69 e2 fe 1a b8 87 58 24 7d 49 a5 24 37 96 d9 a8 2d ec 02 19 64 44 6c f2 9c 55 ef c7 Data Ascii: C53yl\|>5Pcg$Q#Vs'Vf+I7YYYRII&VVVTejYRTw2Vvio+F#I#`Nm L"?MzGp!E g4W$)V8[9,YH`1f>*O,f8Q1>g=";]A8SspDQiX$}I$7-dDlU
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 78 49 b9 65 c9 04 0d b3 56 b6 a2 e9 69 a7 4b cb 8c 85 da 9f c4 53 c0 56 52 39 71 b1 aa c7 88 b8 a2 d2 db 55 4b 29 e7 54 40 4f 39 63 80 06 2b af f0 61 c4 a1 0d 5d 00 7d 64 62 11 28 0e bc 41 9a 8d e5 9b 59 89 9c 98 de 24 2d 82 7a b1 eb 5e 4a e2 7d 44 5f 6b 17 f2 c6 07 23 4a 71 83 9e 9b 54 fb d2 1f 1b 45 7d 7f 79 65 a6 4c a6 0c 81 cc bd 0e 3a e2 aa 60 8d 8e 66 07 73 d4 d6 6f 68 6a 15 71 ae 20 77 11 d4 8e 9d 26 56 63 da 26 aa 4e e6 93 92 50 94 e3 d8 29 ac b0 33 91 b5 71 b1 63 39 0d 9e 90 53 19 73 cc 7b 65 99 77 a9 ae 8c 39 2e 14 f9 54 6f 4e b7 11 46 09 15 20 b5 98 21 3c a7 7a d2 aa a9 c2 89 ad 29 0f 12 5d 79 a9 72 2e 03 0c 54 32 ff 00 54 e6 c8 06 b8 bc ba 7d c6 68 11 0d 23 64 d3 18 50 e6 16 5c 87 a4 d3 3b 48 d9 34 e6 28 d8 f4 14 ac 36 ac c7 ea 9a 97 e8 ba 04 Data Ascii: xIeViKSVR9qUK)T@O9c+a]}db(AY$-z^J}D_k#JqTE}yeL:`fsohjq w&Vc&NP)3qc9Ss{ew9.ToNF !<z)]yr.T2T}h#dP\;H4(6
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 91 d2 a4 35 ba ab 3e 32 c0 13 47 a1 ad d7 2c 70 0d 6c 54 97 37 59 59 5a a9 24 ca f3 87 a7 61 f9 dd 2b fb 16 fd ea f4 7d 79 cb d3 af f4 9a 4f f6 2f f3 ab 1d 60 b7 6f 58 a7 7a 99 c5 fd 14 7f b2 3e 55 55 1e 2d e1 d0 71 f9 4d 33 fb 2f fc 2a de b5 b4 b8 9a d2 da 68 e2 2d 1b c4 ac ad 91 b8 23 20 d7 6f de 63 ff 00 78 bf 71 38 5e eb 2f fb b6 fb 18 d8 74 3e f3 53 3e 1b ff 00 07 9f f6 87 ca a2 8b 69 70 43 e2 23 b3 10 77 1d 45 4c 74 0b 79 a0 b6 93 c4 42 bc e4 15 f6 8c 56 7d 4b a3 61 60 1c 13 63 a1 9a 74 b8 dd 73 29 28 c0 51 ea 21 ea ca ca af f8 f3 89 b5 1e 1b 87 4d 7b 15 84 99 de 40 fe 22 96 fa a0 63 18 23 ce b9 19 32 2e 24 67 6e 82 7a 0d 16 8f 36 bf 55 8b 4b 87 6f bc c9 7b 77 1a 1c 0b ff 00 29 3f ad d7 9d ff 00 e5 47 89 7f c9 d9 ff 00 dd 37 fe 6a df fc a8 f1 2f f9 Data Ascii: 5>2G,plT7YYZ$a+}yO/`oXz>UU-qM3/*h-# ocxq8^/t>S>ipC#wELtyBV}Ka`cts)(Q!M{@"c#2.$gnz6UKo{w)?G7j/
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: 21 86 01 1b 46 79 79 4f 37 ba bc f5 c3 5a 9d ce 8e e9 24 51 c6 d8 39 c3 8c 8f ba ac ff 00 f9 4d d4 4c 2f 09 d2 62 19 42 bc f1 b1 18 f8 1a 6a e2 61 6c c4 5f 61 3a 9a 76 c7 8d 14 74 3d f8 84 a5 d3 a6 96 f3 f3 0c a6 28 dd 82 9c f5 02 a6 16 3a 52 c8 b1 cd 22 f4 1f 65 55 5a 7f 19 45 6e 15 27 b0 66 c1 27 98 1e e6 a6 d6 de 90 34 41 68 b1 b1 96 27 e8 41 52 7e 55 c9 f6 c6 93 5f 97 0a 8d 28 1b ef a8 3d a6 bc 19 71 06 b6 61 55 d0 f8 cb 02 d2 e1 51 fc 2d b1 ed a9 24 03 98 82 a3 00 0a ae 34 fe 2c e1 79 51 59 f5 18 d5 ff 00 ad 91 f3 a9 c6 9d ad e8 b3 c7 98 75 5b 67 cf 94 8b 45 ec 7f 66 6a 93 2a 8c a2 90 fc 44 f4 36 25 e7 cc 84 5a 9b 3d 24 98 0d a9 b3 c1 92 58 1d e9 68 e5 89 d4 14 91 58 63 b1 cd 76 c7 00 9a f6 9a 8d 36 2c d8 42 b8 24 0e 44 e7 ab 90 6c 46 4b 27 2e 01 a5 Data Ascii: !FyyO7Z$Q9ML/bBjal_a:vt=(:R"eUZEn'f'4Ah'AR~U_(=qaUQ-$4,yQYu[gEfj*D6%Z=$XhXcv6,B$DlFK'.
2024-04-18 17:16:48 UTC	1379	IN	Data Raw: be ab 72 76 6c 77 a0 d6 ba ae 99 79 31 8e 1b b8 cc a3 aa 13 83 f6 1a 5a 6a b1 7b dc 98 06 41 bf 19 a6 1d 2a e3 17 32 35 0b 00 f8 4b 8b 84 ae 5e 78 e6 e7 03 23 1d 2a 5f 39 06 17 c9 ec 6a 15 c2 2b c8 b7 00 9d f0 2a 63 32 99 22 75 5e a4 6d 5e a7 4a 6b 4c be 86 53 d6 f9 09 91 43 f3 e1 b1 91 b5 30 96 f9 6d 7f 35 23 9f 58 60 33 6d bd 74 c9 7a cd 3c 6b 13 19 22 3e b2 81 92 b9 e9 91 50 7d 4e cf 8a af 66 81 de c6 56 08 4f 2b 05 e5 ce fb 64 57 98 d4 be 67 c7 9b 66 3c 80 f6 f8 4f 3c cd 0f 91 54 0a f8 8d 76 e6 59 3a 5c 26 e9 ca fd 28 e5 46 72 be df 3a 93 41 1d ea 44 dc d3 87 60 76 da ab 8d 0a 0d 7f 4d 91 a6 ba b6 71 cd 80 c0 ae 4e 3c c6 2a cd b1 ba 49 d5 94 12 48 eb b1 15 a3 d8 60 2e 11 8f 20 29 97 9b 1c af a7 ac a7 6d ca 18 74 f0 3d 63 9b 59 de 40 43 8c 30 a7 45 8d Data Ascii: rvlwy1Zj{A25K^x#_9j+c2"u^m^JkLSC0m5#X`3mtz<k">P}NfVO+dWgf<O<TvY:\&(Fr:AD`vMqN<IH`. )mt=cY@C0E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
431	192.168.2.4	50322	151.101.0.217	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	421	OUT	GET /video/1783912515-8a574e0e8622d32e8f023f3d0945248d5fa7072ead9dfe1e49b282919b4c5d05-d HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:49 UTC	591	IN	HTTP/1.1 200 OK Connection: close Content-Length: 62839 Cache-Control: max-age=2592000 Content-Type: image/jpeg Etag: "54863c0bd09ca08056a49c817ce05639" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 604918 Date: Thu, 18 Apr 2024 17:16:49 GMT X-Served-By: cache-dfw-kdfw8210074-DFW, cache-pdk-kpdk1780053-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460609.144314,VS0,VE22 Vary: Accept
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 01 02 03 07 08 04 05 06 09 ff da 00 08 01 01 00 00 00 00 f0 9e 2e b5 db 5a 05 d6 b5 73 53 9e 6d a9 24 cc 90 0c c4 1a b7 ae b5 65 09 6d 85 44 56 b7 31 9d 6b 4c 0b 75 ab ab ad 6b 5b Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}8".ZsSm$emDV1kLuk[
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: ab 99 9d 68 69 2b 9e 39 e6 ad 24 6e dd 6b 5a 99 45 67 9f 3c e0 d1 ae 9b 4c 96 ea db 86 39 4c e1 33 9e 3c e4 cc 67 18 92 49 8c c8 c9 94 ce 4c 97 39 cd d5 ad 66 67 39 92 ae fa eb 57 af c8 b0 4c 66 c6 26 f7 ad 68 5b 4d ef 29 89 75 d2 db ad e7 3b b3 39 c6 58 ca 48 2a ea af 4d 6b 5a d5 6a eb 7b de f5 ae 8a 68 b1 28 d0 8c 66 cb 4d 13 18 c4 5b ac c8 56 f5 d7 aa 63 06 98 e5 ce 4c ab 5a e9 bc 4b 25 6b 5a 13 9e 31 89 33 9e 7c f1 19 99 c6 31 13 33 32 46 52 4c 41 0c e3 12 f4 d4 cc 49 24 5b be 9d 6d e9 de cc e9 11 71 cd ad 74 b6 2f 4d b0 d6 b3 ab 64 ba d5 21 75 64 cc 73 ce 59 80 b7 4b ad ef 5a b7 5a b7 5d 37 bd eb 57 5a 82 ae aa ca cd b9 ce 71 96 ad d4 ce 73 99 1a 12 34 ba d7 4e 93 2c c6 9c f9 e6 4c 2b 5a d1 49 1b da 97 3c f1 8c 65 9e 7c f1 9c a6 73 9e 79 98 93 29 19 Data Ascii: hi+9$nkZEg<L9L3<gIL9fg9WLf&h[M)u;9XH*MkZj{h(fM[VcLZK%kZ13\|132FRLAI$[mqt/Md!udsYKZZ]7WZqs4N,L+ZI<e\|sy)
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 7a bc fa 6f 97 36 f1 f1 b8 71 c6 22 45 48 28 49 92 ea d2 dd 19 46 8b 75 6c d4 d6 ed ce 62 e3 19 89 95 43 74 e3 f1 f8 f2 c9 9e 78 cf 3e 59 cc 91 48 64 88 9c f9 62 24 94 b7 42 49 16 b4 58 45 58 b4 08 d2 2a eb 5a a5 56 a9 ac 94 bb 58 ab 75 b5 a2 ea eb a7 6d f5 e9 df bf 7f 99 d7 51 5c 97 4e 97 4e 5c b9 6f 18 e3 c7 9e 53 39 69 33 24 5d 2b 31 65 d3 4a b5 0b a2 db b2 b7 52 06 39 e3 15 05 5d f4 dc f8 9f 17 9f 2c 2e 79 63 18 e3 86 4c e8 89 91 24 73 e5 99 33 03 57 56 c6 50 14 49 16 ad 40 14 2d 5d 6a d1 56 94 68 74 d0 56 ae eb 4a ba 6b 5d 7a 75 eb df bf c9 f9 bd 71 9c 75 e9 99 cf 13 7d bb 67 87 18 e3 27 0c 61 26 73 57 32 42 81 62 ee d2 8a d6 96 ae ed 6b 6c e2 6e c6 39 73 cc 24 b5 ae 9d dc fe 2f c6 e5 33 99 39 72 ce 39 62 26 68 91 92 26 58 e7 99 96 20 b7 7a d2 22 4c Data Ascii: zo6q"EH(IFulbCtx>YHdb$BIXEX*ZVXumQ\NN\oS9i3$]+1eJR9],.ycL$s3WVPI@-]jVhtVJk]zuqu}g'a&sW2Bbkln9s$/39r9b&h&X z"L
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: c6 59 c6 73 22 53 39 83 32 af 39 26 79 c9 9c e6 eb 4d 02 9b 33 04 cc 93 19 92 4a 02 14 16 ad 11 17 56 eb 57 57 77 57 4d 29 5a df 5c c9 df e5 69 be 99 68 a6 a9 69 bb d3 a1 75 8c 63 9f 1e 73 39 65 32 19 b6 db 75 75 be bd 7e 4f 5e fb ef d9 8b 37 59 6b 06 79 4c 71 cd 59 8c cc 48 ca 11 4e 7c e7 3e 78 cf 3c c8 ce 32 99 0c c8 92 45 d6 33 26 31 24 c4 5b 74 a8 8b bd 49 29 98 cb 1c f3 90 69 20 01 6a ea 04 4b 75 77 77 77 6d ba 69 45 df 44 9d 3e 4e f1 ae fa ab 06 aa e8 d5 bb ea b5 31 cb 87 3c e6 60 c9 2a 45 ad 6a eb 7d 7a f6 e9 be db ed db ac 98 de dc f0 35 cb 18 e5 88 19 cc 83 2c c4 96 31 87 3e 5c f3 ce 24 cc 93 30 89 22 49 1a d4 e7 99 9c 49 9c 42 ad d2 48 d6 f6 99 8b 24 33 8e 59 82 d1 20 05 5b 6c 09 2d 6b 5b d5 d5 b7 5a ab 6a 5d 6e da eb d2 37 d7 a5 b0 35 56 db bb Data Ascii: Ys"S929&yM3JVWWwWM)Z\ihiucs9e2uu~O^7YkyLqYHN\|>x<2E3&1$[tI)i jKuwwwmiED>N1<`*Ej}z5,1>\$0"IIBH$3Y [l-k[Zj]n75V
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 03 37 54 6e e8 10 5c ad a0 16 b5 ab b4 1a e9 da a5 24 85 68 25 6b 48 41 cf 28 b1 21 28 ce 64 ce 64 80 2e b7 ad 63 38 cf d0 ad c8 d5 2e b5 d7 a6 72 d2 c3 9e 62 49 31 24 ce 66 73 9a 48 01 62 ad 54 ca 96 e5 57 5a 50 dd 6a eb 76 10 37 bb 4d 55 81 2e 8b 6e b4 d4 21 72 96 d2 91 4d 69 ad 96 d3 5b b0 05 b5 a8 92 dd 34 b3 31 67 3c 88 90 a1 33 98 c4 92 05 ba d5 24 ce 7e 82 82 da d6 b4 df 56 56 b3 85 92 67 13 ef 7e d7 f2 7e 44 f1 86 71 df c9 3e 29 f2 47 e2 fe 77 cf fc 67 eb 7c a3 e1 8f a6 a0 2a d5 8f d8 fe af c6 5e 67 fc 67 cf f1 74 2f 90 7f 35 f5 0f 97 fb ff 00 1a ae a9 75 d2 88 56 b7 69 69 11 ad 52 7d a7 3f 85 75 bd 46 10 3e f7 e9 b1 69 fa 0f cf 2a db ab a3 55 aa ce b4 05 16 eb 53 0b 6d d0 ca 18 92 12 41 a1 9c e0 cc cc 94 6b 56 89 13 f3 e3 56 06 b5 b6 f7 ba 4c e6 Data Ascii: 7Tn\$h%kHA(!(dd.c8.rbI1$fsHbTWZPjv7MU.n!rMi[41g<3$~VVg~~Dq>)Gwg\|^ggt/5uViiR}?uF>iUSmAkVVL
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: dd cc ca ef 59 99 cc 85 64 12 c2 b4 ba de f5 66 73 cf 19 ce 6f d1 5c c5 d5 a4 02 92 48 7f 4a bc 57 e9 67 bc ff 00 aa fe 77 fb 27 fb 9f 50 ff 00 a6 7e 92 7e df d9 7f c6 7e f7 f9 61 ef c7 d0 7e 1f f6 3e 94 ff 00 57 bf 97 df a1 f7 db ea 7f 01 e8 f3 7f d2 af 95 e8 af f4 47 f9 43 fa 2f e9 1f e6 3e db d4 ae 5e c9 7f 3e 7d f9 f0 4f 89 7f a5 9f cb 2f 65 fd a5 fa df 4b bd a9 f5 a7 87 b7 5e 9c 7b 9b fc de fe 92 7a 31 f6 1e e5 ff 00 3b 3f a6 5f 8b f8 be 0c f5 db d9 6f 11 fe cf e1 fe 87 c0 8f 62 3e 87 3f 80 f3 f7 8b fc 85 e2 5e bf 6d e2 df 64 fd 6d f3 df e1 bc c3 ea c7 b1 1e 0a f6 87 c3 5e 67 f0 5f 0f 31 78 c3 e4 fe 0f cc de 08 f2 67 ed ff 00 07 cb ea bc e3 e3 1f 3e 7a 8f f5 d3 d8 2f c4 fe 1b ce be be 79 0e 5f 20 f8 fa f8 f4 2e aa 10 8a 1a ba bb c1 ab 9c 34 d6 72 95 Data Ascii: Ydfso\HJWgw'P~~~a~>WGC/>^>}O/eK^{z1;?_ob>?^mdm^g_1xg>z/y_ .4r
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 45 0c e7 32 40 5d db 9c e7 ea e4 68 88 17 42 65 2e bd 82 f5 fb d9 bf 58 1e 7f f0 e7 99 7d 79 fb ef 2f 78 7f ca fe 07 f2 a7 d6 f8 eb d9 8f 59 5e c5 7e 0b ca 3e 31 fd e7 ae 9e 45 f2 87 d1 fe 9b d7 5f 36 fa f5 e7 3f ab fd 07 e4 bc cd f9 b6 bd 6a f6 17 f4 de b7 fb 13 ea d9 e4 ef 91 c2 fc 7f b7 f2 47 c2 bf 6b eb 5f b4 de 08 f3 47 ac de c3 7c 5f 25 7a 69 ec cf ac d1 ec cf ac fe c1 7a fd f6 be 64 fb ff 00 5a 1e 7a f0 cf 9f bd 6d 7b 1f eb 87 95 bc 93 e2 9f d0 78 ef f3 9e cc 7a d1 af 62 3c 01 ec 3f ad 77 ed fc c9 dd e2 cf df 7e af d6 c7 df f9 63 ed 7d 72 be c6 7a e5 ec cf ad 17 d9 2f 5a bd 90 fa df c4 6f c8 9e bd 79 e7 f2 bf 59 e3 ff 00 d4 7e ab c8 bf 5b 7e c7 d6 d9 10 ba 00 59 17 39 bb b7 a1 82 44 b6 b6 02 1a 0c 66 4c 96 ae f4 ce 73 f5 a9 0b 11 06 b2 10 7b 07 eb Data Ascii: E2@]hBe.X}y/xY^~>1E_6?jGk_G\|_%zizdZzm{xzb<?w~c}rz/ZoyY~[~Y9DfLs{
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: a5 41 77 7e b3 44 92 24 1b e8 41 6d a4 45 d4 5b 39 f2 e7 cb 11 32 32 20 52 d2 a1 68 05 b7 5a 6a db 4b 52 32 02 94 a0 ab 6e 8a aa 35 75 a2 32 92 65 00 5d 5c e5 13 30 20 55 53 4a ba d6 8c 65 04 15 a1 6d a0 ca 52 da 85 bd 2f d6 d3 32 30 83 5b da 05 6c 06 93 67 3c 63 8f 39 9c e4 92 10 0d 34 45 0d 00 5d 6b 4d 5b 68 a8 65 22 8a a0 a2 ad b6 aa 95 6d b5 5c e1 9a 48 45 55 48 ce 60 00 aa 6a 8d 5d 5b 9c 48 01 55 ab 56 8c 99 55 52 2e b7 af ac b6 66 46 62 1a d7 44 0a d5 5d 16 94 c6 27 3e 38 98 99 65 91 01 5a 21 5a 5a 02 eb 56 db 6d d4 03 26 62 a5 50 0b 6d ab 6a 95 56 da 31 0a 88 90 46 8a 67 30 94 01 4d 5a 2d 6a 67 20 85 5a ba a2 a1 22 ad 40 d6 f7 f5 76 a6 63 2c 8b ad 80 b6 b5 ab 74 68 93 33 3c 79 67 38 c2 66 44 41 6d 02 d2 da b1 4d 5d 5d ad 55 04 92 42 2a 90 16 da b5 Data Ascii: Aw~D$AmE[922 RhZjKR2n5u2e]\0 USJemR/20[lg<c94E]kM[he"m\HEUH`j][HUVUR.fFbD]'>8eZ!ZZVm&bPmjV1Fg0MZ-jg Z"@vc,th3<yg8fDAmM]]UB*
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: ce 49 6e ac 89 35 ad d9 32 89 22 4c 85 a0 68 a5 14 14 d6 ad b7 52 65 ad dd eb 1c f2 b3 39 21 19 0b ad 0c c9 98 90 14 70 64 b5 a8 82 28 b0 06 97 45 90 b4 ab 14 8c e3 39 09 89 99 16 99 03 45 b6 e9 4a a1 54 1a 5a 5a 19 22 e8 b1 0d ea b2 92 0c c8 c9 68 05 a2 80 ab 5a b6 d4 91 75 bd 6a 67 9c 48 22 b2 ca ae f7 64 8c e7 28 82 87 c6 80 a5 44 51 40 2a b4 68 89 17 45 59 23 38 c8 44 cc ca 52 20 29 5a b5 6a aa 80 56 aa c5 16 c1 28 b4 16 d4 b2 41 99 12 5a 8a 0a 50 45 55 b5 a5 44 2d d6 ae 73 84 02 ea 33 9b 75 be a4 ce 66 72 49 4a 2f c2 20 a0 00 16 2a 97 4a 5a ce 4e 85 ac c9 88 90 85 cc 99 10 90 05 5b 6d a5 55 28 2a d2 89 4b 42 d9 ab 21 69 62 41 92 40 c9 54 0a 20 ab 6d 16 00 d5 24 88 06 c9 15 d7 b5 99 ce 64 c9 22 94 bf 0a 24 0a 05 00 2a 85 aa 10 dd 5b 23 19 89 00 49 94 Data Ascii: In52"LhRe9!pd(E9EJTZZ"hZujgH"d(DQ@hEY#8DR )ZjV(AZPEUD-s3ufrIJ/ JZN[mU(KB!ibA@T m$d"$[#I
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 2a 88 2a 2c 00 ad 00 d5 a0 48 84 5d e9 a4 8b ab 20 e9 53 31 bc 73 c8 bd 7b 6f 26 71 8c 93 32 1b a5 bb d2 b9 71 c9 ad 74 eb d3 46 73 89 7a d9 99 b6 a3 5d 2d 01 55 24 42 22 44 cc c8 99 89 00 01 4b 4b 48 55 03 49 03 26 49 1f 08 55 50 00 c9 48 b6 a8 34 a9 6a 44 81 ab b2 a1 a4 a3 a6 ac 99 97 9e 56 c5 eb d2 d4 c6 62 49 33 95 d0 d2 d3 3c f0 35 d7 5b de b7 cf 10 de d9 cc b5 77 ab 4b 4b 41 11 26 59 0c 4c a2 64 90 28 14 5d 05 09 6d 24 94 04 ca 0c a7 c1 15 56 ad 00 99 5a 82 d5 29 42 c4 88 5b 6e 94 4d 25 a3 7b a4 cd ce 5a 8a bb d5 b9 91 11 9c 48 55 a4 5b 8c 60 bb de ed de 31 77 6e b4 cf 38 6f 7b 0b aa 69 42 48 c4 99 45 98 92 66 25 8a a0 a4 35 68 a2 15 49 02 41 21 08 cf c1 85 5b 56 8b 69 24 14 86 94 5a a8 b0 99 0b 75 4d 42 8d 0b d3 69 04 05 b7 4a ce 42 4c c8 16 db 9c Data Ascii: **,H] S1s{o&q2qtFsz]-U$B"DKKHUI&IUPH4jDVbI3<5[wKKA&YLd(]m$VZ)B[nM%{ZHU[`1wn8o{iBHEf%5hIA![Vi$ZuMBiJBL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
432	192.168.2.4	50327	104.18.16.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	616	OUT	GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1 Host: js.qualified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"e4cfb76386f1f61f399d299928b57ee3"
2024-04-18 17:16:49 UTC	702	IN	HTTP/1.1 304 Not Modified Date: Thu, 18 Apr 2024 17:16:49 GMT Connection: close Cache-Control: public, max-age=14400 Etag: W/"e4cfb76386f1f61f399d299928b57ee3" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains Vary: Accept Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: d2033b3f-1fa1-0cb4-161b-bc32833e1e2b X-Runtime: 0.036964 X-Xss-Protection: 1; mode=block CF-Cache-Status: MISS Expires: Thu, 18 Apr 2024 21:16:49 GMT Server: cloudflare CF-RAY: 87664e08cde3b09a-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
433	192.168.2.4	50328	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	2131	OUT	GET /lnrs/logerror HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	601	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Pragma: no-cache Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:49 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120102-DFW, cache-pdk-kfty2130050-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460609.373768,VS0,VE595 Vary: Origin Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
434	192.168.2.4	50329	151.101.0.217	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	597	OUT	GET /portrait/35637746_60x60 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://player.vimeo.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:49 UTC	671	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1053 Content-Type: image/avif Etag: "c4fdd95b6d1a45d0cdd272a8c20e9bf4" X-Viewmaster-Lossless-Format: automatic Viewmaster-Server: viewmaster-glb-prod cache-control: public, max-age=2592000 Via: vvarnish, 1.1 varnish, 1.1 varnish X-Backend-Server: varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 1095269 Date: Thu, 18 Apr 2024 17:16:49 GMT X-Served-By: cache-dfw-kdfw8210088-DFW, cache-pdk-kfty2130088-PDK X-Cache: miss, HIT, HIT X-Cache-Hits: 1877, 0 X-Timer: S1713460609.402683,VS0,VE1 Vary: Accept
2024-04-18 17:16:49 UTC	1053	IN	Data Raw: 00 00 00 20 66 74 79 70 61 76 69 66 00 00 00 00 61 76 69 66 6d 69 66 31 6d 69 61 66 4d 41 31 42 00 00 00 f2 6d 65 74 61 00 00 00 00 00 00 00 28 68 64 6c 72 00 00 00 00 00 00 00 00 70 69 63 74 00 00 00 00 00 00 00 00 00 00 00 00 6c 69 62 61 76 69 66 00 00 00 00 0e 70 69 74 6d 00 00 00 00 00 01 00 00 00 1e 69 6c 6f 63 00 00 00 00 44 00 00 01 00 01 00 00 00 01 00 00 01 1a 00 00 03 03 00 00 00 28 69 69 6e 66 00 00 00 00 00 01 00 00 00 1a 69 6e 66 65 02 00 00 00 00 01 00 00 61 76 30 31 43 6f 6c 6f 72 00 00 00 00 6a 69 70 72 70 00 00 00 4b 69 70 63 6f 00 00 00 14 69 73 70 65 00 00 00 00 00 00 00 3c 00 00 00 3c 00 00 00 10 70 69 78 69 00 00 00 00 03 08 08 08 00 00 00 0c 61 76 31 43 81 00 0c 00 00 00 00 13 63 6f 6c 72 6e 63 6c 78 00 02 00 02 00 02 80 00 00 00 17 Data Ascii: ftypavifavifmif1miafMA1Bmeta(hdlrpictlibavifpitmilocD(iinfinfeav01ColorjiprpKipcoispe<<pixiav1Ccolrnclx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
435	192.168.2.4	50323	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	2521	OUT	GET /insights-resources/case-study HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://risk.lexisnexis.com/copyright Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:49 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 127771 Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Date: Thu, 18 Apr 2024 17:16:49 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210112-DFW, cache-pdk-kfty2130070-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460609.317112,VS0,VE252 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 74 61 72 67 65 74 2d 64 65 6e 73 69 74 79 44 70 69 3d 64 65 76 69 63 65 2d 64 70 69 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, target-densityDpi=device-dpi, initial-scale=1, user-scalable=no
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 37 33 39 38 38 38 37 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 70 72 65 6c 6f 61 64 27 20 61 73 3d 27 73 74 79 6c 65 27 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 2f 31 2e 31 32 2e 31 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6d 69 6e 2e 63 73 73 27 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 6e 73 69 67 68 74 73 20 61 6e 64 20 52 65 73 6f 75 72 63 65 73 20 7c 20 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 Data Ascii: 7398887" rel="stylesheet" /> <link rel='preload' as='style' href='//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css'> <title>Insights and Resources \| LexisNexis Risk Solutions</title> <meta prope
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 71 75 61 2d 73 69 74 65 2d 69 64 3d 22 39 30 33 22 0d 0a 20 20 20 20 20 20 65 6c 6f 71 75 61 2d 63 6f 6e 74 61 63 74 2d 6c 6f 6f 6b 75 70 2d 69 64 3d 22 37 31 36 33 62 34 35 65 34 39 38 62 34 35 35 31 39 32 37 65 66 33 33 39 33 34 38 63 64 38 34 38 22 0d 0a 20 20 20 20 20 20 65 6c 6f 71 75 61 2d 76 69 73 69 74 6f 72 2d 6c 6f 6f 6b 75 70 2d 69 64 3d 22 37 33 63 64 61 35 63 30 30 31 37 63 34 62 32 30 38 34 61 33 36 31 66 66 39 63 65 30 35 30 39 31 22 0d 0a 20 20 20 20 20 20 65 6c 6f 71 75 61 2d 66 69 72 73 74 2d 70 61 72 74 79 2d 63 6f 6f 6b 69 65 2d 64 6f 6d 61 69 6e 3d 22 74 72 61 63 6b 69 6e 67 2e 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 22 0d 0a 20 20 20 20 20 20 63 6c 61 73 73 3d 22 6c 6e 72 73 2d 72 65 73 6f 75 72 63 65 2d 6c 69 73 74 Data Ascii: qua-site-id="903" eloqua-contact-lookup-id="7163b45e498b4551927ef339348cd848" eloqua-visitor-lookup-id="73cda5c0017c4b2084a361ff9ce05091" eloqua-first-party-cookie-domain="tracking.risk.lexisnexis.com" class="lnrs-resource-list
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 76 61 72 20 65 6c 6f 71 75 61 43 6f 6f 6b 69 65 47 72 6f 75 70 20 3d 20 6e 75 6c 6c 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 67 72 6f 75 70 2e 43 6f 6f 6b 69 65 73 20 26 26 20 67 72 6f 75 70 2e 43 6f 6f 6b 69 65 73 2e 6c 65 6e 67 74 68 20 3e 20 30 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 6b 20 3d 20 30 3b 20 6b 20 3c 20 67 72 6f 75 70 2e 43 6f 6f 6b 69 65 73 2e 6c 65 6e 67 74 68 3b 20 6b 20 2b 3d 20 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 20 3d 20 67 72 6f 75 70 2e 43 6f 6f 6b 69 65 73 5b 6b 5d 3b Data Ascii: var eloquaCookieGroup = null; if (group.Cookies && group.Cookies.length > 0) { for (var k = 0; k < group.Cookies.length; k += 1) { var cookie = group.Cookies[k];
2024-04-18 17:16:49 UTC	1339	IN	Data Raw: 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 65 72 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 68 65 61 64 65 72 20 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 20 73 63 6f 72 65 2d 70 61 67 65 2d 6c 61 79 6f 75 74 2d 63 6f 6c 75 6d 6e 31 20 22 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6c 75 6d 6e 31 20 22 20 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 65 6e 74 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6e 61 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6d 65 67 61 6d 65 6e 75 22 20 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6e 61 76 2d 77 72 61 70 70 65 72 Data Ascii: > <header class="score-header " > <div class="container score-page-layout-column1 "> <div class="score-column1 " > <div class="score-center"> <nav class="score-megamenu" > <div class="score-nav-wrapper
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 74 3b 3a 66 61 6c 73 65 2c 26 71 75 6f 74 3b 53 74 61 74 65 43 68 61 6e 67 65 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 2c 26 71 75 6f 74 3b 53 68 6f 77 41 63 74 69 6f 6e 4d 65 73 73 61 67 65 73 26 71 75 6f 74 3b 3a 5b 5d 2c 26 71 75 6f 74 3b 48 69 64 65 41 63 74 69 6f 6e 4d 65 73 73 61 67 65 73 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 53 74 79 6c 65 42 6f 78 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 73 74 79 6c 65 3d 22 22 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 62 6f 78 22 20 64 61 74 61 2d 75 78 2d Data Ascii: t;:false,"StateChangeMessagesTransmitting":[],"ShowActionMessages":[],"HideActionMessages":[]}" data-ux-module="score_bootstrap/Components/StyleBox" data-ux-state="pending" style=""><div class="global-search-box" data-ux-
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 6f 74 3b 4f 70 65 6e 20 4c 61 6e 67 75 61 67 65 20 53 65 6c 65 63 74 6f 72 20 4d 6f 64 61 6c 26 71 75 6f 74 3b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 22 3e 0d 0a 3c 70 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 61 64 22 20 3e 0d 0a 20 20 20 20 55 53 20 2d 20 45 6e 67 6c 69 73 68 0d 0a 3c 2f 70 3e 0d 0a 3c 2f 61 3e 3c 64 69 76 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 61 72 69 61 2d 6c 61 62 65 6c 6c 65 64 62 79 3d 22 6d 6f 64 61 6c 2d 37 Data Ascii: ot;Open Language Selector Modal"]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href="https://risk.lexisnexis.com/"><p class="score-lead" > US - English</p></a><div aria-hidden="true" aria-labelledby="modal-7
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 3e 53 6f 6c 75 74 69 6f 6e 73 20 62 79 20 43 6f 75 6e 74 72 79 3a 3c 62 72 20 2f 3e 3c 2f 70 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f 42 75 74 74 6f 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d Data Ascii: >Solutions by Country:<br /></p></div></div><div class="score-left-text " > <a class="score-composite-link" data-ux-args="{"ClickMessagesTransmitting":[]}" data-ux-module="score_bootstrap/Components/Button" data-ux-state="pending" href=
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 6e 22 20 64 61 74 61 2d 75 78 2d 73 74 61 74 65 3d 22 70 65 6e 64 69 6e 67 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 65 73 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 73 70 61 69 6e 2d 66 6c 61 67 32 32 78 31 36 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 53 70 61 69 6e 20 2d 20 53 70 61 6e 69 73 68 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f Data Ascii: n" data-ux-state="pending" href="https://risk.lexisnexis.es"><span class="sprite-image"> <span class="icon-spain-flag22x16"></span></span><span class="" >Spain - Spanish</span></a></div><div class="score-left-text " > <a class="score-compo
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: 61 73 73 3d 22 73 70 72 69 74 65 2d 69 6d 61 67 65 22 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 69 63 6f 6e 2d 67 6c 6f 62 61 6c 32 30 78 32 30 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 44 65 75 74 73 63 68 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 Data Ascii: ass="sprite-image"> <span class="icon-global20x20"></span></span><span class="" >Deutsch</span></a></div><div class="score-left-text " > <a class="score-composite-link" data-ux-args="{"ClickMessagesTransmitting":[]}" data-ux-modu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
436	192.168.2.4	50333	151.101.0.217	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	361	OUT	GET /portrait/35637746_60x60 HTTP/1.1 Host: i.vimeocdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:49 UTC	590	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1448 Cache-Control: max-age=2592000 Content-Type: image/jpeg Etag: "bcd40173a63b8efee224746eafe20eb5" X-Viewmaster-Lossless-Format: automatic Via: 1.1 google, 1.1 varnish, 1.1 varnish Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-Viewmaster-Status Access-Control-Max-Age: 86400 Accept-Ranges: bytes Age: 1042119 Date: Thu, 18 Apr 2024 17:16:49 GMT X-Served-By: cache-dfw-kdfw8210088-DFW, cache-pdk-kfty2130031-PDK X-Cache: HIT, HIT X-Cache-Hits: 51, 0 X-Timer: S1713460610.825919,VS0,VE5 Vary: Accept
2024-04-18 17:16:49 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d 01 05 05 05 05 05 05 05 06 06 05 08 08 07 08 08 0b 0a 09 09 0a 0b 11 0c 0d 0c 0d 0c 11 1a 10 13 10 10 13 10 1a 17 1b 16 15 16 1b 17 29 20 1c 1c 20 29 2f 27 25 27 2f 39 33 33 39 47 44 47 5d 5d 7d ff c2 00 11 08 00 3c 00 3c 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 05 06 04 07 01 03 08 02 ff da 00 08 01 01 00 00 00 00 a1 00 7d ec ab 6d 32 93 c4 7b 67 5f 62 35 de 04 4e 23 7b dd bc d1 12 97 88 6f 8b ef 94 7a 32 fb 30 13 7e 85 d7 7a a6 72 ba 33 Data Ascii: JFIF) )/'%'/9339GDG]]}) )/'%'/9339GDG]]}<<"}m2{g_b5N#{oz20~zr3
2024-04-18 17:16:49 UTC	69	IN	Data Raw: d4 62 86 5e e0 bb b0 b7 44 cf dd b5 1d 1b a7 bd 4f 29 5f 87 19 cc cc 3b a3 cb d4 78 0a 44 11 a2 22 ee 50 00 f6 1c d7 1a 7d 8d d9 56 9e d2 29 19 58 30 2c a0 90 47 8d 24 71 c4 08 44 55 cf 69 c0 c6 79 bf ff d9 Data Ascii: b^DO)_;xD"P}V)X0,G$qDUiy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
437	192.168.2.4	50336	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	2514	OUT	GET /GetEloquaFieldIds/%7B794409E6-12BE-4A3B-9B65-C67BFA5FDEE2%7D?formId=4317 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	669	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53206 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120079-DFW, cache-pdk-kfty2130090-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460610.127949,VS0,VE156 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 33 31 37 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 36 38 31 35 30 30 32 39 38 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 42 75 73 69 6e 65 73 73 53 65 72 76 69 63 65 73 43 6f 6e 74 61 63 74 55 73 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 2c 5c 22 44 65 6c 65 74 65 5c 22 2c 5c 22 55 70 64 61 74 65 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"4317\",\"createdAt\":\"1681500298\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-BusinessServicesContactUs\",\"permissions\":[\"Retrieve\",\"Delete\",\"Update
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 67 6c 65 2d 63 68 65 63 6b 62 6f 78 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 73 71 75 61 72 65 2d 62 75 74 74 6f 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 Data Ascii: gle-checkbox-row{margin-left:0}.elq-form .elq-field-style{padding-bottom:10px}.elq-form .elq-field-style input[type=submit]{-webkit-appearance:square-button}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(1turn)}}@key
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 73 70 6f 6e 73 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 Data Ascii: sponsive{display:block;max-width:100%;height:auto}.elq-form .img-rounded{border-radius:6px}.elq-form .img-thumbnail{padding:4px;line-height:1.42857;background-color:#fff;border:1px solid #ddd;border-radius:4px;transition:all .2s ease-in-out;display:inline
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 5c 5c 5c 22 20 5c 5c 5c 22 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 Data Ascii: in-right:-15px;margin-left:-15px}.elq-form .row:after,.elq-form .row:before{display:table;content:\\\" \\\"}.elq-form .row:after{clear:both}.elq-form .row-no-gutters{margin-right:0;margin-left:0}.elq-form .row-no-gutters [class*=col-]{padding-right:0;padd
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 63 6f 6c 2d 78 73 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e Data Ascii: col-xs-4,.elq-form .col-xs-5,.elq-form .col-xs-6,.elq-form .col-xs-7,.elq-form .col-xs-8,.elq-form .col-xs-9,.elq-form .col-xs-10,.elq-form .col-xs-11,.elq-form .col-xs-12{float:left}.elq-form .col-xs-1{width:8.33333%}.elq-form .col-xs-2{width:16.66667%}.
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 73 2d 70 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: s-push-7{left:58.33333%}.elq-form .col-xs-push-8{left:66.66667%}.elq-form .col-xs-push-9{left:75%}.elq-form .col-xs-push-10{left:83.33333%}.elq-form .col-xs-push-11{left:91.66667%}.elq-form .col-xs-push-12{left:100%}.elq-form .col-xs-offset-0{margin-left:
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c Data Ascii: elq-form .col-sm-9{width:75%}.elq-form .col-sm-10{width:83.33333%}.elq-form .col-sm-11{width:91.66667%}.elq-form .col-sm-12{width:100%}.elq-form .col-sm-pull-0{right:auto}.elq-form .col-sm-pull-1{right:8.33333%}.elq-form .col-sm-pull-2{right:16.66667%}.el
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d Data Ascii: l-sm-offset-5{margin-left:41.66667%}.elq-form .col-sm-offset-6{margin-left:50%}.elq-form .col-sm-offset-7{margin-left:58.33333%}.elq-form .col-sm-offset-8{margin-left:66.66667%}.elq-form .col-sm-offset-9{margin-left:75%}.elq-form .col-sm-offset-10{margin-
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6c 2d 6d 64 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 Data Ascii: l-md-pull-8{right:66.66667%}.elq-form .col-md-pull-9{right:75%}.elq-form .col-md-pull-10{right:83.33333%}.elq-form .col-md-pull-11{right:91.66667%}.elq-form .col-md-pull-12{right:100%}.elq-form .col-md-push-0{left:auto}.elq-form .col-md-push-1{left:8.3333
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 Data Ascii: orm .col-lg-4,.elq-form .col-lg-5,.elq-form .col-lg-6,.elq-form .col-lg-7,.elq-form .col-lg-8,.elq-form .col-lg-9,.elq-form .col-lg-10,.elq-form .col-lg-11,.elq-form .col-lg-12{float:left}.elq-form .col-lg-1{width:8.33333%}.elq-form .col-lg-2{width:16.666

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
438	192.168.2.4	50324	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	627	OUT	GET /ajax/libs/instantsearch.js/1.12.1/instantsearch.min.js?v=638484963592761859 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:50 UTC	951	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ea3-7581e" Last-Modified: Mon, 04 May 2020 16:11:15 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Tue, 08 Apr 2025 17:16:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ERhhoNblDUi6ZtzKovDE5QEnhzedea%2FSqKywXCjgXbJJSK%2BOMxhMyYYdkNE6nZLGICol3TFfLHRKR3%2F7P228Rf3QOc5LTx%2Fw2wVVB3YGNb3t0L2puurH2lceygaWp%2FMcghW1vIGt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664e0ccbe7135f-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:50 UTC	418	IN	Data Raw: 37 62 66 30 0d 0a 2f 2a 21 20 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 20 31 2e 31 32 2e 31 20 7c 20 c2 a9 20 41 6c 67 6f 6c 69 61 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 61 6c 67 6f 6c 69 61 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 Data Ascii: 7bf0/! instantsearch.js 1.12.1 \| Algolia Inc. and other contributors; Licensed MIT \| github.com/algolia/instantsearch.js /!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?def
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 6f 3d 6e 5b 72 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 2c 69 64 3a 72 2c 6c 6f 61 64 65 64 3a 21 31 7d 3b 72 65 74 75 72 6e 20 65 5b 72 5d 2e 63 61 6c 6c 28 6f 2e 65 78 70 6f 72 74 73 2c 6f 2c 6f 2e 65 78 70 6f 72 74 73 2c 74 29 2c 6f 2e 6c 6f 61 64 65 64 3d 21 30 2c 6f 2e 65 78 70 6f 72 74 73 7d 76 61 72 20 6e 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 3d 65 2c 74 2e 63 3d 6e 2c 74 2e 70 3d 22 22 2c 74 28 30 29 7d 28 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 76 61 72 20 6f 3d 6e 28 31 29 2c 69 3d 72 28 6f 29 3b 65 2e 65 78 70 6f 72 74 73 3d 69 2e 64 65 66 61 Data Ascii: o=n[r]={exports:{},id:r,loaded:!1};return e[r].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="",t(0)}([function(e,t,n){"use strict";function r(e){return e&&e.__esModule?e:{default:e}}var o=n(1),i=r(o);e.exports=i.defa
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 65 63 74 2e 66 72 65 65 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 4f 62 6a 65 63 74 28 65 29 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 20 63 61 6e 20 6f 6e 6c 79 20 62 65 20 63 61 6c 6c 65 64 20 6f 6e 20 4f 62 6a 65 63 74 73 2e 22 29 3b 72 65 74 75 72 6e 20 65 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 7b 7d 3b 69 66 28 21 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 26 26 21 6e 2e 5f 5f 70 72 6f 74 6f 5f 5f 29 7b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ect.freeze=function(e){if(Object(e)!==e)throw new TypeError("Object.freeze can only be called on Objects.");return e})},function(e,t){"use strict";var n={};if(!Object.setPrototypeOf&&!n.__proto__){var r=Object.getPrototypeOf;Object.getPrototypeOf=function
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 2e 69 73 41 72 72 61 79 28 74 29 3f 28 30 2c 5f 2e 64 65 66 61 75 6c 74 29 28 74 2c 6e 29 3a 28 30 2c 50 2e 64 65 66 61 75 6c 74 29 28 74 29 3f 28 30 2c 79 2e 64 65 66 61 75 6c 74 29 28 7b 7d 2c 74 2c 6e 2c 65 29 3a 76 6f 69 64 20 30 7d 3b 72 65 74 75 72 6e 28 30 2c 79 2e 64 65 66 61 75 6c 74 29 28 7b 7d 2c 74 2c 72 2c 6f 29 7d 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 Data Ascii: .isArray(t)?(0,_.default)(t,n):(0,P.default)(t)?(0,y.default)({},t,n,e):void 0};return(0,y.default)({},t,r,o)}}Object.defineProperty(t,"__esModule",{value:!0});var c=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 66 61 75 6c 74 29 2c 5f 2e 63 6c 69 65 6e 74 3d 78 2c 5f 2e 68 65 6c 70 65 72 3d 6e 75 6c 6c 2c 5f 2e 69 6e 64 65 78 4e 61 6d 65 3d 6c 2c 5f 2e 73 65 61 72 63 68 50 61 72 61 6d 65 74 65 72 73 3d 63 28 7b 7d 2c 68 2c 7b 69 6e 64 65 78 3a 6c 7d 29 2c 5f 2e 77 69 64 67 65 74 73 3d 5b 5d 2c 5f 2e 74 65 6d 70 6c 61 74 65 73 43 6f 6e 66 69 67 3d 7b 68 65 6c 70 65 72 73 3a 28 30 2c 54 2e 64 65 66 61 75 6c 74 29 28 7b 6e 75 6d 62 65 72 4c 6f 63 61 6c 65 3a 66 7d 29 2c 63 6f 6d 70 69 6c 65 4f 70 74 69 6f 6e 73 3a 7b 7d 7d 2c 67 26 26 28 5f 2e 5f 73 65 61 72 63 68 46 75 6e 63 74 69 6f 6e 3d 67 29 2c 5f 2e 75 72 6c 53 79 6e 63 3d 6d 3d 3d 3d 21 30 3f 7b 7d 3a 6d 2c 5f 7d 72 65 74 75 72 6e 20 61 28 74 2c 65 29 2c 6c 28 74 2c 5b 7b 6b 65 79 3a 22 61 64 64 57 69 64 67 Data Ascii: fault),_.client=x,_.helper=null,_.indexName=l,_.searchParameters=c({},h,{index:l}),_.widgets=[],_.templatesConfig={helpers:(0,T.default)({numberLocale:f}),compileOptions:{}},g&&(_._searchFunction=g),_.urlSync=m===!0?{}:m,_}return a(t,e),l(t,[{key:"addWidg
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7d 7d 2c 7b 6b 65 79 3a 22 63 72 65 61 74 65 55 52 4c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 74 68 69 73 2e 5f 63 72 65 61 74 65 55 52 4c 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 59 6f 75 20 6e 65 65 64 20 74 6f 20 63 61 6c 6c 20 73 74 61 72 74 28 29 20 62 65 66 6f 72 65 20 63 61 6c 6c 69 6e 67 20 63 72 65 61 74 65 55 52 4c 28 29 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 63 72 65 61 74 65 55 52 4c 28 74 68 69 73 2e 68 65 6c 70 65 72 2e 73 74 61 74 65 2e 73 65 74 51 75 65 72 79 50 61 72 61 6d 65 74 65 72 73 28 65 29 29 7d 7d 2c 7b 6b 65 79 3a 22 5f 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 28 30 2c 6d Data Ascii: ction(e)}},{key:"createURL",value:function(e){if(!this._createURL)throw new Error("You need to call start() before calling createURL()");return this._createURL(this.helper.state.setQueryParameters(e))}},{key:"_render",value:function(e,t,n){var r=this;(0,m
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 29 7c 7c 28 66 2b 3d 22 3a 22 29 2c 22 68 74 74 70 3a 22 21 3d 3d 66 26 26 22 68 74 74 70 73 3a 22 21 3d 3d 66 29 74 68 72 6f 77 20 6e 65 77 20 75 2e 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 45 72 72 6f 72 28 22 70 72 6f 74 6f 63 6f 6c 20 6d 75 73 74 20 62 65 20 60 68 74 74 70 3a 60 20 6f 72 20 60 68 74 74 70 73 3a 60 20 28 77 61 73 20 60 22 2b 72 2e 70 72 6f 74 6f 63 6f 6c 2b 22 60 29 22 29 3b 69 66 28 74 68 69 73 2e 5f 63 68 65 63 6b 41 70 70 49 64 44 61 74 61 28 29 2c 72 2e 68 6f 73 74 73 29 73 28 72 2e 68 6f 73 74 73 29 3f 28 74 68 69 73 2e 68 6f 73 74 73 2e 72 65 61 64 3d 61 28 72 2e 68 6f 73 74 73 29 2c 74 68 69 73 2e 68 6f 73 74 73 2e 77 72 69 74 65 3d 61 28 72 2e 68 6f 73 74 73 29 29 3a 28 74 68 69 73 2e 68 6f 73 74 73 2e 72 65 61 64 3d 61 28 72 2e Data Ascii: )\|\|(f+=":"),"http:"!==f&&"https:"!==f)throw new u.AlgoliaSearchError("protocol must be `http:` or `https:` (was `"+r.protocol+"`)");if(this._checkAppIdData(),r.hosts)s(r.hosts)?(this.hosts.read=a(r.hosts),this.hosts.write=a(r.hosts)):(this.hosts.read=a(r.
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 69 64 64 65 6e 20 66 6f 72 20 73 65 63 75 72 69 74 79 20 70 75 72 70 6f 73 65 73 2a 2a 22 3a 65 5b 6e 5d 2c 74 5b 6e 5d 3d 72 7d 72 65 74 75 72 6e 20 74 7d 65 2e 65 78 70 6f 72 74 73 3d 72 3b 76 61 72 20 75 3d 6e 28 38 29 2c 63 3d 6e 28 31 31 29 2c 6c 3d 6e 28 31 32 29 2c 66 3d 6e 28 32 33 29 2c 70 3d 7b 4e 4f 44 45 5f 45 4e 56 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 2e 52 45 53 45 54 5f 41 50 50 5f 44 41 54 41 5f 54 49 4d 45 52 26 26 70 61 72 73 65 49 6e 74 28 7b 4e 4f 44 45 5f 45 4e 56 3a 22 70 72 6f 64 75 63 74 69 6f 6e 22 7d 2e 52 45 53 45 54 5f 41 50 50 5f 44 41 54 41 5f 54 49 4d 45 52 2c 31 30 29 7c 7c 31 32 65 34 3b 72 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 Data Ascii: idden for security purposes**":e[n],t[n]=r}return t}e.exports=r;var u=n(8),c=n(11),l=n(12),f=n(23),p={NODE_ENV:"production"}.RESET_APP_DATA_TIMER&&parseInt({NODE_ENV:"production"}.RESET_APP_DATA_TIMER,10)\|\|12e4;r.prototype.initIndex=function(e){return new
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 6e 65 77 20 44 61 74 65 3b 72 65 74 75 72 6e 20 6d 2e 70 75 73 68 28 7b 63 75 72 72 65 6e 74 48 6f 73 74 3a 43 2c 68 65 61 64 65 72 73 3a 73 28 6f 29 2c 63 6f 6e 74 65 6e 74 3a 72 7c 7c 6e 75 6c 6c 2c 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 3a 76 6f 69 64 20 30 21 3d 3d 72 3f 72 2e 6c 65 6e 67 74 68 3a 6e 75 6c 6c 2c 6d 65 74 68 6f 64 3a 63 2e 6d 65 74 68 6f 64 2c 74 69 6d 65 6f 75 74 73 3a 63 2e 74 69 6d 65 6f 75 74 73 2c 75 72 6c 3a 63 2e 75 72 6c 2c 73 74 61 72 74 54 69 6d 65 3a 77 2c 65 6e 64 54 69 6d 65 3a 6e 2c 64 75 72 61 74 69 6f 6e 3a 6e 2d 77 7d 29 2c 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 75 2e 41 6c 67 6f 6c 69 61 53 65 61 72 63 68 45 72 72 6f 72 7c 7c 28 74 3d 6e 65 77 20 75 2e 55 6e 6b 6e 6f 77 6e 28 74 26 26 74 2e 6d 65 73 73 61 67 65 2c 74 Data Ascii: new Date;return m.push({currentHost:C,headers:s(o),content:r\|\|null,contentLength:void 0!==r?r.length:null,method:c.method,timeouts:c.timeouts,url:c.url,startTime:w,endTime:n,duration:n-w}),t instanceof u.AlgoliaSearchError\|\|(t=new u.Unknown(t&&t.message,t
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 6e 61 6c 55 41 3a 6c 2c 68 65 61 64 65 72 73 3a 65 2e 68 65 61 64 65 72 73 7d 29 2c 63 2e 74 69 6d 65 6f 75 74 73 3d 70 2e 5f 67 65 74 54 69 6d 65 6f 75 74 73 46 6f 72 52 65 71 75 65 73 74 28 65 2e 68 6f 73 74 54 79 70 65 29 2c 70 2e 5f 73 65 74 48 6f 73 74 49 6e 64 65 78 42 79 54 79 70 65 28 30 2c 65 2e 68 6f 73 74 54 79 70 65 29 2c 68 3d 21 30 2c 74 28 70 2e 5f 72 65 71 75 65 73 74 2e 66 61 6c 6c 62 61 63 6b 2c 63 29 29 3b 76 61 72 20 43 3d 70 2e 5f 67 65 74 48 6f 73 74 42 79 54 79 70 65 28 65 2e 68 6f 73 74 54 79 70 65 29 2c 50 3d 43 2b 63 2e 75 72 6c 2c 52 3d 7b 62 6f 64 79 3a 63 2e 62 6f 64 79 2c 6a 73 6f 6e 42 6f 64 79 3a 63 2e 6a 73 6f 6e 42 6f 64 79 2c 6d 65 74 68 6f 64 3a 63 2e 6d 65 74 68 6f 64 2c 68 65 61 64 65 72 73 3a 6f 2c 74 69 6d 65 6f 75 Data Ascii: nalUA:l,headers:e.headers}),c.timeouts=p._getTimeoutsForRequest(e.hostType),p._setHostIndexByType(0,e.hostType),h=!0,t(p._request.fallback,c));var C=p._getHostByType(e.hostType),P=C+c.url,R={body:c.body,jsonBody:c.jsonBody,method:c.method,headers:o,timeou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
439	192.168.2.4	50337	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:49 UTC	2473	OUT	GET /GetLocationInfo?_=1713460605018 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210047-DFW, cache-pdk-kfty2130090-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460610.149014,VS0,VE711 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
440	192.168.2.4	50338	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2399	OUT	GET /temp/dictionary.en-US.json?_=1713460608986 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	660	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1831 Content-Type: application/json Last-Modified: Tue, 18 Oct 2022 14:39:02 GMT ETag: "1d5faf5dffe2d81:0" Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120050-DFW, cache-pdk-kfty2130054-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460610.156468,VS0,VE159 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 7b 22 41 63 74 69 76 65 20 46 69 6c 74 65 72 73 22 3a 22 41 63 74 69 76 65 20 46 69 6c 74 65 72 73 22 2c 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 22 3a 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 22 2c 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 20 49 74 65 6d 22 3a 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 20 49 74 65 6d 22 2c 22 41 6c 6c 20 50 72 6f 64 75 63 74 20 4e 61 6d 65 73 22 3a 22 41 6c 6c 20 50 72 6f 64 75 63 74 20 4e 61 6d 65 73 22 2c 22 41 6c 6c 20 52 65 73 6f 75 72 63 65 20 54 79 70 65 73 22 3a 22 41 6c 6c 20 52 65 73 6f 75 72 63 65 20 54 79 70 65 73 22 2c 22 41 6c 6c 20 53 6f 6c 75 74 69 6f 6e 73 22 3a 22 41 6c 6c 20 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 41 6c 6c 20 53 75 62 2d 49 6e 64 75 73 74 72 69 65 73 20 49 74 65 6d 22 3a 22 41 Data Ascii: {"Active Filters":"Active Filters","All Industries":"All Industries","All Industries Item":"All Industries Item","All Product Names":"All Product Names","All Resource Types":"All Resource Types","All Solutions":"All Solutions","All Sub-Industries Item":"A
2024-04-18 17:16:50 UTC	452	IN	Data Raw: 68 22 3a 22 52 65 73 65 61 72 63 68 22 2c 22 53 61 76 65 22 3a 22 53 61 76 65 22 2c 22 53 65 74 75 70 20 41 64 64 54 68 69 73 20 6b 65 79 22 3a 22 53 65 74 75 70 20 41 64 64 54 68 69 73 20 6b 65 79 20 66 6f 72 20 74 68 69 73 20 72 65 67 69 6f 6e 28 73 69 74 65 29 22 2c 22 53 68 61 72 65 22 3a 22 53 68 61 72 65 22 2c 22 53 69 67 6e 2d 49 6e 20 4e 6f 77 22 3a 22 53 69 67 6e 2d 49 6e 20 4e 6f 77 22 2c 22 53 69 74 65 20 46 65 65 64 62 61 63 6b 20 46 6f 72 6d 22 3a 22 22 2c 22 53 6f 63 69 61 6c 20 53 68 61 72 65 20 4b 65 79 22 3a 22 22 2c 22 53 70 65 61 6b 65 72 20 46 6f 72 6d 22 3a 22 22 2c 22 53 75 62 6d 69 74 22 3a 22 53 75 62 6d 69 74 22 2c 22 54 61 6c 6b 20 54 6f 20 53 61 6c 65 73 22 3a 22 54 61 6c 6b 20 54 6f 20 53 61 6c 65 73 22 2c 22 54 61 6c 6b 20 54 Data Ascii: h":"Research","Save":"Save","Setup AddThis key":"Setup AddThis key for this region(site)","Share":"Share","Sign-In Now":"Sign-In Now","Site Feedback Form":"","Social Share Key":"","Speaker Form":"","Submit":"Submit","Talk To Sales":"Talk To Sales","Talk T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
441	192.168.2.4	50339	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2514	OUT	GET /GetEloquaFieldIds/%7B613E43EC-B648-4C66-81D0-937DCA7B3A72%7D?formId=4318 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	670	IN	HTTP/1.1 200 OK Connection: close Content-Length: 116301 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210049-DFW, cache-pdk-kfty2130060-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460610.198256,VS0,VE282 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 33 31 38 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 36 38 31 35 30 31 37 36 30 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 42 75 73 69 6e 65 73 73 53 65 72 76 69 63 65 73 41 73 73 65 74 44 6f 77 6e 6c 6f 61 64 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 2c 5c 22 44 65 6c 65 74 65 5c 22 2c 5c 22 55 70 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"4318\",\"createdAt\":\"1681501760\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-BusinessServicesAssetDownload\",\"permissions\":[\"Retrieve\",\"Delete\",\"Up
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 2e 73 69 6e 67 6c 65 2d 63 68 65 63 6b 62 6f 78 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 Data Ascii: .single-checkbox-row{margin-left:0}.elq-form .elq-field-style{padding-bottom:10px}.elq-form .elq-field-style input[type=submit]{-webkit-appearance:button}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(1turn)}}@keyfra
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6e 73 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: nsive{display:block;max-width:100%;height:auto}.elq-form .img-rounded{border-radius:6px}.elq-form .img-thumbnail{padding:4px;line-height:1.42857;background-color:#fff;border:1px solid #ddd;border-radius:4px;transition:all .2s ease-in-out;display:inline-bl
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 5c 5c 5c 22 20 5c 5c 5c 22 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: right:-15px;margin-left:-15px}.elq-form .row:after,.elq-form .row:before{display:table;content:\\\" \\\"}.elq-form .row:after{clear:both}.elq-form .row-no-gutters{margin-right:0;margin-left:0}.elq-form .row-no-gutters [class*=col-]{padding-right:0;padding
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 2d 78 73 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 Data Ascii: -xs-4,.elq-form .col-xs-5,.elq-form .col-xs-6,.elq-form .col-xs-7,.elq-form .col-xs-8,.elq-form .col-xs-9,.elq-form .col-xs-10,.elq-form .col-xs-11,.elq-form .col-xs-12{float:left}.elq-form .col-xs-1{width:8.33333%}.elq-form .col-xs-2{width:16.66667%}.elq
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e Data Ascii: ush-7{left:58.33333%}.elq-form .col-xs-push-8{left:66.66667%}.elq-form .col-xs-push-9{left:75%}.elq-form .col-xs-push-10{left:83.33333%}.elq-form .col-xs-push-11{left:91.66667%}.elq-form .col-xs-push-12{left:100%}.elq-form .col-xs-offset-0{margin-left:0}.
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 Data Ascii: -form .col-sm-9{width:75%}.elq-form .col-sm-10{width:83.33333%}.elq-form .col-sm-11{width:91.66667%}.elq-form .col-sm-12{width:100%}.elq-form .col-sm-pull-0{right:auto}.elq-form .col-sm-pull-1{right:8.33333%}.elq-form .col-sm-pull-2{right:16.66667%}.elq-f
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: m-offset-5{margin-left:41.66667%}.elq-form .col-sm-offset-6{margin-left:50%}.elq-form .col-sm-offset-7{margin-left:58.33333%}.elq-form .col-sm-offset-8{margin-left:66.66667%}.elq-form .col-sm-offset-9{margin-left:75%}.elq-form .col-sm-offset-10{margin-lef
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 64 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d Data Ascii: d-pull-8{right:66.66667%}.elq-form .col-md-pull-9{right:75%}.elq-form .col-md-pull-10{right:83.33333%}.elq-form .col-md-pull-11{right:91.66667%}.elq-form .col-md-pull-12{right:100%}.elq-form .col-md-push-0{left:auto}.elq-form .col-md-push-1{left:8.33333%}
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 Data Ascii: .col-lg-4,.elq-form .col-lg-5,.elq-form .col-lg-6,.elq-form .col-lg-7,.elq-form .col-lg-8,.elq-form .col-lg-9,.elq-form .col-lg-10,.elq-form .col-lg-11,.elq-form .col-lg-12{float:left}.elq-form .col-lg-1{width:8.33333%}.elq-form .col-lg-2{width:16.66667%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
442	192.168.2.4	50340	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2473	OUT	GET /GetLocationInfo?_=1713460605019 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120097-DFW, cache-pdk-kfty2130032-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460610.198799,VS0,VE133 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
443	192.168.2.4	50342	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2514	OUT	GET /GetEloquaFieldIds/%7B58EC541D-362A-4C45-9D59-4901223CD661%7D?formId=4318 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	670	IN	HTTP/1.1 200 OK Connection: close Content-Length: 116301 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120038-DFW, cache-pdk-kfty2130084-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460610.267206,VS0,VE197 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 33 31 38 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 36 38 31 35 30 31 37 36 30 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 42 75 73 69 6e 65 73 73 53 65 72 76 69 63 65 73 41 73 73 65 74 44 6f 77 6e 6c 6f 61 64 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 2c 5c 22 44 65 6c 65 74 65 5c 22 2c 5c 22 55 70 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"4318\",\"createdAt\":\"1681501760\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-BusinessServicesAssetDownload\",\"permissions\":[\"Retrieve\",\"Delete\",\"Up
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 2e 73 69 6e 67 6c 65 2d 63 68 65 63 6b 62 6f 78 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 Data Ascii: .single-checkbox-row{margin-left:0}.elq-form .elq-field-style{padding-bottom:10px}.elq-form .elq-field-style input[type=submit]{-webkit-appearance:button}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(1turn)}}@keyfra
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6e 73 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: nsive{display:block;max-width:100%;height:auto}.elq-form .img-rounded{border-radius:6px}.elq-form .img-thumbnail{padding:4px;line-height:1.42857;background-color:#fff;border:1px solid #ddd;border-radius:4px;transition:all .2s ease-in-out;display:inline-bl
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 5c 5c 5c 22 20 5c 5c 5c 22 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: right:-15px;margin-left:-15px}.elq-form .row:after,.elq-form .row:before{display:table;content:\\\" \\\"}.elq-form .row:after{clear:both}.elq-form .row-no-gutters{margin-right:0;margin-left:0}.elq-form .row-no-gutters [class*=col-]{padding-right:0;padding
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 2d 78 73 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 Data Ascii: -xs-4,.elq-form .col-xs-5,.elq-form .col-xs-6,.elq-form .col-xs-7,.elq-form .col-xs-8,.elq-form .col-xs-9,.elq-form .col-xs-10,.elq-form .col-xs-11,.elq-form .col-xs-12{float:left}.elq-form .col-xs-1{width:8.33333%}.elq-form .col-xs-2{width:16.66667%}.elq
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e Data Ascii: ush-7{left:58.33333%}.elq-form .col-xs-push-8{left:66.66667%}.elq-form .col-xs-push-9{left:75%}.elq-form .col-xs-push-10{left:83.33333%}.elq-form .col-xs-push-11{left:91.66667%}.elq-form .col-xs-push-12{left:100%}.elq-form .col-xs-offset-0{margin-left:0}.
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 Data Ascii: -form .col-sm-9{width:75%}.elq-form .col-sm-10{width:83.33333%}.elq-form .col-sm-11{width:91.66667%}.elq-form .col-sm-12{width:100%}.elq-form .col-sm-pull-0{right:auto}.elq-form .col-sm-pull-1{right:8.33333%}.elq-form .col-sm-pull-2{right:16.66667%}.elq-f
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: m-offset-5{margin-left:41.66667%}.elq-form .col-sm-offset-6{margin-left:50%}.elq-form .col-sm-offset-7{margin-left:58.33333%}.elq-form .col-sm-offset-8{margin-left:66.66667%}.elq-form .col-sm-offset-9{margin-left:75%}.elq-form .col-sm-offset-10{margin-lef
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 64 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d Data Ascii: d-pull-8{right:66.66667%}.elq-form .col-md-pull-9{right:75%}.elq-form .col-md-pull-10{right:83.33333%}.elq-form .col-md-pull-11{right:91.66667%}.elq-form .col-md-pull-12{right:100%}.elq-form .col-md-push-0{left:auto}.elq-form .col-md-push-1{left:8.33333%}
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 Data Ascii: .col-lg-4,.elq-form .col-lg-5,.elq-form .col-lg-6,.elq-form .col-lg-7,.elq-form .col-lg-8,.elq-form .col-lg-9,.elq-form .col-lg-10,.elq-form .col-lg-11,.elq-form .col-lg-12{float:left}.elq-form .col-lg-1{width:8.33333%}.elq-form .col-lg-2{width:16.66667%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
444	192.168.2.4	50341	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2343	OUT	GET /visitor/v200/svrGP?pps=70&siteid=903&ms=402&firstPartyCookieDomain=tracking.risk.lexisnexis.com&elqGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	708	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: application/javascript; charset=utf-8 Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com Set-Cookie: ELQCOUNTRY=RO; domain=risk.lexisnexis.com; path=/; secure P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:49 GMT Connection: close Content-Length: 79
2024-04-18 17:16:50 UTC	79	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 71 43 75 73 74 6f 6d 65 72 47 55 49 44 28 29 7b 20 72 65 74 75 72 6e 20 27 35 64 39 65 35 38 38 34 2d 38 38 36 61 2d 34 61 64 39 2d 38 66 37 38 2d 34 38 38 61 38 66 31 32 66 35 37 63 27 3b 20 7d Data Ascii: function GetElqCustomerGUID(){ return '5d9e5884-886a-4ad9-8f78-488a8f12f57c'; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
445	192.168.2.4	50344	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2473	OUT	GET /GetLocationInfo?_=1713460605020 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	665	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210037-DFW, cache-pdk-kfty2130084-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460610.370345,VS0,VE91 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
446	192.168.2.4	50347	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	975	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=h6hnb8mbbpsh HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:50 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 17:16:50 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-0TP-X8yOCib34V-lMhzsHA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:50 UTC	364	IN	Data Raw: 35 37 37 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5771<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 30 54 50 2d 58 38 79 4f 43 69 62 33 34 56 2d 6c 4d 68 7a 73 48 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="0TP-X8yOCib34V-lMhzsHA" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha.
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 50 43 5f 69 43 45 52 5f 66 64 55 67 6b 65 7a 68 55 68 42 4f 37 4f 31 63 47 34 55 45 75 37 35 52 59 67 41 55 75 6e 6f 38 33 6d 72 43 64 43 47 49 48 50 4c 69 34 41 38 6a 4c 67 50 6f 6e 77 63 33 6f 69 63 37 6e 76 2d 68 67 63 45 43 39 42 42 2d 4b 35 47 68 61 38 74 68 44 6e 63 30 53 30 34 58 46 49 4f 48 30 52 44 7a 62 57 59 73 68 48 65 67 32 2d 5f 6f 6d 6c 58 45 54 41 6b 51 69 6c 39 6e 32 7a 63 30 33 74 51 73 70 59 43 47 62 48 62 58 31 6c 49 4d 53 45 53 57 56 55 30 6c 65 2d 31 73 70 76 57 77 6e 32 73 4a 37 4a 43 5a 62 55 4e 6c 59 6f 66 49 43 34 74 7a 72 61 4e 7a 6d 4a 48 55 6a 55 41 66 70 51 6a 38 31 67 45 55 6d 45 65 39 77 6d 45 59 51 4e 76 65 4c 59 43 75 36 75 55 56 39 38 30 58 6f 4f 56 56 43 47 4b 76 4c 65 6d 6f 30 68 42 38 35 33 42 38 49 68 57 6c 43 56 32 Data Ascii: PC_iCER_fdUgkezhUhBO7O1cG4UEu75RYgAUuno83mrCdCGIHPLi4A8jLgPonwc3oic7nv-hgcEC9BB-K5Gha8thDnc0S04XFIOH0RDzbWYshHeg2-_omlXETAkQil9n2zc03tQspYCGbHbX1lIMSESWVU0le-1spvWwn2sJ7JCZbUNlYofIC4tzraNzmJHUjUAfpQj81gEUmEe9wmEYQNveLYCu6uUV980XoOVVCGKvLemo0hB853B8IhWlCV2
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 56 48 6f 33 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 30 54 50 2d 58 38 79 4f 43 69 62 33 34 56 2d 6c 4d 68 7a 73 48 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 4a 63 30 68 56 62 47 45 33 64 44 52 6a 53 7a 56 72 54 30 46 69 4e 6d 4e 33 59 30 4a 70 55 46 45 31 53 47 35 56 61 6b 31 55 57 6e 56 78 4e 58 64 56 53 6b 70 6b 4d 6c 56 4e 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 52 33 64 71 55 Data Ascii: VHo3"><script type="text/javascript" nonce="0TP-X8yOCib34V-lMhzsHA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9Jc0hVbGE3dDRjSzVrT0FiNmN3Y0JpUFE1SG5Vak1UWnVxNXdVSkpkMlVNLmpz\x22,\x22\x22,\x22R3dqU
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 6b 6b 78 59 69 74 54 57 56 64 4e 59 58 52 30 54 32 56 7a 65 6c 4e 35 62 47 5a 6e 61 30 68 72 63 56 56 4b 4d 47 4e 71 52 54 4e 4c 59 58 51 35 4e 44 5a 4d 56 45 51 79 62 46 4a 33 5a 53 74 6d 4d 44 46 32 64 31 68 49 64 47 46 44 57 45 78 72 62 43 38 33 59 6b 6b 35 4e 44 59 78 64 55 49 32 54 45 74 4e 62 6e 59 7a 59 32 74 5a 4d 6c 70 61 62 32 31 57 51 32 52 6a 61 47 52 35 61 6e 64 52 61 32 68 79 63 6a 56 46 64 33 6c 68 54 6d 70 71 55 48 51 32 52 45 46 34 4d 56 46 5a 62 45 74 33 4d 6d 52 48 57 57 52 53 57 6a 41 72 4e 33 42 42 54 56 68 42 63 6b 39 4c 57 6c 4a 4f 4c 31 56 6d 5a 48 6b 77 55 47 38 35 64 55 35 46 64 6c 56 4c 4d 6a 6b 76 54 45 46 36 57 58 56 49 65 47 52 74 61 45 56 7a 5a 58 52 4e 57 6d 6f 79 61 30 4a 73 53 47 70 6b 54 57 77 30 61 46 4a 6d 62 6a 6c 34 Data Ascii: kkxYitTWVdNYXR0T2VzelN5bGZna0hrcVVKMGNqRTNLYXQ5NDZMVEQybFJ3ZStmMDF2d1hIdGFDWExrbC83Ykk5NDYxdUI2TEtNbnYzY2tZMlpab21WQ2RjaGR5andRa2hycjVFd3lhTmpqUHQ2REF4MVFZbEt3MmRHWWRSWjArN3BBTVhBck9LWlJOL1VmZHkwUG85dU5FdlVLMjkvTEF6WXVIeGRtaEVzZXRNWmoya0JsSGpkTWw0aFJmbjl4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
447	192.168.2.4	50348	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	975	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=9cc2wvmvhrz5 HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:50 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 17:16:50 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-18kvBYgRrZnEvj8OtOcjtA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:50 UTC	364	IN	Data Raw: 32 62 30 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b01<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 38 6b 76 42 59 67 52 72 5a 6e 45 76 6a 38 4f 74 4f 63 6a 74 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="18kvBYgRrZnEvj8OtOcjtA" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha.
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 44 4b 4f 39 4b 57 37 32 5a 39 77 43 48 45 37 36 38 68 65 6b 41 30 6f 75 43 6e 79 59 58 4b 73 5f 72 59 31 49 34 69 75 47 4e 6c 51 4f 43 51 4a 70 68 56 38 74 51 57 57 30 7a 5f 46 4e 48 4e 6e 67 34 6b 50 6f 50 4a 66 6f 4a 65 39 76 43 54 55 54 53 4c 38 4f 38 73 4b 51 69 58 62 4c 47 7a 41 75 4e 6a 37 4d 62 56 6f 6b 7a 53 70 6e 75 4a 63 43 71 75 78 52 6d 61 63 6b 6e 4e 6f 42 74 4a 43 65 70 4d 6c 38 54 43 42 33 39 61 37 68 54 5f 76 41 79 6b 49 75 4f 2d 44 63 39 62 52 50 2d 31 76 46 50 6b 4e 54 32 73 75 4b 48 63 31 39 69 72 4c 63 51 53 6c 37 51 4a 42 44 47 6b 76 32 65 79 54 49 65 72 48 38 6a 35 51 35 4b 57 63 2d 48 36 52 6b 6b 53 77 5a 7a 37 69 70 6b 42 58 53 33 2d 66 36 4b 64 32 5a 4b 6b 77 62 65 42 35 62 4d 75 47 7a 59 44 70 44 38 4f 72 54 6d 78 4a 34 53 69 79 Data Ascii: DKO9KW72Z9wCHE768hekA0ouCnyYXKs_rY1I4iuGNlQOCQJphV8tQWW0z_FNHNng4kPoPJfoJe9vCTUTSL8O8sKQiXbLGzAuNj7MbVokzSpnuJcCquxRmacknNoBtJCepMl8TCB39a7hT_vAykIuO-Dc9bRP-1vFPkNT2suKHc19irLcQSl7QJBDGkv2eyTIerH8j5Q5KWc-H6RkkSwZz7ipkBXS3-f6Kd2ZKkwbeB5bMuGzYDpD8OrTmxJ4Siy
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 6e 65 38 47 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 31 38 6b 76 42 59 67 52 72 5a 6e 45 76 6a 38 4f 74 4f 63 6a 74 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 4a 63 30 68 56 62 47 45 33 64 44 52 6a 53 7a 56 72 54 30 46 69 4e 6d 4e 33 59 30 4a 70 55 46 45 31 53 47 35 56 61 6b 31 55 57 6e 56 78 4e 58 64 56 53 6b 70 6b 4d 6c 56 4e 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 52 33 64 71 4e Data Ascii: ne8G"><script type="text/javascript" nonce="18kvBYgRrZnEvj8OtOcjtA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9Jc0hVbGE3dDRjSzVrT0FiNmN3Y0JpUFE1SG5Vak1UWnVxNXdVSkpkMlVNLmpz\x22,\x22\x22,\x22R3dqN
2024-04-18 17:16:50 UTC	613	IN	Data Raw: 6b 77 7a 53 30 6c 4a 4c 33 4e 71 63 46 4a 6b 52 45 35 50 52 57 51 79 4f 54 46 43 61 6d 74 57 52 6b 34 76 62 44 64 72 4d 54 68 6a 59 54 6c 54 57 47 4e 77 62 30 4e 59 65 45 78 4b 59 6e 6b 32 59 30 30 35 53 31 56 42 51 55 4a 76 53 56 64 51 4d 31 41 30 65 47 55 77 65 44 46 36 52 55 77 30 61 6d 38 7a 51 54 4e 36 4b 79 39 70 4d 57 46 45 62 6c 67 30 62 33 4a 31 65 6a 59 79 52 6d 55 78 51 6e 46 49 4e 30 63 31 53 54 42 68 4e 30 6c 6b 54 45 78 6c 52 55 35 42 4c 7a 5a 56 55 55 78 33 4c 32 5a 76 61 6d 39 6c 4d 31 56 52 5a 7a 42 43 5a 48 5a 32 57 45 78 6b 51 33 70 48 56 55 31 30 5a 6d 4e 47 54 46 5a 6e 55 44 4a 74 59 7a 4a 55 54 54 46 58 4b 31 68 53 54 56 5a 47 4e 47 68 34 4e 32 39 33 55 55 46 68 54 6b 64 72 4e 7a 52 71 63 48 70 34 61 46 4e 46 5a 57 70 31 59 7a 49 30 Data Ascii: kwzS0lJL3NqcFJkRE5PRWQyOTFCamtWRk4vbDdrMThjYTlTWGNwb0NYeExKYnk2Y005S1VBQUJvSVdQM1A0eGUweDF6RUw0am8zQTN6Ky9pMWFEblg0b3J1ejYyRmUxQnFIN0c1STBhN0lkTExlRU5BLzZVUUx3L2Zvam9lM1VRZzBCZHZ2WExkQ3pHVU10ZmNGTFZnUDJtYzJUTTFXK1hSTVZGNGh4N293UUFhTkdrNzRqcHp4aFNFZWp1YzI0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
448	192.168.2.4	50346	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	975	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=ls6gt4og4jfj HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:50 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 17:16:50 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-wr0tWjadh0aQy8bxhcyJFw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:50 UTC	364	IN	Data Raw: 32 61 65 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2aeb<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 77 72 30 74 57 6a 61 64 68 30 61 51 79 38 62 78 68 63 79 4a 46 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="wr0tWjadh0aQy8bxhcyJFw" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha.
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 5a 61 4b 30 51 58 70 5f 49 79 6e 64 74 59 4a 34 46 77 71 79 52 47 5a 5f 39 49 55 56 73 61 54 72 34 6d 73 74 6f 62 79 42 4a 54 5a 36 6a 36 56 4d 61 4a 67 6d 63 69 2d 42 38 50 4f 52 47 34 56 79 58 72 79 6a 42 47 59 55 64 57 44 62 43 44 66 4a 47 73 51 45 39 4d 56 44 6b 42 64 4a 5f 4d 62 63 61 7a 48 7a 4b 6a 64 66 32 7a 42 67 52 53 6b 49 4d 6d 54 53 56 6e 70 36 45 70 54 66 6a 43 72 37 51 42 52 78 42 6c 37 6e 5a 6c 4a 55 54 36 49 41 66 37 6e 54 5a 31 51 4b 66 2d 39 4a 68 37 53 42 6e 4d 49 68 61 51 63 6b 54 48 63 39 74 39 75 62 4e 61 59 6b 49 78 6a 59 64 48 5a 59 5f 53 5f 4c 72 48 43 7a 39 63 54 79 59 6d 6d 75 43 46 43 57 72 57 2d 4d 44 39 4f 73 53 66 42 77 5f 43 4f 35 4f 50 58 44 48 49 59 74 77 61 71 30 52 6d 55 79 53 7a 7a 4d 72 6c 42 52 35 6b 62 64 5f 58 49 Data Ascii: ZaK0QXp_IyndtYJ4FwqyRGZ_9IUVsaTr4mstobyBJTZ6j6VMaJgmci-B8PORG4VyXryjBGYUdWDbCDfJGsQE9MVDkBdJ_MbcazHzKjdf2zBgRSkIMmTSVnp6EpTfjCr7QBRxBl7nZlJUT6IAf7nTZ1QKf-9Jh7SBnMIhaQckTHc9t9ubNaYkIxjYdHZY_S_LrHCz9cTyYmmuCFCWrW-MD9OsSfBw_CO5OPXDHIYtwaq0RmUySzzMrlBR5kbd_XI
2024-04-18 17:16:50 UTC	1255	IN	Data Raw: 52 50 4e 6c 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 77 72 30 74 57 6a 61 64 68 30 61 51 79 38 62 78 68 63 79 4a 46 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 4a 63 30 68 56 62 47 45 33 64 44 52 6a 53 7a 56 72 54 30 46 69 4e 6d 4e 33 59 30 4a 70 55 46 45 31 53 47 35 56 61 6b 31 55 57 6e 56 78 4e 58 64 56 53 6b 70 6b 4d 6c 56 4e 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 52 33 64 71 54 Data Ascii: RPNl"><script type="text/javascript" nonce="wr0tWjadh0aQy8bxhcyJFw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9Jc0hVbGE3dDRjSzVrT0FiNmN3Y0JpUFE1SG5Vak1UWnVxNXdVSkpkMlVNLmpz\x22,\x22\x22,\x22R3dqT
2024-04-18 17:16:50 UTC	591	IN	Data Raw: 47 6c 75 65 48 68 34 62 46 52 48 5a 6b 35 47 52 44 4d 72 56 31 68 6d 4f 55 78 4f 63 54 46 4b 4d 33 68 50 54 31 70 6a 53 69 74 53 51 6d 70 56 61 45 38 30 52 46 67 35 54 54 55 33 52 45 5a 74 62 6b 68 47 4e 58 6b 31 52 33 64 49 4d 7a 6c 43 54 44 64 68 54 47 74 59 52 54 5a 69 54 58 56 36 4d 30 39 49 63 7a 4a 44 56 6a 51 31 54 56 67 30 4d 32 70 35 57 58 52 48 63 32 5a 31 59 32 4e 58 59 57 45 72 5a 45 68 72 4e 32 39 50 5a 58 42 43 61 32 31 30 61 7a 49 31 56 56 52 30 4d 47 4a 74 64 6e 70 4a 63 56 56 71 64 47 52 68 65 47 31 34 55 30 70 7a 62 6c 49 35 4d 58 6c 44 53 54 42 73 65 55 56 59 56 57 6b 32 5a 58 5a 72 56 6d 78 46 55 6d 74 51 4e 6e 52 77 55 6c 6c 61 59 56 42 73 4e 31 41 35 64 45 73 78 56 6e 55 78 55 48 5a 32 63 54 4e 36 62 6e 64 45 64 6b 55 79 52 56 56 4b Data Ascii: GlueHh4bFRHZk5GRDMrV1hmOUxOcTFKM3hPT1pjSitSQmpVaE80RFg5TTU3REZtbkhGNXk1R3dIMzlCTDdhTGtYRTZiTXV6M09IczJDVjQ1TVg0M2p5WXRHc2Z1Y2NXYWErZEhrN29PZXBCa210azI1VVR0MGJtdnpJcVVqdGRheG14U0pzblI5MXlDSTBseUVYVWk2ZXZrVmxFUmtQNnRwUllaYVBsN1A5dEsxVnUxUHZ2cTN6bndEdkUyRVVK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
449	192.168.2.4	50350	104.17.24.14	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	641	OUT	GET /ajax/libs/algoliasearch-helper-js/2.28.1/algoliasearch.helper.min.js?v=638484963592761859 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:50 UTC	949	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:50 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03cfa-1f4ce" Last-Modified: Mon, 04 May 2020 16:04:10 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Tue, 08 Apr 2025 17:16:50 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iX6YWJoL21eabDFdHM4hknZXB9Gs%2BZ7giDYEgXXoH%2Fx1X7In%2FVy5SbuEV0NeaDYN3OD1KxcpDcHB5M2BfwBMzJM7HsHM4IkarRnJ%2F1A4Y2azp37QlavtNT4L5J2QhEDQo1F7KGGd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87664e116ca2b085-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:50 UTC	420	IN	Data Raw: 37 62 66 39 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3b 65 6c 73 65 7b 76 61 72 20 74 3b 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 Data Ascii: 7bf9!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{var t;t="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof s
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 63 28 73 2c 21 30 29 3b 69 66 28 61 29 72 65 74 75 72 6e 20 61 28 73 2c 21 30 29 3b 76 61 72 20 75 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 73 2b 22 27 22 29 3b 74 68 72 6f 77 20 75 2e 63 6f 64 65 3d 22 4d 4f 44 55 4c 45 5f 4e 4f 54 5f 46 4f 55 4e 44 22 2c 75 7d 76 61 72 20 66 3d 72 5b 73 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 74 5b 73 5d 5b 30 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 74 5b 73 5d 5b 31 5d 5b 65 5d 3b 72 65 74 75 72 6e 20 69 28 72 7c 7c 65 29 7d 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 65 2c 74 2c 72 2c 6e 29 7d 72 65 74 75 72 6e 20 72 5b 73 5d 2e 65 78 70 6f 72 74 73 7d 66 6f 72 28 76 61 72 Data Ascii: return c(s,!0);if(a)return a(s,!0);var u=new Error("Cannot find module '"+s+"'");throw u.code="MODULE_NOT_FOUND",u}var f=r[s]={exports:{}};t[s][0].call(f.exports,function(e){var r=t[s][1][e];return i(r\|\|e)},f,f.exports,e,t,r,n)}return r[s].exports}for(var
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 72 22 3d 3d 3d 65 26 26 28 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 65 72 72 6f 72 7c 7c 73 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 65 72 72 6f 72 29 26 26 21 74 68 69 73 2e 5f 65 76 65 6e 74 73 2e 65 72 72 6f 72 2e 6c 65 6e 67 74 68 29 29 7b 69 66 28 28 74 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 29 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 29 74 68 72 6f 77 20 74 3b 76 61 72 20 66 3d 6e 65 77 20 45 72 72 6f 72 28 27 55 6e 63 61 75 67 68 74 2c 20 75 6e 73 70 65 63 69 66 69 65 64 20 22 65 72 72 6f 72 22 20 65 76 65 6e 74 2e 20 28 27 2b 74 2b 22 29 22 29 3b 74 68 72 6f 77 20 66 2e 63 6f 6e 74 65 78 74 3d 74 2c 66 7d 69 66 28 72 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2c 6f 28 72 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 69 28 72 29 29 73 77 Data Ascii: r"===e&&(!this._events.error\|\|s(this._events.error)&&!this._events.error.length)){if((t=arguments[1])instanceof Error)throw t;var f=new Error('Uncaught, unspecified "error" event. ('+t+")");throw f.context=t,f}if(r=this._events[e],o(r))return!1;if(i(r))sw
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 28 65 2c 72 29 2c 6e 7c 7c 28 6e 3d 21 30 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 69 66 28 21 69 28 74 29 29 74 68 72 6f 77 20 54 79 70 65 45 72 72 6f 72 28 22 6c 69 73 74 65 6e 65 72 20 6d 75 73 74 20 62 65 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 6e 3d 21 31 3b 72 65 74 75 72 6e 20 72 2e 6c 69 73 74 65 6e 65 72 3d 74 2c 74 68 69 73 2e 6f 6e 28 65 2c 72 29 2c 74 68 69 73 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 61 2c 6f 3b 69 66 28 21 69 28 74 29 29 74 68 72 Data Ascii: function(e,t){function r(){this.removeListener(e,r),n\|\|(n=!0,t.apply(this,arguments))}if(!i(t))throw TypeError("listener must be a function");var n=!1;return r.listener=t,this.on(e,r),this},n.prototype.removeListener=function(e,t){var r,n,a,o;if(!i(t))thr
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 5d 3a 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 2e 73 6c 69 63 65 28 29 3a 5b 5d 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 69 73 74 65 6e 65 72 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 68 69 73 2e 5f 65 76 65 6e 74 73 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 65 76 65 6e 74 73 5b 65 5d 3b 69 66 28 69 28 74 29 29 72 65 74 75 72 6e 20 31 3b 69 66 28 74 29 72 65 74 75 72 6e 20 74 2e 6c 65 6e 67 74 68 7d 72 65 74 75 72 6e 20 30 7d 2c 6e 2e 6c 69 73 74 65 6e 65 72 43 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 6c 69 73 74 65 6e 65 72 43 6f 75 6e 74 28 74 29 7d 7d 2c 7b 7d 5d 2c 33 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 65 28 22 2e 2f 5f 67 65 74 4e 61 74 69 Data Ascii: ]:this._events[e].slice():[]},n.prototype.listenerCount=function(e){if(this._events){var t=this._events[e];if(i(t))return 1;if(t)return t.length}return 0},n.listenerCount=function(e,t){return e.listenerCount(t)}},{}],3:[function(e,t,r){var n=e("./_getNati
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 79 70 65 2e 64 65 6c 65 74 65 3d 61 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 73 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 6f 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 63 2c 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 22 2e 2f 5f 6c 69 73 74 43 61 63 68 65 43 6c 65 61 72 22 3a 31 36 33 2c 22 2e 2f 5f 6c 69 73 74 43 61 63 68 65 44 65 6c 65 74 65 22 3a 31 36 34 2c 22 2e 2f 5f 6c 69 73 74 43 61 63 68 65 47 65 74 22 3a 31 36 35 2c 22 2e 2f 5f 6c 69 73 74 43 61 63 68 65 48 61 73 22 3a 31 36 36 2c 22 2e 2f 5f 6c 69 73 74 43 61 63 68 65 53 65 74 22 3a 31 36 37 7d 5d 2c 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 74 68 69 73 2e 5f 5f 77 72 61 70 70 65 64 5f 5f 3d 65 2c 74 68 69 Data Ascii: ype.delete=a,n.prototype.get=s,n.prototype.has=o,n.prototype.set=c,t.exports=n},{"./_listCacheClear":163,"./_listCacheDelete":164,"./_listCacheGet":165,"./_listCacheHas":166,"./_listCacheSet":167}],7:[function(e,t,r){function n(e,t){this.__wrapped__=e,thi
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 6e 67 74 68 3b 66 6f 72 28 74 68 69 73 2e 5f 5f 64 61 74 61 5f 5f 3d 6e 65 77 20 69 3b 2b 2b 74 3c 72 3b 29 74 68 69 73 2e 61 64 64 28 65 5b 74 5d 29 7d 76 61 72 20 69 3d 65 28 22 2e 2f 5f 4d 61 70 43 61 63 68 65 22 29 2c 61 3d 65 28 22 2e 2f 5f 73 65 74 43 61 63 68 65 41 64 64 22 29 2c 73 3d 65 28 22 2e 2f 5f 73 65 74 43 61 63 68 65 48 61 73 22 29 3b 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 3d 61 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 73 2c 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 22 2e 2f 5f 4d 61 70 43 61 63 68 65 22 3a 39 2c 22 2e 2f 5f 73 65 74 43 61 63 68 65 41 64 64 22 3a 31 39 31 2c 22 2e 2f 5f 73 65 74 43 61 63 68 65 48 61 73 22 3a 31 39 32 7d 5d 2c 31 33 3a 5b 66 75 6e 63 74 69 Data Ascii: ngth;for(this.__data__=new i;++t<r;)this.add(e[t])}var i=e("./_MapCache"),a=e("./_setCacheAdd"),s=e("./_setCacheHas");n.prototype.add=n.prototype.push=a,n.prototype.has=s,t.exports=n},{"./_MapCache":9,"./_setCacheAdd":191,"./_setCacheHas":192}],13:[functi
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 68 2c 69 3d 30 2c 61 3d 5b 5d 3b 2b 2b 72 3c 6e 3b 29 7b 76 61 72 20 73 3d 65 5b 72 5d 3b 74 28 73 2c 72 2c 65 29 26 26 28 61 5b 69 2b 2b 5d 3d 73 29 7d 72 65 74 75 72 6e 20 61 7d 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 32 30 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 21 28 6e 75 6c 6c 3d 3d 65 3f 30 3a 65 2e 6c 65 6e 67 74 68 29 26 26 69 28 65 2c 74 2c 30 29 3e 2d 31 7d 76 61 72 20 69 3d 65 28 22 2e 2f 5f 62 61 73 65 49 6e 64 65 78 4f 66 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 22 2e 2f 5f 62 61 73 65 49 6e 64 65 78 4f 66 22 3a 34 37 7d 5d 2c 32 31 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 72 29 7b Data Ascii: h,i=0,a=[];++r<n;){var s=e[r];t(s,r,e)&&(a[i++]=s)}return a}t.exports=n},{}],20:[function(e,t,r){function n(e,t){return!!(null==e?0:e.length)&&i(e,t,0)>-1}var i=e("./_baseIndexOf");t.exports=n},{"./_baseIndexOf":47}],21:[function(e,t,r){function n(e,t,r){
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 65 3f 30 3a 65 2e 6c 65 6e 67 74 68 3b 2b 2b 72 3c 6e 3b 29 69 66 28 74 28 65 5b 72 5d 2c 72 2c 65 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 32 37 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 70 6c 69 74 28 22 22 29 7d 74 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 7b 7d 5d 2c 32 38 3a 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 2c 72 29 7b 28 76 6f 69 64 20 30 3d 3d 3d 72 7c 7c 61 28 65 5b 74 5d 2c 72 29 29 26 26 28 76 6f 69 64 20 30 21 3d 3d 72 7c 7c 74 20 69 6e 20 65 29 7c 7c 69 28 65 2c 74 2c 72 29 7d 76 61 72 20 69 3d 65 28 22 2e 2f 5f 62 61 73 65 Data Ascii: ull==e?0:e.length;++r<n;)if(t(e[r],r,e))return!0;return!1}t.exports=n},{}],27:[function(e,t,r){function n(e){return e.split("")}t.exports=n},{}],28:[function(e,t,r){function n(e,t,r){(void 0===r\|\|a(e[t],r))&&(void 0!==r\|\|t in e)\|\|i(e,t,r)}var i=e("./_base
2024-04-18 17:16:50 UTC	1369	IN	Data Raw: 74 26 4f 2c 51 3d 74 26 53 3b 69 66 28 72 26 26 28 6b 3d 48 3f 72 28 65 2c 43 2c 48 2c 4c 29 3a 72 28 65 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6b 29 72 65 74 75 72 6e 20 6b 3b 69 66 28 21 46 28 65 29 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 4d 3d 6d 28 65 29 3b 69 66 28 4d 29 7b 69 66 28 6b 3d 76 28 65 29 2c 21 4e 29 72 65 74 75 72 6e 20 66 28 65 2c 6b 29 7d 65 6c 73 65 7b 76 61 72 20 42 3d 5f 28 65 29 2c 71 3d 42 3d 3d 77 7c 7c 42 3d 3d 45 3b 69 66 28 62 28 65 29 29 72 65 74 75 72 6e 20 75 28 65 2c 4e 29 3b 69 66 28 42 3d 3d 54 7c 7c 42 3d 3d 50 7c 7c 71 26 26 21 48 29 7b 69 66 28 6b 3d 44 7c 7c 71 3f 7b 7d 3a 67 28 65 29 2c 21 4e 29 72 65 74 75 72 6e 20 44 3f 68 28 65 2c 63 28 6b 2c 65 29 29 3a 6c 28 65 2c 6f 28 6b 2c 65 29 29 7d 65 6c 73 65 7b 69 66 28 Data Ascii: t&O,Q=t&S;if(r&&(k=H?r(e,C,H,L):r(e)),void 0!==k)return k;if(!F(e))return e;var M=m(e);if(M){if(k=v(e),!N)return f(e,k)}else{var B=_(e),q=B==w\|\|B==E;if(b(e))return u(e,N);if(B==T\|\|B==P\|\|q&&!H){if(k=D\|\|q?{}:g(e),!N)return D?h(e,c(k,e)):l(e,o(k,e))}else{if(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
450	192.168.2.4	50351	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2160	OUT	GET /temp/dictionary.en-US.json?_=1713460608986 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	658	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1831 Content-Type: application/json Last-Modified: Tue, 18 Oct 2022 14:39:02 GMT ETag: "1d5faf5dffe2d81:0" Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:50 GMT Age: 0 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120050-DFW, cache-pdk-kfty2130056-PDK X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1713460611.747282,VS0,VE16 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 7b 22 41 63 74 69 76 65 20 46 69 6c 74 65 72 73 22 3a 22 41 63 74 69 76 65 20 46 69 6c 74 65 72 73 22 2c 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 22 3a 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 22 2c 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 20 49 74 65 6d 22 3a 22 41 6c 6c 20 49 6e 64 75 73 74 72 69 65 73 20 49 74 65 6d 22 2c 22 41 6c 6c 20 50 72 6f 64 75 63 74 20 4e 61 6d 65 73 22 3a 22 41 6c 6c 20 50 72 6f 64 75 63 74 20 4e 61 6d 65 73 22 2c 22 41 6c 6c 20 52 65 73 6f 75 72 63 65 20 54 79 70 65 73 22 3a 22 41 6c 6c 20 52 65 73 6f 75 72 63 65 20 54 79 70 65 73 22 2c 22 41 6c 6c 20 53 6f 6c 75 74 69 6f 6e 73 22 3a 22 41 6c 6c 20 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 41 6c 6c 20 53 75 62 2d 49 6e 64 75 73 74 72 69 65 73 20 49 74 65 6d 22 3a 22 41 Data Ascii: {"Active Filters":"Active Filters","All Industries":"All Industries","All Industries Item":"All Industries Item","All Product Names":"All Product Names","All Resource Types":"All Resource Types","All Solutions":"All Solutions","All Sub-Industries Item":"A
2024-04-18 17:16:50 UTC	452	IN	Data Raw: 68 22 3a 22 52 65 73 65 61 72 63 68 22 2c 22 53 61 76 65 22 3a 22 53 61 76 65 22 2c 22 53 65 74 75 70 20 41 64 64 54 68 69 73 20 6b 65 79 22 3a 22 53 65 74 75 70 20 41 64 64 54 68 69 73 20 6b 65 79 20 66 6f 72 20 74 68 69 73 20 72 65 67 69 6f 6e 28 73 69 74 65 29 22 2c 22 53 68 61 72 65 22 3a 22 53 68 61 72 65 22 2c 22 53 69 67 6e 2d 49 6e 20 4e 6f 77 22 3a 22 53 69 67 6e 2d 49 6e 20 4e 6f 77 22 2c 22 53 69 74 65 20 46 65 65 64 62 61 63 6b 20 46 6f 72 6d 22 3a 22 22 2c 22 53 6f 63 69 61 6c 20 53 68 61 72 65 20 4b 65 79 22 3a 22 22 2c 22 53 70 65 61 6b 65 72 20 46 6f 72 6d 22 3a 22 22 2c 22 53 75 62 6d 69 74 22 3a 22 53 75 62 6d 69 74 22 2c 22 54 61 6c 6b 20 54 6f 20 53 61 6c 65 73 22 3a 22 54 61 6c 6b 20 54 6f 20 53 61 6c 65 73 22 2c 22 54 61 6c 6b 20 54 Data Ascii: h":"Research","Save":"Save","Setup AddThis key":"Setup AddThis key for this region(site)","Share":"Share","Sign-In Now":"Sign-In Now","Site Feedback Form":"","Social Share Key":"","Speaker Form":"","Submit":"Submit","Talk To Sales":"Talk To Sales","Talk T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
451	192.168.2.4	50353	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2149	OUT	GET /GetLocationInfo?_=1713460605019 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:51 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120097-DFW, cache-pdk-kfty2130034-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.774575,VS0,VE611 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
452	192.168.2.4	50354	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2420	OUT	GET /Areas/LNRS/js/Components/Resources/Templates/MasonryResourceListingItem.html?v=638484963592761859 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	687	IN	HTTP/1.1 200 OK Connection: close Content-Length: 567 Content-Type: text/html Last-Modified: Fri, 12 Apr 2024 05:09:34 GMT ETag: "0bba39b978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120024-DFW, cache-pdk-kfty2130024-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.822665,VS0,VE64 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	567	IN	Data Raw: ef bb bf 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 73 6f 6e 72 79 2d 72 65 73 6f 75 72 63 65 2d 6c 69 73 74 69 6e 67 2d 69 74 65 6d 20 7b 7b 23 69 73 44 6f 77 6e 6c 6f 61 64 49 74 65 6d 7d 7d 74 68 75 6d 62 6e 61 69 6c 2d 69 63 6f 6e 7b 7b 2f 69 73 44 6f 77 6e 6c 6f 61 64 49 74 65 6d 7d 7d 22 3e 0d 0a 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6d 61 73 6f 6e 72 79 2d 72 65 73 6f 75 72 63 65 2d 6c 69 73 74 69 6e 67 2d 69 74 65 6d 2d 74 68 75 6d 62 6e 61 69 6c 22 20 73 72 63 3d 22 7b 7b 74 68 75 6d 62 6e 61 69 6c 7d 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 73 6f 6e 72 79 2d 72 65 73 6f 75 72 63 65 2d 6c 69 73 74 69 6e 67 2d 69 74 65 6d 2d 74 79 70 65 22 20 3e 7b 7b 5f 72 65 73 6f 75 72 63 65 5f 74 79 70 65 7d 7d 3c Data Ascii: <div class="masonry-resource-listing-item {{#isDownloadItem}}thumbnail-icon{{/isDownloadItem}}"> <img class="masonry-resource-listing-item-thumbnail" src="{{thumbnail}}" /> <span class="masonry-resource-listing-item-type" >{{_resource_type}}<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
453	192.168.2.4	50355	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2205	OUT	GET /GetEloquaFieldIds/%7B794409E6-12BE-4A3B-9B65-C67BFA5FDEE2%7D?formId=4317 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	669	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53206 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120079-DFW, cache-pdk-kfty2130053-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.827168,VS0,VE154 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 33 31 37 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 36 38 31 35 30 30 32 39 38 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 42 75 73 69 6e 65 73 73 53 65 72 76 69 63 65 73 43 6f 6e 74 61 63 74 55 73 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 2c 5c 22 44 65 6c 65 74 65 5c 22 2c 5c 22 55 70 64 61 74 65 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"4317\",\"createdAt\":\"1681500298\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-BusinessServicesContactUs\",\"permissions\":[\"Retrieve\",\"Delete\",\"Update
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 67 6c 65 2d 63 68 65 63 6b 62 6f 78 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 73 71 75 61 72 65 2d 62 75 74 74 6f 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 Data Ascii: gle-checkbox-row{margin-left:0}.elq-form .elq-field-style{padding-bottom:10px}.elq-form .elq-field-style input[type=submit]{-webkit-appearance:square-button}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(1turn)}}@key
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 73 70 6f 6e 73 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 Data Ascii: sponsive{display:block;max-width:100%;height:auto}.elq-form .img-rounded{border-radius:6px}.elq-form .img-thumbnail{padding:4px;line-height:1.42857;background-color:#fff;border:1px solid #ddd;border-radius:4px;transition:all .2s ease-in-out;display:inline
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 5c 5c 5c 22 20 5c 5c 5c 22 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 Data Ascii: in-right:-15px;margin-left:-15px}.elq-form .row:after,.elq-form .row:before{display:table;content:\\\" \\\"}.elq-form .row:after{clear:both}.elq-form .row-no-gutters{margin-right:0;margin-left:0}.elq-form .row-no-gutters [class*=col-]{padding-right:0;padd
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 63 6f 6c 2d 78 73 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e Data Ascii: col-xs-4,.elq-form .col-xs-5,.elq-form .col-xs-6,.elq-form .col-xs-7,.elq-form .col-xs-8,.elq-form .col-xs-9,.elq-form .col-xs-10,.elq-form .col-xs-11,.elq-form .col-xs-12{float:left}.elq-form .col-xs-1{width:8.33333%}.elq-form .col-xs-2{width:16.66667%}.
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 73 2d 70 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a Data Ascii: s-push-7{left:58.33333%}.elq-form .col-xs-push-8{left:66.66667%}.elq-form .col-xs-push-9{left:75%}.elq-form .col-xs-push-10{left:83.33333%}.elq-form .col-xs-push-11{left:91.66667%}.elq-form .col-xs-push-12{left:100%}.elq-form .col-xs-offset-0{margin-left:
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c Data Ascii: elq-form .col-sm-9{width:75%}.elq-form .col-sm-10{width:83.33333%}.elq-form .col-sm-11{width:91.66667%}.elq-form .col-sm-12{width:100%}.elq-form .col-sm-pull-0{right:auto}.elq-form .col-sm-pull-1{right:8.33333%}.elq-form .col-sm-pull-2{right:16.66667%}.el
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d Data Ascii: l-sm-offset-5{margin-left:41.66667%}.elq-form .col-sm-offset-6{margin-left:50%}.elq-form .col-sm-offset-7{margin-left:58.33333%}.elq-form .col-sm-offset-8{margin-left:66.66667%}.elq-form .col-sm-offset-9{margin-left:75%}.elq-form .col-sm-offset-10{margin-
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6c 2d 6d 64 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 Data Ascii: l-md-pull-8{right:66.66667%}.elq-form .col-md-pull-9{right:75%}.elq-form .col-md-pull-10{right:83.33333%}.elq-form .col-md-pull-11{right:91.66667%}.elq-form .col-md-pull-12{right:100%}.elq-form .col-md-push-0{left:auto}.elq-form .col-md-push-1{left:8.3333
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 Data Ascii: orm .col-lg-4,.elq-form .col-lg-5,.elq-form .col-lg-6,.elq-form .col-lg-7,.elq-form .col-lg-8,.elq-form .col-lg-9,.elq-form .col-lg-10,.elq-form .col-lg-11,.elq-form .col-lg-12{float:left}.elq-form .col-lg-1{width:8.33333%}.elq-form .col-lg-2{width:16.666

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
454	192.168.2.4	50352	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2505	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:50 GMT Via: 1.1 varnish ETag: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" Age: 46 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kpdk1780072-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460611.760692,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
455	192.168.2.4	50357	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2164	OUT	GET /GetLocationInfo?_=1713460605020 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210037-DFW, cache-pdk-kfty2130093-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.883492,VS0,VE100 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
456	192.168.2.4	50356	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2490	OUT	GET /-/media/images/lnrs/heroes/key_image%20jpg.jpg?h=470&iar=0&w=1230&hash=183D924018454C8F9F17F6FFD180EFF8 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:50 UTC	866	IN	HTTP/1.1 200 OK Connection: close Content-Length: 22904 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="key_image jpg.jpg" Content-Type: image/webp Etag: "yDcyLWf2OPXA8o2IMhnjpPRg+kspTzY15zaO9p1yZcs" Fastly-Io-Info: ifsz=270683 idim=1230x470 ifmt=jpeg ofsz=22904 odim=1230x470 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010226 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560493 Date: Thu, 18 Apr 2024 17:16:50 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120042-DFW, cache-pdk-kfty2130061-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460611.883809,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 52 49 46 46 70 59 00 00 57 45 42 50 56 50 38 20 64 59 00 00 90 07 03 9d 01 2a ce 04 d6 01 3e 51 28 8f 46 23 ab a7 2c 24 72 a9 89 80 0a 09 67 6e 2d 0b 64 03 fb e4 2f b5 ec b2 c8 d2 9a 7e d9 8f fd 86 c9 fe c1 c9 8b 3f 7e bd f9 63 fd 77 85 3f a5 f9 b4 71 4a 20 4f 1a bc f5 ff e4 7a 67 7e af ff 1f 2e 57 23 dd 45 63 9e 3b f9 fb fb df d2 f5 bb d1 e7 a8 f0 6d bf d7 b2 0c 2a 4f 39 1d f9 bd ea 0c 0f 4f 47 7f 27 ff 57 c7 df 7f 31 e7 d7 9f 7b 71 20 ff c7 ce 1f cb bb aa f2 8f 0a f1 3b f9 81 f8 c6 e9 65 ec 1f 60 ee 96 e1 63 f0 2c 9a cd 54 f5 6c 64 6f 59 a0 c8 3a e2 af 92 0a ab 8a 40 2f a1 42 7a 71 76 ad 78 b2 4c d7 7d 14 f7 dd c1 2c f1 d2 47 1f 81 90 5d 17 a2 c5 25 54 20 50 96 38 75 26 bb 1e 8d e0 ae f9 bc 05 b7 ae e4 a3 38 0f 46 74 13 60 72 3b 7d f9 ba 51 49 ed 54 a9 Data Ascii: RIFFpYWEBPVP8 dY>Q(F#,$rgn-d/~?~cw?qJ Ozg~.W#Ec;mO9OG'W1{q ;e`c,TldoY:@/BzqvxL},G]%T P8u&8Ft`r;}QIT
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: b0 8c 9f b5 91 6e 7a 28 5d 03 34 20 9e 21 ea ef ef 0f 8f f2 38 a4 35 f0 43 d0 96 7a 2b 53 bd cb a1 3c 24 c6 ff ad 40 f2 0a 19 3c 87 e0 7e 15 e9 e7 c2 31 2a 96 bc b2 b0 a9 a1 59 9d 93 8b 77 1e b1 fd db aa 5d 2e bc b1 f7 71 6f 78 47 8f ec 54 2e 39 df 39 91 b5 d0 89 11 c9 bb 39 9d 7d d5 a4 11 51 bc 44 4e 6c 5a 2b 59 4d e8 32 2f ed 23 4e da 79 52 32 2e 6e ed 57 6c 46 43 84 88 7c f9 56 ac b2 d1 50 99 7b c4 55 ca 70 a9 9c 14 e5 e1 fc 63 99 5c 8c c3 2a 43 1e d2 f5 b4 c4 9a 69 98 ab 6f 26 6c cd 9e b5 96 68 b7 0a 2d 48 19 60 b0 e9 44 5c 1a 7a 48 38 93 6e 73 e6 44 e7 91 e2 9e e7 0c ce 38 d1 35 28 1b f1 25 56 33 e8 50 d1 2d 44 fe 2a ec 60 06 b4 53 4e 61 0a 42 b6 be c4 5d ff e7 e1 f1 0c 5f 0b a4 0d de 3b 26 93 86 6a b7 e1 ee e3 4a b2 18 2d c4 14 6e da 9e dc d9 61 89 Data Ascii: nz(]4 !85Cz+S<$@<~1Yw].qoxGT.999}QDNlZ+YM2/#NyR2.nWlFC\|VP{Upc\Cio&lh-H`D\zH8nsD85(%V3P-D*`SNaB]_;&jJ-na
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 16 cb bd 3d 5c 46 ea 4c f8 ce 38 d6 c8 b4 a7 fe 77 43 01 1a d1 d9 87 6c a9 01 8b 7a 4e f1 88 4f 1f db 06 97 f5 a4 26 5a 55 2c df b0 ac 1f 77 e1 d1 0a b2 1d f4 0f f9 5b 4b d3 2e 6d 30 c2 01 ab 13 71 e9 49 24 fc 07 43 13 67 3a e6 57 39 d0 21 7b 85 0f f2 19 cc 2e 2b 9c d9 f3 34 c9 b3 2c a4 2c d7 64 3a ae 30 f4 4f 81 2b 6b 02 8c d0 9e 62 e6 96 1c 86 98 0d 24 f3 a8 58 25 83 c3 ed 23 b8 c8 73 d4 ea 17 b8 03 d1 39 65 b1 6f 8f 02 80 87 e6 ca 85 36 bf e5 c0 cf 81 b2 78 2f 8b f2 d7 cc 71 f6 68 0c 5f 81 bb b2 24 60 eb cd 2e ba b1 fe 15 f5 d3 ed 7c 2e 26 de 41 f1 b6 07 16 48 9c 8d 07 68 0a 54 46 71 a3 9a 3b b0 e6 80 6d 1f 31 3b 78 d2 cb 33 03 49 06 64 32 4f ae 79 22 5d 7e 25 fd c8 52 0e 48 6b 98 ee 5e e6 16 71 0d 5a 7e 6b 3c 83 53 d9 9c c4 fc bc 14 e1 03 d5 92 27 95 Data Ascii: =\FL8wClzNO&ZU,w[K.m0qI$Cg:W9!{.+4,,d:0O+kb$X%#s9eo6x/qh_$`.\|.&AHhTFq;m1;x3Id2Oy"]~%RHk^qZ~k<S'
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: ca fe 4b d6 bc eb 19 d6 7f 70 2c c6 45 f5 dc 98 1b 1a 7e ca 7b b9 5e c5 bc cc 7b 84 25 7b 76 6e 83 4a 86 d9 cf 03 04 83 12 b0 ae 04 0b d7 fc d8 48 b5 0e 3e 59 3d c0 0b da 0e 21 a5 a9 1e 61 4a de ba ee 88 11 76 21 a8 a3 e7 25 6f b5 89 ee 4b 8b d9 a0 19 04 cf 49 fb d3 5f 9d 6a 52 1b c8 93 41 8d 07 fb 31 de dc 7a a6 52 97 e6 0c 91 0a 68 f3 38 b9 04 03 62 e3 4c 83 5d 52 43 1a 69 bf 02 93 db 45 e4 16 75 39 22 2f e6 f3 56 07 ba 60 c1 bb d2 e3 26 47 52 44 53 1e 74 d8 96 8c ee 84 d9 23 77 d5 fa 18 13 4f 8f e3 5d 4a 1c a2 bc 9a 34 6c 13 fd 7e 7e 9a 19 50 f0 9b 4d ca 58 14 02 c6 b2 d7 1a 09 47 0f 7e de 29 a7 c6 77 58 4a cd d9 2c 29 0f 2e 87 dc 5b 85 ff 2d 39 ee 76 90 e6 cc 41 76 bd ab d4 af cc 81 a1 d0 3b d7 b7 c1 d8 07 da c5 09 af 99 24 57 5c 54 d2 8e 0c 15 f9 ff Data Ascii: Kp,E~{^{%{vnJH>Y=!aJv!%oKI_jRA1zRh8bL]RCiEu9"/V`&GRDSt#wO]J4l~~PMXG~)wXJ,).[-9vAv;$W\T
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 05 db f5 00 1b ba 6b 05 ff ee b6 47 85 61 56 4e 32 62 f8 86 6c ca 64 6c 77 8b 40 5e 2c 36 92 02 d4 17 3d 8e 88 9a 18 cd 17 75 81 f7 a8 0f 4b 97 f5 07 8f bd 6c 20 05 12 22 99 d0 08 7e f7 28 82 ff 7d 79 48 b7 3c bb 7a 50 fb 96 d5 6d 7c 30 85 97 68 81 f5 c6 e6 5c c7 8b ee a7 7a c4 81 b6 62 2e 61 02 b5 67 44 f3 50 ea d7 b6 84 03 9e f6 4d bf 03 c5 ab c7 18 fc af 32 c9 f7 1f 4b b0 99 6f cd cc d0 ea 70 da 46 07 ac d5 08 bf ed 17 54 28 20 a9 84 62 20 77 2f 4d 98 57 18 ff 85 b9 fa 39 76 4d de c6 a2 d3 fa 98 39 50 a5 ad e1 2b fd 98 ca 35 3d d8 df 4a a6 ac 23 51 6a 34 ef ef 03 49 f1 02 94 41 f4 26 49 bb 16 13 e0 4e c1 01 c1 0f a0 e1 ee c9 05 d9 ba 4b 01 06 4d 06 39 1e 09 f6 0c fe 5c ed 0f 4e 1f b5 08 0c 0a e8 0d 47 6d cc 7b 7d 28 66 4d 87 a9 53 88 20 c9 ce 8f 2b 79 Data Ascii: kGaVN2bldlw@^,6=uKl "~(}yH<zPm\|0h\zb.agDPM2KopFT( b w/MW9vM9P+5=J#Qj4IA&INKM9\NGm{}(fMS +y
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 6a 30 da 95 c3 6f a8 19 8e 22 a0 98 b8 30 c2 d8 bd 8a e5 64 4c 73 67 fa 0d 31 e1 26 78 34 65 92 73 be 41 42 ca 6c 85 96 cc 36 94 de 54 04 75 45 c7 56 59 bf e7 35 47 c7 6c 0e 0c c5 e8 98 93 5a 8c ac 34 a5 57 b6 2a 8f af b5 56 7b 26 70 e2 14 9e c7 ce 0e 38 25 32 50 5c 1b 4b d6 2f 5f c3 3e 66 ff 8a 1f 07 9a fd e4 a4 29 20 a3 3f f7 8f 50 17 b8 79 93 eb 43 6a fa 94 5a f7 65 e4 55 da d1 f4 ed 29 87 aa 68 94 e0 6c b0 2d 65 29 e7 b4 ac f5 1b 42 f1 40 5c a0 c6 87 be 85 e6 4c 94 c7 94 0f 04 33 2e ae 05 e3 a7 5a 53 1c 81 4b 43 64 9c 39 39 b8 32 ab 44 cd 3a 53 50 bb 76 5a 74 76 b1 fd 05 95 92 47 d9 94 42 da 27 6f 5c ba 51 00 f4 50 8a ef 88 1c 04 c1 a5 de ee 33 de 8d 41 3a 89 0a 77 67 c5 1c 3c 79 f8 d9 c4 e4 13 e7 a3 1b 50 0d fa 3b f4 6b ec 81 4c fa c1 b0 06 87 76 d4 Data Ascii: j0o"0dLsg1&x4esABl6TuEVY5GlZ4W*V{&p8%2P\K/_>f) ?PyCjZeU)hl-e)B@\L3.ZSKCd992D:SPvZtvGB'o\QP3A:wg<yP;kLv
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 3c 2f 5d ca 74 9a b8 87 10 08 2a c9 b9 d4 1e de 7e 84 6a da f0 a5 5c a3 a3 42 e1 0e 21 88 66 f9 b9 e6 5a 46 ec bb c8 28 c2 0d 8b d8 3d 16 53 e9 4b ab 2a 98 61 16 6e be a9 f9 21 0c e4 af 92 8a 8d da 65 02 4c 95 f7 9f 5f 57 27 ea 85 0a 72 4d 2c 04 c8 66 da 73 90 22 67 3d 30 7d ec ec 87 ea 0e cf a9 6d c0 83 93 90 cd ea 17 4f e6 1a 47 5f e5 5c fc f4 0a f4 2a 8a 16 d8 22 dc 5e e5 ee 1c 63 83 53 de 89 06 da b6 0b 5f d0 fa 97 df c9 b9 02 64 a4 27 c0 bf ab 64 ab e3 28 5f 81 e4 67 25 fd 7b 20 32 01 ea ff 28 7b 8f 04 b0 91 e2 2d 6a c3 40 f1 f3 de 47 de c0 85 2a 1a 0f 32 81 1c ca 8b df 6b 35 31 67 e4 fa 01 63 12 8f 83 16 3f 5f e5 e8 d7 b4 ce 7c 90 44 cb b3 cb cf 0c b4 b6 4c 34 0f 85 6f a4 48 40 23 42 34 54 6d d0 84 f3 59 86 cb 6a b8 5c 43 ef f9 79 27 55 3b 08 82 83 Data Ascii: </]t~j\B!fZF(=SKan!eL_W'rM,fs"g=0}mOG_\"^cS_d'd(_g%{ 2({-j@G2k51gc?_\|DL4oH@#B4TmYj\Cy'U;
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: aa 17 4f 00 50 d2 91 e4 b4 bc 4a 2c 8e ee 86 c8 90 af b3 6c 4d ae 24 ae e6 2f 3e 5f e6 43 21 bc 4b 54 3b c3 e3 7d 30 19 71 25 55 85 a8 26 09 88 68 91 24 58 32 a0 85 9d 80 72 46 1e 18 f3 1d 29 85 07 f0 dd c5 fd a9 c3 d2 98 79 ca 29 e3 7d 33 0c cb a2 d2 65 42 d4 9b b8 24 88 b7 19 bb 3f a8 65 af 74 9d 66 b3 59 d5 a8 36 15 82 f8 80 81 1a ff 17 66 29 22 aa d0 84 25 1f 22 65 5b fd da 62 80 ec 34 15 64 79 f2 86 ab 57 db 5c 9a 8d fb 78 4a d8 3d b5 ad 28 4a b0 5f 84 99 fe d5 e9 a6 7b 92 ba 27 31 e9 b4 ca 86 3e 48 ec 1f 50 05 ee b3 6d d5 89 52 2c b4 d4 de ea 41 b7 40 97 49 d5 14 e6 f7 6e 77 d0 90 7d 75 1f bb df f7 c5 aa 3e 37 05 ea 50 40 be 39 75 e8 e4 9f f1 c6 ef 1d cc 94 c3 ce 23 72 32 27 37 8a 6d 04 44 4b 76 64 58 81 eb b7 e7 e0 a9 3e 47 34 b4 a2 02 54 bf d5 d2 Data Ascii: OPJ,lM$/>_C!KT;}0q%U&h$X2rF)y)}3eB$?etfY6f)"%"e[b4dyW\xJ=(J_{'1>HPmR,A@Inw}u>7P@9u#r2'7mDKvdX>G4T
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: b2 54 d5 9f 58 8e 59 a1 5e 0f 94 0a f8 6d 71 d6 22 bc b6 cf 3a 31 c9 24 73 ca ce 8e e7 84 6d 16 8c 58 af 7b a5 31 2c c1 e0 9e 8a 5c 57 69 58 b8 a4 71 03 15 e1 32 d7 5c ca 94 94 07 06 b5 64 04 52 83 f2 43 c0 77 e4 75 ce 77 83 6c 00 87 46 08 66 cf e4 76 f3 88 87 6c 13 98 ec 8d c7 ce e7 b5 77 d6 c6 9e fc 52 56 c1 24 13 5e 4b 98 33 ae 26 ed 8a 08 77 58 a3 ae ff 8a f7 1a 49 23 9c d7 78 63 51 d1 80 78 a7 ae 4d 37 d3 82 86 d4 21 b7 4a 95 e3 8e e3 d2 27 4e ae e0 72 43 ad 9c 51 03 a4 7f a9 9b ca 41 7f 1a 11 17 2a 2d 90 c1 8c b8 c1 73 53 c9 3a 2e b2 8f b8 37 57 0b e2 47 9d 20 ad d1 e3 02 d2 20 84 eb 6e 5f a5 16 1b d4 48 ed 23 9a 4c 37 5f ce fe 5a 16 99 4c 3a 03 22 80 43 a1 d9 c0 7a 5e 21 f6 42 53 82 0c 5f 4d a9 41 0e 95 c5 24 49 75 af 1a 42 b6 c1 e2 8d e5 7b 8d 00 Data Ascii: TXY^mq":1$smX{1,\WiXq2\dRCwuwlFfvlwRV$^K3&wXI#xcQxM7!J'NrCQA*-sS:.7WG n_H#L7_ZL:"Cz^!BS_MA$IuB{
2024-04-18 17:16:50 UTC	1379	IN	Data Raw: 2c 0d 9e 0a ba 15 d2 78 cf 78 cd 21 f7 c2 5c f2 fe 11 97 16 cc 7c 16 28 27 6a 27 11 5b 20 5b 69 2f dd 6c a8 dd f1 fa ff 9b c5 ed 6d ed ad ce e0 c6 fd c1 8c 43 7f d1 1f e6 7a 6b 7b 07 e6 fd dc 4c 2d a4 1f 90 70 5e 93 c7 94 da fb 11 ef b7 d3 49 d3 1c c5 27 43 f7 33 b7 b5 4b e4 a7 d5 20 be 40 47 71 f2 ab 32 3e 62 94 f3 78 e1 9d 57 dd 36 d3 18 88 9c 35 a3 a3 58 c5 7e 82 0e 1f 99 65 ca 56 94 36 55 38 d7 d8 dd 0f cc 27 e1 39 c7 6f 4d dd 5d 17 ba b7 13 9f 4b 01 6e 4b b8 2b b7 43 89 a5 30 78 13 7e 3e 74 f5 1b 83 ce cb 5a 34 64 54 27 ae 53 ee db 2e 66 04 01 3e 81 d6 88 82 50 7d 7d 3d 29 60 a0 57 2b b6 fc 15 f4 05 59 0c 5b e7 0c cd 9a e1 42 d6 a1 b4 4c fa 32 ce 58 5a c8 ae f9 69 77 6f 53 a0 4f 24 43 55 66 70 54 f3 cb 73 d4 68 09 55 36 00 92 e7 13 9d 87 3d 88 c8 6e Data Ascii: ,xx!\\|('j'[ [i/lmCzk{L-p^I'C3K @Gq2>bxW65X~eV6U8'9oM]KnK+C0x~>tZ4dT'S.f>P}}=)`W+Y[BL2XZiwoSO$CUfpTshU6=n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
457	192.168.2.4	50358	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2488	OUT	GET /-/media/images/lnrs/icons/icon_filter%20png.png?h=20&iar=0&w=24&hash=AE854452B53B709A96D69C06C51A76EC HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:51 UTC	854	IN	HTTP/1.1 200 OK Connection: close Content-Length: 104 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="icon_filter png.png" Content-Type: image/webp Etag: "axx1yUU0cHEip6EfpAuAKKiBT2vXksWUJal5OYvxrTA" Fastly-Io-Info: ifsz=133 idim=24x20 ifmt=png ofsz=104 odim=24x20 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 506549 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210169-DFW, cache-pdk-kfty2130063-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460611.104340,VS0,VE22 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	104	IN	Data Raw: 52 49 46 46 60 00 00 00 57 45 42 50 56 50 38 4c 53 00 00 00 2f 17 c0 04 00 27 20 10 41 b8 f6 b7 d9 e1 d6 10 08 10 fe 6b 15 20 20 21 ae f9 7f c5 06 99 ff f8 47 4c 11 04 14 b4 6d 23 75 d2 01 18 87 31 58 09 dc 53 fe a8 ee 47 10 d1 ff 09 d0 f7 dc c6 7d 4f 4e c3 80 aa 65 f9 c5 93 d3 30 3c f5 24 c3 66 55 92 ca 37 00 Data Ascii: RIFF`WEBPVP8LS/' Ak !GLm#u1XSG}ONe0<$fU7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
458	192.168.2.4	50359	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2504	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:51 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:51 GMT Via: 1.1 varnish ETag: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" Age: 45 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130073-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460611.116628,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
459	192.168.2.4	50362	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2205	OUT	GET /GetEloquaFieldIds/%7B58EC541D-362A-4C45-9D59-4901223CD661%7D?formId=4318 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	670	IN	HTTP/1.1 200 OK Connection: close Content-Length: 116301 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120038-DFW, cache-pdk-kfty2130085-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.153986,VS0,VE707 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 33 31 38 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 36 38 31 35 30 31 37 36 30 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 42 75 73 69 6e 65 73 73 53 65 72 76 69 63 65 73 41 73 73 65 74 44 6f 77 6e 6c 6f 61 64 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 2c 5c 22 44 65 6c 65 74 65 5c 22 2c 5c 22 55 70 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"4318\",\"createdAt\":\"1681501760\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-BusinessServicesAssetDownload\",\"permissions\":[\"Retrieve\",\"Delete\",\"Up
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 2e 73 69 6e 67 6c 65 2d 63 68 65 63 6b 62 6f 78 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 Data Ascii: .single-checkbox-row{margin-left:0}.elq-form .elq-field-style{padding-bottom:10px}.elq-form .elq-field-style input[type=submit]{-webkit-appearance:button}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(1turn)}}@keyfra
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6e 73 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: nsive{display:block;max-width:100%;height:auto}.elq-form .img-rounded{border-radius:6px}.elq-form .img-thumbnail{padding:4px;line-height:1.42857;background-color:#fff;border:1px solid #ddd;border-radius:4px;transition:all .2s ease-in-out;display:inline-bl
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 5c 5c 5c 22 20 5c 5c 5c 22 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: right:-15px;margin-left:-15px}.elq-form .row:after,.elq-form .row:before{display:table;content:\\\" \\\"}.elq-form .row:after{clear:both}.elq-form .row-no-gutters{margin-right:0;margin-left:0}.elq-form .row-no-gutters [class*=col-]{padding-right:0;padding
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 2d 78 73 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 Data Ascii: -xs-4,.elq-form .col-xs-5,.elq-form .col-xs-6,.elq-form .col-xs-7,.elq-form .col-xs-8,.elq-form .col-xs-9,.elq-form .col-xs-10,.elq-form .col-xs-11,.elq-form .col-xs-12{float:left}.elq-form .col-xs-1{width:8.33333%}.elq-form .col-xs-2{width:16.66667%}.elq
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e Data Ascii: ush-7{left:58.33333%}.elq-form .col-xs-push-8{left:66.66667%}.elq-form .col-xs-push-9{left:75%}.elq-form .col-xs-push-10{left:83.33333%}.elq-form .col-xs-push-11{left:91.66667%}.elq-form .col-xs-push-12{left:100%}.elq-form .col-xs-offset-0{margin-left:0}.
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 Data Ascii: -form .col-sm-9{width:75%}.elq-form .col-sm-10{width:83.33333%}.elq-form .col-sm-11{width:91.66667%}.elq-form .col-sm-12{width:100%}.elq-form .col-sm-pull-0{right:auto}.elq-form .col-sm-pull-1{right:8.33333%}.elq-form .col-sm-pull-2{right:16.66667%}.elq-f
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: m-offset-5{margin-left:41.66667%}.elq-form .col-sm-offset-6{margin-left:50%}.elq-form .col-sm-offset-7{margin-left:58.33333%}.elq-form .col-sm-offset-8{margin-left:66.66667%}.elq-form .col-sm-offset-9{margin-left:75%}.elq-form .col-sm-offset-10{margin-lef
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 64 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d Data Ascii: d-pull-8{right:66.66667%}.elq-form .col-md-pull-9{right:75%}.elq-form .col-md-pull-10{right:83.33333%}.elq-form .col-md-pull-11{right:91.66667%}.elq-form .col-md-pull-12{right:100%}.elq-form .col-md-push-0{left:auto}.elq-form .col-md-push-1{left:8.33333%}
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 Data Ascii: .col-lg-4,.elq-form .col-lg-5,.elq-form .col-lg-6,.elq-form .col-lg-7,.elq-form .col-lg-8,.elq-form .col-lg-9,.elq-form .col-lg-10,.elq-form .col-lg-11,.elq-form .col-lg-12{float:left}.elq-form .col-lg-1{width:8.33333%}.elq-form .col-lg-2{width:16.66667%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
460	192.168.2.4	50363	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:50 UTC	2205	OUT	GET /GetEloquaFieldIds/%7B613E43EC-B648-4C66-81D0-937DCA7B3A72%7D?formId=4318 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	670	IN	HTTP/1.1 200 OK Connection: close Content-Length: 116301 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210049-DFW, cache-pdk-kfty2130023-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.153995,VS0,VE194 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 33 31 38 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 36 38 31 35 30 31 37 36 30 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 42 75 73 69 6e 65 73 73 53 65 72 76 69 63 65 73 41 73 73 65 74 44 6f 77 6e 6c 6f 61 64 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 2c 5c 22 44 65 6c 65 74 65 5c 22 2c 5c 22 55 70 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"4318\",\"createdAt\":\"1681501760\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-BusinessServicesAssetDownload\",\"permissions\":[\"Retrieve\",\"Delete\",\"Up
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 2e 73 69 6e 67 6c 65 2d 63 68 65 63 6b 62 6f 78 2d 72 6f 77 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 65 6c 71 2d 66 69 65 6c 64 2d 73 74 79 6c 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 62 75 74 74 6f 6e 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 74 75 72 6e 29 7d 7d 40 6b 65 79 66 72 61 Data Ascii: .single-checkbox-row{margin-left:0}.elq-form .elq-field-style{padding-bottom:10px}.elq-form .elq-field-style input[type=submit]{-webkit-appearance:button}@-webkit-keyframes spin{0%{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(1turn)}}@keyfra
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6e 73 69 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 72 6f 75 6e 64 65 64 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6d 67 2d 74 68 75 6d 62 6e 61 69 6c 7b 70 61 64 64 69 6e 67 3a 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 32 38 35 37 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c Data Ascii: nsive{display:block;max-width:100%;height:auto}.elq-form .img-rounded{border-radius:6px}.elq-form .img-thumbnail{padding:4px;line-height:1.42857;background-color:#fff;border:1px solid #ddd;border-radius:4px;transition:all .2s ease-in-out;display:inline-bl
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 5c 5c 5c 22 20 5c 5c 5c 22 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 6f 77 2d 6e 6f 2d 67 75 74 74 65 72 73 20 5b 63 6c 61 73 73 2a 3d 63 6f 6c 2d 5d 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 Data Ascii: right:-15px;margin-left:-15px}.elq-form .row:after,.elq-form .row:before{display:table;content:\\\" \\\"}.elq-form .row:after{clear:both}.elq-form .row-no-gutters{margin-right:0;margin-left:0}.elq-form .row-no-gutters [class*=col-]{padding-right:0;padding
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 2d 78 73 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 Data Ascii: -xs-4,.elq-form .col-xs-5,.elq-form .col-xs-6,.elq-form .col-xs-7,.elq-form .col-xs-8,.elq-form .col-xs-9,.elq-form .col-xs-10,.elq-form .col-xs-11,.elq-form .col-xs-12{float:left}.elq-form .col-xs-1{width:8.33333%}.elq-form .col-xs-2{width:16.66667%}.elq
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 75 73 68 2d 37 7b 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 38 7b 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 39 7b 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 30 7b 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 31 7b 6c 65 66 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 70 75 73 68 2d 31 32 7b 6c 65 66 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e Data Ascii: ush-7{left:58.33333%}.elq-form .col-xs-push-8{left:66.66667%}.elq-form .col-xs-push-9{left:75%}.elq-form .col-xs-push-10{left:83.33333%}.elq-form .col-xs-push-11{left:91.66667%}.elq-form .col-xs-push-12{left:100%}.elq-form .col-xs-offset-0{margin-left:0}.
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 39 7b 77 69 64 74 68 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 30 7b 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 77 69 64 74 68 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 30 7b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 31 7b 72 69 67 68 74 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 70 75 6c 6c 2d 32 7b 72 69 67 68 74 3a 31 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 Data Ascii: -form .col-sm-9{width:75%}.elq-form .col-sm-10{width:83.33333%}.elq-form .col-sm-11{width:91.66667%}.elq-form .col-sm-12{width:100%}.elq-form .col-sm-pull-0{right:auto}.elq-form .col-sm-pull-1{right:8.33333%}.elq-form .col-sm-pull-2{right:16.66667%}.elq-f
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6d 2d 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 73 6d 2d 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 Data Ascii: m-offset-5{margin-left:41.66667%}.elq-form .col-sm-offset-6{margin-left:50%}.elq-form .col-sm-offset-7{margin-left:58.33333%}.elq-form .col-sm-offset-8{margin-left:66.66667%}.elq-form .col-sm-offset-9{margin-left:75%}.elq-form .col-sm-offset-10{margin-lef
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 64 2d 70 75 6c 6c 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 37 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 6c 6c 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6d 64 2d 70 75 73 68 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 25 7d Data Ascii: d-pull-8{right:66.66667%}.elq-form .col-md-pull-9{right:75%}.elq-form .col-md-pull-10{right:83.33333%}.elq-form .col-md-pull-11{right:91.66667%}.elq-form .col-md-pull-12{right:100%}.elq-form .col-md-push-0{left:auto}.elq-form .col-md-push-1{left:8.33333%}
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 20 2e 63 6f 6c 2d 6c 67 2d 34 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 35 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 36 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 37 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 38 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 39 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 30 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 31 2c 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 32 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 31 7b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 25 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 63 6f 6c 2d 6c 67 2d 32 7b 77 69 64 74 68 3a 31 36 2e 36 36 36 36 37 25 Data Ascii: .col-lg-4,.elq-form .col-lg-5,.elq-form .col-lg-6,.elq-form .col-lg-7,.elq-form .col-lg-8,.elq-form .col-lg-9,.elq-form .col-lg-10,.elq-form .col-lg-11,.elq-form .col-lg-12{float:left}.elq-form .col-lg-1{width:8.33333%}.elq-form .col-lg-2{width:16.66667%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
461	192.168.2.4	50364	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2550	OUT	GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-1230x420.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA
2024-04-18 17:16:51 UTC	895	IN	HTTP/1.1 200 OK Connection: close Content-Length: 127804 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="WildlifeTraffickingWhitePaper-1230x420.jpg" Content-Type: image/webp Etag: "3yoXuZAVG9Rrd2ZMPPI55ubYPx97/lOm+wAEoPq0JZs" Fastly-Io-Info: ifsz=148247 idim=1230x420 ifmt=jpeg ofsz=127804 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551294 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210045-DFW, cache-pdk-kfty2130052-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.181103,VS0,VE250 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 52 49 46 46 34 f3 01 00 57 45 42 50 56 50 38 20 28 f3 01 00 b0 40 05 9d 01 2a ce 04 a4 01 3e 51 20 8c 44 23 a2 21 17 2c ad 38 38 05 04 b1 b6 79 6a ee 8f cc de b5 5f 8c 12 69 5c ed 4f bf 7d 33 87 48 8c bf d9 bf fe af 8a 64 8f b8 63 fa ae ca 3c ff 7c cd 67 bf e6 07 ec ab 9a ad b5 92 b7 49 e5 7d e9 7b 61 72 6f 8a bf 4b fc 8f ed bf 8a 9f ee f8 37 f1 bf f6 bc ce bd 6f fa 4f fd bf 79 3f 2d 7f ee 7f f1 f6 c5 fd 0f fd 8f ff 1f f3 3f bf ff 44 7f d0 ff c0 7e c2 7f 87 f6 e8 fd c6 f8 57 fb c3 ea d7 f7 0f f7 6b dd 1b fe 87 ee 2f c0 5f eb 5f f3 fd 8c 3f a7 7f c6 ff ff ed 6b ff bb da 6b fc f7 fe 4f ff fe ec 3f b9 3e af 3f fc fd a4 ff b4 ff de f6 59 fd e5 d4 1c f7 8f 9e 7f 98 ff 91 ff 3f c1 5f 1c 5e ee fd f3 fd 0f fd af f1 7f 2e df 75 ff c7 fe 43 c8 2f bd ff 59 ff 83 fc Data Ascii: RIFF4WEBPVP8 (@*>Q D#!,88yj_i\O}3Hdc<\|gI}{aroK7oOy?-?D~Wk/__?kkO?>?Y?_^.uC/Y
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 9d 67 d3 e5 ea 51 ba 90 6b ff 6c ba fc 9f 4e 36 5d d1 04 c2 93 95 26 e4 32 89 e8 0d 2b a6 7b f0 4d b6 9f 61 34 63 16 41 02 18 c6 79 cd a0 a9 6e b7 c6 52 45 fb b0 23 40 c8 39 e8 b9 44 16 50 de a5 75 84 28 97 a5 5a 48 d7 d7 78 41 e9 02 60 75 c5 39 e5 ac 35 eb 56 f8 9b 4d b4 31 ee 12 de f5 8f c8 2b 09 5f 1b 0a 99 fd d6 9b ae bb 2b 34 3f 65 81 db f7 e6 fd 20 27 b5 d7 73 16 e4 b1 06 fd 68 55 46 6a 10 51 b4 3f 75 82 3f 0b e3 96 f1 24 5a 97 5d 77 56 e0 c4 2f 88 52 14 a9 e0 d9 bc 6f 81 5c 4c 70 51 b1 cd 1d d7 f7 90 c4 b9 04 cc d8 42 1f 7e 95 77 55 04 ee d7 d0 9b 60 38 62 bc ca 14 23 53 9c b7 8a 9e b6 53 37 e0 59 14 f9 d9 03 f9 e3 12 50 b6 c9 18 47 65 32 f7 70 e3 6a fa 55 55 66 1d 0e c4 d2 14 f2 d4 6d 25 96 5f 95 e3 cc 96 f3 b5 9d d1 0d ef 4b c5 f0 58 04 aa af f1 Data Ascii: gQklN6]&2+{Ma4cAynRE#@9DPu(ZHxA`u95VM1+_+4?e 'shUFjQ?u?$Z]wV/Ro\LpQB~wU`8b#SS7YPGe2pjUUfm%_KX
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: ee a7 02 64 28 f5 d5 a0 31 10 89 81 cc 14 f5 89 c3 73 49 7f 0e d0 1f db fa 5c d4 45 54 80 06 02 c6 9c e1 f5 ec 54 d5 57 c5 06 7b fb f0 1b 15 a7 59 50 6f ac bd 9f 3c 2e 1d 5e 23 6d 12 cb cd fd f7 a9 47 63 d3 d3 68 14 63 c7 e4 14 3a ab 23 8f f0 eb dc f4 90 b8 01 c6 0d 5a 78 b8 bd 72 b2 cd 83 8a 0f 9f 54 7b 73 fc b1 d5 50 df 43 29 9b eb d4 8d 3b a5 29 65 b9 85 21 79 4c 23 ee ae 2f 5f 6c 6f 81 0d 30 bc f0 32 9b ac 1c 8e 23 76 dd 65 fa 85 6c 57 d4 52 6d 8f 75 55 8e e5 0a 81 5e f9 86 23 3b d6 9e ce d7 a4 5f ec f3 d0 fc 50 86 87 45 21 16 cd ae 7a ce 2a 51 c8 fd a5 56 31 7f d9 e2 11 78 41 17 49 e5 00 6d ee 7f ae 1b aa e1 27 2b 08 0f 0b 97 14 d1 bb 63 4e 33 97 80 f8 86 d4 94 36 b6 45 2d 8a 81 74 1f a1 57 dd cd d3 17 d3 e0 8c d0 87 37 4c 49 5c 42 41 cd 10 ee 7b bc Data Ascii: d(1sI\ETTW{YPo<.^#mGchc:#ZxrT{sPC);)e!yL#/_lo02#velWRmuU^#;_PE!z*QV1xAIm'+cN36E-tW7LI\BA{
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: a3 82 21 23 ca 84 6b 18 5f 4b 75 64 ea cb 00 ec 35 f2 ba 1f 0f 7e b4 b3 cc 91 4b 54 29 a5 52 da 63 7e bf e2 5c d5 0e ba 89 92 3f 40 b5 7a 51 a8 60 0d 29 00 85 43 e6 c3 d1 e6 5a c8 00 67 60 2b 0d e9 88 2d 0b 7a 16 2b 61 a5 3d 9e 8b 7c 52 64 66 30 33 68 5f 88 11 17 c0 6c a7 70 4f 5d ba c7 8c 20 1b ce 3d 59 33 9a 3f f4 76 e6 24 1f f4 65 5d 33 a1 23 e4 ae 9c 71 df 13 81 7d 63 17 08 38 1c 69 86 3e bd d8 2e 74 be a6 86 5a 5f b6 1e 41 75 ee a6 b6 4f 68 b1 b8 58 64 e4 d3 48 c4 d8 63 f8 72 6a ee 85 2b 5f 36 2e 12 29 e1 52 a1 b4 2e 88 b4 23 55 b3 ae 11 e4 45 0c 60 09 d6 3c 90 01 06 f6 f2 aa f0 46 c9 a9 4a 4b fe e3 39 b6 79 d8 06 db 1e 84 b5 c1 29 84 fe bd 75 ac 80 38 7d ec 88 bc 61 4a e1 6c 8c 14 09 95 8a 56 96 cc 74 d3 34 fc c2 0a 42 ad 08 a4 da 88 a1 48 75 ce e4 Data Ascii: !#k_Kud5~KT)Rc~\?@zQ`)CZg`+-z+a=\|Rdf03h_lpO] =Y3?v$e]3#q}c8i>.tZ_AuOhXdHcrj+_6.)R.#UE`<FJK9y)u8}aJlVt4BHu
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: b9 d0 8f b3 1b 1d 02 87 84 c4 5e a0 ed ce 85 b7 04 0a 1f 0c 5a f3 ae 0f 7c e7 ea 81 e2 77 dd 25 65 74 e3 40 51 de 9c 35 35 89 1e 31 c2 71 85 7e 3a ef 85 20 43 2d bd 09 75 ef 97 72 9b b9 2d 25 72 c2 7b a4 86 e7 07 15 ac 91 a7 27 43 0f 44 65 3b 23 2e c5 8d 9a 22 46 4f 1b 53 af 9c 5e 47 a1 ac 60 69 72 4a 30 31 c0 13 61 99 d8 9c cb 50 25 32 71 68 c3 aa 7e a4 27 42 bf 25 e9 8a f8 fa 3d 90 fd 35 78 2a 18 8b 37 9d c9 ed 1f f9 35 f7 32 e8 63 5c 3d 0b 9b ba 66 32 56 de 7d 5f ee 55 5b 7b 78 7a ad 9a 48 44 ca fe fc e7 0f 9a 9c 11 eb f5 37 ee f8 6d 34 6c c7 c6 d6 ee 98 85 1f da 3c 32 26 3b 20 3e ef 22 1b 7c 89 61 6e a8 04 74 96 ad b4 3f 2f f8 e6 b0 b2 39 b2 9b 69 db c5 d5 f2 be 53 2f 58 9a ed 0f 4a dd 65 d5 e6 15 6c 2a 53 17 6e aa 7e aa 9a 36 96 2c d5 16 f8 ea fc 50 Data Ascii: ^Z\|w%et@Q551q~: C-ur-%r{'CDe;#."FOS^G`irJ01aP%2qh~'B%=5x752c\=f2V}_U[{xzHD7m4l<2&; >"\|ant?/9iS/XJelSn~6,P
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 32 f1 3b 89 aa 65 4a 17 e3 64 08 7f 69 37 a7 83 b2 78 bc 5e 30 1c ca 59 41 06 d1 1a 91 02 53 0a 5d df 31 66 fe a9 df aa 10 43 07 4f 2f 33 c2 8e 44 3a a1 a5 e3 29 b8 21 5b b9 81 ef c1 83 4b fb 53 47 fe fc 6c 17 7b 4a 3f 03 84 30 24 0c c2 05 db d0 60 91 73 a9 50 fe 55 9c d0 3c 88 1e 85 d8 20 d4 89 58 b5 59 81 89 8f 80 95 6c 4c fd 4d 18 ca 3a c2 e9 38 b4 d4 a8 da c9 bd 37 8d 0d ae 05 20 29 b7 e3 12 2b ab 56 40 46 98 f7 7d 57 80 33 a8 ef 87 d8 ce 9a 54 a7 36 09 ff 42 cb 9d 1a 2e 18 85 5d 46 fa a0 4d 79 11 14 8a e9 be 6b 63 0c 6b 1e 06 ae df 62 3b 40 ca 5c 83 1f d2 cb b6 c5 3e b3 f6 f1 d5 29 1c e6 d6 3a a4 17 ee 5a fd c6 f4 b9 70 c3 45 5f fd e8 76 a1 87 0c 6c a0 48 c0 bb bd cb 73 35 f9 e1 cc 66 43 f0 89 28 2e 22 ee 5b ad 32 17 0a b4 cc 45 a2 a0 ef 62 0a 70 e0 Data Ascii: 2;eJdi7x^0YAS]1fCO/3D:)![KSGl{J?0$`sPU< XYlLM:87 )+V@F}W3T6B.]FMykckb;@\>):ZpE_vlHs5fC(."[2Ebp
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 30 33 f1 b2 a4 13 8b 2d 2c 1f 6d 9c bc 52 22 8e cc 8b e6 d3 bf c9 f3 36 bb bf e6 d3 e1 50 bd c0 84 d4 b8 ad e9 df 02 eb 63 2b 83 fb 85 10 27 01 9a bd 3b 50 6d b0 f3 fa 87 d2 28 fe c9 9e 6e a4 18 f1 fe 1c 96 d8 2b 4b fd a3 bc 03 c1 09 d4 45 2e 4e ef c7 25 41 8f c8 a2 71 88 73 4d 68 63 c0 6a 2d 61 99 19 d8 1a 2c 60 c2 85 2e 53 84 49 3a 39 e6 8b a2 80 5a 74 bb f6 42 20 d4 d4 8d 8f 34 57 2c 0e ed 96 7b a2 be da 33 22 a5 27 58 50 98 74 1a dd ec c4 b1 22 91 13 e7 fd 24 7a 93 4b 94 8c a3 5d 51 91 31 8f 4c 0e 21 98 d2 ff f8 25 43 c3 be d7 07 99 46 87 ff 7c 69 ef 74 c8 3e 45 97 3e 19 61 00 bc be 06 08 9e 4f 30 bc 99 d8 50 f3 95 ee 04 c8 53 10 45 bf a8 cd c7 16 26 6d 6e c9 4e 21 8d 04 5d a0 df da 22 ec 67 82 fb 81 7b db 02 22 bc 37 2e f9 96 f6 07 3d f7 0c 53 7d 08 Data Ascii: 03-,mR"6Pc+';Pm(n+KE.N%AqsMhcj-a,`.SI:9ZtB 4W,{3"'XPt"$zK]Q1L!%CF\|it>E>aO0PSE&mnN!]"g{"7.=S}
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 26 92 07 15 a9 76 4a 7c 73 83 81 96 04 3c 02 ce e8 a8 30 93 fe dd 50 af 81 fd 57 c4 c6 a1 81 1a 24 b3 79 48 b5 62 7c 32 35 b8 ab 6a f3 0f b6 48 8a 66 05 31 ea ad 27 09 79 2d 5c 2d 3d df 70 a5 1e a7 3a db ce f9 ea 37 49 67 b4 80 35 d8 51 c1 50 ab 36 60 88 80 15 43 67 5b 97 59 a7 44 07 01 cc 70 d0 b4 27 9b b0 52 e7 39 bf c2 c2 57 2d 8f 1f 01 d1 07 93 47 69 17 18 ca 7e 9c 39 5f 31 a3 2d 20 a9 ec aa 40 1d cb cf 90 78 a2 cb 0f 5e ac 0c 3a 86 e9 a6 fe 8e b4 3f 4b 81 87 79 41 33 db 43 d9 5a 19 f4 97 55 7b 14 53 73 0a eb f7 28 e2 d8 62 9f b6 48 9c 95 9c e2 fd 39 87 70 a0 24 08 80 cc 26 f7 db 33 aa 37 0f c8 ea c7 48 f4 c4 1e fb 20 8d e3 f8 5f 84 44 77 6a 6d 1a ce b9 2a 06 cd f6 60 84 b4 c4 d8 c6 46 aa 15 61 ad 0a 2c 9e 68 b9 ad 72 e4 13 1f 18 fd 1b b5 85 e0 ad ab Data Ascii: &vJ\|s<0PW$yHb\|25jHf1'y-\-=p:7Ig5QP6`Cg[YDp'R9W-Gi~9_1- @x^:?KyA3CZU{Ss(bH9p$&37H _Dwjm*`Fa,hr
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 68 43 ad 02 63 a3 9b ae d4 ba 83 88 00 78 e2 ac f6 f8 cc a5 86 ce 50 b1 1b 16 aa 26 c8 ab f2 cf b5 2e ef 9f d9 a5 87 aa 7f 5c ba 94 ea 08 63 25 7e 87 f4 27 55 65 7c 2f fd 4e 57 6d 62 81 eb 41 1b b9 d2 42 ff 3b 11 8e 77 6f 54 0d 78 ed c0 34 16 d7 bc 81 ea 06 59 ec b3 1f 12 36 fa 90 54 03 07 a0 a0 b0 1c 00 73 34 c8 a3 08 47 ae 12 bd 75 78 7a 4d 32 28 02 30 0c 61 58 a3 1f 98 81 8a a5 9c 3a cb 5a a4 8f a0 ba 83 3b 3b 73 73 4c 7f e4 a2 1b 8e c3 f1 45 5f 9d 12 95 b2 ac b1 c5 51 f4 df 89 34 95 e8 64 80 be af e9 80 6b c7 c9 2f 92 51 04 90 32 03 14 0c 1a 65 3c 67 99 16 1e 14 ae a0 95 09 ee ba 02 02 9e 5c 45 49 84 a9 0a 20 e6 da ba f5 0e d9 f8 cd ec 62 a6 01 09 21 f7 2c 48 df 92 66 7f f3 69 7a 72 8d 2d b0 d5 99 83 e0 39 68 c1 d7 de 84 9f e9 71 9a ed 5a ff f8 71 6a Data Ascii: hCcxP&.\c%~'Ue\|/NWmbAB;woTx4Y6Ts4GuxzM2(0aX:Z;;ssLE_Q4dk/Q2e<g\EI b!,Hfizr-9hqZqj
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 92 26 61 1b d4 de ae 2f 90 0f a8 a5 4e 44 21 0a b1 e9 84 71 f8 63 b8 8a 17 bc a8 c0 f8 82 66 bd 9b a8 9e e9 ac b6 f1 3b dd f9 6d f9 94 7f 3b 50 c2 8f 7c 9d 66 65 ea 2f 3e 36 73 42 9d bf 25 79 33 b3 df 35 6b a3 4b 42 96 23 2f 13 52 08 e7 cc 35 77 3e 04 31 ae 21 a5 3d 94 8c 07 f1 ba c4 82 d3 e6 04 f3 b7 1b ba 96 91 76 46 21 96 e5 62 75 a6 b3 e6 9a 53 71 23 1e 62 45 51 0d d3 53 cc 0e 78 05 c4 84 c5 85 06 f7 6c df ba 58 7b fc a5 50 e4 0d 7b 18 cb 96 5f 45 a5 e2 ed 4e 72 d5 74 bd 42 d0 24 88 bf bc 88 87 6d 00 ad cd 6c 9e 74 58 53 81 a6 1e d7 b3 0f 84 5d bb 5b 67 65 79 d2 35 56 73 36 93 72 3f 20 38 ef fa 9d 42 19 89 5a ca 94 86 ef 9e 56 a5 87 f4 7f 3f ae 86 07 39 6a 64 56 9f 6c 19 e3 b7 17 f6 b7 09 64 02 54 b5 62 7c 34 e7 0c 35 a2 95 32 2e b1 a0 59 bc 58 41 12 Data Ascii: &a/ND!qcf;m;P\|fe/>6sB%y35kKB#/R5w>1!=vF!buSq#bEQSxlX{P{_ENrtB$mltXS][gey5Vs6r? 8BZV?9jdVldTb\|452.YXA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
462	192.168.2.4	50365	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2453	OUT	GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	748	IN	HTTP/1.1 200 OK Connection: close Content-Length: 106 Content-Type: image/webp Etag: "awSmcPLAOnF6/B0h4W9/TEG+qLYXKrTMxy8aBCCs7Wo" Fastly-Io-Info: ifsz=164 idim=18x12 ifmt=png ofsz=106 odim=18x12 ofmt=webp Fastly-Io-Served-By: img01-us-east4 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120112-DFW, cache-pdk-kfty2130089-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.280977,VS0,VE89 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	106	IN	Data Raw: 52 49 46 46 62 00 00 00 57 45 42 50 56 50 38 4c 56 00 00 00 2f 11 c0 02 10 1f 20 10 48 61 93 3c ed 02 d9 14 7f c9 24 20 21 dc 32 c5 ff 1f 0a f0 4f 41 30 8a 24 49 4a ed 09 bc 50 b1 12 90 d2 c3 f1 1a 09 48 58 13 e3 07 13 78 8b e8 7f 04 78 53 e6 6a da b0 66 63 6a bb c2 95 5d 4f 30 a5 01 a6 0d 2e 65 78 7f e0 3b 00 76 00 Data Ascii: RIFFbWEBPVP8LV/ Ha<$ !2OA0$IJPHXxxSjfcj]O0.ex;v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
463	192.168.2.4	50366	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2164	OUT	GET /GetLocationInfo?_=1713460605018 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210047-DFW, cache-pdk-kfty2130093-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.284836,VS0,VE603 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
464	192.168.2.4	50367	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2531	OUT	GET /-/media/8c790672c01448b9ae07187b79fe2079.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	900	IN	HTTP/1.1 200 OK Connection: close Content-Length: 16832 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Trade Trafficing and Techonology-tile-270x170 png.png" Content-Type: image/webp Etag: "pLxvwmoBLitFc8xJ7zhkh+e7wN/FikGFZc2RpDP7PkM" Fastly-Io-Info: ifsz=17804 idim=270x170 ifmt=png ofsz=16832 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551294 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120084-DFW, cache-pdk-kfty2130067-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460611.305442,VS0,VE189 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 52 49 46 46 b8 41 00 00 57 45 42 50 56 50 38 4c ab 41 00 00 2f 0d 41 2a 00 ff 07 c9 b6 dd b6 0d 80 0f b0 b8 8e 7d 3c f2 fe b7 91 ad 64 d4 bb 0a 08 62 1b 92 64 db 4e 23 e9 3f b1 64 17 33 d3 0c f7 bf 95 9a f2 88 ba 65 b6 f4 3f 54 db b6 95 2d 47 bf 6b ff 8f 43 a4 52 79 ff 4c b4 c8 03 40 ff 5d ce b9 36 ff 71 34 ef 1b b2 22 45 d7 11 a0 e0 05 28 98 ff 01 08 01 2c 85 99 42 00 f3 8a 94 04 20 00 26 c4 84 95 92 00 04 40 40 8a b1 10 16 0a 05 2c 4c 89 58 99 42 38 98 53 37 a9 d9 a8 53 e9 06 37 b2 cb ac a8 62 02 95 a0 c8 15 0f 02 56 89 24 34 09 05 43 03 b8 99 10 11 a7 09 09 21 a2 8d ae 62 e8 a2 9f 68 44 01 b7 8b 70 ae 56 72 21 e6 88 69 90 09 31 0b 0f 3a 37 34 b2 61 4c c0 a5 a9 c4 23 28 25 1e a9 2c c8 0f 40 00 4b e0 04 af 8a 46 a2 35 fb c1 c0 09 a8 27 4a 81 34 13 a5 e1 Data Ascii: RIFFAWEBPVP8LA/A*}<dbdN#?d3e?T-GkCRyL@]6q4"E(,B &@@,LXB8S7S7bV$4C!bhDpVr!i1:74aL#(%,@KF5'J4
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 92 4b e4 18 93 e8 57 3d 42 18 9f 1a 01 17 89 e5 67 e6 06 f0 75 67 77 4d 69 6e 76 43 5a 19 6e 31 65 6d 94 a7 1c b9 52 b3 4d 30 fb 9a 3b 90 e4 0d 05 89 5c 8d 3e 02 e7 1c fa 7c d3 66 4d 19 5a a8 c9 9b 98 6e 04 d8 40 24 1c 98 76 a7 ae bb 6c bc dc b0 39 98 65 7b 36 d1 48 33 d3 f1 b1 5c 24 d0 98 ac a9 2a 16 87 9a dc b6 53 26 5d a1 8c 1b 25 c2 10 81 18 c0 ad 21 86 cc 69 96 eb 55 41 92 af 36 c9 71 82 33 f4 51 c4 e6 aa fa 48 c5 c4 06 60 eb 65 a7 3e 4e a6 a0 67 7a 57 d6 4c 4f 70 84 02 20 73 30 94 ad 24 3d fd 5c e9 09 ba bb 50 2d 61 64 c2 e5 be 29 62 19 39 56 11 d5 cb 2b fe e2 d8 4b 7a 44 0f a3 e3 f8 d4 e4 61 1e 17 d8 a9 d3 f8 ed ab 39 44 26 ba 12 21 11 6a 48 6e fa 20 12 48 b3 bd 45 72 28 a9 10 da d0 a8 bd 3c 1d de 9b 0c 93 aa 2a b5 b2 46 69 bb 80 c8 8b e9 78 7e c6 Data Ascii: KW=BgugwMinvCZn1emRM0;\>\|fMZn@$vl9e{6H3\$S&]%!iUA6q3QH`e>NgzWLOp s0$=\P-ad)b9V+KzDa9D&!jHn HEr(<Fix~
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 02 58 0c c6 34 e1 48 12 76 d6 9c be 42 87 1c 25 3d 0c e7 2e 85 1e b8 ba 73 25 63 77 6d b8 7b d2 be c9 e8 a2 3b 57 33 ca 4c 44 51 eb 59 1b 2a 61 9b f4 b7 3e 2a 18 6d a4 ec 54 21 45 44 7a 16 01 af e8 65 c4 db ad 23 58 b6 8d 1d a9 75 29 d9 65 49 68 30 05 40 06 06 0d f6 b4 91 9d 49 4f 4c 89 60 d4 d4 32 67 31 45 1c c9 20 24 af 91 4c 77 79 2c b2 98 bc 26 61 c5 e5 62 ff 6c a0 a0 eb ab 5b 4b e7 cf bd 74 6d 7b 1d 76 41 38 da da d1 95 8b 05 44 6c d3 f8 ad 06 61 05 44 52 ea fb 61 97 af 74 3c af 00 de ee e3 e5 3a 57 c0 aa 8c de 10 61 43 2f c1 f4 70 39 9e 61 b4 c1 a0 2b 1e 88 d9 f6 18 92 44 9b 7b 6c 7a bf c9 ae 11 1e 5e 2d 00 2c 57 d8 e4 f5 10 1e 60 57 f1 a0 2e 37 4d 4c dc 0d 57 3c 92 15 6a 3b 0e db 3b 5b 4b 17 c8 0c d3 25 c8 9a 80 e0 4b d5 45 4b da 1c 6e ed 2d db 6f Data Ascii: X4HvB%=.s%cwm{;W3LDQYa>mT!EDze#Xu)eIh0@IOL`2g1E $Lwy,&abl[Ktm{vA8DlaDRat<:WaC/p9a+D{lz^-,W`W.7MLW<j;;[K%KEKn-o
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 4c 0b d6 cc a4 f4 d1 a5 0f e0 43 a2 0f 09 7a d5 3b 6c ca be 43 42 39 b8 ed 64 c8 94 25 0e 80 af da 28 c5 e2 5b 0d 7f 65 31 36 19 e2 ce 1c e8 1f 26 b7 60 2b 0c 4a 79 27 a3 67 93 0a d3 58 50 95 0c d3 22 ab 92 d8 7d 65 df 13 95 38 b4 25 39 de 01 04 0f 8c 5f 2f 76 d7 43 53 ec e6 57 b9 70 e8 2a 2f 77 56 44 df 79 af aa e9 72 19 ca 77 eb 9d f1 88 b2 04 44 8f 3b 90 09 d0 71 66 27 5e 84 0f c2 d9 de ab a2 ec 84 4a af 5c da 70 15 dc 05 aa c2 70 ac 64 95 b3 30 cd 45 16 a3 03 54 49 89 56 17 9e 34 3a cd d3 bf d8 b1 a9 c3 27 51 ec e6 a7 6e 78 35 46 8e fd 25 dc 3b 90 32 2b 4c 4d 62 e7 88 38 ab 7b 37 1c 05 20 96 03 60 25 c6 ca 57 5b 58 95 24 2d da f4 02 cc 7e 9b 35 62 42 64 9a a4 f8 11 04 a1 dc 8a 0b 40 56 e9 f2 b2 d2 04 9f d8 97 45 8f e1 95 3a 5b 32 46 4f 86 ce ae e7 de Data Ascii: LCz;lCB9d%([e16&`+Jy'gXP"}e8%9_/vCSWp*/wVDyrwD;qf'^J\ppd0ETIV4:'Qnx5F%;2+LMb8{7 `%W[X$-~5bBd@VE:[2FO
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 22 25 fb 1c 95 20 18 ae b9 97 2e 9a 9d 92 0f a8 b4 31 41 37 8f 93 4d b0 4f 56 a9 4a 9a 1e c1 fb 21 23 36 3d b1 2b 6d 1f 24 7b fd af 09 7d 07 8d 29 a3 3c b7 bd a3 1a 26 06 7b b7 26 b8 07 18 48 e2 29 26 60 0f 3e d9 17 c1 bb 5e 8f 49 c3 06 00 a6 f7 cd 5e a3 3c 51 61 98 5b 69 52 16 be d7 9b c1 07 9c e4 de 07 22 f7 44 ea d8 e3 31 4c 37 d7 6a e7 7c bb b6 21 df 88 6b 7c ae 01 bc 76 b9 6e 0b e7 c7 07 b8 1c 8e 4f dd 1b f2 4f ca 6a 98 6e 41 ee ed 2b 5e 0a 02 53 a0 56 be 32 60 a4 f2 01 d6 a9 f8 23 1c 5f ec ae 85 62 cb b7 6f 04 74 49 cd ab 57 39 19 b5 aa ba 6a 61 38 04 12 4f 89 bc d4 ac bf 04 1e f8 1b 90 04 01 72 8f e4 2e 77 3a 6f d9 73 2b 3f ab ee 78 f4 69 b2 7d 92 e7 fe 41 d9 33 76 ca 8d 56 08 cb c5 cd b5 2a 5c 1f 4c cb 3d 48 0f 19 1f e5 ca bc b6 db 3b 51 e0 bd 95 Data Ascii: "% .1A7MOVJ!#6=+m${})<&{&H)&`>^I^<Qa[iR"D1L7j\|!k\|vnOOjnA+^SV2`#_botIW9ja8Or.w:os+?xi}A3vV*\L=H;Q
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 53 5c b9 40 b1 46 be 90 59 98 f5 45 31 48 ac de b4 31 b4 f0 aa 71 6c 5e b5 24 8b 33 d6 14 ca 68 32 e4 eb 23 57 34 e6 1a 7e fa 6b 27 40 77 e7 8a fa 15 24 e9 f5 f9 48 5f e1 b2 06 a1 8b 4f cf ac cc d1 96 d4 ce c4 b6 83 e0 19 b8 4f d7 36 b7 37 cd a4 3a 9e 18 8b 41 c3 a8 34 f7 69 a0 90 4f 75 43 77 ac 38 78 c8 7d 79 82 38 13 06 4f fe 7a 72 66 1a 75 67 a7 1b f5 6e 06 77 ae 3c 39 ba 5c 8c 61 b9 cd 60 e2 38 e4 0e 6e c1 5c e3 4a a0 90 c7 8c 9c b8 5c 31 4e 0a 9e 67 ec e1 50 ed 05 07 62 9b 5b 60 43 63 ce 6d d8 42 ac 7b f0 1b 70 c8 0c 25 6f 3c 78 28 1a ee 1e e0 de 18 6f 81 06 51 07 7a bd c7 23 af 2f 4c 33 e7 f5 ee a9 7e c5 a6 e6 f6 e9 02 6f 48 32 ce 96 4d 4b ea ac d4 28 1a 3a d9 e6 b0 86 c1 fe a2 af 0c 50 a7 11 0d 23 76 f1 16 ef c9 44 2c 07 c9 0c 4f 76 99 51 cc 54 9d Data Ascii: S\@FYE1H1ql^$3h2#W4~k'@w$H_OO67:A4iOuCw8x}y8Ozrfugnw<9\a`8n\J\1NgPb[`CcmB{p%o<x(oQz#/L3~oH2MK(:P#vD,OvQT
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 02 88 cd 2f 4f 2c 20 af 2a 7f d8 67 b9 fc 34 50 64 a9 e1 e4 ec 7b 2f 74 b7 c7 27 f6 69 a2 e7 f8 b1 17 4e 3c 63 dd 47 8a cd a7 20 b4 34 34 7b a4 fb ee 2e 5b ff fc 0b e3 e1 d3 83 04 f0 f6 e1 97 8f f4 bd ea b3 66 ef 1e fe e4 d3 d9 0f 7e fb 5f 3c 1c 90 6a 7d b3 37 df 90 34 37 f7 81 fe 58 83 34 69 ac a0 f7 0d 68 1d 94 80 53 69 df 98 95 3b 7a f6 4f 74 ac db 75 b1 d8 29 de ce ba 5b ce cd 32 ce 99 0f 1b 7d 5c 67 67 01 11 64 66 55 00 e6 fa e9 c9 c3 5e 1d d3 e6 cf 0b b3 76 1d 56 16 4b e7 81 a5 de f7 be 9d 58 43 f6 7c 30 3b 95 eb 9b 7d f7 ed f1 d2 4c 61 c3 a9 1b d9 76 fc a8 1f 7b fa cb e3 3e 3b be a3 f7 a6 42 a9 cb 26 ba df fd 74 f6 b3 e7 0e f8 fe 2f 8f 1e 3b fe 59 cf ba 09 1b e6 94 fb ec a7 3e eb 7f fa d4 fe 74 cc 3f 55 9c fd 30 7e 0f d7 b1 b5 c3 ca e4 d6 71 cd a9 Data Ascii: /O, *g4Pd{/t'iN<cG 44{.[f~_<j}747X4ihSi;zOtu)[2}\ggdfU^vVKXC\|0;}Lav{>;B&t/;Y>t?U0~q
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: dd dd c7 8e 1f 1b ef 57 1c 50 7c 33 6c cb b1 7d 23 c7 76 5a cf 50 4c 93 5b 21 03 24 43 44 f9 be 9d f7 46 8c 0a a4 5b 7a ed fd 6e b7 fe fc fe dd eb 12 35 19 cd 30 c4 26 1a 56 6a d9 73 5b eb fa c9 75 6b 5b 4e b7 f6 ec 6f 0d bd 69 c6 f4 61 d5 77 be aa b8 ef 2b 98 23 07 23 64 3f 5d 14 40 bb c6 68 66 6e e2 a2 c9 c3 b8 5a 10 1b 38 5c b8 54 6c 41 19 72 55 51 60 ab b5 58 ab d9 9a b1 fd f7 8c 7f 68 1d 9d 00 b6 79 39 dc c3 75 da 41 a7 53 4d 45 d6 61 16 17 30 06 08 9b 7e d2 9d 4c 6c 2c ca 44 99 04 fa 04 e3 7a 46 34 77 3c 9a 58 b3 96 c4 ed 9c 1c c9 64 51 51 59 39 2b b5 ed fb 06 1e 04 d0 eb 78 fc 89 bf 3d 9d 72 87 e3 1f 7e 9f 3f 90 24 ae b4 38 3d 69 63 7e 64 15 16 60 61 c8 ea 71 3c eb 9d 4b c0 d5 3e e6 cd 25 0d 17 60 a1 cd 5b 25 9e b1 f2 e0 c9 be 61 8e 00 a4 f5 f7 45 Data Ascii: WP\|3l}#vZPL[!$CDF[zn50&Vjs[uk[Noiaw+##d?]@hfnZ8\TlArUQ`Xhy9uASMEa0~Ll,DzF4w<XdQQY9+x=r~?$8=ic~d`aq<K>%`[%aE
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 0b 26 97 83 c5 c7 67 4a e5 09 b4 84 f2 dc 6c db 22 5a a8 dd dd 76 e7 1e 59 a2 1b 43 36 bf 7e 16 7a 7a 7f 4c e3 7f f4 ed 7f fa 8b 66 3b 20 65 3a ac 0d 7d 9d a2 18 38 39 80 c1 e2 5d c3 fe 0d e6 17 6d fa c5 58 2c 57 4a 52 d9 b3 f0 fe da 03 f3 29 20 51 95 ba 1d f8 ba 9f fa d7 0d df 9c d6 aa cd 7b f1 30 b3 a5 19 6b 52 b4 34 2f cc 95 2b 0b f3 3c 63 d5 e7 97 dc 08 49 36 fd 92 f1 46 96 17 09 7a fe f0 a9 7f fc e8 13 df d2 e1 7e 21 42 f4 f5 e8 73 72 6c 94 e4 7c 73 62 74 24 b0 b5 f0 17 ff 4d fe a0 56 8e 4b 18 e6 f0 45 b0 c0 96 65 a5 50 40 bb a5 76 c4 96 34 1e 3a 5f b6 4f 14 77 87 fb 19 9b 86 0f 4e 6a 6f 4c 8a 9a 65 47 4a 88 d7 a6 ee 9e c3 21 49 06 12 14 98 21 c5 65 07 30 8f 8c 67 4d 72 19 36 7d c1 88 a0 9a b6 a5 35 64 e8 bd 74 f5 9a 02 bc 90 15 91 1a 83 de 77 9d 0b Data Ascii: &gJl"ZvYC6~zzLf; e:}89]mX,WJR) Q{0kR4/+<cI6Fz~!Bsrl\|sbt$MVKEeP@v4:_OwNjoLeGJ!I!e0gMr6}5dtw
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 0d 49 32 39 a1 a5 d1 44 7f c3 89 76 48 91 44 07 4e e6 ab 0f 4e 1f c0 e2 f9 2b f2 af 7f 3e 7f 95 a5 35 d4 8d 06 48 e6 28 b4 90 46 a8 51 6b b0 52 56 27 50 45 ad 5a c3 19 4f ff ce 7f eb d7 bf 7b 92 1d a5 e3 58 64 ec 47 a4 3c 2c 2b c6 d7 13 2c bb 24 57 1e 10 0c 27 b2 6d 5c 97 57 4a 28 f4 ab 96 85 a2 49 16 c7 9b 78 47 2a 83 a3 4c 0e bf fe e9 af fc 37 f5 ef f5 e3 ea c3 e3 10 be a0 9b c8 19 dd e0 c8 87 8a 98 38 92 cc 5c 49 a1 7a f2 c2 3d fc 48 cd 0f c9 7f 7f b1 e7 af aa e9 19 99 f4 4d f6 6b fc e3 c0 a7 da ba 14 f9 e5 ad d0 44 30 44 a2 05 01 26 ee 08 2a e4 78 9c 4c 5a a6 43 3d 14 f5 d4 11 ee 5e 98 bc 63 2e cd 7d e8 62 f2 d7 7f d3 bf 5d 5c 2d 6f 3d fd dd 20 26 83 c5 a9 bc 3c a2 0a 92 07 57 53 0a c6 3c cf 08 2b 3d c7 0c 9f 46 bf ff 43 ea 98 dc a9 34 3b b3 c3 12 95 Data Ascii: I29DvHDNN+>5H(FQkRV'PEZO{XdG<,+,$W'm\WJ(IxGL78\Iz=HMkD0D&xLZC=^c.}b]\-o= &<WS<+=FC4;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
465	192.168.2.4	50368	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2230	OUT	GET /Areas/LNRS/js/Components/Resources/Templates/MasonryResourceListingItem.html?v=638484963592761859 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	685	IN	HTTP/1.1 200 OK Connection: close Content-Length: 567 Content-Type: text/html Last-Modified: Fri, 12 Apr 2024 05:09:34 GMT ETag: "0bba39b978cda1:0" Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:51 GMT Age: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120024-DFW, cache-pdk-kfty2130049-PDK X-Cache: MISS, HIT X-Cache-Hits: 0, 1 X-Timer: S1713460611.404669,VS0,VE1 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	567	IN	Data Raw: ef bb bf 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 73 6f 6e 72 79 2d 72 65 73 6f 75 72 63 65 2d 6c 69 73 74 69 6e 67 2d 69 74 65 6d 20 7b 7b 23 69 73 44 6f 77 6e 6c 6f 61 64 49 74 65 6d 7d 7d 74 68 75 6d 62 6e 61 69 6c 2d 69 63 6f 6e 7b 7b 2f 69 73 44 6f 77 6e 6c 6f 61 64 49 74 65 6d 7d 7d 22 3e 0d 0a 20 20 20 20 3c 69 6d 67 20 63 6c 61 73 73 3d 22 6d 61 73 6f 6e 72 79 2d 72 65 73 6f 75 72 63 65 2d 6c 69 73 74 69 6e 67 2d 69 74 65 6d 2d 74 68 75 6d 62 6e 61 69 6c 22 20 73 72 63 3d 22 7b 7b 74 68 75 6d 62 6e 61 69 6c 7d 7d 22 20 2f 3e 0d 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 61 73 6f 6e 72 79 2d 72 65 73 6f 75 72 63 65 2d 6c 69 73 74 69 6e 67 2d 69 74 65 6d 2d 74 79 70 65 22 20 3e 7b 7b 5f 72 65 73 6f 75 72 63 65 5f 74 79 70 65 7d 7d 3c Data Ascii: <div class="masonry-resource-listing-item {{#isDownloadItem}}thumbnail-icon{{/isDownloadItem}}"> <img class="masonry-resource-listing-item-thumbnail" src="{{thumbnail}}" /> <span class="masonry-resource-listing-item-type" >{{_resource_type}}<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
466	192.168.2.4	50369	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2236	OUT	GET /-/media/images/lnrs/heroes/key_image%20jpg.jpg?h=470&iar=0&w=1230&hash=183D924018454C8F9F17F6FFD180EFF8 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	866	IN	HTTP/1.1 200 OK Connection: close Content-Length: 45825 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="key_image jpg.jpg" Content-Type: image/jpeg Etag: "7bEF9Vd2xTGXS650McmZmMmcyS3LC0AJNkyx0sd52rc" Fastly-Io-Info: ifsz=270683 idim=1230x470 ifmt=jpeg ofsz=45825 odim=1230x470 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010226 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560494 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120042-DFW, cache-pdk-kfty2130089-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460612.519698,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 9d 4d 61 8a 39 ac e0 c5 dd 28 f1 bc df a2 08 7c d5 5f 44 e5 47 8c 57 73 93 67 30 68 5e 84 53 86 16 0e 02 45 dd a3 34 a1 d3 a3 4e 6d 44 f7 25 cc 74 42 45 2a 55 92 ca 8e c6 ea 0d 88 af 3e 84 15 31 6d a7 6a cb a9 b4 dc 3e 98 5a 34 e6 ac 39 b5 64 c6 8f 56 1d 63 bf 46 6d 34 d9 25 23 3e b4 d6 45 69 c6 29 cb 5c ea 7e 75 68 44 d6 f6 8f 27 57 4f 66 5c db 5b 9e 4d 59 8b a6 1a 19 2d bc 6b 08 fa 72 f6 19 f4 e2 e7 d1 cf cd a3 97 41 59 a8 82 c6 31 05 d1 2c 0d 7a aa a5 41 31 66 98 9a 97 6f 3c 9c 1b f0 eb 0f d7 93 59 a3 ab ac ea 86 ea 25 48 d5 57 55 55 75 5e 65 8b 9d b1 a5 b9 19 cf 7b 9f 81 fc ba 6c 6e 57 73 de 96 21 b8 d9 c8 43 51 94 41 4c 8c 12 8e ac 1b 42 ab 39 15 75 74 c2 0b 17 39 07 94 d8 37 9d b5 f9 d9 9d 6a 76 26 1a de 59 34 ab aa 88 85 a0 f6 a3 aa 6d 2f c8 fd 1a Data Ascii: Ma9(\|_DGWsg0h^SE4NmD%tBE*U>1mj>Z49dVcFm4%#>Ei)\~uhD'WOf\[MY-krAY1,zA1fo<Y%HWUUu^e{lnWs!CQALB9ut97jv&Y4m/
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: be 5c 72 e9 e2 e9 e6 55 58 ef 9c 59 24 a9 56 9c aa 51 ac 65 4b 20 7a 74 a1 0e 99 ab 26 7e 96 38 c0 54 19 d6 c7 e3 d6 47 9f 74 6e 4e dd 1a 28 b5 89 75 c4 88 54 ec c1 7c ec b8 b0 96 62 d8 ec 2c 1e c7 47 89 d5 e7 ad c3 28 68 0c 69 4b 72 a9 2a 7a 68 06 ea 80 48 18 40 81 28 2c 6a c8 25 10 ca aa 12 06 69 55 a6 56 01 eb 3c 9c 5b 71 6b 1a 35 65 d5 9d 1c 93 3a aa b9 43 2e aa a8 a9 86 88 6b a2 d5 1e a7 bb 3b b2 e8 7e 67 56 b7 e4 d1 1a dd 99 da 34 3b 33 ab 53 11 a1 3c f7 cd 7e e4 55 f9 f3 47 bf f9 e6 77 d0 d5 c8 dd c7 ae f7 e1 d1 cf ab c0 66 74 ca aa a7 d0 4c ad a4 4b 3a 0f 21 93 96 55 36 c5 1d a7 5c 66 5b d0 a7 0b ce 8b 3a 29 76 a4 54 ca ba 2a 0b 35 1e 87 b3 33 35 39 a9 3d 8f 2c ae d5 a1 99 d9 ac 36 c0 b4 11 26 56 8a 0a 46 d0 d5 4b 95 51 4c 09 e5 23 b3 c0 e1 df 5c Data Ascii: \rUXY$VQeK zt&~8TGtnN(uT\|b,G(hiKrzhH@(,j%iUV<[qk5e:C.k;~gV4;3S<~UGwftLK:!U6\f[:)vT5359=,6&VFKQL#\
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 14 a7 29 e8 45 cb ad e7 93 9f 42 35 8e 8f 43 1f 43 cf de a3 07 1b 5a dc bd 08 53 95 bc ac 4c 35 91 ab a6 da 6b 3d 0c 6a 58 4f 6a 1c 3a 1a 87 53 cd 47 4c 35 1c 68 7e 67 d6 97 e5 7a 6a 7e 5d 1a 1e c4 9a 3c d2 70 e3 51 68 69 28 d1 96 17 45 cb e9 4a f8 0e 7f ba 7c 6f 87 75 35 1a 78 77 3d 59 6b 9e fa ec e6 37 1b da 12 b3 a2 3c e6 68 91 a5 74 2d 5d d6 8a 4d 37 49 d9 34 26 96 66 75 30 4a 8d 53 54 ca 28 b8 8d 09 2a ca 54 3a d6 cd c5 06 a8 cd 06 da 09 4d de 5c 60 ce 98 3b 12 d6 6e 5c a1 e4 f5 ac d7 85 cd ef fc 8f 1f 46 76 e2 d5 cf ae 93 43 4c b0 d6 70 64 93 ad 51 0b de 76 d0 3f bf 89 09 7a b5 c0 0a 8a 89 ab 3a 29 52 6e a5 d5 51 51 50 b0 5b 27 27 ad ca a5 74 30 6e ce b4 55 48 95 06 a0 10 08 ac d7 40 06 ba a5 98 d2 92 e4 20 d4 8d 42 43 43 0a 50 dd ca ab 32 25 93 4f Data Ascii: )EB5CCZSL5k=jXOj:SGL5h~gzj~]<pQhi(EJ\|ou5xw=Yk7<ht-]M7I4&fu0JST(*T:M\`;n\FvCLpdQv?z:)RnQQP[''t0nUH@ BCCP2%O
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: e2 7d d7 93 d3 b5 9a 8b a6 3c 1e 2e 97 9a 9f a0 6b c1 b7 9b 52 c4 4b 87 e8 f9 0c 3c 8f 57 c7 8f 98 f5 f9 7d 4e 98 f7 3a 32 3f cb e8 5f 3f 5f 36 70 61 d1 87 b6 34 6d e3 74 bb e7 d4 6a e4 ed d7 20 f3 fd be 2f 3d f0 0d 47 bc 34 d2 c9 71 a9 84 e6 a1 b9 5e 6b 3a 32 02 a7 35 0d a7 bf 3b d3 46 8c da 69 ed 43 74 39 89 63 35 8a 65 96 1a 8d 99 60 51 2a 0d 49 52 8a c6 e8 c9 66 c7 e7 fb d1 3f 3e 3b d8 f8 9e 1d f5 b7 26 8e 5d 49 cb bc e9 b6 05 9d 39 f9 9d 8d b2 ae b2 b9 99 74 30 14 0a d6 fe 76 b3 7d 06 65 d1 2c aa 94 d6 2d c9 42 d1 45 c2 a9 11 b5 11 a6 82 d1 80 d4 d5 44 4e 91 e6 e6 8e aa f9 76 9b 87 14 73 bf 47 29 e1 d1 76 16 db e9 ee e4 6e 1e 8e 9c 0d e9 8d 5e 2b d9 e8 d9 f1 b9 f4 bf 9c 9d 00 b9 ee 71 b1 89 ac da 07 0e 57 9f 41 5c a4 f5 e5 d3 dd c1 d5 63 ef 1d 9f 89 Data Ascii: }<.kRK<W}N:2?_?_6pa4mtj /=G4q^k:25;FiCt9c5e`Q*IRf?>;&]I9t0v}e,-BEDNvsG)vn^+qWA\c
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: fc 75 9e cd e2 3c bb e5 29 73 5c cc 6e d1 59 ba 2b 6e 62 3a ab d6 38 b9 fb b8 fa 63 03 d6 9d e7 65 a5 99 4e c0 84 cd 50 74 1e 52 35 d1 d1 c9 d1 8d f5 db cd 76 7a 6d 4a 42 4d 19 7b fa e3 d7 ea 21 ef 22 ab 18 a0 20 a9 04 9b 27 33 a9 ce 6b d5 97 56 58 36 25 40 41 42 16 09 02 0b 08 c1 41 02 04 a1 b1 4a 1b 0a 20 21 6b 83 20 a5 50 99 24 a9 e7 9c c7 6e 2d 78 b4 68 cd a3 2b 9c 1a b1 ba bd 0b 79 ee f3 7a 1b 9e d2 80 93 57 4c 2b 36 95 ef 38 eb 44 d0 2d a2 17 9a cd cb 0d 67 4c 25 98 99 ac a5 84 bb 16 1a 48 b4 37 33 87 4b b3 38 b5 69 c9 a6 b4 31 0d 67 bb 33 93 43 50 d4 7b 10 c6 75 81 24 a8 25 20 c9 2b 0b 86 12 cd 8e 55 24 18 25 43 63 42 04 b1 81 63 5e 47 c3 7d 8f e7 e6 bc e2 b4 86 77 b3 67 0f 77 3d f5 cf 16 9e 7d ba 3a 39 da b1 d8 b9 fd 1c b1 c4 e5 f7 79 1d bc d5 d3 Data Ascii: u<)s\nY+nb:8ceNPtR5vzmJBM{!" '3kVX6%@ABAJ !k P$n-xh+yzWL+68D-gL%H73K8i1g3CP{u$% +U$%CcBc^G}wgw=}:9y
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 8d 2a 55 49 2a 76 12 d8 e4 cd 66 27 63 28 a5 4a 29 57 56 40 42 c3 51 cb 58 83 1d 3a 71 3b 2e d7 62 74 ed d1 85 e1 b5 d8 dc db 1b 91 c9 a4 90 4c ca 0a a6 12 8a 1a 4b 36 36 29 90 ca 94 d0 6e aa 80 86 80 0d 62 2b 35 92 d2 d4 92 94 c5 0a d6 6a aa aa 1a 20 81 57 c8 ea 0d 7c fd 1f 41 f2 5d 33 cd b5 92 9d 59 67 4b 17 8a 68 cb a1 8f 35 75 33 a7 2b 81 38 e7 4b 72 9e 7a 69 3c c4 69 f4 a2 26 50 db 16 84 7a 72 f5 27 6b 79 80 88 11 0d 0d 1c 08 ab c5 b7 25 73 71 ef cf ac e5 6b 1b 51 ad 29 c6 8d 99 f5 99 b7 2e dc 6d b1 b3 1a c7 9b 7e 54 c9 1e cd e3 9c 3d ac f5 80 ac 86 ee eb 2d 0d 8a 50 d8 d0 d4 a4 a1 21 aa 1b 14 95 62 95 63 75 25 4a b1 b1 aa ba ba 8f cf a2 b4 25 c9 67 e2 d9 8a 30 8d 8e 87 1a cf 3a 2a a9 52 a4 a9 52 54 a9 2a 54 a6 d6 72 41 94 92 57 21 5d c9 57 72 0c b9 Data Ascii: UIvf'c(J)WV@BQX:q;.btLK66)nb+5j W\|A]3YgKh5u3+8Krzi<i&Pzr'ky%sqkQ).m~T=-P!bcu%J%g0:RRTTrAW!]Wr
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 21 ce 24 f3 40 59 62 65 6a 53 8e 44 a2 fd e4 bc 88 97 c2 19 3d a2 2f 2a 10 8c ba 6c 79 d6 7d 0e 5c 5b d8 a4 26 26 59 7b 25 e0 a1 a1 ee a4 29 9c b6 b3 91 65 96 26 5e e9 ec 8b db fd e8 bb 59 65 97 d6 8f 73 2e 9f 16 63 2e 93 26 3d d0 b7 5e 07 e0 7b 51 42 d9 8c e4 46 44 58 b7 91 90 44 1e d7 d2 44 ac 9c a6 3e 67 06 7a 42 c4 28 89 6f fe 75 7d 11 21 7c b2 7b 47 cc 84 21 6d a8 d0 e2 cc 66 d2 67 d3 ee 98 a4 26 2d d7 6a 38 94 34 51 45 6d 62 91 7b f2 14 8b 13 17 56 2d 93 ec b7 a2 b7 ae 97 d7 2e 97 1e 52 7a 6c 98 f6 5e 37 d5 6e f7 5b b2 6c b3 19 01 6e cc 9b 46 42 91 c8 be 94 89 41 0e 07 03 89 5d 6f c5 12 62 19 3d a3 e6 42 10 84 22 b9 2d 4f e2 a1 23 2e 2c 98 64 58 a4 29 0a 42 62 eb 62 1e cc ad a8 71 2b 64 cb da 8a 10 b6 5e 1f f1 0b 65 da bc 17 d2 7a 6c 73 25 86 78 c5 Data Ascii: !$@YbejSD=/*ly}\[&&Y{%)e&^Yes.c.&=^{QBFDXDD>gzB(ou}!\|{G!mfg&-j84QEmb{V-.Rzl^7n[lnFBA]ob=B"-O#.,dX)Bbbq+d^ezls%x
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 44 bf 69 43 c1 65 97 b4 89 08 5e 66 7a 32 32 63 70 7b d0 a2 71 38 9c 4e 25 0c c9 f3 12 64 8c 7f 38 91 45 14 31 8f e9 a1 08 42 fa 1f 95 d0 fa d0 8c af a5 96 46 5b a4 56 d4 31 90 7d af 6b ea 87 dd 32 cb da cb 2c b2 f6 b1 fb ac 91 71 65 f4 b1 fb 8d 98 e3 7b 58 be 30 c6 12 97 e9 e0 3c 30 3d 14 7a 2c 78 e6 87 68 b3 91 c8 b1 92 10 bc cd 9f 8f c9 15 a9 d6 e1 82 86 d4 23 0e 1f 51 64 c3 c4 e2 51 45 12 46 4f 98 93 24 62 f9 c4 bd a8 a1 a2 44 b6 a3 d3 38 32 51 fa 08 42 17 d1 fc a6 8b f4 d9 22 f6 7b 58 99 1c 84 5d 8b 76 31 ad a2 f6 be ab 64 fc 76 26 72 2f a5 96 5e fc 53 59 71 fa 6c bd af 77 ee 2f 63 e7 64 c8 3a c9 63 91 7b b3 84 19 9a 3e 9e 44 c4 c6 48 42 f3 7f fa aa 25 ea cf 10 90 a2 49 c3 19 a3 cc b1 ac d9 63 3d a8 a2 89 23 2a f7 44 c9 18 17 be 28 fb 51 43 44 c9 6d Data Ascii: DiCe^fz22cp{q8N%d8E1BF[V1}k2,qe{X0<0=z,xh#QdQEFO$bD82QB"{X]v1dv&r/^SYqlw/cd:c{>DHB%Ic=#*D(QCDm
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 47 ab 96 7a 38 7a 71 52 39 16 72 27 2f 69 cb f9 29 7b 65 64 8d 29 1f 86 32 64 89 0d 6c f6 42 f3 ad 90 be bf e4 bf 1c b5 69 a9 42 49 97 b5 8b 6b 13 39 17 7b 27 d6 c4 c5 dd 8c 64 99 32 5e 04 ce 42 98 a4 72 39 0a 42 90 a4 29 16 59 c8 bb 38 45 92 85 19 30 c2 46 5d 3c b1 8e 59 0d 1e 8e 32 8f 69 8c 42 fa 76 59 42 62 90 a6 29 16 4d fb 49 fb a6 4c 66 94 8b 1b 19 32 43 18 c9 6c 85 e7 5b 21 7d 8f c8 fe 3e 3a b8 fb c5 a6 5e c9 8b a4 4a d9 75 88 bc 0c 64 c9 8f b5 96 59 62 91 19 8a 47 21 48 52 14 c5 23 91 c8 b1 31 4c 6e c9 16 66 c3 8e 46 99 56 0e d3 63 64 45 f5 2c b1 33 91 c8 52 39 13 7e d2 7e e8 98 cd 3b 21 23 90 d9 26 48 63 24 4b 64 2f 32 10 84 2f b3 ae fc 7e 3d 5c 67 0c 98 32 22 f6 8b 10 b6 8e cf b2 23 ba d9 8c 63 63 64 99 21 8d 14 33 91 cb b2 62 90 a4 29 0a 42 98 Data Ascii: Gz8zqR9r'/i){ed)2dlBiBIk9{'d2^Br9B)Y8E0F]<Y2iBvYBb)MILf2Cl[!}>:^JudYbG!HR#1LnfFVcdE,3R9~~;!#&Hc$Kd/2/~=\g2"#ccd!3b)B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
467	192.168.2.4	50370	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2458	OUT	GET /-/media/images/lnrs/heroes/our_technology_hero%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	873	IN	HTTP/1.1 200 OK Connection: close Content-Length: 4838 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="our_technology_hero jpg.jpg" Content-Type: image/webp Etag: "LSr7iHOy0TIOHKG+mFhOgTRKqUNCTYC9ZF2N/dFtekM" Fastly-Io-Info: ifsz=12068 idim=1230x291 ifmt=jpeg ofsz=4838 odim=1230x291 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560808 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120114-DFW, cache-pdk-kfty2130039-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460612.613669,VS0,VE24 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 52 49 46 46 de 12 00 00 57 45 42 50 56 50 38 20 d2 12 00 00 50 f9 00 9d 01 2a ce 04 23 01 3e 51 24 90 46 23 a2 2b a1 24 50 39 c9 70 0a 09 69 6e d8 de a8 a8 ed 97 e6 66 45 b3 66 60 44 e6 c4 f9 be bd 7a 13 8f 37 fc 8f 64 0f ec 19 1a 0f 0f 93 be bf f9 fb f1 a7 ff fb b0 65 ff f5 bb 7e a5 bd 98 6f 82 7f f3 af 0e 3a fc 1c eb 85 bd a8 01 e8 7f b1 95 55 43 f6 d7 73 33 30 d7 43 77 79 8a 56 a7 3e cb 14 28 3d 8f aa 89 73 55 55 1a b9 a1 e2 be c5 86 0a fd 27 d7 b5 6b ea f6 0e 7f db 86 81 33 4a 72 8b ee 81 9b 3b bd 99 2c 24 ca 25 b6 ee ee 18 47 78 76 71 90 81 56 9c ee 4d 6e f1 f3 08 87 c4 4b e9 8e cf bd 05 3b c7 31 77 77 0f 9e 29 cb 51 0c 38 69 18 1e be fd 0f 23 c1 38 3e 18 a7 77 8e 3c 60 44 0f c7 9b 2f 95 65 54 ae b4 a2 b6 47 f3 19 11 09 bb 82 c7 1c 02 a3 94 cf c5 a9 Data Ascii: RIFFWEBPVP8 P*#>Q$F#+$P9pinfEf`Dz7de~o:UCs30CwyV>(=sUU'k3Jr;,$%GxvqVMnK;1ww)Q8i#8>w<`D/eTG
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 85 df 41 df 32 d3 6a 93 c1 4f d9 06 6c 33 49 3d e5 d9 b1 96 7e 8c b8 2f cf cd 2f 23 8d 1d 55 50 d1 02 62 38 74 5e af 35 c8 a8 fb 02 63 68 da 5c d9 36 9d d6 5a 61 b7 e5 3e 62 58 d8 75 b3 90 4a 08 01 9f ce 3f aa 36 06 33 85 02 e1 df e6 7f 12 9e 31 66 fd 8b aa 38 24 41 fc 65 dc 3f a9 49 f3 b9 d0 e1 cc 67 a3 33 32 b8 9f 5d bf 56 f2 03 be be f6 87 89 d2 ea aa aa a1 c5 50 b4 ab d7 7a 9e c8 b2 a2 e9 57 bf fc 59 1e 94 41 b8 c0 ed f6 c0 36 98 7a 5c 64 2d dd f5 c0 b8 12 aa aa b8 b3 c5 f8 41 75 c8 26 2c 2b eb 87 15 88 8b 26 45 70 2b cd 11 bf fc 08 9d d2 99 a4 d5 5e 0f 6e 40 e3 8f e6 35 16 b6 94 03 a2 7e 3c b1 88 5f 7c ba 4a a1 bb d4 1d 5b 55 4c 64 c0 8c f6 a9 56 de 35 50 0b 45 3c 5e d5 55 55 52 14 c4 3c 76 6b 03 c3 7e 49 89 12 4f be 63 6f 81 da f2 25 aa df 16 3b 70 Data Ascii: A2jOl3I=~//#UPb8t^5ch\6Za>bXuJ?631f8$Ae?Ig32]VPzWYA6z\d-Au&,+&Ep+^n@5~<_\|J[ULdV5PE<^UUR<vk~IOco%;p
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 1b 18 9f aa 0f 39 04 b6 7a 29 c7 00 43 22 9e fa 8c 6b 9b eb ae 10 f8 dd ee 00 c4 50 a1 e5 b0 a4 09 43 f9 19 9e 1c 22 16 8c af ad a9 46 83 55 0e 6a 2d 7c f4 e9 07 3d 4a 40 7c 0a 1a bc 0b 03 d0 b9 7d 05 ff 44 c0 a9 42 1c 05 12 10 7a ad 17 36 8c 57 93 a5 a7 45 ff cb 9b f3 86 25 51 db e0 2e d4 c0 d9 f0 22 b7 95 74 30 a0 b5 d5 38 e4 d0 a4 f9 1b 40 36 20 98 30 0b 9e 5f 5e 7a d0 9b 03 2a 43 be 00 75 ea 31 9d 21 4e 31 fe f9 bb 12 ff 99 6d 4a 2e ca 16 5f 06 73 a6 68 61 6f ca 41 b3 99 5c cd 13 e7 66 49 2d ed 62 32 10 c0 ba e1 f5 5b 42 0e 8e c1 47 52 5b 2b f1 d2 86 d2 bb ca c7 32 c5 e5 c7 f7 6e a9 d2 40 af e1 3e 50 9d 80 5e 65 4b a3 b6 32 8a ab e7 ce 1e 81 3c 80 8c 84 28 a2 5b d2 85 47 f5 c2 91 ca f7 cd 86 fe 9f 02 d1 65 66 1d 02 e0 39 7c a4 83 68 8f 77 8f dc 6d 49 Data Ascii: 9z)C"kPC"FUj-\|=J@\|}DBz6WE%Q."t08@6 0_^z*Cu1!N1mJ._shaoA\fI-b2[BGR[+2n@>P^eK2<([Gef9\|hwmI
2024-04-18 17:16:51 UTC	701	IN	Data Raw: c2 84 a8 ca ca a1 6b b0 06 4d 22 ec 76 44 8e b1 79 d1 16 32 59 1f a2 b0 a6 4d da 44 09 30 8f 16 45 92 52 df 33 07 65 0c a7 f3 72 0f 85 a9 57 cb df 42 c8 37 e9 4a c7 f2 ec 28 bc 2a b7 38 0c 39 89 40 b3 4e cc 36 dd fb 0b fb de 39 bc e1 89 7b 5a 1a d9 d4 15 6f 08 46 bc 9e 99 14 53 9d 05 ea 96 4b 3f 47 65 03 e4 a5 08 36 1e 4d de 91 b9 a7 fc 6c bd f0 2b aa d0 4e b4 3c 30 02 70 02 d9 71 92 75 32 77 f4 07 6c 1f 7b 44 a7 98 cc 99 e0 29 b2 e0 89 eb d4 7b d2 43 66 fd 54 e9 e3 9c 38 71 87 07 bc a7 4d f6 81 b4 42 71 76 ec c7 6a 37 b3 eb 18 d2 2e 23 06 7f 84 5e 77 fe 61 7f 02 29 74 eb 12 3d c0 1a 12 ad 60 fc 36 4e f9 11 6b 36 6f ec df 54 cd e7 c4 25 ca 41 43 e8 0f 51 52 16 b1 67 45 5c 20 2c a8 d6 4a e1 2b 13 17 a4 11 6e 2d 91 a8 b4 ef bf 67 d2 dc 0d ff c2 fc 00 01 65 Data Ascii: kM"vDy2YMD0ER3erWB7J(*89@N69{ZoFSK?Ge6Ml+N<0pqu2wl{D){CfT8qMBqvj7.#^wa)t=`6Nk6oT%ACQRgE\ ,J+n-ge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
468	192.168.2.4	50373	104.18.16.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	636	OUT	GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1 Host: js.qualified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: W/"e4cfb76386f1f61f399d299928b57ee3" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:51 UTC	702	IN	HTTP/1.1 304 Not Modified Date: Thu, 18 Apr 2024 17:16:51 GMT Connection: close Cache-Control: public, max-age=14400 Etag: W/"e4cfb76386f1f61f399d299928b57ee3" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains Vary: Accept Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 4839194f-55c9-1810-be55-511f021375c2 X-Runtime: 0.026971 X-Xss-Protection: 1; mode=block CF-Cache-Status: MISS Expires: Thu, 18 Apr 2024 21:16:51 GMT Server: cloudflare CF-RAY: 87664e171fd9457c-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
469	192.168.2.4	50374	192.96.201.45	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	903	OUT	POST /1/indexes/*/queries?x-algolia-agent=Algolia%20for%20vanilla%20JavaScript%20(lite)%203.27.1%3Binstantsearch.js%201.12.1%3BJS%20Helper%202.26.0&x-algolia-application-id=KM18SZRXTM&x-algolia-api-key=8790b71f94f13d24e3298d1c6b7fd2ed HTTP/1.1 Host: km18szrxtm-dsn.algolia.net Connection: keep-alive Content-Length: 706 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:51 UTC	706	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 6e 64 65 78 4e 61 6d 65 22 3a 22 6c 6e 72 73 2d 77 65 62 39 33 2d 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 22 71 75 65 72 79 3d 26 68 69 74 73 50 65 72 50 61 67 65 3d 32 34 26 6d 61 78 56 61 6c 75 65 73 50 65 72 46 61 63 65 74 3d 31 30 30 30 26 70 61 67 65 3d 30 26 66 61 63 65 74 73 3d 25 35 42 25 32 32 5f 6c 61 6e 67 75 61 67 65 25 32 32 25 32 43 25 32 32 5f 74 65 6d 70 6c 61 74 65 25 32 32 25 32 43 25 32 32 68 69 65 72 61 72 63 68 69 63 61 6c 25 32 30 69 6e 64 75 73 74 72 69 65 73 2e 6c 76 6c 30 25 32 32 25 32 43 25 32 32 5f 72 65 73 6f 75 72 63 65 5f 74 79 70 65 25 32 32 25 32 43 25 32 32 73 6f 6c 75 74 69 6f 6e 73 25 32 32 25 35 44 26 74 61 67 46 69 6c 74 65 72 73 3d 26 66 61 63 65 74 46 69 6c 74 65 72 73 Data Ascii: {"requests":[{"indexName":"lnrs-web93-us","params":"query=&hitsPerPage=24&maxValuesPerFacet=1000&page=0&facets=%5B%22_language%22%2C%22_template%22%2C%22hierarchical%20industries.lvl0%22%2C%22_resource_type%22%2C%22solutions%22%5D&tagFilters=&facetFilters
2024-04-18 17:16:51 UTC	438	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 17:16:51 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 302676 Connection: close X-Alg-PT: 1 Accept-Encoding: deflate, gzip Cache-Control: no-store Access-Control-Allow-Origin: * Timing-Allow-Origin: * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Disposition: inline; filename=a.txt
2024-04-18 17:16:51 UTC	3658	IN	Data Raw: 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 68 69 74 73 22 3a 5b 7b 22 5f 69 64 22 3a 22 7b 34 42 46 43 38 39 45 45 2d 34 45 41 35 2d 34 35 33 44 2d 38 34 46 36 2d 41 35 37 38 41 34 31 31 43 42 45 44 7d 22 2c 22 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 5f 74 65 6d 70 6c 61 74 65 22 3a 22 7b 33 35 31 38 33 39 44 45 2d 30 41 41 30 2d 34 34 38 41 2d 38 38 33 32 2d 32 34 32 39 32 38 32 43 31 42 37 38 7d 22 2c 22 5f 66 75 6c 6c 70 61 74 68 22 3a 22 2f 73 69 74 65 63 6f 72 65 2f 63 6f 6e 74 65 6e 74 2f 6c 6e 72 73 2f 68 6f 6d 65 2f 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 2f 62 6c 6f 67 2d 70 6f 73 74 2f 32 30 32 34 2f 30 34 2f 31 31 2f 31 39 2f 30 30 2f 64 72 69 76 69 6e 67 2d 76 69 6f 6c 61 74 69 6f 6e 73 2d 63 6f 6e 74 69 6e 75 Data Ascii: {"results":[{"hits":[{"_id":"{4BFC89EE-4EA5-453D-84F6-A578A411CBED}","_language":"en-US","_template":"{351839DE-0AA0-448A-8832-2429282C1B78}","_fullpath":"/sitecore/content/lnrs/home/insights-resources/blog-post/2024/04/11/19/00/driving-violations-continu
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 75 6d 6d 65 74 65 64 20 61 74 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 20 6f 66 20 43 4f 56 49 44 2c 20 62 75 74 20 72 65 74 75 72 6e 65 64 20 74 6f 20 32 30 31 39 20 6c 65 76 65 6c 73 20 69 6e 20 32 30 32 33 2e 5c 6e 41 74 20 74 68 65 20 62 65 67 69 6e 6e 69 6e 67 20 6f 66 20 74 68 65 20 70 61 6e 64 65 6d 69 63 2c 20 6d 6f 76 69 6e 67 20 76 69 6f 6c 61 74 69 6f 6e 73 20 77 65 72 65 20 62 65 69 6e 67 20 74 69 63 6b 65 74 65 64 20 61 74 20 61 20 68 69 67 68 65 72 20 72 61 74 65 20 63 6f 6d 70 61 72 65 64 20 74 6f 20 6e 6f 6e 2d 6d 6f 76 69 6e 67 20 76 69 6f 6c 61 74 69 6f 6e 73 2e 20 54 68 69 73 20 6d 61 79 20 68 61 76 65 20 62 65 65 6e 20 64 75 65 20 74 6f 20 6c 61 77 20 65 6e 66 6f 72 63 65 6d 65 6e 74 20 66 6f 63 75 73 69 6e 67 20 6f 6e 20 74 68 65 20 Data Ascii: ummeted at the beginning of COVID, but returned to 2019 levels in 2023.\nAt the beginning of the pandemic, moving violations were being ticketed at a higher rate compared to non-moving violations. This may have been due to law enforcement focusing on the
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 6d 61 74 63 68 65 64 57 6f 72 64 73 22 3a 5b 5d 7d 2c 22 6d 65 74 61 20 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 7b 22 76 61 6c 75 65 22 3a 22 44 72 69 76 69 6e 67 20 76 69 6f 6c 61 74 69 6f 6e 73 20 63 6f 6e 74 69 6e 75 65 20 74 6f 20 72 69 73 65 20 61 73 20 6d 69 6c 65 73 20 64 72 69 76 65 6e 20 72 65 74 75 72 6e 73 20 74 6f 20 70 72 65 2d 70 61 6e 64 65 6d 69 63 20 6c 65 76 65 6c 73 2c 20 62 75 74 20 6d 61 6e 79 20 70 65 72 73 6f 6e 61 6c 20 61 75 74 6f 20 69 6e 73 75 72 65 72 73 20 68 61 76 65 6e e2 80 99 74 20 75 70 64 61 74 65 64 20 74 68 65 69 72 20 70 72 69 63 69 6e 67 20 6d 6f 64 65 6c 73 2e 22 2c 22 6d 61 74 63 68 4c 65 76 65 6c 22 3a 22 6e 6f 6e 65 22 2c 22 6d 61 74 63 68 65 64 57 6f 72 64 73 22 3a 5b 5d 7d 2c 22 70 61 67 65 20 74 69 74 6c 65 22 Data Ascii: matchedWords":[]},"meta description":{"value":"Driving violations continue to rise as miles driven returns to pre-pandemic levels, but many personal auto insurers havent updated their pricing models.","matchLevel":"none","matchedWords":[]},"page title"
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 20 75 6e 64 65 72 73 74 61 6e 64 20 72 69 73 6b 20 61 6e 64 20 68 65 6c 70 20 63 61 70 74 75 72 65 20 61 64 64 69 74 69 6f 6e 61 6c 20 72 65 76 65 6e 75 65 2e 5c 6e 20 20 20 20 55 70 64 61 74 65 20 70 6f 69 6e 74 20 73 79 73 74 65 6d 73 20 61 63 72 6f 73 73 20 61 6c 6c 20 63 61 74 65 67 6f 72 69 65 73 e2 80 94 65 73 70 65 63 69 61 6c 6c 79 20 6d 61 6a 6f 72 20 73 70 65 65 64 69 6e 67 20 76 69 6f 6c 61 74 69 6f 6e 73 2c 20 77 68 65 72 65 20 61 76 65 72 61 67 65 20 6c 6f 73 73 20 63 6f 73 74 20 72 65 6c 61 74 69 76 69 74 79 20 68 61 73 20 69 6e 63 72 65 61 73 65 64 2e 5c 6e 20 20 20 20 43 6f 6e 73 69 64 65 72 20 68 6f 77 20 79 6f 75 20 75 73 65 20 64 69 73 74 72 61 63 74 65 64 20 64 72 69 76 69 6e 67 20 76 69 6f 6c 61 74 69 6f 6e 73 2c 20 61 74 20 62 6f 74 Data Ascii: understand risk and help capture additional revenue.\n Update point systems across all categoriesespecially major speeding violations, where average loss cost relativity has increased.\n Consider how you use distracted driving violations, at bot
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 67 20 68 61 6e 64 68 65 6c 64 20 63 65 6c 6c 20 70 68 6f 6e 65 73 20 62 79 20 31 2e 38 20 74 69 6d 65 73 2e 32 5c 6e 44 69 73 74 72 61 63 74 65 64 20 64 72 69 76 69 6e 67 20 69 73 20 6f 6e 20 74 68 65 20 72 69 73 65 e2 80 94 65 73 70 65 63 69 61 6c 6c 79 20 61 6d 6f 6e 67 20 47 65 6e 20 5a 5c 6e 49 6e 74 65 72 6e 61 6c 20 4c 65 78 69 73 4e 65 78 69 73 c2 ae 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 20 64 61 74 61 20 61 6e 61 6c 79 73 69 73 20 72 65 76 65 61 6c 73 20 74 68 61 74 20 64 69 73 74 72 61 63 74 65 64 20 64 72 69 76 69 6e 67 20 76 69 6f 6c 61 74 69 6f 6e 73 20 69 6e 63 72 65 61 73 65 64 20 62 79 20 31 30 25 20 66 72 6f 6d 20 32 30 32 32 20 74 6f 20 32 30 32 33 2e 20 4f 75 72 20 61 6e 61 6c 79 73 69 73 20 61 6c 73 6f 20 73 68 6f 77 73 20 74 68 Data Ascii: g handheld cell phones by 1.8 times.2\nDistracted driving is on the riseespecially among Gen Z\nInternal LexisNexis Risk Solutions data analysis reveals that distracted driving violations increased by 10% from 2022 to 2023. Our analysis also shows th
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 49 44 22 3a 22 65 6e 2d 55 53 5f 64 36 36 33 66 61 37 36 2d 34 38 64 34 2d 34 38 33 30 2d 62 33 32 37 2d 66 38 32 65 64 38 30 38 39 65 62 63 22 2c 22 5f 68 69 67 68 6c 69 67 68 74 52 65 73 75 6c 74 22 3a 7b 22 5f 69 64 22 3a 7b 22 76 61 6c 75 65 22 3a 22 7b 44 36 36 33 46 41 37 36 2d 34 38 44 34 2d 34 38 33 30 2d 42 33 32 37 2d 46 38 32 45 44 38 30 38 39 45 42 43 7d 22 2c 22 6d 61 74 63 68 4c 65 76 65 6c 22 3a 22 6e 6f 6e 65 22 2c 22 6d 61 74 63 68 65 64 57 6f 72 64 73 22 3a 5b 5d 7d 2c 22 5f 6c 61 6e 67 75 61 67 65 22 3a 7b 22 76 61 6c 75 65 22 3a 22 65 6e 2d 55 53 22 2c 22 6d 61 74 63 68 4c 65 76 65 6c 22 3a 22 6e 6f 6e 65 22 2c 22 6d 61 74 63 68 65 64 57 6f 72 64 73 22 3a 5b 5d 7d 2c 22 5f 74 65 6d 70 6c 61 74 65 22 3a 7b 22 76 61 6c 75 65 22 3a 22 7b Data Ascii: ID":"en-US_d663fa76-48d4-4830-b327-f82ed8089ebc","_highlightResult":{"_id":{"value":"{D663FA76-48D4-4830-B327-F82ED8089EBC}","matchLevel":"none","matchedWords":[]},"_language":{"value":"en-US","matchLevel":"none","matchedWords":[]},"_template":{"value":"{
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 6d 70 61 63 74 20 74 6f 20 6c 6f 73 73 20 63 6f 73 74 73 2e 5c 6e 49 74 e2 80 99 73 20 70 6f 73 73 69 62 6c 65 20 74 68 65 20 66 69 72 73 74 20 44 55 49 20 73 63 61 72 65 73 20 64 72 69 76 65 72 73 20 69 6e 74 6f 20 62 65 69 6e 67 20 6d 6f 72 65 20 63 61 75 74 69 6f 75 73 2e 20 49 6e 20 61 64 64 69 74 69 6f 6e 20 74 6f 20 74 68 65 20 66 69 6e 61 6e 63 69 61 6c 20 61 6e 64 20 6c 65 67 61 6c 20 63 6f 6e 73 65 71 75 65 6e 63 65 73 2c 20 63 6f 6e 73 75 6d 65 72 73 20 61 72 65 20 61 77 61 72 65 20 74 68 61 74 20 44 55 49 73 20 61 66 66 65 63 74 20 74 68 65 69 72 20 69 6e 73 75 72 61 6e 63 65 20 70 72 65 6d 69 75 6d 73 2c 20 61 6e 64 20 74 68 61 74 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 65 20 44 55 49 20 6d 69 67 68 74 20 6d 61 6b 65 20 69 6e 73 75 72 61 6e 63 Data Ascii: mpact to loss costs.\nIts possible the first DUI scares drivers into being more cautious. In addition to the financial and legal consequences, consumers are aware that DUIs affect their insurance premiums, and that more than one DUI might make insuranc
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 45 30 2d 33 37 43 36 30 33 43 45 41 30 45 42 7d 22 2c 22 62 75 73 69 6e 65 73 73 20 6f 77 6e 65 72 22 3a 22 42 75 73 69 6e 65 73 73 20 53 65 72 76 69 63 65 73 22 2c 22 73 68 6f 77 20 69 6e 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 73 22 3a 74 72 75 65 2c 22 5f 63 6f 6e 74 65 6e 74 22 3a 22 4f 70 74 69 6d 69 7a 65 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 61 6e 64 20 69 6d 70 72 6f 76 65 20 72 65 73 70 6f 6e 73 65 20 72 61 74 65 73 20 77 69 74 68 20 61 20 72 65 66 69 6e 65 64 20 76 69 65 77 20 6f 66 20 72 69 73 6b 20 61 6e 64 20 6f 70 70 6f 72 74 75 6e 69 74 79 2e 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 34 39 22 2c 22 31 34 22 2c 22 30 39 22 2c 22 30 34 22 2c 22 32 30 32 34 22 2c 22 61 72 74 69 63 6c 65 22 2c 22 69 6e 73 69 67 68 74 73 2d 72 65 73 Data Ascii: E0-37C603CEA0EB}","business owner":"Business Services","show in search results":true,"_content":"Optimize performance and improve response rates with a refined view of risk and opportunity.","categories":["49","14","09","04","2024","article","insights-res
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 52 69 73 6b 2d 42 61 73 65 64 20 4d 61 72 6b 65 74 69 6e 67 20 20 20 20 20 31 2d 38 30 30 2d 39 35 33 2d 32 38 37 37 20 20 3c 72 20 2f 3e 22 2c 22 5f 70 61 72 65 6e 74 22 3a 22 7b 39 43 44 38 38 36 30 39 2d 38 35 38 30 2d 34 43 44 37 2d 42 46 30 36 2d 35 37 39 37 46 38 38 34 43 38 41 46 7d 22 2c 22 74 68 75 6d 62 6e 61 69 6c 6d 65 64 69 61 69 64 77 69 74 68 64 69 6d 65 6e 73 69 6f 6e 73 22 3a 22 7b 41 45 44 41 43 44 36 44 2d 33 42 33 45 2d 34 30 41 Data Ascii: <r /> <r /> <r /> <r /> <r /> Risk-Based Marketing 1-800-953-2877 <r />","_parent":"{9CD88609-8580-4CD7-BF06-5797F884C8AF}","thumbnailmediaidwithdimensions":"{AEDACD6D-3B3E-40A

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
470	192.168.2.4	50375	192.96.201.45	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	904	OUT	POST /1/indexes/*/queries?x-algolia-agent=Algolia%20for%20vanilla%20JavaScript%20(lite)%203.27.1%3Binstantsearch.js%201.12.1%3BJS%20Helper%202.26.0&x-algolia-application-id=KM18SZRXTM&x-algolia-api-key=8790b71f94f13d24e3298d1c6b7fd2ed HTTP/1.1 Host: km18szrxtm-dsn.algolia.net Connection: keep-alive Content-Length: 1228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:51 UTC	1228	OUT	Data Raw: 7b 22 72 65 71 75 65 73 74 73 22 3a 5b 7b 22 69 6e 64 65 78 4e 61 6d 65 22 3a 22 6c 6e 72 73 2d 77 65 62 39 33 2d 75 73 22 2c 22 70 61 72 61 6d 73 22 3a 22 71 75 65 72 79 3d 26 68 69 74 73 50 65 72 50 61 67 65 3d 32 34 26 6d 61 78 56 61 6c 75 65 73 50 65 72 46 61 63 65 74 3d 31 30 30 30 26 70 61 67 65 3d 30 26 66 61 63 65 74 73 3d 25 35 42 25 32 32 5f 6c 61 6e 67 75 61 67 65 25 32 32 25 32 43 25 32 32 5f 74 65 6d 70 6c 61 74 65 25 32 32 25 32 43 25 32 32 68 69 65 72 61 72 63 68 69 63 61 6c 25 32 30 69 6e 64 75 73 74 72 69 65 73 2e 6c 76 6c 30 25 32 32 25 32 43 25 32 32 5f 72 65 73 6f 75 72 63 65 5f 74 79 70 65 25 32 32 25 32 43 25 32 32 73 6f 6c 75 74 69 6f 6e 73 25 32 32 25 35 44 26 74 61 67 46 69 6c 74 65 72 73 3d 26 66 61 63 65 74 46 69 6c 74 65 72 73 Data Ascii: {"requests":[{"indexName":"lnrs-web93-us","params":"query=&hitsPerPage=24&maxValuesPerFacet=1000&page=0&facets=%5B%22_language%22%2C%22_template%22%2C%22hierarchical%20industries.lvl0%22%2C%22_resource_type%22%2C%22solutions%22%5D&tagFilters=&facetFilters
2024-04-18 17:16:51 UTC	438	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 18 Apr 2024 17:16:51 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 264146 Connection: close X-Alg-PT: 1 Accept-Encoding: deflate, gzip Cache-Control: no-store Access-Control-Allow-Origin: * Timing-Allow-Origin: * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Disposition: inline; filename=a.txt
2024-04-18 17:16:51 UTC	3658	IN	Data Raw: 7b 22 72 65 73 75 6c 74 73 22 3a 5b 7b 22 68 69 74 73 22 3a 5b 7b 22 5f 69 64 22 3a 22 7b 33 31 35 46 35 45 39 42 2d 43 30 43 34 2d 34 44 45 39 2d 38 35 31 36 2d 34 33 44 41 43 43 35 43 30 35 43 37 7d 22 2c 22 5f 6c 61 6e 67 75 61 67 65 22 3a 22 65 6e 2d 55 53 22 2c 22 5f 74 65 6d 70 6c 61 74 65 22 3a 22 7b 33 35 31 38 33 39 44 45 2d 30 41 41 30 2d 34 34 38 41 2d 38 38 33 32 2d 32 34 32 39 32 38 32 43 31 42 37 38 7d 22 2c 22 5f 66 75 6c 6c 70 61 74 68 22 3a 22 2f 73 69 74 65 63 6f 72 65 2f 63 6f 6e 74 65 6e 74 2f 6c 6e 72 73 2f 68 6f 6d 65 2f 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 2f 63 61 73 65 2d 73 74 75 64 79 2f 32 30 32 34 2f 30 33 2f 32 36 2f 31 35 2f 31 36 2f 67 65 6f 6c 6f 63 61 74 69 6f 6e 2d 64 61 74 61 2d 69 73 2d 6b 65 79 2d 74 Data Ascii: {"results":[{"hits":[{"_id":"{315F5E9B-C0C4-4DE9-8516-43DACC5C05C7}","_language":"en-US","_template":"{351839DE-0AA0-448A-8832-2429282C1B78}","_fullpath":"/sitecore/content/lnrs/home/insights-resources/case-study/2024/03/26/15/16/geolocation-data-is-key-t
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 20 41 20 47 72 65 73 68 61 6d 20 28 4f 52 29 20 50 6f 6c 69 63 65 20 44 65 70 61 72 74 6d 65 6e 74 20 43 61 73 65 20 53 74 75 64 79 20 20 20 20 62 79 20 4a 61 6e 65 20 44 6f 65 20 53 6d 69 74 68 2c 20 44 61 74 61 20 41 6e 61 6c 79 73 74 20 53 70 65 63 69 61 6c 69 73 74 2c 20 4c 65 78 69 73 4e 65 78 69 73 20 20 3c 72 20 2f 3e 20 20 20 20 43 61 73 65 20 53 74 75 64 79 20 53 75 62 20 54 69 74 6c 65 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 52 65 6c 61 74 65 64 20 52 65 73 6f 75 72 63 65 73 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 Data Ascii: A Gresham (OR) Police Department Case Study by Jane Doe Smith, Data Analyst Specialist, LexisNexis <r /> Case Study Sub Title <r /> Related Resources <r /> <r /> <r />
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 6e 63 65 20 77 61 73 20 69 64 65 6e 74 69 66 69 65 64 20 6e 65 61 72 6c 79 20 74 68 72 65 65 20 79 65 61 72 73 20 6c 61 74 65 72 20 74 6f 20 72 65 73 6f 6c 76 65 20 74 68 69 73 20 63 6f 6d 70 6c 65 78 20 63 61 73 65 2e 5c 6e 49 6e 20 74 68 69 73 20 63 61 73 65 20 73 74 75 64 79 20 79 6f 75 20 77 69 6c 6c 20 6c 65 61 72 6e 20 61 62 6f 75 74 20 47 72 65 73 68 61 6d 20 50 6f 6c 69 63 65 20 44 65 70 61 72 74 6d 65 6e 74 e2 80 99 73 20 69 6e 76 65 73 74 69 67 61 74 69 76 65 20 65 66 66 6f 72 74 73 2c 20 69 6e 63 6c 75 64 69 6e 67 3a 5c 6e 5c 6e 20 20 20 20 43 6f 6d 70 6c 65 78 20 44 65 76 69 63 65 20 47 65 6f 6c 6f 63 61 74 69 6f 6e 20 41 6e 61 6c 79 73 69 73 5c 6e 20 20 20 20 54 68 65 20 56 61 6c 75 65 20 6f 66 20 53 75 62 6a 65 63 74 20 4d 61 74 74 65 72 20 Data Ascii: nce was identified nearly three years later to resolve this complex case.\nIn this case study you will learn about Gresham Police Departments investigative efforts, including:\n\n Complex Device Geolocation Analysis\n The Value of Subject Matter
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 3c 72 20 2f 3e 20 20 20 20 53 65 72 76 69 63 65 20 20 20 20 20 20 50 75 62 6c 69 63 20 53 61 66 65 74 79 20 43 72 69 6d 69 6e 61 6c 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 53 65 72 76 69 63 65 73 20 61 6e 64 20 43 6f 6e 73 75 6c 74 69 6e 67 20 66 6f 72 20 4c 61 77 20 45 6e 66 6f 72 63 65 6d 65 6e 74 20 62 79 20 53 75 62 6a 65 63 74 20 4d 61 74 74 65 72 20 45 78 70 65 72 74 73 2c 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 68 65 6c 70 20 79 6f 75 72 20 61 67 65 6e 63 79 20 77 68 65 6e 20 65 76 65 72 79 20 73 65 63 6f 6e 64 20 63 6f 75 6e 74 73 2e 20 20 20 4c 65 78 69 73 4e 65 78 69 73 c2 ae 20 50 75 62 6c 69 63 20 53 61 66 65 74 79 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 53 65 72 76 69 63 65 73 20 61 6e 64 20 43 6f 6e 73 75 6c 74 69 6e 67 20 20 3c Data Ascii: <r /> Service Public Safety Criminal Investigative Services and Consulting for Law Enforcement by Subject Matter Experts, available to help your agency when every second counts. LexisNexis Public Safety Investigative Services and Consulting <
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 78 70 65 72 74 73 2c 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 68 65 6c 70 20 79 6f 75 72 20 61 67 65 6e 63 79 20 77 68 65 6e 20 65 76 65 72 79 20 73 65 63 6f 6e 64 20 63 6f 75 6e 74 73 2e 20 20 20 4c 65 78 69 73 4e 65 78 69 73 c2 ae 20 50 75 62 6c 69 63 20 53 61 66 65 74 79 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 53 65 72 76 69 63 65 73 20 61 6e 64 20 43 6f 6e 73 75 6c 74 69 6e 67 20 20 3c 72 20 2f 3e 20 20 20 20 53 65 72 76 69 63 65 73 20 20 20 20 52 65 6c 61 74 65 64 20 52 65 73 6f 75 72 63 65 73 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 4d 6f 72 65 20 3c 72 20 2f 3e 20 20 20 20 20 52 65 6c 61 74 65 64 20 50 72 6f 64 75 63 74 73 26 6e 62 73 70 3b 20 20 20 20 20 3c 72 20 2f 3e 20 20 20 20 20 20 20 20 20 3c 72 20 Data Ascii: xperts, available to help your agency when every second counts. LexisNexis Public Safety Investigative Services and Consulting <r /> Services Related Resources <r /> Learn More <r /> Related Products  <r /> <r
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 65 72 76 69 63 65 73 20 7c 20 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 6f 70 65 6e 20 67 72 61 70 68 20 70 61 67 65 20 74 69 74 6c 65 22 3a 22 48 65 61 6c 74 68 20 50 6c 61 6e 20 55 73 65 73 20 52 65 66 65 72 65 6e 74 69 61 6c 20 44 61 74 61 20 54 6f 20 44 65 6c 69 76 65 72 20 43 72 69 74 69 63 61 6c 20 53 65 72 76 69 63 65 73 20 7c 20 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 22 2c 22 6f 70 65 6e 20 67 72 61 70 68 20 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 70 64 61 74 65 64 20 6d 65 6d 62 65 72 20 63 6f 6e 74 61 63 74 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 68 65 6c 70 73 20 43 6f 6d 6d 75 6e 69 74 79 20 43 61 72 65 20 50 6c 61 6e 20 62 65 20 6d 6f 72 65 20 65 66 66 65 63 74 Data Ascii: ervices \| LexisNexis Risk Solutions","open graph page title":"Health Plan Uses Referential Data To Deliver Critical Services \| LexisNexis Risk Solutions","open graph description":"Updated member contact information helps Community Care Plan be more effect
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 68 65 6c 70 65 64 20 74 68 65 6d 20 67 65 74 20 6f 6e 65 20 73 74 65 70 20 63 6c 6f 73 65 72 20 74 6f 20 74 68 65 69 72 20 6f 76 65 72 61 72 63 68 69 6e 67 20 67 6f 61 6c 20 6f 66 20 68 65 6c 70 69 6e 67 20 61 6c 6c 20 6d 65 6d 62 65 72 73 20 67 65 74 20 61 6e 64 20 73 74 61 79 20 68 65 61 6c 74 68 79 2e 20 20 5c 6e 52 65 61 64 20 74 68 65 20 43 61 73 65 20 53 74 75 64 79 20 74 6f 20 6c 65 61 72 6e 20 68 6f 77 20 6d 61 6e 79 20 61 64 64 69 74 69 6f 6e 61 6c 20 6d 65 6d 62 65 72 73 20 43 6f 6d 6d 75 6e 69 74 79 20 43 61 72 65 20 50 6c 61 6e 20 77 61 73 20 61 62 6c 65 20 74 6f 20 72 65 61 63 68 20 77 69 74 68 69 6e 20 74 68 65 20 66 69 72 73 74 20 35 20 6d 6f 6e 74 68 73 20 75 73 69 6e 67 20 6d 6f 72 65 20 61 63 63 75 72 61 74 65 20 63 6f 6e 74 61 63 74 20 Data Ascii: helped them get one step closer to their overarching goal of helping all members get and stay healthy. \nRead the Case Study to learn how many additional members Community Care Plan was able to reach within the first 5 months using more accurate contact
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 64 65 72 73 65 72 76 65 64 20 6d 65 6d 62 65 72 73 20 6f 66 20 74 68 65 69 72 20 63 6f 6d 6d 75 6e 69 74 79 2e 20 54 68 65 79 20 77 61 6e 74 65 64 20 74 6f 20 6d 61 6b 65 20 73 75 72 65 20 65 61 63 68 20 6d 65 6d 62 65 72 20 72 65 63 65 69 76 65 73 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 6e 64 20 72 65 73 6f 75 72 63 65 73 20 74 68 65 79 20 6e 65 65 64 20 74 6f 20 6c 69 76 65 20 68 65 61 6c 74 68 79 20 61 6e 64 20 66 75 6c 66 69 6c 6c 69 6e 67 20 6c 69 76 65 73 2e 20 20 5c 6e 54 68 65 20 43 61 73 65 20 53 74 75 64 79 20 65 78 70 6c 61 69 6e 73 20 77 68 79 20 43 43 50 20 70 61 72 74 6e 65 72 65 64 20 77 69 74 68 20 4c 65 78 69 73 4e 65 78 69 73 20 52 69 73 6b 20 53 6f 6c 75 74 69 6f 6e 73 2c 20 61 20 64 61 74 61 20 61 6e 61 6c 79 74 69 63 73 Data Ascii: derserved members of their community. They wanted to make sure each member receives the information and resources they need to live healthy and fulfilling lives. \nThe Case Study explains why CCP partnered with LexisNexis Risk Solutions, a data analytics
2024-04-18 17:16:51 UTC	4096	IN	Data Raw: 77 20 69 6e 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 73 22 3a 74 72 75 65 2c 22 5f 63 6f 6e 74 65 6e 74 22 3a 22 43 61 73 65 20 53 74 75 64 79 20 2d 20 4c 65 61 64 69 6e 67 20 43 72 65 64 69 74 20 55 6e 69 6f 6e 20 43 75 74 73 20 54 68 69 72 64 2d 50 61 72 74 79 20 46 72 61 75 64 20 69 6e 20 48 61 6c 66 2e 22 2c 22 63 61 74 65 67 6f 72 69 65 73 22 3a 5b 22 32 39 22 2c 22 31 33 22 2c 22 31 35 22 2c 22 30 35 22 2c 22 32 30 32 33 22 2c 22 63 61 73 65 2d 73 74 75 64 79 22 2c 22 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 22 5d 2c 22 75 72 6c 22 3a 22 2f 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 2f 63 61 73 65 2d 73 74 75 64 79 2f 6c 65 61 64 69 6e 67 2d 63 72 65 64 69 74 2d 75 6e 69 6f 6e 2d 63 75 74 73 2d 74 68 69 72 64 2d 70 61 72 74 Data Ascii: w in search results":true,"_content":"Case Study - Leading Credit Union Cuts Third-Party Fraud in Half.","categories":["29","13","15","05","2023","case-study","insights-resources"],"url":"/insights-resources/case-study/leading-credit-union-cuts-third-part

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
471	192.168.2.4	50376	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2234	OUT	GET /-/media/images/lnrs/icons/icon_filter%20png.png?h=20&iar=0&w=24&hash=AE854452B53B709A96D69C06C51A76EC HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	895	IN	HTTP/1.1 200 OK Connection: close Content-Length: 133 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="icon_filter png.png" Content-Type: image/png Etag: "O9EsOSZTmRZwiiWLAJ/NHuOtw+2gl+2jcdReKcakynY" Fastly-Io-Info: ifsz=133 idim=24x20 ifmt=png ofsz=133 odim=24x20 ofmt=png Fastly-Io-Served-By: vpop-kiad7010227 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560494 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210169-DFW, cache-pdk-kfty2130089-PDK X-Cache: HIT, MISS X-Cache-Hits: 1, 0 X-Timer: S1713460612.802864,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	133	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 14 04 03 00 00 00 65 9b e0 b0 00 00 00 0f 50 4c 54 45 ed 1c 24 ff ff ff fd e3 e4 ff fc fc fd e6 e7 fe b3 61 d6 00 00 00 31 49 44 41 54 18 d3 63 20 07 28 21 01 06 41 24 80 c6 11 76 82 a8 51 31 04 72 04 60 ba 19 89 e4 a0 1b 80 00 18 1c a0 42 90 22 28 47 00 ac 9d 78 0e 00 66 1f 0b f5 49 39 39 f0 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRePLTE$a1IDATc (!A$vQ1r`B"(GxfI99IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
472	192.168.2.4	50377	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2169	OUT	GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:51 UTC	788	IN	HTTP/1.1 200 OK Connection: close Content-Length: 164 Content-Type: image/png Etag: "yqok8lWwIK59bHUsY2MOT5H8KP3u6oSVXzC7bAPYWlk" Fastly-Io-Info: ifsz=164 idim=18x12 ifmt=png ofsz=164 odim=18x12 ofmt=png Fastly-Io-Served-By: img01-us-east4 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:51 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120112-DFW, cache-pdk-kfty2130060-PDK X-Cache: HIT, MISS X-Cache-Hits: 2, 0 X-Timer: S1713460612.826253,VS0,VE21 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:51 UTC	164	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 0c 02 03 00 00 00 12 7c 05 2f 00 00 00 0c 50 4c 54 45 00 00 00 ed 1f 27 ed 20 29 ed 20 29 91 3c 4d 6e 00 00 00 04 74 52 4e 53 00 fe 57 90 09 3c 60 97 00 00 00 43 49 44 41 54 08 d7 0d 8a b1 0d 00 21 0c c4 2c be 4a f1 63 64 1f 9a 00 05 05 a3 b0 44 46 60 3f 46 e0 5c 9c 4e 96 69 60 95 d8 b8 76 91 95 1c 45 c7 9b 49 5a 1c 05 25 62 00 29 0d 2e 0d 7f 47 7c 13 c4 85 07 05 b9 0c e5 30 3f 25 b3 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR\|/PLTE' ) )<MntRNSW<`CIDAT!,JcdDF`?F\Ni`vEIZ%b).G\|0?%IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
473	192.168.2.4	50378	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2177	OUT	GET /-/media/8c790672c01448b9ae07187b79fe2079.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:52 UTC	940	IN	HTTP/1.1 200 OK Connection: close Content-Length: 17804 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Trade Trafficing and Techonology-tile-270x170 png.png" Content-Type: image/png Etag: "lMWX6EbyRWzj+5AiqiVfkualY+Yy/NE/pY49q5/5r2g" Fastly-Io-Info: ifsz=17804 idim=270x170 ifmt=png ofsz=17804 odim=270x170 ofmt=png Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Io-Warning: Failed to shrink image Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551294 Date: Thu, 18 Apr 2024 17:16:52 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120084-DFW, cache-pdk-kfty2130048-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460612.986141,VS0,VE88 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0e 00 00 00 aa 08 03 00 00 00 6b 95 51 db 00 00 03 00 50 4c 54 45 03 33 65 02 2f 61 02 46 84 01 43 80 03 3b 74 02 38 71 03 3d 77 03 4c 8b 01 2c 5e 04 36 68 01 35 6d 01 2e 64 03 49 86 03 53 9a 04 56 a0 01 31 69 01 3f 7c 08 40 79 02 4d a1 24 37 70 03 52 ab 1c 4b 83 0a 3c 70 25 50 89 03 50 a7 1e 4e 88 1f 34 6d 02 5c ab 09 43 7c 04 4d 91 0b 3f 75 08 39 6b 46 68 a8 11 42 79 0f 46 7f 40 64 a4 03 57 ae 3b 60 9f 01 5b b3 02 4f 95 00 49 9d 15 49 82 03 6a c4 2c 57 94 10 30 67 31 5a 96 27 55 a9 0b 64 b4 2c 72 c3 37 5d 9a 15 5a a1 36 75 c4 12 55 9a 02 5e b7 01 58 a7 0f 28 56 03 63 b8 02 66 c1 06 5b a4 32 63 a8 1f 5d a5 53 72 b2 31 56 a9 38 5a ab 08 25 52 22 71 c4 4c 6c ae 44 6d ae 06 61 af 25 4b 82 5f 84 c6 3f Data Ascii: PNGIHDRkQPLTE3e/aFC;t8q=wL,^6h5m.dISV1i?\|@yM$7pRK<p%PPN4m\C\|M?u9kFhByF@dW;`[OIIj,W0g1Z'Ud,r7]Z6uU^X(Vcf[2c]Sr1V8Z%R"qLlDma%K_?
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 7e fb 20 21 3e 18 c0 47 26 7d 85 d7 d1 a6 d7 96 8b be 91 bc fe 7f 4b a9 54 89 cf a4 94 cd 66 13 c9 a2 30 d1 1b 97 78 48 2f 22 3e 44 8e 45 84 d8 78 12 89 44 3a 9b 45 08 0d c6 7c 50 c4 c6 a4 b4 bc 33 6c 74 1f aa ca 99 10 3a 9d 0e 95 21 39 d0 74 8c 8a 8d 99 99 81 01 36 b3 92 b4 74 40 ad 8b 66 ca c5 66 70 c1 90 58 b0 47 3a 10 82 92 08 e7 83 cd 6c 90 0d 45 74 74 64 a4 fb e0 a2 9f f7 53 e2 fd 68 4a f3 23 e8 18 c9 97 4a 7c e6 08 91 6c a4 5d ef 41 3c 84 b4 a6 c5 98 10 0f 01 f3 e1 5b 05 a8 8d 58 0c 23 f8 98 54 53 d8 50 15 29 4a 5f d0 61 bd 85 62 32 80 74 08 45 11 12 7c d0 4e 94 b3 17 cf 9e 3d ab 36 bc 8f a6 26 5c 58 38 7e 44 07 2e 4c 86 9d ad 27 39 45 ff e1 db 49 7d fd 8d fa a3 66 64 2a d3 d1 d3 33 35 a5 36 ae 8f 8e 01 36 7c 3a 62 d9 12 95 00 74 48 9d 25 06 2e 0d Data Ascii: ~ !>G&}KTf0xH/">DExD:E\|P3lt:!9t6t@ffpXG:lEttdShJ#J\|l]A<[X#TSP)J_ab2tE\|N=6&\X8~D.L'9EI}fd*3566\|:btH%.
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: d8 16 6a d3 61 32 6e 7a 9e ce cc 3c 7a f4 08 1d ea e3 b2 f7 01 36 e7 42 06 20 e3 e1 21 c3 74 50 fd 1a 68 29 61 81 4b 03 51 19 1e 16 70 53 ee b1 14 36 8a da 7c 93 b1 fe cc 64 46 b2 11 4f 4b e7 78 8f f5 2c c8 7c c3 42 e1 f9 63 f1 f9 38 60 e3 8e 07 0d 56 04 e7 e2 fe fd 5d 76 30 1f 6a 43 db d0 dc 1d b1 b1 be 8e 0b b3 51 f6 32 40 55 f8 28 3d 7d fa f4 11 88 8c 6b d7 b4 b5 a0 c3 60 68 41 c7 f0 b1 2e 29 f0 b0 0b 21 84 43 70 f3 0e 08 bd 47 c5 c2 d6 fa 0b ed 35 d5 48 c8 87 66 21 5d 9e 95 4a 0c 25 53 fd d2 48 08 4b 79 71 1c 16 05 a4 4c 90 06 e2 00 9c 39 3c df dc 94 96 0f db 80 0c 76 65 0e 56 94 ad ad fb c6 33 6f 04 19 0b 30 07 db db eb 22 63 1c 9c 0d 06 1e c3 82 a1 e6 50 a1 32 6e 89 0b e9 3a 44 47 ab d8 08 d3 8e 87 0f f5 00 f8 80 37 8c ca 49 3a 85 2d 5a ba 98 0d 5b Data Ascii: ja2nz<z6B !tPh)aKQpS6\|dFOKx,\|Bc8`V]v0jCQ2@U(=}k`hA.)!CpG5Hf!]J%SHKyqL9<veV3o0"cP2n:DG7I:-Z[
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: ea 4f 43 5a 16 a4 41 2d eb a8 c3 9a 46 10 1b 2e 1b e7 a0 95 c2 d5 e5 96 cb a2 42 9f 7f 1d 0b 32 0e 2b b5 c9 b0 eb ba 13 47 ac f7 34 21 95 91 00 ff d4 cb df f8 a5 fe 27 2e 60 2a ca 07 3e e4 c1 25 14 bc 08 41 8f 3a 72 cc 31 82 ea c7 0a 7b 2f 97 d1 51 49 ad 0e ba 52 64 18 7a e5 6c 80 76 2b 01 b3 61 e9 78 e7 33 5d b7 9a 8c 96 cb d0 ca 59 83 e1 c7 56 b0 60 18 a6 01 43 76 cf df af 53 19 b2 47 01 09 1c d8 97 5c f5 3a f0 d1 93 c9 f4 74 f4 65 f1 91 cd 33 2d 55 72 58 90 29 63 91 22 8c 33 e4 22 23 e2 e5 cb 97 26 e2 a5 a1 37 d1 b1 cf 46 64 85 32 fd b3 9f 89 80 9c 6e ff ae 36 70 81 8c 4f 55 86 d9 10 17 2d 62 24 b2 81 0b af e3 b0 c7 62 21 37 b9 c7 72 85 5b 41 87 d9 00 5f 79 8a c2 78 13 6e fb d4 04 1d 3d da 7b a4 e4 fb a3 2c 88 90 04 07 79 9e c9 c6 4a 96 ed f9 e6 fa ce Data Ascii: OCZA-F.B2+G4!'.`*>%A:r1{/QIRdzlv+ax3]YV`CvSG\:te3-UrX)c"3"#&7Fd2n6pOU-b$b!7r[A_yxn={,yJ
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: a1 d5 6c 9e 2e 57 cb d5 2b f5 72 42 b4 10 2b ed 97 1f cb d5 f6 c7 7b 6c 60 09 1b 84 90 65 eb 49 52 7f 29 2f 5f 5e b6 3f d6 89 8b cd a1 4b 83 c5 1f e7 25 23 a8 00 bd 74 64 96 88 48 4f 15 23 98 d1 e1 04 13 9a 7c 05 c1 07 c8 07 46 32 4a 64 85 48 91 83 20 e4 04 2e ce 71 a3 3d 77 c8 03 c5 ea 14 53 d3 93 c7 6b 1f 3f 7e dc 7c dc 3c 6d 34 b5 4e 64 01 01 89 05 4e fd 63 9d 2d f2 5c 53 78 39 5d 36 3f 1f eb a8 c0 45 94 01 c8 b0 9e 2f 66 af 3d c1 62 02 1b 51 84 91 8d 0e 4c 88 a0 23 38 49 73 cc d1 86 b0 00 61 86 48 f7 d5 d0 0a 4e 2e d0 1a f9 f1 fd dd 09 b3 71 c1 ef 37 1b 89 89 d7 6b 5b 6b 23 5c 79 a8 70 25 20 25 8e 2b 91 1b 41 f1 25 43 94 b9 98 88 9f ba f0 41 2c 60 36 80 95 72 81 d4 86 f9 88 2a a2 16 67 5c c6 48 d0 b1 3c ae c4 d0 b4 ea f8 fc ab 0d 4d d1 86 16 a7 ab d6 Data Ascii: l.W+rB+{l`eIR)/_^?K%#tdHO#\|F2JdH .q=wSk?~\|<m4NdNc-\Sx9]6?E/f=bQL#8IsaHN.q7k[k#\yp% %+A%CA,`6r*g\H<M
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: bf 41 c7 1c fd 9d 39 4a 99 c9 19 5b 7c c5 11 ae 1d 2b 91 10 a0 35 bd f6 9e 49 5a 73 63 db 33 51 66 09 68 f8 b7 ee 69 47 0c bb c7 61 24 a5 a6 29 0b 35 40 4d d1 39 53 71 3f b5 32 b5 fb 74 29 71 f4 a5 ff 9b 2d 71 4d f2 07 fa 4c e4 33 1d 31 11 c8 12 30 b6 85 9a 99 39 4a 5a ab 14 0a fc f7 5b f4 07 d2 e0 ca d5 58 c6 0c b4 d2 b1 50 3e 29 a9 c9 0f 49 2e c7 e7 50 03 f6 44 13 11 bf eb 4b 67 6f 66 1a 9d 00 9d 4d b8 b2 c2 83 54 ac 2a 00 16 96 14 96 64 99 e8 b0 0e cc a1 48 5a 85 4d 87 43 96 90 66 6c b9 8e 2d 2a f5 18 be 00 1b e4 f9 96 fe 6d 1a 35 95 e2 ea 61 9d 47 ee 5a 10 6f d8 83 7f 2f a2 ca 16 07 91 a0 05 1a db 75 ef ef 1e 4a 70 c4 19 9f 6a 19 23 b9 8e be 47 90 11 31 1d f8 20 29 a4 60 82 64 69 64 c1 52 6d 95 4a a5 a5 58 c9 50 58 55 58 b0 64 29 1f 44 49 5b 4a c7 a2 Data Ascii: A9J[\|+5IZsc3QfhiGa$)5@M9Sq?2t)q-qML3109JZ[XP>)I.PDKgofMTdHZMCfl-m5aGZo/uJpj#G1 )`didRmJXPXUXd)DI[J
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 56 02 b6 6c ad 07 ab 36 56 2a 98 d0 4d 5b a7 d4 cd 61 71 fe 99 3d 09 3b ac 6d 28 d2 e1 1f 64 f1 50 f1 d2 83 07 d9 41 77 2a 78 90 11 90 74 3b f8 7d 2f fd b3 4d f1 93 97 97 ad eb e8 f2 d9 ef f7 d2 bc f7 fa 10 1d 54 06 ea e0 d5 ab b4 e0 0b b2 fd 0b 0e bb 1f de bd 3e bc a4 0f 3e 1a 4d ec 1a 27 eb 23 04 20 18 de f1 f6 5e 74 6a 89 69 fb 81 6e 47 af 10 f0 f0 ab c2 a3 47 51 70 5f d6 76 c8 dd d2 71 02 2e ee 45 4e 35 38 f9 2e 74 32 32 d4 13 3a 42 5d c0 48 a7 d4 29 a5 c7 f6 ee 8b 46 0f 1f 12 3a f7 25 f7 25 c9 9b ab 9b 79 6d 0a 71 31 f9 24 e5 e6 c6 75 ed 8e ae 69 8f 46 e4 e3 c1 96 8c ff 5b 81 08 14 6c 00 16 9a 70 f5 9a e3 50 c1 03 36 8e 0a 71 85 7d 7e df 0d 17 13 de 1a a6 f1 62 b0 d6 08 f1 11 59 2d e4 80 f3 36 19 ce ab 7e af ca 1a 23 3a 4a d5 a1 21 51 a4 f9 41 b8 fd Data Ascii: Vl6VM[aq=;m(dPAwxt;}/MT>>M'# ^tjinGGQp_vq.EN58.t22:B]H)F:%%ymq1$uiF[lpP6q}~bY-6~#:J!QA
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: be 28 06 e4 ea e3 ac 38 67 c8 a0 fc 8c bf 0d c8 0f 2f aa 6a 85 d0 77 5e 8e af 26 66 14 b4 98 70 05 58 cc d2 8e 71 4d 62 0b 01 0e 11 66 b1 30 48 33 86 6b c0 1a c9 93 ac 43 ee 7f d3 69 9f 90 4e 87 fc 6c 78 28 14 21 10 27 76 68 20 4e 9c 66 27 a5 9d 80 f3 86 08 d8 a0 ec 5a 8b e9 9a d9 09 81 22 cf 0b c5 cf 0b 9e f4 3b 9e e8 08 45 90 84 69 c1 f7 d8 e7 43 8e 4a 11 1a 8a 52 94 cd a1 37 4e 92 60 84 b8 20 b9 5b 64 13 09 e5 12 c3 c8 58 73 50 d7 12 cf 29 81 40 0c 19 61 44 c6 e7 f8 42 20 37 81 e4 2b 14 e8 0c e6 82 1a 5f eb a3 1e 1d 01 8f a2 56 90 2c 1e fc 32 d7 02 29 c4 a8 ea e0 e0 20 74 5a 11 1e 28 5c 11 3b ea 86 0d d2 3d d2 29 0c ef 18 be 8c c9 18 1d ea b3 c5 6e d2 c7 1c 39 05 1f a0 ee 04 38 cd 90 62 6e 73 98 9d 3b 9d 90 02 7a e9 86 02 ea b5 e9 0f 65 67 16 da 58 15 Data Ascii: (8g/jw^&fpXqMbf0H3kCiNlx(!'vh Nf'Z";EiCJR7N` [dXsP)@aDB 7+_V,2) tZ(\;=)n98bns;zegX
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 15 d8 40 07 2a 30 e2 c0 84 c7 74 cc 6e 8e a6 52 9c 01 7e d0 50 1f 1e 3a cb 1c 42 d8 e0 e7 75 cf 11 1e 80 11 84 60 44 1b 1a a9 27 93 b1 17 92 b9 c6 0b 44 87 a7 29 82 de 45 21 35 c7 50 23 82 8d 26 aa 83 8a 74 20 3c a2 b1 51 3b 51 b8 0f d8 65 58 f0 54 b0 a1 d3 af c9 8a 74 8e 4a a1 7c d0 07 f7 f4 7c d5 c7 b5 8f d6 93 f1 78 f5 a4 0c 26 d6 63 2c 3a 34 53 3c de 47 65 7f 71 f1 1c be f6 f8 c4 ee f2 d0 98 48 b0 3d 60 83 07 f8 48 9e c9 6c 4d 6c 99 12 72 d0 5e 90 11 c4 a6 67 3a 9e 32 55 73 ff c6 98 32 a1 9d c4 98 30 1d d2 78 57 65 b4 e1 ac 31 9a 82 8a e2 ae 89 cc ab 99 57 dd 50 aa 36 1e 02 74 90 5d 80 83 f6 91 ee a5 0b 5a 5b 8f 1f 6f 5f d8 ae 8e e0 c1 8f 20 83 e7 4d 8d cf cf 8f cb 57 c8 75 86 d1 01 a6 03 87 1a 1e 14 a8 fc 55 48 25 5d 0f b5 b6 b5 2e 2c d4 6a e5 b1 ca Data Ascii: @*0tnR~P:Bu`D'D)E!5P#&t <Q;QeXTtJ\|\|x&c,:4S<GeqH=`HlMlr^g:2Us20xWe1WP6t]Z[o_ MWuUH%].,j
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: ac 4f 2d a3 c3 60 98 24 1f 26 62 44 13 97 1d e5 3b fa e1 e8 d1 8b b4 b7 cd d2 4e 8f 78 81 a0 db 28 37 c6 58 d1 49 3a 22 50 41 4c 28 29 29 80 0d 87 8a 18 a1 1c a6 bb 7d 60 ff cc 33 cf 87 fe 53 df ff 06 df 37 16 d0 f1 1f a4 87 6a 7c 5a 6e a8 af 9c 48 84 6e 5d be bd 3c 66 d1 e1 fb 0b 71 5a 5d d4 90 03 fd 3e f1 29 d6 17 43 d1 4c c0 8c 4a 71 7d c7 cb 70 83 46 b2 c6 c1 14 76 96 96 b2 e8 10 b4 f1 05 cb 24 9a ad 6d d7 45 4c e0 de 58 a1 c0 29 8b ca 18 23 4f 7a 1d a0 26 fe 83 ee c1 d2 c9 f6 f6 b0 50 ff fc d7 df 7e fb f5 fb 44 b1 85 c0 09 44 fe bd 8e e2 fc ba fe c8 c0 22 93 a1 bd 6f f6 7a f3 63 e0 62 04 26 85 f2 69 3e af 7e c9 8a 35 2b 9b dd 18 3e 71 3a 9b 9c 55 15 de 88 d3 a0 95 25 23 9a 4c 24 05 0e d3 09 74 18 ce 84 2e 68 75 61 52 10 21 05 2c 90 b8 cb 6c 50 c6 14 Data Ascii: O-`$&bD;Nx(7XI:"PAL())}`3S7j\|ZnHn]<fqZ]>)CLJq}pFv$mELX)#Oz&P~DD"ozcb&i>~5+>q:U%#L$t.huaR!,lP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
474	192.168.2.4	50335	151.101.12.157	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	560	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:51 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Thu, 18 Apr 2024 17:16:51 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-pdk-katl1840029-PDK X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-18 17:16:51 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
475	192.168.2.4	50381	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:51 UTC	2189	OUT	GET /-/media/images/lnrs/heroes/our_technology_hero%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:52 UTC	876	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11935 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="our_technology_hero jpg.jpg" Content-Type: image/jpeg Etag: "+XBMI4uSHaRz0C+h7CP0qX69Yx7Ag6RdIq8+6KV8ryw" Fastly-Io-Info: ifsz=12068 idim=1230x291 ifmt=jpeg ofsz=11935 odim=1230x291 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560809 Date: Thu, 18 Apr 2024 17:16:52 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120114-DFW, cache-pdk-kfty2130059-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460612.138846,VS0,VE88 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 00 00 00 a1 6b 65 f4 4a 2c 85 f3 e7 98 80 07 4e fe 41 ef 78 ba 9e 97 3d 95 05 ce 86 27 41 c7 3e 88 79 e7 78 70 9d a1 ca e8 37 9d 1a 00 a4 29 38 f6 c1 c2 74 86 1d 29 c9 de 9e 77 ab 47 93 5e b1 e5 df a0 72 de 84 a8 57 3e 67 a3 3e 6c 1e 8e 7c a1 a9 05 80 00 00 00 00 00 00 28 bd 7b 9c bb 50 32 5e 7c f9 1a c4 00 00 00 00 00 28 3b 98 f4 da 08 31 39 97 82 00 00 00 00 0a 2b 63 d2 d0 20 e5 38 97 98 00 00 00 0a 2a 97 d3 9e a2 58 67 cd 30 58 00 00 00 0d 64 77 df 94 7b 6f 8b 47 b1 e6 d1 e8 71 d9 b6 29 a6 69 41 14 65 a1 96 86 5a 19 68 45 02 15 9c 9d 1c 72 7a 1e 5c 9e bc f9 21 e9 c7 18 74 ce 45 40 00 00 00 00 00 00 00 00 01 7d 3e 7f 59 b0 08 73 f3 eb 98 80 00 00 00 00 02 8b bf 49 8e a0 4c 1a e7 9e 26 b9 80 00 00 00 02 83 46 bd 2d 00 3c fd fc a7 39 60 00 00 00 28 b3 43 Data Ascii: keJ,NAx='A>yxp7)8t)wG^rW>g>l\|({P2^\|(;19+c 8*Xg0Xdw{oGq)iAeZhErz\!tE@}>YsIL&F-<9`(C
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 5e 67 9f 9d 80 00 00 00 00 00 00 00 00 00 00 00 00 02 9a f4 3a 92 80 85 73 e4 77 e7 c3 27 4e 70 58 00 00 00 00 00 00 02 92 eb d0 70 f4 6e 92 82 4e 27 5e 1c e1 64 00 00 00 00 35 04 01 7b 1c fd 3b a0 85 c4 e0 6b 9e 60 00 00 00 28 80 02 82 a8 b6 89 d7 26 26 e1 89 a1 95 19 51 16 00 00 94 45 11 45 f6 70 f4 80 4f 37 6f 29 90 00 00 00 00 00 00 00 00 00 00 00 05 11 42 ca 7a ba 72 87 6c f9 f9 9d f9 62 15 00 00 00 00 00 00 00 16 29 2e bb 9c 3b f5 a4 a0 4e 67 4e 5c 70 6b 30 00 00 00 00 29 2a 02 93 5d 3d 06 3a 80 c1 ae 39 e4 5c c0 00 00 00 28 80 02 82 a8 b6 83 47 78 19 c0 67 21 01 20 58 12 84 00 00 28 7a f6 00 79 fc e0 00 00 00 00 00 00 00 16 00 00 01 41 28 01 68 01 72 12 00 00 00 00 00 00 00 00 01 7a 07 aa 80 08 1c 78 86 60 00 00 00 00 05 04 05 ee 1e 80 01 8e 01 cf Data Ascii: ^g:sw'NpXpnN'^d5{;k`(&&QEEpO7o)Bzrlb).;NgN\pk0)*]=:9\(Gxg! X(zyA(hrzx`
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 02 cf 98 d4 25 14 76 4a 3d 60 8e 43 5f 6a 65 e9 99 7a 66 5e 85 7c af ff 00 ff c4 00 28 10 01 00 02 01 03 05 00 03 01 00 02 03 00 00 00 00 01 00 11 20 10 30 51 21 31 40 41 61 50 71 81 60 91 d1 b1 c1 e1 ff da 00 08 01 01 00 01 3f 21 37 12 26 ea d9 0b dc b2 56 3a 0b 8f d4 b9 79 d1 07 0f 74 4d 81 b0 0c 10 4b 62 f8 17 c0 0c 1d a0 6d 0b 17 7c b3 05 8b 17 65 5e ea 44 dc 7b 24 b2 52 56 52 57 89 fa 4b 4b 4b cb cb f3 3f 6d 17 bb 6e 1d e5 52 b1 13 39 65 56 aa 1a 0b 2f c0 e6 c2 f7 00 86 02 f0 ba 8b be 0b 81 5a ac 58 b6 96 f2 4a db 1a 83 9b 2d a6 b2 98 0b 96 cb 7c 21 a9 66 02 c8 35 13 39 60 06 b7 52 88 a6 5f 80 0b 2a ef 82 d6 83 b6 21 a8 5e 17 51 77 c0 b8 2b 05 8b 6c 62 dd 63 a5 6d 2d 81 d7 cc 55 89 64 bd f6 87 38 01 80 11 6c bf 05 58 38 16 b4 16 f7 08 68 17 85 d4 5f Data Ascii: %vJ=`C_jezf^\|( 0Q!1@AaPq`?!7&V:ytMKbm\|e^D{$RVRWKKK?mnR9eV/ZXJ-\|!f59`R_*!^Qw+lbcm-Ud8lX8h_
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 5a 17 95 95 94 94 94 71 b3 61 ee 21 1e 24 5b ee 5c bd ae a0 77 9e b1 2e 52 c1 40 18 81 11 f7 2f c3 56 09 a2 0c a2 55 68 5c ec 7e 18 a9 3f f3 ad 58 95 90 5c ab be 25 10 2f fd 37 ed 3d c1 c0 c3 ee 52 59 bf 44 a9 47 12 9c 4a 71 29 c4 a7 13 e1 29 c4 a7 12 8e 25 4a de a3 de 92 f8 8b 7b 97 2f 79 7a df b3 00 31 49 15 f1 2a 73 ca 0c 1c 7a 4b 96 8b 80 68 74 f5 1c 2a 09 60 ea ba 8d bb 4e 86 d8 8b c4 b1 ee 5e 12 7d 69 a4 b3 ce a7 3a 55 e2 5f 89 f4 96 e6 5c bf 08 69 dd a6 00 62 24 46 5f 88 b0 38 16 a2 9e d1 04 5b d6 ed 4a d0 12 a3 18 2c 68 98 2c 06 a5 a8 ab da 28 7e c5 7b bc 9b 96 97 c4 6b 2b 29 2c 96 6c dc b9 67 32 9c e9 52 57 89 fa cb cb 73 2f ce 8b 96 cb f2 1e d5 4a ac 44 88 f8 a1 73 96 50 60 ca f3 17 b6 ce 8d 5f d6 96 c0 0d 56 a7 58 1e 92 2d fe 06 d9 6c b4 bc bc Data Ascii: Zqa!$[\w.R@/VUh\~?X\%/7=RYDGJq))%J{/yz1IszKht`N^}i:U_\ib$F_8[J,h,(~{k+),lg2RWs/JDsP`_VX-l
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 43 1c 72 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c e3 88 04 c1 01 14 53 cf 3c f3 cf 3c f2 cf 0c 00 88 3c f3 cc 3c 42 c6 08 40 c9 1c f3 cf 38 33 c9 20 73 8f 3c f3 cf 3c f3 cf 30 01 0f 3c f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c e2 4f 30 00 85 24 73 cf 3c f3 cf 3c f1 8d 10 10 49 1c f3 cf 00 d3 cf 2c 81 8d 1c f3 cf 38 73 c9 3c 13 48 38 43 8f 3c f3 cf 28 01 0f 3c f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 3c e0 88 04 33 07 1c f3 cf 3c f3 cf 3c e2 8a 20 40 8b 3c f3 cf 3c c3 cd 30 11 49 3c f3 cf 38 73 c9 3c d3 c0 38 a3 8d 3c f1 cf 3c 20 0a 3c f3 cf 3c f3 cf 3c f3 cf 3c f3 cf 38 f0 cb 04 92 cf 3c f3 cf 3c f3 cf 38 a2 08 0c 32 cf 3c f3 cf 38 93 8f 20 11 0b 3c f3 cf 38 73 c9 3c c0 8f 1c 02 07 00 83 cf 3c 80 00 1c f3 cf 3c f3 cf 3c f3 c7 3c f3 c0 3c f0 00 00 73 cf 3c f3 cf 3c f3 cf 3c 70 Data Ascii: Cr<<<<S<<<<B@83 s<<0<<<<<O0$s<<I,8s<H8C<(<<<<<3<< @<<0I<8s<8<< <<<<8<<82<8 <8s<<<<<<s<<<p
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 2c 7f 10 d0 72 96 fd c1 ed 53 6a 7d 44 74 b7 dc 69 aa 25 8e f1 2e 30 c3 09 12 54 a8 10 3a 84 3b 6c 20 a6 32 a5 4a 95 d2 a5 4a 95 2b a5 41 3a 0b 09 88 d6 03 59 a2 10 03 43 b0 0b 41 30 41 6c d0 1a 23 67 29 8a fc 40 88 e0 c4 c8 b9 7b 00 b5 96 e0 68 99 b1 15 5c f9 c2 2b 41 0d c6 5d de cd a2 03 6e b1 1f 5e 60 8c 51 a6 ec 00 03 1d 44 5c 6d 97 48 ee 8d 3c 64 20 44 20 21 0a 08 c3 a0 0a b4 47 c0 6b fb 44 5d 98 01 b3 86 62 dc bd c1 b2 c4 65 f3 dc eb 04 41 a2 3e e2 3c 31 0d 51 10 e6 30 c5 44 95 02 08 21 dc 96 4c cb 13 c0 68 13 f8 82 eb 4f b8 3c c3 6a c0 eb 98 68 08 01 a0 76 ea 42 0b 01 66 f4 04 6c da 98 ad b1 17 9f 89 51 4a 05 84 67 f5 80 14 00 75 50 2d 98 03 2c 72 d6 29 f3 90 36 23 36 e0 dd 86 d0 75 50 2d 8b 81 a4 07 96 21 6b e5 20 47 28 d3 76 02 01 d4 05 cd 42 e2 Data Ascii: ,rSj}Dti%.0T:;l 2JJ+A:YCA0Al#g)@{h\+A]n^`QD\mH<d D !GkD]beA><1Q0D!LhO<jhvBflQJguP-,r)6#6uP-!k G(vB
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: ac 29 35 02 c8 46 1f c4 a8 6c 3b 1e cc 1d d9 c3 0f b5 0f 0c 0d 45 38 5f e9 96 81 62 6a 3a 9d e2 22 2d 30 c8 3b 4e 34 7f 9e e2 21 d4 9b 0f ea 69 59 88 64 4e da 81 03 a2 a5 74 b9 89 e9 29 ff 00 0e 0e 93 46 41 cb 88 ae b6 fa 99 80 5f ee 01 a1 d8 08 3b 69 06 2f 73 0c a9 50 20 4a 96 84 1e d0 80 81 99 5d 12 ca 88 a3 93 ab 2a 75 6b ea 64 0d 9d 5c 7a ec c8 dc 1d 11 15 6a 3a 3c c5 0b b0 fa cc d3 ff 00 f5 00 0c 1d 54 0b 59 b1 9b 32 5a b7 62 21 97 e0 84 05 01 6b 88 0c ea ee ff 00 d4 00 c1 2a 51 1d 9a 8d 88 96 9d 22 da c5 f4 c2 34 e3 fb 43 9b ea f7 e9 2a 8d 98 14 2a 4d 06 d3 3a 45 e4 75 ed 00 ab 11 5f 41 90 76 8e b4 0f f3 de 76 6a 04 66 48 96 96 44 b5 25 40 b8 52 53 89 aa 54 62 a5 4a ec c3 2a 54 a6 53 f3 6a 68 49 fc 44 6b 47 dc 16 a5 7f 50 7c 03 ea 51 c7 76 ac 27 fb Data Ascii: )5Fl;E8_bj:"-0;N4!iYdNt)FA_;i/sP J]ukd\zj:<TY2Zb!kQ"4C*M:Eu_AvvjfHD%@RSTbJTSjhIDkGP\|Qv'
2024-04-18 17:16:52 UTC	903	IN	Data Raw: 0d 47 fa 88 95 6d 7c 4b 7f 1a de 59 ee 61 cd 29 de 03 bc 3a 01 50 ec 00 ac b8 81 2e e6 5b dc bc b4 b7 13 ea 8f 24 b3 79 6f 3f 3e f5 d6 6d 72 e8 8f f7 2f 14 60 20 51 73 4f fa 86 80 a8 1d db 80 18 3b 14 35 66 f5 6c c3 18 23 67 2d fc 1b ea 11 dd 28 e6 01 82 de 7b 00 5a c5 b0 60 e6 5e 56 5e 62 2b 5e f2 90 e8 30 c2 dc 41 c4 ba 86 64 de a7 ad a2 aa ec 6c 96 d2 68 d8 81 5d 4c 6b 29 6d c1 00 5f f6 c6 d6 df 08 47 b0 f9 24 a7 23 b2 b5 0c 5b 7f c3 92 81 1a e6 1c 3b c0 b5 bd 25 c2 da 02 0d d5 af a8 0d 07 6a 06 5a 98 43 2c dd e8 8b f1 59 a0 59 98 c9 e2 00 14 14 75 50 33 03 03 2c 47 57 1c 44 c0 c1 df 60 1a 47 31 43 93 a5 cb 4b 7b 13 78 81 b1 6b 83 93 97 aa d4 ab 06 b0 37 63 e1 89 cf 88 37 ed 09 5d 2a e5 7c 66 40 40 20 ea b4 59 79 fe 20 26 a8 d0 34 c1 bd 10 2f 7d c2 5a Data Ascii: Gm\|KYa):P.[$yo?>mr/` QsO;5fl#g-({Z`^V^b+^0Adlh]Lk)m_G$#[;%jZC,YYuP3,GWD`G1CK{xk7c7]*\|f@@ Yy &4/}Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
476	192.168.2.4	50382	104.18.16.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	721	OUT	GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1 Host: js.qualified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"e4cfb76386f1f61f399d299928b57ee3"
2024-04-18 17:16:52 UTC	702	IN	HTTP/1.1 304 Not Modified Date: Thu, 18 Apr 2024 17:16:52 GMT Connection: close Cache-Control: public, max-age=14400 Etag: W/"e4cfb76386f1f61f399d299928b57ee3" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains Vary: Accept Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: aabb4de7-5644-9214-8387-05ec8879c57d X-Runtime: 0.024407 X-Xss-Protection: 1; mode=block CF-Cache-Status: MISS Expires: Thu, 18 Apr 2024 21:16:52 GMT Server: cloudflare CF-RAY: 87664e1a781baddb-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
477	192.168.2.4	50383	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	842	OUT	GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=8a1d4bfb-8e0f-4262-9de0-dd25bb89bc20&ca=2024-04-18T17%3A16%3A50.864Z&tz=Europe%2FZurich&bis=5&referrer=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=true HTTP/1.1 Host: ws.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://risk.lexisnexis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: FnUostwpNIlah8nk9DnP4w== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
2024-04-18 17:16:52 UTC	259	IN	HTTP/1.1 400 Bad Request Content-Length: 12 Content-Type: text/plain; charset=utf-8 Date: Thu, 18 Apr 2024 17:16:52 GMT Sec-Websocket-Version: 13 Server: nginx Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff Connection: close
2024-04-18 17:16:52 UTC	12	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 0a Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
478	192.168.2.4	50385	74.125.138.104	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	664	OUT	GET /js/bg/IsHUla7t4cK5kOAb6cwcBiPQ5HnUjMTZuq5wUJJd2UM.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.recaptcha.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:52 UTC	811	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18283 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 18 Apr 2024 07:50:44 GMT Expires: Fri, 18 Apr 2025 07:50:44 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 33968 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:52 UTC	444	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 46 2c 59 29 7b 69 66 28 28 46 3d 28 59 3d 78 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 21 59 29 7c 7c 21 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 46 3b 74 72 79 7b 46 3d 59 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 67 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 67 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 67 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(F,Y){if((F=(Y=x.trustedTypes,null),!Y)\|\|!Y.createPolicy)return F;try{F=Y.createPolicy("bg",{createHTML:g,createScript:g,createScriptURL:g}
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 65 61 74 65 53 63 72 69 70 74 28 55 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 55 29 7b 72 65 74 75 72 6e 22 22 2b 55 7d 7d 28 78 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 46 68 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 46 2c 78 2c 67 29 7b 74 72 79 7b 67 3d 59 5b 28 28 46 7c 30 29 2b 32 29 25 33 5d 2c 59 5b 46 5d 3d 28 59 5b 46 5d 7c 30 29 2d 28 59 5b 28 28 46 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 67 7c 30 29 5e 28 31 3d 3d 46 3f 67 3c 3c 78 3a 67 3e 3e 3e 78 29 7d Data Ascii: eateScript(U)}:function(U){return""+U}}(x)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Fh=function(Y,F,x,g){try{g=Y[((F\|0)+2)%3],Y[F]=(Y[F]\|0)-(Y[((F\|0)+1)%3]\|0)-(g\|0)^(1==F?g<<x:g>>>x)}
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 67 2c 66 29 7b 66 6f 72 28 46 3d 28 67 3d 28 66 3d 46 5b 33 5d 7c 30 2c 30 29 2c 46 5b 32 5d 7c 30 29 3b 31 36 3e 67 3b 67 2b 2b 29 59 3d 59 3e 3e 3e 38 7c 59 3c 3c 32 34 2c 59 2b 3d 78 7c 30 2c 66 3d 66 3e 3e 3e 38 7c 66 3c 3c 32 34 2c 59 5e 3d 46 2b 33 38 36 39 2c 66 2b 3d 46 7c 30 2c 78 3d 78 3c 3c 33 7c 78 3e 3e 3e 32 39 2c 46 3d 46 3c 3c 33 7c 46 3e 3e 3e 32 39 2c 66 5e 3d 67 2b 33 38 36 39 2c 46 5e 3d 66 2c 78 5e 3d 59 3b 72 65 74 75 72 6e 5b 78 3e 3e 3e 32 34 26 32 35 35 2c 78 3e 3e 3e 31 36 26 32 35 35 2c 78 3e 3e 3e 38 26 32 35 35 2c 78 3e 3e 3e 30 26 32 35 35 2c 59 3e 3e 3e 32 34 26 32 35 35 2c 59 3e 3e 3e 31 36 26 32 35 35 2c 59 3e 3e 3e 38 26 32 35 35 2c 59 3e 3e 3e 30 26 32 35 35 5d 7d 2c 50 38 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 46 2c 78 29 Data Ascii: g,f){for(F=(g=(f=F[3]\|0,0),F[2]\|0);16>g;g++)Y=Y>>>8\|Y<<24,Y+=x\|0,f=f>>>8\|f<<24,Y^=F+3869,f+=F\|0,x=x<<3\|x>>>29,F=F<<3\|F>>>29,f^=g+3869,F^=f,x^=Y;return[x>>>24&255,x>>>16&255,x>>>8&255,x>>>0&255,Y>>>24&255,Y>>>16&255,Y>>>8&255,Y>>>0&255]},P8=function(Y,F,x)
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 3f 63 28 29 3a 28 71 3d 50 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 47 28 28 71 28 29 2c 63 29 29 7d 29 7d 2c 70 65 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 67 26 26 67 28 6e 29 7d 7d 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 46 2c 78 29 7b 69 66 28 38 36 3d 3d 59 7c 7c 34 32 30 3d 3d 59 29 46 2e 46 5b 59 5d 3f 46 2e 46 5b 59 5d 2e 63 6f 6e 63 61 74 28 78 29 3a 46 2e 46 5b 59 5d 3d 64 33 28 78 2c 46 29 3b 65 6c 73 65 7b 69 66 28 46 2e 72 71 26 26 36 34 21 3d 59 29 72 65 74 75 72 6e 3b 33 35 35 3d 3d 59 7c 7c 38 3d 3d 59 7c 7c 34 35 3d 3d 59 7c 7c 34 36 30 3d 3d 59 7c 7c 32 39 32 3d 3d 59 7c 7c 33 38 33 3d 3d 59 7c 7c 32 31 35 3d 3d 59 7c 7c 32 36 32 3d 3d 59 7c 7c 34 30 33 3d 3d 59 3f 46 2e 46 5b 59 5d 7c 7c 28 46 2e 46 5b 59 5d 3d 7a 36 28 46 2c 59 Data Ascii: ?c():(q=P,P=function(){nG((q(),c))})},pe:function(n){g&&g(n)}}},I=function(Y,F,x){if(86==Y\|\|420==Y)F.F[Y]?F.F[Y].concat(x):F.F[Y]=d3(x,F);else{if(F.rq&&64!=Y)return;355==Y\|\|8==Y\|\|45==Y\|\|460==Y\|\|292==Y\|\|383==Y\|\|215==Y\|\|262==Y\|\|403==Y?F.F[Y]\|\|(F.F[Y]=z6(F,Y
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 44 29 7d 7d 2c 28 49 28 36 39 2c 28 57 28 46 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 44 2c 71 2c 63 2c 74 29 7b 28 44 3d 28 63 3d 28 71 3d 5a 28 55 29 2c 5a 29 28 55 29 2c 5a 28 55 29 29 2c 55 29 2e 58 3d 3d 55 26 26 28 44 3d 64 28 55 2c 44 29 2c 74 3d 64 28 55 2c 71 29 2c 63 3d 64 28 55 2c 63 29 2c 74 5b 63 5d 3d 44 2c 36 34 3d 3d 71 26 26 28 55 2e 67 3d 76 6f 69 64 20 30 2c 32 3d 3d 63 26 26 28 55 2e 57 3d 58 28 55 2c 33 32 2c 66 61 6c 73 65 29 2c 55 2e 67 3d 76 6f 69 64 20 30 29 29 29 7d 2c 28 46 2e 4a 36 3d 28 49 28 34 36 30 2c 46 2c 28 49 28 32 31 35 2c 46 2c 28 57 28 46 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 44 2c 71 2c 63 2c 74 29 7b 30 21 3d 3d 28 44 3d 64 28 28 74 3d 28 63 3d 28 71 3d 28 63 3d 5a 28 28 44 3d 28 74 3d 28 71 3d 5a 28 55 29 2c 5a 28 55 29 Data Ascii: D)}},(I(69,(W(F,function(U,D,q,c,t){(D=(c=(q=Z(U),Z)(U),Z(U)),U).X==U&&(D=d(U,D),t=d(U,q),c=d(U,c),t[c]=D,64==q&&(U.g=void 0,2==c&&(U.W=X(U,32,false),U.g=void 0)))},(F.J6=(I(460,F,(I(215,F,(W(F,function(U,D,q,c,t){0!==(D=d((t=(c=(q=(c=Z((D=(t=(q=Z(U),Z(U)
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 29 2c 7b 7d 29 2c 46 29 2c 5b 5d 29 2c 42 28 34 29 29 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 44 2c 71 2c 63 2c 74 2c 7a 2c 4c 29 7b 66 6f 72 28 74 3d 28 44 3d 28 7a 3d 64 28 55 2c 28 4c 3d 28 63 3d 4c 47 28 28 71 3d 5a 28 55 29 2c 55 29 29 2c 22 22 29 2c 35 29 29 2c 7a 2e 6c 65 6e 67 74 68 29 2c 30 29 3b 63 2d 2d 3b 29 74 3d 28 28 74 7c 30 29 2b 28 4c 47 28 55 29 7c 30 29 29 25 44 2c 4c 2b 3d 6e 5b 7a 5b 74 5d 5d 3b 49 28 71 2c 55 2c 4c 29 7d 29 2c 34 35 30 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 44 2c 71 2c 63 2c 74 2c 7a 29 7b 6b 28 74 72 75 65 2c 55 2c 66 61 6c 73 65 2c 44 29 7c 7c 28 7a 3d 5a 61 28 55 2e 58 29 2c 71 3d 7a 2e 6f 4e 2c 44 3d 7a 2e 57 6f 2c 63 3d 7a 2e 6b 6a 2c 7a 3d 7a 2e 53 2c 74 3d 7a 2e 6c 65 6e 67 74 68 2c 71 3d 30 3d 3d 74 3f 6e 65 Data Ascii: ),{}),F),[]),B(4))),function(U,D,q,c,t,z,L){for(t=(D=(z=d(U,(L=(c=LG((q=Z(U),U)),""),5)),z.length),0);c--;)t=((t\|0)+(LG(U)\|0))%D,L+=n[z[t]];I(q,U,L)}),450),function(U,D,q,c,t,z){k(true,U,false,D)\|\|(z=Za(U.X),q=z.oN,D=z.Wo,c=z.kj,z=z.S,t=z.length,q=0==t?ne
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 30 34 29 2c 30 29 29 2c 46 29 29 2c 34 38 32 29 29 2c 33 30 39 29 29 2c 34 36 32 29 29 2c 46 29 2c 66 75 6e 63 74 69 6f 6e 28 55 29 7b 76 38 28 33 2c 55 29 7d 2c 33 36 38 29 2c 30 29 2c 30 5d 29 2c 46 29 2c 31 39 38 29 2c 66 75 6e 63 74 69 6f 6e 28 55 2c 44 2c 71 2c 63 2c 74 2c 7a 2c 4c 2c 6d 2c 62 2c 53 2c 48 2c 56 29 7b 66 75 6e 63 74 69 6f 6e 20 4d 28 75 2c 4a 29 7b 66 6f 72 28 3b 44 3c 75 3b 29 48 7c 3d 6c 28 55 29 3c 3c 44 2c 44 2b 3d 38 3b 72 65 74 75 72 6e 20 44 2d 3d 75 2c 4a 3d 48 26 28 31 3c 3c 75 29 2d 31 2c 48 3e 3e 3d 75 2c 4a 7d 66 6f 72 28 53 3d 28 62 3d 28 63 3d 28 44 3d 28 7a 3d 5a 28 55 29 2c 48 3d 30 29 2c 6d 3d 28 4d 28 33 29 7c 30 29 2b 31 2c 4d 28 35 29 29 2c 30 29 2c 5b 5d 29 2c 4c 3d 30 3b 4c 3c 63 3b 4c 2b 2b 29 71 3d 4d 28 31 29 Data Ascii: 04),0)),F)),482)),309)),462)),F),function(U){v8(3,U)},368),0),0]),F),198),function(U,D,q,c,t,z,L,m,b,S,H,V){function M(u,J){for(;D<u;)H\|=l(U)<<D,D+=8;return D-=u,J=H&(1<<u)-1,H>>=u,J}for(S=(b=(c=(D=(z=Z(U),H=0),m=(M(3)\|0)+1,M(5)),0),[]),L=0;L<c;L++)q=M(1)
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 5d 29 2c 46 29 2e 70 75 73 68 28 59 5b 38 5d 3c 3c 32 34 7c 59 5b 39 5d 3c 3c 31 36 7c 59 5b 31 30 5d 3c 3c 38 7c 59 5b 31 31 5d 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 46 2c 78 2c 67 29 7b 66 6f 72 28 78 3d 28 46 7c 28 67 3d 5b 5d 2c 30 29 29 2d 31 3b 30 3c 3d 78 3b 78 2d 2d 29 67 5b 28 46 7c 30 29 2d 31 2d 28 78 7c 30 29 5d 3d 59 3e 3e 38 2a 78 26 32 35 35 3b 72 65 74 75 72 6e 20 67 7d 2c 67 33 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 46 2c 78 2c 67 29 7b 66 6f 72 28 3b 59 2e 55 2e 6c 65 6e 67 74 68 3b 29 7b 78 3d 28 59 2e 50 3d 6e 75 6c 6c 2c 59 2e 55 2e 70 6f 70 28 29 29 3b 74 72 79 7b 67 3d 61 6c 28 78 2c 59 29 7d 63 61 74 63 68 28 66 29 7b 61 28 66 2c 59 29 7d 69 66 28 46 26 26 59 2e 50 29 7b 28 46 3d 59 2e 50 2c 46 29 28 66 75 6e 63 74 69 6f 6e Data Ascii: ]),F).push(Y[8]<<24\|Y[9]<<16\|Y[10]<<8\|Y[11])},r=function(Y,F,x,g){for(x=(F\|(g=[],0))-1;0<=x;x--)g[(F\|0)-1-(x\|0)]=Y>>8*x&255;return g},g3=function(Y,F,x,g){for(;Y.U.length;){x=(Y.P=null,Y.U.pop());try{g=al(x,Y)}catch(f){a(f,Y)}if(F&&Y.P){(F=Y.P,F)(function
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 3d 32 34 34 32 2a 66 2d 32 33 36 38 2a 28 44 3d 46 25 31 36 2b 31 2c 46 29 2a 66 2b 28 50 28 29 7c 30 29 2a 44 2b 33 37 2a 66 2a 66 2d 44 2a 66 2b 6e 2d 31 31 31 2a 46 2a 46 2a 66 2b 78 5b 6e 2b 35 39 26 37 5d 2a 46 2a 44 2b 33 2a 46 2a 46 2a 44 2c 66 3d 76 6f 69 64 20 30 2c 44 3d 78 5b 44 5d 2c 78 29 5b 28 6e 2b 32 31 26 37 29 2b 28 67 26 32 29 5d 3d 44 2c 78 29 5b 6e 2b 28 67 26 32 29 5d 3d 36 34 2c 44 7d 2c 55 7d 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 59 29 7b 72 65 74 75 72 6e 20 59 2e 68 3f 66 47 28 59 2e 6c 2c 59 29 3a 58 28 59 2c 38 2c 74 72 75 65 29 7d 2c 47 36 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 46 2c 78 2c 67 29 7b 72 65 74 75 72 6e 20 64 28 46 2c 28 49 28 38 36 2c 46 2c 28 44 61 28 46 2c 28 28 67 3d 64 28 46 2c 38 36 29 2c 46 29 2e 42 26 26 67 3c Data Ascii: =2442f-2368(D=F%16+1,F)f+(P()\|0)D+37ff-Df+n-111FFf+x[n+59&7]FD+3FF*D,f=void 0,D=x[D],x)[(n+21&7)+(g&2)]=D,x)[n+(g&2)]=64,D},U},l=function(Y){return Y.h?fG(Y.l,Y):X(Y,8,true)},G6=function(Y,F,x,g){return d(F,(I(86,F,(Da(F,((g=d(F,86),F).B&&g<
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 6e 67 74 68 26 26 35 36 33 32 30 3d 3d 28 59 2e 63 68 61 72 43 6f 64 65 41 74 28 67 2b 31 29 26 36 34 35 31 32 29 3f 28 66 3d 36 35 35 33 36 2b 28 28 66 26 31 30 32 33 29 3c 3c 31 30 29 2b 28 59 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 67 29 26 31 30 32 33 29 2c 46 5b 78 2b 2b 5d 3d 66 3e 3e 31 38 7c 32 34 30 2c 46 5b 78 2b 2b 5d 3d 66 3e 3e 31 32 26 36 33 7c 31 32 38 29 3a 46 5b 78 2b 2b 5d 3d 66 3e 3e 31 32 7c 32 32 34 2c 46 5b 78 2b 2b 5d 3d 66 3e 3e 36 26 36 33 7c 31 32 38 29 2c 46 5b 78 2b 2b 5d 3d 66 26 36 33 7c 31 32 38 29 3b 72 65 74 75 72 6e 20 46 7d 2c 41 30 3d 66 75 6e 63 74 69 6f 6e 28 59 2c 46 29 7b 66 75 6e 63 74 69 6f 6e 20 78 28 29 7b 74 68 69 73 2e 6a 3d 74 68 69 73 2e 5a 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 75 72 6e 5b 66 75 6e 63 74 Data Ascii: ngth&&56320==(Y.charCodeAt(g+1)&64512)?(f=65536+((f&1023)<<10)+(Y.charCodeAt(++g)&1023),F[x++]=f>>18\|240,F[x++]=f>>12&63\|128):F[x++]=f>>12\|224,F[x++]=f>>6&63\|128),F[x++]=f&63\|128);return F},A0=function(Y,F){function x(){this.j=this.Z=this.n=0}return[funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
479	192.168.2.4	50386	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1228	OUT	GET /pagead/viewthroughconversion/940382430/?random=1713460610947&cv=11&fst=1713460610947&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 952(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	586	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 73 25 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttps%
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
480	192.168.2.4	50387	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1352	OUT	GET /td/rul/940382430?random=1713460610947&cv=11&fst=1713460610947&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	609	IN	Data Raw: 38 34 65 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 84e<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 35 39 34 30 39 33 33 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 54 35 5a 42 79 77 21 32 73 5a 6b 6a 69 68 41 21 33 73 41 41 70 74 44 56 34 4e 52 42 78 36 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 37 38 35 39 38 37 32 32 32 30 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 32 33 32 39 34 38 34 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a Data Ascii: 59409331","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sT5ZByw!2sZkjihA!3sAAptDV4NRBx6"],"userBiddingSignals":[["7859872220"],null,1713460612329484],"executionMode":"group-by-origin","biddingWasmHelperUrl":
2024-04-18 17:16:52 UTC	269	IN	Data Raw: 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f Data Ascii: .leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
481	192.168.2.4	50388	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1228	OUT	GET /pagead/viewthroughconversion/978398205/?random=1713460610976&cv=11&fst=1713460610976&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 951(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	585	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 73 25 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttps%
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
482	192.168.2.4	50389	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1352	OUT	GET /td/rul/978398205?random=1713460610976&cv=11&fst=1713460610976&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
483	192.168.2.4	50384	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	2211	OUT	GET /-/media/images/financial%20services/wildlifetraffickingwhitepaper-1230x420.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; gpv_Page=copyright; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=4230; s_ppv=home%2C21%2C21%2C907%2C1%2C4; eVar66=3; s_sq=lexisnexisrisksolutionsglobalpublicprod%3D%2526c.%2526a.%2526activitymap.%2526page%253Dhome%2526link%253DDownload%252520the%252520Report%252520Today%2526region%253Dcarousel-a8354318-db02-4247-b06b-4b44d3c480db%2526pageIDType%253D1%2526.activitymap%2526.a%2526.c%2526pid%253Dhome%2526pidt%253D1%2526oid%253Dhttps%25253A%25252F%25252Frisk.lexisnexis.com%25252Finsights-resources%25252Fwhite-paper%25252Fcombating-wildlife-trafficking%25253Fintcmp%25253Dush%2526ot%253DA; ELQCOUNTRY=RO
2024-04-18 17:16:52 UTC	895	IN	HTTP/1.1 200 OK Connection: close Content-Length: 131673 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="WildlifeTraffickingWhitePaper-1230x420.jpg" Content-Type: image/jpeg Etag: "LSZ12HzFw91e2TrUU37o83YIkh1FlEd8jZp6d8Q75kg" Fastly-Io-Info: ifsz=148247 idim=1230x420 ifmt=jpeg ofsz=131673 odim=1230x420 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010214 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 551295 Date: Thu, 18 Apr 2024 17:16:52 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210045-DFW, cache-pdk-kpdk1780103-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460612.251471,VS0,VE138 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 59 ad 58 30 0d 1a 46 11 ad 86 a6 a4 ee 8a 09 ad 0a 5c 30 d2 bf 9e d1 46 bb 8a b3 a3 23 95 4d 2d 7a ec ba 58 48 98 35 4b b2 a2 4f 08 8a d6 a6 0d 10 c3 33 08 84 24 d3 2b 66 9d 33 9b 21 28 c5 93 6a e2 e6 71 67 64 63 73 85 0e 44 90 33 92 e3 1e 57 24 eb 94 92 22 f2 74 d9 e4 93 4e f3 4e 0f 63 a3 cb d2 5e df 8a e9 dc 19 dd 81 d2 71 a7 67 44 9e 2e 9c de 0e 9d 92 ad c2 c9 55 24 ec 95 6f 2e d9 53 25 57 4a 99 2a b5 eb 49 d8 f5 b8 58 d0 49 d8 ab 70 9a 8b a7 27 69 0d 27 74 d9 a6 91 5a b1 99 05 62 0a d4 d0 45 3b 8d e5 07 45 89 9e 47 76 43 77 64 12 78 38 e4 f1 74 49 e3 24 e4 a0 82 d5 4a 0b 14 12 73 68 49 a9 28 ba 72 93 3a 6f 26 74 dd e2 e8 9c ab 74 e6 f5 30 4d a2 9a 93 c5 26 4b 0e 32 64 8d 54 ec 89 31 ad 04 87 6c c0 42 eb c9 a5 a2 62 68 a7 cb 34 6a 9b 49 cf d7 4c 32 b0 Data Ascii: YX0F\0F#M-zXH5KO3$+f3!(jqgdcsD3W$"tNNc^qgD.U$o.S%WJ*IXIp'i'tZbE;EGvCwdx8tI$JshI(r:o&tt0M&K2dT1lBbh4jIL2
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: a8 87 a9 0e 26 c5 a1 11 49 a1 51 48 04 45 33 43 3d ec 14 bd a8 2a 56 26 a0 d3 43 82 b0 46 af 6c a0 ae 7a 25 c9 41 cf 60 fc 83 07 62 fc 5d 01 de 4b ce ab 6b d2 9f cd a4 3f 47 7f 39 19 1e 98 1f 9d b5 4f 7e 27 0e f5 3d 68 9c dc ad 69 66 4d ee 28 44 46 95 51 bd 0a 87 ba 40 34 ec 4c 8c 6c 9a 29 6b dc 74 59 38 83 b4 e4 aa b7 b6 22 a9 19 d3 72 f4 f1 b3 ea f8 5c 7a 74 93 cf bb cf a5 f4 cd e6 e9 c8 2b 52 3c 1d f8 22 75 99 db 65 94 c6 ef de 7c b5 bb 55 52 c5 5a 54 6f ce 1a 25 aa 46 47 3c 56 73 e8 15 9e b8 6d d1 d3 15 84 b5 e9 d7 30 58 86 e8 e7 1d 5c ce 69 62 22 ca 9a 6e 2a 9e c9 8e 95 72 4e 87 b1 da aa 52 71 d7 1b d8 9a 11 0c ca 27 24 10 53 64 33 b2 29 99 d2 23 19 20 83 c9 c2 b6 b2 a1 3b 49 c2 b9 bc 46 cf 26 1a 83 cd 1e 83 2a 1f 9f 52 26 34 a5 92 e3 c9 3b 95 73 1b Data Ascii: &IQHE3C=V&CFlz%A`b]Kk?G9O~'=hifM(DFQ@4Ll)ktY8"r\zt+R<"ue\|URZTo%FG<Vsm0X\ib"nrNRq'$Sd3)# ;IF&*R&4;s
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 91 48 05 72 5c 04 45 b0 0c e4 b0 0f 12 58 43 22 58 07 44 a0 19 12 86 33 92 80 74 42 40 a8 a7 01 5c 96 18 ce 54 90 1b 18 e0 1a 31 80 44 62 00 e2 72 00 a6 53 87 39 c7 7a 5f 21 cf b7 9e ec 66 1b cf d1 da f9 df 53 c6 da 33 77 93 d0 e0 ec ee f4 38 cd 2b cf a8 db 03 43 d4 f3 a2 c4 cb 48 11 8c 74 c2 73 a4 8c f6 d2 41 e7 dc 27 ae f9 9f 27 58 7a dc ae 8f 37 56 df 49 cc f4 03 1f a9 e5 ba 8e ce 47 3a e8 f5 f1 d3 12 22 8e 6f 2e 04 f8 de e6 5e a0 3d 24 69 0b f3 2b 8b 37 5f 9c e8 e1 a0 b6 b3 b3 ac b8 93 0d 26 9b f1 f3 35 cb b4 1b 9f 2d 16 8d 21 99 a4 50 97 26 33 91 43 07 07 43 3e e6 1b 78 a7 35 6d 26 09 14 44 85 76 15 60 17 23 41 67 1a 99 52 11 93 34 81 5b 3b 3c 9c 59 65 a1 b9 3d 19 5a 67 c4 b7 62 0e d9 72 f6 6f 85 53 84 56 5f 4b 68 c2 e6 5e 54 25 28 46 4c 29 a4 66 6a Data Ascii: Hr\EXC"XD3tB@\T1DbrS9z_!fS3w8+CHtsA''Xz7VIG:"o.^=$i+7_&5-!P&3CC>x5m&Dv`#AgR4[;<Ye=ZgbroSV_Kh^T%(FL)fj
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: d5 ab 63 9f 79 69 aa 38 3a 60 1d 23 75 67 b3 3c fd 1c c8 e9 e0 d3 6b 7f 12 d9 e9 34 13 33 66 85 cb d1 e7 e8 bf a3 c1 d9 c2 af 22 8a b0 ae 83 38 54 d0 99 e6 0d d2 b5 7a 1e 58 bc cd 38 f2 fb 9a 63 ac 2e 51 f7 74 d6 e1 eb a9 7a dc d7 4f 9d d3 05 1c ee aa a1 8b b6 5e 80 ba ac 39 cf cf 0b 14 9a be 44 dc fe 83 a3 0e 53 77 27 6e a3 b7 b6 37 70 f7 03 a3 45 f2 e4 87 b5 cf 21 ce ec 65 f6 f2 98 4e 59 a9 99 60 f3 8a 3e 40 c6 28 e8 d1 34 fb 01 ef a3 2d 50 cf 60 f4 e8 33 86 33 17 53 23 6b 9e 25 ca 68 f1 1e 86 3d e6 cf 15 aa 69 b7 cb 62 93 ae 7d cf 49 89 b7 86 c6 ce 9b a5 c7 cf 7d 2f cf 29 42 43 5d 48 eb 07 94 d1 04 07 6c d1 92 1e a4 0f ae 06 c5 4f 3b 99 7e 7c e3 b8 c6 e0 dc d0 16 48 fb 46 fe 2e e6 34 52 20 2d 3a 67 80 e2 40 23 dd 56 f0 43 99 5e 3a 58 6e eb 72 df 1c 46 Data Ascii: cyi8:`#ug<k43f"8TzX8c.QtzO^9DSw'n7pE!eNY`>@(4-P`33S#k%h=ib}I}/)BC]HlO;~\|HF.4R -:g@#VC^:XnrF
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: c3 5e 6d 4a 7b 00 9b 66 ee 33 ce 51 df f1 b9 2a 0d cf d5 de 88 a7 78 df 29 06 54 84 e1 9d 1a f1 32 f4 35 ea 0c 8e c8 d5 15 9b 0a 91 38 67 d9 81 b7 a6 74 50 94 12 5f 25 64 0b bd cd f5 50 99 85 59 eb 19 bd 0e 29 4c d0 e8 6c 5e 03 84 ca 8f 3b 4c 2e 1e 93 a3 40 91 ee cb a1 3f 98 7e 57 b2 77 25 ab 0c de 0f bd 17 a5 f0 26 d5 a3 ee 47 41 a5 9d 77 cf ee 2e 46 a0 1d f2 22 9d bd 86 6c 4a c2 e9 8d 1d 1c cb a1 15 8b d1 e5 05 40 67 e9 75 67 98 cc 66 d0 5e 86 31 3c da f4 b9 4f 4f 26 86 3e 75 b5 3a 59 72 cf a3 a0 96 1b 97 d4 69 72 bb 5e 75 74 c6 07 b3 cb 1e 11 09 2f b2 e7 cd f4 2e 0f d6 38 df 27 28 4b 4e 8d 8e 07 d1 39 2e 7c 39 2e a7 17 7f ae 7d 37 c9 3d 67 96 f0 f5 cb d5 c9 e8 35 9c ac 5e 8b 99 ec ad c7 9b ed a4 a6 2d f0 74 dc 77 53 ce f8 39 79 a7 4d 49 9f 51 87 33 5f Data Ascii: ^mJ{f3Q*x)T258gtP_%dPY)Ll^;L.@?~Ww%&GAw.F"lJ@gugf^1<OO&>u:Yrir^ut/.8'(KN9.\|9.}7=g5^-twS9yMIQ3_
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 1a aa 9d 36 10 b9 52 a8 1d 49 d5 67 0b ae 35 2e 1f a0 de cf da 56 3e b0 b9 a9 b8 ae dc 2c a3 5a 41 62 7e 64 39 9a 09 f8 83 39 55 f7 15 6d 51 67 51 68 71 a3 c6 75 56 20 7b 41 78 e5 87 db 34 c3 4b 2b 78 d1 d8 0b 5b 9b 42 2b cc 2f 86 ee 45 52 30 6d a2 68 78 92 35 1a 81 b3 62 42 92 ee 6f 90 e7 7d 37 84 f6 24 06 ab 9e f5 b9 fd 05 ce 7f 07 a7 9d d6 d4 c9 b5 71 95 2c 1e b9 21 55 c4 f4 df 24 ac d1 0b 12 fb 5a 73 a2 79 55 a0 4f 3b 69 39 b9 ed 0f 42 04 cd 06 3d d8 f6 00 d3 5f 37 56 7f 45 8f a1 d0 dd e8 a3 17 d6 f3 e6 e2 e0 ba ad 8e 5c be 4b 07 70 6d 35 34 05 a3 56 55 63 22 59 44 61 62 4e ab 84 16 d5 26 43 d1 60 da 4a 1d a8 d9 66 18 30 9e 84 69 63 5f 2d 8c ed 6a 89 da aa b4 00 34 5a da fc 3e d2 92 62 66 46 48 66 b2 7d 39 ea 0d 46 f7 1d f0 c3 7a 46 47 61 ce 68 74 0d Data Ascii: 6RIg5.V>,ZAb~d99UmQgQhquV {Ax4K+x[B+/ER0mhx5bBo}7$q,!U$ZsyUO;i9B=_7VE\Kpm54VUc"YDabN&C`Jf0ic_-j4Z>bfFHf}9FzFGaht
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 1b b9 56 02 ad fe 2e 66 7d f3 33 33 33 33 fe 56 7f c7 c7 be 3f e8 1e c4 a8 0e 45 b7 37 d5 2d 49 5d 9f 2d 2e e4 12 f8 85 8d c7 95 7e a1 6d d4 70 c0 0c c1 6e 89 c4 4e 3d 85 f4 7b b9 39 85 aa e2 d2 aa d6 ce fa 28 ae eb ad e4 d9 52 b1 a3 94 55 45 19 ac 5b 9a 9a d6 15 f1 f8 8b d7 c7 ad 34 17 72 d2 91 5f 25 5e 8b ad f9 ec b5 f2 f9 16 a2 51 c4 b2 b6 e2 55 c9 ec 14 f3 da 92 96 b7 24 94 dc 5f c1 4b ad e7 58 89 67 0f 94 2f 57 b2 ad b9 78 d9 b9 0b 74 4b 2b e4 11 cb 75 83 9f c7 d5 79 dc 56 3b a7 db 67 3b 8b 51 fa 9e 3c b3 d4 38 95 ca bd 53 8d 69 1e 7f bd 9f f0 71 31 ff 00 77 99 99 99 9f b1 9d 50 5b ea 0f 63 2d 2f 6b 35 1c 9b 6c 14 53 51 ae ae 5a d7 dd 78 ac 5f b9 ad be 8e 75 5b ce 27 8e 89 6e bd f6 dd a9 b9 af ed 7b af a6 2b 8d 3b 33 2f e4 6c 13 8e 2e e1 d7 d7 c6 a4 Data Ascii: V.f}3333V?E7-I]-.~mpnN={9(RUE[4r_%^QU$_KXg/WxtK+uyV;g;Q<8Siq1wP[c-/k5lSQZx_u['n{+;3/l.
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: da cc 09 47 1f ba 68 a8 09 3b 3b 31 65 e2 f1 fb b1 c7 52 f7 1c 3d 93 b3 33 79 b3 c0 4c 0e 04 aa d5 85 76 9b 8c 6d 98 5c 89 dd f3 1c a0 02 5c ce 76 f8 d6 c6 64 e5 59 b6 0d 88 08 61 d6 a6 1a 44 6a 3c 3d 7a 9c 63 db 53 30 66 b3 59 89 e6 09 e3 db 33 3e c3 db 1f 66 3f b1 83 31 ed 8f 6f 1f 67 89 e2 6b f7 e6 66 67 ed c8 10 f2 38 e2 7d 4f 1e 1e 5f 18 4f ae e3 43 ea 34 08 de a4 f1 f9 7c 97 9b be 47 22 f1 17 9d c9 59 fd 4e f9 fd 52 e8 7d 4f 93 07 a9 f2 a7 f5 4e 44 fe a9 c8 9f d4 f9 13 fa 8f 23 3f d4 af 8f c8 e4 59 31 fd ec 4c 7b 60 cc 4d 66 26 b3 13 13 13 13 1e d8 98 98 98 98 9e 3d fc cf 94 f3 ec 3d bc 7b 78 84 cc fb 0a 8b 45 6b 02 ad 8d 3f 14 ba c4 d0 33 08 d6 6a cc f9 8c c6 13 04 f2 26 4c 11 4e 62 a8 60 a5 d9 80 cc 21 71 d2 6c 6e 9a ec 9a 75 05 d9 e7 99 b2 a9 ec Data Ascii: Gh;;1eR=3yLvm\\vdYaDj<=zcS0fY3>f?1ogkfg8}O_OC4\|G"YNR}OND#?Y1L{`Mf&=={xEk?3j&LNb`!qlnu
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 3c 4b 80 76 b1 6b 6e 2b f6 c4 75 61 d9 b3 b1 01 29 b6 ae b1 e4 62 62 62 5c 4a cc cd a2 5d a4 1c a6 c7 96 8b 5a 09 c8 3b 37 5f c4 aa a1 04 b4 56 67 98 99 00 87 8f 9e c6 50 6c 7c 32 d3 fa 66 c1 3e 0c d2 0b 5e 1b 2c 69 82 d0 17 15 d7 fc 73 17 e2 eb 8c d4 57 1e 51 86 18 e0 03 ae 49 5d 65 69 98 17 66 b5 4c 76 99 f3 f2 11 5b 12 a7 25 55 93 0d c9 5d 3e 2d 72 0f 28 01 0b e6 6f b3 2f 95 b3 46 1c 7b fa 99 bc 43 6b 11 59 ca e7 11 4e c4 7e ff 00 81 f2 ab f2 cd 79 d8 8c 1c 4c 4c 4c 4c 4c 4c 4c 4c 4c 4c 19 a9 98 9a cc 4c 4c 4c 4c 7b 62 63 df 13 1f 6e 26 26 26 26 3d f1 ef 8f 7c 4c 4c 4c 4d 66 b3 13 13 1e f8 98 9c b2 ba bf 06 e6 76 d9 0d 08 55 59 f0 bd 9a 84 d4 10 d8 9c 7b a2 72 2c 76 cd cd 35 98 98 98 98 98 f7 2b 91 cd bf 90 83 c6 bd bd c5 b9 16 15 e3 b8 49 86 15 33 dd Data Ascii: <Kvkn+ua)bbb\J]Z;7_VgPl\|2f>^,isWQI]eifLv[%U]>-r(o/F{CkYN~yLLLLLLLLLLLLLL{bcn&&&&=\|LLLMfvUY{r,v5+I3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
484	192.168.2.4	50390	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1230	OUT	GET /pagead/viewthroughconversion/10896111711/?random=1713460610993&cv=11&fst=1713460610993&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 952(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	586	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttp
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
485	192.168.2.4	50391	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1354	OUT	GET /td/rul/10896111711?random=1713460610993&cv=11&fst=1713460610993&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
486	192.168.2.4	50393	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1352	OUT	GET /td/rul/938539671?random=1713460611010&cv=11&fst=1713460611010&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
487	192.168.2.4	50392	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1228	OUT	GET /pagead/viewthroughconversion/938539671/?random=1713460611010&cv=11&fst=1713460611010&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 952(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	586	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 73 25 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttps%
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
488	192.168.2.4	50189	63.140.39.65	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	741	OUT	POST /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3344979810927 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive Content-Length: 2333 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:52 UTC	2333	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 31 38 25 32 46 33 25 32 46 32 30 32 34 25 32 30 31 39 25 33 41 31 36 25 33 41 35 31 25 32 30 34 25 32 30 2d 31 32 30 26 6d 69 64 3d 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 26 61 61 6d 6c 68 3d 39 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 70 61 67 65 4e 61 6d 65 3d 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 33 41 25 32 30 63 61 73 65 2d 73 74 75 64 79 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 26 72 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 Data Ascii: AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2019%3A16%3A51%204%20-120&mid=72321666800473193042525972382318204557&aamlh=9&ce=UTF-8&cdp=2&pageName=insights-resources%3A%20case-study&g=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&r=https%3A%2F%2F
2024-04-18 17:16:52 UTC	640	IN	HTTP/1.1 200 OK access-control-allow-origin: https://risk.lexisnexis.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 17:16:52 GMT expires: Wed, 17 Apr 2024 17:16:52 GMT last-modified: Fri, 19 Apr 2024 17:16:52 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679628647751647232-4618639214892434405 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
489	192.168.2.4	50395	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1354	OUT	GET /td/rul/10827142419?random=1713460611030&cv=11&fst=1713460611030&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
490	192.168.2.4	50394	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1230	OUT	GET /pagead/viewthroughconversion/10827142419/?random=1713460611030&cv=11&fst=1713460611030&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 953(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	587	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttp
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
491	192.168.2.4	50397	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1352	OUT	GET /td/rul/527644678?random=1713460611045&cv=11&fst=1713460611045&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
492	192.168.2.4	50396	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1228	OUT	GET /pagead/viewthroughconversion/527644678/?random=1713460611045&cv=11&fst=1713460611045&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 31 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 951(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	585	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 73 25 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttps%
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
493	192.168.2.4	50398	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	905	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
2024-04-18 17:16:52 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:52 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87664e1c2ecf4531-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:52 UTC	736	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-04-18 17:16:52 UTC	1369	IN	Data Raw: 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e 77 69 6e 64 6f 77 5b 70 5d 2c 66 6e 3a 6e 75 6c 6c 7d 2c 77 69 6e 64 Data Ascii: ,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...window[p],fn:null},wind
2024-04-18 17:16:52 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 73 43 68 61 6e 67 65 64 3d 21 30 2c 77 69 6e 64 6f 77 5b 70 5d 2e 73 Data Ascii: ssion",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.hasChanged=!0,window[p].s
2024-04-18 17:16:52 UTC	1172	IN	Data Raw: 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 6e 64 Data Ascii: ++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystatechange=function(){"und
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
494	192.168.2.4	50399	104.18.32.137	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	634	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:52 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:52 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664e1c3d811d6c-ATL
2024-04-18 17:16:52 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
495	192.168.2.4	50402	104.244.42.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1034	OUT	GET /i/adsct?bci=3&eci=2&event_id=76420934-eb93-4a88-94c8-85612c0f99b7&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a3d6060f-69fb-461d-9c80-0b696d307f47&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c
2024-04-18 17:16:52 UTC	393	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:52 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 6d40385d13519a6c strict-transport-security: max-age=0 x-response-time: 82 x-connection-hash: 93487812987a97d7a6ddf1048108f134930dafe1158b1f221f08fad1e07c6f09 connection: close
2024-04-18 17:16:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
496	192.168.2.4	50403	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	761	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.recaptcha.net/recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=h6hnb8mbbpsh Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:52 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 18 Apr 2024 17:16:52 GMT Date: Thu, 18 Apr 2024 17:16:52 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
497	192.168.2.4	50405	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1228	OUT	GET /pagead/viewthroughconversion/936886275/?random=1713460611056&cv=11&fst=1713460611056&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 952(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	586	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 73 25 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttps%
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
498	192.168.2.4	50406	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	2209	OUT	GET /insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D
2024-04-18 17:16:53 UTC	692	IN	HTTP/1.1 200 OK Connection: close Content-Length: 176021 Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Accept-Ranges: bytes Via: 1.1 varnish, 1.1 varnish Content-Security-Policy: img-src *; Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210051-DFW, cache-pdk-kfty2130075-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460613.749501,VS0,VE378 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 74 61 72 67 65 74 2d 64 65 6e 73 69 74 79 44 70 69 3d 64 65 76 69 63 65 2d 64 70 69 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f Data Ascii: <!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, target-densityDpi=device-dpi, initial-scale=1, user-scalable=no
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 39 34 34 33 32 32 31 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 27 70 72 65 6c 6f 61 64 27 20 61 73 3d 27 73 74 79 6c 65 27 20 68 72 65 66 3d 27 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6a 73 2f 31 2e 31 32 2e 31 2f 69 6e 73 74 61 6e 74 73 65 61 72 63 68 2e 6d 69 6e 2e 63 73 73 27 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 48 6f 77 20 41 63 63 75 72 69 6e 74 26 23 31 37 34 3b 20 54 72 61 58 e2 84 a2 20 61 69 64 65 64 20 74 68 65 20 4e 65 77 70 6f 72 74 20 4e 65 77 73 20 50 6f 6c 69 63 65 20 44 65 70 61 72 74 6d 65 6e 74 20 69 6e 20 61 6e 20 45 78 69 Data Ascii: 9443221" rel="stylesheet" /> <link rel='preload' as='style' href='//cdnjs.cloudflare.com/ajax/libs/instantsearch.js/1.12.1/instantsearch.min.css'> <title>How Accurint® TraX aided the Newport News Police Department in an Exi
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 2d 77 69 74 68 2d 61 63 63 75 72 69 6e 74 2d 74 72 61 78 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 49 4e 44 45 58 2c 20 46 4f 4c 4c 4f 57 22 20 2f 3e 0d 0a 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 2f 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 2f 63 61 73 65 2d 73 74 75 64 79 2f 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d 61 62 64 75 63 74 65 64 2d 63 68 69 6c 64 2d 77 69 74 68 2d 61 63 63 75 72 69 6e 74 2d 74 72 61 78 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 2f 3e 0d 0a 0d 0a 0d 0a 0d 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6c Data Ascii: -with-accurint-trax" /> <meta name="robots" content="INDEX, FOLLOW" /> <link href="https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax" rel="canonical" /><script type="application/l
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 52 53 2f 6a 73 2f 76 65 6e 64 6f 72 2f 6d 6f 64 65 72 6e 69 7a 72 2e 32 2e 36 2e 32 2e 6d 69 6e 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 0d 0a 20 20 20 20 0d 0a 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 64 61 74 61 2d 70 61 67 65 2d 69 64 3d 22 39 45 42 34 34 45 43 32 30 39 43 43 34 43 41 39 38 33 39 33 43 37 43 38 36 45 43 39 35 33 39 39 22 0d 0a 20 20 20 20 20 20 64 61 74 61 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 3d 22 33 35 31 38 33 39 64 65 2d 30 61 61 30 2d 34 34 38 61 2d 38 38 33 32 2d 32 34 32 39 32 38 32 63 31 62 37 38 22 0d 0a 20 20 20 20 20 20 64 61 74 61 2d 70 61 67 65 2d 6c 61 6e 67 75 61 67 65 2d 6e 61 6d 65 3d 22 65 6e 2d 55 53 22 0d 0a 20 20 20 20 20 20 64 61 74 61 2d Data Ascii: RS/js/vendor/modernizr.2.6.2.min.js"></script> <![endif]--> </head><body data-page-id="9EB44EC209CC4CA98393C7C86EC95399" data-page-template="351839de-0aa0-448a-8832-2429282c1b78" data-page-language-name="en-US" data-
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 70 75 73 68 28 5b 27 65 6c 71 54 72 61 63 6b 50 61 67 65 56 69 65 77 27 5d 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 65 74 5f 6f 70 74 69 6e 20 28 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 6a 73 6f 6e 20 3d 20 4f 70 74 61 6e 6f 6e 2e 47 65 74 44 6f 6d 61 69 6e 44 61 74 61 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 6a 73 6f 6e 2e 47 72 6f 75 70 73 2e 6c 65 6e 67 74 68 3b 20 69 20 2b 3d 20 31 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 Data Ascii: push(['elqTrackPageView']); (function() { function set_optin (){ var json = Optanon.GetDomainData(); for (var i = 0; i < json.Groups.length; i += 1) { var
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 72 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 4f 6e 65 54 72 75 73 74 47 72 6f 75 70 73 55 70 64 61 74 65 64 27 2c 20 73 65 74 5f 6f 70 74 69 6e 2c 20 66 61 6c 73 65 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 69 66 20 28 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 27 4f 6e 65 54 72 75 73 74 47 72 6f 75 70 73 55 70 64 61 74 65 64 27 2c 20 73 65 74 5f 6f 70 74 69 6e 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: r){ window.addEventListener('OneTrustGroupsUpdated', set_optin, false); } else if (window.attachEvent) { window.attachEvent('OneTrustGroupsUpdated', set_optin);
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 22 6d 6d 2d 33 32 38 38 32 35 32 38 2d 66 36 37 64 2d 34 63 62 39 2d 38 35 30 39 2d 66 36 64 34 38 61 63 35 37 39 63 35 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6c 75 6d 6e 31 20 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 65 6e 74 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 75 6c 20 63 6c 61 73 73 3d 22 6e 61 76 20 6e 61 76 62 61 72 2d 6e 61 76 20 73 63 6f 72 65 2d 6e 61 76 22 20 72 6f 6c 65 3d 22 6d 65 6e 75 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 73 74 79 6c 65 2d 62 6f 78 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 49 73 45 64 69 74 6f 72 45 64 69 74 69 6e Data Ascii: "mm-32882528-f67d-4cb9-8509-f6d48ac579c5"> <div class="score-column1 " > <div class="score-center"> <ul class="nav navbar-nav score-nav" role="menu" > <div class="score-style-box" data-ux-args="{"IsEditorEditin
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 20 4d 6f 72 65 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 67 6c 6f 62 61 6c 2d 73 65 61 72 63 68 2d 62 75 74 74 6f 6e 2d 74 65 78 74 22 3e 53 75 62 6d 69 74 3c 2f 73 70 61 6e 3e 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 20 62 74 6e 2d 63 6f 75 6e 74 72 79 2d 6c 61 6e 67 75 61 67 65 2d 73 65 6c 65 63 74 6f 72 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b Data Ascii: More"/> <button class="btn global-search-button"><span class="global-search-button-text">Submit</span></button> </div></div><a class="score-composite-link btn-country-language-selector" data-ux-args="{"ClickMessagesTransmitting"
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6c 75 6d 6e 32 20 65 71 75 61 6c 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6e 74 65 6e 74 2d 73 70 6f 74 22 20 3e 0d 0a 20 Data Ascii: </button> </div> <div class="modal-body"> <div class="score-column2 equal" > <div class="score-left"> <div class="score-left-text " > <div class="score-content-spot" >
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 6c 2d 66 6c 61 67 32 32 78 31 36 22 3e 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 73 70 61 6e 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 22 20 3e 42 72 61 7a 69 6c 20 2d 20 50 6f 72 74 75 67 75 c3 aa 73 3c 2f 73 70 61 6e 3e 0d 0a 3c 2f 61 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 6c 65 66 74 2d 74 65 78 74 20 22 20 3e 0d 0a 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 73 63 6f 72 65 2d 63 6f 6d 70 6f 73 69 74 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 75 78 2d 61 72 67 73 3d 22 7b 26 71 75 6f 74 3b 43 6c 69 63 6b 4d 65 73 73 61 67 65 73 54 72 61 6e 73 6d 69 74 74 69 6e 67 26 71 75 6f 74 3b 3a 5b 5d 7d 22 20 64 61 74 61 2d 75 78 2d 6d 6f 64 75 6c 65 3d 22 73 63 6f 72 65 5f 62 6f 6f 74 73 74 72 61 70 2f 43 6f 6d 70 6f 6e 65 6e 74 73 2f Data Ascii: l-flag22x16"></span></span><span class="" >Brazil - Portugus</span></a></div><div class="score-left-text " > <a class="score-composite-link" data-ux-args="{"ClickMessagesTransmitting":[]}" data-ux-module="score_bootstrap/Components/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
499	192.168.2.4	50407	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1352	OUT	GET /td/rul/936886275?random=1713460611056&cv=11&fst=1713460611056&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	609	IN	Data Raw: 35 62 31 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 5b1<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:52 UTC	855	IN	Data Raw: 30 37 33 39 31 37 34 30 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 57 47 32 46 6c 67 21 32 73 5a 6b 6a 69 68 41 21 33 73 41 41 70 74 44 56 34 73 37 5f 32 67 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 32 37 38 31 38 33 39 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 Data Ascii: 07391740","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWG2Flg!2sZkjihA!3sAAptDV4s7_2g"],"userBiddingSignals":[null,null,1713460612781839],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://t
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
500	192.168.2.4	50408	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1228	OUT	GET /pagead/viewthroughconversion/938545461/?random=1713460611072&cv=11&fst=1713460611072&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 32 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 952(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	586	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 73 25 Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttps%
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
501	192.168.2.4	50409	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1229	OUT	GET /pagead/viewthroughconversion/1048135065/?random=1713460611085&cv=11&fst=1713460611085&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	552	IN	Data Raw: 39 35 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 953(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:52 UTC	587	IN	Data Raw: 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 5c 78 32 36 72 65 66 5c 78 33 64 68 74 74 70 73 Data Ascii: fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study\x26ref\x3dhttps
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
502	192.168.2.4	50410	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1352	OUT	GET /td/rul/938545461?random=1713460611072&cv=11&fst=1713460611072&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	609	IN	Data Raw: 38 34 38 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 848<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:52 UTC	1255	IN	Data Raw: 30 34 31 33 38 39 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 73 4c 70 34 78 41 21 32 73 5a 6b 6a 69 68 41 21 33 73 41 41 70 74 44 56 34 72 68 37 68 4d 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 34 37 36 33 32 37 31 35 38 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 32 38 31 32 32 31 39 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 Data Ascii: 041389","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1ssLp4xA!2sZkjihA!3sAAptDV4rh7hM"],"userBiddingSignals":[["476327158"],null,1713460612812219],"executionMode":"group-by-origin","biddingWasmHelperUrl":"ht
2024-04-18 17:16:52 UTC	263	IN	Data Raw: 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c Data Ascii: AdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></body><
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
503	192.168.2.4	50411	104.244.42.131	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1055	OUT	GET /i/adsct?bci=3&eci=2&event_id=76420934-eb93-4a88-94c8-85612c0f99b7&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a3d6060f-69fb-461d-9c80-0b696d307f47&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="
2024-04-18 17:16:52 UTC	400	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:52 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 17471a7662bb8b9a strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: a842f902076e1c6c7346d315ae15f2c756982af3dd7618eaafe20470cc381d63 connection: close
2024-04-18 17:16:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
504	192.168.2.4	50412	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	2120	OUT	GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484963597398887 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D If-None-Match: "awSmcPLAOnF6/B0h4W9/TEG+qLYXKrTMxy8aBCCs7Wo"
2024-04-18 17:16:52 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:52 GMT Via: 1.1 varnish ETag: "awSmcPLAOnF6/B0h4W9/TEG+qLYXKrTMxy8aBCCs7Wo" Age: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130029-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460613.853845,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
505	192.168.2.4	50414	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1353	OUT	GET /td/rul/1048135065?random=1713460611085&cv=11&fst=1713460611085&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&hn=www.googleadservices.com&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:52 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:52 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
506	192.168.2.4	50415	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	2051	OUT	GET /-/media/8f2ac5bc533c4b41ad1580b4f298ab1f.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D
2024-04-18 17:16:52 UTC	871	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23476 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Gresham thumbnail jpg.jpg" Content-Type: image/webp Etag: "wjD4rkDYoZb8ZUvj51JBk13o7g1O8sXtUG9PP/tAMjY" Fastly-Io-Info: ifsz=84755 idim=270x170 ifmt=jpeg ofsz=23476 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 506547 Date: Thu, 18 Apr 2024 17:16:52 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210070-DFW, cache-pdk-kfty2130081-PDK X-Cache: HIT, MISS X-Cache-Hits: 3, 0 X-Timer: S1713460613.883508,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 52 49 46 46 ac 5b 00 00 57 45 42 50 56 50 38 20 a0 5b 00 00 30 c9 00 9d 01 2a 0e 01 aa 00 3e 41 16 88 44 22 a1 21 1d 3e 4e 9c 28 04 04 b1 80 5f 23 37 6c bf b4 9e 6f 22 cf 9a 7c 55 90 35 b1 fd 59 fd 8f 31 cf 76 ef c1 ff 47 d5 e7 f6 9f 36 0f 3e 4f 5f 3f de bf f0 7a a3 fd c3 f5 a5 f4 b5 fe 5f d4 03 fc 6f 53 ef a1 df 9c c7 ab d7 f8 1f fc 7f b9 5e da 38 08 1b 7d fa ef 80 bf 8e 7c a3 f6 ff ee 1f e3 7f d9 7f 72 f8 d1 f9 3f fb 6f f1 7d f0 3d 13 f7 8f f7 be 80 ff 23 fb 73 fa 1f ee df bb 5f e4 3d 90 ff 5d fd db f7 1b fc ff a1 bf 97 fe 8b fe b3 fb b7 e4 57 c8 2f e3 3f c9 ff c5 7f 6b fd cb fe f9 ef d3 ed bf ef ff be 7f b7 ef 57 d0 3f b4 ff b5 ff 23 ec 0b eb 47 cf 7f d0 7f 75 ff 35 ff 8b fc 1f a3 cf fa bf e8 3d 48 fd 3b fb 6f fd 0f f0 1f 00 3f cb bf a4 ff b8 ff 15 fb Data Ascii: RIFF[WEBPVP8 [0*>AD"!>N(_#7lo"\|U5Y1vG6>O_?z_oS^8}\|r?o}=#s_=]W/?kW?#Gu5=H;o?
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: a8 43 fe 5e 61 f0 9a a4 ce 16 e5 79 70 64 9b f7 53 ce 64 d1 ff 42 b8 b6 5a 97 70 56 19 9c d6 03 0b ca c3 a0 83 2e 16 02 ee d9 f1 9f db 80 f4 86 7a 85 d1 de 55 ee ee 6f f1 5e 1e 75 9c 0b aa c9 f2 99 93 55 ec a6 f7 b4 58 68 16 19 01 b1 79 67 2f e3 14 a1 2a 36 16 b6 0b 17 50 d3 e2 25 55 4d 0f 0e c7 9d c1 8d 88 a6 89 d9 34 81 94 07 c1 d8 8e b9 74 ff f5 c6 6a 13 ef 27 85 de a6 2c 79 c4 0f ad 74 fd 36 0b f7 a6 a6 04 71 89 30 8f 01 f0 2f 8c 8b 5c 3c a7 fd ab 16 fa af d7 87 d7 2f 0e d8 5f af c6 3d 60 41 17 c2 12 b7 32 c4 a0 df 26 38 50 11 f4 b6 8f ef 1f ad 0f 81 88 39 59 56 57 7c a2 d1 4d ab cb 0d 10 69 0d 4e f2 94 6b 27 2b 8d 24 51 62 f7 30 9c fa 94 7e 38 86 97 fa 82 3d fa f3 04 93 7d a1 dd 91 fc 0c a5 13 d6 2a 01 49 79 8f bf a2 67 81 e7 94 2a e0 46 af 88 cf 33 Data Ascii: C^aypdSdBZpV.zUo^uUXhyg/6P%UM4tj',yt6q0/\</_=`A2&8P9YVW\|MiNk'+$Qb0~8=}Iyg*F3
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 0f 43 72 e7 ec 44 75 ec 70 81 4f 74 a4 4b 37 8f 6e 1c 26 a0 8c 72 b7 56 01 17 dc 73 35 87 a2 c7 2b b1 b0 32 79 6b 52 d1 cd fd 0d 56 0f 1a a7 5a 2a 03 92 29 f4 c3 a3 82 4b 13 f4 07 b3 53 64 07 68 a1 26 0d af ce 42 8e 49 d2 44 1a b8 f2 9e 55 0c 42 a8 d9 f3 a7 f3 2a ae 28 0c 56 95 c2 95 fd 31 44 7b 56 c8 26 e2 36 52 64 e1 7e b9 5d 65 38 d5 f6 62 33 41 85 86 94 36 78 63 7e 0d 1f 8c e4 85 db 79 dd e4 f6 3a cc 06 3e 58 46 74 42 57 aa a9 55 ad dc 16 54 a7 37 c5 b9 d1 c4 e8 a3 54 6f aa de f5 67 ac 0a b9 bd 51 79 8d 69 13 32 fb 90 d1 0e 4d 57 04 d3 bc 07 10 7e 5f 06 ba 6f cd 5d be 7b 94 60 e0 22 a4 ff a8 32 86 f6 d9 03 11 67 dd b8 6f fb 51 3e 30 08 78 83 45 5b dd 7a 1e 37 cf 5d 69 72 e5 63 f3 bf 2b b4 a3 59 9e da b9 58 7b a9 d3 46 97 5d 51 96 02 a0 65 20 7f 1d a6 Data Ascii: CrDupOtK7n&rVs5+2ykRVZ)KSdh&BIDUB(V1D{V&6Rd~]e8b3A6xc~y:>XFtBWUT7TogQyi2MW~_o]{`"2goQ>0xE[z7]irc+YX{F]Qe
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: b8 28 41 db 63 7e da 78 2b c1 2f 18 6d ef 44 b0 ae cf 37 17 31 47 eb 20 df d1 a8 5c ba ef 48 47 5a e3 c8 e6 bb 01 ca 74 29 9e b6 8a 15 0c 8b 8f 3e ca e0 19 7d 62 11 2d be da bb c4 5f 72 42 d8 c2 f0 59 57 18 a8 9d 32 44 98 11 ad 19 ab 38 79 86 f5 2d 9b 28 ed 44 7c c1 de 53 f5 5f b1 5e 95 c1 94 f8 65 ab 63 64 af bc ac 00 69 36 f4 3f 5e 25 f6 18 86 45 9d 6a 28 b7 f3 6b 22 5a c1 79 80 c6 13 13 6d 54 b8 41 16 be dc 06 a2 e3 bb 28 1a 9b fe a7 22 5e c7 5e b2 c7 d6 4c 99 5f 66 35 ec 30 a3 e9 77 96 25 6b 3f c6 30 52 de 90 a4 9a ab 3e e9 a1 af 38 b1 4a 17 22 1b 87 21 09 f4 20 b2 e7 e9 2b 6c 9e 8d 78 71 63 71 65 34 d5 56 0c 28 fe 38 7b 7a 11 0d 67 4d f2 59 ce 6e 68 c9 d5 64 e2 5a fb 4d 41 03 11 ab 17 1b f8 0e ac 66 03 07 b9 34 3a dd 0c 9b bd 00 86 b7 32 cd 11 8b 94 Data Ascii: (Ac~x+/mD71G \HGZt)>}b-_rBYW2D8y-(D\|S_^ecdi6?^%Ej(k"ZymTA("^^L_f50w%k?0R>8J"! +lxqcqe4V(8{zgMYnhdZMAf4:2
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 1e b7 59 fe fb 5a 83 46 e1 13 4c 93 34 de 85 79 c9 93 86 47 73 a9 33 8e 16 7e fb 77 d5 ef a7 44 60 ff c0 0a 47 07 7d dc b6 9e f3 98 1c 76 cf 7d 57 fe e5 5a e1 71 71 98 ab f2 23 93 9a 4c 67 72 a0 7b 4c 59 da 44 9b e7 eb 01 6c 71 f2 99 f8 70 d7 2e 71 03 74 69 6b 41 47 76 d3 84 d9 47 ae aa 35 25 c9 89 71 85 e3 e1 35 9b 3b db 7b c0 b9 82 24 68 b1 27 bf 6b ba 40 1d 02 2e 29 1e ef 9c f1 bd 69 96 3c b0 ee 63 f5 15 1d 03 ed d0 9b f0 0d 4b d7 d8 af d4 7c 72 63 83 5f 8a 3a 26 87 15 42 cf 73 be ee fc 5c be 29 54 f0 f2 13 ec df bf eb 8f 2e da 15 e5 9d 6d e8 c2 f0 54 ef ff 4b d9 f9 41 18 97 dd 33 3c e3 26 43 e5 92 c7 3c 52 f4 e1 0e bd 56 c5 e2 92 f1 18 d4 e0 88 ae a3 9d 0a 5e 1b 6d 11 55 99 c5 e1 34 6a 3c fc 21 b6 4a 87 68 f2 66 88 ff a6 be 53 52 7b bb c5 42 20 1c a2 Data Ascii: YZFL4yGs3~wD`G}v}WZqq#Lgr{LYDlqp.qtikAGvG5%q5;{$h'k@.)i<cK\|rc_:&Bs\)T.mTKA3<&C<RV^mU4j<!JhfSR{B
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: a7 4b 69 9d 85 25 b2 e3 5d e9 53 45 78 71 e2 cb 3e fe 32 6d f8 af 9b 27 a8 31 ec e2 ee 81 dc 3d 65 0b 24 b6 44 be c7 df 51 bf 92 61 fd c1 60 5a 57 1d 0e 93 73 d2 ec 65 1f 6f ee 1e 5a 60 aa 44 6b af 2a 9e cb 81 01 86 d6 da 3f e6 ad 72 e5 9f 2c cc c7 92 29 f1 22 6b ad 0a a0 15 d3 b2 7f 0c c1 f8 3c 94 51 60 5d fe 57 43 f6 7c b6 ea d0 91 a2 93 b6 84 38 3a b3 be c9 58 19 8b 74 62 16 5c a3 75 48 3e d0 3d d6 ca a1 eb 8d ce f3 a6 ad 89 bd 2d 1d f7 e7 a6 9d ef 88 a3 ec 5d c2 fb 9e 64 3c cd ec 80 44 c9 f0 52 3d f7 e2 13 79 45 a0 af 9a 3d 16 56 78 c3 c6 ca 81 3b 38 08 e0 a8 ef 6b 78 35 bd ce 1e a6 fb f6 5b 40 b6 f6 dc 5a 5c 54 0f b2 d8 b2 ce e7 3b 73 fe 40 ea 28 82 6c 8d dc b7 85 c3 59 bb 1b af 70 dc c1 b9 8e 63 1b 31 fe 15 3c 49 f0 a6 17 44 40 cc 04 11 ad f9 2e 10 Data Ascii: Ki%]SExq>2m'1=e$DQa`ZWseoZ`Dk*?r,)"k<Q`]WC\|8:Xtb\uH>=-]d<DR=yE=Vx;8kx5[@Z\T;s@(lYpc1<ID@.
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 03 9b 17 2e 12 9d eb bd 7a 64 24 6b fc 06 ba 03 f2 56 47 1c e0 b1 14 b7 27 00 08 41 5f f8 13 da 3c ca f8 14 b7 a4 54 ef f2 27 31 f8 5c 5f ac 41 19 44 ee ef 5d a9 23 e8 e4 1e 24 dc 72 af 5f 6b 70 b4 ce a8 89 54 78 8f 86 9f d5 76 d3 6b 7f d8 bd 96 59 4e 7c 51 18 9e 25 22 07 bb e4 64 89 80 ff e9 63 51 71 70 f0 43 bf 53 09 29 16 16 02 66 3e e7 e4 d0 03 c4 72 f3 0d 01 da 78 59 2f b8 e8 0a a3 cd f2 71 59 ae 95 66 01 8f 44 f5 04 39 64 88 53 41 e3 e3 41 13 46 b2 9b 4d f8 b9 8c df 80 07 cf 16 c9 a4 38 69 1d 23 0f d6 0a a9 68 1a 81 d3 2d f3 30 d1 e7 8c b6 58 fa 1c df c7 d6 23 5b 3f 59 e5 94 8e fc 91 6d 60 a5 6b 82 71 2a 2b 2e 40 d1 27 63 f7 6d 3e 8e 16 25 02 84 0b cd 6e bc c8 c7 f6 22 7a bc be 6f 07 8d 1b eb 7e b4 64 7d 2e a2 98 5c ab 3f f9 46 ba 65 13 eb 59 60 8d Data Ascii: .zd$kVG'A_<T'1\_AD]#$r_kpTxvkYN\|Q%"dcQqpCS)f>rxY/qYfD9dSAAFM8i#h-0X#[?Ym`kq*+.@'cm>%n"zo~d}.\?FeY`
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: fd 60 10 c0 9c a5 6d 7f 64 34 a9 31 f3 c3 e3 cb 69 1f 29 90 ba 8b 48 6f 63 cd 79 7a 86 6e c1 59 4f 40 35 91 7e 56 12 da 32 57 22 0e 3c 7a c9 2f 51 17 d9 c1 c3 fd 41 ff cd bb 3e 18 8e c9 09 13 94 af 49 1b 40 bc 90 db a5 5c 98 d0 46 65 d8 f7 0d 2d e2 ab 3a 49 bb 65 38 53 67 48 7e f5 89 f5 41 93 2c 91 ae 68 61 ac d7 c7 0d 24 4b d9 44 29 0a 81 84 12 2c 51 e3 cf f0 db bb 5c 73 43 d3 b5 30 f1 46 13 72 5a 00 52 ea 19 da f3 a6 be 33 77 67 e3 2a 91 7a 36 56 9d 73 3a af 3c c3 bf 05 0f d1 1a b9 e8 1b b2 2f 0b 52 12 f6 7d e3 ef a5 0e cf 6d 8b 2b b1 cb 81 e2 cb eb 6c 7f 0c 06 f2 02 b3 1f 8f 34 c0 ee e8 98 a5 bc d1 34 81 75 cb 06 0d e1 bc de c1 cf c8 0c 20 c8 a9 da 07 5e b4 61 f3 49 22 87 97 8d 8f 0c 4f 53 d4 50 53 8f 08 1a c0 d5 5b d9 4d bc 65 8b 30 81 2f cf a7 ad bf Data Ascii: `md41i)HocyznYO@5~V2W"<z/QA>I@\Fe-:Ie8SgH~A,ha$KD),Q\sC0FrZR3wg*z6Vs:</R}m+l44u ^aI"OSPS[Me0/
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: b8 ed d5 25 1c 0e f9 fd 32 bd be 87 cb 89 a1 9f e7 0e e2 7e 79 15 cb 8b 53 d9 cf 12 f6 ef 85 b3 5f ac d0 87 5f 70 6d 17 c8 50 b9 63 cc 9c a5 20 25 03 9c 1c e0 d0 e8 57 fc 3c a2 94 2d 3d 76 82 f3 9f c8 38 01 4e 61 b6 27 62 69 ef d4 7f fe 26 76 03 27 72 e8 03 fe 2c e6 be f5 35 cf d6 d8 0c 58 92 a4 8c 70 01 8b b0 6d f1 50 6e ec 77 3d b0 64 e5 2f fd 93 fc 1d 48 04 54 9e 1b c1 c9 76 fe c5 3c f8 1b 55 32 da 1a cc 2a 8e bd b9 53 1e d7 b9 bb bb 29 e8 c3 a9 1e 2c a5 96 87 f7 3a 1e ca 96 a1 1f 4e 0c 77 74 fb 54 4e 4d 7d 7f 91 69 86 da d4 83 08 59 2f 4a 3f 6b 50 94 af 91 49 f4 fc e7 21 77 25 89 ee 8d 65 cd d5 4a 84 e0 fb 2c 6c 18 ab 64 27 f0 a0 a7 9f 08 e3 9e a2 6f 06 70 b6 a5 e9 5d be 1a 00 26 54 83 50 55 1e 86 e3 6d f4 e8 35 9c 4e 1d 51 83 5d 66 32 53 ca 1b 26 20 Data Ascii: %2~yS__pmPc %W<-=v8Na'bi&v'r,5XpmPnw=d/HTv<U2*S),:NwtTNM}iY/J?kPI!w%eJ,ld'op]&TPUm5NQ]f2S&
2024-04-18 17:16:52 UTC	1379	IN	Data Raw: 93 63 4e 18 ee 53 38 51 54 84 bb 3b 31 d4 81 ce 76 d1 74 a6 68 5b d3 c1 3c 6f 3a d5 1a 0b d8 e2 8a 02 87 96 ff 54 48 1a 60 c6 f0 c3 e6 da 4f f7 3b c2 f0 8a b0 d8 b0 ac d1 24 85 0b 00 a7 9f ff 0c e3 e0 2c c8 b9 44 36 82 76 3e 4a 72 39 08 b7 4c 29 98 41 3c 70 e0 e5 91 16 de 59 28 12 e6 a6 4b cf dd cf 25 2c a3 25 d8 e2 be b1 5c 58 27 b2 ed b0 0a 5f f0 71 c1 56 0f 95 e4 d9 c3 65 57 c0 ab 2f 17 a4 af 56 4d 41 31 ef 02 ca ae 0e 95 b5 11 62 22 b2 f4 48 58 00 7c 2d 08 97 6f 44 2f ed 66 92 44 6a 29 c8 37 11 58 91 30 dd f8 61 c4 56 c2 a2 3e f2 63 df d1 0e 5a 32 64 9a 3e 06 ad d7 08 b1 4a 8a ab 8a b4 ae fd 6d 8c d1 dc c9 e6 82 c5 a8 b4 c9 b0 22 a0 9d 29 6f c3 f6 a3 b9 0f c3 b0 e2 a0 c2 3d c3 8e f4 cb ac 3b 2b d4 95 f7 a9 1d 59 86 6b a2 d4 e8 41 e7 9e 28 c1 71 c9 89 Data Ascii: cNS8QT;1vth[<o:TH`O;$,D6v>Jr9L)A<pY(K%,%\X'_qVeW/VMA1b"HX\|-oD/fDj)7X0aV>cZ2d>Jm")o=;+YkA(q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
507	192.168.2.4	50416	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	2051	OUT	GET /-/media/0eca225fec0d4e05b916e2403d22d9d6.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D
2024-04-18 17:16:53 UTC	886	IN	HTTP/1.1 200 OK Connection: close Content-Length: 53040 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Credit-Union-Tile-Image-270x170 png.png" Content-Type: image/webp Etag: "NqVq94pIN2s/BX/xHl5z0SCngfj0kDLTb5gVpP61urg" Fastly-Io-Info: ifsz=71149 idim=270x170 ifmt=png ofsz=53040 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 558125 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120052-DFW, cache-pdk-kfty2130029-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460613.883247,VS0,VE167 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 52 49 46 46 28 cf 00 00 57 45 42 50 56 50 38 4c 1b cf 00 00 2f 0d 41 2a 00 4d 40 6c db 48 92 b4 ad e9 ba d9 3e ab f3 0f f8 db 14 22 fa 3f 01 69 fc 2c b7 4d b5 49 07 5a cb e1 98 4d a2 81 de 81 a2 65 e7 d2 5a 58 5f 9d b6 b7 3f 9b d6 76 02 ce c3 0b b6 bf 3f 40 60 57 ac 6f b2 c0 28 6d f8 e0 23 4d 05 dd 09 9e 1a eb 41 9d c0 4c d8 d6 32 b2 7b 40 9c ec c7 d7 05 34 04 44 71 d1 45 06 c0 0b a0 7c e5 56 8e 05 04 11 e9 7d f7 c1 24 73 91 c4 4d 5c b9 94 f6 31 10 8e 02 a6 33 08 b8 91 7b 97 27 dc fe 22 2a e4 c9 0d 9e 04 25 c1 3c 0f f7 3b 25 1d 0d 38 ae 4a e5 b6 b3 ce 39 46 6d 02 f0 fd af 8d 40 fa 17 a8 56 63 00 32 37 54 d5 32 03 49 02 55 bb ad 9e be b3 2f 06 46 d5 a8 3a 4c e1 5d 4c 2d 0a f0 03 f0 be 9b 04 a6 ea 42 62 23 49 8e e4 04 06 fb d4 ca 7f bb 68 40 53 6b b2 71 ff Data Ascii: RIFF(WEBPVP8L/AM@lH>"?i,MIZMeZX_?v?@`Wo(m#MAL2{@4DqE\|V}$sM\13{'"%<;%8J9Fm@Vc27T2IU/F:L]L-Bb#Ih@Skq
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 66 2d f0 2d 49 92 25 49 92 6d 11 b1 79 d4 dc e7 93 fb f6 bb f3 b8 ae d5 e1 26 e4 49 92 24 d9 b6 2d 49 42 92 75 9e 99 b5 6c 4a 5e 4c cc 8a e9 7a 5d 17 ff 1e e5 60 20 49 92 a1 5c 9c 6d 3e c0 b3 04 4a 8a 24 49 db 76 54 d5 cc 9c 22 32 32 b3 b2 a0 bb 87 79 e6 65 66 6c 79 97 8c 2b 86 35 bf 17 c0 cc b8 82 e5 bb 67 66 66 c6 61 2a ae 84 88 70 32 33 55 15 a9 8c 6a e9 4b f0 20 49 92 23 c9 b6 6d 89 a8 45 64 75 1f 8c d1 68 0e 9d 91 e1 71 9d 09 c1 7b 17 e8 ae ca 70 53 bf b5 6d ab b6 6d db 56 4a b9 d4 3e 61 a3 b4 c5 6d e9 81 45 8e 1d 7b 8e c8 63 8c de 6a c9 c1 86 6d 24 45 fe 8a ff 8f ef b9 f7 f8 ff ff fa b6 cd b6 6f ec fd 85 1f ea 27 b4 64 76 ec c4 49 ca 0c 67 d7 a3 1d 1c cc cc cc cc cc cc cc 7c 1c 63 66 de ba a3 cc 6d 1a 46 c7 8e 59 06 f1 8f e1 0b 8f b3 f5 e0 31 4d db Data Ascii: f--I%Imy&I$-IBulJ^Lz]` I\m>J$IvT"22yefly+5gffa*p23UjK I#mEduhq{pSmmVJ>amE{cjm$Eo'dvIg\|cfmFY1M
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: d9 5e b3 02 99 fa b5 79 bd 3e 65 e5 f8 d4 bf 68 30 75 69 8f 3c e7 07 fc c9 ec a7 ee 6d bd d1 24 96 b8 91 26 27 7e 12 2a 9a 27 d2 49 e3 b6 ff 75 9f bf 3e a5 a7 58 0b 3a ff d4 87 11 11 37 b3 41 cb 3e 27 40 d6 2d 47 3f 3d bf 67 2f 5c e3 7a 14 03 08 a0 fe 0c 3f ef e9 fc cb 40 00 0a c8 58 21 f5 f1 06 9b df bd c9 7e bf 7d e6 b9 d5 b7 26 fa cc f6 b2 7a de 14 c0 f2 f6 29 dc 28 5a 02 d5 4e 35 85 ca bb b4 ce 7c aa ba 0d 17 c8 4b ae 35 df f1 73 7a b1 ed d2 2c 15 74 aa d7 36 fc 94 fd e2 cb d3 4b 5e ee 0d b3 18 cd f3 9a b4 ec c6 28 62 60 01 00 8b fe ec 1b 9f 40 d5 8a 01 c3 90 29 04 d8 c7 2b bd 7e 16 97 76 c7 1f f8 8d f7 cf 9c 67 0e fc 78 fc b9 dd 5d db b8 c1 1a 27 7a 48 4b 44 6a a5 0b b2 82 9f 77 b6 e7 89 2d 1f f2 30 a6 c9 78 ff 35 d9 a6 c3 f3 a4 a3 96 9e e6 f3 03 ef Data Ascii: ^y>eh0ui<m$&'~*'Iu>X:7A>'@-G?=g/\z?@X!~}&z)(ZN5\|K5sz,t6K^(b`@)+~vgx]'zHKDjw-0x5
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: e2 e5 4e de 2c 68 0d a0 35 4b e4 2f ec 57 fc 6e ee b7 b2 58 77 8b 8a 2a 84 40 a0 78 48 c6 39 ce 48 d0 94 03 45 92 9f dd d3 e1 27 ae 6d bd c6 5b 60 4d 97 df b7 7c fd c8 df e6 bf d3 3f 00 44 dd 3b bb 4e 6b 8b ec a8 7e a8 c4 06 05 45 50 2c ca 20 6d d8 58 c3 0e c0 88 59 91 7b 94 fe f5 ae fe 53 4d 34 a0 a4 ba 70 08 27 93 3c f4 cc 9c 6e 5a 93 c2 02 58 c9 fc 46 c5 db 38 03 08 51 01 62 42 b5 cf b0 1a 71 52 4c 53 45 b0 c6 9d a2 77 c6 19 70 c6 0b 64 e7 b9 4a f2 4c 2f f3 fb 6e ae fb d1 91 05 35 b0 47 0d 4e ba f6 bd ae 47 08 67 cf 39 06 42 40 a4 da 57 cf 7b d6 5c a4 be de 97 cd ef e9 fb 15 71 15 af 36 8d f6 18 80 59 2f 38 8e 53 1f 60 2d 5d 51 8a 57 68 62 91 94 12 6a ad f1 ca f4 dd cb 52 f5 32 d2 11 a6 c7 be 2c d9 36 c7 ac 60 96 e1 cc 7e 2d e9 ee e3 39 83 c8 2b 1a 80 Data Ascii: N,h5K/WnXw*@xH9HE'm[`M\|?D;Nk~EP, mXY{SM4p'<nZXF8QbBqRLSEwpdJL/n5GNGg9B@W{\q6Y/8S`-]QWhbjR2,6`~-9+
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 79 cf dc 2c 58 08 2e 19 f9 c6 4f a6 6b e3 15 5c 09 93 18 7b 9e 1e a3 69 69 32 ee 34 41 d3 46 4a e4 cf 71 60 06 21 0c 5b 14 4d ea 65 17 d0 03 40 9e 79 de 7c 36 eb 5d 07 49 d6 4a aa b2 a4 54 c3 a1 4c 02 96 70 04 b0 57 85 68 39 0e 8c 38 9c c1 39 cd 6e 7b d5 ee b0 0a 35 aa d2 ca 20 6b 58 33 d6 2e ab 79 04 57 58 1c 80 a2 aa 9d 69 97 1b a4 d4 1a 9c 94 20 48 51 d0 48 7a 04 63 1b 99 32 8d f6 34 13 46 0e 24 9d c4 4d 0f 98 2b 53 f4 d2 6f de 08 21 1f 7e 75 e5 db cc 69 5e 85 29 c6 13 c2 40 12 9c 69 34 8d 3d c3 dc 67 80 4a c0 e7 56 04 9c aa 2d 44 45 0b b1 1b de 33 74 38 79 88 df ea dd 3b 54 44 73 74 66 98 a2 a2 83 51 ad 54 0c 8a 96 80 74 70 a1 21 bb 4c c8 0e 84 9d 07 d6 b9 4c eb 4c bb 6d 6e 1b 9d 86 3a 8a cd 76 c5 aa 69 43 45 2b 5d eb 01 18 49 d2 c0 4a 60 0d 6d da 29 Data Ascii: y,X.Ok\{ii24AFJq`![Me@y\|6]IJTLpWh989n{5 kX3.yWXi HQHzc24F$M+So!~ui^)@i4=gJV-DE3t8y;TDstfQTtp!LLLmn:viCE+]IJ`m)
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 58 56 58 e4 28 8a 4b 09 a9 73 01 2f b3 d6 10 92 86 00 3c 4e bb ac 47 5e 49 76 f2 67 9c 0d 5c e5 53 c7 9b a8 44 96 e0 e4 c0 41 d8 70 09 b3 fb f9 f5 c0 18 80 91 46 33 61 92 fa 37 bc 61 15 24 30 14 dc 8a 86 59 1d 56 28 47 d1 0f 1f b6 fb 77 30 f3 95 7f d1 5f 8b 03 c8 21 42 6f 69 16 35 e5 a2 0c 23 84 4d 28 4c 67 96 c5 d3 43 d0 c3 4a 28 6a 42 00 4f 66 9c 67 99 68 ab e0 eb 2c b8 13 c9 eb 1f ed f7 e2 a2 52 0a 28 56 8c 30 d9 dc e6 ae 29 e2 68 10 c0 18 44 81 85 2c e0 5b cc c7 99 21 8e 57 62 bc de 71 4d c2 bc 00 32 39 4a c0 e8 9b ae f5 62 10 03 07 d9 6b cf 72 47 cf 83 a5 aa 65 16 85 4c e6 58 18 cf 62 90 28 72 3b b4 23 09 5c 6f 0d 95 70 72 78 b8 63 d8 c9 e1 d3 53 1d 0a 0e 6b 22 7d 18 96 7a c7 7e 0d 62 8f 10 05 20 90 89 66 f5 ed d3 76 cc e1 a6 df 31 ef f0 80 10 32 6b Data Ascii: XVX(Ks/<NG^Ivg\SDApF3a7a$0YV(Gw0_!Boi5#M(LgCJ(jBOfgh,R(V0)hD,[!WbqM29JbkrGeLXb(r;#\oprxcSk"}z~b fv12k
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 00 68 ac 0d 36 02 32 8f a1 b4 1e d1 86 a8 94 76 2f c1 f5 10 c9 d8 5c e1 62 51 7c cd 44 8f 25 23 95 d4 c4 51 ca 12 e5 04 e5 30 55 3d b1 ca 93 d7 cf 76 ea 72 7e db 61 dc 38 a8 51 ab 0b e3 b5 08 95 ab 57 76 89 06 45 ef b9 33 7f fa f1 fb c9 1f 7b c9 eb e3 d7 7b a5 e3 76 6d 73 b1 73 4e e7 e6 b7 42 02 00 d3 95 ef f6 1c 2f fd a2 1c fd f8 6e b6 17 01 d7 dd 9d 78 d5 e8 19 ee 21 ed 98 91 65 5a ee 7a 48 19 84 17 71 94 4b 02 a5 b2 a2 3f bc 44 02 44 82 ec 00 99 22 d4 51 6b 94 ae 10 ae ee f8 72 15 b7 7e fe 9e c1 60 a7 45 19 57 41 98 e1 d4 d6 a8 be 9a 67 83 67 a9 62 bd 8c 23 fd f6 c0 8f 6a 44 8e 30 f9 dd c3 94 74 29 a8 d9 60 06 c7 8f fc c6 46 9e 5f 71 77 b5 7f ec f6 9a 17 6e 06 c7 bc 7d 3e dc 27 5d af ba 61 08 8c 86 ca 9a 62 d1 5a 77 92 64 76 ab bb c6 ba b7 9b c6 4a af Data Ascii: h62v/\bQ\|D%#Q0U=vr~a8QWvE3{{vmssNB/nx!eZzHqK?DD"Qkr~`EWAggb#jD0t)`F_qwn}>']abZwdvJ
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 4e 66 e8 f5 0f fa 95 da af 69 eb c9 ac a7 0b 2f f3 93 a3 6c 32 0b 6f 98 4e a5 f3 42 17 d0 46 3d 16 76 6e 1a 07 c6 51 ab 53 c1 23 9e af f3 3e 3e 3d d6 45 47 b9 e1 ee d5 92 cb 93 3a d8 7a 98 1b d4 3d d8 20 dd 7f f1 af 35 98 87 0c 57 9a e6 d5 b4 da 9c 71 99 d0 9c b3 6a a0 19 50 ca cc 0e 61 a8 b7 1e 57 57 b6 24 ae 1c a9 16 74 25 23 5b 54 08 a8 58 01 ed 63 0d 6d 74 1d 1b 92 0c 53 a5 ac 63 0d 2f 1b ca 01 e5 86 5c 0e 9c 33 ff 06 ab 66 f1 25 6d fc d5 3f 74 80 a9 0c 3d 98 35 bd b0 9f b7 8c a9 2e 8f 29 30 51 2a 6f 75 f9 e3 eb 7f ec 3f ef 8f 0c 43 0c 61 21 a0 3a c7 2a be 21 61 96 28 04 6b de 83 72 83 11 8d 3b cd ce 02 20 04 bc e3 0e 61 0d 28 b4 40 b8 1a 18 61 94 2e e0 14 8a e7 ea e6 6a 42 8a 80 ea 4a 0b 64 8c 07 4f 2c 49 bd 8c 86 00 02 28 49 8b 65 ea 24 a9 18 5a d1 Data Ascii: Nfi/l2oNBF=vnQS#>>=EG:z= 5WqjPaWW$t%#[TXcmtSc/\3f%m?t=5.)0Qou?Ca!:!a(kr; a(@a.jBJdO,I(Ie$Z
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 12 54 cc 57 28 f5 11 c1 8d 8e 6f e9 69 fd a1 d6 58 00 42 d4 52 b4 78 cc 5e 27 ab d1 a9 5e a0 92 11 01 8b a0 eb ec f5 81 73 5c e1 2c 75 79 16 46 cc f0 a9 4d f8 19 3e 60 60 2d 65 a8 a8 3a b3 7f 37 4d 61 97 54 63 48 2d e2 8a 51 69 48 84 a5 14 8d 36 ce 41 63 0d db 59 ea 2c e1 e7 a7 3b dd d7 cd 41 86 fe c7 b2 9d 8e 55 f1 95 4a ef aa f7 39 df 16 fd 1f 92 0f b2 82 a8 ad 74 5b f6 44 ac d0 cf c7 6d bd 01 e0 60 07 a4 e1 f5 bc 63 71 89 51 97 dd ef b6 f7 2a 85 6d 01 70 cb fd 95 f2 a1 fb 29 1e be d6 b7 06 b4 72 29 c6 8b 08 53 6e 32 4c ee f7 7c fe d6 8f 7f fd c9 bf f8 c7 1d 8a d0 56 f5 c2 0a e4 6a 82 98 bf 7b 70 d7 a3 96 75 6c de bc d0 03 2d 34 a4 58 9c 22 81 d4 a1 7b 9b 47 27 fa ea 58 98 66 ee 5c df 0f 03 94 51 80 ae ab b3 f3 55 a0 4e 77 d7 c7 d7 a7 c2 7a 25 a6 e7 33 Data Ascii: TW(oiXBRx^'^s\,uyFM>``-e:7MaTcH-QiH6AcY,;AUJ9t[Dm`cqQ*mp)r)Sn2L\|Vj{pul-4X"{G'Xf\QUNwz%3
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: b2 01 0b 50 d2 eb f2 d5 70 ff bc f0 67 ed 29 1a 24 83 bb 44 de 42 af e6 b7 f7 ea 43 41 4c 4b eb c8 d9 9a 29 98 f6 f6 ca a5 fa ad de a4 bb f4 4d fb 1e 1e 29 68 86 46 ce c0 77 d1 6d 0a 11 04 23 69 1a 59 70 f9 d7 93 16 6a 0a b0 50 99 16 df 97 a7 e5 b3 3b d0 72 5e e7 c1 65 d0 59 f3 53 a9 36 36 e2 14 71 4f ea 2a 48 42 10 03 e0 df f7 9f ff e0 fb 1f fe df 3f f5 dd 2a 50 00 28 b5 68 18 08 8a 53 9d d0 1b a9 01 69 00 18 58 83 58 1c 79 a1 8b f3 ab a7 fe d7 bf e7 3f a0 6f a2 ee 34 3e f6 a0 2b 5c cd 7c c2 03 5f 6a a8 dc 3e 1b ce f3 e8 b7 ef 5f 3c bf 3f 10 f7 d1 54 5d bf f0 c8 81 e9 82 eb 09 1a ff e3 f5 9e bd 75 6e 79 b5 5c cd b7 c4 65 29 00 00 e9 f2 58 ba ac a7 b3 b0 d5 b8 68 f3 62 ac 2e 2d 09 6b 12 49 c4 3c e1 61 1a 46 c5 d0 79 7e 7c 8b ce b7 79 33 b9 7d 69 0e d3 b6 Data Ascii: Ppg)$DBCALK)M)hFwm#iYpjP;r^eYS66qOHB?P(hSiXXy?o4>+\\|_j>_<?T]uny\e)Xhb.-kI<aFy~\|y3}i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
508	192.168.2.4	50418	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	2051	OUT	GET /-/media/f14c2b86d09f44f09e54543661e39782.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D
2024-04-18 17:16:53 UTC	871	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7522 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Baby J Case Stuyd jpg.jpg" Content-Type: image/webp Etag: "CmURmYQWnfVFD+hpcvELdOTkB+eXtPojeCrlc5W7Lck" Fastly-Io-Info: ifsz=47670 idim=270x170 ifmt=jpeg ofsz=7522 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 558126 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210108-DFW, cache-pdk-kfty2130051-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460613.885769,VS0,VE177 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 52 49 46 46 5a 1d 00 00 57 45 42 50 56 50 38 20 4e 1d 00 00 90 85 00 9d 01 2a 0e 01 aa 00 3e 51 22 8d 44 a3 a2 21 14 bb cf 1c 38 05 04 b1 80 62 4a 42 d5 d3 d5 c4 92 f2 0f 82 df 39 d4 3f 14 0e d6 cd 0f dd fb d8 fa 45 f1 5c ea 1d e6 6f ce 77 ce 3b d1 d3 aa a7 d1 03 a6 7b f7 53 23 5a 5b fc c7 c6 3f 4b bf 4b d1 53 33 76 a9 f6 f5 23 0c d5 79 83 a8 ef b2 bd 00 5a 75 86 d7 e3 7c 18 36 16 95 47 3f 83 59 f2 f7 f6 07 b0 97 4c 34 10 88 59 fc b1 c5 85 d0 0e 19 ce 80 d0 d3 65 bc 18 aa 9a 22 39 03 7b 34 2e 40 7b f7 d1 f9 47 94 a0 5f f7 6c bd 51 ba c4 56 51 1e fb 7c 0a 29 c4 2d 86 88 e7 33 4a 0a 1a ac 65 3f 57 e4 f6 f1 17 b8 07 5e 2e 5f 18 5f ff 56 dd 74 6c 35 4a 80 7f 34 25 8b ce 1e dc 0f e5 97 59 fa d4 14 c7 ec 54 99 65 c9 d3 16 77 07 0e 78 ed 72 16 c0 16 a6 b1 31 3d Data Ascii: RIFFZWEBPVP8 N*>Q"D!8bJB9?E\ow;{S#Z[?KKS3v#yZu\|6G?YL4Ye"9{4.@{G_lQVQ\|)-3Je?W^.__Vtl5J4%YTewxr1=
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 8c 78 9f ad 8a fd e4 70 4c df 13 52 c2 cf 45 49 4f ce b3 fa 28 cd d5 a6 bb 0d eb ab a6 d4 18 9b 57 4c c0 3b c8 b1 e3 20 fb 29 a0 e7 36 79 f2 e9 0d 34 60 8f 8b d2 bd 9d 94 b0 85 dc a7 2e 5c 28 e7 98 92 9b 69 95 e5 67 55 ca fc 72 5e ef 58 bb 5a 3b 15 3d d9 e3 2d 5b f4 34 d0 3e 75 ea 34 4a 7a 13 7b d5 e6 de 3d 49 7f 2a d5 90 68 f5 b6 a8 e0 64 49 80 06 ad f5 68 2d 8e fb f9 6f e6 5a 20 a9 cd 91 fc 8a ba 33 6e 8c 80 16 dc 4d 97 4d 81 ff 22 2a 65 a0 ca e2 13 63 4d 47 a1 11 3c 32 f4 c4 d8 34 a3 12 e8 80 d2 73 3b c3 eb 5b 55 ec 28 2a 26 8c 5f f1 a1 46 51 f2 6c df 23 fd 0f a3 3b 37 12 d4 ab 71 60 ed e5 5a 96 20 e7 64 6a c6 20 21 e6 d8 10 36 39 a6 77 f9 e0 26 52 9c a8 08 e7 cf 2f 37 c5 ef c2 e3 ed a0 bc 94 8b df a8 c2 89 a9 d8 c0 20 4e fe 1f 76 33 5d 2b ce a7 6d 3e Data Ascii: xpLREIO(WL; )6y4`.\(igUr^XZ;=-[4>u4Jz{=IhdIh-oZ 3nMM"ecMG<24s;[U(*&_FQl#;7q`Z dj !69w&R/7 Nv3]+m>
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 56 27 cb e6 29 53 b2 55 97 3d ba 04 35 6f 02 cf d6 8d 4c 0b 4f 40 8b d3 66 86 55 a5 b6 ea c1 88 c4 81 61 32 fc fc 31 2e ee 5b a1 e5 23 83 6d 14 94 70 48 b9 e1 50 9c 83 5e f3 18 33 9f ee 98 97 19 21 54 6c 81 49 59 2a 56 35 63 34 fd a8 94 f8 74 04 d8 de 23 cc 0b 24 6e 22 ec 99 22 08 4f 4a 32 3f 6a 9f 0d f3 ad 2b 3d 29 a6 d2 6e 44 62 e6 27 ce 04 3b 77 f9 40 d4 fb 04 da cd 38 99 e3 56 e2 2b 6a b7 e5 06 6b 70 64 f4 09 21 1b e2 f2 4d c2 5e 77 ec 22 b8 5c 2e cc 38 bb 38 2a 6c 85 6a 43 d9 cd c0 b1 65 e7 1f 51 35 f7 bc 0c 46 de f2 0e cf fe 89 75 91 8f 98 f1 c1 8b 98 8c 34 34 af 26 a2 8c 7c 92 da 19 52 4b 1f 4d 8f 0a b3 47 7a b8 ac d7 9a ab b9 ee b8 a5 4e 29 64 13 2b 2d fa 5f c6 d8 af 84 c0 29 13 53 f6 0a 00 53 a6 4e 09 c4 d9 97 94 2a e4 7c d7 9c f5 09 e0 81 25 d9 Data Ascii: V')SU=5oLO@fUa21.[#mpHP^3!TlIYV5c4t#$n""OJ2?j+=)nDb';w@8V+jkpd!M^w"\.88ljCeQ5Fu44&\|RKMGzN)d+-_)SSN*\|%
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 9e 26 4f c0 4c e1 f6 74 8e df d0 a4 4a 77 7f 70 d6 f2 41 44 ab 15 85 33 b2 f0 be 12 77 f1 02 68 d1 fa 9f 5f d7 14 84 eb ba b4 dd 78 ae 4e 0b cd 7f cb f8 cd ec 03 b3 60 27 a2 49 15 14 3c bd c9 cd 47 e4 4c 3a 9b 7b 03 bc f7 1f e1 e5 fe 0c 27 0b ef b3 06 f0 81 aa d5 1b 75 25 d5 52 9a 9d 4f 7e 94 bf 14 69 ab fb a2 1c 4f 4f bd 54 5a ef 2b 13 6a ce 1b e7 69 bd df 57 b9 2b be 6b c5 b2 44 a0 14 09 fd 8d a9 8b f3 58 71 a2 34 07 01 01 af d3 30 85 2b 98 9b c5 d3 ba 19 94 69 51 a7 08 42 29 2f 28 e8 4a 9a 72 8f 7d b1 f5 c3 ca b6 ae 1f 17 5b 06 72 ef 56 c4 a3 49 7a 7f 0e 40 d2 68 40 33 1c 94 10 2a 76 9b 42 5f 40 b3 a3 7d 53 fa a4 1d d6 df 70 62 63 c3 d1 77 7e 50 96 ff ee e9 ef 32 18 07 07 44 5e ce 3d 63 08 57 16 08 49 4a ff e0 41 7a 74 5f ae 1c 2a 7e 64 33 f9 b0 e1 a4 Data Ascii: &OLtJwpAD3wh_xN`'I<GL:{'u%RO~iOOTZ+jiW+kDXq40+iQB)/(Jr}[rVIz@h@3vB_@}Spbcw~P2D^=cWIJAzt_~d3
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 06 88 eb f5 53 77 54 0c c2 4c 01 07 7c ed 75 a2 50 77 82 63 79 60 e0 72 85 90 0e 57 81 31 ca f8 67 ee 58 2e 18 dd 2f b4 0f 77 8a 36 3f 68 f8 8d f7 20 9a aa cd aa 20 3e cd f2 0a fd ff 01 75 50 7b 17 8a 57 df 15 00 45 c7 5c 30 3b c1 55 4f 7d 3e 6e 71 01 08 62 ad 6f df 18 7f 58 b6 f8 03 eb d5 26 ee 6f 23 0f 91 85 41 4b 77 2e 02 cd 3d 4c ff 92 f9 e3 23 ca b3 97 2b 57 0c 21 55 0e 81 fc 4f 39 9b 88 ea be e2 24 a0 df 49 ab b6 09 78 c6 e2 90 93 43 aa 09 95 b7 a5 f8 87 df f3 73 2e 18 dd f6 21 5a cb cf 96 c7 f1 9b da 46 6f d4 15 e1 e1 fe ac 4b 9b 64 58 49 56 e9 ef 70 ca 3e b3 93 ea f5 0b d1 98 5a f9 72 18 58 42 59 08 27 f4 c5 9a 4d db c7 47 b6 8f 56 19 47 e9 94 4d 4b 28 a7 d7 92 59 cd a3 4e ee ea 75 8c bc 20 45 c3 86 d5 7c d7 24 ce 5b 5e 85 88 f2 30 49 c2 1d 3d 9d Data Ascii: SwTL\|uPwcy`rW1gX./w6?h >uP{WE\0;UO}>nqboX&o#AKw.=L#+W!UO9$IxCs.!ZFoKdXIVp>ZrXBY'MGVGMK(YNu E\|$[^0I=
2024-04-18 17:16:53 UTC	627	IN	Data Raw: c0 5a 25 48 33 60 2b 0b ff b2 62 b9 1f c2 3f 62 7f b2 4d 31 e4 19 e6 21 b2 96 ce aa bb 86 f0 45 45 34 6f 0f f8 7f 91 a1 f6 3b cc ea d7 24 98 f0 dc a1 7a d5 b1 f3 4f 30 b5 3b e1 b9 dc e2 8a 93 1f 76 45 0a 5c 3a 1b 14 cd ba f1 8c 15 cc 75 b2 32 91 da eb fc 53 3f c6 64 f6 af 7c fe a3 91 66 ed 05 bf 9f f6 38 ef ab 01 87 cf e4 71 73 6f 41 e3 f2 e7 7a 4b 72 08 dc ef 54 b8 35 d3 b9 35 c3 16 77 bd f9 82 61 8d 98 a6 04 e7 06 54 98 d7 ac e5 33 d1 63 86 43 e7 61 2b 80 5e 24 95 38 b0 8c 5e 65 41 92 d9 84 6f 9a c7 09 c0 44 fd 08 f5 35 e2 7c 26 fb 5e ae 22 3a bb c5 9a dc b3 23 b1 7d 46 17 7a 65 e1 a1 ef ee 6c 4a 3c 4c e7 0c 9a 5b a6 79 e8 81 18 c0 84 40 fe 93 1d e5 c5 3c 83 a5 47 2c 40 19 5a 36 2b d9 9c 07 53 20 e0 c6 38 37 71 d1 eb b2 bf e8 ea 97 0c 38 ff 6d 1a 56 16 Data Ascii: Z%H3`+b?bM1!EE4o;$zO0;vE\:u2S?d\|f8qsoAzKrT55waT3cCa+^$8^eAoD5\|&^":#}FzelJ<L[y@<G,@Z6+S 87q8mV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
509	192.168.2.4	50419	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1214	OUT	GET /pagead/1p-user-list/940382430/?random=1713460610947&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqalUuLP08j6lOWeZurtt9UGf-DT5TtjeCSyVRsn3uPs9cwZvF&random=3202261757&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:52 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:52 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
510	192.168.2.4	50417	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	2052	OUT	GET /-/media/78ca58c9b8094d2cb1722b2bbcd4a19c.jpeg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D
2024-04-18 17:16:53 UTC	882	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10176 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="LN Accurate Data CS 270 x 170.jpeg" Content-Type: image/webp Etag: "bjtxM/tgOuyyiFgrp4slyAj0wzQehYg/7WlHPwz3Jl4" Fastly-Io-Info: ifsz=63828 idim=270x170 ifmt=jpeg ofsz=10176 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010210 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 558126 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120079-DFW, cache-pdk-kpdk1780037-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460613.891524,VS0,VE187 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 52 49 46 46 b8 27 00 00 57 45 42 50 56 50 38 20 ac 27 00 00 d0 91 00 9d 01 2a 0e 01 aa 00 3e 51 20 8d 45 23 a2 21 14 ba 9e 88 38 05 04 b2 b3 f9 3f 01 f3 d1 a3 c8 7f 3f cf 3f ad dd 9d 23 18 45 d9 57 d3 af f7 fd e3 3c ec de 9c 3f b9 6f c7 7a 2a f9 d1 fa ca 7f 80 c7 43 95 e3 58 f5 79 f6 be 6b b9 43 ec 7b 52 0f 9b fe 58 fe 9f f8 3f 6a 7f e0 f8 1b f3 af 50 ef 68 6f 74 dc 4f 40 8f 7b 3f 0b e6 d7 f8 be 70 fd a1 f6 01 e0 fb f5 df 60 4f d5 9e af ff e9 f9 30 fb 03 d8 2b f6 27 ff 07 64 4f 4a 93 e7 5b 84 5f ec 0b 8d 56 ee fc 29 9b ef 8d 12 3c a6 be 5b c2 55 2f 6a 17 7f 3c a5 96 8f 55 e5 b8 f3 0a 61 b7 76 5f 27 c8 79 34 45 4d 0c bf 30 c4 78 11 d7 23 70 f9 97 42 da c8 a8 85 7a 41 cc af aa af 74 5f 6c ac 4f c5 3f 9c d6 fb fb 71 3b 98 05 b7 eb 68 12 7e f6 13 ef d4 29 46 Data Ascii: RIFF'WEBPVP8 '>Q E#!8???#EW<?ozCXykC{RX?jPhotO@{?p`O0+'dOJ[_V)<[U/j<Uav_'y4EM0x#pBzAt_lO?q;h~)F
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: d7 bb 16 c4 dd 0b 0d 1a 81 33 db ca e6 36 99 62 b0 2e 8b 8c 9d be ee c8 3b f1 d8 a2 4e ec da 6c d5 86 9c 44 7d dc e5 0b fe 9f 28 74 06 00 9a 96 4f 17 fd fd 26 c2 39 6b 52 de b2 65 57 6b 4d a2 0c 2f 2b 8a e9 f1 1d 86 5c c2 59 66 0c 66 50 59 b0 0a eb 6d 73 60 f8 65 31 be 8f 68 0f 6f 27 fe 4e b8 ea cc dd 22 a1 c9 e7 00 e4 c4 41 f7 0d 7e 11 ef 45 54 ad b3 6b 4f c8 f2 46 65 f0 42 18 c4 1d d0 81 c5 fa 82 f0 2c 80 de ca bc 1c c5 06 16 ec bf 4a c8 5c d2 18 12 fd 6c 43 4f 07 75 f9 98 85 fa a7 66 6d dd 6d d5 e9 47 82 10 5f c1 df 5f 08 1d a9 a7 79 51 41 ac 53 7c 6c 06 59 cd 6b a2 b3 e2 04 51 c5 a3 d7 cd 4c e2 4a 00 8f 56 a6 5c 68 94 a6 62 96 80 ed c5 68 ac 50 c4 88 d4 ee fd 0c ae 52 3c 0b 10 6e 44 0e bd c7 f6 d8 cc bf 18 be 05 a5 dd ea c8 dc bc 3d 2a 07 23 bf f8 47 Data Ascii: 36b.;NlD}(tO&9kReWkM/+\YffPYms`e1ho'N"A~ETkOFeB,J\lCOufmmG__yQAS\|lYkQLJV\hbhPR<nD=*#G
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 68 66 ab 2f d2 7e 98 ce ab 22 6d e4 8c 18 54 39 ac 5e 4a c0 b5 19 7d 47 35 e9 fc 96 44 1b f0 34 b0 d0 dd 98 19 69 31 d8 9c 19 20 b3 dc 42 c3 20 68 24 2e b3 91 9d a1 75 c3 20 41 ba a2 92 7c 34 5d c6 f4 59 6e 5b 24 30 ea d8 ae 2f 76 a6 5a 2c c4 74 d9 12 27 40 f0 6a 9f b5 b4 b7 aa 0f a8 42 15 70 9e d5 6e cc d5 27 de ea ca 2f 4b c0 c0 95 33 39 3e 83 46 37 d0 8d fb 89 84 7f 4f 68 ee 56 62 50 d4 18 a6 35 8c 3d 3e b5 5a 3a 50 b3 23 07 5c 6e 8a e4 7c 91 85 55 a9 06 65 36 29 a7 a7 c2 5f fa ff db 8a 63 98 b3 25 43 01 2f 45 77 e2 6d ce 19 bd c8 1b 29 ea d1 f1 e2 52 a2 f6 72 14 6a 65 37 3f 24 43 96 56 95 5f 8d a8 00 72 1f 3d 21 79 b3 ce 0c 42 86 f7 98 ba 81 b4 f8 b2 63 86 ae 0a 66 b2 a4 ac ca 4d 5d 85 23 51 00 d0 cf 3e 69 05 aa 5f bb 7e 44 68 b5 fd 33 97 d4 5b 67 50 Data Ascii: hf/~"mT9^J}G5D4i1 B h$.u A\|4]Yn[$0/vZ,t'@jBpn'/K39>F7OhVbP5=>Z:P#\n\|Ue6)_c%C/Ewm)Rrje7?$CV_r=!yBcfM]#Q>i_~Dh3[gP
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 05 d0 39 73 0b 09 01 97 0e cf aa 82 c4 5d b2 30 24 a7 ec 15 d1 e5 61 d8 ac 26 bc c9 09 1b 75 be fd c6 97 c3 c4 ed a9 42 a4 36 d6 30 eb 91 98 2b d8 1e 85 f7 14 6e 3e d8 3a f0 6d 3c 8e de 34 65 68 7b 39 90 1e 33 d9 0e 4f 33 2e c3 04 dc 0c d6 61 1a a3 86 cb f7 56 fd 74 c3 12 f7 be 7b c2 ed 0d 07 a9 e4 86 22 7b 89 fe ee 08 c4 75 43 56 89 f6 30 a2 13 fe 70 4b 8e b6 41 32 45 07 b8 bf 26 3f 3d 39 cc da 68 48 75 c7 af 17 51 54 cd 9d 63 67 1f 2b 32 27 b8 af 96 f3 62 37 dd ae 95 33 13 5b 0e 39 e8 cc c7 63 c7 2b b8 4a 04 89 0b 3f 3d a2 05 d8 a8 45 ff f6 ee 56 3f d8 66 2a 41 e9 85 8a 25 3a 51 1a 8c 31 55 16 e6 7e ce 77 97 81 8f 3e 55 45 20 5b 88 7c f8 e2 79 02 84 d5 d0 3f 2e c4 47 c5 56 6b f4 ba 6f 7e 75 c2 4c a3 fe 7b aa e1 67 d9 52 11 a1 d4 27 dc 16 19 68 b9 0c a6 Data Ascii: 9s]0$a&uB60+n>:m<4eh{93O3.aVt{"{uCV0pKA2E&?=9hHuQTcg+2'b73[9c+J?=EV?f*A%:Q1U~w>UE [\|y?.GVko~uL{gR'h
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: e3 96 b5 2b 6e 11 20 09 ae 8e b3 16 4e f8 13 02 50 33 3a 95 38 74 d5 95 0d 26 b1 b4 19 11 b2 8d 3a eb 5a 9c 45 23 90 7a b3 27 45 95 ce 47 74 e4 34 e1 5e 74 26 af 18 db 5b f2 4a 8f 3b a7 2e db c4 3b 8b ba c3 22 0a 15 31 c0 a5 4b 05 9b 34 c9 4e 34 68 28 d9 a0 c0 12 d3 a8 c8 c1 e2 dd 6d 52 d7 c3 e6 47 04 0a 06 5f a5 d8 5b 07 31 c0 54 1e b4 b4 c3 6a 02 c8 ef 25 68 ab 9b 5b e1 b7 5a 8d df 5e 67 c3 3e f5 0e 2b e6 28 57 6c 31 0a b2 a2 11 1f 4d d7 9a 1d 6b 45 ee 5b df 5d af 38 ca 9a ba 04 53 20 02 b0 4b db a7 84 1a 22 3f 71 11 9a 74 84 b4 a3 95 06 29 30 72 7a 7f 89 63 68 bf 6c af 58 6d 71 72 e3 b5 76 0f 96 e0 69 2b 15 dc 9f e2 ca 83 6f cd b5 ff f4 5f 1d 64 ef 1d 47 d1 13 d9 5a 92 9a a0 7d fa 27 d3 f3 67 20 48 79 a9 52 09 85 c8 a6 aa 5e 3d 6b 59 4f 3b 34 1d 81 2d Data Ascii: +n NP3:8t&:ZE#z'EGt4^t&[J;.;"1K4N4h(mRG_[1Tj%h[Z^g>+(Wl1MkE[]8S K"?qt)0rzchlXmqrvi+o_dGZ}'g HyR^=kYO;4-
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 7b 7e eb 3b 4a 12 1e 44 fb 64 04 17 29 ef f4 91 40 55 b7 e2 54 ab f8 7b 96 41 b7 f6 ff 91 cb 84 3a 3a 25 43 eb a6 04 dd e9 d2 26 68 1d b0 24 e3 5a 3c 6b e8 55 8b 65 77 76 5e 77 73 df 98 df f9 4a e9 41 2e d5 9e 14 e2 3e 7d e5 2c ce 25 d9 06 08 90 9a cf 49 00 a3 22 4f ce c6 c1 a5 e3 c5 51 db 81 87 20 77 a8 f7 db af 7b 0d 44 26 cb 68 ad 41 9c 76 48 e7 2a d9 65 f2 1f 07 07 a9 cc 77 cf 04 8b 6f 78 b6 74 ca 94 21 c6 7c ed 10 fc 74 43 ef 78 28 8b 7c e9 04 1a cc b3 db 76 f0 d4 a7 87 ec 21 28 2b 2d ed db 5d 30 4a cf 6d dd 14 5e 70 cd c8 f8 61 49 13 99 db 25 d6 a9 33 81 02 5f 45 cc 11 49 6d ca d5 f0 37 13 6c de 0e df 99 20 00 ed 72 8f bd 96 28 5f 5f 7f 99 c4 6e 21 99 fb f3 b7 8a 19 6d 23 21 61 e3 4b 72 ed 41 87 d8 73 0a 96 c0 c0 59 ba d7 22 e2 a5 06 0b 53 e1 d4 bd Data Ascii: {~;JDd)@UT{A::%C&h$Z<kUewv^wsJA.>},%I"OQ w{D&hAvH*ewoxt!\|tCx(\|v!(+-]0Jm^paI%3_EIm7l r(__n!m#!aKrAsY"S
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: b5 2a 6d 43 db c3 9e b7 0e bb e0 c8 ea aa 4e 2d de d5 21 ee d1 aa 4b f8 37 26 0d 89 7e 6c f9 2c 0e 4d 04 df 0f 36 f3 20 f5 44 f4 56 2a 8f 10 fe fc f3 2e 50 d7 9e 9d 83 ec 98 fe 76 16 df 26 0b 07 84 bc 6f 53 29 d5 7f bc eb b1 55 32 d9 10 d9 8a 97 20 b9 ff 89 42 cf b2 3d f6 f2 39 50 16 1e 66 44 e2 f5 cb 04 94 59 df dd 33 9e 0b a2 d5 f6 7e 6d 67 90 2d 29 b0 3f f5 35 56 12 aa 44 42 fc 46 1a 81 a6 b0 4a 40 c1 4f 6e 06 bc 6a ee 9a 8d ce f9 6a 4c 78 01 4f b8 3b 1f 1e 92 0f 85 c5 27 bd 22 0a 63 59 50 da f4 a6 73 66 90 e7 37 e9 54 fa 5a b5 66 53 9a 90 da 0a 79 87 09 e1 55 17 8d 8f 85 d4 c2 81 fb ac d5 d2 46 33 52 8f 13 99 d3 f9 f8 1b 16 4d 59 17 3d 8f fc 0e 64 aa d0 8d ce 24 ec 81 e4 ab cc ce 09 e9 f7 8b 87 28 c3 8b ae b3 58 e6 02 97 b2 32 39 ac b9 0b 75 ff 8a a9 Data Ascii: mCN-!K7&~l,M6 DV.Pv&oS)U2 B=9PfDY3~mg-)?5VDBFJ@OnjjLxO;'"cYPsf7TZfSyUF3RMY=d$(X29u
2024-04-18 17:16:53 UTC	523	IN	Data Raw: 61 67 91 0e 1a 5a 59 24 e7 6e f1 3f 5b 80 0b 7b 4c 4c 1d b9 15 98 2a 6b e6 70 f7 fe 04 eb e9 64 6f e8 cf 40 e7 bb 0e 0c 2d 18 4b 92 b3 6f 82 a0 08 d8 62 16 f3 38 38 ee 9b 03 75 ad 05 b8 fc 00 c0 e9 1a 2b 4c da 0b 03 8c c4 38 bf 2d 84 36 77 b1 aa 10 08 1a a4 21 31 70 06 24 ae c9 e9 a2 44 96 7e 3d 74 4a 47 d8 30 87 a4 de 4c 7c 52 cd 4f 62 14 7d 99 83 69 ca be 9c 86 3f 25 7d a7 65 29 cf 2e cf be 03 25 0f 9e d3 fe d7 a8 e5 81 14 88 2a ad f2 e4 22 0b 6b 12 38 cb 9d e0 7c 88 73 62 7d 22 6b b8 2b 88 49 af 38 7c 77 57 01 08 c2 bd 00 cc ee 1f 5a 5c 0a 6f 22 8c de c4 29 69 0a e0 52 ce 52 51 7a 9a 1c 30 b4 e3 54 f4 f6 fb 7a 53 be d3 48 ef 42 17 7b 1b 8d 9a 30 04 65 3b 60 68 ab f6 2d 6b f4 38 53 d5 57 7f a6 39 b7 78 e3 39 85 b8 f5 79 63 fd 88 79 71 06 c4 4a 64 d5 e9 Data Ascii: agZY$n?[{LLkpdo@-Kob88u+L8-6w!1p$D~=tJG0L\|ROb}i?%}e).%"k8\|sb}"k+I8\|wWZ\o")iRRQz0TzSHB{0e;`h-k8SW9x9ycyqJd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
511	192.168.2.4	50422	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1213	OUT	GET /pagead/1p-user-list/978398205/?random=1713460610976&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqY550Y6dnr_3XlUkderQ1OKmYXB94fGyoOnKkY6jdBbE8f-jy&random=827221546&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
512	192.168.2.4	50424	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	1214	OUT	GET /pagead/1p-user-list/10896111711/?random=1713460610993&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq1eAktOdjZfaCTm0SAXWY_XKLoZHPFJKGkZfhOODIsO8Qry2x&random=86083454&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
513	192.168.2.4	50428	104.244.42.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	766	OUT	GET /i/adsct?bci=3&eci=2&event_id=76420934-eb93-4a88-94c8-85612c0f99b7&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a3d6060f-69fb-461d-9c80-0b696d307f47&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c
2024-04-18 17:16:53 UTC	392	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:52 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 0b9efab3d1be9277 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 2aff9635ccef0f40c558a584c336a1519615dd12f19a439e8e1607abf37bb8d8 connection: close
2024-04-18 17:16:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
514	192.168.2.4	50425	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	491	OUT	GET /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3344979810927 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557
2024-04-18 17:16:53 UTC	884	IN	HTTP/1.1 302 Found access-control-allow-origin: * vary: Origin date: Thu, 18 Apr 2024 17:16:53 GMT content-type: text/plain;charset=utf-8 expires: Wed, 17 Apr 2024 17:16:53 GMT last-modified: Fri, 19 Apr 2024 17:16:53 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_vi=[CS]v1\|3310AAC2982BB5E4-40001F0082A44321[CE]; Path=/; Domain=lexisnexisrisk.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:16 GMT; location: https://analytics.lexisnexisrisk.com/b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3344979810927?AQB=1&pccr=true&vidn=3310AAC2982BB5E4-40001F0082A44321&g=none&AQE=1 content-length: 0 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
515	192.168.2.4	50430	151.101.12.157	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:52 UTC	746	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-18 17:16:53 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:53 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840063-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
516	192.168.2.4	50431	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	965	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
517	192.168.2.4	50429	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	833	OUT	GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=7088ebd4-7a2b-4d76-b2c0-1e067e830c0e&ca=2024-04-18T17%3A16%3A51.764Z&tz=Europe%2FZurich&bis=5&referrer=https%3A%2F%2Frisk.lexisnexis.com%2F&pv=0&fv=2024-04-18-740ab68ad5&iml=false&ic=true HTTP/1.1 Host: ws.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://risk.lexisnexis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: VqmrS92rEPMWv4t7pC4Lvg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
2024-04-18 17:16:53 UTC	259	IN	HTTP/1.1 400 Bad Request Content-Length: 12 Content-Type: text/plain; charset=utf-8 Date: Thu, 18 Apr 2024 17:16:53 GMT Sec-Websocket-Version: 13 Server: nginx Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff Connection: close
2024-04-18 17:16:53 UTC	12	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 0a Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
518	192.168.2.4	50432	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	1214	OUT	GET /pagead/1p-user-list/938539671/?random=1713460611010&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqerCJGzMHDwX2hZyeX_0vNVup1HDiOYkIntjjYeRkEPy7acoN&random=2365703598&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
519	192.168.2.4	50433	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	249	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:53 GMT Content-Type: text/javascript Content-Length: 70 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664e20891b53d5-ATL
2024-04-18 17:16:53 UTC	70	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"","stateName":"","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
520	192.168.2.4	50434	162.210.193.238	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	578	OUT	GET /1/indexes//queries?x-algolia-agent=Algolia%20for%20vanilla%20JavaScript%20(lite)%203.27.1%3Binstantsearch.js%201.12.1%3BJS%20Helper%202.26.0&x-algolia-application-id=KM18SZRXTM&x-algolia-api-key=8790b71f94f13d24e3298d1c6b7fd2ed HTTP/1.1 Host: km18szrxtm-dsn.algolia.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	430	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 18 Apr 2024 17:16:53 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 49 Connection: close Accept-Encoding: deflate, gzip Cache-Control: no-store Access-Control-Allow-Origin: * Timing-Allow-Origin: * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Disposition: inline; filename=a.txt
2024-04-18 17:16:53 UTC	49	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 69 6e 64 65 78 4e 61 6d 65 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 7d Data Ascii: {"message":"indexName is not valid","status":400}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
521	192.168.2.4	50435	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	1215	OUT	GET /pagead/1p-user-list/10827142419/?random=1713460611030&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtquei_JfpWKCnnq_f4a5YjNzeIYU23Us34DVMjsoMNckIY8hlM&random=767088919&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
522	192.168.2.4	50438	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	1213	OUT	GET /pagead/1p-user-list/527644678/?random=1713460611045&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqZjGyuNpEwICRPmclMqVsYRDss0thgFl2nPufsEh0_WmWX9ut&random=269121769&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
523	192.168.2.4	50440	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2051	OUT	GET /-/media/c39261e5857b454797dfcb6ea7d82655.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A39+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=1184; s_ppv=insights-resources%253A%2520case-study%2C77%2C77%2C907%2C1%2C1; eVar66=4; s_sq=%5B%5BB%5D%5D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
524	192.168.2.4	50439	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	971	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"},{"ch":"124","t":"2024-04-18 17:16:42"}]
2024-04-18 17:16:53 UTC	331	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 2d 31 32 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 34 31 32 32 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 63 6f 70 79 72 69 67 68 74 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 26 61 63 63 6f 75 6e 74 5f 69 64 3d 61 77 72 7a 68 33 32 63 35 68 6a 66 37 78 32 26 6c 69 73 74 3d 65 32 34 67 6d 38 65 79 35 6b 34 6c 6c 26 63 68 3d 32 37 38 26 Data Ascii: ws=1&lang=en-US&cookies=true&tz=-120&screen_res=1280x1024&browser_res=1280x4122&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&account_id=awrzh32c5hjf7x2&list=e24gm8ey5k4ll&ch=278&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
525	192.168.2.4	50442	104.244.42.3	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	787	OUT	GET /i/adsct?bci=3&eci=2&event_id=76420934-eb93-4a88-94c8-85612c0f99b7&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=a3d6060f-69fb-461d-9c80-0b696d307f47&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="
2024-04-18 17:16:53 UTC	400	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:52 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 74efe710c2fdd315 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: d9b36ddf9d3aacf9a25e0aa33b5394e2936fdfa25fda12e7850a556239c80500 connection: close
2024-04-18 17:16:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
526	192.168.2.4	50441	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	951	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"},{"ch":"124","t":"2024-04-18 17:16:42"}]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
527	192.168.2.4	50443	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	1836	OUT	GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A51+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1 If-None-Match: "yqok8lWwIK59bHUsY2MOT5H8KP3u6oSVXzC7bAPYWlk"
2024-04-18 17:16:53 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:53 GMT Via: 1.1 varnish ETag: "yqok8lWwIK59bHUsY2MOT5H8KP3u6oSVXzC7bAPYWlk" Age: 1 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130063-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460613.313146,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
528	192.168.2.4	50451	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2125	OUT	GET /Areas/LNRS/img/icon_sprites_4sept2020.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:53 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:53 GMT Via: 1.1 varnish ETag: "xwi2g+B2yw2ZjGwB1ldjNz1+mklGcSrBsTH9jt/bZh8" Age: 49 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kpdk1780033-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460614.511431,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
529	192.168.2.4	50453	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	946	OUT	GET /pagead/1p-user-list/940382430/?random=1713460610947&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqalUuLP08j6lOWeZurtt9UGf-DT5TtjeCSyVRsn3uPs9cwZvF&random=3202261757&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
530	192.168.2.4	50447	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2128	OUT	GET /-/media/images/government/ln%20baby%20j%20case%20study%20mantle%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:53 UTC	886	IN	HTTP/1.1 200 OK Connection: close Content-Length: 36650 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="LN Baby J Case Study mantle jpg.jpg" Content-Type: image/webp Etag: "+ixcJXUGvlrZJFybhv3jrlrqNSMRFMo4ctzpyj8+xHE" Fastly-Io-Info: ifsz=241538 idim=1000x445 ifmt=jpeg ofsz=36650 odim=1000x445 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 526888 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120060-DFW, cache-pdk-kfty2130057-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460613.446306,VS0,VE403 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 52 49 46 46 22 8f 00 00 57 45 42 50 56 50 38 20 16 8f 00 00 d0 67 03 9d 01 2a e8 03 bd 01 3e 51 24 8f 46 23 a1 aa a9 22 f1 cc 01 50 0a 09 65 6e 0a bc 38 33 8c 1f 01 a7 cb d1 ed ef d9 b8 7c 29 5a fa a3 1e 73 fd b3 be df e9 7c 24 bc cf fc df 4b 9e 3a 94 07 e3 93 9f bf fd 9f 44 7f d2 79 eb b1 c3 bd bf d7 9b b5 70 de 9f 99 af 21 f9 53 21 2c bc fb 13 3a 7f 6b ef 49 e9 d3 f5 df fe 7f 71 df d6 2e aa 9e 74 ff 74 3d 5c bc e4 fd 16 3a af 3d 13 7c bc bf 6e be 27 3f 76 fd 27 f3 79 bc f9 fc 7f b1 1f 43 bf 6f fe 37 da 5f f8 ad 3f f7 03 a9 f7 d0 7f 7e e6 8b fd 6f 19 7f 24 fe 6b d0 cb d8 1e 70 9f 7d e7 61 b4 ff c7 f1 f2 fc 47 ec ff a9 07 e3 f8 bb 32 cf 41 2f 27 0f f6 3c ad 7d 79 ec 21 fb 17 d7 0f d2 4c ce cb ec cb c7 d0 77 5d 0e fa c0 94 64 f9 58 1f a5 6e d8 16 54 bd 0e Data Ascii: RIFF"WEBPVP8 g*>Q$F#"Pen83\|)Zs\|$K:Dyp!S!,:kIq.tt=\:=\|n'?v'yCo7_?~o$kp}aG2A/'<}y!Lw]dXnT
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 28 2e 93 a9 db 25 3b f8 92 e1 68 26 91 42 6a ff 6a 4a 5f 5a 17 75 29 36 2e e2 95 b5 1c f8 a9 9f d5 73 c7 58 3b dc 9a 2c 14 53 a2 4f 04 b3 40 3f 53 97 86 dc 90 dd 02 96 bc 0b 61 f3 9f eb 80 c7 fd 06 cd fb b5 3b c2 74 d1 a3 67 52 ac 31 ee 42 9c f8 c8 cd 7b 1e a2 0d a5 53 9d 62 14 47 29 b2 9f d5 8b 18 a8 22 15 2a cd f8 6b 23 d0 a5 2b 4a 11 e7 6d 23 8b 6d 7e d2 19 ce a1 2f 86 09 75 be e3 f7 e5 1c 9a 8d 7d 29 ce da db 45 2c a6 43 64 02 9b e8 12 e0 3c 33 29 9b 8e f7 76 95 09 7d c2 b7 3b 9f 04 17 af 4e a8 93 35 f8 54 bc fe 32 d8 2c 2f 03 57 ef d1 a6 6d a2 35 bd 38 91 1f cd 73 99 0c 36 72 32 06 de a1 07 c8 62 bf 45 e9 6f f6 3c 28 10 31 28 f4 2d 7e 78 12 7f 51 6d 82 22 62 1d 34 0d d2 30 fc 79 85 e2 a1 ec 1a d6 50 a3 b5 9b 37 27 18 4e f5 cc 54 64 6d fc f0 5f 0c 3e Data Ascii: (.%;h&BjjJ_Zu)6.sX;,SO@?Sa;tgR1B{SbG)"*k#+Jm#m~/u})E,Cd<3)v};N5T2,/Wm58s6r2bEo<(1(-~xQm"b40yP7'NTdm_>
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 81 55 14 3c 84 e5 50 d7 c2 ef 2a 93 fc 86 46 08 1a 40 cc 89 46 d3 4d 40 6d ad 1d 1c 34 7f 11 f5 88 20 f6 42 5d e3 54 b6 f0 8a 48 cc ec c2 9b 33 8d 61 4a 83 d6 58 9d c7 c7 6f 5d 8e fb d0 8f 13 d8 b5 57 7e 31 06 90 d8 a6 29 04 6e 3a 66 96 96 b6 15 2c b3 a3 6b 35 ca d8 75 5e 9a 37 c6 22 79 cf 54 5f 66 d5 db e3 ae 9b d7 e2 37 94 9c f6 ca 1b 33 65 55 20 0f 86 ef f6 11 82 36 86 b9 c4 6a 6d e3 17 c0 17 9b 6c 4e 9e cf ca 7f 98 40 d3 0e 1a f8 6c 1d c2 fe db e4 a6 42 15 e9 b0 2d 5e 3b f1 7a 4c 8e aa 46 89 57 b1 a2 d8 fa 7e 12 3a ac 6c 01 e5 0a d0 5e ea 0b 19 b5 13 a9 b7 a7 4c e3 9b bd 7e aa 0d e3 c4 08 6d e5 b9 d6 54 b6 03 75 a0 99 80 c3 c9 62 d9 dd 3e 27 0c 48 f0 cc ae 2f 45 20 5a 7f b4 6b c2 49 c5 4e a5 2a 8b a2 ac cf 08 77 5b 57 6d db d4 5e 96 91 c5 ee 7e 40 c2 Data Ascii: U<PF@FM@m4 B]TH3aJXo]W~1)n:f,k5u^7"yT_f73eU 6jmlN@lB-^;zLFW~:l^L~mTub>'H/E ZkINw[Wm^~@
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 3a 13 35 67 4b fb fb e3 00 a3 16 80 36 6c 0e 35 74 63 25 10 fa 5f 17 d6 b0 8e 03 3a 9c f5 9f a9 e9 0a 89 d7 a6 b1 13 4b 6b a5 ab 28 ba 46 97 ca 75 72 1f 9c 63 b1 93 c6 0b 89 1f ff 25 c5 f0 1c 80 6e bd fb fd 27 34 bb 7e 14 75 5e ac 20 2c b6 c3 27 58 3c b2 8f cb 5d b6 1e 6c fa 70 dc 6c a4 13 06 94 28 a0 57 52 c1 ed ec ad 9d 8f 82 3c 20 cb d1 42 f3 1f 4d b1 8f 94 ac 08 e1 93 a4 55 a9 d7 d5 71 ff 82 13 a6 a4 53 93 bb 05 fa e1 98 6a bd 14 db 57 2d a7 4c bc 05 54 c7 bb 04 e3 85 47 ce c3 72 46 25 b9 65 c0 c1 09 9f af fa 41 47 64 b7 0a 44 d5 b3 9a 08 9d 6f 1c a3 22 63 b5 ac 76 0a f7 3b af 3a 61 d4 b9 42 c5 06 99 91 77 aa 1a 2d 14 c0 1e e5 ef 5b 6d 10 c8 ad 23 69 39 ea 3e 7b 9c b5 11 c3 10 65 d4 c2 43 8c 97 78 6b 0b 5a 00 3d a6 1b 6b 74 4d 4f 2b 59 61 7e aa 56 2a Data Ascii: :5gK6l5tc%_:Kk(Furc%n'4~u^ ,'X<]lpl(WR< BMUqSjW-LTGrF%eAGdDo"cv;:aBw-[m#i9>{eCxkZ=ktMO+Ya~V*
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: b1 bc 33 6a d5 fc 5b c9 13 b6 84 dd 65 7d ee 12 3e 5a 0d ec 10 3a 42 ac f4 d8 af 22 73 0c 36 28 7a 9d 18 d3 d8 da 5d 84 ea 56 04 f4 3c 60 fa c6 7a 14 0b c2 31 f3 c7 8a ef ac 19 8d 81 fa 1d 73 48 82 df 0f 68 84 a6 c6 e8 d4 6f ed b6 bd 87 75 1d e8 f5 22 5f ea e5 ee 2f f0 03 bc 0c e0 e4 32 12 a6 33 c5 9b 29 ce 9b 5a 7f cf 40 49 2d 31 0e d8 1a 08 88 c8 0e ba 9d 09 70 a0 51 8f 60 eb 43 db a6 3c 39 2b ed 94 70 ca a8 97 74 d1 4f 8a 93 79 b0 ca 2f 0b 8b 8a 1d 81 c5 84 8e da c1 90 88 9c f1 61 6e bb 18 ad f1 f5 69 55 2e f4 44 4b ab ef 4c f9 fb 51 f6 92 81 e9 f8 9d 35 11 19 00 ef fc e4 e2 e2 03 7f d0 99 f0 ee d2 78 d2 e4 8c 2d 70 87 3f 09 a6 c2 67 01 d5 7f 12 78 23 e1 f7 1c 22 c3 61 2d b9 88 cf 77 a9 81 f1 fb 32 87 48 bb 0d 0f 9a bb 83 74 cd 11 ca 4c cb 8f 70 37 0b Data Ascii: 3j[e}>Z:B"s6(z]V<`z1sHhou"_/23)Z@I-1pQ`C<9+ptOy/aniU.DKLQ5x-p?gx#"a-w2HtLp7
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: d7 02 ad 68 24 b6 7d 1d 4b 69 36 89 f8 2d ce e6 04 d8 97 8e 90 be e6 eb ae fc f7 0c 95 72 79 f9 a7 c1 aa dd f9 a4 4f d7 41 01 67 92 0b 9a 7e fe a9 9c 42 56 1e 25 b7 ca 8a 7b 94 d7 ff 57 35 34 2e 38 c8 73 73 b0 58 f0 a9 38 1b 18 82 06 b8 8c 72 42 8a 33 02 99 1c 66 f2 a9 73 7a 54 a3 73 69 5a 52 1b b8 dc 44 e8 ad 6c 9a ce 00 00 fe fc b0 74 7d 93 55 31 ee 07 a6 68 dc 92 0d a2 47 08 f2 54 2b b2 86 06 74 56 90 ed 46 1e 8b cc 87 b5 85 44 3c 55 09 1d dc 69 d9 12 b9 15 c2 d0 93 91 c4 e6 f6 8e 68 8c e6 99 e3 8c 44 08 7d 92 f5 dd d8 cc 04 94 e4 29 3b 53 bd b7 d3 b7 7f 91 35 6c 23 3d 63 d8 3e f6 d1 ca fa 49 49 2a 7e 72 8c 3a 29 8c c6 57 f2 d0 85 36 01 9c 13 6b fc e0 9e 18 ed b2 34 84 42 d7 f0 2f 02 4e e1 0e f7 a7 a7 c8 5f 11 86 90 9c 1f 8a 83 77 de 41 85 31 bc f0 ef Data Ascii: h$}Ki6-ryOAg~BV%{W54.8ssX8rB3fszTsiZRDlt}U1hGT+tVFD<UihD});S5l#=c>II*~r:)W6k4B/N_wA1
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 54 2e 4a dd 2f 3f 05 d2 f3 6e 06 1d a3 14 0c fe 27 26 55 0f c6 db e2 63 66 2b ce 0a 77 e6 a4 b1 46 1f e2 b4 b3 9c 2a 07 4d 99 a4 cf 92 87 57 99 70 73 3e 77 01 8f 48 3f c7 de c8 37 9f 49 ff f1 2b 72 c5 ee f6 b8 2b 12 b4 ff 85 21 fd e2 ca b0 59 43 15 a8 57 d3 aa aa 9a 54 3b 39 aa f7 1d 2d 68 1a 0c c8 8d f4 b4 6b f0 09 83 8d 60 72 72 b9 79 95 70 46 f4 73 69 87 01 77 b7 d7 c0 35 78 9e d9 61 76 6c 6e 44 41 28 41 13 95 db ee 38 a9 d4 d9 a2 58 73 3e 1b 38 5e fa db 37 27 67 f1 b5 be 42 11 76 41 d5 b9 62 23 48 78 0b 33 8b bd f3 04 9a 68 1d 1e c1 54 6e c8 a8 ff 23 23 40 55 1b 12 9a ad 0b 25 2c 2d d4 ea 2e 8d a6 fd bd c4 fc f1 5c 97 8a 0f 8a 59 df 76 5c 05 ec 66 99 fe 93 2a d2 86 1b 11 aa 71 99 7e 4c 23 db c9 78 ae 11 18 89 b0 08 da b2 39 38 9e 60 b9 94 86 b9 d4 b2 Data Ascii: T.J/?n'&Ucf+wFMWps>wH?7I+r+!YCWT;9-hk`rrypFsiw5xavlnDA(A8Xs>8^7'gBvAb#Hx3hTn##@U%,-.\Yv\fq~L#x98`
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: d3 1a 6c 3c a5 19 0b 3a 30 c8 ee 77 13 ef 36 0a 6d be 4a c5 37 0b 65 97 ba 4b 8a a3 c5 bf b5 d2 d5 3b c0 18 86 fd af ba 36 e8 a4 15 11 57 93 74 fb dd e4 83 ef f5 86 a2 6e c4 87 32 ff cf 10 d1 14 05 5e 91 0c 75 e6 2e 3c 61 9d fa 3b d2 1a 58 b5 67 6e fb af d0 81 88 f8 12 6d 70 26 0c 78 ac 82 51 20 88 e7 d6 83 c7 e6 8e 93 3a 49 fa 89 00 ea f4 12 9d ab e0 20 70 8f e4 55 45 72 ab fe bf 79 dc 80 8b 76 d6 48 1c 8a 8b 49 17 91 9a 61 96 a1 ec 47 98 37 3b 64 fc 10 51 af 6a 22 c5 ec 88 e2 6f e3 e1 24 8d 9e e4 5c 07 a1 c1 c5 0e 14 7e 57 8c d1 45 7f fe 6b 75 44 f9 56 a2 e3 5f 7a 69 e8 89 0c 8f 86 e4 24 27 c8 bb a6 8d f8 fe 95 cb d2 53 be c7 af a9 b4 95 a3 73 1e 88 ce 70 1c ee a6 34 a5 e1 25 d0 01 3a ff ec f0 83 5d 14 13 0b 67 fe 12 d7 14 b2 47 5a 21 68 0a 11 8e 2a 4c Data Ascii: l<:0w6mJ7eK;6Wtn2^u.<a;Xgnmp&xQ :I pUEryvHIaG7;dQj"o$\~WEkuDV_zi$'Ssp4%:]gGZ!h*L
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 65 de 97 55 73 cf 8d 14 c0 20 8f 86 b1 ef ec ae a6 b8 5c 51 8b 89 44 39 a1 a7 27 a3 e4 a1 b4 1a 66 67 dc a5 4e 4e 39 b3 46 a6 28 50 5e 68 52 a2 c4 5f df 9f e2 e7 c2 b2 37 3b 42 f0 0e 38 a4 67 c2 29 12 80 ce 2b 0b 69 03 23 aa 70 00 22 80 03 8f ca 93 98 fb a4 d3 9c da 0a b8 cf 93 f2 f4 4e ae 6c 79 9f ea 13 bd c0 e2 5a fa 2c 4a ad c2 9b 6c e8 6f 0a 48 86 87 8b bb 42 04 a0 14 2f a6 5b f4 82 2e 4c 0c 33 1a df cf 6c 84 3b 8c 5c 43 ca 67 dd 0e f4 43 33 5b 91 8a e0 24 57 76 dc 90 64 2a eb 9b 7a 07 a3 96 b9 37 bd d0 4c 17 4c 40 51 8e 71 ae a1 65 32 4a 03 38 47 4a 62 bb 8c 13 6a 7e 82 20 3b 48 6c 82 5a 42 56 44 9f 3a 18 15 3b af 34 42 f1 ae 69 9e 4c 49 8e 90 57 c0 0d 94 31 b1 71 3b 9f e2 3b 96 6c 5a f6 0e b3 d0 53 e4 0c 07 e5 c9 1a a4 af 64 fa 8a 05 1d 71 dc 4c fb Data Ascii: eUs \QD9'fgNN9F(P^hR_7;B8g)+i#p"NlyZ,JloHB/[.L3l;\CgC3[$Wvd*z7LL@Qqe2J8GJbj~ ;HlZBVD:;4BiLIW1q;;lZSdqL
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 09 f3 24 a0 b6 25 2a e2 3f 1e 18 8a 93 d9 78 55 24 db 22 83 e5 3a 83 84 ce 46 80 46 ad 34 e6 ee cd da 96 95 70 fc 8c 48 9f e6 d7 23 0d 6a c2 88 24 7e 93 25 1d 6a 3f c4 86 83 16 c2 a9 50 35 a0 4d 2c b9 26 e0 42 4f 41 e7 db 76 f0 61 89 1a 38 98 2c e4 50 ca 05 76 c3 87 1f 4b ef a8 de f1 c1 1f da fa 9e 9b 87 4a b4 9f cf fe c2 e1 3b 2c 4b 0d a9 8f 7d 9b 8d fe c1 ab 43 2a bb ee 42 96 e4 4f f4 fd ac 22 1c 50 80 b3 e4 9e 8e 81 de 85 44 fb ed d5 20 e5 93 f8 e1 65 93 38 8a b3 1a d3 38 d3 de 3b fd 80 1f ac 51 fe 98 07 87 78 ba 6c 4a b2 6f 17 80 7e 0f 1a 65 62 c7 e2 0f 29 c9 7f 55 da ec fe 73 bd 65 4e 00 5b 3f 2f 39 79 a0 d2 2a df bf 11 ec c4 f8 cb 40 9e ec af a6 ea 89 f9 02 0e 26 8a 27 93 91 e4 e1 c2 81 ed 8a 8a eb 62 73 cb 35 09 72 62 6f 23 10 66 dc 23 3a 3b a4 1d Data Ascii: $%?xU$":FF4pH#j$~%j?P5M,&BOAva8,PvKJ;,K}CBO"PD e88;QxlJo~eb)UseN[?/9y*@&'bs5rbo#f#:;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
531	192.168.2.4	50455	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	945	OUT	GET /pagead/1p-user-list/978398205/?random=1713460610976&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqY550Y6dnr_3XlUkderQ1OKmYXB94fGyoOnKkY6jdBbE8f-jy&random=827221546&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
532	192.168.2.4	50459	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	946	OUT	GET /pagead/1p-user-list/10896111711/?random=1713460610993&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&ref=https%3A%2F%2Frisk.lexisnexis.com%2Fcopyright&frm=0&tiba=Insights%20and%20Resources%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq1eAktOdjZfaCTm0SAXWY_XKLoZHPFJKGkZfhOODIsO8Qry2x&random=86083454&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:53 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
533	192.168.2.4	50452	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2111	OUT	GET /Areas/LNRS/img/tag_icon.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1 If-None-Match: "VZkINo36vuh8LFCryg1qraaTi0XFAg/Dbl+A8IfBN2c"
2024-04-18 17:16:53 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:53 GMT Via: 1.1 varnish ETag: "VZkINo36vuh8LFCryg1qraaTi0XFAg/Dbl+A8IfBN2c" Age: 8 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130047-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460614.524541,VS0,VE2 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
534	192.168.2.4	50460	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	1782	OUT	GET /-/media/8f2ac5bc533c4b41ad1580b4f298ab1f.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:53 UTC	872	IN	HTTP/1.1 200 OK Connection: close Content-Length: 21651 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Gresham thumbnail jpg.jpg" Content-Type: image/jpeg Etag: "F+wlGC2J6wWawHJU6tw99siDXUYd6IV+NzfxDBgcQ10" Fastly-Io-Info: ifsz=84755 idim=270x170 ifmt=jpeg ofsz=21651 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010211 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560452 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210070-DFW, cache-pdk-kfty2130065-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460614.628639,VS0,VE98 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 31 42 eb c3 d7 d9 4d a2 42 70 5a 9b 5b 8f 9e d7 eb a4 d2 56 11 1b 35 b3 42 45 4f cc 09 e4 0a 6a 49 29 a4 f0 e5 e0 b8 8f 31 0d 31 dc 70 bc d2 08 3e ae 7f a9 e9 f2 b2 2e 3e 91 37 32 89 55 2a f9 65 42 be c6 37 84 db aa ef c6 aa dd cf 38 e5 e9 b0 99 9b a6 96 5e 71 62 54 fd 2e 66 8e 79 30 5f a0 6c cb 34 73 59 cb 68 f1 06 6d 51 84 98 e9 a7 1c 95 e0 01 c9 1c 82 9c ab be 7a 20 46 ba d2 97 ce 88 a3 93 d7 3d 44 b0 25 9f 39 33 e8 bd c5 7c ac ff 00 ac 63 35 f2 fc 3e 8a d5 cc 1b e3 1c 4d a9 57 67 ca 7f 23 dd 9f 1a e3 78 16 f3 f9 e8 71 8a fa 1f e3 5c a6 14 43 ac 5a 02 f7 ce 53 4d 3f e1 e2 60 9a 33 35 40 bc fe 50 d4 d6 39 53 82 a5 3e 81 bb 9b 41 36 84 cf 4a c2 ca 93 68 d7 ea 22 03 e9 89 26 2e 29 1e 29 6a 90 4a 36 40 33 ff c4 00 29 10 00 03 00 02 03 00 02 02 01 04 03 01 Data Ascii: 1BMBpZ[V5BEOjI)11p>.>72U*eB78^qbT.fy0_l4sYhmQz F=D%93\|c5>MWg#xq\CZSM?`35@P9S>A6Jh"&.))jJ6@3)
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 8a b7 76 5c d8 28 99 6a 77 3a b2 09 12 70 7e 70 f2 a1 ef a5 2c 46 0e cd 36 67 67 b4 87 ef 45 12 e3 36 da 73 3d e5 5c 8e bf a9 f9 0d 8a 6d 09 f6 7c dc dd 69 ae be c2 ca 74 1f 62 28 db 10 6f bc 1f 53 5e b6 3b 4a e2 54 fd d7 36 28 fe 89 58 3e 30 8c d4 d2 34 6b 04 6d 6f 35 db 5a ac 82 a6 55 95 73 73 70 77 5e d5 af 66 27 8f c9 64 e4 ec 79 b2 fc 75 3d aa ad cc c8 40 ab b4 14 7a a3 22 71 b3 b3 0b 4a 86 17 7c 67 fa fa e7 b8 66 de 76 8c e1 f6 70 45 66 8a bc e3 41 1c 4b 55 e7 46 df d5 8e 69 ed 77 89 b4 51 aa d5 86 ba 2d e9 2d bd 5b 30 f8 d8 eb a5 44 db 6e 9c fd 74 dc d8 a8 c1 bb 60 94 db ab 80 c7 35 db fb 9f 6e a9 64 66 98 d3 d4 d6 91 69 be 6b 95 8c 6b f2 66 68 ff 00 2a ee c3 72 cf 92 2b ac 6b 6b b6 4c bd 25 ab 6d f9 be d6 ef 8e 08 d2 f2 5d 08 1c 3a 9b 30 4d 6d 79 Data Ascii: v\(jw:p~p,F6ggE6s=\m\|itb(oS^;JT6(X>04kmo5ZUsspw^f'dyu=@z"qJ\|gfvpEfAKUFiwQ--[0Dnt`5ndfikkfh*r+kkL%m]:0Mmy
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: fa 1d 5e 5f 61 57 64 46 35 9a 35 66 a0 95 fc 15 54 fa 0f 52 59 a4 88 6f 96 f6 eb 03 d4 8a aa 85 b1 ea eb 74 85 0b 42 53 b6 ff 00 e9 0f 05 d5 f3 b2 1e 16 10 ab a3 f6 d2 ad a8 dd 18 2f a5 0f f7 0d 9e a7 96 99 2d 38 ab 7f df 21 79 51 6f 6e 9d bf 44 57 7f 92 a5 2d 47 29 45 ff 00 14 6c 76 43 47 1b 85 a7 d1 7e 48 8e 82 8b bc 1b 62 ba 0d f4 da 65 9f 2c da ba d9 b5 fc 1b 1f a7 cb 36 b7 c9 9b 57 56 6d 82 7f 6d b1 ca 2b 1b 78 5b 1e 71 43 c2 15 ee f8 1c a9 d0 e6 fb 17 fc 0b 4b a1 b9 76 2d 09 da e9 66 cd 3b ba 56 63 73 7e 86 2c a3 64 57 e8 7c d2 f9 e1 1c db e2 e4 bf 44 16 ee a7 97 cf 23 d1 ed 32 56 9d 26 41 ce 12 52 52 a7 c6 e8 87 d5 39 e3 90 ef 92 5c ca e9 c2 4b 18 2b 02 7e 9c 28 d2 8e 6f a0 f9 97 8e 3c cc 96 47 17 82 3d cb 1b 2c c1 b5 f4 8b 62 86 a5 fd 8c 5a 59 b9 Data Ascii: ^_aWdF55fTRYotBS/-8!yQonDW-G)ElvCG~Hbe,6WVmm+x[qCKv-f;Vcs~,dW\|D#2V&ARR9\K+~(o<G=,bZY
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: bc 41 f7 0b e2 1b 9a 34 9e 1e 4b 14 da b0 d9 fc d5 77 55 74 db 18 88 4f ed 4e 26 f2 4c 08 56 10 41 fa 20 d0 64 b4 7b ac 08 e8 14 0c 0e 01 17 89 9c 2e 3b e0 00 dd 75 68 5b 36 bb ba c0 09 ea 72 7e c0 36 80 01 ff 00 6d 10 0d a8 0e e8 12 b0 0a d3 0a d9 86 af bc f9 28 e1 c8 2d 21 0c ae f7 cd 40 4c 25 a6 d9 e1 ac 28 1d 98 ff 00 73 8e 51 b3 b3 53 3f dc ad 06 d1 c9 a2 d0 aa d5 9c b6 9b a3 fc b7 7f 35 af cd 0c 48 52 1b 18 88 1c 17 70 13 cc a2 4a d1 77 a1 38 b0 53 b4 80 09 6e 33 c8 26 f6 7a 5a 0e f9 e6 53 a9 8c 5b 81 e8 a0 99 94 4c 12 84 cf 40 10 00 fa aa 0d ea 26 7a 73 54 e1 c4 fc 51 1e e9 d0 b5 85 24 ad 7e de e9 43 70 7b af dd 77 3e 6b ba bb a3 d9 70 47 bd 24 2c 53 c9 29 c3 64 09 d1 68 55 76 39 a7 7a 8b c0 9e 9b df 92 d5 00 24 94 03 4f ba 80 5b d4 93 80 b7 aa 34 Data Ascii: A4KwUtON&LVA d{.;uh[6r~6m(-!@L%(sQS?5HRpJw8Sn3&zZS[L@&zsTQ$~Cp{w>kpG$,S)dhUv9z$O[4
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 4c f2 4f af da de cd d8 d9 37 99 d1 58 fa 81 cf 89 8c c3 78 a1 52 9b 77 1d 9b 83 6d 00 f3 56 97 bc c9 97 3a 35 3c 94 d6 dd a6 77 86 72 7a 22 d6 db 48 08 d3 c4 9d bd 6d bc 39 aa 41 f5 88 a8 ec 6c 63 51 d4 ae d1 55 8c 7b 1c 37 45 b3 f3 27 8a 25 cd a8 1e 7b 98 c4 73 94 67 b4 06 b2 25 df eb 9a 26 6e 71 1b bc f0 aa 3c 70 74 06 e8 7d 53 a9 b2 b5 ce 22 1d 51 ce c7 58 42 c0 48 77 78 65 d1 fb 2d 9b 59 6d 46 46 0b 62 47 9f 44 c3 5e a4 38 cc 53 b9 17 55 ff 00 11 98 c7 19 fa 27 be 95 7a 8d 00 c3 5c 34 70 08 4b 8b 8c 6a 75 4e 34 df b8 75 e9 e6 9f 9d 07 e6 3e ce ea a1 3a 5e 16 8e 70 91 24 ee 9f 5e 88 9b 9e cb bf 0e 1c bb 3b f6 0e 75 de 31 c3 a9 47 e3 96 c6 22 eb 61 34 d5 82 5c 35 79 9c 7e eb ef 3d 38 14 49 66 10 f8 4f 00 c0 cf 0f 65 50 53 65 4b 84 44 f7 7d 09 d6 50 34 Data Ascii: LO7XxRwmV:5<wrz"Hm9AlcQU{7E'%{sg%&nq<pt}S"QXBHwxe-YmFFbGD^8SU'z\4pKjuN4u>:^p$^;u1G"a4\5y~=8IfOePSeKD}P4
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 92 62 5a 78 20 0b 04 46 1a 78 27 90 37 73 39 54 ee a9 6b 8f 0d 13 cc 9b a6 5d 9e 1c 13 aa 07 df 4e 98 c9 03 76 4f 32 ab 54 a8 c1 73 ce 44 62 db 61 33 65 7b 5a 3c 0d 30 09 ff 00 b2 7b 80 b6 9c 01 a6 4f 58 4f a6 18 43 c8 32 e2 20 ad fb 9e 09 21 bd 61 30 57 71 b3 4b 5a 03 8f 92 a8 df e9 dd 4e 98 89 c4 5d d1 33 6d b4 1b d0 02 79 6f 77 4d 78 8e 48 41 3b a7 19 41 f4 f8 0c f4 53 5e ad ee 33 71 3a 16 e9 01 52 65 e5 a2 e8 ff 00 69 c5 ff 00 12 e6 f2 9f 25 49 ed ec 70 1d 12 75 d7 f4 4d 76 d0 37 74 ee aa 9d 99 93 73 8f 10 83 4d 49 79 06 04 e4 4f 44 29 32 81 b4 02 d9 9c cc 71 ea a4 b4 bd b4 72 d8 e2 e6 e6 7a 27 bb 03 b4 56 e3 6e 73 c0 47 d5 61 e6 88 b6 48 e3 3f aa a6 1a 6a ea 21 f7 4c 79 a9 ed 3d b8 b4 0c 86 6e cf a9 4e ae da e6 eb 41 83 07 e6 ad ad 4b bc 70 0a 7c 10 Data Ascii: bZx Fx'7s9Tk]NvO2TsDba3e{Z<0{OXOC2 !a0WqKZN]3myowMxHA;AS^3q:Rei%IpuMv7tsMIyOD)2qrz'VnsGaH?j!Ly=nNAKp\|
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: a8 dc 9c e4 e9 9c 11 30 44 5b ac 42 d3 de 89 88 91 2f 51 c2 55 33 44 8d aa 8a c6 42 0f 66 19 c8 b4 e0 e8 32 b1 1a 48 cf 45 64 a8 8f 46 e7 91 84 c8 8a 48 4e 7e 4b fb c5 d3 3c 4e 99 02 ec e6 4f 38 74 05 2a 27 c1 b2 ff 00 98 16 13 73 f3 6a 76 e9 fe e0 50 e4 81 29 c4 4f 48 c6 22 13 30 68 5d 4e 28 42 2f 84 af 31 c6 1a c5 c8 38 1d 65 0a dd 95 39 22 52 ae 79 7c b8 ea c3 a4 20 78 db 8a 44 c0 2f 0d 39 1b 85 32 3e 70 90 6e 24 24 6a 6b 38 50 9d 22 ad 9b 99 de 3d f6 21 d1 99 d1 35 17 8b a3 f9 2c 75 ca 30 48 ed e5 2c 97 e3 0e 1e f8 92 e4 0b fd 8c 7d 74 e2 07 ec e7 cd e3 f3 31 e4 76 7f 86 00 28 1b 39 7b ca 01 03 11 ce cc 23 26 2e a1 7f 78 1e 8a 5e 32 22 12 dc 0e ea 6f 25 6e 5b c8 e0 88 a4 13 29 e7 24 45 e8 8d c0 f7 8e fa fb 7b 7f 18 e8 01 ad 6f 2e e3 be 36 ce 2e 04 d7 Data Ascii: 0D[B/QU3DBf2HEdFHN~K<NO8t*'sjvP)OH"0h]N(B/18e9"Ry\| xD/92>pn$$jk8P"=!5,u0H,}t1v(9{#&.x^2"o%n[)$E{o.6.
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: c8 41 4d 34 41 f8 c2 98 b3 94 c1 7e f2 0c b9 10 bd 7b fa c5 16 79 38 a5 99 9f 88 c2 15 95 f3 18 09 3f 0e b3 f3 04 d7 c6 35 44 79 70 8a b1 dc 31 89 07 f7 3f cc 08 ad 93 0b 11 2d 1d f3 d6 1b fd c0 e0 ce 9a 9c 48 3d 14 5c c6 79 ac e2 e5 60 6e 82 23 71 0c eb bc 88 0e 16 86 fc 47 18 ce 48 b5 03 18 ac b8 d0 e1 a6 83 a2 65 7b 79 cd b5 0c 10 7c f5 18 f4 c8 27 b2 a0 99 f3 9a 4a 6f 0f 4d 27 e3 09 67 25 12 29 cb 50 77 9a 6d 68 0a 72 4d cd ef 27 8b 95 41 e2 76 7a c7 b2 23 76 4c 96 1c bd 64 bd b4 23 52 e9 44 fd 62 ce fe 08 9d ac eb 26 db 60 78 89 07 26 b0 10 45 89 80 16 d6 66 70 44 18 44 33 78 95 10 cf c6 46 29 49 3e 2b 3a e3 24 55 81 11 74 b9 de 69 b0 a8 8e 9f 1f 9c 69 98 0d 88 72 19 61 3f 39 30 95 41 70 bf 61 06 a7 06 15 75 8d 76 79 ef 19 23 38 43 b7 f0 8c 7a 29 85 Data Ascii: AM4A~{y8?5Dyp1?-H=\y`n#qGHe{y\|'JoM'g%)PwmhrM'Avz#vLd#RDb&`x&EfpDD3xF)I>+:$Utiira?90Apauvy#8Cz)
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 2f 58 d1 ac 8a 33 99 19 3f 4e b2 62 d6 54 9a 25 79 7b 60 3f c1 ab 05 3e 9c 4b e9 1b 3d 24 98 26 b8 38 99 b7 ea 0f d6 19 09 7d 8f e2 30 91 f8 f8 ff 00 31 5a 7f ea f1 82 94 f2 3f d3 19 a8 a1 b5 bf c9 cd 11 ab 06 9f 9a bc 49 8f 48 43 f7 89 28 52 28 e6 99 9e 30 91 0a 81 fd 01 57 fa c6 94 24 81 4c ed 95 9a c8 31 f4 dc 20 84 b2 7b 64 c7 a4 14 02 13 08 5a 3c e2 d5 00 d7 26 93 ad 7b e3 14 2d 2a 0b c7 2b d3 2e 78 82 77 1d f9 c9 a0 8c 10 97 bd 91 c6 1c 29 8d 00 83 ec 22 b1 3c 5d 82 69 ad de bf 79 0c c6 52 d3 0e f5 29 e7 25 05 82 0a f5 ed c5 9f 81 84 94 36 8f 29 c5 49 04 18 62 3f 74 61 1f 72 86 54 50 83 ff 00 5c 45 48 20 42 75 a3 4e 2b 21 0d 85 38 8d 24 de 21 ed b2 89 ec 72 d6 f2 02 c5 04 40 c5 a7 fe 62 12 90 18 cc 1b 4f 96 0f 64 ee 2f 53 c5 51 90 0f 31 b3 ae 27 c6 Data Ascii: /X3?NbT%y{`?>K=$&8}01Z?IHC(R(0W$L1 {dZ<&{-*+.xw)"<]iyR)%6)Ib?tarTP\EH BuN+!8$!r@bOd/SQ1'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
535	192.168.2.4	50454	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	1782	OUT	GET /-/media/f14c2b86d09f44f09e54543661e39782.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:53 UTC	872	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10330 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Baby J Case Stuyd jpg.jpg" Content-Type: image/jpeg Etag: "GKOfyTz3cY3Lvy/TCgpK3B9/r++bfWXmGO3vQaNIktM" Fastly-Io-Info: ifsz=47670 idim=270x170 ifmt=jpeg ofsz=10330 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010248 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 558126 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210108-DFW, cache-pdk-kfty2130040-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460614.563047,VS0,VE91 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 5f 44 f9 76 99 f2 6b 33 0d ef d2 93 1e 1b 65 50 1c e1 5c c6 a2 ba 85 b7 db e1 d3 db e4 d0 2c 26 10 5b 5d 82 03 4a 02 38 06 59 7a 08 d1 67 6b 97 1f a5 65 94 74 b2 64 3c 95 97 c1 fa 51 10 a3 c9 d9 ca 8e bc 6b 3f b1 eb f2 0f 95 a7 d4 8d 6d 80 34 d4 34 8c 53 20 8a 09 65 0c 67 40 2a 1d a8 49 b3 ac 43 1a b4 12 7a cb c5 be 20 91 6e 84 1c eb 21 51 20 61 b9 12 16 d8 d6 df 53 e1 df ca 78 2b bb 51 95 31 71 5b 1d 70 a4 a1 d9 e9 0b 2f 2a 6c 27 8b 9f b9 ab b2 b5 aa 2c f4 87 6f ab 88 40 17 49 a4 1a 59 e6 f3 71 d0 27 1d a7 34 c5 95 09 d5 69 63 22 35 ba d0 83 2a 26 8d 84 3c 6c 1c b2 0c d1 1a 41 41 79 d3 75 49 29 6c bd 45 11 f4 da e4 3a 58 7f ff c4 00 28 10 00 02 02 02 02 01 03 05 00 03 01 00 00 00 00 00 01 02 00 03 04 11 12 13 10 05 14 21 20 22 31 32 33 15 23 24 41 ff da Data Ascii: _Dvk3eP\,&[]J8Yzgketd<Qk?m44S eg@ICz n!Q aSx+Q1q[p/l',o@IYq'4ic"5*&<lAAyuI)lE:X(! "123#$A
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 27 4b 32 14 5a 11 68 42 e0 29 f0 20 80 c0 66 e6 e6 e0 f9 95 ec c6 6e 30 20 65 34 4e 8d 46 38 bc 9e bc 83 3f df 6b 04 b2 c5 e8 28 95 12 ab f1 3b 0d 47 23 f0 9d b7 44 bf a9 85 94 4e 68 d0 d5 4c da d4 0b 19 f3 2d 5e c5 b2 ae 13 46 07 9c d2 73 59 cd 27 31 0b 34 05 98 2a b9 95 a4 54 8c 86 c8 b5 84 40 3e d0 18 85 65 45 02 33 88 85 5e 7e 60 48 47 c1 f8 8c 6b 0f ba ec 9f ea db d4 f7 11 42 06 e6 b3 94 d5 80 7c f1 4b 9b 9b d6 5a 1a 78 9b 31 b6 7a 3e df 6e 67 4c 5a 62 54 9b eb 45 28 aa 21 64 ae 20 b0 8f 92 9a d3 33 2e b9 52 06 37 cb 3f c4 50 39 af f5 ba 57 fa 10 09 40 01 d0 eb b8 0d 29 23 25 3e 1d 95 7a 31 c0 29 8c aa 20 f9 2e 06 87 ea d2 c0 36 04 7f d6 cf ce 38 06 01 2c 03 85 93 43 5a 05 97 e1 d7 f7 1f b0 f9 75 45 e5 ff c4 00 2c 11 00 01 03 02 04 04 05 05 01 00 00 Data Ascii: 'K2ZhB) fn0 e4NF8?k(;G#DNhL-^FsY'14*T@>eE3^~`HGkB\|KZx1z>ngLZbTE(!d 3.R7?P9W@)#%>z1) .68,CZuE,
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 22 db 72 e5 cd 46 a3 51 a8 b9 72 9b 99 96 1e 68 0e 2c 06 bb 1f 11 ae f0 9f 36 bd 61 3f b8 c3 ec 7f 71 84 af fa 84 3f e0 f9 a9 9f 12 26 53 09 b6 78 38 58 79 70 f9 b3 c3 42 11 26 70 55 6c 9a 2d b2 e6 b3 59 ac d6 6b 35 b3 51 7d d7 2e a4 a3 5e a7 1c 09 fa 16 6b b4 c9 66 c4 f7 3e 34 7e e7 cc c6 7c dc 7e c5 71 f1 59 a7 12 21 78 7f d1 a7 f7 19 60 c2 82 14 44 e2 73 6c 9a 2b b6 8b 76 9b 94 2b b2 fb b4 eb b9 09 01 07 72 1f b8 5f b9 0b d3 76 db 29 0c c9 42 85 c7 56 49 54 96 5d ad 65 3e 85 cb 1f 43 58 eb 37 b2 b0 d0 9a 53 2b 0d 59 89 0f 3d c4 42 41 dc 87 ee 17 76 2e cb 72 85 49 45 86 9b ea 70 c2 90 b9 0a 27 51 4a 16 e6 34 a0 65 50 da 6e 6f ea 38 a2 55 66 49 99 61 94 fa 92 8e 1a 75 b0 a1 76 25 92 83 44 9d d7 29 94 c3 65 84 9a 32 65 75 b9 48 a6 b6 a2 12 11 76 99 e9 b9 Data Ascii: "rFQrh,6a?q?&Sx8XypB&pUl-Yk5Q}.^kf>4~\|~qY!x`Dsl+v+r_v)BVIT]e>CX7S+Y=BAv.rIEp'QJ4ePno8UfIauv%D)e2euHv
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 50 dc fe 2c 33 c9 94 6c bb 94 ee 46 42 9d ca 77 3c 09 e0 cf 0e 3d 48 87 08 9f 08 87 08 8f 1f 40 6c 62 d4 6a 0b 21 3c b5 02 5e 0c 95 7f c4 23 95 e6 ff 00 a8 97 6f dc 9c 30 80 b5 51 e2 3f e5 4f ee 1b d9 ed 0b 96 fc 07 fa 22 df b7 2e 2f 3c f1 31 f9 8e 86 be d1 dc a3 70 f3 33 0f 73 0b e2 34 1c 4c 24 be a2 ad ce 6a 43 d0 42 b1 56 3d b2 29 ca 29 32 a6 55 70 c6 bc b3 4f dc 9a 5d be f1 33 68 92 ee 50 55 45 98 54 0b 59 98 ae 54 a4 b9 50 db ad 3c 4b 1f 9a ce 5b ce 4d 65 01 a0 07 4f 7f b4 2b 62 bd 6d fa 99 7f d7 f1 0b 0e 56 b4 fe a1 d1 15 d5 6b e2 0a ab 9e 57 ab 8b 6c 9d ff 00 8c f6 d0 46 a7 90 f1 28 84 a9 ac 21 a8 26 e0 f0 49 9b 77 39 53 54 85 a5 dc 04 b4 0b 17 6c 20 a2 bd 2b cf 68 85 c3 10 9c d9 86 c8 31 dc c8 6a 16 55 cc 2d 88 a4 e8 7d 07 3f 68 b2 7b b3 22 f7 9a Data Ascii: P,3lFBw<=H@lbj!<^#o0Q?O"./<1p3s4L$jCBV=))2UpO]3hPUETYTP<K[MeO+bmVkWlF(!&Iw9STl +h1jU-}?h{"
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: f7 82 67 86 1a 0f 18 7a 1d e1 88 7f 34 d0 84 a1 38 1c 7b 5d 89 79 0f a2 1d 9e a2 41 b4 dd 82 6d 48 2b d5 12 96 56 1a 69 e0 5a cd fc 13 fe e8 8e bf 23 8d 35 5f 68 fd 84 8f 4a 69 1d 6f 23 00 9f 11 2b 12 79 e0 e0 42 f1 8f 59 7f 62 6e c9 35 f5 7f 02 d3 3d 7f 02 22 57 fe c0 95 f2 24 1b e0 4b db 1d e0 6d 75 fe c7 e2 7d 26 b2 32 de 05 ad 22 35 a4 6b 6b c2 70 49 61 7d 88 4a 86 8f 8e 3e 7f 44 d2 81 a3 f9 58 d2 da 69 70 bc 31 a8 c9 17 89 86 c4 86 a3 53 a1 ab 5d 15 34 9f d3 6e f6 22 c2 95 b1 8d e3 cf ff c4 00 23 11 01 00 02 02 02 02 01 05 01 00 00 00 00 00 00 00 01 00 11 21 31 41 51 61 91 71 10 81 a1 b1 d1 f0 ff da 00 08 01 02 01 01 3f 10 b3 43 13 ce 21 b1 96 38 95 70 5b 74 46 93 45 41 79 8d 51 87 23 86 3e 10 37 a8 62 d9 4c 10 59 bf c1 15 a3 be f6 c7 2e 55 94 11 48 Data Ascii: gz48{]yAmH+ViZ#5_hJio#+yBYbn5="W$Kmu}&2"5kkpIa}J>DXip1S]4n"#!1AQaq?C!8p[tFEAyQ#>7bLY.UH
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 6c 00 7a cc ac ae 58 bb 29 e5 8a 45 dd 46 6a 5d 00 ca 4a 2c 7f a8 e1 2d 45 30 f8 7c ca 7f 46 43 52 e5 b2 e5 ce 59 1c 90 03 0d 1f 08 7e 2e a2 05 aa 0e 61 20 f0 5c 22 a3 6c c1 80 5f 6c b8 30 63 c9 14 30 29 49 50 f0 c3 9d 94 18 3f 38 37 38 d8 8b 44 65 cb ae 0f b6 32 21 74 65 7f b6 3d d3 0b 16 47 76 1d ac 43 ba 25 b2 4e 31 65 70 f8 87 49 b3 3c bd 91 d6 d8 df 0f 61 06 8a 38 9e 26 1d e8 83 57 14 6b 8c a3 f8 87 e1 52 50 4c d4 ab a5 20 c0 b7 33 00 03 10 97 42 08 55 ab 3f 03 59 99 43 2c db 04 03 1d 25 ad 99 5a df d2 58 d1 05 0e 88 2b 39 e0 81 8b 61 37 5e a0 da 43 60 45 27 a8 62 38 25 6a c3 b8 f2 09 49 cc c2 a8 ec cd ba 87 75 4e 62 af 3a c3 08 cc 7b 3f 73 fe e2 05 61 34 f0 9d 93 a6 85 b2 47 75 45 43 2b a8 34 3c 7e 5f 61 bc 32 b5 1a 0b 36 9c 3d 4d b2 4f 53 39 ab b5 Data Ascii: lzX)EFj]J,-E0\|FCRY~.a \"l_l0c0)IP?878De2!te=GvC%N1epI<a8&WkRPL 3BU?YC,%ZX+9a7^C`E'b8%jIuNb:{?sa4GuEC+4<~_a26=MOS9
2024-04-18 17:16:53 UTC	677	IN	Data Raw: 95 54 e4 dc 58 af 43 3c 66 9a 3d c1 56 21 1d 25 b8 2a db 7f 50 d5 5a 29 e5 a3 0f 7d 5c 5d a3 ec 82 ba 71 11 8d 73 4a 53 a5 a5 d0 cc 22 02 51 ba f3 a2 2d e7 01 a4 f0 9b f3 04 f5 9b 14 b3 d8 ca 21 ec 80 5d 1e a0 7e ba ab 1e a7 f5 27 0f d4 0c 2a d3 c3 fe 40 00 d5 61 e2 f1 a8 99 84 9a 13 5f 15 29 27 94 d5 2d 51 87 2c 23 a4 20 18 b7 eb a8 26 58 52 a8 3e 1d 3e 61 db 9d 76 a0 df 5e 20 d4 6b 72 e1 8e dd ee e3 4f a1 9f 71 d2 60 6e cb 1e 2f 59 f1 28 5d c8 20 3a cd d0 eb cc 76 7d a6 a0 3c ae e3 d1 1c 2a 40 ee 80 ba 39 c8 4a e6 7a 16 ad 52 a1 97 77 0e 08 b3 41 46 8c a2 9f 51 c5 40 35 58 e2 80 39 f2 20 10 11 59 99 4d d3 9c b8 03 08 b4 72 d4 a2 5f 03 86 98 02 89 45 00 ad 61 1a 16 8b e7 c3 0c f2 16 41 57 60 72 32 f3 dc ed 2f 59 0b 4d b3 49 93 30 f0 05 ee 30 36 11 bf 08 Data Ascii: TXC<f=V!%PZ)}\]qsJS"Q-!]~'@a_)'-Q,# &XR>>av^ krOq`n/Y(] :v}<*@9JzRwAFQ@5X9 YMr_EaAW`r2/YMI006

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
536	192.168.2.4	50462	162.210.193.238	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	578	OUT	GET /1/indexes//queries?x-algolia-agent=Algolia%20for%20vanilla%20JavaScript%20(lite)%203.27.1%3Binstantsearch.js%201.12.1%3BJS%20Helper%202.26.0&x-algolia-application-id=KM18SZRXTM&x-algolia-api-key=8790b71f94f13d24e3298d1c6b7fd2ed HTTP/1.1 Host: km18szrxtm-dsn.algolia.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: /* Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:53 UTC	430	IN	HTTP/1.1 400 Bad Request Server: nginx Date: Thu, 18 Apr 2024 17:16:53 GMT Content-Type: application/json; charset=UTF-8 Content-Length: 49 Connection: close Accept-Encoding: deflate, gzip Cache-Control: no-store Access-Control-Allow-Origin: * Timing-Allow-Origin: * X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Disposition: inline; filename=a.txt
2024-04-18 17:16:53 UTC	49	IN	Data Raw: 7b 22 6d 65 73 73 61 67 65 22 3a 22 69 6e 64 65 78 4e 61 6d 65 20 69 73 20 6e 6f 74 20 76 61 6c 69 64 22 2c 22 73 74 61 74 75 73 22 3a 34 30 30 7d Data Ascii: {"message":"indexName is not valid","status":400}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
537	192.168.2.4	50463	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	610	OUT	GET /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s3344979810927?AQB=1&pccr=true&vidn=3310AAC2982BB5E4-40001F0082A44321&g=none&AQE=1 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: s_ecid=MCMID%7C72321666800473193042525972382318204557; s_vi=[CS]v1\|3310AAC2982BB5E4-40001F0082A44321[CE]
2024-04-18 17:16:53 UTC	730	IN	HTTP/1.1 200 OK access-control-allow-origin: * date: Thu, 18 Apr 2024 17:16:53 GMT expires: Wed, 17 Apr 2024 17:16:53 GMT last-modified: Fri, 19 Apr 2024 17:16:53 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag set-cookie: s_vi=[CS]v1\|3310AAC2982BB5E4-40001F0082A44321[CE]; Path=/; Domain=lexisnexisrisk.com; Max-Age=63072000; Expires=Sat, 18 Apr 2026 17:16:16 GMT; etag: 3679628649740107776-4618462720406733680 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
538	192.168.2.4	50457	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2181	OUT	GET /-/media/images/government/le%20staffing%20wp/siu%20thumbnail%20jpg.jpg?h=170&iar=0&w=270&hash=6694AFD94C49271307817C41FFC6FE39 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:53 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 14650 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="SIU thumbnail jpg.jpg" Content-Type: image/webp Etag: "SM7y/ZwKSNDjZUv2GM00mADe3oigaVi4dS+pzT1GnSg" Fastly-Io-Info: ifsz=77809 idim=270x170 ifmt=jpeg ofsz=14650 odim=270x170 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010216 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 543852 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120062-DFW, cache-pdk-kfty2130038-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460614.598480,VS0,VE96 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 52 49 46 46 32 39 00 00 57 45 42 50 56 50 38 20 26 39 00 00 f0 a6 00 9d 01 2a 0e 01 aa 00 3e 51 20 8c 44 23 a2 21 16 ec 26 08 38 05 04 a6 50 55 56 bb a6 ec 1b fe ed 3c a1 b9 7f c7 89 03 5c e1 d9 59 3f fb ff 7d 3f 45 1f d7 ff d2 fb 02 7f 73 e8 c5 fb b1 ea 8b f6 f3 d6 1f d2 07 f9 1f 51 6f e8 dd 4b 1e 81 7e 73 1e ae 3f e1 ff f0 fa d1 fa 00 7f ff cc ad e5 ae 28 f9 df f7 47 ee 1f b9 1f e2 7d c9 32 1f d9 56 a3 bf 39 fc 1b fb 1f f1 ff bb 5e d2 ff df fb 6f f4 cf e4 17 fa 5f e1 fd 81 7f 28 fe 8b fe 93 f3 63 de 27 f0 7b 73 76 3f f5 5f fa 7d 42 fd a7 fb 17 fc 9f f2 9f bb 1f e8 fe 0d 3e 77 ff 17 f8 ef 55 3e c3 ff db f7 01 fe 7b fd 7f fe 37 ad df ee 7c 22 fe f7 ff 03 d8 0b f9 d7 f6 df fb 1f df 7f 31 3e 9c 7f c0 ff d9 fe a7 f3 1f dc 1f d5 3f f9 bf d5 fc 04 7f 3c fe e5 Data Ascii: RIFF29WEBPVP8 &9*>Q D#!&8PUV<\Y?}?EsQoK~s?(G}2V9^o_(c'{sv?_}B>wU>{7\|"1>?<
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 35 ed 80 da c8 81 7f de 94 6c eb 65 f3 b3 5a 84 d6 13 0f c3 7a 94 c9 35 af 4a e4 ee 7d ba 79 1e b6 64 a8 60 f4 6b b0 1c 34 01 ea ce 9e f9 6f a0 f0 d5 45 62 ec 15 a0 ac 53 7e dd 93 f9 c4 19 c7 3c 40 ad 8b 80 5f bc e2 43 52 8d 36 f1 e5 67 be 1b 68 2b da 1a 62 b6 90 85 7a fe 6a b5 e1 c6 4e 26 02 f6 64 4e ec 32 3c f9 1d bb fa 2c 05 2a df 50 cc 61 57 b4 92 15 a4 05 59 cf e9 46 df b5 04 36 2b 46 81 2e 45 67 89 47 ad c1 3f a7 30 e1 43 e3 c4 e0 47 a7 49 d6 cc 2b eb 20 e8 dc 19 90 07 e1 50 48 d1 f0 01 75 b1 0d f5 7b 29 38 7b 4d 53 5d 31 d6 02 d2 7f 3d ff 4d b6 e1 33 7e a7 b4 62 d5 81 9b cb 9a 76 e7 3d 81 d2 ab 47 1e b9 c0 f3 6a df 26 c1 35 33 d6 88 ce 6f 9a 4b 60 81 56 41 ad d2 cb 0e 2e 58 be 23 d4 37 ce 8c 61 bc 39 fb df 21 1d 47 b3 42 34 1a 47 02 60 1f 48 bb 7a Data Ascii: 5leZz5J}yd`k4oEbS~<@_CR6gh+bzjN&dN2<,*PaWYF6+F.EgG?0CGI+ PHu{)8{MS]1=M3~bv=Gj&53oK`VA.X#7a9!GB4G`Hz
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: d7 c6 e4 67 1c f3 d0 4a 1c 34 b1 a7 1e ab f4 a9 48 29 e5 5c ee 92 4a af 7b 56 c6 31 68 8f 8b 5f a4 d8 90 10 8f 32 8f 94 b7 cf e4 7c f4 44 2f 36 1a 13 7e 27 78 ec 36 de 8b 0a 3c d7 1c 8c c8 a2 dd 90 84 94 64 98 fe ee 44 dd 8c 38 62 3e af be c5 1a f9 29 8f 81 0b 53 be 98 0b 22 ea da 52 15 27 69 98 96 d3 11 ce 15 f1 52 a6 8b 25 8a c5 0c e4 69 3e 61 92 60 1f b6 13 c2 7d 56 ed 7c ce 3e 58 3e c9 36 b7 31 ff 42 3b 4e ce f1 5a 9c f4 61 86 8f 9d 5d 13 5d 3f 9a 04 0f 56 31 b0 59 7f bb 09 23 b6 b8 b1 8d 6e 6c 3f 83 fe e0 b7 6c f3 c3 ce 9f 73 21 fb a7 d0 4c cb 7f 5a 13 80 a7 ca 6b b7 94 fd 4a 4b 8d 4b 2c 3b 6d 8d 27 36 9f ee b2 2c 10 a6 63 1e 26 2f 29 98 af b0 ad 5f 0f f7 7f 23 1e 7c 4a c4 1f d8 cc 06 2a 1c 82 9a 67 84 e0 d2 d2 fa 54 82 7b 43 c0 5d 08 d5 65 13 1e b6 Data Ascii: gJ4H)\J{V1h_2\|D/6~'x6<dD8b>)S"R'iR%i>a`}V\|>X>61B;NZa]]?V1Y#nl?ls!LZkJKK,;m'6,c&/)_#\|J*gT{C]e
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: fc fb 9a 4c 4a 9a 07 d0 05 a6 1d 85 be 23 72 5b 5c 38 30 a4 5a 87 e9 2d 97 36 44 13 b5 68 08 63 4f 72 6d f8 f2 6e 49 c4 9c da 53 e0 67 a5 25 6c e0 cb 81 5c 98 d9 8d 1b e6 bc 32 03 cd 5c 19 46 00 04 d1 46 c8 54 33 cb 88 b1 5c 3d 3b 7e 2b ea 62 f0 0d cc 3b c1 b9 5b c5 52 36 c0 10 49 d8 42 5f f4 06 0d 0c 52 58 62 95 ea a2 4d dd 61 40 d7 2b d8 8b 4a 51 48 91 b6 f7 85 19 82 b5 9f 54 01 ec 9b 5b a0 c7 2d bb a7 0e 79 d5 90 8d 30 5a 38 3d f4 06 93 ab dd 03 75 ef 24 f2 60 02 da 5c f3 c6 66 20 19 e8 14 2a d4 eb df b9 90 3e 25 11 c2 0b 46 6c 41 d7 00 aa 85 44 c3 b1 76 4c 25 fa 89 a1 8e d9 7d 12 ac 25 c8 90 46 39 cc 89 8f 81 31 24 08 83 1f 4d 2f 7d b5 02 34 fe b4 32 b0 73 fd a3 b3 65 95 d7 d9 12 1c 9d 99 2a 64 4d de b6 7a b3 01 bc e1 9e ee 99 c3 9c 9c 51 c1 38 35 e2 Data Ascii: LJ#r[\80Z-6DhcOrmnISg%l\2\FFT3\=;~+b;[R6IB_RXbMa@+JQHT[-y0Z8=u$`\f >%FlADvL%}%F91$M/}42sedMzQ85
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 19 bd d0 a6 e4 e9 34 97 3d 7e f0 50 15 25 a3 14 f6 5f bc 87 03 dc 45 e0 2e a3 a0 f8 d4 a5 8a dd 80 8c 34 15 7b d5 4c fe 42 49 5c f3 58 79 b7 d6 d3 af 95 2e de 77 76 ab 72 e1 18 08 cf c1 91 c5 42 ee ee f4 0f 5a f9 69 7f 7b 42 b7 f9 3d 20 c1 24 b9 ba 10 a0 f0 89 c0 6d 04 54 17 8b 8d 19 d0 d8 c1 02 c6 49 d2 6d f8 45 e9 6a 56 a7 84 05 fb 70 df 1e a3 f8 09 dd ac cd 0c 47 33 3a bf b1 52 bb 7f ab 98 a1 9c 73 5f 5a 01 c1 06 dc 6d 06 69 bd d2 d9 11 ff d9 18 ad b9 ba ef 66 97 64 4f 43 e7 62 89 95 57 5e 45 4e 2c 4f 58 26 02 29 5b 21 9e 98 43 ef f3 1b 53 a3 ad 07 13 ac 32 3f 61 6e b6 b3 c6 e0 3f 7f dc 4e 69 76 af d1 f9 9c 58 b5 36 75 a1 ce d5 51 8f 79 10 cb 54 71 c4 e7 e1 56 81 21 78 80 b1 e9 7c 8b bc 4f ce 2e 44 b0 c2 b3 87 5f 97 ca e9 0f 04 98 f3 fe ee 7f 1c 71 cb Data Ascii: 4=~P%_E.4{LBI\Xy.wvrBZi{B= $mTImEjVpG3:Rs_ZmifdOCbW^EN,OX&)[!CS2?an?NivX6uQyTqV!x\|O.D_q
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 3d bb 39 94 44 38 c7 0c af e0 f2 00 ce 7f be 1f fc 25 1f e4 4c ef 99 c7 5a fc 19 e9 7f 8c 76 6d 3b a6 d9 8b 72 58 d6 c4 4d 05 57 7d 55 e9 d0 a3 1b af 17 1c 06 cc 44 03 e1 e8 4a 61 b0 a1 7b 56 b2 10 5d 9a df 60 cf 0f c1 cd 8e fb 0a 3a c3 8d 16 1f 0c ff 68 04 1c 35 82 5f c3 62 7b f1 c5 01 6b 8b 06 f0 b4 d1 a2 5a 41 b6 7c 01 97 50 9e dd cd 57 0f 51 3e 2e b3 a8 12 47 68 40 bf a2 c9 3b 0b ab f9 36 21 34 ec db 7f 28 15 1d 65 be d0 0e bc ca f6 5b 16 f1 0b f7 7f 1a 86 c1 e5 50 2c b7 03 2d 29 f0 7a a9 f1 bf 29 d3 06 ca f9 c0 d4 e0 0c ca f6 03 33 3d 67 a6 9c 81 58 b5 55 f3 74 3f b2 0f 32 f9 84 01 60 30 c4 f0 50 cd d5 88 8c 38 18 3e 54 6d f6 5c 1b 11 72 d6 ba ea 7f 8f ea 51 f0 ec b1 2d 03 88 cb c1 49 65 01 7c af 28 cb 23 ce 7b 6a c3 6c d7 ee 40 48 04 16 1d 5d 2c 07 Data Ascii: =9D8%LZvm;rXMW}UDJa{V]`:h5_b{kZA\|PWQ>.Gh@;6!4(e[P,-)z)3=gXUt?2`0P8>Tm\rQ-Ie\|(#{jl@H],
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: e7 17 fb 67 d2 b9 ea ff 8c 42 58 0f 1d 56 57 06 09 5f 98 e2 5b 48 a8 7c a8 45 61 ac 2a 17 d7 16 eb ca 23 9d b7 75 82 49 97 26 39 12 5d d8 f2 ec 84 91 a9 f8 3f e6 49 ed 12 de e3 2c 33 a2 3a fb 3c de ed 9a 95 20 54 d3 98 63 f1 6e aa 4b 9d 56 04 38 b4 ef 9b 9b 8b 54 d2 de d8 80 76 00 1a 85 5d 98 8f ec 79 26 fb 6e 82 c9 3c bf 05 46 7f 53 ae ad 45 dd 1f f6 78 73 6c 49 18 42 88 8e 98 92 ef 9f 12 d2 c6 e6 ee e2 68 de f9 05 5d 19 92 23 04 38 7a 3f 78 f3 9d 73 8d ba da 44 ac 0d cd bd 3c b2 d5 fb 4c 09 dc 29 e9 a3 76 6d b4 eb fa 18 c1 a6 85 b8 fb 0a a2 7f 65 b4 d5 e4 ca f9 59 a7 1e 4b ee e0 7d e6 fc 53 59 ea 27 ef d2 37 fc 05 6c 34 86 4b 75 34 a9 4c f9 34 63 ac 20 5e 27 a0 40 6d 77 94 1d 19 f1 8a c9 0a 5c 3a 6f 9a 02 db 8d 11 9e 08 e7 ee a9 fc 93 55 b4 0c c0 7b 0f Data Ascii: gBXVW_[H\|Ea*#uI&9]?I,3:< TcnKV8Tv]y&n<FSExslIBh]#8z?xsD<L)vmeYK}SY'7l4Ku4L4c ^'@mw\:oU{
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 9c bb 2c ea 8d 8f cf 39 92 6a e0 61 98 89 a7 f5 ba d5 6f ad 20 7b 05 fb 67 cb fe 34 4a dd f0 97 39 d5 f3 fe 54 f9 12 62 e4 f9 2f 5f c5 0b 9c 0c 8a 01 f8 1d 3a ad 68 72 08 eb 38 c0 e8 15 f1 3b 0a c4 64 de 74 2f db c1 e4 4d 76 5d 36 11 2f 2d 3e 05 42 95 03 21 75 a7 08 2c d3 d3 6a 88 43 a1 8c 46 23 97 91 a9 8e 39 26 ce 63 ec 4b 15 0f d0 0c 30 21 e2 99 65 81 dc 30 fe f3 49 f6 ee 79 c5 ba 96 72 27 05 76 aa e8 b6 6d a7 a1 27 96 9b aa e3 7a 89 bf e8 d9 18 9b ee 0a 46 c3 d7 fc 6a 1c 3b cd ca 22 d8 2d ff 47 c9 70 44 0b 16 b0 08 0b ad 59 bc 6a fe fc 2a ac 9f 12 a7 5a c5 13 99 14 14 c6 dc 28 cb 56 87 fe 33 c2 ad 67 21 81 42 3c c2 c0 4d 54 0f 23 61 98 38 58 8c 96 48 a7 6a 14 8f 82 d3 79 f5 1e 31 79 d2 10 cb ec 4d 23 4c 30 d6 1a c0 8b ec cd 0b f2 13 df 47 a2 09 40 41 Data Ascii: ,9jao {g4J9Tb/_:hr8;dt/Mv]6/->B!u,jCF#9&cK0!e0Iyr'vm'zFj;"-GpDYj*Z(V3g!B<MT#a8XHjy1yM#L0G@A
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 7a 2b fe 4f c9 b9 3c 9e e6 5e 97 17 1f e5 db 19 ca dd 82 4a 6d 3a d7 71 2d 3b e0 b1 ce 23 a9 b5 43 98 d9 7c 40 85 58 5a d6 f7 a5 7a 5b 2f d7 b0 e4 ee 40 e0 b8 35 c8 7b 57 81 c9 36 25 bd 5d 65 b5 06 62 eb e7 1d 99 af c4 f5 5a c2 a6 2a 2a b1 b1 c9 3b eb dd 83 21 a2 7b 73 bc aa 1c bb e1 97 7c f7 76 a5 c3 cf a6 cb 9f 44 f7 70 8a a7 ec bd 70 8b ab d7 36 e9 5b db 37 c5 16 c8 95 e8 be 8a af fa 7e 76 5a df fa 85 4a 6e f7 d1 27 5d 38 34 32 8c 1a 20 7f 43 99 54 46 19 2d f4 b3 cb fa 3f 3a 0e 40 a1 6b 01 4f 4f a0 90 63 2e ce e6 36 55 3e a4 e6 aa 96 66 c0 76 10 8a 05 be a9 5a f7 d7 e1 e5 bd 57 62 ee d8 28 73 44 d8 31 df b7 5c f8 c1 47 16 b6 d9 b4 5e 3c ee 7b 7a 25 30 e2 df fd 5d dc a9 9a 2c be a8 9e 46 29 f2 65 a7 37 26 db 19 cf 3d c4 19 dd 4e dd c9 e5 84 84 4e bc c7 Data Ascii: z+O<^Jm:q-;#C\|@XZz[/@5{W6%]ebZ**;!{s\|vDpp6[7~vZJn']842 CTF-?:@kOOc.6U>fvZWb(sD1\G^<{z%0],F)e7&=NN
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 98 58 56 c0 64 6e 7b be 8b a6 fe be a5 5a 19 33 7f 3a d9 2b 70 e1 46 7a 3d e2 a4 63 cb 9b 6a 21 58 00 cd a7 fa 0c 02 25 de aa 16 20 32 12 c5 9e 0c 99 36 fa 6f d9 7f 5a 09 cc f2 11 12 33 6e 33 ed d5 c8 24 d0 30 7a e7 9c 89 89 4b aa 4a f9 1d ab 10 57 dd bf 3b c9 89 db 74 58 95 50 48 d4 fd e7 55 18 c9 4c bb ef fb 4d 7f 07 4d b5 87 17 5f 23 a6 ff e5 36 e0 ab 22 a9 43 cd 2c 51 07 cd a4 23 24 2c ea 9b f9 1f 7b ba 08 b6 a4 be 84 27 ec 14 70 7c 49 f0 3e e5 b2 26 64 d0 48 d7 da 50 47 5f 84 e7 ec ba a9 8e 78 ff ff ee 3c cc 82 30 f5 bf 9a 35 83 b8 a5 ef 3a 8b 55 b0 a7 1f f9 aa f0 0b 9d e7 b9 41 2b 2d 35 1b 0f 7b ed dd 12 7a e1 d5 7e cf b3 12 b1 f1 b0 70 c1 9b d7 58 86 7a 4a f1 5b 81 ba 66 f0 76 d8 d9 59 b5 1b 48 3b 52 a6 70 9b c1 6b ce 5a 05 61 d4 9f 6b 5c ae 4e 7a Data Ascii: XVdn{Z3:+pFz=cj!X% 26oZ3n3$0zKJW;tXPHULMM_#6"C,Q#$,{'p\|I>&dHPG_x<05:UA+-5{z~pXzJ[fvYH;RpkZak\Nz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
539	192.168.2.4	50461	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	1783	OUT	GET /-/media/78ca58c9b8094d2cb1722b2bbcd4a19c.jpeg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:53 UTC	881	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12018 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="LN Accurate Data CS 270 x 170.jpeg" Content-Type: image/jpeg Etag: "5+A2yAVzQl/8r5OKZSAiyd4qwuwmobqboStyzslSM8g" Fastly-Io-Info: ifsz=63828 idim=270x170 ifmt=jpeg ofsz=12018 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010210 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 558126 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120079-DFW, cache-pdk-kpdk1780021-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460614.648763,VS0,VE90 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: b4 83 d5 db c5 45 ee 62 d4 d1 64 8e b3 fc ff 00 42 de 8c ab a4 ab 4a c6 8c 07 3c 11 ee e1 31 e8 60 5d 76 6f 4a 22 d1 de 09 2a 36 ba c1 38 12 2d 96 e6 ac f2 b3 e9 b4 6d bd 93 c7 32 3a 7c 6f 5f 34 f3 c3 96 9d ad be 7a c3 5c f4 36 54 f3 6e 63 da 0e bc 19 a4 c3 cb f2 bd 5d 37 65 ee db b3 50 ad c1 3b b9 c3 bb 9e d3 98 84 09 f6 94 15 99 d6 f4 b9 db 5a 89 3c 22 e9 2f 4e a1 4d 80 20 b3 65 b9 ac b2 a5 e0 54 77 15 7b e5 d2 05 20 0e 51 9f 4c af a7 e1 ee 5b d2 e7 eb c9 c3 e8 48 d1 e7 75 fc fd 34 a1 ba 99 73 9c bc a1 b5 d7 2b 23 56 cb bc 65 a3 06 29 45 0b 9a b3 aa 90 29 76 53 6b e6 69 33 64 44 89 2c f5 33 a0 67 5c ab 76 48 0c e6 dc ff 00 ff c4 00 2a 10 00 02 02 01 03 04 01 04 02 03 01 00 00 00 00 00 01 02 00 03 11 04 10 12 13 21 22 31 05 20 23 32 33 14 41 06 30 42 43 Data Ascii: EbdBJ<1`]voJ"68-m2:\|o_4z\6Tnc]7eP;Z<"/NM eTw{ QL[Hu4s+#Ve)E)vSki3dD,3g\vH!"1 #23A0BC
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: a0 77 9f 21 91 6a a9 62 50 a3 0f 23 ca 0b 65 2a 96 40 49 26 e5 a8 3f 2b 52 95 0c c9 52 94 bb 4a 79 74 ae 48 ad 70 5a 0d 8c d9 c4 27 b8 f2 00 e2 76 83 bc c6 03 e9 d2 db 10 2d 60 18 26 42 8b b2 c3 7a d3 8d 72 ee fa ea bf 61 ef 62 7e 3f d4 4f da 49 e0 df 9f fc d1 fb 2b f4 7f 63 7e 09 f8 ff 00 e8 27 f4 90 43 f8 ac bc 9e a6 eb 2c fd 97 6c be d4 9e 88 f5 3f ff c4 00 29 11 00 02 02 01 03 03 03 03 05 00 00 00 00 00 00 00 00 01 02 11 21 03 10 31 12 20 51 13 41 61 04 30 81 22 23 32 71 91 ff da 00 08 01 03 01 01 3f 01 e9 42 45 56 ce 25 6f 55 dd 83 1b 2d 99 05 82 71 49 13 59 12 b3 e1 22 48 68 a2 bb 33 bc 55 d9 d2 45 51 2c d1 a9 ec 45 60 8c 49 46 86 af b9 ed ee 43 66 85 79 24 fa d9 04 29 3b aa 24 ec 4b 34 6a 2a 9b ec 5b c5 f5 3a 2a b6 ba 44 a7 4b 28 8b b6 43 05 ab 22 Data Ascii: w!jbP#e@I&?+RRJytHpZ'v-`&Bzrab~?OI+c~'C,l?)!1 QAa0"#2q?BEV%oU-qIY"Hh3UEQ,E`IFCfy$);$K4j[:*DK(C"
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 62 b2 73 5b e1 24 5f 82 63 45 c3 61 51 cb 79 5d 67 8a 8b ab ca 90 e5 55 bd 2b 79 6f 15 bc b7 d6 f2 a3 93 85 8b 0d 91 91 cc 04 0b 9b d1 bf da a8 13 f2 55 92 c3 c1 17 34 e9 55 f6 7d a6 71 a1 fe 23 5e a9 cf 6f e2 6c 76 99 9a 9c cd a0 3d 9b a5 ec 03 8e ad 56 ca db 40 e0 a2 60 e1 6e e5 7b 94 2b 9f cd 4a b2 81 dc aa a7 72 cb b4 89 2e a1 4e 13 2f f9 28 99 e6 11 19 ac 54 fe ad 13 9e 2d af 35 9f 9c 9f da 78 74 5b 56 19 87 06 ba bc fe 8a 1b c7 33 3a f0 c3 30 ba ec df bd a6 3c fb 80 8e e5 7d 50 40 f0 c6 98 d5 53 1d ae c4 56 44 e6 5e 15 95 a6 9a 95 3e 02 05 82 82 3c 46 e7 82 a6 eb 54 8f 3e 6b ec ae da 3e 73 97 37 37 23 a7 92 83 bc 3e 8a d0 1f 50 9a 39 7c d0 70 b8 aa d9 38 6a 30 20 70 c3 9e 1c b1 e4 be 48 05 05 16 aa 61 40 a8 bc 4e f4 46 5b ff 00 55 7d 15 d3 08 d0 f8 Data Ascii: bs[$_cEaQy]gU+yoU4U}q#^olv=V@`n{+Jr.N/(T-5xt[V3:0<}P@SVD^><FT>k>s77#>P9\|p8j0 pHa@NF[U}
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 5a 8a 47 94 f2 9e 53 1d 66 3a fa 3b d3 bd 2b d6 56 56 05 2c 1a f0 b7 57 7d bc c6 cb b9 7a c6 0d 58 4c 56 66 40 a8 19 5e 6b fe 4d b8 9c 40 0a f0 e2 01 b7 2a a8 29 33 9a bc c1 0a ef 51 70 a0 51 05 05 4b ec c5 b5 28 b5 79 8d 27 8f 7c 46 55 86 ca d1 f0 c2 63 73 38 51 d0 29 ef 1f 21 a3 45 1f 04 02 ce 5a ab 2f 8e 25 e6 d0 cf 89 ab 60 95 15 47 bb 73 15 4b 38 65 f7 85 1d ca 75 49 73 63 97 d0 7f f4 4a f9 c7 46 b1 32 78 23 c9 d4 e9 31 2b c2 7f 6e 50 36 28 2a fd ce 25 63 75 61 f7 ed 15 57 6c 97 e5 ed 04 2b d0 86 70 d9 67 ea 02 af 0c 79 8a 59 b2 d7 43 bc ee 27 7d f1 11 76 00 19 83 11 1b ca f3 01 a0 3a 1d f8 80 c1 ae 1d fd 20 8f 11 b8 1e 0e 58 bd db 70 06 8e 97 d2 1e 06 6e 78 0c d8 52 f4 95 28 ec d8 c2 e5 41 0d 95 3b 49 dc 19 da ce d3 e6 5b 2a 5c 3e 65 da 3f 30 38 90 Data Ascii: ZGSf:;+VV,W}zXLVf@^kM@)3QpQK(y'\|FUcs8Q)!EZ/%`GsK8euIscJF2x#1+nP6(%cuaWl+pgyYC'}v: XpnxR(A;I[*\>e?08
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: e0 88 e1 08 81 69 49 a3 7c fb 30 89 cb 8e fd e5 9e 9c 87 b0 e5 86 cb 14 c1 2e 32 d4 cb 07 21 a8 dd ce 7e 7d 30 59 15 cc 7d 44 4a 55 b6 dc 06 bf fd 21 8c 3a fe 25 0e 47 31 85 78 9f 3a e6 7d 3f ed 0f eb c4 fe ae d0 04 db b7 97 a2 93 ed fd d1 c5 18 f4 83 ee fd e3 4d e3 8c d3 e7 3e fc b0 2d 40 43 6c e2 04 b6 89 de e1 ac 4d 65 cb 19 f6 d8 00 17 ad 7f ff da 00 0c 03 01 00 02 00 03 00 00 00 10 ae 5c 8b 09 34 5f 8a c0 2a f7 5a f1 7d 25 50 49 de c8 5f 4a 97 d5 23 d7 48 ca 4b dd d0 df 78 1d 4b 71 80 0e e1 23 18 44 3a 5b ac 91 22 65 18 fb b6 3c 68 7c f2 26 5c aa 6c f1 7c 3e 85 5d 5d 67 a2 24 5f 9c 58 e0 ee 0d 54 85 b2 6a 05 ac ea 4b 7e 6a 9f e7 63 2b ae 0a b5 b5 13 ff 00 31 38 44 c9 e9 09 78 5a 00 14 7f a8 83 8c 8f 05 42 b5 be 44 00 c6 1c fe 75 01 cd 6d f4 e0 4c 19 Data Ascii: iI\|0.2!~}0Y}DJU!:%G1x:}?M>-@ClMe\4_*Z}%PI_J#HKxKq#D:["e<h\|&\l\|>]]g$_XTjK~jc+18DxZBDumL
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: eb 4b d9 ff 00 3f 9b 3b 8a c2 1c ad 10 06 b7 7c bd ef 88 ee f6 9b 7f 3d 3d 45 ab d8 0e 60 41 9b c3 88 14 44 a8 3a 89 88 ed 02 10 67 2c 28 d1 2c ed 8a 93 98 0d 18 88 36 fd 41 eb ee 59 70 d7 ac 44 6b 13 75 d7 f1 14 ac a3 06 b2 d2 0c bd 84 55 55 ac e5 77 fd 0e 20 fa c5 61 d3 a7 f7 31 19 b1 65 17 f0 3a 3c b1 95 de 8c 07 5a a9 8d 16 56 22 fb 37 71 00 98 17 de 21 85 4a 28 ed 7f 44 22 8e 06 13 a7 73 09 cd ea 86 d3 80 8a 26 82 e4 42 36 a3 63 ae 25 8d b3 74 56 f3 5c 46 54 16 e6 db 7b 39 f7 14 69 a0 20 da b3 50 2b 65 a9 a2 be 60 d0 0b 87 9f e4 f9 fe 0e 37 0b 45 56 d2 03 a5 96 1c 01 ea 6c 88 2c aa 71 11 b1 75 f2 cb 21 c5 4b 47 69 1c bd 40 bc 54 b5 96 9d 14 d1 2e ed 00 43 42 fd 64 87 5c 69 f5 c0 16 b8 db 06 c3 e4 3f d8 31 5d 40 52 a5 43 c9 b6 32 86 e2 af 2f 07 53 05 Data Ascii: K?;\|==E`AD:g,(,6AYpDkuUUw a1e:<ZV"7q!J(D"s&B6c%tV\FT{9i P+e`7EVl,qu!KGi@T.CBd\i?1]@RC2/S
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: bd 17 f7 19 84 01 49 86 da 2d 2e b1 64 12 58 60 76 80 00 0e 09 7c 4d bd e4 4d 6b cd 42 42 41 0a 0c 43 5c 5d ef 99 83 e4 a6 34 ac 8c b3 43 e9 a7 ea 57 58 fb c4 00 5b 1e e2 ea 9e a3 2e e8 3e 2f fd 8e c0 7c b2 fd fe e7 09 fc 43 c1 be 63 45 db dc e4 4d f9 88 1b 5a 0c 3a 72 2b b6 54 70 85 49 ea 8d 1f 31 dc 80 42 80 ed a6 c4 69 1a 93 41 10 c3 c6 d7 71 11 1b 59 16 c0 14 d1 d3 c4 22 cd 0b 32 a7 54 d1 e4 dc 56 26 14 bc 5b db f4 c3 cd a9 46 80 60 d7 e2 5e b6 b3 4b dd d1 60 9f e6 41 3f c5 33 c6 f2 01 a4 ae 48 e6 6d e8 39 70 87 d3 04 a7 c8 a8 a7 3e d5 99 b0 a1 9d 0c 14 5d 0c 10 d4 26 6a 58 ca 8c 3b 0e 0f f6 3c d4 d6 16 2e 5b 53 ae e2 24 0a 50 74 87 ea 03 04 a9 e7 23 ee 38 fb 03 4b ea f7 1a e4 25 02 91 e9 25 a2 88 6e a2 86 e1 85 73 50 4e 2f 99 79 61 bb 19 65 fe d8 0e Data Ascii: I-.dX`v\|MMkBBAC\]4CWX[.>/\|CcEMZ:r+TpI1BiAqY"2TV&[F`^K`A?3Hm9p>]&jX;<.[S$Pt#8K%%nsPN/yae
2024-04-18 17:16:53 UTC	986	IN	Data Raw: ca bb 4e 0b e0 87 87 82 d2 0c a2 9d 12 e8 07 4a 64 32 38 3e 63 cf 8c b8 4d 6f 4c ed c4 2f 66 03 a5 a0 08 5f 76 46 cd 46 55 0d b9 b1 e6 e1 f0 2d 50 b3 5a bf ea 2f 36 a1 d1 95 62 53 a0 23 d2 e9 f8 94 62 84 41 d1 87 ee e5 85 b7 7c 4c 9f 88 5a 52 60 5e 6f 77 ea 12 de 06 9e 87 f4 30 36 d5 40 3a 5f f2 00 b3 42 cb ae 9e a3 05 29 9a 4e 9e a2 1b 30 16 e9 4d f8 f5 1e ac 40 f5 9a 40 c2 ec e1 95 63 f1 09 85 1b 2f d3 d4 30 d5 e7 b1 96 54 1b b1 83 c3 df 44 a4 c2 af 36 e5 60 aa f8 8d c3 4c 03 e1 1f fb 10 12 83 03 4f 03 8f 2f 30 ec d1 7a 2b 4a e0 b2 32 49 0b 82 a6 f7 c4 6c e2 96 b2 9a 2e 4d 7f d9 07 4d ad 16 ae 0d 75 9c 74 40 46 70 6a ce 85 56 f8 3a 25 d1 28 4d 15 1c 40 2a c0 b3 36 f0 42 08 53 91 2d ee b3 4e 70 78 89 40 a5 68 0a b9 ab ed 8a 9c 45 15 91 be cf 12 92 58 82 Data Ascii: NJd28>cMoL/f_vFFU-PZ/6bS#bA\|LZR`^ow06@:_B)N0M@@c/0TD6`LO/0z+J2Il.MMut@FpjV:%(M@*6BS-Npx@hEX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
540	192.168.2.4	50465	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2236	OUT	GET /-/item/v2/?language=en-US&fields=value\|text&query=%2Fsitecore%2Fcontent%2FLNRS%2FLNRS%20Settings%2F%2F%5B%40%40id%3D%27%7B1B17982E-9223-4AA2-8A32-DBF317CCF858%7D%27%5D%2F%5B%40Value%3D%27Industry%20%27%5D%2F HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:54 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 71 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:54 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210115-DFW, cache-pdk-kfty2130051-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460614.813751,VS0,VE333 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:54 UTC	71	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 32 30 30 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 30 2c 22 72 65 73 75 6c 74 43 6f 75 6e 74 22 3a 30 2c 22 69 74 65 6d 73 22 3a 5b 5d 7d 7d Data Ascii: {"statusCode":200,"result":{"totalCount":0,"resultCount":0,"items":[]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
541	192.168.2.4	50464	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2097	OUT	GET /GetEloquaFieldIds/%7B4989C3A4-A690-4599-8CA9-464B0C7A1180%7D?formId=2035 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:53 UTC	670	IN	HTTP/1.1 200 OK Connection: close Content-Length: 117480 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:53 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210100-DFW, cache-pdk-kfty2130069-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460614.718260,VS0,VE211 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 32 30 33 35 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 34 38 36 33 39 32 36 32 35 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 4c 65 61 64 43 61 70 74 75 72 65 4d 61 73 74 65 72 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 5d 2c 5c 22 75 70 64 61 74 65 64 41 74 5c 22 3a 5c 22 31 37 30 37 37 37 33 30 30 30 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"2035\",\"createdAt\":\"1486392625\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-LeadCaptureMaster\",\"permissions\":[\"Retrieve\"],\"updatedAt\":\"1707773000
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 73 69 67 6e 20 7b 5c 5c 74 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 5c 5c 74 7a 2d 69 6e 64 65 78 3a 32 3b 5c 5c 74 74 6f 70 3a 30 3b 5c 5c 74 6c 65 66 74 3a 30 3b 5c 5c 74 72 69 67 68 74 3a 30 3b 5c 5c 74 62 6f 74 74 6f 6d 3a 30 3b 5c 5c 74 6d 61 72 67 69 6e 3a 30 3b 5c 5c 74 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 6e 6f 2d 66 69 65 6c 64 73 2d 70 72 6f 6d 70 74 20 7b 5c 5c 74 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 5c 5c 74 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 5c 74 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 5c 5c 74 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 70 78 3b 5c 5c 74 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 5c 5c 2f 2a 20 53 45 43 54 49 4f 4e 20 42 52 45 41 4b 53 20 2a 5c 5c 2f 2e 65 6c 71 2d 66 6f 72 6d 20 Data Ascii: sign {\\tposition:absolute;\\tz-index:2;\\ttop:0;\\tleft:0;\\tright:0;\\tbottom:0;\\tmargin:0;\\tpadding:0;}.elq-form .no-fields-prompt {\\tfloat: left;\\twidth: 100%;\\theight: 150px;\\tpadding-top: 50px;\\tclear: both;}\\/* SECTION BREAKS *\\/.elq-form
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 7b 5c 5c 74 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 5c 5c 74 66 6c 6f 61 74 3a 6c 65 66 74 3b 5c 5c 74 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 3b 5c 5c 74 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 70 78 3b 5c 5c 74 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 32 32 70 78 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 2d 6f 70 74 69 6f 6e 20 2e 69 6e 70 75 74 20 7b 5c 5c 74 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 5c 5c 74 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 37 70 78 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 2d 6f 70 74 69 6f 6e 20 2e 69 6e 6e 65 72 20 7b 5c 5c 74 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 5c 5c 2f 2a 20 43 48 45 43 4b 42 4f 58 20 2a 5c 5c 2f 2e 65 6c 71 Data Ascii: {\\tdisplay:block;\\tfloat:left;\\tpadding-right:10px;\\tpadding-left:22px;\\ttext-indent:-22px;}.elq-form .radio-option .input {\\tvertical-align:middle;\\tmargin-right:7px;}.elq-form .radio-option .inner {\\tvertical-align:middle;}\\/* CHECKBOX *\\/.elq
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 61 72 67 69 6e 3a 30 20 30 20 30 20 33 33 25 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6e 73 74 72 75 63 74 69 6f 6e 73 2d 6f 74 68 65 72 20 7b 20 20 20 6d 61 72 67 69 6e 3a 30 3b 7d 5c 5c 2f 2a 20 50 4f 53 49 54 49 4f 4e 49 4e 47 20 2a 5c 5c 2f 2e 65 6c 71 2d 66 6f 72 6d 20 2e 6c 61 62 65 6c 2d 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 7b 5c 5c 74 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 25 3b 20 20 20 20 70 61 64 64 69 6e 67 3a 31 70 78 20 30 70 74 20 33 70 78 3b 20 20 20 20 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 20 20 20 77 69 64 74 68 3a 33 31 25 3b 20 20 20 20 6d 61 72 67 69 6e 3a 30 70 74 20 31 35 70 78 20 30 70 74 20 30 70 74 3b 20 20 20 20 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f Data Ascii: argin:0 0 0 33%;}.elq-form .instructions-other { margin:0;}\\/* POSITIONING *\\/.elq-form .label-position.left {\\tdisplay:block; line-height:150%; padding:1px 0pt 3px; float:left; width:31%; margin:0pt 15px 0pt 0pt; word-wrap:break-wo
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 20 20 77 69 64 74 68 3a 37 31 25 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 67 72 69 64 2d 73 74 79 6c 65 2e 5f 31 30 30 20 7b 20 20 20 20 20 20 77 69 64 74 68 3a 39 36 25 3b 20 20 7d 2e 65 6c 71 2d 66 6f 72 6d 20 20 23 65 6c 71 2d 46 6f 72 6d 4c 61 73 74 52 6f 77 20 7b 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 20 20 20 6c 65 66 74 3a 20 2d 38 30 25 3b 20 20 20 20 74 6f 70 3a 20 2d 38 30 25 3b 20 20 7d 5c 75 30 30 33 63 5c 5c 2f 73 74 79 6c 65 5c 75 30 30 33 65 5c 22 2c 5c 22 64 65 66 61 75 6c 74 4b 65 79 46 69 65 6c 64 4d 61 70 70 69 6e 67 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 46 69 65 6c 64 55 70 64 61 74 65 4d 61 70 70 69 6e 67 5c 22 2c 5c 22 73 6f 75 72 63 65 46 6f 72 6d 46 69 65 6c 64 49 64 5c 22 3a 5c Data Ascii: width:71%;}.elq-form .grid-style._100 { width:96%; }.elq-form #elq-FormLastRow { position: absolute; left: -80%; top: -80%; }\u003c\\/style\u003e\",\"defaultKeyFieldMapping\":{\"type\":\"FormFieldUpdateMapping\",\"sourceFormFieldId\":\
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 73 74 79 6c 65 5c 22 3a 5c 22 7b 5c 5c 5c 22 66 69 65 6c 64 53 69 7a 65 5c 5c 5c 22 3a 5c 5c 5c 22 6c 61 72 67 65 5c 5c 5c 22 2c 5c 5c 5c 22 6c 61 62 65 6c 50 6f 73 69 74 69 6f 6e 5c 5c 5c 22 3a 5c 5c 5c 22 74 6f 70 5c 5c 5c 22 7d 5c 22 2c 5c 22 63 72 65 61 74 65 64 46 72 6f 6d 43 6f 6e 74 61 63 74 46 69 65 6c 64 49 64 5c 22 3a 5c 22 31 30 30 30 30 33 5c 22 2c 5c 22 64 61 74 61 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 64 69 73 70 6c 61 79 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 66 69 65 6c 64 4d 65 72 67 65 49 64 5c 22 3a 5c 22 33 5c 22 2c 5c 22 68 74 6d 6c 4e 61 6d 65 5c 22 3a 5c 22 6c 61 73 74 4e 61 6d 65 5c 22 2c 5c 22 75 73 65 47 6c 6f 62 61 6c 53 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 75 73 5c 22 3a 5c 22 46 61 6c 73 Data Ascii: style\":\"{\\\"fieldSize\\\":\\\"large\\\",\\\"labelPosition\\\":\\\"top\\\"}\",\"createdFromContactFieldId\":\"100003\",\"dataType\":\"text\",\"displayType\":\"text\",\"fieldMergeId\":\"3\",\"htmlName\":\"lastName\",\"useGlobalSubscriptionStatus\":\"Fals
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 6f 72 6d 20 46 69 65 6c 64 20 56 61 6c 69 64 61 74 69 6f 6e 20 52 75 6c 65 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 49 73 45 6d 61 69 6c 41 64 64 72 65 73 73 43 6f 6e 64 69 74 69 6f 6e 5c 22 7d 2c 5c 22 69 73 45 6e 61 62 6c 65 64 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 3a 5c 22 41 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 69 72 65 64 5c 22 7d 2c 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 69 65 6c 64 56 61 6c 69 64 61 74 69 6f 6e 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 36 36 31 33 34 35 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 46 6f 72 6d 20 46 69 65 6c 64 20 Data Ascii: orm Field Validation Rule\",\"condition\":{\"type\":\"IsEmailAddressCondition\"},\"isEnabled\":\"true\",\"message\":\"A valid email address is required\"},{\"type\":\"FieldValidation\",\"id\":\"661345\",\"depth\":\"complete\",\"description\":\"Form Field
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 65 5c 22 3a 5c 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 5c 22 7d 5d 7d 2c 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 46 69 65 6c 64 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 30 35 30 30 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 5a 69 70 20 6f 72 20 50 6f 73 74 61 6c 20 43 6f 64 65 5c 22 2c 5c 22 73 74 79 6c 65 5c 22 3a 5c 22 7b 5c 5c 5c 22 66 69 65 6c 64 53 69 7a 65 5c 5c 5c 22 3a 5c 5c 5c 22 6c 61 72 67 65 5c 5c 5c 22 2c 5c 5c 5c 22 6c 61 62 65 6c 50 6f 73 69 74 69 6f 6e 5c 5c 5c 22 3a 5c 5c 5c 22 74 6f 70 5c 5c 5c 22 7d 5c 22 2c 5c 22 63 72 65 61 74 65 64 46 72 6f 6d 43 6f 6e 74 61 63 74 46 69 65 6c 64 49 64 5c 22 3a 5c 22 31 30 30 30 31 31 5c 22 2c 5c 22 64 61 74 61 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 64 Data Ascii: e\":\"This field is required\"}]},{\"type\":\"FormField\",\"id\":\"40500\",\"name\":\"Zip or Postal Code\",\"style\":\"{\\\"fieldSize\\\":\\\"large\\\",\\\"labelPosition\\\":\\\"top\\\"}\",\"createdFromContactFieldId\":\"100011\",\"dataType\":\"text\",\"d
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 61 6c 69 64 61 74 69 6f 6e 73 5c 22 3a 5b 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 69 65 6c 64 56 61 6c 69 64 61 74 69 6f 6e 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 36 36 31 33 34 37 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 46 6f 72 6d 20 46 69 65 6c 64 20 56 61 6c 69 64 61 74 69 6f 6e 20 52 75 6c 65 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 46 6f 72 6d 20 46 69 65 6c 64 20 56 61 6c 69 64 61 74 69 6f 6e 20 52 75 6c 65 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 50 72 65 76 65 6e 74 55 72 6c 43 6f 6e 64 69 74 69 6f 6e 5c 22 7d 2c 5c 22 69 73 45 6e 61 62 6c 65 64 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 Data Ascii: alidations\":[{\"type\":\"FieldValidation\",\"id\":\"661347\",\"depth\":\"complete\",\"description\":\"Form Field Validation Rule\",\"name\":\"Form Field Validation Rule\",\"condition\":{\"type\":\"PreventUrlCondition\"},\"isEnabled\":\"true\",\"message\"
2024-04-18 17:16:53 UTC	1379	IN	Data Raw: 6f 6e 73 5c 22 3a 5b 5d 7d 2c 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 46 69 65 6c 64 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 30 39 33 34 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 50 6f 70 75 6c 61 74 69 6f 6e 20 53 65 72 76 65 64 20 62 79 20 41 67 65 6e 63 79 5c 22 2c 5c 22 73 74 79 6c 65 5c 22 3a 5c 22 7b 5c 5c 5c 22 66 69 65 6c 64 53 69 7a 65 5c 5c 5c 22 3a 5c 5c 5c 22 6c 61 72 67 65 5c 5c 5c 22 2c 5c 5c 5c 22 6c 61 62 65 6c 50 6f 73 69 74 69 6f 6e 5c 5c 5c 22 3a 5c 5c 5c 22 74 6f 70 5c 5c 5c 22 7d 5c 22 2c 5c 22 63 72 65 61 74 65 64 46 72 6f 6d 43 6f 6e 74 61 63 74 46 69 65 6c 64 49 64 5c 22 3a 5c 22 31 30 30 36 32 39 5c 22 2c 5c 22 64 61 74 61 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 64 69 73 70 6c 61 79 54 79 70 65 5c 22 3a 5c 22 Data Ascii: ons\":[]},{\"type\":\"FormField\",\"id\":\"40934\",\"name\":\"Population Served by Agency\",\"style\":\"{\\\"fieldSize\\\":\\\"large\\\",\\\"labelPosition\\\":\\\"top\\\"}\",\"createdFromContactFieldId\":\"100629\",\"dataType\":\"text\",\"displayType\":\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
542	192.168.2.4	50468	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2056	OUT	GET /GetLocationInfo?_=1713460612539 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: / X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:54 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:54 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120039-DFW, cache-pdk-kfty2130085-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460614.004366,VS0,VE176 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:54 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
543	192.168.2.4	50469	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	2124	OUT	GET /Areas/LNRS/img/icon_sprites_5aug2021.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:54 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:54 GMT Via: 1.1 varnish ETag: "KzcxZgxH/26umS6lXEZUioQpEIgmxqA5zJam41/XG3s" Age: 48 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130091-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460614.007039,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
544	192.168.2.4	50470	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:53 UTC	938	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko&co=aHR0cHM6Ly9yaXNrLmxleGlzbmV4aXMuY29tOjQ0Mw..&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=normal&cb=om7fq0ieawmg HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:54 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 17:16:54 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-zBk6erPsznkZmSxGftJoKQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:54 UTC	364	IN	Data Raw: 32 61 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af9<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 7a 42 6b 36 65 72 50 73 7a 6e 6b 5a 6d 53 78 47 66 74 4a 6f 4b 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 2e Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="zBk6erPsznkZmSxGftJoKQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha.
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 74 6a 36 5a 4d 4f 2d 65 43 31 4f 6f 42 4e 63 47 52 42 67 74 30 4e 36 6d 6c 46 72 6b 42 5a 57 33 48 59 43 5a 6c 55 5a 68 4d 41 53 6d 57 35 4e 4a 54 66 37 61 75 44 44 6a 31 4c 37 36 6e 79 67 7a 43 5f 33 34 64 7a 30 56 48 4c 77 55 50 6e 73 69 68 57 72 6d 51 44 73 5a 46 5f 75 6a 31 4e 72 54 77 6f 32 35 4f 69 76 44 59 33 65 2d 51 63 53 4f 7a 65 38 47 44 30 71 52 75 4b 36 52 4c 35 35 5a 45 30 39 32 5f 47 65 56 78 58 48 6f 64 49 68 6e 2d 73 64 45 36 4b 37 62 32 49 4b 62 56 48 5a 77 38 53 34 63 41 6f 73 68 49 43 6d 77 55 75 5f 59 34 43 56 68 54 6a 69 63 66 65 48 34 46 45 4c 75 31 48 5f 64 32 6c 76 4e 4a 68 44 6a 64 59 76 69 59 7a 39 48 6e 33 34 47 72 51 73 4f 79 66 76 33 30 6c 75 4c 51 62 70 41 4d 46 4d 5a 66 73 73 75 33 68 73 51 42 37 47 56 75 72 37 68 35 39 39 Data Ascii: tj6ZMO-eC1OoBNcGRBgt0N6mlFrkBZW3HYCZlUZhMASmW5NJTf7auDDj1L76nygzC_34dz0VHLwUPnsihWrmQDsZF_uj1NrTwo25OivDY3e-QcSOze8GD0qRuK6RL55ZE092_GeVxXHodIhn-sdE6K7b2IKbVHZw8S4cAoshICmwUu_Y4CVhTjicfeH4FELu1H_d2lvNJhDjdYviYz9Hn34GrQsOyfv30luLQbpAMFMZfssu3hsQB7GVur7h599
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 39 59 65 75 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 7a 42 6b 36 65 72 50 73 7a 6e 6b 5a 6d 53 78 47 66 74 4a 6f 4b 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 4a 63 30 68 56 62 47 45 33 64 44 52 6a 53 7a 56 72 54 30 46 69 4e 6d 4e 33 59 30 4a 70 55 46 45 31 53 47 35 56 61 6b 31 55 57 6e 56 78 4e 58 64 56 53 6b 70 6b 4d 6c 56 4e 4c 6d 70 7a 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 52 33 64 71 51 Data Ascii: 9Yeu"><script type="text/javascript" nonce="zBk6erPsznkZmSxGftJoKQ"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9Jc0hVbGE3dDRjSzVrT0FiNmN3Y0JpUFE1SG5Vak1UWnVxNXdVSkpkMlVNLmpz\x22,\x22\x22,\x22R3dqQ
2024-04-18 17:16:54 UTC	605	IN	Data Raw: 58 4a 5a 5a 31 70 51 4c 7a 68 69 64 58 52 52 61 33 42 76 5a 57 64 58 57 44 4d 78 62 57 70 72 64 6c 42 76 57 6a 56 54 55 45 39 53 57 57 77 77 4d 6c 59 72 54 69 73 78 63 48 68 6d 62 32 52 43 64 47 35 4f 56 55 31 51 53 58 4d 72 57 45 39 6d 64 79 39 6d 52 6a 42 6a 65 57 59 34 51 6d 74 4b 64 58 70 50 62 48 68 51 53 57 5a 49 53 57 31 59 63 6e 5a 74 55 57 46 6d 56 30 64 7a 4e 44 4d 72 54 6a 46 59 4d 55 70 72 61 32 68 6c 57 45 68 4e 62 33 68 34 4d 6e 5a 45 64 57 56 30 65 43 39 44 4d 57 6c 51 64 57 51 31 51 55 56 55 4d 6c 4a 43 56 7a 55 35 54 31 45 30 5a 31 6c 4f 4d 45 68 56 55 6d 4a 49 59 56 56 6d 4b 32 4a 68 57 6c 6f 31 4f 44 52 6c 52 45 6c 7a 65 54 52 69 61 58 4d 79 54 30 64 77 63 32 74 4e 55 48 45 35 55 6d 6c 73 4c 30 6c 77 57 45 35 55 55 30 68 46 51 7a 51 32 Data Ascii: XJZZ1pQLzhidXRRa3BvZWdXWDMxbWprdlBvWjVTUE9SWWwwMlYrTisxcHhmb2RCdG5OVU1QSXMrWE9mdy9mRjBjeWY4QmtKdXpPbHhQSWZISW1YcnZtUWFmV0dzNDMrTjFYMUpra2hlWEhNb3h4MnZEdWV0eC9DMWlQdWQ1QUVUMlJCVzU5T1E0Z1lOMEhVUmJIYVVmK2JhWlo1ODRlRElzeTRiaXMyT0dwc2tNUHE5UmlsL0lwWE5UU0hFQzQ2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
545	192.168.2.4	50473	104.18.16.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	684	OUT	GET /qualified.js?token=FsU5iFRQMWKZpcF1 HTTP/1.1 Host: js.qualified.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: W/"e4cfb76386f1f61f399d299928b57ee3"
2024-04-18 17:16:54 UTC	702	IN	HTTP/1.1 304 Not Modified Date: Thu, 18 Apr 2024 17:16:54 GMT Connection: close Cache-Control: public, max-age=14400 Etag: W/"e4cfb76386f1f61f399d299928b57ee3" Pragma: no-cache Referrer-Policy: strict-origin-when-cross-origin Strict-Transport-Security: max-age=63072000; includeSubDomains Vary: Accept Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Request-Id: 8485faec-ddc1-ae15-5e00-37eafc07d87e X-Runtime: 0.023027 X-Xss-Protection: 1; mode=block CF-Cache-Status: MISS Expires: Thu, 18 Apr 2024 21:16:54 GMT Server: cloudflare CF-RAY: 87664e26dcab44eb-ATL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
546	192.168.2.4	50475	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	2120	OUT	GET /Areas/LNRS/img/icon_arrow_red_dn.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "awSmcPLAOnF6/B0h4W9/TEG+qLYXKrTMxy8aBCCs7Wo" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/Areas/LNRS/css/main.css?v=638484955469443221 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:54 UTC	488	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:54 GMT Via: 1.1 varnish ETag: "awSmcPLAOnF6/B0h4W9/TEG+qLYXKrTMxy8aBCCs7Wo" Age: 3 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kfty2130074-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460614.190057,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
547	192.168.2.4	50450	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1926	OUT	GET /visitor/v200/svrGP?pps=70&siteid=903&ms=131&firstPartyCookieDomain=tracking.risk.lexisnexis.com&elqGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:54 UTC	637	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: application/javascript; charset=utf-8 Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:53 GMT Connection: close Content-Length: 79
2024-04-18 17:16:54 UTC	79	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 47 65 74 45 6c 71 43 75 73 74 6f 6d 65 72 47 55 49 44 28 29 7b 20 72 65 74 75 72 6e 20 27 35 64 39 65 35 38 38 34 2d 38 38 36 61 2d 34 61 64 39 2d 38 66 37 38 2d 34 38 38 61 38 66 31 32 66 35 37 63 27 3b 20 7d Data Ascii: function GetElqCustomerGUID(){ return '5d9e5884-886a-4ad9-8f78-488a8f12f57c'; }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
548	192.168.2.4	50477	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	2163	OUT	GET /-/media/images/government/meet%20the%20siu%20team/siu%20team.jpg?w=400&hash=C7AAD7AB43C535C357EC425F781C3E0A HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:54 UTC	860	IN	HTTP/1.1 200 OK Connection: close Content-Length: 23564 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="SIU Team.jpg" Content-Type: image/webp Etag: "So4UX4uRwxe0XikdmBOt6K355pyzgSsv9D+flV+XPDo" Fastly-Io-Info: ifsz=47365 idim=400x312 ifmt=jpeg ofsz=23564 odim=400x312 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 557454 Date: Thu, 18 Apr 2024 17:16:54 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210170-DFW, cache-pdk-kfty2130080-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460615.559262,VS0,VE288 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 52 49 46 46 04 5c 00 00 57 45 42 50 56 50 38 20 f8 5b 00 00 10 3f 01 9d 01 2a 90 01 38 01 3e 51 24 8e 45 23 a2 21 14 db ad 3c 38 05 04 b2 b6 d0 de 1d 60 23 d5 c0 0d b9 22 4c 22 25 2b 93 78 3e e5 21 7d e4 9f 9e 67 6f d7 4e db 4c 57 79 9d c3 e7 78 f9 fe 98 ff a9 fa 8c ff 72 e9 2b e6 4b cd bf d3 cf f6 cf 44 fe aa 8f 48 0e 9a 5f f0 56 c4 be 87 ef 01 e7 1f 98 3f 87 ff 07 fb 93 fd eb e6 47 f5 dc b5 f6 49 a8 bf 75 7f c5 ff 19 ed 37 fb ff fb df e8 fc 7d f9 95 fe df dc b7 c8 47 e6 ff d1 ff e0 7a 6c fe 0f fe 3e fc ad eb fd cf ec f7 b0 5f b7 ff 6a ff 83 fe 0f f2 bb e2 c7 ee fc db fb 2f ff 93 dc 07 fa 4f f7 0f fb df e0 3d c3 ff 73 fb 39 e5 41 f9 1f f8 9e c0 3f d4 3f cb 7f ef ff 5b ec c7 ff 97 fb 4f ce 4f 73 1f af ff ac ff df fe ab e0 27 fa 37 f8 2f fc 1f e5 3d bb 3f Data Ascii: RIFF\WEBPVP8 [?*8>Q$E#!<8`#"L"%+x>!}goNLWyxr+KDH_V?GIu7}Gzl>_j/O=s9A??[OOs'7/=?
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 9e 6f e8 3e 28 cf f0 a5 da 63 a0 48 cb 52 e3 27 c4 68 b0 a8 7e cf 3d 85 6c 17 a6 4a 69 1e 49 ec 26 7f 2c 14 b0 af 40 e2 9f 86 63 32 7b 33 0e b3 8a dc 52 39 c7 7f c2 a8 1c 62 77 d2 c2 f4 e1 a0 53 8e 5c ed 72 a0 f5 08 51 21 9b c0 ed d7 b9 33 1e 1c 35 4e 89 7b 71 ee f4 ef 8c 0d db df e4 8f df 91 c9 59 87 f8 4a cf 5f d0 1a e6 c2 9f 9c 44 a8 6e cf 4e fb d0 e8 71 d0 8a 6f fa 61 55 2b d3 c4 d4 3a d6 43 0b ef b8 6e 46 ef 6b 00 74 65 a9 6d 19 18 de fd 32 e2 71 54 80 f6 f7 af 13 7a 05 e9 2a 67 00 17 e2 04 cb b9 ee 8a 37 ff 04 b5 52 ea 85 6a a2 89 2c 81 37 ff 81 1f 85 03 62 da 35 ee f6 72 95 b3 b7 1d f2 12 13 e2 94 c1 89 37 8c b2 59 ca aa a7 e9 fa a7 53 73 5d ed af 49 e0 b1 a9 9a 6a 4c f4 71 c2 5e bb 17 fd f4 f8 ff 2d fc 5f fb 62 b4 ec 13 ce 70 dc 74 b0 f7 63 d1 c7 Data Ascii: o>(cHR'h~=lJiI&,@c2{3R9bwS\rQ!35N{qYJ_DnNqoaU+:CnFktem2qTz*g7Rj,7b5r7YSs]IjLq^-_bptc
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: d1 37 2c 45 25 02 8a a2 91 d0 f7 14 29 10 df 1e da 03 e9 0e ed bc c3 64 36 45 46 84 9d e0 92 24 03 3a 39 d2 d0 fd 82 32 c9 5e 20 3a 70 e2 8b 72 b9 26 e8 0b 9d 9d 49 f0 9c fb 2d 5e 1d e8 26 24 6f 56 7e f5 48 bf 13 76 5b 42 8a b2 17 bd fd e6 02 10 37 0a 94 04 76 d3 3c 26 7f d4 e2 5e 73 af 4f 33 6a fb 35 de 08 49 2c 15 f1 b8 29 e3 24 8f a1 49 5d 39 54 62 8b 6f d5 71 4b 34 4c 97 c9 6c 97 32 c8 c3 b5 67 9b 79 b5 a3 4d 6e 4a 50 c7 f4 ff 4d 4a a3 fe 17 a6 cb 97 ff 1b e5 7f 55 45 b9 f3 e1 df 12 1e 05 7a 14 56 1c a6 52 a5 b1 ae 64 0c c0 d9 72 2d 04 ab e3 1f a5 92 d0 b1 38 ef b5 81 22 9b 84 c7 8b b8 b2 06 36 83 47 bc fd 35 4b b8 c4 82 7f b8 bc ab 7d 79 05 24 70 3e 70 d1 a5 c6 d2 39 33 90 8f 62 e9 4a de 67 d0 13 8c 08 d1 73 59 5e 9e bd 7d b2 69 ed 5c 83 5b d6 47 0b Data Ascii: 7,E%)d6EF$:92^ :pr&I-^&$oV~Hv[B7v<&^sO3j5I,)$I]9TboqK4Ll2gyMnJPMJUEzVRdr-8"6G5K}y$p>p93bJgsY^}i\[G
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 2a 22 aa e4 82 45 94 2a 29 09 3c 0d 10 5a 11 1c 60 17 71 e1 42 1a f9 fa 8e ad e8 1f 77 7d e6 76 e3 9c f6 a9 46 0b 15 d6 dc fc b6 89 1d c2 3a e3 6c 67 87 ed 7a b8 5b 71 30 1e 97 f4 77 05 52 e3 2a 91 52 af d5 7f c7 17 40 1c 06 57 42 08 04 ed 07 a4 7a 60 af 57 46 70 79 6f 09 48 10 3a d0 63 03 61 fb 46 b5 b7 bc be 12 fe f0 c5 6e d7 59 d1 ea 8e 71 f7 5b fa 5d 45 5a a2 2c 19 7b 2b d4 85 c3 d7 f6 ce aa a9 14 00 31 be ff 57 d6 2f e0 be 99 26 6d 2d 4b 74 c9 bc 60 ea 38 8c 6b ff c4 4d f5 a9 77 e9 11 fd e2 78 96 53 b4 aa 51 1a 63 36 48 a7 fd a7 93 f9 2e 47 1c 69 1d 02 0e a1 15 9a b0 29 9c a2 ee ba ed 3e 97 d2 9e 3a 6b f3 bf 1c 03 f5 3a b5 f1 6b 9e e1 2e 24 91 16 43 66 85 06 65 4e e5 e1 6f f5 ea 9f d9 0d bc e5 d5 51 b1 6b e0 0c 6d 7b 48 98 bf 18 d9 91 2d d7 fb c2 80 Data Ascii: "E)<Z`qBw}vF:lgz[q0wR*R@WBz`WFpyoH:caFnYq[]EZ,{+1W/&m-Kt`8kMwxSQc6H.Gi)>:k:k.$CfeNoQkm{H-
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: b6 3f bf af e6 01 90 6a 1f 07 39 39 3d c0 e5 97 0d 09 3e 4e 3d 6a bc 93 45 76 8e 7b 13 cf 2a da 18 91 97 c0 ee 6b a5 3a 22 9b 70 30 30 b8 6a b7 30 13 45 b8 9c c2 89 e6 d0 48 87 1a 48 78 03 3f 59 80 07 43 b1 d4 97 7c 8c 6c 86 9d 8d f0 07 2b 15 f6 84 aa e8 22 ab ee 8d 20 5e 7f 6f 0c b1 49 b8 a8 bc 2f bf d0 8c 2c 7b 98 9d db 37 f1 42 24 55 b3 12 8d 5d 3c f3 f0 42 16 26 b9 9f 39 86 10 a4 3a 49 ba d5 f2 28 5b 63 66 a0 04 d1 05 03 1b bd a4 0f b8 d1 fb b9 d8 b8 0e 9e 00 6c 6f 72 4c ec 5d 1e cb 10 ee 40 99 1f ca 81 3c 15 2b 62 d6 de cd 30 f8 67 46 bb e5 12 9c e8 6f 16 66 2b 9a f8 44 27 7e fa 2a 1b 8b 53 89 4e 98 db 65 5f 5b 1a 93 3e ea 7c fb 39 1f 8d cd 29 99 15 29 6b fb 56 e1 81 91 68 09 f3 61 9b 11 98 2c 78 df 16 09 66 2f 74 aa 5e c8 ea e2 42 53 a0 9f 67 2d 10 Data Ascii: ?j99=>N=jEv{k:"p00j0EHHx?YC\|l+" ^oI/,{7B$U]<B&9:I([cflorL]@<+b0gFof+D'~SNe_[>\|9))kVha,xf/t^BSg-
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 9d d8 93 52 cc d6 c2 55 a3 0d 51 a3 e2 74 20 88 4a 53 c0 f8 6e 8c 60 17 83 0c d5 56 63 7e 37 52 99 7c 56 19 08 88 14 f8 b0 ac 3a b3 fa fb 18 37 b8 b1 3f ed 75 7a be c0 fa a2 46 a3 10 5c a2 74 30 42 cc 2f fb 07 97 af 8e 53 ef 4c 07 4e 7a 29 2f b6 5d bd e8 7a 81 a1 27 4d 5b 53 36 7d 61 6b 25 02 49 60 17 2a 64 3f 0e ae fd b8 b4 b0 4e c9 fe d4 5a 04 15 ed f3 53 6b 74 21 b0 13 64 06 e8 1c 47 1f 12 b6 03 10 bd e5 24 50 24 1b c2 4f 10 4c d6 e4 c6 a3 2f 0d b7 33 28 56 5d fc 85 0a a1 d2 3f 58 8c 1e 5c bb ca 34 6a a5 a5 16 c2 9d 87 76 39 15 a9 9c ba 94 0c ab 7b 6b 0d 93 3b a4 d9 30 57 24 0f aa cb 61 a0 01 b2 5e f5 e2 c9 d3 16 b5 da dc 66 cf 64 a6 52 69 76 db 0f 7b ec 8b 29 87 28 9f cf 76 96 d7 21 c8 4e 6b d1 67 54 6c b0 f3 57 ff 4c 73 da ae f3 43 d8 3e 49 03 d8 1a Data Ascii: RUQt JSn`Vc~7R\|V:7?uzF\t0B/SLNz)/]z'M[S6}ak%I`*d?NZSkt!dG$P$OL/3(V]?X\4jv9{k;0W$a^fdRiv{)(v!NkgTlWLsC>I
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 4d 89 da 3c 35 a0 5c c7 fb 34 c1 47 e4 4b 40 ff 96 99 eb 88 5a b1 16 c7 e1 ca 05 80 75 e4 89 38 4e ed 65 07 92 b6 0a 5f 40 0e 3d 20 d8 fc 55 13 86 20 3a fd 4b 38 80 f2 2a c8 6d 2d 8a ea 19 18 0a 6e 2c ba b4 e9 ba 8e 67 15 1b e5 1d 35 dd 83 20 70 2e eb b1 76 d0 28 aa 40 af 95 c0 2b d4 a4 84 2f a0 41 9a e0 3a 71 8a a3 c3 39 9e f6 8e e7 4a a8 98 90 93 26 98 49 e5 01 cb ff cc 67 12 5d 36 25 f0 00 c4 c9 3f e5 fd d6 a8 00 51 12 e0 0e 37 a6 29 fb 33 8f be c1 67 fb e1 56 07 c8 1f 9a 8c 0f 6b cf e0 fb 1f b1 b2 a1 25 f9 34 13 4b 07 ea a1 77 71 63 ce ce 28 2b 3a 8d e1 4d fd 91 77 25 7e 93 fd 68 e3 96 a4 ae bf dd b6 a5 6a 2e d9 22 5b 18 78 98 cf c1 f0 10 ae 0e f3 70 1d a7 30 91 fd 2b ed 44 b0 ab 66 52 c5 72 5a 77 dc 03 f1 38 3c c0 6b 0a f7 ae 98 1d 98 10 74 6d f9 d3 Data Ascii: M<5\4GK@Zu8Ne_@= U :K8*m-n,g5 p.v(@+/A:q9J&Ig]6%?Q7)3gVk%4Kwqc(+:Mw%~hj."[xp0+DfRrZw8<ktm
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 44 ef 27 12 32 3c a3 dd cf aa 51 00 b1 00 18 51 11 b2 12 68 0a 35 d4 65 e6 1e 8e 05 a4 06 d5 b1 17 79 82 a4 e5 69 83 a1 92 a9 3f b0 c5 9f e9 eb 83 e3 39 f2 9c 1f 43 1a a8 33 47 af 78 b3 43 1e 8e b8 1a eb 93 d4 9e 3f 68 5c 4b 95 05 7c 8d 50 b7 b2 c9 55 38 85 66 38 50 37 56 b2 b5 ed a8 0e a2 4b b1 fb 09 a3 ab 29 94 a3 37 fb e7 7f 41 80 4a 81 30 f8 d8 38 a8 6b 3f 41 ba b5 52 c8 15 3f 2e 95 e8 4a 5c 85 5a 96 0d cf f7 41 be be 64 bd 12 04 0c 05 6b 18 dc 06 1d 54 fd 63 94 75 44 1e 8b c7 19 3d c9 ca 45 2b f8 e5 89 2f 99 a8 99 c1 a0 c4 53 e2 e5 1c 71 3f 0d 0f f0 1a e3 19 52 4e 05 92 67 a1 be 0d 85 ac 8a d9 86 31 05 6f fc a7 41 b4 a7 72 d3 c1 a7 95 ef d5 a6 39 3f fc 45 a6 b9 1b e1 5f 54 b4 67 9f 89 54 c2 b1 d6 f0 85 18 4b 42 38 b6 0c ad 54 80 02 66 e9 e7 73 02 92 Data Ascii: D'2<QQh5eyi?9C3GxC?h\K\|PU8f8P7VK)7AJ08k?AR?.J\ZAdkTcuD=E+/Sq?RNg1oAr9?E_TgTKB8Tfs
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: c5 c3 be f4 11 1a 18 91 f8 d2 7d 91 82 42 73 d5 d6 7b ff 64 db 68 8e 42 9d 2d 4e 9d 8f aa 88 4b ad ff 7d 44 82 76 b3 c5 24 5e 34 4d 82 65 b5 9a f8 1d 1a 8f 9e e5 df f6 d6 14 a8 da d0 ce 2d bf ac 75 de 74 18 c0 55 a1 a2 08 05 66 cc cf e3 1d cb 3d ed 9f 6e 1a 43 ec fc fc b5 3d fe 0b 11 56 50 83 84 fb ef 4e fe 6a d3 35 42 bd 00 dd 97 c1 a6 ff 44 d2 ca 28 e8 5b 3f 8a c2 e5 c8 3d b6 6a 49 56 74 49 55 e6 55 fc 2a ff 91 09 1b 3b cb 56 32 59 4e 4c e3 43 6b ea 34 4a 5e 72 67 04 9a be 87 5e 71 b3 3a 62 1c 42 4d e8 ab 34 5e 32 f8 6a 66 b2 89 3a 3a 33 cd 3b 67 8e bd 78 bc 53 ff 3b 5e f0 c7 bc ad ba 49 9e 3a f6 75 ab 91 68 4d 63 9d 1b 3a 17 5a 2e 30 03 09 1d 8a e5 a0 73 34 23 51 e7 eb 91 cc 34 9e 7d 84 ff 9d 43 61 e7 41 35 10 00 3a 16 2a 53 6e 39 af a9 d8 d5 27 af f9 Data Ascii: }Bs{dhB-NK}Dv$^4Me-utUf=nC=VPNj5BD([?=jIVtIUU;V2YNLCk4J^rg^q:bBM4^2jf::3;gxS;^I:uhMc:Z.0s4#Q4}CaA5:Sn9'
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 32 37 1f ab 10 19 4c 57 4b 6b ce 1b ac 5e 6b 39 b9 da 4e b5 e4 e7 22 26 10 42 df cd 8e 3a e9 f1 4c ab c9 d0 79 7b 3a b9 ec 83 0b 77 7b fc 55 74 67 97 5f ed 71 20 56 23 d9 7a de a3 87 69 8d 13 5a 69 1a 60 75 be ec ca 4d 23 8a aa c5 65 ad 3d 28 f7 28 94 4f a1 21 f5 44 d4 62 df ad df c4 62 ef 16 6d c4 36 e4 ad 63 2a 01 1e 18 0a c8 34 3d a3 ff 0c 4c e0 df 15 96 ed 5b 57 ee 0f cd 71 06 af bb 44 fc 57 ca 4d 72 c3 8a 3c fa 01 14 a7 3d 09 2e c9 4b a9 24 28 ad 43 09 3a 6c 5e a6 38 73 9b cd 53 d9 b5 71 73 14 e0 20 58 fd 89 89 10 d2 8e c1 58 3a 35 f7 52 f2 54 e9 d4 33 dd 9b ae 33 1b d1 41 6a 41 1d 16 46 70 3c 37 e4 c3 58 b8 95 5e f6 e6 60 a3 db 13 4e 0d 08 38 2a 02 4d 43 1b ce 78 dc 0b f5 63 0d c7 e9 83 87 c5 50 23 08 e9 3e cf 55 76 ed 8a 0e c4 c5 26 53 70 71 82 3f Data Ascii: 27LWKk^k9N"&B:Ly{:w{Utg_q V#ziZi`uM#e=((O!Dbbm6c4=L[WqDWMr<=.K$(C:l^8sSqs XX:5RT33AjAFp<7X^`N8MCxcP#>Uv&Spq?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
549	192.168.2.4	50476	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	2177	OUT	GET /-/media/images/government/shutterstock_308932925/training%20page%20refresh.jpg?w=400&hash=E97587CA6E8E8FCE847A89D8F79FE6C8 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:54 UTC	872	IN	HTTP/1.1 200 OK Connection: close Content-Length: 10020 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Training page refresh.jpg" Content-Type: image/webp Etag: "6o6AJsCbO/7g7TH1wKcFyWVaqrF0UOOq8qJjesxq03E" Fastly-Io-Info: ifsz=24353 idim=400x137 ifmt=jpeg ofsz=10020 odim=400x137 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010216 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 534032 Date: Thu, 18 Apr 2024 17:16:54 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210031-DFW, cache-pdk-kpdk1780062-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460615.578838,VS0,VE92 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 52 49 46 46 1c 27 00 00 57 45 42 50 56 50 38 20 10 27 00 00 b0 8d 00 9d 01 2a 90 01 89 00 3e 51 22 8e 45 23 a2 21 14 4a 6d f4 38 05 04 b2 83 81 c7 8a f0 91 05 0a f8 eb b3 f6 06 fe 0f 9e 8f 27 f7 30 11 fb 9d e6 7f cf 9e 77 ff de fa ed fe e5 ea 2b fa cb d3 8f f7 13 d4 47 ed 7f ab 97 a5 6f ee 9e a1 df db ff db f5 c5 ff 66 f5 40 f2 e4 f6 79 fe cd ff 77 f6 f3 db 23 30 97 ad 07 83 3e 35 3d a7 ee 4f b2 be 58 fb 21 d4 47 e7 5f 87 3f 6f fd e7 da c7 f4 5f f4 3f c3 f8 f7 f1 f3 fc 2f f0 be c1 de d9 ff 59 fd b3 c9 7f fc 5e e3 eb 59 ff 3b d4 23 db 0f b2 7f b9 fe f9 fb c9 e8 67 fe 9f a2 3f 65 3d 80 7f 5b 7f e0 7d b4 7d 11 e0 f3 f8 5f fb be c1 ff d0 3f bf ff e2 ff 47 ef 11 fe 5f 94 2f ac bf 6c 3e 04 ff 9d 7f 7b ff b9 d8 db f7 a3 d9 c7 f7 54 ff 77 0c 0c de e4 65 af 71 cd Data Ascii: RIFF'WEBPVP8 '*>Q"E#!Jm8'0w+Gof@yw#0>5=OX!G_?o_?/Y^Y;#g?e=[}}_?G_/l>{Tweq
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: d9 1b d1 22 02 ce 0b 08 27 4e f6 b2 20 d4 27 53 40 27 05 d1 32 01 51 61 24 b9 d5 ff 3a d4 36 f6 4a 34 73 e7 43 19 fe 27 9f 69 50 29 07 f1 62 74 e8 16 b7 03 be df ba 61 21 ce 83 d2 96 50 4e 51 91 7d fa 70 24 fc 33 2b 03 36 0d 6e 66 e8 bf 8a a0 24 a3 58 dd 71 cb 11 13 cb 25 66 95 d0 01 65 77 a8 60 fa 58 a9 59 cc ba ac 95 cd 47 f0 46 67 11 74 4a a9 68 df 92 44 bd 6b f0 af cc 36 a1 39 50 44 54 b2 30 6b 3b d6 ab 0d c3 ee c4 c8 21 a5 88 29 07 46 cb a2 93 04 e0 df 50 49 e8 06 84 26 1e 75 e8 14 9b 2d f4 ec 00 eb 7e b2 a8 7c 1e 89 ef 41 f4 9b 15 b2 5e 5b 36 9b a3 43 30 42 19 af 57 03 83 84 2d 5c 2e f4 3c 21 f4 8c 1a 81 86 47 7a 11 4c c3 ad 79 7a a4 d2 9c ac 8e c9 84 8f 04 c0 82 8d 76 2b 43 df 35 1a 92 6b 68 3b 61 4c ed ed 43 4a 5a f6 78 13 ec c0 4d 79 4a 8d f4 86 Data Ascii: "'N 'S@'2Qa$:6J4sC'iP)bta!PNQ}p$3+6nf$Xq%few`XYGFgtJhDk69PDT0k;!)FPI&u-~\|A^[6C0BW-\.<!GzLyzv+C5kh;aLCJZxMyJ
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 62 8c dc 34 1d aa 20 1e d4 b8 e3 a1 c0 6c ca 3b 7c d2 af ae cc 21 a0 7b 97 b8 cf c2 a1 89 62 6d 2e 20 18 15 7c d2 d0 fe 94 7d bd 80 df 73 24 d3 2f 21 12 cf 4a 2f f1 48 93 0e ef 45 2d cd 6e 03 d2 5d a3 25 8e 24 ec 63 2a 9d 1b 0f 70 23 2c 60 9f 77 01 02 27 35 ba 3d 76 61 e7 55 9a d6 09 44 a5 b3 bf ff 87 af a3 b5 01 49 95 c7 9b ab f4 82 12 71 c0 9c 22 4a 95 16 12 b3 67 28 32 7b 3f 16 71 5f 0d 0f f8 16 cd 58 47 cd dd e8 78 6d 30 bb 4a a5 98 13 82 2a b7 55 35 3d c3 c8 ca 38 1a 59 a5 27 b9 95 13 8d ce da 7a 10 2e 7c f9 cf f3 ec f8 de b2 12 2a f2 6d cc df 58 10 6c da f0 39 4b 72 3c ad 23 da 63 9c 2e 36 6b bc f8 b2 39 b3 23 85 19 88 ef d1 f7 c9 e3 6a ff 0f 81 51 ed 09 1c 1e 98 95 fb be 56 9e d3 97 c6 67 a8 be 24 e7 56 ed 8b 18 04 91 8e 93 a4 3b df 02 5e c9 05 91 Data Ascii: b4 l;\|!{bm. \|}s$/!J/HE-n]%$cp#,`w'5=vaUDIq"Jg(2{?q_XGxm0JU5=8Y'z.\|*mXl9Kr<#c.6k9#jQVg$V;^
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 7f 9a 4b ff 62 8b cc 4d 7f a8 92 f3 36 09 0c 77 4c 99 58 e7 01 1e bc 9f 57 4d 99 08 41 14 55 41 3e 3c 90 0e ae c8 e2 3a 9a 51 45 76 5e 17 27 76 dd c5 c0 72 a2 5b e3 21 dc a7 88 ea 63 a3 5a c9 5b 24 0d e7 99 0e 1b db cb 9b e1 53 27 1e 35 16 6f 93 60 57 66 f4 fd 7e ea 02 fc 01 ed 83 ed d7 14 c4 a0 48 26 96 96 43 16 76 b4 86 dc fb 79 24 b1 7c 1e 6a f8 36 7b f8 a8 7f 1f d8 2f b9 a2 86 ec 21 05 03 cd d1 52 bf 72 c2 7a 4d 85 69 e3 03 11 3c 02 2c 2e 67 c2 99 38 81 55 8a 86 cf 88 c9 fc 0f 43 06 46 8e c6 fe e8 8f ce d7 d6 e4 92 0d de b9 dc cc d8 d8 20 ba 3f fe 97 4a 2f 08 0f 04 b6 38 41 97 82 d0 9e de b1 ec 75 08 9a 66 04 5b 15 89 4a 6b 76 e5 c0 16 8a cc 56 ec 93 8b c7 bb 92 d1 29 6c de 79 65 5c a6 ad aa 35 e9 56 be 43 04 7d 1c 9c 06 31 b9 3f d1 29 c9 d0 78 fc 05 Data Ascii: KbM6wLXWMAUA><:QEv^'vr[!cZ[$S'5o`Wf~H&Cvy$\|j6{/!RrzMi<,.g8UCF ?J/8Auf[JkvV)lye\5VC}1?)x
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 95 dc 61 5b 48 c4 88 e3 b2 c1 3b 10 2c 1d 42 ee 52 3e fe ae 3a c5 e2 c6 ad 34 5c 6a 31 16 55 3b c9 e1 19 5a 7f 71 02 a8 d4 43 56 f9 cf 3f ad 07 bb f2 7c 3c bf 03 38 4a a7 bb 5c d6 a7 ad f0 a1 b3 09 af f9 31 a5 c9 d4 75 90 d2 ec 56 53 8e 6e 5f ee 88 98 ba 22 a3 c1 7a a3 fa 33 1f db c7 e3 87 a4 3c fd 9f c3 86 a6 81 75 a4 8a bc cc 90 01 14 a9 ed 01 62 e2 8e 7d 26 d8 5b 47 85 2e 0a 73 7b 93 88 58 66 96 d4 86 56 98 88 66 77 51 35 6f fe 03 4f 96 18 5b 0f 3b 52 81 88 02 d3 c8 c1 35 99 e0 75 26 e9 81 75 e3 81 dc 6a 54 03 ab f0 9d ec 4f c7 6e 4e c6 a6 07 fb 5d 32 82 14 85 e2 9c a6 ff 51 4e db ef 0d f7 40 60 b1 71 45 40 59 30 cb 53 f9 3f 57 f0 9a ab 45 5a 33 57 55 1d d5 f1 3b e9 4e ba 9b d6 f4 bf 19 91 fe 66 bf 47 85 2f 72 5c a3 b7 46 6c bf 70 15 7a c8 c9 c1 4d 25 Data Ascii: a[H;,BR>:4\j1U;ZqCV?\|<8J\1uVSn_"z3<ub}&[G.s{XfVfwQ5oO[;R5u&ujTOnN]2QN@`qE@Y0S?WEZ3WU;NfG/r\FlpzM%
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 15 5c 33 96 d0 39 6a 4a 8d d2 c6 e0 9a 27 1a 8b da 6d e0 a9 ee 2b fd e3 cd 60 6d 6a 58 85 63 68 41 e3 8e 29 e2 4f 42 53 e8 38 4f b0 dd 03 bf ae 3f ed bc 68 87 d7 55 23 e1 ce b8 5c 90 8f 43 53 01 a5 32 35 31 2b fe 82 a9 9e ad 2d 65 25 45 f3 7e 04 b4 84 dd 6b f4 a3 dd 26 58 1e 51 07 93 b4 7b 2f 6f 65 99 67 a8 c5 2e f2 54 f7 45 8c 98 c8 84 d7 26 0d 17 21 bd fa dc 01 36 f8 a4 c3 e4 dc 9b f5 68 08 b7 f6 23 7f 00 97 07 4b 49 59 2a d7 82 5a 23 c2 9a 22 5d bd a3 6e 3d 4a 69 ed a7 ec 0d c7 5a b4 93 b3 44 a6 55 9f fc bb 8d 6b c0 42 92 79 f3 7c 12 04 3e 46 fe ac ea 39 9c 72 ce 87 78 e1 09 c7 04 91 ae 5c 84 85 19 2d ad 53 8f 67 34 77 c0 a1 ff 9b fb 3e 97 95 7f 06 02 43 85 40 72 32 e7 72 bb 9b 48 5a 88 fb 75 07 2b 1c bb b7 69 ac 34 7e e3 5d 0c 58 61 a1 00 c4 d3 ef 69 Data Ascii: \39jJ'm+`mjXchA)OBS8O?hU#\CS251+-e%E~k&XQ{/oeg.TE&!6h#KIY*Z#"]n=JiZDUkBy\|>F9rx\-Sg4w>C@r2rHZu+i4~]Xai
2024-04-18 17:16:54 UTC	1379	IN	Data Raw: 88 35 59 2d 13 59 bd 0d 64 ec 28 d0 38 2c c9 41 a8 01 64 34 73 bd b1 0f 93 61 19 68 07 97 bb 7b 9f bc ed 28 32 ef c9 e3 98 3f 61 e9 db 2d 8b 59 ab 5e d8 50 7f 63 72 4e c2 c3 0d c7 ca 27 d8 9b b8 09 91 f5 b8 12 c6 31 28 b9 eb ed 02 9f b5 3a 0d be 7c 72 34 22 e4 69 1c 8a ca 89 fe 63 52 b0 e1 35 bf bf 36 fa 5c 54 a2 bd 8e fb 3e 0b a6 3c 19 f2 a3 cc 10 12 66 c1 36 e6 8e 07 00 e7 5e 4c 63 de 35 41 7c aa d4 ee 10 a1 88 ef b5 e3 2b a2 ef 6a 65 ec c3 54 4f 9a 4a 4e 79 ed 39 f7 1d 39 32 97 af 99 0a 80 15 06 b6 05 75 e6 f0 47 3c 18 53 d4 d7 f8 7f d6 f7 9e 13 9d 2f 56 13 68 b4 9c 10 06 85 8a 2b 8b 1c 2b 03 54 62 31 a5 09 25 ed db f9 25 0d 6b 02 4c 48 4c a0 fc 82 8c fc b4 1c 4c 5f 32 45 20 b8 01 6e b7 68 91 28 81 5c d9 a2 ce 16 3f 72 9c 34 7d 00 0d 8e a5 67 fc 82 07 Data Ascii: 5Y-Yd(8,Ad4sah{(2?a-Y^PcrN'1(:\|r4"icR56\T><f6^Lc5A\|+jeTOJNy992uG<S/Vh++Tb1%%kLHLL_2E nh(\?r4}g
2024-04-18 17:16:54 UTC	367	IN	Data Raw: a5 ba 29 e7 62 6e d0 f8 d2 21 7f e1 9e a2 a4 dd 0e 86 10 e7 6b 0e b5 33 9a fe 29 c3 58 04 df 36 38 2f 55 51 74 1a 93 1b 0e 2c c5 6f e3 a3 c1 e7 25 db 65 91 89 f4 23 84 29 d2 71 00 64 47 63 63 f3 58 89 33 d5 b0 8d 5c 22 24 5b 1d 04 fd 11 c8 e4 51 98 f8 dc d1 ba 7c 0a 2c 22 5f 7b b2 2b cb 7e 3c d4 8a c6 7a 05 a3 79 3b fe 07 fe 03 78 21 25 f8 9a 8e 1c ed 62 9b a4 71 03 92 15 a1 cb 4c e1 64 70 ff a6 33 a9 a6 27 43 3f ce 46 9a db e4 53 3c cc 46 0d 80 e4 9e 70 11 4b ba 8a 78 f0 d4 68 fc 4e 29 cb 99 b7 2a 08 bd dc ad ab fc dc 51 d0 d7 88 d9 ae 76 34 a2 18 96 50 26 3b 82 2a 2e 1e c8 5f ff c9 86 e5 ec ab d2 fb be dc 88 9d 90 92 aa b1 b5 92 07 95 ef fa b4 4b 98 b7 f2 64 86 4a a6 d3 b4 e9 18 52 2f 96 99 a7 a2 dd 46 5f 6b fc 1d 45 7a 0f 4b 4d cc fd 45 a9 26 5c 94 61 Data Ascii: )bn!k3)X68/UQt,o%e#)qdGccX3\"$[Q\|,"_{+~<zy;x!%bqLdp3'C?FS<FpKxhN)Qv4P&;._KdJR/F_kEzKME&\a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
550	192.168.2.4	50479	151.101.12.157	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	709	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-18 17:16:54 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:54 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-pdk-katl1840087-PDK X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
551	192.168.2.4	50478	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	864	OUT	GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=86b24b0d-32ad-416b-800d-4a13c3205592&ca=2024-04-18T17%3A16%3A53.382Z&tz=Europe%2FZurich&bis=5&referrer=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=true HTTP/1.1 Host: ws.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://risk.lexisnexis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: XtXMrFqdxlu8MR1SYEiZUg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
2024-04-18 17:16:54 UTC	259	IN	HTTP/1.1 400 Bad Request Content-Length: 12 Content-Type: text/plain; charset=utf-8 Date: Thu, 18 Apr 2024 17:16:54 GMT Sec-Websocket-Version: 13 Server: nginx Via: 1.1 spaces-router (7186aa94a765) X-Content-Type-Options: nosniff Connection: close
2024-04-18 17:16:54 UTC	12	IN	Data Raw: 42 61 64 20 52 65 71 75 65 73 74 0a Data Ascii: Bad Request

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
552	192.168.2.4	50480	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1443	OUT	GET /pagead/viewthroughconversion/940382430/?random=1713460613414&cv=11&fst=1713460613414&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:54 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:54 UTC	552	IN	Data Raw: 39 66 38 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9f8(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:54 UTC	752	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-
2024-04-18 17:16:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
553	192.168.2.4	50481	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1567	OUT	GET /td/rul/940382430?random=1713460613414&cv=11&fst=1713460613414&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:54 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:54 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:54 UTC	609	IN	Data Raw: 38 34 65 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 84e<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:54 UTC	1255	IN	Data Raw: 35 39 34 30 39 33 33 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 54 35 5a 42 79 77 21 32 73 5a 6b 6a 69 68 67 21 33 73 41 41 70 74 44 56 35 7a 34 37 4b 30 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 37 38 35 39 38 37 32 32 32 30 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 34 38 36 35 39 32 34 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a Data Ascii: 59409331","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sT5ZByw!2sZkjihg!3sAAptDV5z47K0"],"userBiddingSignals":[["7859872220"],null,1713460614865924],"executionMode":"group-by-origin","biddingWasmHelperUrl":
2024-04-18 17:16:54 UTC	269	IN	Data Raw: 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f Data Ascii: .leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></
2024-04-18 17:16:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
554	192.168.2.4	50482	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1443	OUT	GET /pagead/viewthroughconversion/978398205/?random=1713460613452&cv=11&fst=1713460613452&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9f9(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	753	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
555	192.168.2.4	50484	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1445	OUT	GET /pagead/viewthroughconversion/10896111711/?random=1713460613536&cv=11&fst=1713460613536&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9fb(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	755	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-a
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
556	192.168.2.4	50483	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1567	OUT	GET /td/rul/978398205?random=1713460613452&cv=11&fst=1713460613452&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
557	192.168.2.4	50485	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1569	OUT	GET /td/rul/10896111711?random=1713460613536&cv=11&fst=1713460613536&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
558	192.168.2.4	50487	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1567	OUT	GET /td/rul/938539671?random=1713460613557&cv=11&fst=1713460613557&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
559	192.168.2.4	50491	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1569	OUT	GET /td/rul/10827142419?random=1713460613570&cv=11&fst=1713460613570&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
560	192.168.2.4	50490	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1443	OUT	GET /pagead/viewthroughconversion/938539671/?random=1713460613557&cv=11&fst=1713460613557&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9f9(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	753	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
561	192.168.2.4	50488	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1445	OUT	GET /pagead/viewthroughconversion/10827142419/?random=1713460613570&cv=11&fst=1713460613570&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9fb(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	755	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-a
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
562	192.168.2.4	50489	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1567	OUT	GET /td/rul/527644678?random=1713460613584&cv=11&fst=1713460613584&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
563	192.168.2.4	50486	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:54 UTC	1443	OUT	GET /pagead/viewthroughconversion/527644678/?random=1713460613584&cv=11&fst=1713460613584&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9f9(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	753	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
564	192.168.2.4	50495	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	953	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
2024-04-18 17:16:55 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:55 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87664e2d1e241d72-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:55 UTC	736	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-04-18 17:16:55 UTC	1369	IN	Data Raw: 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e 77 69 6e 64 6f 77 5b 70 5d 2c 66 6e 3a 6e 75 6c 6c 7d 2c 77 69 6e 64 Data Ascii: ,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...window[p],fn:null},wind
2024-04-18 17:16:55 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 73 43 68 61 6e 67 65 64 3d 21 30 2c 77 69 6e 64 6f 77 5b 70 5d 2e 73 Data Ascii: ssion",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.hasChanged=!0,window[p].s
2024-04-18 17:16:55 UTC	1172	IN	Data Raw: 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 6e 64 Data Ascii: ++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystatechange=function(){"und
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
565	192.168.2.4	50496	104.18.32.137	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	682	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:55 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664e2d1fbab039-ATL
2024-04-18 17:16:55 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
566	192.168.2.4	50444	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1428	OUT	GET /pagead/1p-user-list/940382430/?random=1713460613414&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqTSkTxzqxajYEv3-Djv6iPRSrhxhLkvx6NAoVQXEGYf9_7ibF&random=360690157&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
567	192.168.2.4	50497	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	857	OUT	GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 17:16:55 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-Unw5s6EA_vTd5Fij6cgSrw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	364	IN	Data Raw: 31 64 31 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d1a<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-18 17:16:55 UTC	819	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 55 6e 77 35 73 36 45 41 5f 76 54 64 35 46 69 6a 36 63 67 53 72 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="Unw5s6EA_vTd5Fij6cgSrw" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
568	192.168.2.4	50448	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1429	OUT	GET /pagead/1p-user-list/978398205/?random=1713460613452&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqAOlCxXVhji7zdtymp7vsJovEsRKWwSGrhXr8iHhZVQhIZhTE&random=3878595316&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
569	192.168.2.4	50499	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1567	OUT	GET /td/rul/936886275?random=1713460613596&cv=11&fst=1713460613596&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	609	IN	Data Raw: 35 62 31 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 5b1<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:55 UTC	855	IN	Data Raw: 30 37 33 39 31 37 34 30 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 57 47 32 46 6c 67 21 32 73 5a 6b 6a 69 68 77 21 33 73 41 41 70 74 44 56 36 7a 73 38 79 65 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 35 34 32 33 31 34 30 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 Data Ascii: 07391740","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWG2Flg!2sZkjihw!3sAAptDV6zs8ye"],"userBiddingSignals":[null,null,1713460615423140],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://t
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
570	192.168.2.4	50498	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1443	OUT	GET /pagead/viewthroughconversion/936886275/?random=1713460613596&cv=11&fst=1713460613596&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9f9(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	753	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
571	192.168.2.4	50500	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1443	OUT	GET /pagead/viewthroughconversion/938545461/?random=1713460613609&cv=11&fst=1713460613609&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9f9(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	753	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
572	192.168.2.4	50501	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1444	OUT	GET /pagead/viewthroughconversion/1048135065/?random=1713460613621&cv=11&fst=1713460613621&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 66 61 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9fa(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	754	IN	Data Raw: 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e Data Ascii: fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
573	192.168.2.4	50449	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1431	OUT	GET /pagead/1p-user-list/10896111711/?random=1713460613536&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq1CPxbODEG9PVOw80_SkNmyrBPmbaB8Wbo8S28SuJgjGVb9SE&random=1041406435&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
574	192.168.2.4	50502	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1567	OUT	GET /td/rul/938545461?random=1713460613609&cv=11&fst=1713460613609&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	609	IN	Data Raw: 38 34 38 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 848<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 33 32 37 31 35 38 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 63 47 42 5a 6a 51 21 32 73 5a 6b 6a 69 68 77 21 33 73 41 41 70 74 44 56 36 31 37 79 39 4c 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 34 37 38 30 34 31 33 38 39 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 35 34 39 36 39 31 30 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 Data Ascii: 327158","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1scGBZjQ!2sZkjihw!3sAAptDV617y9L"],"userBiddingSignals":[["478041389"],null,1713460615496910],"executionMode":"group-by-origin","biddingWasmHelperUrl":"ht
2024-04-18 17:16:55 UTC	263	IN	Data Raw: 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c Data Ascii: AdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></body><
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
575	192.168.2.4	50503	104.244.42.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1132	OUT	GET /i/adsct?bci=3&eci=2&event_id=d9d435b1-9254-49c2-b565-ff407c4cce8e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9dd2d2c2-7eab-4e5e-a89c-33f03a57bf66&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c
2024-04-18 17:16:55 UTC	392	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:55 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 496e16e2142581d5 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: c822942779d9e3e48102bf20be9b4ff46cc50d4d3dfb7ef326961021ac6186fc connection: close
2024-04-18 17:16:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
576	192.168.2.4	50504	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1568	OUT	GET /td/rul/1048135065?random=1713460613621&cv=11&fst=1713460613621&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&hn=www.googleadservices.com&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
577	192.168.2.4	50505	104.244.42.131	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1153	OUT	GET /i/adsct?bci=3&eci=2&event_id=d9d435b1-9254-49c2-b565-ff407c4cce8e&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=9dd2d2c2-7eab-4e5e-a89c-33f03a57bf66&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="
2024-04-18 17:16:55 UTC	400	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:55 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 5c8c3e3f35274c04 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: 781e207d1f29784c382307a451ad4d630d6aff8965d8ef2ecc38a1add65f601c connection: close
2024-04-18 17:16:55 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
578	192.168.2.4	50508	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1827	OUT	GET /Areas/LNRS/img/tag_icon.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3 If-None-Match: "XGVGe9Opio0KJfRjUUuF1sk+35daHCSMSs+AWrBa35g"
2024-04-18 17:16:55 UTC	489	IN	HTTP/1.1 304 Not Modified Connection: close Date: Thu, 18 Apr 2024 17:16:55 GMT Via: 1.1 varnish ETag: "XGVGe9Opio0KJfRjUUuF1sk+35daHCSMSs+AWrBa35g" Age: 10 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-pdk-kpdk1780042-PDK X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1713460616.613483,VS0,VE1 Vary: Accept Strict-Transport-Security: max-age=31557600

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
579	192.168.2.4	50514	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1403	OUT	GET /pagead/viewthroughconversion/940382430/?random=1713460612487&cv=11&fst=1713460612487&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 61 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ac(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	676	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 69 6c Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wil
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
580	192.168.2.4	50515	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1527	OUT	GET /td/rul/940382430?random=1713460612487&cv=11&fst=1713460612487&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	609	IN	Data Raw: 38 34 65 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 84e<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 35 39 34 30 39 33 33 31 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 54 35 5a 42 79 77 21 32 73 5a 6b 6a 69 68 77 21 33 73 41 41 70 74 44 56 34 4c 33 75 42 63 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 37 38 35 39 38 37 32 32 32 30 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 35 36 35 35 33 36 37 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a Data Ascii: 59409331","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sT5ZByw!2sZkjihw!3sAAptDV4L3uBc"],"userBiddingSignals":[["7859872220"],null,1713460615655367],"executionMode":"group-by-origin","biddingWasmHelperUrl":
2024-04-18 17:16:55 UTC	269	IN	Data Raw: 2e 6c 65 61 76 65 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f Data Ascii: .leaveAdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
581	192.168.2.4	50516	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1403	OUT	GET /pagead/viewthroughconversion/978398205/?random=1713460614308&cv=11&fst=1713460614308&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	552	IN	Data Raw: 39 61 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ac(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:55 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:55 UTC	676	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 69 6c Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wil
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
582	192.168.2.4	50506	151.101.2.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	2041	OUT	GET /-/media/images/homepage%20carousel/from-complex-to-possible.png HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3
2024-04-18 17:16:55 UTC	878	IN	HTTP/1.1 200 OK Connection: close Content-Length: 444664 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="from-complex-to-possible.png" Content-Type: image/webp Etag: "vOB062MxU0Iib7prGcNeRq/FBQWA3YFMXtrdTXwQ48Q" Fastly-Io-Info: ifsz=716107 idim=1230x420 ifmt=png ofsz=444664 odim=1230x420 ofmt=webp Fastly-Io-Served-By: vpop-kiad7010246 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 560649 Date: Thu, 18 Apr 2024 17:16:55 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210115-DFW, cache-pdk-kfty2130025-PDK X-Cache: HIT, MISS X-Cache-Hits: 5, 0 X-Timer: S1713460616.681284,VS0,VE23 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 52 49 46 46 f0 c8 06 00 57 45 42 50 56 50 38 4c e3 c8 06 00 2f cd c4 68 00 8d 40 6c 24 49 68 a4 19 18 fa 96 e5 f2 0f f8 ce d8 ff 11 44 f4 7f 02 b4 6d 49 6a ad 2d 49 2d 49 8d ae 0b 78 6c 0e 80 24 4d 90 f4 a8 25 d6 e1 76 ec 38 b9 87 f8 a6 b5 ce 05 09 2a b1 5d 59 48 a0 25 4d e9 3c 4f c6 80 d8 8b 1d 40 db 85 e6 03 ad cf 0b 4f aa 02 39 02 47 8b ad cf 73 b9 6d b3 49 60 99 1b ad 8b de a4 c8 9d 82 24 47 a0 a5 9e f0 d8 3e 39 c7 9d ec e2 60 b4 f6 d4 e7 af 1a 42 2a 40 55 a8 3e 66 26 d8 f6 38 c7 c8 27 6f d8 e8 73 cf 6f 0c 90 6d 01 76 98 90 0d 30 c0 1e 7a ca 06 d0 57 92 d4 6f 0a 18 9b aa 2c 8d 66 96 f6 10 5e 10 65 1b ff 4a 92 58 1a 48 c1 72 df cb cc 33 49 16 8c 47 6c 3b de f8 0f fa c5 3a aa 80 db 3d d3 73 c6 36 dd d8 be ed 6e 2d b6 f9 07 40 82 83 c1 9e 99 9a 49 7b 8b Data Ascii: RIFFWEBPVP8L/h@l$IhDmIj-I-Ixl$M%v8]YH%M<O@O9GsmI`$G>9`B@U>f&8'osomv0zWo,f^eJXHr3IGl;:=s6n-@I{
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 99 2f 93 24 7a e2 9a 48 2e b8 e6 f1 0d 80 f6 cb ef 56 79 3a ff ab 9d fa 20 04 be c1 01 0e cd 72 72 07 2f 00 2c 60 75 00 74 80 f5 a8 a3 8e 96 1c 95 24 49 a4 92 84 1c df e8 d9 f8 76 54 b6 b7 3d 6d b5 95 34 1e 69 c9 91 84 0e 00 d4 0f 3a 00 4a 4f ab 5f fd c3 e1 71 d3 20 8e af c7 4d 2b 00 75 bb 6e 1a ab 3e 40 51 42 d3 60 d8 e8 74 8a 75 24 6d b5 e4 ad 92 24 c9 b7 84 1c 21 78 f4 d5 96 23 63 7b 20 47 4b 8e c6 f1 d2 5e da 4b b2 7d f8 01 80 e0 27 c5 27 53 75 96 47 e9 43 cf 83 40 ee df 3c c0 50 2b 57 eb fd 5a f4 a1 e9 a2 cc 6e a3 83 b2 d1 a1 76 d6 64 25 19 db a3 27 23 49 92 24 91 24 58 6d b5 23 c9 c3 23 c7 46 68 40 5a 92 8d fe 0f ff cc c4 d7 fe eb 83 e7 43 28 02 5a b9 c1 b8 9c 1f 37 7d 55 0b 40 81 ce c2 01 76 80 6e b8 41 92 24 c9 a3 27 47 46 92 95 24 59 49 40 4f 92 Data Ascii: /$zH.Vy: rr/,`ut$IvT=m4i:JO_q M+un>@QB`tu$m$!x#c{ GK^K}''SuGC@<P+WZnvd%'#I$$Xm##Fh@ZC(Z7}U@vnA$'GF$YI@O
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: d4 1b e3 57 f3 fe 19 cf 77 7b a8 f1 ed b4 16 7c c1 d7 5e 4f cf bb 45 e1 e0 e6 e7 c4 07 62 80 42 44 4b 7d f9 da db 33 41 b3 0e b9 d7 53 36 c6 ed 02 ab ee fb ae 47 77 d5 91 c0 dc a9 ae ba af 9b 4a cd 74 00 82 d0 b5 7c e7 4a 77 b0 4b 7a ae 21 6f 27 90 75 b7 ea 3f 01 80 57 91 63 f5 f6 04 12 86 63 78 7b 44 b8 a8 02 20 9b 6f 1f c7 85 cd 14 8a 64 95 91 8c bd f6 5e 09 43 76 1c bf 67 47 34 61 04 fc 07 ef 57 1e c7 17 6f bc 8a dc 0f 2b c7 09 91 9e be 33 2d 22 10 66 23 bb f8 c7 7b 93 2f 70 ca 7d 79 f6 42 38 1c 99 3b 23 04 30 39 12 fb d9 3b 52 78 81 75 cd 9f 84 ef 74 2f 82 09 32 b1 39 8e 0f 71 55 3d 0c fd ba fc e6 0b 87 da 9d 23 13 b0 83 19 02 14 89 a8 c1 cf dd 63 dd 4b b8 ba 19 6b 45 1a 40 2a f9 d4 a2 59 00 51 16 e3 9e 3d e1 e7 ee 7b b9 8e e3 42 b8 29 69 0f 1b 29 24 Data Ascii: Ww{\|^OEbBDK}3AS6GwJt\|JwKz!o'u?Wccx{D od^CvgG4aWo+3-"f#{/p}yB8;#09;Rxut/29qU=#cKkE@*YQ={B)i)$
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: b2 18 48 92 20 b7 51 64 2f 2d 7b c7 9e 7a b7 5f 37 15 13 e0 3b 92 6d d5 b6 6d db f2 28 73 af bd 0f f3 d1 5f bf cd cc 23 a7 8f d6 fa 3c 47 04 86 6d db 86 a1 b2 ff 4f 5e 4d 39 6c 24 41 92 03 66 af ff de ea 75 9a 8a 98 80 7f fd e7 cf 2a 86 29 03 13 9c 96 94 2d 6d bb 7d ac 38 f6 e7 fc c3 ec 5a fd cb f9 fb 92 33 11 2b 60 06 09 95 00 ec d6 da ad 99 19 bc 04 15 23 aa 6d b1 2d 06 a8 ac 3b 03 62 c3 33 13 58 2a 75 59 30 78 0b 4c 59 8c 59 33 80 c0 42 a9 29 af 73 c3 e3 fe b7 ff 50 9b dd ee ff f9 8f b1 5c 54 2c 31 10 4b 2c b1 18 48 5b 77 46 49 b3 b3 16 3b cd 80 a4 d1 da 89 55 17 60 0a 26 a3 6d a8 94 6a 01 30 0c 6c 8b 84 bb 26 00 64 58 6d 97 4d d2 26 ff fc d7 17 03 fd e7 eb c7 89 98 00 68 a3 dc cb 3b 40 4c 08 1a 07 b6 ae 49 10 cb a6 2c c1 86 98 35 f3 d8 05 81 a9 4e 00 Data Ascii: H Qd/-{z_7;mm(s_#<GmO^M9l$Afu)-m}8Z3+`#m-;b3XuY0xLYY3B)sP\T,1K,H[wFI;U`&mj0l&dXmM&h;@LI,5N
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 98 42 19 40 d6 30 33 4c 4c 9d 44 a3 9a 09 4d 6d 8b f1 ee 91 f7 dc 63 27 ff fa ff 7b b2 aa 79 4e 5b 99 95 c4 58 c1 02 75 05 50 6c 84 ec 51 9e a9 25 40 78 cc 96 a5 6d 94 21 52 b5 8a 8a 67 da b3 b2 a0 32 85 06 d0 ec 3a 6f 58 4d 06 40 64 53 b6 02 7e 49 db c4 be 8e 76 77 72 cb b8 d6 a0 3b 6f 0a 46 8c cc 6c 63 26 84 24 12 31 80 b2 98 f2 36 41 0c 31 81 d6 0a 24 b0 a5 17 18 81 0d 9b ec 49 92 a0 0b a6 cb e3 f8 59 34 50 56 e4 97 eb 19 68 2f 7d 7b 8b 06 f7 2e 1e 30 92 0d 14 d8 ea 76 bc 2d e2 bd 6a 41 92 50 36 da 81 37 d9 06 41 2a d1 b5 18 d9 ac 6d 8f d0 95 20 63 06 e0 b2 80 0d a6 28 35 02 cc 09 00 6c dd c8 c3 2f 31 44 ff f1 fa 58 46 09 e5 e1 0c 29 0b cd 32 03 5b 12 24 66 84 a2 0c 04 8b a0 b5 02 ed 62 29 f7 d8 dc 31 e2 a2 5c 46 c8 b8 92 bb 7b fe a8 35 76 c4 ab c4 d3 Data Ascii: B@03LLDMmc'{yN[XuPlQ%@xm!Rg2:oXM@dS~Ivwr;oFlc&$16A1$IY4PVh/}{.0v-jAP67A*m c(5l/1DXF)2[$fb)1\F{5v
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: ff fa 7b f6 7b b9 17 ee 1f ff 36 8b c0 22 c0 04 a6 20 01 27 6b 5e 02 de 72 ed 4a d9 56 b6 09 95 a4 de 21 08 6f e4 05 07 a5 52 db ed 5c 51 32 6d f3 af bf bd b6 b6 33 ba 51 ce dc c4 2e 8f 00 09 c4 36 25 5a 05 41 28 a5 94 5f 2b 28 93 33 b7 bb 49 b1 3a 8b 94 6d da ae 58 56 4b 99 dd 6d e3 d4 68 0d 75 d9 75 82 76 d9 bd ec ee 89 b1 e6 cb 17 c7 8e ed 4b c6 09 1b 5d a9 74 95 c3 d4 59 24 bc a5 b2 b6 86 d3 85 5b 28 4b e0 c2 50 ba 32 77 ef d3 b5 59 ab d9 a7 bb 7f 6e b5 f3 74 b6 6e 77 ea 97 f6 f9 fa c9 dd 68 db ae f0 de ed 68 01 f6 44 bb ba a8 0c 65 5c 82 b2 73 2d 59 c4 08 e3 a0 e3 4a 0a f9 80 41 54 32 08 f3 02 bf 85 44 9a 46 0a ae a0 42 a9 9c 15 01 42 15 a8 31 4a 25 81 8b ad 25 26 02 74 9c 84 10 5c 18 a0 63 91 41 1f 41 c3 2e ac c4 52 88 01 27 4a e1 d1 11 6e d6 90 0b Data Ascii: {{6" 'k^rJV!oR\Q2m3Q.6%ZA(_+(3I:mXVKmhuuvK]tY$[(KP2wYntnwhhDe\s-YJAT2DFBB1J%%&t\cAA.R'Jn
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 97 59 bd 35 4d ee f2 09 28 14 d0 52 78 e5 a8 70 b3 9a 57 68 d4 9d bc c0 8b 7a 73 14 68 02 01 6a 10 8c 25 11 0f b1 35 80 3a ce e5 0d 21 c2 ba 23 c4 b8 19 00 42 38 3e 9d 88 45 d9 0b 36 11 a1 cd ee 68 2b bb dd 9b e7 42 75 ac e5 58 67 2d 5e d1 b2 76 1b d6 db de eb 22 57 ca 85 8e 7b a1 ab 76 bd ba df de 5e 6a 9d 37 bc e9 ad 94 85 c6 86 a9 bb b1 29 a5 44 e8 7a ab 27 db d7 b3 ae 6d d6 44 6c 07 eb 32 fd 98 e4 f2 46 63 b5 c5 02 60 df d6 7a 37 f6 76 f8 7c 8b c4 c3 dd 4a 1b b2 ec 76 37 67 1b 38 9a 90 95 52 75 6d 61 85 05 97 4d b9 d9 ed 99 d3 cb 4e af b7 c3 4a 8b 6c 6e 76 38 1c 32 f4 d2 49 ea f8 a6 3b 4f 1a a4 b3 57 d1 98 76 6d af bf d8 31 68 6c c0 9c 90 ee 6c 32 87 90 75 16 34 3b c0 dd 3e 88 d2 dc 51 fd 73 d9 0b 04 06 67 1c b3 eb d5 63 61 44 e3 3a 21 3e 12 58 27 4e Data Ascii: Y5M(RxpWhzshj%5:!#B8>E6h+BuXg-^v"W{v^j7)Dz'mDl2Fc`z7v\|Jv7g8RumaMNJlnv82I;OWvm1hll2u4;>QsgcaD:!>X'N
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 0d a6 eb b4 58 78 75 dd e6 76 db ba 25 b5 cf 77 07 c2 f7 63 15 4b 1d 53 19 0e 6c 2a db d4 06 aa 85 4c 31 00 c4 86 6a 2a 65 11 23 c0 96 c0 76 15 93 8c ec 55 18 21 49 cc 68 a3 8c d7 4c a6 79 98 ea e5 9c 59 17 ca 12 e7 7d 7b f7 80 db fd cb ff dc 00 76 01 d4 5e 1d 9b c4 66 d6 80 01 88 51 65 86 ca 30 c5 b8 2e 64 63 cd 00 31 ca 19 8c a4 2b 62 0a cf ca c0 d5 28 30 2b 2b 5b 0d 43 03 c8 56 8d fa 62 ab 1e e7 db 7b 4b 5e cf d4 e0 96 d5 a6 cb 9b ec a9 a9 60 14 23 06 8b 81 30 d8 00 ae c8 72 c3 b0 cb 86 65 00 46 12 4c ac 6c 13 50 5a 93 24 78 c3 0a 65 72 a8 29 0b 14 ec ac d6 1f aa d5 72 7e 5f 3b 66 4f b6 ba 95 18 69 9b 35 80 c1 12 18 94 a1 ca 72 6b a7 11 80 2d 6b 86 0d 03 15 a6 0b 46 66 36 0c 57 ea 82 b1 0d 56 2c c7 74 9e b5 50 86 c3 23 65 26 c0 65 01 b5 3f 1d 17 9a bf Data Ascii: Xxuv%wcKSlL1je#vU!IhLyY}{v^fQe0.dc1+b(0++[CVb{K^`#0reFLlPZ$xer)r~_;fOi5rk-kFf6WV,tP#e&e?
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 90 77 fe 70 7e fe ee 43 99 db de ed 62 16 0a 68 e9 97 bb db b5 3b 8b 10 e8 45 6d dc 5a f1 3c 55 bf aa ed e8 b3 ef b1 e9 3e 2c 05 5c 5e 7e 00 01 22 4c 50 9a 02 34 0f df 77 f9 e7 e6 3f 5d bd 7e ea b8 d7 39 f5 b8 20 27 18 3c 08 ec 84 7b b8 85 e9 e5 30 f8 d2 f5 62 e3 8a 36 e0 41 53 4e 41 17 76 8e 19 1a 0b e8 40 6c e0 5a 3a 0d ee 91 c6 39 d6 ef df a2 8d 5a 75 de 1b bc dd 7f 19 58 0d 29 4c 20 24 80 30 dd db f1 18 6a ed 1c b6 68 7a a6 dd dc ed 9e e5 ee e5 fa 9d 9d 6e df dd 4b f5 c2 b1 55 59 9d 17 43 75 e8 d6 ed 64 5d 2e d2 6e 11 9d 4a a4 c8 33 27 bb b4 b3 d7 ac b0 05 d7 31 44 ab d2 85 5d a4 6c 5a 64 75 40 dd 76 f3 7b c6 77 e6 3e c7 be fc 69 2c e3 eb 8c 98 50 2c 2d db e8 db 1e 2c 9f 9d de ef 9b e9 28 b7 cb 9c 97 66 73 1b b6 08 86 47 3c 2c 61 14 40 58 a8 6b 3a d0 Data Ascii: wp~Cbh;EmZ<U>,\^~"LP4w?]~9 '<{0b6ASNAv@lZ:9ZuX)L $0jhznKUYCud].nJ3'1D]lZdu@v{w>i,P,-,(fsG<,a@Xk:
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: a0 4a b3 92 a8 01 6b a8 75 48 32 0e dc 0f bf d4 b9 d6 f2 dd 17 88 51 74 db 30 04 af a1 71 2c b3 46 43 c4 d5 41 91 01 53 11 0f cb ba d3 56 61 bd 2c 9f 63 0d 5a 3f 33 2d a2 32 e0 9a 2a 01 57 8f ad 33 25 b2 c6 21 93 1d d5 a0 7f c8 ce 31 2e 49 33 34 0b 08 30 69 64 29 a3 86 0c a2 4a 27 18 57 5d 09 94 e2 41 22 6c 43 92 44 a8 2b a3 1f cc b9 93 ea 66 7f f5 fc de fc c3 f5 2f ee 97 9c 95 c5 bd 01 85 2b 69 03 d8 15 83 21 e3 71 6b 09 e1 0c c6 38 34 64 14 09 6a f1 f1 40 67 1b 71 cb e7 b4 c4 59 92 6a 44 db 1d e6 5a ab 46 7a e3 cc 61 2e 74 bb cd 60 62 ea 46 aa dc 6f b5 9b ad 01 b4 62 e7 a3 be ee 62 79 d5 b1 7f 5b 02 06 b6 ee 6a aa 55 9c e3 45 9b fc 98 8c 57 b1 c7 bb 6e 5a c6 dc c8 0e 63 17 d3 d8 84 27 2b 50 20 bb af 62 37 b5 ad 39 72 6c 58 02 0c 23 87 ab 96 c8 d9 98 de Data Ascii: JkuH2Qt0q,FCASVa,cZ?3-2*W3%!1.I340id)J'W]A"lCD+f/+i!qk84dj@gqYjDZFza.t`bFobby[jUEWnZc'+P b79rlX#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
583	192.168.2.4	50517	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1527	OUT	GET /td/rul/978398205?random=1713460614308&cv=11&fst=1713460614308&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
584	192.168.2.4	50446	35.174.21.144	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	673	OUT	GET /external/hasHashes?clkgypv=jstag&cb=null HTTP/1.1 Host: hemsync.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	425	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:55 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close access-control-allow-origin: https://risk.lexisnexis.com vary: origin access-control-allow-credentials: true access-control-expose-headers: content-length access-control-expose-headers: last-modified access-control-expose-headers: expires access-control-expose-headers: content-type
2024-04-18 17:16:55 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
585	192.168.2.4	50507	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1864	OUT	GET /-/media/images/government/le%20staffing%20wp/siu%20thumbnail%20jpg.jpg?h=170&iar=0&w=270&hash=6694AFD94C49271307817C41FFC6FE39 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3
2024-04-18 17:16:55 UTC	868	IN	HTTP/1.1 200 OK Connection: close Content-Length: 15780 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="SIU thumbnail jpg.jpg" Content-Type: image/jpeg Etag: "sFa30L8iftH2aG39HErh0o/2lhh/de4nQkZkjo3I08w" Fastly-Io-Info: ifsz=77809 idim=270x170 ifmt=jpeg ofsz=15780 odim=270x170 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010216 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 543854 Date: Thu, 18 Apr 2024 17:16:55 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120062-DFW, cache-pdk-kfty2130076-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460616.610433,VS0,VE88 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: e9 05 d6 36 f5 44 6e 1d b6 4e bd 97 96 b9 12 45 e9 73 e1 bb d3 3c b2 5b f2 e3 a6 4d 5d c7 62 f1 97 f6 26 b9 d0 64 84 e7 4f 3a 26 55 9d 73 4e 76 63 4e 8a d7 43 af 8a c0 d7 7a f5 bf 07 67 85 9b dd 15 a9 fc d3 c2 7d ac 2a 4f a2 d4 be e3 11 6a 4e 04 11 7b cb dd 72 a9 9c 05 43 ed 27 73 9d 96 af 71 8f 04 3b 72 9e 90 d2 b1 b5 9a a8 f9 8a 9d 72 3d 8d 74 5a b2 4a e1 4a 4b 14 4c 35 f7 bb f8 af b7 f2 ef e5 55 37 19 2e 7e cd 6f a6 78 f7 b9 c2 fc 9d 25 8f d3 cd 23 2a 46 77 9d e6 76 4e 70 2d 11 81 9a e6 45 03 57 17 a7 95 be 5a 3b 97 d7 e3 95 50 1c f0 db 2a c9 ac cd cd e2 95 da 89 02 ae 78 6e 58 9a 3c 16 88 54 7d a9 d8 d9 f9 e5 ee 7a 31 55 45 0c ba ad fd 27 c7 ee 9c 7f ff c4 00 2d 10 00 02 02 02 01 03 02 05 04 02 03 00 00 00 00 00 01 02 00 03 04 11 12 05 13 21 10 14 20 Data Ascii: 6DnNEs<[M]b&dO:&UsNvcNCzg}OjN{rC'sq;rr=tZJJKL5U7.~ox%#FwvNp-EWZ;P*xnX<T}z1UE'-!
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 4c 55 dd 0a 3b 72 66 49 8b 96 d5 a3 27 4f c8 64 e9 0d a1 d3 33 8b 2f 49 bc c3 89 d3 e9 77 cb b7 b4 a9 f2 f1 6a 97 87 16 3b 33 92 d3 19 d1 9f 09 6a e7 8d 8b 8f b5 bc df 79 7a ab 53 c6 52 9d d0 01 9a f0 d3 70 c3 f5 ff 00 69 5a 17 9c 7c 05 f0 57 91 ad 45 aa 8a e1 f2 29 ca a4 12 0c 6a 1a b8 ca 1a 56 35 2c c8 a9 96 ba d6 d4 28 d5 8f 2e 6d 6e 53 c5 69 8a 75 37 65 91 ab f9 74 de da 8a 45 78 8f 91 7f b8 ce cd bf 69 9d 91 65 38 55 9a b1 f6 35 f2 cf 9a 08 7e 95 a3 5a 75 a6 d4 56 d4 5e 2c 8d db d2 a8 63 6e ac 98 cd ce cc 95 e7 47 64 d8 39 2b 37 2b 9e 54 6d e5 da e9 cb 45 76 22 83 65 96 3a f2 70 bf 24 c7 7a e9 3c d5 11 96 e3 2b 4b 92 2a f0 c5 c7 b5 6d c7 ca b1 32 73 6d 4d ae 2d d4 57 7a b0 75 04 6f d1 8a eb c1 58 7e 68 c3 53 c4 e4 48 e1 54 a9 35 6d 54 2f 0a b1 c5 6d Data Ascii: LU;rfI'Od3/Iwj;3jyzSRpiZ\|WE)jV5,(.mnSiu7etExie8U5~ZuV^,cnGd9+7+TmEv"e:p$z<+K*m2smM-WzuoX~hSHT5mT/m
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 0c 95 19 95 e2 27 1e a8 34 5c 0c 2b 43 74 1e c8 2a 30 8e e9 9e f8 08 09 d7 ba 98 0a 4e a9 bd d4 99 57 19 4f 37 60 a8 01 35 a1 c4 05 ff c4 00 43 10 00 01 03 02 03 04 06 06 08 04 04 07 00 00 00 00 01 00 02 11 03 21 12 31 41 22 51 61 71 04 10 13 32 42 81 20 52 91 a1 b1 c1 05 23 30 33 62 72 d1 e1 14 40 44 f0 15 53 82 92 24 34 43 63 74 a2 f1 ff da 00 08 01 01 00 06 3f 02 59 ac 96 5f 6c fc 54 2a 86 07 0d b8 cf db a2 ed 2a 55 a8 dc 77 c2 d6 82 04 e8 8d 6e 8f 5a a1 7b 3d 76 c7 0d 17 69 58 bd 84 61 0d 86 98 80 10 78 d7 e2 b3 5d e5 9f a1 7c f7 f5 59 a5 77 0f f2 6e bc 58 aa 94 db 77 54 8b 62 27 2b d8 2a 40 b2 49 6c 61 f3 55 70 86 35 c6 9c 06 81 0a b3 03 5f 2f a6 c6 dd fb 23 0c 64 3c 93 31 66 04 7b 0c 7d 86 2a a6 e3 fb 8e 68 e0 00 7e 6d a5 da e0 05 9c a1 60 7e cd 4d Data Ascii: '4\+Ct0NWO7`5C!1A"Qaq2B R#03br@DS$4Cct?Y_lTUwnZ{=viXax]\|YwnXwTb'+@IlaUp5_/#d<1f{}*h~m`~M
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 06 08 9e 67 55 92 a7 1d 1d a1 ed b1 78 f1 73 4d aa 2a fd 66 77 de a9 e0 20 82 1c 76 c4 e6 78 2f 25 dd e1 28 4d c2 90 16 c9 b4 68 10 fa c3 25 44 f9 a1 1b 4a 30 22 e7 f8 64 a2 1a aa 12 06 20 46 68 b8 35 a6 c4 9b 26 51 ed 35 9a 6e 22 cd 71 d1 38 4c 9d 6d 1e 81 e0 16 48 27 05 f7 64 df 4b a7 51 c6 1b d2 2a 34 3a b1 1e 16 8f 08 47 0c 1b 83 87 35 54 e1 b9 7b b3 55 05 48 02 2d 88 66 b0 b1 e6 1d e1 d1 0a 74 ae d7 5d e3 28 8d eb 1e 1b 46 7a 28 e8 f4 9f 56 33 b7 c5 53 fe 21 f4 5a c9 b8 ed 1b 23 d8 98 e1 48 54 11 7e cc 87 8f 72 73 5a 7b a7 0f b2 c8 e9 cb ab 9a 89 b1 de a4 de c8 61 11 e6 bf 75 b4 d9 f3 46 01 16 de aa 58 e4 26 78 ac 33 9e 5a 23 99 9b 11 c9 30 dc df 4c ac b0 34 5a 44 a6 d3 e9 0f c2 e1 6a 75 fe 4e 50 f1 84 e8 7c 27 92 f9 75 3d 30 6f ba 02 0c e4 b0 e0 ed Data Ascii: gUxsMfw vx/%(Mh%DJ0"d Fh5&Q5n"q8LmH'dKQ4:G5T{UH-ft](Fz(V3S!Z#HT~rsZ{auFX&x3Z#0L4ZDjuNP\|'u=0o
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: c6 c9 1c e5 37 51 bf da 61 45 9c 70 a6 2d 7f 18 b5 00 e0 fd ce a0 4b e8 bb bf 30 3b 0f 57 ee 56 81 d6 25 92 af 46 5a 19 2e 9e 69 99 11 ac a0 70 ef 5c 73 05 0d a2 ca eb db 97 e2 39 39 a0 6d d6 f3 a6 90 9a 62 2a b2 8c 56 a2 24 e1 61 5c 1a 81 3c a1 00 82 41 25 25 7a c3 ad 0e b4 ee 42 0e aa 56 2c 08 e9 ff 00 26 49 92 da c8 ca 47 ae 12 a9 ed cc 4d dd ab 42 13 4a fe 4b eb 07 17 83 aa 01 d9 ec e1 f3 08 59 ee 5c 45 a5 51 0c 45 7d 4f a0 95 96 45 3c 55 eb d4 b4 9a 9a 21 b6 54 e9 1d aa 0c 73 8f 31 53 3d 82 bd a2 71 01 86 0a e8 57 30 41 ff 00 07 74 a2 e3 3c b3 10 54 1d d0 08 08 0e f0 f3 81 80 87 c6 6c c4 ea e0 87 c4 e2 2c 19 49 b4 3c 2a 09 7e c7 49 d6 64 84 04 08 9c 88 1b 36 fa 76 87 a1 d6 78 f9 e6 31 2c be 4f 55 c3 f7 8b 11 4d 32 c2 15 99 42 c8 02 a3 66 75 33 63 62 Data Ascii: 7QaEp-K0;WV%FZ.ip\s99mbV$a\<A%%zBV,&IGMBJKY\EQE}OE<U!Ts1S=qW0At<Tl,I<~Id6vx1,OUM2Bfu3cb
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 63 fc 79 89 cd 6e 17 56 1b b9 85 76 06 80 eb 5d d7 78 55 14 1c ce 8f 5a 0d c2 06 25 f8 0d d9 f6 60 43 ca e5 2a 66 45 d3 87 6f ac be 01 b7 c0 2f 07 4a e2 77 02 41 3b 2b 95 10 da cb 7e e8 5b 4b f7 31 98 f5 1f 29 53 84 96 c5 7f 13 00 ed cd fd 08 3d c5 a4 e2 0a 2d 43 aa 53 f5 48 7d 25 83 6d b8 d6 6a 59 04 ae 4e 98 03 e6 50 f3 78 b9 56 a0 f4 7a c1 19 48 51 aa d9 06 6d b7 43 06 ad e6 21 15 b3 9a 9f 32 f1 94 10 e7 70 53 99 79 ee 4a 37 5b de 15 5d 73 1a d4 1c a4 7c 40 e1 8b 97 a9 82 ea 26 32 bc dd 66 58 45 cd aa 39 3b 12 84 17 5b f7 d0 cc 78 37 5b 68 9a 26 62 12 eb a7 66 e0 b4 37 c7 80 a5 31 63 e5 05 39 30 17 53 22 87 bf 52 96 3b 4a 0e 6b 29 78 10 bd 83 5a 6c ae 29 c8 34 d4 b1 e7 72 f0 79 6b 02 5d bb d0 7c 62 06 9c 96 a2 a0 23 6d 39 94 d5 16 0e 35 1f c1 61 ea f3 Data Ascii: cynVv]xUZ%`C*fEo/JwA;+~[K1)S=-CSH}%mjYNPxVzHQmC!2pSyJ7[]s\|@&2fXE9;[x7[h&bf71c90S"R;Jk)xZl)4ryk]\|b#m95a
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 3d 48 9b 41 fe 8e 7f a8 ba 48 f8 96 22 15 e5 a9 19 37 c1 b4 0b bf ff c4 00 24 11 01 00 02 02 02 02 02 02 03 01 00 00 00 00 00 00 01 00 11 21 31 41 51 61 71 81 91 10 a1 b1 c1 d1 e1 ff da 00 08 01 03 01 01 3f 10 78 57 dc a3 da 0f 20 fa 97 e2 09 d4 41 fc 31 66 a3 8c 1a 42 b7 46 2f 98 60 26 e0 29 5d c2 c9 b6 1f 33 31 3f 66 29 ba 8a ac fe 90 77 bc 57 3d ff 00 d8 16 38 79 0f d5 30 06 95 78 c5 4a 95 65 25 65 5c 44 40 da c5 7b 8e f5 48 da e0 35 b1 96 c6 dd 22 38 cf 9e 23 44 09 61 a1 88 ad aa 27 38 82 4b b9 e9 11 6c f9 24 03 99 4d b8 f3 9d 4c e0 55 d8 b2 e5 14 a7 a6 da fa 98 38 94 f1 29 d7 ee 63 c1 f7 3a 82 2d d4 3a 88 39 8f b6 6d fe 93 5a a0 f0 45 65 2e 30 1a 01 2d 72 81 6c ba 9d 6c 64 bc 67 e5 9b 0b ca bf 0c 54 f6 4c 1f 86 aa 64 2d f1 00 6f ee 5b 0b 65 06 7c c5 Data Ascii: =HAH"7$!1AQaq?xW A1fBF/`&)]31?f)wW=8y0xJe%e\D@{H5"8#Da'8Kl$MLU8)c:-:9mZEe.0-rlldgTLd-o[e\|
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 5b de a0 b6 80 72 f8 82 cc 08 04 1a 23 a1 4a e3 88 00 96 ff 00 d9 c4 35 df 0c 11 42 35 b8 40 b8 bd fb a2 a2 10 2c 25 c7 0e 6c 84 34 ce 5f 6c 0a b8 c5 66 22 ec c1 f6 89 78 2e 58 41 a5 e2 15 41 c1 2a 04 db 92 25 32 5c ac b1 67 75 29 2d e9 e6 23 34 39 f9 0b b9 61 c6 7b 8b d3 7c cf ff c4 00 26 10 01 01 00 02 02 02 02 02 02 03 01 01 00 00 00 00 01 11 00 21 31 41 51 61 71 81 91 a1 10 b1 c1 d1 f0 e1 f1 ff da 00 08 01 01 00 01 3f 10 72 8c fb ce 26 be 77 80 e4 fe b3 fd 25 c5 4a 0c e3 ff 00 2c 7c 8e 46 03 91 f0 f1 94 f2 ae 1e 30 61 c1 8a b0 c7 8c 51 d2 2a 79 f0 7d e0 13 b9 d3 55 65 0a 90 73 3d e5 e0 56 b1 b2 50 a0 6e 13 0f c2 66 f1 de 58 2c 66 39 f0 49 1b 17 88 b0 14 f1 92 0a 6c bd 06 d4 74 0c 75 b9 d6 28 e9 63 4a 1a 17 af 3f eb 15 c9 72 3c cf bc 07 03 eb 37 6d 75 Data Ascii: [r#J5B5@,%l4_lf"x.XAA%2\gu)-#49a{\|&!1AQaq?r&w%J,\|F0aQy}Ues=VPnfX,f9Iltu(cJ?r<7mu
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 6d cd 3b f6 31 b9 1a 8a bc 9f c9 00 3e af e7 ff 00 31 59 77 fd e0 3f d0 f3 9b 27 5c bc 7d 60 09 91 67 c3 c7 af bc 1e 8f 6d e5 c2 28 01 df 84 25 bf 1f c7 28 d2 7d 97 45 33 0c 73 fb c8 0f 00 6d 12 01 55 44 e0 64 d5 14 da a1 82 22 44 70 ed 0e ff 00 9c 6e 10 6c ff 00 5e f0 6e 05 1f 1d 2f c7 63 25 22 15 14 e0 73 84 98 cc 2c a1 62 9b 24 af 8b 92 33 e8 f3 f6 e0 93 05 7f 38 98 d3 1c 1f f4 35 ff 00 8c 48 dd ac 7f 9c 46 f5 0f 90 3f c9 4c 91 91 84 70 4d 9f 59 46 9d 3d 8b 69 cb de 30 35 da 23 7b f5 9a e4 4d 38 28 28 eb 7c 4c 25 a0 13 d0 ba 07 af e0 6a 07 6c ca 22 70 ba c3 c6 0c 1e 9c 6f bd 70 d6 6e 10 a4 78 38 01 ce 63 ef 72 a6 0f c4 71 00 a1 a3 54 e7 57 53 2d d0 a6 b2 ec ee ca df 0c c0 09 fb 21 8f 00 1c a2 4d 09 c3 c3 ef 2d c1 c9 77 60 7e 10 ce 73 ce 2f 06 72 e1 88 Data Ascii: m;1>1Yw?'\}`gm(%(}E3smUDd"Dpnl^n/c%"s,b$385HF?LpMYF=i05#{M8((\|L%jl"popnx8crqTWS-!M-w`~s/r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
586	192.168.2.4	50510	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1811	OUT	GET /-/media/images/government/ln%20baby%20j%20case%20study%20mantle%20jpg.jpg HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3
2024-04-18 17:16:55 UTC	886	IN	HTTP/1.1 200 OK Connection: close Content-Length: 54031 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="LN Baby J Case Study mantle jpg.jpg" Content-Type: image/jpeg Etag: "PkiM6fwBtZ7+JmYCLBDNfHdumJnInVhy+0ffhO+Tzr0" Fastly-Io-Info: ifsz=241538 idim=1000x445 ifmt=jpeg ofsz=54031 odim=1000x445 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010229 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 526890 Date: Thu, 18 Apr 2024 17:16:55 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120060-DFW, cache-pdk-kfty2130090-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460616.620782,VS0,VE118 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 04 a2 89 3b 5b 23 58 5e 9e e6 15 9d 66 9f 5c f2 9d 56 b6 a7 7e 43 ea 4a f8 69 bb f2 d2 4a 03 d5 50 7d 70 5d 02 0f d4 60 e1 8d b1 59 f9 f9 8d 6d 82 04 3c 9d ac a2 77 7e 7b d6 21 44 5f f2 bb d0 f7 55 ce c2 84 1f 54 c5 84 3d d8 4a 56 7d 0e 75 4c 89 fa 70 23 1d 18 06 07 d7 e0 d8 92 b6 3e 1d 33 a5 92 4c 8c 18 ca 3f a3 f2 45 9e 23 a6 71 9d 21 3a 90 a7 19 49 27 52 99 8a 9b 94 c4 99 e8 04 34 a3 ab 9b 13 68 b4 74 d1 96 d5 4b c9 73 55 12 f9 0c e8 5c c5 98 4b d2 f2 da 7e 76 e6 f3 b9 d0 e4 6f 7d 0e 27 19 49 7b ca 79 2c c6 92 78 74 9e 22 d3 4d 52 29 e2 dd 61 f3 3d 5f 3f 77 c1 61 f5 59 1e 3e d9 8b 4a bc e8 19 59 5d cc ac 85 b9 8f 26 96 31 1a ed a9 61 55 95 eb 75 34 92 bd f4 df 44 94 31 18 cd ef 17 c9 a0 46 8e b3 90 67 4d b5 db 9f 2f bb d0 1f e8 c6 31 fa 96 ee 67 da 6a Data Ascii: ;[#X^f\V~CJiJP}p]`Ym<w~{!D_UT=JV}uLp#>3L?E#q!:I'R4htKsU\K~vo}'I{y,xt"MR)a=_?waY>JY]&1aUu4D1FgM/1gj
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: ba 4c 24 90 92 45 3c df 4b ce 77 9c 85 57 d5 f7 39 c2 16 31 5b 4e 32 b2 48 4f 16 8b 64 3a 09 71 90 4a 19 4a 5b 86 82 e2 33 4a 43 0e d2 94 e2 38 62 0d 06 20 d2 98 c2 28 21 a8 51 72 a5 2d ca 84 10 e3 c8 26 f0 6d 34 88 ca be 36 0c c1 23 9d ea f5 78 fd 3f 2f 4e b2 fe 56 3e 6d 76 93 e2 f4 3b e3 a7 7c bb 3b 73 39 67 2b 4b cd a0 46 e9 e6 f7 b0 2e f9 fc 1e 97 0f 7c f2 ea 2a bd e0 76 be 54 33 68 db 66 3d 9b 17 a0 06 1d 3c e8 44 45 58 a2 d4 45 12 c5 94 61 de 28 b1 46 62 75 29 20 a4 ab a5 85 6d ee e1 2a d4 48 53 7d 79 a2 0e 6d 39 a1 56 5d 79 a2 c0 a8 c3 fa 2f 05 e8 3e 2b d1 4a 32 f0 54 93 0e ec 87 78 b9 25 11 6a d0 81 8e e5 d5 dd 6d 07 65 e3 d1 a7 73 77 c7 48 e0 1b ce c9 33 89 24 24 91 5f 3d d1 e6 6d c0 d3 d7 57 f4 79 f2 ab ab 7a e4 db ae 73 90 5d 84 23 8e a3 a5 c3 Data Ascii: L$E<KwW91[N2HOd:qJJ[3JC8b (!Qr-&m46#x?/NV>mv;\|;s9g+KF.\|vT3hf=<DEXEa(Fbu) mHS}ym9V]y/>+J2Tx%jmeswH3$$_=mWyzs]#
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 49 0e f1 72 56 55 3a 21 e9 5b cc a3 16 2e 98 f2 2f 54 22 ae 7f 73 12 6b 87 e4 bb ce 7b e8 cc 49 ed 59 da e1 4f 71 eb 0e cd 92 d3 3f 4a e1 65 72 63 bd 59 d9 3d 6e 37 5e 3a 3a ab 43 bf 3c 9c 5e b0 09 be 13 4d b2 3c bd 2c c3 d2 3b 3c 83 38 e9 63 c4 57 57 c2 9b db d3 1e 5b d2 f9 bb d3 94 7d 85 9e f8 eb 61 2e 32 d8 46 44 b5 a7 18 eb 61 26 39 1a 50 cf 3a aa 1e bf 3f 8e da 67 46 75 6d f9 8d 6e f1 9c dd f7 9f 4b 3e 76 ed e3 66 81 08 d4 52 ae 39 b2 ad 95 b1 92 af 5a 54 d0 0b d2 de 95 c1 6c df a8 64 2f 6f 4f 0e 93 89 86 5f 3f 75 9a 7d 5e dc e5 cd e4 f7 cd e9 f1 f8 58 5e bf 9b e7 be 5c b6 17 1b d5 b5 eb d7 8a 11 0a 51 d8 b4 82 22 52 d0 f6 b8 3d 45 d5 9d 17 d5 73 9d 2f cc 84 a4 bc 51 24 e2 49 0c 90 96 57 8d 1b 3b cb 76 a8 b3 9e 8c 59 ed 96 93 e6 dd 06 3d 56 48 f1 6c Data Ascii: IrVU:![./T"sk{IYOq?JercY=n7^::C<^M<,;<8cWW[}a.2FDa&9P:?gFumnK>vfR9ZTld/oO_?u}^X^\Q"R=Es/Q$IW;vY=VHl
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 9a a6 fe 7f 1c f3 45 89 5c 71 d5 6d e7 ea f7 ed 40 9a 4d 6f 19 99 e8 d8 78 b8 7d 4f 1a f9 bd ff 00 37 0d ee 99 e0 f2 fd 1f 1b 9c e2 d6 de 57 39 4b a9 a3 16 34 99 e9 25 99 ab ad d6 a5 16 ec 20 19 9b 04 e0 d9 1d 1a c2 2e c2 ab 2a f3 28 1e 8c 45 e5 40 ed d5 79 bd 7e 94 09 c5 ea 97 97 5b 66 70 55 2f a4 4b cf 0a 9d ba 45 96 a3 60 81 89 ed c0 d6 ae 8b 34 6d c5 b2 52 f3 6d 1b 28 bc 4a cd cf 7b 06 cd eb fa 2e 04 ef 9d 7b 26 e2 6b e1 7b 95 c1 c2 bb e6 f3 ea f5 3d 11 bc ea 1a 7a 2d 7e 7b 5d 7a 1c 3c ed ab d0 eb e0 61 5d f4 38 69 e9 d9 d7 c9 ad 4e a6 ae 66 15 d2 43 0e 66 b4 73 6d d8 b6 12 e2 d2 2a bb 63 2d ac 8f 46 63 2a eb dc 22 87 b6 aa 95 88 00 8c 07 f3 fb b6 b9 ee a2 8e 9e 1e 1c 1f 47 1f 73 82 b7 ab 1e b0 ad d7 8d 03 75 d1 48 5b 5b 04 4c 39 d1 71 1a 45 81 9a 49 Data Ascii: E\qm@Mox}O7W9K4% .(E@y~[fpU/KE`4mRm(J{.{&k{=z-~{]z<a]8iNfCfsmc-Fc*"GsuH[[L9qEI
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 5c e6 35 d6 63 01 d7 26 5f 43 cf de a6 d7 5e 8e 95 39 81 ea 0a 1e 8c e5 e5 b4 3a 3a a4 a4 9a e3 a4 87 69 40 f0 1e 59 a8 7b 5e 39 fe 77 b7 c9 c5 c6 0f 4c 1e 7a 85 91 a2 6c c9 85 74 d5 c9 e5 35 07 74 34 66 c4 5e 71 1e 55 44 b9 c3 ae cd 15 9c 4d cb e8 66 ce e2 57 5a 5e b3 12 51 3a 57 6d 84 ee 55 93 ac 0c 55 bb 59 fa 05 15 64 35 cc 1e 84 d2 43 24 08 1d 45 d4 2a cb a8 24 52 32 a5 45 f5 b1 56 d0 f6 52 21 8f aa 40 f1 fa 98 e6 f2 bd 1c b2 e2 ec aa 4f ce a3 7d f4 eb 39 b4 74 74 c7 33 57 4b 44 bc fa d3 a3 34 25 75 42 b2 a5 04 48 55 34 42 a5 2f a2 ca 43 fa f8 68 97 8f a1 59 d9 92 c8 e1 bd 83 32 b5 35 2c ac cd 8d e3 0f 4e 79 55 a9 8b a5 a7 58 ad a5 69 9f a4 19 0a c1 19 02 15 ca da 44 29 25 4a 56 4b 9a 45 f6 20 b9 fa 56 2e 70 85 ac b1 29 e9 45 96 99 95 ce 97 2c e2 e6 Data Ascii: \5c&_C^9::i@Y{^9wLzlt5t4f^qUDMfWZ^Q:WmUUYd5C$E*$R2EVR!@O}9tt3WKD4%uBHU4B/ChY25,NyUXiD)%JVKE V.p)E,
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 89 0a 90 a0 28 89 09 7a 72 64 d8 d8 d8 d8 c9 91 b1 9a 9a 8e 24 91 22 65 96 0e c6 6e 46 62 b0 ec 37 36 f1 11 21 2f 4e 4c 99 f0 c7 e8 c1 83 06 0c 18 30 60 c1 81 44 84 08 c4 48 d4 d4 d4 d4 94 11 28 12 88 d1 a9 a1 d2 3e 3a 1f 1c e8 91 d5 33 49 23 dc c9 93 22 65 73 2a 99 54 88 48 4f f0 b1 b2 65 a4 97 be a3 89 28 92 46 a2 88 a2 28 9a 9a 1d 63 ac 95 43 ad 9a b3 0c 51 62 ac 8d 65 75 95 d6 42 04 50 97 ab 23 99 b9 b9 b1 93 63 63 63 26 7c 7b 19 19 22 64 cb 58 d9 91 48 56 1b 9b 9b 11 64 59 11 78 c9 93 26 4d 8c 99 33 e7 3e 9c 7a 90 88 08 5e 96 48 91 81 44 50 34 34 3a ce a3 a4 e9 1d 03 e3 21 f1 47 c6 3a 24 46 33 45 6e 48 a6 65 72 20 c5 f8 18 c9 96 18 19 82 51 1c 07 59 d6 28 0a b1 40 d0 d0 70 1c 07 59 d6 2a c5 58 ab 14 08 40 ad 11 17 9c 9b 1b 8e 63 b0 73 36 36 32 64 c9 Data Ascii: (zrd$"enFb76!/NL0`DH(>:3I#"esTHOe(F(cCQbeuBP#ccc&\|{"dXHVdYx&M3>z^HDP44:!G:$F3EnHer QY(@pYX@cs662d
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 85 66 85 91 2c 37 68 56 8a d4 2b 51 da 76 a3 b4 ee 3b 8a a3 65 85 3c 42 15 a8 ab 1a 26 b2 34 34 34 34 35 f8 72 64 c9 93 26 4c 99 32 64 c9 c3 fe 5c 7f 8f c2 e2 46 3e b9 fc 4f e6 91 7a d7 9c f9 5e 24 58 72 0e 4f cf e7 cf 8c 99 32 6c 64 c9 93 26 4c 99 fc 91 5b 3a 68 48 f6 89 dc 77 32 76 92 fb 89 47 c6 4c 9b 33 73 76 6c 50 b7 9f 16 a8 a8 6c 91 b9 7c f0 a5 cb 59 8f 21 33 b2 2c ca 63 43 43 ff 00 4f 85 f3 c7 f8 ff 00 46 c9 1f 2e a5 f8 17 97 e5 78 65 87 20 e4 fc ff 00 a1 0a a7 31 7e 9d 73 5f b6 de 7e d7 79 3e 15 f0 3a e6 75 4c d2 7e 32 64 c9 93 3f 8a 88 90 f8 b1 e4 79 ce 59 26 c8 92 44 be 7d 54 3d 65 c7 e4 7d b2 99 d8 58 f7 8d f4 b5 35 54 d0 b7 44 65 22 bf b8 7c 46 cb 38 f3 88 d7 a1 b1 bf cb c2 f9 e3 fc 7f a1 29 e0 9c b2 42 39 20 b1 f8 17 a5 0b c3 2c 39 07 2b f3 Data Ascii: f,7hV+Qv;e<B&44445rd&L2d\F>Oz^$XrO2ld&L[:hHw2vGL3svlPl\|Y!3,cCCOF.xe 1~s_~y>:uL~2d?yY&D}T=e}X5TDe"\|F8)B9 ,9+
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 33 0c c3 36 92 23 73 23 71 3b 46 f6 75 56 25 8f 54 8b 3f 13 f1 9f 0c a6 99 48 ab 88 85 54 62 36 90 e6 58 94 95 6b 56 ac 82 3e ae b8 8f f5 08 0b f5 08 11 e5 d7 21 59 5b 1a 8b 25 1c 1c ca 7d be 0a ed 14 f2 7b 12 88 e2 38 0a 72 ad d3 c8 53 52 ad 31 ac 79 c1 8f 0c 4c 9c 14 94 e9 1c 1a 33 38 8b 90 d1 1e 42 15 90 66 b0 63 e3 a6 4b 8a 4a 89 a1 c5 af 39 d4 72 73 71 8e 05 e8 c9 ee cf 6f 14 dd 3a 1f ee 51 69 f3 68 6a 7c 9a 8a b8 d2 e6 d9 29 c6 11 52 33 91 e7 f0 e0 c7 9a c8 fa ec 7e dc 89 32 ba db 21 53 23 48 aa 47 52 3a 91 d4 89 52 4a 9c 0f 31 14 a4 dd 50 c9 18 e3 d7 22 cf 46 3c e0 c1 81 a3 53 51 44 85 79 71 b2 15 29 7e a3 08 8f f5 28 9f 5c 98 b9 09 8a d2 d9 bc 59 7d a8 7c a9 8a f9 c9 d5 c7 ba 46 21 12 5c 89 56 53 fa 8b 2b e4 ab 55 91 de 33 aa 50 7a 09 b4 76 9b e7 Data Ascii: 36#s#q;FuV%T?HTb6XkV>!Y[%}{8rSR1yL38BfcKJ9rsqo:Qihj\|)R3~2!S#HGR:RJ1P"F<SQDyq)~(\Y}\|F!\VS+U3Pzv
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 8a e9 a3 ea 6d 3e b2 f3 f7 0e 52 3f 72 e5 9f b9 f2 8f dd 39 42 fd 57 94 7e ed ca 3f 76 e4 9f ba f2 18 ff 00 52 e4 b1 f2 ef 67 d4 5a 76 c8 dc 72 23 b3 21 c7 ba c3 8b c0 d0 94 7d ad 7e f6 0c a4 ae 62 97 85 e1 97 71 d4 cb 68 94 3c 42 c7 12 ae 51 f6 d8 ad ab 05 91 1a f4 45 e0 84 fd 59 13 33 e3 22 93 23 74 ce c8 33 10 67 36 de 88 57 cc 72 4a f8 4a 3f 6c 8d 09 f1 6a 91 fb 7d 5a cb f4 e6 4b 8b 74 4c 08 c8 d9 b1 d8 39 0c 46 a4 e3 e2 16 60 fa 9c 1f 56 7d 59 f5 67 d5 b1 f2 d9 f5 6c fa a9 1f 53 33 be 67 74 ce e9 9d b3 3b 26 76 48 cc d9 f7 9f 79 ac 8d 64 69 21 54 ce 96 75 33 a8 eb 15 47 50 ab c1 1f 0d 9b 9b fa 39 b2 f7 e3 f2 16 15 89 99 48 dc 70 aa 44 b8 bc 69 1f b7 d0 cf db 6b 3f 6c 47 ed 6c fd ae 47 ed 76 1f b6 5c 7e d9 c8 3f 6b e4 9f b5 f2 8f da f9 42 fd 2b 92 2f Data Ascii: m>R?r9BW~?vRgZvr#!}~bqh<BQEY3"#t3g6WrJJ?lj}ZKtL9F`V}YglS3gt;&vHydi!Tu3GP9HpDik?lGlGv\~?kB+/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
587	192.168.2.4	50509	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1810	OUT	GET /GetEloquaFieldIds/%7B4989C3A4-A690-4599-8CA9-464B0C7A1180%7D?formId=2035 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3
2024-04-18 17:16:55 UTC	670	IN	HTTP/1.1 200 OK Connection: close Content-Length: 117480 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:55 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210100-DFW, cache-pdk-kfty2130063-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460616.628755,VS0,VE187 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 22 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 5c 22 2c 5c 22 63 75 72 72 65 6e 74 53 74 61 74 75 73 5c 22 3a 5c 22 44 72 61 66 74 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 32 30 33 35 5c 22 2c 5c 22 63 72 65 61 74 65 64 41 74 5c 22 3a 5c 22 31 34 38 36 33 39 32 36 32 35 5c 22 2c 5c 22 63 72 65 61 74 65 64 42 79 5c 22 3a 5c 22 31 38 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 66 6f 6c 64 65 72 49 64 5c 22 3a 5c 22 38 32 31 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 53 69 74 65 63 6f 72 65 2d 4c 65 61 64 43 61 70 74 75 72 65 4d 61 73 74 65 72 5c 22 2c 5c 22 70 65 72 6d 69 73 73 69 6f 6e 73 5c 22 3a 5b 5c 22 52 65 74 72 69 65 76 65 5c 22 5d 2c 5c 22 75 70 64 61 74 65 64 41 74 5c 22 3a 5c 22 31 37 30 37 37 37 33 30 30 30 Data Ascii: "{\"type\":\"Form\",\"currentStatus\":\"Draft\",\"id\":\"2035\",\"createdAt\":\"1486392625\",\"createdBy\":\"18\",\"depth\":\"complete\",\"folderId\":\"821\",\"name\":\"Sitecore-LeadCaptureMaster\",\"permissions\":[\"Retrieve\"],\"updatedAt\":\"1707773000
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 73 69 67 6e 20 7b 5c 5c 74 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 5c 5c 74 7a 2d 69 6e 64 65 78 3a 32 3b 5c 5c 74 74 6f 70 3a 30 3b 5c 5c 74 6c 65 66 74 3a 30 3b 5c 5c 74 72 69 67 68 74 3a 30 3b 5c 5c 74 62 6f 74 74 6f 6d 3a 30 3b 5c 5c 74 6d 61 72 67 69 6e 3a 30 3b 5c 5c 74 70 61 64 64 69 6e 67 3a 30 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 6e 6f 2d 66 69 65 6c 64 73 2d 70 72 6f 6d 70 74 20 7b 5c 5c 74 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 5c 5c 74 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 5c 74 68 65 69 67 68 74 3a 20 31 35 30 70 78 3b 5c 5c 74 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 30 70 78 3b 5c 5c 74 63 6c 65 61 72 3a 20 62 6f 74 68 3b 7d 5c 5c 2f 2a 20 53 45 43 54 49 4f 4e 20 42 52 45 41 4b 53 20 2a 5c 5c 2f 2e 65 6c 71 2d 66 6f 72 6d 20 Data Ascii: sign {\\tposition:absolute;\\tz-index:2;\\ttop:0;\\tleft:0;\\tright:0;\\tbottom:0;\\tmargin:0;\\tpadding:0;}.elq-form .no-fields-prompt {\\tfloat: left;\\twidth: 100%;\\theight: 150px;\\tpadding-top: 50px;\\tclear: both;}\\/* SECTION BREAKS *\\/.elq-form
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 7b 5c 5c 74 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 5c 5c 74 66 6c 6f 61 74 3a 6c 65 66 74 3b 5c 5c 74 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 30 70 78 3b 5c 5c 74 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 70 78 3b 5c 5c 74 74 65 78 74 2d 69 6e 64 65 6e 74 3a 2d 32 32 70 78 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 2d 6f 70 74 69 6f 6e 20 2e 69 6e 70 75 74 20 7b 5c 5c 74 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 5c 5c 74 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 37 70 78 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 2d 6f 70 74 69 6f 6e 20 2e 69 6e 6e 65 72 20 7b 5c 5c 74 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 7d 5c 5c 2f 2a 20 43 48 45 43 4b 42 4f 58 20 2a 5c 5c 2f 2e 65 6c 71 Data Ascii: {\\tdisplay:block;\\tfloat:left;\\tpadding-right:10px;\\tpadding-left:22px;\\ttext-indent:-22px;}.elq-form .radio-option .input {\\tvertical-align:middle;\\tmargin-right:7px;}.elq-form .radio-option .inner {\\tvertical-align:middle;}\\/* CHECKBOX *\\/.elq
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 61 72 67 69 6e 3a 30 20 30 20 30 20 33 33 25 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 69 6e 73 74 72 75 63 74 69 6f 6e 73 2d 6f 74 68 65 72 20 7b 20 20 20 6d 61 72 67 69 6e 3a 30 3b 7d 5c 5c 2f 2a 20 50 4f 53 49 54 49 4f 4e 49 4e 47 20 2a 5c 5c 2f 2e 65 6c 71 2d 66 6f 72 6d 20 2e 6c 61 62 65 6c 2d 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 20 7b 5c 5c 74 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 25 3b 20 20 20 20 70 61 64 64 69 6e 67 3a 31 70 78 20 30 70 74 20 33 70 78 3b 20 20 20 20 66 6c 6f 61 74 3a 6c 65 66 74 3b 20 20 20 20 77 69 64 74 68 3a 33 31 25 3b 20 20 20 20 6d 61 72 67 69 6e 3a 30 70 74 20 31 35 70 78 20 30 70 74 20 30 70 74 3b 20 20 20 20 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f Data Ascii: argin:0 0 0 33%;}.elq-form .instructions-other { margin:0;}\\/* POSITIONING *\\/.elq-form .label-position.left {\\tdisplay:block; line-height:150%; padding:1px 0pt 3px; float:left; width:31%; margin:0pt 15px 0pt 0pt; word-wrap:break-wo
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 20 20 77 69 64 74 68 3a 37 31 25 3b 7d 2e 65 6c 71 2d 66 6f 72 6d 20 2e 67 72 69 64 2d 73 74 79 6c 65 2e 5f 31 30 30 20 7b 20 20 20 20 20 20 77 69 64 74 68 3a 39 36 25 3b 20 20 7d 2e 65 6c 71 2d 66 6f 72 6d 20 20 23 65 6c 71 2d 46 6f 72 6d 4c 61 73 74 52 6f 77 20 7b 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 20 20 20 6c 65 66 74 3a 20 2d 38 30 25 3b 20 20 20 20 74 6f 70 3a 20 2d 38 30 25 3b 20 20 7d 5c 75 30 30 33 63 5c 5c 2f 73 74 79 6c 65 5c 75 30 30 33 65 5c 22 2c 5c 22 64 65 66 61 75 6c 74 4b 65 79 46 69 65 6c 64 4d 61 70 70 69 6e 67 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 46 69 65 6c 64 55 70 64 61 74 65 4d 61 70 70 69 6e 67 5c 22 2c 5c 22 73 6f 75 72 63 65 46 6f 72 6d 46 69 65 6c 64 49 64 5c 22 3a 5c Data Ascii: width:71%;}.elq-form .grid-style._100 { width:96%; }.elq-form #elq-FormLastRow { position: absolute; left: -80%; top: -80%; }\u003c\\/style\u003e\",\"defaultKeyFieldMapping\":{\"type\":\"FormFieldUpdateMapping\",\"sourceFormFieldId\":\
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 73 74 79 6c 65 5c 22 3a 5c 22 7b 5c 5c 5c 22 66 69 65 6c 64 53 69 7a 65 5c 5c 5c 22 3a 5c 5c 5c 22 6c 61 72 67 65 5c 5c 5c 22 2c 5c 5c 5c 22 6c 61 62 65 6c 50 6f 73 69 74 69 6f 6e 5c 5c 5c 22 3a 5c 5c 5c 22 74 6f 70 5c 5c 5c 22 7d 5c 22 2c 5c 22 63 72 65 61 74 65 64 46 72 6f 6d 43 6f 6e 74 61 63 74 46 69 65 6c 64 49 64 5c 22 3a 5c 22 31 30 30 30 30 33 5c 22 2c 5c 22 64 61 74 61 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 64 69 73 70 6c 61 79 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 66 69 65 6c 64 4d 65 72 67 65 49 64 5c 22 3a 5c 22 33 5c 22 2c 5c 22 68 74 6d 6c 4e 61 6d 65 5c 22 3a 5c 22 6c 61 73 74 4e 61 6d 65 5c 22 2c 5c 22 75 73 65 47 6c 6f 62 61 6c 53 75 62 73 63 72 69 70 74 69 6f 6e 53 74 61 74 75 73 5c 22 3a 5c 22 46 61 6c 73 Data Ascii: style\":\"{\\\"fieldSize\\\":\\\"large\\\",\\\"labelPosition\\\":\\\"top\\\"}\",\"createdFromContactFieldId\":\"100003\",\"dataType\":\"text\",\"displayType\":\"text\",\"fieldMergeId\":\"3\",\"htmlName\":\"lastName\",\"useGlobalSubscriptionStatus\":\"Fals
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 6f 72 6d 20 46 69 65 6c 64 20 56 61 6c 69 64 61 74 69 6f 6e 20 52 75 6c 65 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 49 73 45 6d 61 69 6c 41 64 64 72 65 73 73 43 6f 6e 64 69 74 69 6f 6e 5c 22 7d 2c 5c 22 69 73 45 6e 61 62 6c 65 64 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 3a 5c 22 41 20 76 61 6c 69 64 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 20 69 73 20 72 65 71 75 69 72 65 64 5c 22 7d 2c 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 69 65 6c 64 56 61 6c 69 64 61 74 69 6f 6e 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 36 36 31 33 34 35 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 46 6f 72 6d 20 46 69 65 6c 64 20 Data Ascii: orm Field Validation Rule\",\"condition\":{\"type\":\"IsEmailAddressCondition\"},\"isEnabled\":\"true\",\"message\":\"A valid email address is required\"},{\"type\":\"FieldValidation\",\"id\":\"661345\",\"depth\":\"complete\",\"description\":\"Form Field
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 65 5c 22 3a 5c 22 54 68 69 73 20 66 69 65 6c 64 20 69 73 20 72 65 71 75 69 72 65 64 5c 22 7d 5d 7d 2c 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 46 69 65 6c 64 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 30 35 30 30 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 5a 69 70 20 6f 72 20 50 6f 73 74 61 6c 20 43 6f 64 65 5c 22 2c 5c 22 73 74 79 6c 65 5c 22 3a 5c 22 7b 5c 5c 5c 22 66 69 65 6c 64 53 69 7a 65 5c 5c 5c 22 3a 5c 5c 5c 22 6c 61 72 67 65 5c 5c 5c 22 2c 5c 5c 5c 22 6c 61 62 65 6c 50 6f 73 69 74 69 6f 6e 5c 5c 5c 22 3a 5c 5c 5c 22 74 6f 70 5c 5c 5c 22 7d 5c 22 2c 5c 22 63 72 65 61 74 65 64 46 72 6f 6d 43 6f 6e 74 61 63 74 46 69 65 6c 64 49 64 5c 22 3a 5c 22 31 30 30 30 31 31 5c 22 2c 5c 22 64 61 74 61 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 64 Data Ascii: e\":\"This field is required\"}]},{\"type\":\"FormField\",\"id\":\"40500\",\"name\":\"Zip or Postal Code\",\"style\":\"{\\\"fieldSize\\\":\\\"large\\\",\\\"labelPosition\\\":\\\"top\\\"}\",\"createdFromContactFieldId\":\"100011\",\"dataType\":\"text\",\"d
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 61 6c 69 64 61 74 69 6f 6e 73 5c 22 3a 5b 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 69 65 6c 64 56 61 6c 69 64 61 74 69 6f 6e 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 36 36 31 33 34 37 5c 22 2c 5c 22 64 65 70 74 68 5c 22 3a 5c 22 63 6f 6d 70 6c 65 74 65 5c 22 2c 5c 22 64 65 73 63 72 69 70 74 69 6f 6e 5c 22 3a 5c 22 46 6f 72 6d 20 46 69 65 6c 64 20 56 61 6c 69 64 61 74 69 6f 6e 20 52 75 6c 65 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 46 6f 72 6d 20 46 69 65 6c 64 20 56 61 6c 69 64 61 74 69 6f 6e 20 52 75 6c 65 5c 22 2c 5c 22 63 6f 6e 64 69 74 69 6f 6e 5c 22 3a 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 50 72 65 76 65 6e 74 55 72 6c 43 6f 6e 64 69 74 69 6f 6e 5c 22 7d 2c 5c 22 69 73 45 6e 61 62 6c 65 64 5c 22 3a 5c 22 74 72 75 65 5c 22 2c 5c 22 6d 65 73 73 61 67 65 5c 22 Data Ascii: alidations\":[{\"type\":\"FieldValidation\",\"id\":\"661347\",\"depth\":\"complete\",\"description\":\"Form Field Validation Rule\",\"name\":\"Form Field Validation Rule\",\"condition\":{\"type\":\"PreventUrlCondition\"},\"isEnabled\":\"true\",\"message\"
2024-04-18 17:16:55 UTC	1379	IN	Data Raw: 6f 6e 73 5c 22 3a 5b 5d 7d 2c 7b 5c 22 74 79 70 65 5c 22 3a 5c 22 46 6f 72 6d 46 69 65 6c 64 5c 22 2c 5c 22 69 64 5c 22 3a 5c 22 34 30 39 33 34 5c 22 2c 5c 22 6e 61 6d 65 5c 22 3a 5c 22 50 6f 70 75 6c 61 74 69 6f 6e 20 53 65 72 76 65 64 20 62 79 20 41 67 65 6e 63 79 5c 22 2c 5c 22 73 74 79 6c 65 5c 22 3a 5c 22 7b 5c 5c 5c 22 66 69 65 6c 64 53 69 7a 65 5c 5c 5c 22 3a 5c 5c 5c 22 6c 61 72 67 65 5c 5c 5c 22 2c 5c 5c 5c 22 6c 61 62 65 6c 50 6f 73 69 74 69 6f 6e 5c 5c 5c 22 3a 5c 5c 5c 22 74 6f 70 5c 5c 5c 22 7d 5c 22 2c 5c 22 63 72 65 61 74 65 64 46 72 6f 6d 43 6f 6e 74 61 63 74 46 69 65 6c 64 49 64 5c 22 3a 5c 22 31 30 30 36 32 39 5c 22 2c 5c 22 64 61 74 61 54 79 70 65 5c 22 3a 5c 22 74 65 78 74 5c 22 2c 5c 22 64 69 73 70 6c 61 79 54 79 70 65 5c 22 3a 5c 22 Data Ascii: ons\":[]},{\"type\":\"FormField\",\"id\":\"40934\",\"name\":\"Population Served by Agency\",\"style\":\"{\\\"fieldSize\\\":\\\"large\\\",\\\"labelPosition\\\":\\\"top\\\"}\",\"createdFromContactFieldId\":\"100629\",\"dataType\":\"text\",\"displayType\":\"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
588	192.168.2.4	50518	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1529	OUT	GET /td/rul/10896111711?random=1713460614350&cv=11&fst=1713460614350&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
589	192.168.2.4	50511	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1949	OUT	GET /-/item/v2/?language=en-US&fields=value\|text&query=%2Fsitecore%2Fcontent%2FLNRS%2FLNRS%20Settings%2F%2F%5B%40%40id%3D%27%7B1B17982E-9223-4AA2-8A32-DBF317CCF858%7D%27%5D%2F%5B%40Value%3D%27Industry%20%27%5D%2F HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3
2024-04-18 17:16:56 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 71 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD1 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:56 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210115-DFW, cache-pdk-kfty2130086-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460616.635945,VS0,VE401 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:56 UTC	71	IN	Data Raw: 7b 22 73 74 61 74 75 73 43 6f 64 65 22 3a 32 30 30 2c 22 72 65 73 75 6c 74 22 3a 7b 22 74 6f 74 61 6c 43 6f 75 6e 74 22 3a 30 2c 22 72 65 73 75 6c 74 43 6f 75 6e 74 22 3a 30 2c 22 69 74 65 6d 73 22 3a 5b 5d 7d 7d Data Ascii: {"statusCode":200,"result":{"totalCount":0,"resultCount":0,"items":[]}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
590	192.168.2.4	50512	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1769	OUT	GET /GetLocationInfo?_=1713460612539 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3
2024-04-18 17:16:56 UTC	666	IN	HTTP/1.1 200 OK Connection: close Content-Length: 61 Pragma: no-cache Content-Type: application/json; charset=utf-8 Expires: -1 Xhost: SC102CD2 cache-control: no-cache, no-store Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 0 Date: Thu, 18 Apr 2024 17:16:56 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdal2120039-DFW, cache-pdk-kfty2130050-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460616.636281,VS0,VE604 Vary: Origin, Accept-Encoding Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:56 UTC	61	IN	Data Raw: 7b 22 43 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 43 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 5a 69 70 43 6f 64 65 22 3a 6e 75 6c 6c 7d Data Ascii: {"Country":"United States","CountryCode":"US","ZipCode":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
591	192.168.2.4	50519	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1013	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000
2024-04-18 17:16:56 UTC	633	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:56 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close vary: Accept-Encoding x-powered-by: Express x-content-type-options: nosniff access-control-allow-headers: Content-Type,cf-ipcountry,service-version,x-appengine-user-ip,x-forwarded-for, x-ws-collect-type,requestFromZITag,unifiedScriptVerified,_zitok,_vtok,visited-url access-control-allow-credentials: true access-control-allow-origin: * x-robots-tag: noindex, nofollow via: 1.1 google CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 87664e30dbba44d7-ATL alt-svc: h3=":443"; ma=86400
2024-04-18 17:16:56 UTC	736	IN	Data Raw: 31 32 31 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 63 74 78 29 7b 21 66 75 6e 63 74 69 6f 6e 28 7b 61 69 64 3a 65 2c 6c 69 73 74 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 6e 2c 63 6f 6c 6c 65 63 74 49 6e 74 65 6e 74 3a 61 7d 29 7b 6c 65 74 20 63 3d 7b 61 69 64 3a 65 2c 6c 69 73 74 3a 74 2c 63 68 3a 32 37 38 2c 63 6d 3a 6e 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 64 2e 6f 6e 6c 6f 61 64 3d 64 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 6e 75 6c 6c 2c 6c 5b 72 5d 29 6c 5b 72 5d 28 69 29 3b 65 6c 73 65 7b 6c 65 74 20 65 3d 30 3b 63 6f 6e 73 74 20 74 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 32 3c 3d 65 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 29 2c 6c 5b 72 5d 3f 28 6c 5b 72 5d 28 69 29 2c Data Ascii: 121e(function(ctx){!function({aid:e,listId:t,visitorId:n,collectIntent:a}){let c={aid:e,list:t,ch:278,cm:n};function o(){if(d.onload=d.onreadystatechange=null,l[r])l[r](i);else{let e=0;const t=setInterval(function(){2<=e&&clearInterval(t),l[r]?(l[r](i),
2024-04-18 17:16:56 UTC	1369	IN	Data Raw: 2c 6e 29 7d 28 63 74 78 29 3b 21 66 75 6e 63 74 69 6f 6e 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 2c 6e 65 77 53 65 73 73 69 6f 6e 49 64 3a 67 2c 73 65 72 76 69 63 65 55 72 6c 3a 6d 2c 64 75 72 61 74 69 6f 6e 73 56 65 72 73 69 6f 6e 4b 65 79 3a 49 2c 7a 69 77 73 4b 65 79 3a 70 3d 22 7a 69 77 73 22 2c 64 69 73 61 62 6c 65 55 6e 6c 6f 61 64 45 76 65 6e 74 3a 79 2c 72 65 71 75 65 73 74 46 72 6f 6d 5a 49 54 61 67 3a 62 3d 21 31 2c 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 3a 68 3d 21 31 2c 63 72 65 61 74 65 64 41 74 3a 56 2c 76 69 73 69 74 6f 72 49 64 3a 71 7d 29 7b 77 69 6e 64 6f 77 5b 70 5d 3d 7b 2e 2e 2e 77 69 6e 64 6f 77 5b 70 5d 2c 66 6e 3a 6e 75 6c 6c 7d 2c 77 69 6e 64 Data Ascii: ,n)}(ctx);!function({eventId:S,websiteId:u,companyId:f,newSessionId:g,serviceUrl:m,durationsVersionKey:I,ziwsKey:p="ziws",disableUnloadEvent:y,requestFromZITag:b=!1,unifiedScriptVerified:h=!1,createdAt:V,visitorId:q}){window[p]={...window[p],fn:null},wind
2024-04-18 17:16:56 UTC	1369	IN	Data Raw: 73 73 69 6f 6e 22 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 7b 65 76 65 6e 74 49 64 3a 53 2c 77 65 62 73 69 74 65 49 64 3a 75 2c 63 6f 6d 70 61 6e 79 49 64 3a 66 7c 7c 6e 75 6c 6c 2c 73 65 73 73 69 6f 6e 49 64 3a 74 2c 76 69 73 69 74 6f 72 49 64 3a 71 2c 65 76 65 6e 74 43 72 65 61 74 65 64 41 74 3a 56 2c 73 65 63 73 3a 77 69 6e 64 6f 77 5b 70 5d 2e 73 65 63 73 2c 76 3a 77 69 6e 64 6f 77 5b 70 5d 2e 76 7d 29 29 2c 68 26 26 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 75 6e 69 66 69 65 64 53 63 72 69 70 74 56 65 72 69 66 69 65 64 22 2c 68 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 65 3b 63 2e 68 61 73 43 68 61 6e 67 65 64 7c 7c 28 63 2e 68 61 73 43 68 61 6e 67 65 64 3d 21 30 2c 77 69 6e 64 6f 77 5b 70 5d 2e 73 Data Ascii: ssion",JSON.stringify({eventId:S,websiteId:u,companyId:f\|\|null,sessionId:t,visitorId:q,eventCreatedAt:V,secs:window[p].secs,v:window[p].v})),h&&sessionStorage.setItem("unifiedScriptVerified",h)}function c(){var e;c.hasChanged\|\|(c.hasChanged=!0,window[p].s
2024-04-18 17:16:56 UTC	1172	IN	Data Raw: 2b 2b 7d 2c 32 65 33 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 26 26 28 6e 65 77 20 54 54 44 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 41 70 69 29 2e 69 6e 69 74 28 74 2c 5b 65 5d 2c 72 29 7d 76 61 72 20 72 3b 72 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 73 69 67 68 74 2e 61 64 73 72 76 72 2e 6f 72 67 2f 74 72 61 63 6b 2f 75 70 22 2c 28 74 74 64 45 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 28 29 7d 2c 74 74 64 45 6c 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 6e 64 Data Ascii: ++},2e3)}}function n(){"function"==typeof TTDUniversalPixelApi&&(new TTDUniversalPixelApi).init(t,[e],r)}var r;r="https://insight.adsrvr.org/track/up",(ttdEl=document.createElement("script")).onload=function(){d()},ttdEl.onreadystatechange=function(){"und
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
592	192.168.2.4	50520	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1429	OUT	GET /pagead/1p-user-list/527644678/?random=1713460613584&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqhhH0Dqgl0wTad9Rhdv4hUtsDAo_EP7aay34kGIy7jagrQCdR&random=3331233392&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
593	192.168.2.4	50521	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1431	OUT	GET /pagead/1p-user-list/10827142419/?random=1713460613570&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqYlnlahEImWbNwhcDKlZsmsJBLZDMComN0NbtBoN5w8n7xeic&random=2453808327&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
594	192.168.2.4	50522	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1019	OUT	POST /data HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive Content-Length: 403 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"},{"ch":"124","t":"2024-04-18 17:16:42"}]
2024-04-18 17:16:55 UTC	403	OUT	Data Raw: 77 73 3d 31 26 6c 61 6e 67 3d 65 6e 2d 55 53 26 63 6f 6f 6b 69 65 73 3d 74 72 75 65 26 74 7a 3d 2d 31 32 30 26 73 63 72 65 65 6e 5f 72 65 73 3d 31 32 38 30 78 31 30 32 34 26 62 72 6f 77 73 65 72 5f 72 65 73 3d 31 32 38 30 78 33 36 32 37 26 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 26 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 63 61 73 65 2d 73 74 75 64 79 25 32 46 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d 61 62 64 75 63 74 65 64 2d 63 68 69 6c 64 2d Data Ascii: ws=1&lang=en-US&cookies=true&tz=-120&screen_res=1280x1024&browser_res=1280x3627&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-
2024-04-18 17:16:55 UTC	747	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:55 GMT Content-Type: application/json Content-Length: 47 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: eae44b614222 X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: https://risk.lexisnexis.com access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:55:19 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure
2024-04-18 17:16:55 UTC	47	IN	Data Raw: 7b 22 62 22 3a 22 5a 69 46 56 58 61 61 39 67 66 37 75 4d 6a 66 6e 52 59 74 45 75 73 73 76 22 2c 22 74 61 67 73 22 3a 22 66 61 6c 73 65 22 7d Data Ascii: {"b":"ZiFVXaa9gf7uMjfnRYtEussv","tags":"false"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
595	192.168.2.4	50523	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1429	OUT	GET /pagead/1p-user-list/938539671/?random=1713460613557&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdlu8VJs8aw7NgnLljsEbLUDWCjCsR6sGXve2rPrdGjHcOW98&random=2829193183&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
596	192.168.2.4	50524	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1527	OUT	GET /td/rul/938539671?random=1713460614384&cv=11&fst=1713460614384&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:55 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:55 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
597	192.168.2.4	50526	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1429	OUT	GET /pagead/1p-user-list/936886275/?random=1713460613596&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqeTAos0T-hG3-2g4ge4IKMXmRuHiRQiBpxu9Cky-E8MoI4yeD&random=1910594472&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
598	192.168.2.4	50525	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	999	OUT	GET /pixel.gif?clkgypv=jstag&ws=1 HTTP/1.1 Host: aorta.clickagy.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; chs=[{"ch":"278","t":"2024-04-18 17:16:13"},{"ch":"128","t":"2024-04-18 17:16:14"},{"ch":"5","t":"2024-04-18 17:16:16"},{"ch":"8","t":"2024-04-18 17:16:17"},{"ch":"114","t":"2024-04-18 17:16:19"},{"ch":"120","t":"2024-04-18 17:16:21"},{"ch":"124","t":"2024-04-18 17:16:42"}]
2024-04-18 17:16:55 UTC	1004	IN	HTTP/1.1 302 Found Date: Thu, 18 Apr 2024 17:16:55 GMT Content-Type: application/json Content-Length: 0 Connection: close server: Aorta/20240418.6af575c24 X-Aorta-Host: f6b9be6c3f1f X-Aorta-Region: us-east-1 access-control-allow-credentials: true access-control-allow-headers: Origin,cache-control,content-type,man,messagetype,soapaction access-control-expose-headers: Set-Cookie access-control-allow-methods: POST, GET, OPTIONS access-control-allow-origin: * access-control-max-age: 31536000 cache-control: no-cache, no-store, must-revalidate expect: 0 Location: https://us-u.openx.net/w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D set-cookie: cb=ZiFVXaa9gf7uMjfnRYtEussv; Max-Age=63027504; Expires=Sat, 18 Apr 2026 04:55:19 GMT; Path=/; Domain=.clickagy.com; SameSite=None; Secure

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
599	192.168.2.4	50527	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1429	OUT	GET /pagead/1p-user-list/938545461/?random=1713460613609&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqVIFwpimzFFCkW7wKkjqdBH8btwH-41dJ65savJqerM15fVZx&random=3034194100&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
600	192.168.2.4	50528	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1430	OUT	GET /pagead/1p-user-list/1048135065/?random=1713460613621&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&frm=0&tiba=How%20Accurint%C2%AE%20TraX%E2%84%A2%20aided%20the%20Newport%20News%20Police%20Department%20in%20an%20Exigent%20Situation%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqPOeTNvkhf_fw9mItOnC_o3ZHRtKW5L_qVaui5yk7pkoTSdj7&random=1794705762&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:55 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:55 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
601	192.168.2.4	50529	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1529	OUT	GET /td/rul/10827142419?random=1713460614404&cv=11&fst=1713460614404&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
602	192.168.2.4	50530	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1527	OUT	GET /td/rul/527644678?random=1713460614427&cv=11&fst=1713460614427&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
603	192.168.2.4	50531	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1860	OUT	GET /-/media/images/government/shutterstock_308932925/training%20page%20refresh.jpg?w=400&hash=E97587CA6E8E8FCE847A89D8F79FE6C8 HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; s_tp=4122; s_ppv=insights-resources%253A%2520case-study%2C22%2C22%2C907%2C1%2C4; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A52+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3
2024-04-18 17:16:56 UTC	872	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12961 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="Training page refresh.jpg" Content-Type: image/jpeg Etag: "j8mjqUHDaZxR4mFLCS8NdiNRL9nfZZa4jxMCzrGvchQ" Fastly-Io-Info: ifsz=24353 idim=400x137 ifmt=jpeg ofsz=12961 odim=400x137 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010216 Fastly-Stats: io=1 Xhost: SC102CD1 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 534034 Date: Thu, 18 Apr 2024 17:16:56 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210031-DFW, cache-pdk-kfty2130075-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460616.032563,VS0,VE82 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: a0 f2 d0 9a 4b c9 5e e4 a5 3c b4 16 52 28 42 96 0a 18 a0 8a 30 56 65 62 1a f5 a3 3c 28 b1 42 14 20 a3 d6 8d 5a 20 1a 39 4d 09 23 81 a3 81 a4 e0 d1 aa 68 42 50 0d 08 9a 28 1a 16 6a 28 5d a1 50 05 18 28 42 10 a1 57 06 2b d4 21 18 0d 15 72 73 6e df 68 50 b2 28 ab 83 fa bb fd a1 4c 21 7a 23 ea 45 e4 28 e2 69 1c 2d f3 71 79 0a 52 4d 32 90 e1 0c fd 13 45 e6 bb 9d 8d 17 9a 8a 68 c0 7a 53 2e 80 40 b6 b8 ff 00 6a 9b ee 34 f0 33 e0 69 8f 42 61 f2 7b a5 ef 17 73 7e 34 fa 4b b0 a4 80 d2 4b e3 f3 07 ed 0a 38 1a 49 7e d8 83 fb c2 80 9f 49 9d 8e 68 b2 71 5e 2d 9a 2f 34 d4 52 88 cf ac be 74 f8 c6 98 23 3e b2 f9 d3 eb 1a 45 30 8b 63 45 13 43 63 44 b1 a4 9a 09 34 9a e3 e8 0f 3a 3c 9a 4b 3f d0 5f 3a 90 e5 22 92 93 5c a1 00 6b 9c a6 ad 09 14 03 40 77 48 d5 9d dd 51 14 65 99 Data Ascii: K^<R(B0Veb<(B Z 9M#hBP(j(]P(BW+!rsnhP(L!z#E(i-qyRM2EhzS.@j43iBa{s~4KK8I~Ihq^-/4Rt#>E0cECcD4:<K?_:"\k@wHQe
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 46 f0 f0 ec 76 ed 0c 91 59 2d e1 69 59 cc 8a aa fc c3 27 9f 2d d7 23 c2 9a 74 96 e5 d6 b8 68 8d 80 bb 03 cb 63 56 54 1c 01 a1 f1 56 92 2f e7 ba 5e df 9d ad d0 c6 c2 40 16 59 14 1e d1 4f 7e db 7b 29 37 f9 be d6 3f 4c 45 73 64 f6 f3 43 69 7c a5 c7 37 66 de ae c4 80 db 77 e7 ad 2b c6 52 af 98 85 a0 f3 b9 f3 a6 fd 48 fe ad fd f1 4b 29 bb 51 3f ab e3 fa c2 8b ca 95 61 34 e6 84 0d 16 0d 08 54 94 52 88 8f ae be 74 f6 e7 ad 31 c7 f4 97 cc 53 c4 87 ad 45 30 8b 63 45 13 5c 66 14 59 6a 13 42 26 92 ce 7d 51 e7 47 67 34 9e 6d d7 df 52 6f 21 23 c2 4f d4 74 af 67 c2 b9 d2 b8 6a e5 1f 54 55 d4 dd 8d ad cc b9 fa 11 3b 7c 05 41 74 67 5b f9 18 c8 c7 9a 2b 82 db f7 f3 8a 96 ea f2 2c 7a 65 e9 72 70 d1 32 7b d8 60 55 45 a2 ea 06 2d 4b b0 93 20 5c c0 3b 26 ce 00 91 46 77 f7 67 Data Ascii: FvY-iY'-#thcVTV/^@YO~{)7?LEsdCi\|7fw+RHK)Q?a4TRt1SE0cE\fYjB&}QGg4mRo!#OtgjTU;\|Atg[+,zerp2{`UE-K \;&Fwg
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: e9 5c eb 64 a5 a0 fa 13 4a dc 8c 30 65 d8 f5 a5 5a 95 f5 b6 9f 6b 71 77 77 28 8a de 14 e7 91 c8 ce 00 f6 0d c9 ee 00 75 35 4d 2e a1 ac 42 07 36 8d c4 31 e3 bc 40 1f f9 64 a8 57 1d f1 55 d5 e5 95 96 92 f0 ea 4e ab 31 b9 b8 8e 78 cc 12 f2 a8 01 54 73 12 4a e7 26 a4 25 7f ee 84 b7 d6 ec 28 f8 51 9f a6 60 ef 4a 20 a9 46 ab e9 5e ed 9a 56 d3 ac 84 10 29 21 5a 68 8b ca d8 f1 04 85 50 7e 34 db 0f a5 9d 6c 9e d1 b4 fb 69 63 c6 e8 01 53 b1 f1 07 6f 78 d8 d5 2b 34 e6 e3 51 96 22 b3 43 db 61 5b 99 80 0a 0e 3d 83 bb bf ad 08 3d bd 95 cc 89 17 3b 1c 10 7e 73 3d a6 0e 32 3a 7e 14 c3 dc 54 8b 5a 07 1e 8b 5d f0 d7 18 69 fc 48 ac 91 c6 f6 f7 4a 85 da 07 39 f5 41 03 99 58 6c 46 fe c3 52 2b 93 27 26 63 8f 9d b3 d3 9b 97 ef ac cb e8 ef 5a b1 ff 00 2b 34 98 e2 67 e6 91 de 1c Data Ascii: \dJ0eZkqww(u5M.B61@dWUN1xTsJ&%(Q`J F^V)!ZhP~4licSox+4Q"Ca[==;~s=2:~TZ]iHJ9AXlFR+'&cZ+4g
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: b9 b5 91 e2 8a ee 0f db 5a cf 1f db 8d 97 f1 02 b5 df a1 77 ed 38 25 08 3b 0b fb 91 f8 52 1b ce 12 d1 2c 6d 9a 7f 95 ea 90 a2 b2 2f cd 5d 33 6e ec 10 6c de d3 4a a1 e1 2b cb 61 ff 00 b3 f8 cb 56 81 49 ce 03 2b 29 3e 3b 62 a3 e1 10 77 5e 14 ac 1c 76 32 ad ce f5 f3 15 f3 df 8b 24 23 8b f8 90 03 ff 00 78 dc 7f 39 ad 5c 61 e2 bb 47 55 4f 48 6a 5b b9 6e 2d 91 8e df 1a 81 ea 1e 8b ee af a6 ba bf 92 db 48 ba 9a 56 79 65 91 4c f0 33 b1 cb 13 85 38 c9 a4 1c de 37 0b 4c b1 d8 24 1a 54 bd 8c be a2 d3 d2 3e df 0a 06 b1 65 67 61 79 6a b6 76 d2 41 1c b6 70 4c d1 3b 99 39 1d c1 e6 01 9b 7c 6d 9c 1d c5 26 47 da a4 ab aa 34 9c d5 e9 8b 5f ba 0a 90 44 33 cd eb 31 3d c4 1c 01 f9 d3 94 6c ce ca aa 09 62 40 00 75 24 f7 54 6b 5d e6 5d 52 e6 16 20 b5 be 22 6e 53 91 cc b9 cf c0 Data Ascii: Zw8%;R,m/]3nlJ+aVI+)>;bw^v2$#x9\aGUOHj[n-HVyeL387L$T>egayjvApL;9\|m&G4_D31=lb@u$Tk]]R "nS
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: cf 38 3d 76 db 39 34 8b 59 be e6 bf be 3d 39 a6 76 03 c0 13 4c 42 eb 04 7a de 1f 76 28 6b 5b 1b 43 5a 28 05 4c 8f 7c 8f 2f 71 b2 79 53 08 4c 56 e1 a4 b7 bc 71 86 0c c1 87 5a 9e fa 3f b7 b4 e2 5e 27 87 4f bb bd bd 86 2b 8b 79 49 7b 59 cc 2e 64 89 79 94 92 33 91 80 6a 9b 5b be 45 72 4f 42 a4 7b f3 56 67 a1 d9 58 f1 e6 8e 32 7e 94 df 03 13 54 c3 ac a4 b4 a8 f4 61 6e bf bb 71 a7 11 c3 e1 fa d0 7f c4 50 bf cd de b5 1f ec 3d 24 6b 23 1d 3b 48 e3 93 f1 35 34 d4 75 38 b4 9d 36 ee fe 60 59 20 4e 6e 51 b1 62 76 03 de 4d 54 89 e9 4f 5a 86 fe 13 36 9f 0c b6 6c 7d 78 e2 46 0e ab 9f aa d9 dc 81 e3 d6 b7 69 74 1a ad 5c 52 49 13 41 6b 0d 64 d5 9f 20 b9 fa bf 8a 68 f4 53 45 0c cf 21 ef 16 00 17 43 cc a7 eb ce 12 e2 ed 3a da 6b a7 f4 99 c9 04 4a 59 e4 b8 b0 42 15 7c 4e 0d Data Ascii: 8=v94Y=9vLBzv(k[CZ(L\|/qySLVqZ?^'O+yI{Y.dy3j[ErOB{VgX2~TanqP=$k#;H54u86`Y NnQbvMTOZ6l}xFit\RIAkd hSE!C:kJYB\|N
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: f9 8f 5a e4 b8 b3 c3 8c 0f ab 37 e6 bb 2d 0e de f2 78 c5 28 77 19 71 1c 1a 6e 98 4c 76 b1 bd cc 87 95 79 e3 43 81 e3 92 36 3f 85 54 96 ba bc ad 8b 80 79 ae 66 7e cd 18 f4 50 3e 91 1e ca 7b f4 81 7a 2f 75 af 93 06 da 15 e4 41 fd 6e fa 82 5f 73 d8 58 ac a8 c7 31 5b 95 f7 b1 de b9 53 bf 74 a4 74 30 b7 46 d2 d6 df 9a 92 41 72 af 75 ca 27 24 4d 2b 1c 1e a7 93 6f be 9e 34 cb fe c2 e9 f4 c9 01 e4 62 5e 23 fc 24 ee 3d d5 53 5a 6a 92 cf 73 0c aa c3 30 37 41 d4 29 a9 ad dd d4 b2 cd a6 df 40 3e a1 56 f1 0c bb e2 a9 24 02 a7 92 a5 dc 5d a7 26 b3 c1 da 9c 46 10 ef 02 7c a1 17 38 3c d1 9d c6 47 4d aa 94 e1 7d 6d 74 97 8c fe 8d 4e cc e3 99 d5 d8 c8 47 f7 bc 2a ff 00 b2 b9 49 6d ae d5 97 31 4f 6d 27 ab 8e bc eb d2 b2 ef 25 bf 39 53 14 7e ab 10 01 00 74 ad fa 48 21 d4 c7 Data Ascii: Z7-x(wqnLvyC6?Tyf~P>{z/uAn_sX1[Stt0FAru'$M+o4b^#$=SZjs07A)@>V$]&F\|8<GM}mtNG*Im1Om'%9S~tH!
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 5b 9e dd af 24 03 28 25 53 bf aa e1 87 dc 6a a6 f4 b5 e8 ea ff 00 5f b7 8f 88 34 6b 42 d7 56 b0 f6 77 96 f9 c3 cb 1a 64 87 41 f5 9d 7a 63 a9 1d 2a 6d b3 8a a2 89 23 6e db 69 b3 e9 9b 59 3e 77 0d 27 b2 80 1b 71 92 05 29 96 d2 78 4e 26 82 48 c8 fe 34 2b fc c2 92 b0 2b 83 82 40 f0 f6 53 20 8e 45 2c d9 5b 4b 81 e1 68 b8 4b 87 41 53 bd af 37 4f e2 62 69 75 b6 95 a8 27 ce 4f a9 5f cb 30 42 a1 84 81 55 72 73 b2 a8 c7 c7 35 9a 34 1e 2a bd ec e4 8a d3 5e b8 b3 30 44 0a 42 cd 20 e7 dc 0e 58 c4 65 86 77 e8 40 ab 02 db 89 f8 f6 14 e6 17 c2 60 39 72 b2 88 d9 87 30 e6 c1 e6 55 39 c1 f1 ab 1b 23 9a da 6b aa f9 c6 70 a0 5a d7 90 4b 6e b8 ce 32 a7 3c 60 66 b7 d2 f4 e8 66 b9 92 69 73 33 34 92 e0 31 cf b0 0c 0a a7 c4 ac 31 9e bb 63 e1 53 1d 5b 58 d6 b5 8d 2d 5f 54 81 22 91 Data Ascii: [$(%Sj_4kBVwdAzcm#niY>w'q)xN&H4++@S E,[KhKAS7Obiu'O_0BUrs54^0DB Xew@`9r0U9#kpZKn2<`ffis3411cS[X-_T"
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: e3 b7 4b b0 02 89 06 0e 48 cf 51 dc 3a 51 36 fc 29 c5 ba 05 fd ad cb e9 d3 c6 61 75 61 71 07 ce 04 e5 3b 39 e4 dc 72 f5 e9 57 72 2f 2c da 2b a4 84 18 15 c8 ef fa 5b 0e be ca 76 b6 d5 e7 37 82 26 7c c0 8d cc 5b 03 0c d9 c0 cf 95 6c fd 2c 67 cc 1b e9 64 13 bc 57 05 0a 1d 3b d3 14 20 1b 3e 2e b6 bb 5c 06 1f ac e7 20 f4 fd a2 52 a1 aa 7a 74 b3 eb 6d 6d 74 07 b2 dd f3 f0 e5 34 e6 9a bd d2 dc 33 c5 22 a7 31 e4 86 41 83 b1 ea df 9d 48 35 4e 24 d4 5a 1b 48 74 4d 3e 3b 8b bb 86 ec c3 cc de a2 b7 b1 57 05 89 eb d4 01 de 6b 3c ba 77 47 91 f3 37 fe 95 f1 cc d7 60 e0 a8 3c fc 79 e9 4a c1 1a 7d 47 82 62 91 23 05 9a 4e c1 80 51 8d ce 51 f1 d0 52 21 e9 97 53 68 d5 ef 38 27 e6 98 e0 3c 52 4c a0 91 dc 0e 08 35 2b d5 38 46 f6 4d 1a fa ff 00 89 75 ab 8b fb c8 6d e4 64 86 2c Data Ascii: KHQ:Q6)auaq;9rWr/,+[v7&\|[l,gdW; >.\ Rztmmt43"1AH5N$ZHtM>;Wk<wG7`<yJ}Gb#NQQR!Sh8'<RL5+8FMumd,
2024-04-18 17:16:56 UTC	550	IN	Data Raw: 04 52 c9 04 f3 76 92 88 d6 38 57 9d 89 39 3d 3c 85 56 7e 84 bf d0 99 ff 00 de 32 ff 00 2a d5 a3 77 f4 13 ed 7e 46 a4 c2 d0 5a 4b 6c 76 3c d3 90 3a 88 6b a8 f4 7c 93 6c 3a fd dc d2 ce 0e 83 72 90 2a 65 1d de 30 d2 1f 0e 5c ed b7 b6 9c 74 9d 6e 1d 4e 5b 88 a2 b1 ba 84 40 a3 99 a6 8f b3 04 9f aa be 38 a4 3e 34 e3 65 d1 fe c8 a9 19 18 e6 bc f8 20 60 01 44 e3 f2 a2 d8 de 1d 18 33 17 64 dd 81 fe 29 3a 8e c8 16 f5 b7 ef ef a6 99 f5 9b 18 64 7b 63 74 0c aa e1 3b 31 f4 f9 9b 24 0f 67 4f 75 2a 4f fb 1a a6 ec bf a6 e2 ff 00 68 6f c0 d5 fa 4d 3b 75 2d 90 b9 c4 06 37 81 da a7 59 a8 76 99 cc 0d 68 25 ce ab 3d 2b 11 2f a6 bb 75 43 80 9f 28 d8 63 7c 06 db 27 be a5 64 9a 84 58 7e de 3f ed ff 00 e6 a9 c5 55 3b 43 76 00 28 52 70 39 cf 32 39 c6 cd a0 8c 96 5f 3a cd 1a 3c 8e Data Ascii: Rv8W9=<V~2w~FZKlv<:k\|l:re0\tnN[@8>4e `D3d):d{ct;1$gOu*OhoM;u-7Yvh%=+/uC(c\|'dX~?U;Cv(Rp929_:<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
604	192.168.2.4	50532	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:55 UTC	1527	OUT	GET /td/rul/936886275?random=1713460614437&cv=11&fst=1713460614437&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	609	IN	Data Raw: 35 62 31 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 5b1<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:56 UTC	855	IN	Data Raw: 30 37 33 39 31 37 34 30 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 57 47 32 46 6c 67 21 32 73 5a 6b 6a 69 69 41 21 33 73 41 41 70 74 44 56 34 55 43 39 6b 71 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 36 31 31 38 30 37 30 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 Data Ascii: 07391740","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1sWG2Flg!2sZkjiiA!3sAAptDV4UC9kq"],"userBiddingSignals":[null,null,1713460616118070],"executionMode":"group-by-origin","biddingWasmHelperUrl":"https://t
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
605	192.168.2.4	50533	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1527	OUT	GET /td/rul/938545461?random=1713460614506&cv=11&fst=1713460614506&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	609	IN	Data Raw: 38 34 38 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 6f 72 69 67 69 6e 2d 74 72 69 61 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 41 76 68 35 4e 79 30 58 45 46 43 79 51 37 2b 6f 4e 69 65 58 73 6b 55 72 71 59 38 65 64 55 7a 4c 35 2f 58 72 77 4b 6c 47 6a 41 52 51 48 57 34 54 46 52 4b 2b 6a 56 64 35 48 6e 44 49 70 59 32 30 6e 35 4f 4c 48 66 67 55 34 6b 75 37 78 34 38 4e 33 75 68 47 2f 41 30 41 41 41 42 78 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 52 76 64 57 4a 73 5a 57 4e 73 61 57 4e 72 4c 6d 35 6c 64 44 6f 30 4e 44 4d 69 4c 43 4a 6d 5a 57 46 30 64 58 4a 6c 49 6a 6f 69 55 48 4a 70 64 6d 46 6a 65 56 4e 68 62 6d 52 69 62 33 68 42 5a 48 4e 42 55 45 6c 7a 49 69 77 69 5a 58 68 77 61 Data Ascii: 848<html><head><meta http-equiv="origin-trial" content="Avh5Ny0XEFCyQ7+oNieXskUrqY8edUzL5/XrwKlGjARQHW4TFRK+jVd5HnDIpY20n5OLHfgU4ku7x48N3uhG/A0AAABxeyJvcmlnaW4iOiJodHRwczovL2RvdWJsZWNsaWNrLm5ldDo0NDMiLCJmZWF0dXJlIjoiUHJpdmFjeVNhbmRib3hBZHNBUElzIiwiZXhwa
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 33 32 37 31 35 38 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 74 64 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 2f 74 64 2f 62 74 73 22 2c 22 74 72 75 73 74 65 64 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 4b 65 79 73 22 3a 5b 22 31 73 63 47 42 5a 6a 51 21 32 73 5a 6b 6a 69 69 41 21 33 73 41 41 70 74 44 56 36 36 6a 37 77 49 22 5d 2c 22 75 73 65 72 42 69 64 64 69 6e 67 53 69 67 6e 61 6c 73 22 3a 5b 5b 22 34 37 38 30 34 31 33 38 39 22 5d 2c 6e 75 6c 6c 2c 31 37 31 33 34 36 30 36 31 36 32 30 33 31 38 38 5d 2c 22 65 78 65 63 75 74 69 6f 6e 4d 6f 64 65 22 3a 22 67 72 6f 75 70 2d 62 79 2d 6f 72 69 67 69 6e 22 2c 22 62 69 64 64 69 6e 67 57 61 73 6d 48 65 6c 70 65 72 55 72 6c 22 3a 22 68 74 Data Ascii: 327158","trustedBiddingSignalsUrl":"https://td.doubleclick.net/td/bts","trustedBiddingSignalsKeys":["1scGBZjQ!2sZkjiiA!3sAAptDV66j7wI"],"userBiddingSignals":[["478041389"],null,1713460616203188],"executionMode":"group-by-origin","biddingWasmHelperUrl":"ht
2024-04-18 17:16:56 UTC	263	IN	Data Raw: 41 64 49 6e 74 65 72 65 73 74 47 72 6f 75 70 28 69 2e 69 6e 74 65 72 65 73 74 47 72 6f 75 70 41 74 74 72 69 62 75 74 65 73 29 3b 7d 7d 63 61 74 63 68 28 65 29 7b 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 60 68 74 74 70 73 3a 2f 2f 70 61 67 65 61 64 32 2e 67 6f 6f 67 6c 65 73 79 6e 64 69 63 61 74 69 6f 6e 2e 63 6f 6d 2f 70 61 67 65 61 64 2f 67 65 6e 5f 32 30 34 2f 3f 69 64 3d 74 75 72 74 6c 65 78 5f 6a 6f 69 6e 5f 69 67 26 74 78 5f 6a 69 67 3d 24 7b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 69 29 29 7d 26 74 78 5f 6a 65 6d 3d 24 7b 65 2e 6d 65 73 73 61 67 65 7d 26 74 78 5f 6a 65 6e 3d 24 7b 65 2e 6e 61 6d 65 7d 60 29 3b 7d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c Data Ascii: AdInterestGroup(i.interestGroupAttributes);}}catch(e){navigator.sendBeacon(`https://pagead2.googlesyndication.com/pagead/gen_204/?id=turtlex_join_ig&tx_jig=${encodeURIComponent(JSON.stringify(i))}&tx_jem=${e.message}&tx_jen=${e.name}`);}}</script></body><
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
606	192.168.2.4	50534	142.250.105.156	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1528	OUT	GET /td/rul/1048135065?random=1713460614626&cv=11&fst=1713460614626&fmt=3&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config HTTP/1.1 Host: td.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	646	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	18	IN	Data Raw: 64 0d 0a 3c 68 74 6d 6c 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: d<html></html>
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
607	192.168.2.4	50536	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	900	OUT	GET /w/1.0/cm?id=af408286-42f3-4d1c-bb48-10bd86dbcd66&r=https%3A%2F%2Faorta.clickagy.com%2Fpixel.gif%3Fch%3D4%26cm%3D%7BOPENX_ID%7D%26redir%3Dhttps%253A%252F%252Fus-u.openx.net%252Fw%252F1.0%252Fsd%253Fid%253D537073026%2526val%253D%257Bvisitor_id%257D HTTP/1.1 Host: us-u.openx.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:56 UTC	383	IN	HTTP/1.1 200 OK Vary: Accept, Accept-Encoding Server: OXGW/0.0.0 Pragma: no-cache P3P: CP="CUR ADM OUR NOR STA NID" Expires: Mon, 26 Jul 1997 05:00:00 GMT Date: Thu, 18 Apr 2024 17:16:56 GMT Content-Type: image/gif Content-Length: 43 Cache-Control: private, max-age=0, no-cache Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
608	192.168.2.4	50537	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1405	OUT	GET /pagead/viewthroughconversion/10896111711/?random=1713460614350&cv=11&fst=1713460614350&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	552	IN	Data Raw: 39 61 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ad(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:56 UTC	677	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-w
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
609	192.168.2.4	50445	52.223.40.198	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	946	OUT	GET /track/up?adv=tthfdvo&ref=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study%2Frecovering-an-abducted-child-with-accurint-trax&upid=rw95j4b&upv=1.1.0 HTTP/1.1 Host: insight.adsrvr.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:56 UTC	136	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:56 GMT Content-Type: text/html Content-Length: 0 Connection: close server: Kestrel

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
610	192.168.2.4	50538	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	894	OUT	GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:56 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 17:16:56 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-pKJITDcccchYaXtTl46LJw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	364	IN	Data Raw: 31 64 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d17<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-18 17:16:56 UTC	816	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 70 4b 4a 49 54 44 63 63 63 63 68 59 61 58 74 54 6c 34 36 4c 4a 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="pKJITDcccchYaXtTl46LJw" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
611	192.168.2.4	50539	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1403	OUT	GET /pagead/viewthroughconversion/938539671/?random=1713460614384&cv=11&fst=1713460614384&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	552	IN	Data Raw: 39 61 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ac(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:56 UTC	676	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 69 6c Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wil
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
612	192.168.2.4	50540	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1405	OUT	GET /pagead/viewthroughconversion/10827142419/?random=1713460614404&cv=11&fst=1713460614404&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	552	IN	Data Raw: 39 61 65 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ae(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:56 UTC	678	IN	Data Raw: 36 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 Data Ascii: 6fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-w
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
613	192.168.2.4	50541	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1903	OUT	GET /-/media/images/government/meet%20the%20siu%20team/siu%20team.jpg?w=400&hash=C7AAD7AB43C535C357EC425F781C3E0A HTTP/1.1 Host: risk.lexisnexis.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: united_states#lang=en-US; shell#lang=en; ASP.NET_SessionId=bj13hp1dwohhdvwlnmv00t12; SC_ANALYTICS_GLOBAL_COOKIE=795f63a1528045ecb42c7dd1921764b8\|True; AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; eVar2_ECID=72321666800473193042525972382318204557; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; gpv_Page=insights-resources%3A%20case-study; eVar66=4; s_sq=%5B%5BB%5D%5D; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A54+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1; s_tp=3627; s_ppv=insights-resources%253A%2520case-study%253A%2520recovering-an-abducted-child-with-accurint-trax%2C25%2C25%2C907%2C1%2C3
2024-04-18 17:16:56 UTC	859	IN	HTTP/1.1 200 OK Connection: close Content-Length: 27719 Cache-Control: public, max-age=604800 Content-Disposition: inline; filename="SIU Team.jpg" Content-Type: image/jpeg Etag: "tp1NsRkj8hoojjA41eYFuXIPhE5QEL/Iyqdt2oMPYRo" Fastly-Io-Info: ifsz=47365 idim=400x312 ifmt=jpeg ofsz=27719 odim=400x312 ofmt=jpeg Fastly-Io-Served-By: vpop-kiad7010247 Fastly-Stats: io=1 Xhost: SC102CD2 Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 557456 Date: Thu, 18 Apr 2024 17:16:56 GMT X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade X-Frame-Options: sameorigin X-Proxy: Fastly X-Served-By: cache-dfw-kdfw8210170-DFW, cache-pdk-kfty2130083-PDK X-Cache: MISS, MISS X-Cache-Hits: 0, 0 X-Timer: S1713460617.798126,VS0,VE97 Vary: Accept Strict-Transport-Security: max-age=31557600
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 1c 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 0c 6c 63 6d 73 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 dc 00 01 00 19 00 03 00 29 00 39 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6c 63 6d 73 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 5e 63 70 72 74 00 00 01 5c 00 00 00 0b 77 74 70 74 00 00 01 68 00 00 00 14 62 6b 70 74 00 00 01 7c 00 00 00 14 72 58 59 5a 00 00 01 90 00 00 00 14 67 58 59 5a 00 00 01 a4 00 00 00 14 62 58 59 5a 00 00 01 b8 00 00 00 14 72 Data Ascii: JFIFICC_PROFILElcmsmntrRGB XYZ )9acspAPPL-lcmsdesc^cprt\wtpthbkpt\|rXYZgXYZbXYZr
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: d3 fe c5 24 63 24 f2 c6 a9 ab 72 f5 b0 c4 c6 07 53 49 15 1d 81 3f 4a 90 f2 d4 76 e6 87 cb 00 65 81 fa 51 d6 0a 23 44 52 37 f4 af 73 5c 63 27 d0 99 51 dc f7 34 f9 86 ef a0 ed 44 75 d8 b8 03 d4 dd 7b 54 d5 64 a2 32 58 d6 51 90 33 b3 8f 7e 3f 1a 4a 48 fc c8 c3 0c 92 a3 1f 95 48 84 0a 72 7e 84 7d 68 04 61 49 50 07 3c 8f 9c 54 d5 5b 12 ac ae 5c db ef 4d dc fb 1f a1 a6 91 47 16 e2 87 7e 57 f9 8f fd 2a cb 24 43 3d 3d 24 7f 7a 8c 78 16 26 2c 50 9c 71 d7 b5 31 4e d5 15 71 a6 4e 08 e4 1d c1 fc 31 4b 28 70 73 b4 67 e0 d3 a0 a0 f5 e0 fb 8a 37 96 c3 e4 56 3d 46 8d 22 2c b9 5d e0 1f 91 4d 88 2c d8 da 08 f9 15 22 b9 53 f7 78 ef 5d e4 90 d9 2c 4a f5 06 a2 95 12 ac 41 22 20 76 cd 3a 55 c7 6c ed fe e6 8e ab 82 4f b5 28 17 03 e9 fe b5 57 2b 2d 54 20 c1 47 a6 85 50 1e 86 96 Data Ascii: $c$rSI?JveQ#DR7s\c'Q4Du{Td2XQ3~?JHHr~}haIP<T[\MG~W*$C==$zx&,Pq1NqN1K(psg7V=F",]M,"Sx],JA" v:UlO(W+-T GP
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 91 18 19 c7 26 89 8e a2 96 2a c7 27 8a 21 56 1e f5 5b 0e c3 92 84 90 49 02 94 0a 07 19 a2 ae 3a d1 c7 bd 2e c6 07 00 63 e9 43 d3 e2 93 04 8e bc 8a 30 73 f5 15 37 20 6c 7d 68 42 d7 06 cd 1c 1f 8a 9b 90 ec 76 a2 e0 d2 99 14 3d 6a 59 04 79 ae 00 d1 f1 9a 10 33 52 f6 05 1d 8a 36 da 11 47 15 18 68 2e da 1d b4 7a 1a 16 40 a1 68 d8 a1 c5 0d 0b 61 e4 0f c2 87 15 d4 35 2c 94 76 28 6b a8 d5 56 40 00 a3 57 57 50 6c 27 57 50 d7 54 b2 50 15 d4 34 15 11 18 5c 50 11 47 ae a2 01 3c 50 52 98 cd 01 15 2c 81 28 b8 a3 e2 bb 15 6b 25 09 11 8a 0a 56 83 14 6c 94 24 46 68 b8 34 ae d3 40 45 1b 2b 49 89 60 d0 11 4a e2 89 8a 29 d9 28 26 2b b1 46 34 42 68 95 e0 65 7b 7b 1d 94 41 98 65 98 e1 17 dc 8f f4 aa 75 e6 af 7f 28 60 b7 1b 10 f0 42 0c 11 f8 f3 4e 7c 43 24 82 f5 41 fb a6 31 b3 Data Ascii: &*'!V[I:.cC0s7 l}hBv=jYy3R6Gh.z@ha5,v(kV@WWPl'WPTP4\PG<PR,(k%Vl$Fh4@E+I`J)(&+F4Bhe{{Aeu(`BN\|C$A1
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 40 78 a0 63 91 8a 89 6e 1b 00 c9 46 56 c8 cd 36 22 8e bc 71 9a bb 8a a2 8a 4e f7 17 26 88 4d 10 9c 51 73 41 44 2e 42 99 a2 93 44 cd 06 6a d4 55 c8 31 39 a0 a0 c8 a2 96 a3 40 b0 c4 d4 76 a9 6c f7 ba 7d dd ba 12 1a 48 c8 18 c6 72 39 03 f1 e9 4f 09 a6 1a 8e a3 0e 9b 6b 25 c4 a4 1c 70 8b dd 98 f4 14 cc 71 9b c9 0d 0a e7 6a 97 b8 bc 8e 0b 1c f5 3a 8d 3b f8 31 b2 1d 1c a3 c4 03 29 20 8e bc 8a 16 6e 3f cb 14 04 b1 91 9f 91 b8 96 c0 e8 33 4a 36 70 3f d4 57 b6 d3 b4 6d 1e 4b 5d 6a a1 b0 ff 00 ed 8a 59 17 27 ee 60 0a 15 50 7f 87 ad 39 54 5e 98 20 50 94 52 2d 19 36 02 22 9c 70 71 db 06 9f 45 12 9c fa 8f e3 45 8a 35 c6 01 fd 29 f4 71 13 8c 73 f8 d6 3c 94 8d 58 e4 d9 cb 6a 48 ea 09 a9 3d 26 c9 85 ca ee 56 c2 fa be 38 a4 55 08 5e 54 e6 a6 b4 f5 65 49 18 1e 78 19 fa 57 Data Ascii: @xcnFV6"qN&MQsAD.BDjU19@vl}Hr9Ok%pqj:;1) n?3J6p?WmK]jY'`P9T^ PR-6"pqEE5)qs<XjH=&V8U^TeIxW
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: f7 15 25 ae d8 0b bb 6f b4 44 d9 96 15 2c 3d d9 3b 8e 3d ba d5 6e d6 43 85 c5 76 61 95 67 c2 9f fb 96 d2 f9 39 53 c4 f0 e5 6b fd af 75 f0 5a 12 4e 29 4d f5 17 1c 9f 34 e4 3f 03 ad 67 94 55 8e 4f 61 c9 7a 32 49 83 8e c6 9a 6e cf bd 0e ea 89 27 b0 1d f6 24 43 73 9c 80 3d ea e9 6d 0c 76 f0 2c 68 c4 8e b9 3d c9 aa 24 33 05 65 38 c9 52 0e 0f c7 d6 af 31 49 e6 22 3e 30 18 03 8f ad 73 7a f5 25 f4 d7 6d cd dd 13 4d cf ce c3 a5 a3 9e 94 45 a3 9e 95 cb 7c 9d 3e c1 90 d2 a1 a9 b2 9a 38 34 25 1b 61 52 a4 39 04 51 b7 53 70 73 4a e4 0a 5b 54 31 3b 14 dd 44 2d 8a 4c b5 14 9f c6 8a 88 1b a0 0d 17 bd 76 6b be 6a fc 14 60 b7 14 51 40 c6 80 9c 0a 29 01 bd c5 4a d2 2c 00 a1 12 e0 72 69 31 20 2d 45 29 11 b4 01 35 4d d4 2e 0c d7 32 9c f0 09 55 fa 0a b6 5c 36 03 10 7b 55 11 db Data Ascii: %oD,=;=nCvag9SkuZN)M4?gUOaz2In'$Cs=mv,h=$3e8R1I">0sz%mME\|>84%aR9QSpsJ[T1;D-Lvkj`Q@)J,ri1 -E)5M.2U\6{U
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 4b 76 11 8f 51 de 99 c9 9e 48 a7 6d ef 8f fb 14 83 72 0f 06 9b 19 51 46 ad 13 3a 04 21 bc d9 f3 ea 0e 10 71 f1 cd 59 78 07 03 ad 46 69 56 ed 69 68 37 90 7c c3 e6 28 1d b7 01 52 01 d4 f3 fd eb 91 d4 4f 5e 59 bb b5 c2 fb 1d 5c 11 d1 8e 29 aa 62 85 5b 19 cd 32 62 c0 e4 e0 fe 14 e9 a4 38 00 91 4d ce 64 6e 29 0b 6e 47 34 b8 45 57 c4 f0 9f 2e da e4 1c 6d 26 36 c7 b1 e4 55 3f cc 6e 9b 86 7b 02 2a c5 e2 2d 57 ce 79 2c 61 18 8a 37 f5 bf 5d ec bf d8 03 55 86 e4 f6 cf 5f ce bb 9d 2e b8 e0 8a 92 af 1f 0c e5 67 d2 f2 c9 c7 ef f2 87 d6 52 94 b8 42 e8 b8 19 c9 06 ac 2e e1 a2 60 03 85 23 9c 1c 7e a3 a0 f7 f8 aa ad b4 37 4d 32 49 04 fe 50 46 05 c8 e7 70 fe 5a b0 bb e6 29 49 e7 d0 df d8 d2 f3 d3 9a df 72 f8 7f 4b 2b 3a 5d cb 37 da b3 32 36 d9 36 a9 50 40 da a3 03 19 f8 a9 Data Ascii: KvQHmrQF:!qYxFiVih7\|(RO^Y\)b[2b8Mdn)nG4EW.m&6U?n{*-Wy,a7]U_.gRB.`#~7M2IPFpZ)IrK+:]7266P@
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: c7 ae 53 8a 6f 66 d2 fc 86 6e 2a 2d d6 e9 59 98 c8 0b 33 3e 7e f1 27 f3 a4 58 63 07 e2 a5 16 00 ee 88 7a 16 c7 1f 34 ff 00 64 2a 1a 24 66 66 8f 86 c0 c9 19 e4 67 15 dd 79 54 69 55 ff 00 d1 c9 58 dc b7 23 b4 d4 26 39 c0 5c 8c 8e 7d b8 a7 05 5f cb 98 05 c6 11 b9 07 e2 a2 75 5d 24 a4 f0 dd cd 75 f6 28 1d 32 d2 48 4a b3 ed e8 12 30 72 df a0 a9 6d 3f 5b 0f a7 ce 2c a2 7d d1 13 18 b9 94 83 34 8c 47 04 63 85 3e c0 64 fc d2 72 5b 4a 70 f5 5d 5f 64 be 46 c1 25 e9 96 d5 f9 65 6b 49 d2 9e da dd e5 d4 a5 36 91 b3 6e 58 ca e6 67 18 ea 13 b0 f9 6c 0a b8 58 dc 43 67 21 58 21 10 04 43 24 ac 4e e9 56 31 fc ed d9 9b a0 40 00 e7 35 4b d3 25 6b 5b 66 77 90 49 a8 19 18 c8 58 ee 30 b1 fe 72 7a cb ff 00 e3 de a5 2e d8 59 58 c7 68 5b f7 f7 1b 66 b8 c1 e7 69 e5 14 fe 7b 8d 0c d1 Data Ascii: Sofn-Y3>~'Xcz4d$ffgyTiUX#&9\}_u]$u(2HJ0rm?[,}4Gc>dr[Jp]_dF%ekI6nXglXCg!X!C$NV1@5K%k[fwIX0rz.YXh[fi{
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 58 36 78 6c d2 f0 38 93 71 40 ec 07 b0 e9 9a 4a e8 5c 90 a3 ec b2 85 3c fd dc 93 8f ed 56 96 4d 4f 4f 1f 2c 11 86 95 ab 9f 84 46 0d 3a e6 75 47 13 48 80 8c 85 40 32 33 f2 69 e2 a5 f5 8d b4 a2 3b 96 62 14 91 e7 11 26 08 fa 0f d2 a4 a1 4b c8 e0 cb 5a 00 71 90 4c aa a3 e3 82 72 28 81 ed ee 6d 1d 9a f2 14 24 15 75 52 64 da c3 a8 c8 03 34 b9 66 6d d3 4a 51 4d 70 af f8 19 1c 69 2b 56 a5 5d dd 19 a5 c7 8b 35 e8 2e 95 24 9a 19 50 c8 14 a9 80 28 c1 fa 73 fa d5 92 e6 f5 ee e2 f2 58 ae 37 64 e0 60 f1 4c 2f 3c 33 63 e5 1b bb 8d 49 a1 2a e9 b0 3c 44 03 b8 f0 5b 92 40 f9 23 a7 34 e2 ea 35 b7 9b 63 ba e7 1b 80 04 36 41 e8 47 b8 3f 15 be 52 e9 a7 a3 e9 41 29 2b ba 8d 6e 8c a9 67 8e af a9 26 d3 ae 5d ec c1 b4 b0 59 e5 80 23 90 ec f8 e4 e0 03 4f 96 68 21 b8 ba 16 c9 e6 3a Data Ascii: X6xl8q@J\<VMOO,F:uGH@23i;b&KZqLr(m$uRd4fmJQMpi+V]5.$P(sX7d`L/<3cI*<D[@#45c6AG?RA)+ng&]Y#Oh!:
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 6c 07 1b 57 23 24 71 ef da b5 7d c0 73 c9 af 39 d6 e1 96 1c d2 8b e1 ee be e7 6b a5 c8 b2 e2 4d 72 b6 7f 61 ce ec 7b 0a 0f e2 c8 22 90 0f bc e3 6d 1c 36 d3 d6 b1 51 aa ec 5d 8f 04 75 fc 29 89 85 9d f8 c6 3e 4f 3f a5 28 65 60 d8 ce 4d 38 85 8b 1e 5b 20 72 6a c9 b8 2b 2a ea 4c 66 6d d8 74 39 1d 0e 4e 07 eb 47 55 74 1d 01 03 9c 83 9a 9e 55 48 d7 2e 41 6c 64 93 fe 94 1f b9 9d 41 1d fa 1e 87 8a 57 f7 0d f3 1b 5e 4b fd 14 b8 7b 95 ff 00 39 7a 6e 18 3d b0 68 fb 83 f0 1b 38 a3 dd 40 e8 f9 56 ea 70 7f 0a 47 63 8c 73 9a 7a 71 69 34 c5 35 24 e9 80 c3 d5 8d c0 01 d3 9a 10 0a 92 03 67 3f 34 0c 25 04 60 02 0f b8 a5 13 71 e5 b0 31 f1 45 bd 81 5b 85 ce 38 27 e4 d3 90 77 8e bf a5 10 e4 0e 0e 0d 08 76 03 af 3e d5 56 ec b2 d8 5a 2c 2e 73 5d 28 0f fc 42 99 3c cf b8 0d d5 d7 Data Ascii: lW#$q}s9kMra{"m6Q]u)>O?(e`M8[ rj+*Lfmt9NGUtUH.AldAW^K{9zn=h8@VpGcszqi45$g?4%`q1E[8'wv>VZ,.s](B<
2024-04-18 17:16:56 UTC	1379	IN	Data Raw: 77 74 c5 a4 0d 2c 6f 0a 7e e9 93 24 86 8d f8 24 1f 80 3d 8d 69 8e 44 96 fc ff 00 22 e5 1b dd 11 da bc 3f 67 d3 da 6b 75 60 f2 36 f9 62 56 27 7a af 41 86 38 e0 76 14 6b 39 d2 6d 29 59 e4 85 1d a2 3f ff 00 90 b2 92 63 6f cf a7 4f c2 ac ba ae 8f 74 34 e4 f2 1c 4e 02 cb fb bc 7a db af 4c 1e b5 0f 06 8b ac ff 00 85 5b bc 7a 66 a2 a8 63 fb ad 39 dc 30 8d c6 08 e3 9c 73 df af 6a 62 9c 5a 5b ae 45 e9 6b b1 64 f0 82 b2 6a 77 6c ec 87 cb 86 51 fe 47 96 c1 d9 c0 ce 4f c0 fc 6a 7f c4 6b 7b 7d a5 5d 5b 59 2c 6f 2b 3c 5b 44 8b bd 02 ab 8c b3 7c 01 c9 3d aa 27 c3 92 4a f7 72 69 cd 0c a6 69 19 dd 19 e5 12 1f 49 03 60 c7 4e b9 c1 ab ae a9 64 6d b4 6d 42 18 83 c8 e6 12 d2 3c 6d b1 9b 6f 3b 10 f6 1c 7e 35 9b 24 d2 cd 17 de d5 78 1b 08 b7 8d ae db 99 a4 66 da c6 cb ec 56 17 Data Ascii: wt,o~$$=iD"?gku`6bV'zA8vk9m)Y?coOt4NzL[zfc90sjbZ[EkdjwlQGOjk{}][Y,o+<[D\|='JriiI`NdmmB<mo;~5$xfV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
614	192.168.2.4	50543	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1403	OUT	GET /pagead/viewthroughconversion/527644678/?random=1713460614427&cv=11&fst=1713460614427&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	552	IN	Data Raw: 39 61 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ac(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:56 UTC	676	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 69 6c Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wil
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
615	192.168.2.4	50542	63.140.39.65	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	790	OUT	POST /b/ss/lexisnexisrisksolutionsglobalpublicprod/1/JS-2.25.0-LDQM/s34210513928901 HTTP/1.1 Host: analytics.lexisnexisrisk.com Connection: keep-alive Content-Length: 2848 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:56 UTC	2848	OUT	Data Raw: 41 51 42 3d 31 26 6e 64 68 3d 31 26 70 66 3d 31 26 74 3d 31 38 25 32 46 33 25 32 46 32 30 32 34 25 32 30 31 39 25 33 41 31 36 25 33 41 35 35 25 32 30 34 25 32 30 2d 31 32 30 26 6d 69 64 3d 37 32 33 32 31 36 36 36 38 30 30 34 37 33 31 39 33 30 34 32 35 32 35 39 37 32 33 38 32 33 31 38 32 30 34 35 35 37 26 61 61 6d 6c 68 3d 39 26 63 65 3d 55 54 46 2d 38 26 63 64 70 3d 32 26 70 61 67 65 4e 61 6d 65 3d 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 33 41 25 32 30 63 61 73 65 2d 73 74 75 64 79 25 33 41 25 32 30 72 65 63 6f 76 65 72 69 6e 67 2d 61 6e 2d 61 62 64 75 63 74 65 64 2d 63 68 69 6c 64 2d 77 69 74 68 2d 61 63 63 75 72 69 6e 74 2d 74 72 61 78 26 67 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 Data Ascii: AQB=1&ndh=1&pf=1&t=18%2F3%2F2024%2019%3A16%3A55%204%20-120&mid=72321666800473193042525972382318204557&aamlh=9&ce=UTF-8&cdp=2&pageName=insights-resources%3A%20case-study%3A%20recovering-an-abducted-child-with-accurint-trax&g=https%3A%2F%2Frisk.lexisnexis.c
2024-04-18 17:16:56 UTC	640	IN	HTTP/1.1 200 OK access-control-allow-origin: https://risk.lexisnexis.com access-control-allow-credentials: true date: Thu, 18 Apr 2024 17:16:56 GMT expires: Wed, 17 Apr 2024 17:16:56 GMT last-modified: Fri, 19 Apr 2024 17:16:56 GMT pragma: no-cache p3p: CP="This is not a P3P policy" server: jag etag: 3679628655192899584-4618605887242681626 vary: * content-type: image/gif;charset=utf-8 content-length: 43 strict-transport-security: max-age=31536000; includeSubDomains cache-control: no-cache, no-store, max-age=0, no-transform, private x-xss-protection: 1; mode=block x-content-type-options: nosniff connection: close
2024-04-18 17:16:56 UTC	43	IN	Data Raw: 47 49 46 38 39 61 02 00 02 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 02 00 02 00 00 02 02 84 51 00 3b Data Ascii: GIF89a!,Q;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
616	192.168.2.4	50545	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1403	OUT	GET /pagead/viewthroughconversion/936886275/?random=1713460614437&cv=11&fst=1713460614437&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	552	IN	Data Raw: 39 61 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ab(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:56 UTC	675	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 69 6c Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wil
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
617	192.168.2.4	50546	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1403	OUT	GET /pagead/viewthroughconversion/938545461/?random=1713460614506&cv=11&fst=1713460614506&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:56 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:56 UTC	552	IN	Data Raw: 39 61 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ac(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:56 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:56 UTC	676	IN	Data Raw: 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 69 6c Data Ascii: st\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wil
2024-04-18 17:16:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
618	192.168.2.4	50547	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1389	OUT	GET /pagead/1p-user-list/940382430/?random=1713460612487&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqdF4CnA7pb7QP6e3wZ1ppRB3yF2rHTdJZfW4jK8PL4jo-T-5R&random=3919267113&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:57 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:57 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
619	192.168.2.4	50548	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1389	OUT	GET /pagead/1p-user-list/978398205/?random=1713460614308&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqz7SG3mn56wdk6cDq7pULL5B8pemJAq9WuB9KMD7aEynnJF19&random=2656749258&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:56 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:56 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-18 17:16:56 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
620	192.168.2.4	50544	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	2191	OUT	GET /visitor/v200/svrGP?pps=3&siteid=903&ref2=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&tzo=-60&ms=131&optin=disabled&firstPartyCookieDomain=tracking.risk.lexisnexis.com&elqGUID=5D9E5884886A4AD98F78488A8F12F57C HTTP/1.1 Host: tracking.risk.lexisnexis.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/case-study/recovering-an-abducted-child-with-accurint-trax Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AMCVS_FE6E472E5909B11F0A495C1E%40AdobeOrg=1; s_ips=907; AMCV_FE6E472E5909B11F0A495C1E%40AdobeOrg=179643557%7CMCIDTS%7C19832%7CvVersion%7C5.5.0%7CMCMID%7C72321666800473193042525972382318204557%7CMCAAMLH-1714065371%7C9%7CMCAAMB-1714065371%7CRKhpRz8krg2tLO6pguXWp5olkAcUniQYPHaMWWgdJ3xzPWQmdj0y%7CMCOPTOUT-1713467771s%7CNONE%7CMCAID%7CNONE%7CMCSYNCSOP%7C411-19839; s_cc=true; ELOQUA=GUID=5D9E5884886A4AD98F78488A8F12F57C; __q_state_FsU5iFRQMWKZpcF1=eyJ1dWlkIjoiYTQzNTJjMmYtYjc4Ny00MDg0LWI0NjYtNzFhMTdlYjI1NmIxIiwiY29va2llRG9tYWluIjoibGV4aXNuZXhpcy5jb20ifQ==; _gcl_au=1.1.362963686.1713460599; ELQCOUNTRY=RO; s_sq=%5B%5BB%5D%5D; _uetsid=6b268230fda711eea3beb30d97f81af2; _uetvid=6b26b340fda711eea3d3b9f9b9567ff3; s_tp=3627; s_ppv=insights-resources%253A%2520case-study%253A%2520recovering-an-abducted-child-with-accurint-trax%2C25%2C25%2C907%2C1%2C3; gpv_Page=insights-resources%3A%20case-study%3A%20recovering-an-abducted-child-with-accurint-trax; OptanonConsent=isGpcEnabled=0&datestamp=Thu+Apr+18+2024+19%3A16%3A55+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=c4f8bf96-7f9d-4e47-b658-caa0590e3c64&interactionCount=0&isAnonUser=1&landingPath=NotLandingPage&AwaitingReconsent=false&groups=1%3A1%2C2%3A1%2C3%3A1%2C4%3A1
2024-04-18 17:16:57 UTC	609	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Content-Security-Policy: default-src * 'self' data: 'unsafe-inline' 'unsafe-hashes' 'unsafe-eval'; frame-ancestors: 'self' https://. fullstory.com https://. pathfactory.com https://.lookbookhq.com https://. experiencecloud.adobe.com https://*. salesforce.com P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Thu, 18 Apr 2024 17:16:56 GMT Connection: close Content-Length: 49
2024-04-18 17:16:57 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
621	192.168.2.4	50549	104.244.42.69	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1210	OUT	GET /i/adsct?bci=3&eci=2&event_id=7acc5df9-a268-4411-b0bb-47aeec7316f4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ba39b089-ab3a-4bfe-940a-78c2ba0f10bf&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=d055380e-80a1-4357-b9b9-b6938e3c902c
2024-04-18 17:16:57 UTC	393	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:56 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 300f7438d85f78c8 strict-transport-security: max-age=0 x-response-time: 77 x-connection-hash: 2c6d7a67e624b788dbe67e2f96a28176457d94b07a7edef33e90b55522cdec9a connection: close
2024-04-18 17:16:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
622	192.168.2.4	50550	104.244.42.131	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	1231	OUT	GET /i/adsct?bci=3&eci=2&event_id=7acc5df9-a268-4411-b0bb-47aeec7316f4&events=%5B%5B%22pageview%22%2C%7B%7D%5D%5D&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=ba39b089-ab3a-4bfe-940a-78c2ba0f10bf&tw_document_href=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&tw_iframe_status=0&tw_order_quantity=0&tw_sale_amount=0&txn_id=nxysi&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: personalization_id="v1_08LZvPVmzTiUgNRerHTaPQ=="
2024-04-18 17:16:57 UTC	401	IN	HTTP/1.1 200 OK date: Thu, 18 Apr 2024 17:16:56 GMT perf: 7402827104 server: tsa_b content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4dd86e5c5db0a7c5 strict-transport-security: max-age=631138519 x-response-time: 80 x-connection-hash: bfceff62df636016b087a0c75279eef08d8340ebd3890942c0faf1e8e8aa9214 connection: close
2024-04-18 17:16:57 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
623	192.168.2.4	50552	104.18.32.137	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:56 UTC	719	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://risk.lexisnexis.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:57 UTC	370	IN	HTTP/1.1 200 OK Date: Thu, 18 Apr 2024 17:16:57 GMT Content-Type: application/json Content-Length: 59 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87664e387ec406ec-ATL
2024-04-18 17:16:57 UTC	59	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"","stateName":"","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
624	192.168.2.4	50554	74.125.138.154	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	1404	OUT	GET /pagead/viewthroughconversion/1048135065/?random=1713460614626&cv=11&fst=1713460614626&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&hn=www.googleadservices.com&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&pscdl=noapi&auid=362963686.1713460599&fledge=1&data=event%3Dgtag.config&rfmt=3&fmt=4 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUm7LTpYczczNqrxJvemBobgxMLCdUO-EsUJc6CrCKKMYc3sXIkkmBSLld-1
2024-04-18 17:16:57 UTC	703	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 18 Apr 2024 17:16:57 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:57 UTC	552	IN	Data Raw: 39 61 64 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 73 20 3d 20 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 7d 3b 2f 2a 20 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 20 2a 2f 20 76 61 72 20 66 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 76 61 72 20 67 2c 6b 3b 61 3a 7b 66 6f 72 28 76 61 72 20 6c 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 70 3d 66 2c 71 3d 30 3b 71 3c 6c 2e 6c 65 6e 67 74 68 3b 71 2b 2b 29 69 66 28 70 3d 70 5b 6c 5b 71 5d 5d 2c 6e 75 6c 6c 3d 3d 70 29 7b 6b 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 6b 3d 70 7d 76 61 72 20 Data Ascii: 9ad(function(){var s = {};(function(){var e={};/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var f=this\|\|self;var g,k;a:{for(var l=["CLOSURE_FLAGS"],p=f,q=0;q<l.length;q++)if(p=p[l[q]],null==p){k=null;break a}k=p}var
2024-04-18 17:16:57 UTC	1255	IN	Data Raw: 74 26 26 30 3c 74 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3a 21 31 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 29 7b 72 65 74 75 72 6e 20 79 28 29 3f 77 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 78 28 22 43 68 72 6f 6d 65 22 29 7c 7c 78 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 78 28 22 53 69 6c 6b 22 29 7d 3b 21 78 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 7a 28 29 3b 7a 28 29 3b 21 78 28 22 53 61 66 61 72 69 22 29 7c 7c 7a 28 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 79 28 29 3f 30 3a 78 28 22 45 64 67 65 22 29 29 7c 7c 28 79 28 29 3f 77 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 78 28 22 45 64 67 2f 22 29 Data Ascii: t&&0<t.brands.length:!1}function z(){return y()?w("Chromium"):(x("Chrome")\|\|x("CriOS"))&&!(y()?0:x("Edge"))\|\|x("Silk")};!x("Android")\|\|z();z();!x("Safari")\|\|z()\|\|(y()?0:x("Coast"))\|\|(y()?0:x("Opera"))\|\|(y()?0:x("Edge"))\|\|(y()?w("Microsoft Edge"):x("Edg/")
2024-04-18 17:16:57 UTC	677	IN	Data Raw: 66 73 74 5c 78 33 64 31 37 31 33 34 35 39 36 30 30 30 30 30 5c 78 32 36 62 67 5c 78 33 64 66 66 66 66 66 66 5c 78 32 36 67 75 69 64 5c 78 33 64 4f 4e 5c 78 32 36 61 73 79 6e 63 5c 78 33 64 31 5c 78 32 36 67 74 6d 5c 78 33 64 34 35 62 65 34 34 66 30 76 38 39 39 38 37 37 38 36 36 7a 61 32 30 30 5c 78 32 36 67 63 64 5c 78 33 64 31 33 6c 33 6c 33 6c 33 6c 31 5c 78 32 36 64 6d 61 5c 78 33 64 30 5c 78 32 36 75 5f 77 5c 78 33 64 31 32 38 30 5c 78 32 36 75 5f 68 5c 78 33 64 31 30 32 34 5c 78 32 36 75 72 6c 5c 78 33 64 68 74 74 70 73 25 33 41 25 32 46 25 32 46 72 69 73 6b 2e 6c 65 78 69 73 6e 65 78 69 73 2e 63 6f 6d 25 32 46 69 6e 73 69 67 68 74 73 2d 72 65 73 6f 75 72 63 65 73 25 32 46 77 68 69 74 65 2d 70 61 70 65 72 25 32 46 63 6f 6d 62 61 74 69 6e 67 2d 77 69 Data Ascii: fst\x3d1713459600000\x26bg\x3dffffff\x26guid\x3dON\x26async\x3d1\x26gtm\x3d45be44f0v899877866za200\x26gcd\x3d13l3l3l3l1\x26dma\x3d0\x26u_w\x3d1280\x26u_h\x3d1024\x26url\x3dhttps%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wi
2024-04-18 17:16:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
625	192.168.2.4	50555	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	894	OUT	GET /recaptcha/api2/bframe?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&k=6LdaMy4UAAAAAEhyfg84_kojeR2PyeHv76zNOeko HTTP/1.1 Host: www.recaptcha.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-18 17:16:57 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 18 Apr 2024 17:16:57 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-kptkvNjvV84uvDrjjL6wMQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-18 17:16:57 UTC	364	IN	Data Raw: 31 64 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d17<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-18 17:16:57 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-18 17:16:57 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-18 17:16:57 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-18 17:16:57 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-18 17:16:57 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-18 17:16:57 UTC	816	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6b 70 74 6b 76 4e 6a 76 56 38 34 75 76 44 72 6a 6a 4c 36 77 4d 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 72 65 63 61 70 74 63 68 61 Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="kptkvNjvV84uvDrjjL6wMQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.recaptcha
2024-04-18 17:16:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
626	192.168.2.4	50557	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	990	OUT	GET /pixel/62aa2faf5c2d39008ef77315 HTTP/1.1 Host: ws.zoominfo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: visitorId=3f6bda6cf3e5f73312566ef50bd8c1dc3cb3b0ad2ef1afa8f2dade14ef3c9772; __cf_bm=nttOC2Ohlq.M4.foR4WqG4oVdAUABOOcdM8QAxUSjUk-1713460573-1.0.1.1-yoPxVE4.zkoZukgjntOo7u7Y9T4glwCSysbKmco.RbDEJ36B3EcLsz578790CMTIjiZFSK6O4DXHXIgJEjyUCQ; _cfuvid=V23QHOodbW6qgTNkCrkq7aGXG48Oa8nqaNHmnn.UXRw-1713460573305-0.0.1.1-604800000

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
627	192.168.2.4	50558	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	865	OUT	GET /cable?wv=9&token=FsU5iFRQMWKZpcF1&vu=a4352c2f-b787-4084-b466-71a17eb256b1&wu=86b24b0d-32ad-416b-800d-4a13c3205592&ca=2024-04-18T17%3A16%3A53.382Z&tz=Europe%2FZurich&bis=5&referrer=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fcase-study&pv=1&fv=2024-04-18-740ab68ad5&iml=false&ic=false HTTP/1.1 Host: ws.qualified.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://risk.lexisnexis.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: Nz9BQeOiifh78/Vm95O2zA== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits Sec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
628	192.168.2.4	50560	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	1390	OUT	GET /pagead/1p-user-list/10896111711/?random=1713460614350&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtq5hen_kQiECTfyBGImVxGq-JhE-h5XxCkXhn-cKNpuKv5TSY0&random=421115011&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
629	192.168.2.4	50561	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	1389	OUT	GET /pagead/1p-user-list/938539671/?random=1713460614384&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqf5lnHo5PepAWlM5aHm_Ty8XrIrXqAT7DWYBV2Q7rd6T1Bkd1&random=1708428015&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
630	192.168.2.4	50562	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	1391	OUT	GET /pagead/1p-user-list/10827142419/?random=1713460614404&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqGOzFlQlvQ2dh2puR9YcDDSD4WlkcddH4ZDdcPit2FdmDSAwY&random=2613618323&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
631	192.168.2.4	50563	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-18 17:16:57 UTC	1389	OUT	GET /pagead/1p-user-list/527644678/?random=1713460614427&cv=11&fst=1713459600000&bg=ffffff&guid=ON&async=1&gtm=45be44f0v899877866za200&gcd=13l3l3l3l1&dma=0&u_w=1280&u_h=1024&url=https%3A%2F%2Frisk.lexisnexis.com%2Finsights-resources%2Fwhite-paper%2Fcombating-wildlife-trafficking%3Fintcmp%3Dushp.leadcarousel.1.illegal-wildlife-tracking&ref=https%3A%2F%2Frisk.lexisnexis.com%2F&frm=0&tiba=Combating%20Wildlife%20Trafficking%20%7C%20LexisNexis%20Risk%20Solutions&npa=0&data=event%3Dgtag.config&fmt=3&is_vtc=1&cid=CAQSKQB7FLtqF-1_r5OOfR1dl1E4jxQjLWYy5oAdF7VyBuV8CktM0vxqQljO&random=1548083163&rmt_tld=0&ipr=y HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://risk.lexisnexis.com/insights-resources/white-paper/combating-wildlife-trafficking?intcmp=ushp.leadcarousel.1.illegal-wildlife-tracking Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
632	192.168.2.4	50564	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
633	192.168.2.4	50565	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
634	192.168.2.4	50566	64.233.185.94	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
635	192.168.2.4	50567	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
636	192.168.2.4	50570	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
637	192.168.2.4	50573	104.16.118.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
638	192.168.2.4	50572	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
639	192.168.2.4	50571	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
640	192.168.2.4	50574	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
641	192.168.2.4	50576	104.244.42.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
642	192.168.2.4	50577	104.244.42.3	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
643	192.168.2.4	50583	151.101.194.133	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
644	192.168.2.4	50582	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
645	192.168.2.4	50580	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
646	192.168.2.4	50579	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
647	192.168.2.4	50584	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
648	192.168.2.4	50578	34.199.102.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
649	192.168.2.4	50585	142.250.105.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
650	192.168.2.4	50581	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
651	192.168.2.4	50587	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
652	192.168.2.4	50589	35.174.21.144	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
653	192.168.2.4	50586	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
654	192.168.2.4	50593	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
655	192.168.2.4	50594	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
656	192.168.2.4	50592	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
657	192.168.2.4	50595	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
658	192.168.2.4	50601	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
659	192.168.2.4	50605	104.244.42.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
660	192.168.2.4	50602	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
661	192.168.2.4	50607	172.64.155.119	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
662	192.168.2.4	50599	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
663	192.168.2.4	50606	104.244.42.3	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
664	192.168.2.4	50603	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
665	192.168.2.4	50609	52.5.243.19	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
666	192.168.2.4	50613	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
667	192.168.2.4	50614	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
668	192.168.2.4	50611	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
669	192.168.2.4	50616	63.140.39.65	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
670	192.168.2.4	50612	52.223.40.198	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
671	192.168.2.4	50617	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
672	192.168.2.4	50618	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
673	192.168.2.4	50619	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
674	192.168.2.4	50620	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
675	192.168.2.4	50622	74.125.138.106	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
676	192.168.2.4	50623	34.199.102.5	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
677	192.168.2.4	50625	104.16.117.43	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
678	192.168.2.4	50624	34.228.243.82	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
679	192.168.2.4	50626	34.98.64.218	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
680	192.168.2.4	50627	192.29.70.228	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
681	192.168.2.4	50629	63.140.39.150	443	1900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data

Session ID	Source IP	Source Port	Destination IP	Destination Port
682	192.168.2.4	50635	52.5.243.19	443

Timestamp	Bytes transferred	Direction	Data

Target ID:	0
Start time:	19:15:26
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	19:15:29
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2276 --field-trial-handle=2216,i,13429566003554083046,4485005034574453211,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	19:15:32
Start date:	18/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://auth.us.brightmine.com"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://auth.us.brightmine.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Windows Analysis Report
https://auth.us.brightmine.com