Edit tour

Windows Analysis Report
https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f

Overview

General Information

Sample URL:	https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f
Analysis ID:	1431058
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2968 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5732 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /threshold/xls.aspx HTTP/1.1Origin: https://www.bing.comReferer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/InitAccept: */*Accept-Language: en-CHContent-type: text/xmlX-Agent-DeviceId: 01000A410900D492X-BM-CBT: 1696428841X-BM-DateFormat: dd/MM/yyyyX-BM-DeviceDimensions: 784x984X-BM-DeviceDimensionsLogical: 784x984X-BM-DeviceScale: 100X-BM-DTZ: 120X-BM-Market: CHX-BM-Theme: 000000;0078d7X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66EX-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22X-Device-isOptin: falseX-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A}X-Device-OSSKU: 48X-Device-Touch: falseX-DeviceID: 01000A410900D492X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticshX-MSEdge-ExternalExpType: JointCoordX-PositionerType: DesktopX-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUIX-Search-CortanaAvailableCapabilities: NoneX-Search-SafeSearch: ModerateX-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard TimeX-UserAgeClass: UnknownAccept-Encoding: gzip, deflate, brUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045Host: www.bing.comContent-Length: 2484Connection: Keep-AliveCache-Control: no-cacheCookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713961282968&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF

Source: chromecache_302.2.dr	String found in binary or memory: http://dbj.org/dbj/?p=286
Source: chromecache_302.2.dr	String found in binary or memory: http://dean.edwards.name/weblog/2005/10/add-event/
Source: chromecache_302.2.dr	String found in binary or memory: http://documentcloud.github.com/underscore/
Source: chromecache_302.2.dr	String found in binary or memory: http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/
Source: chromecache_420.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_302.2.dr	String found in binary or memory: http://mixpanel.com/
Source: chromecache_302.2.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/5.1/#sec-12.4
Source: chromecache_355.2.dr, chromecache_245.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_355.2.dr, chromecache_245.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_423.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_416.2.dr	String found in binary or memory: https://app.optimizely.com/js/innie.js
Source: chromecache_355.2.dr, chromecache_245.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_245.2.dr	String found in binary or memory: https://connect.facebook.net/en_US/fbevents.js
Source: chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	String found in binary or memory: https://conversation.api.drift.com
Source: chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	String found in binary or memory: https://customer.api.drift.com
Source: chromecache_302.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials
Source: chromecache_269.2.dr	String found in binary or memory: https://ecom.docusign.com/plans-and-pricing/esignature
Source: chromecache_269.2.dr	String found in binary or memory: https://ecom.docusign.com/plans-and-pricing/real-estate
Source: chromecache_420.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_302.2.dr	String found in binary or memory: https://gist.github.com/1930440
Source: chromecache_420.2.dr	String found in binary or memory: https://github.com/ReactTooltip/react-tooltip
Source: chromecache_302.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js/blob/master/json_parse.js
Source: chromecache_347.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_347.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.2/LICENSE
Source: chromecache_245.2.dr	String found in binary or memory: https://google.com
Source: chromecache_245.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	String found in binary or memory: https://js.driftt.com
Source: chromecache_403.2.dr	String found in binary or memory: https://js.driftt.com/conductor
Source: chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	String found in binary or memory: https://metrics.api.drift.com
Source: chromecache_245.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_355.2.dr, chromecache_245.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_269.2.dr	String found in binary or memory: https://pref.docusign.com/preference-center
Source: chromecache_269.2.dr	String found in binary or memory: https://privacyportal.my.onetrust.com/webform/3506ce9e-320f-4c4a-adbb-5e48afbd595d/f11f42bc-d74a-420
Source: chromecache_245.2.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_245.2.dr	String found in binary or memory: https://s.adroll.com/j/roundtrip.js
Source: chromecache_245.2.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_245.2.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_355.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_355.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_423.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_269.2.dr	String found in binary or memory: https://support.docusign.com/en/articles/How-do-I-cancel-or-downgrade-my-account
Source: chromecache_269.2.dr	String found in binary or memory: https://support.docusign.com/en/guides/ndse-user-guide-manage-your-identity
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/?language=es&langSet=1&transfer=dc
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=de&langSet=1&transfer=dc
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=en_US&transfer=dc
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=fr&langSet=1&transfer=dc
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=it&langSet=1&transfer=dc
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=ja&langSet=1&transfer=dc
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=nl_NL&langSet=1&transfer=dc
Source: chromecache_403.2.dr	String found in binary or memory: https://support.docusign.com/s/contactSupport?language=pt_BR&langSet=1&transfer=dc
Source: chromecache_423.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	String found in binary or memory: https://targeting.api.drift.com
Source: chromecache_355.2.dr, chromecache_245.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/ai/innovation-principles
Source: chromecache_269.2.dr, chromecache_308.2.dr, chromecache_247.2.dr	String found in binary or memory: https://www.docusign.com/company/cookie-policy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/company/privacy-policy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/de-de/unternehmen/datenschutz
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/en-au/privacy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/en-ca/privacy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/en-gb/privacy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/es-es/empresa/politica-de-privacidad
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/es-mx/privacidad
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/fr-fr/politique-de-confidentialite
Source: chromecache_416.2.dr	String found in binary or memory: https://www.docusign.com/free-account
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/ja-jp/privacy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/legal/law-enforcement
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/legal/law-enforcement.
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/nl-nl/privacy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/privacy
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#1
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#11
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#3
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#5
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/privacy/#8
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/pt-br/privacidade
Source: chromecache_416.2.dr	String found in binary or memory: https://www.docusign.com/trial/free/brand1
Source: chromecache_416.2.dr	String found in binary or memory: https://www.docusign.com/trial/free/signup1
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/trust/privacy/bcrc-csb-code
Source: chromecache_269.2.dr	String found in binary or memory: https://www.docusign.com/trust/privacy/bcrp-privacy-code
Source: chromecache_245.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_423.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_423.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_423.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_245.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_423.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_245.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_355.2.dr, chromecache_245.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_423.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_269.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_269.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-NXX2M47
Source: chromecache_355.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_355.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49993
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50117
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50230
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50231
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50288 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50242
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50244
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50244 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50251 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50148 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50189
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50074
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50252 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 50136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50252
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50251
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50135

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@23/395@168/52

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5732 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5732 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://s.company-target.com/s/sync?exc=lr	0%	URL Reputation	safe
http://dbj.org/dbj/?p=286	0%	URL Reputation	safe
https://bootstrap.driftapi.com/widget_bootstrap	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297oK2PbHebak6yhb9aSDTXntf_qExefZWv5WZyr9HktTA	0%	Avira URL Cloud	safe
https://attr.ml-api.io/?domain=docusign.com&pId=402488676481365330	0%	Avira URL Cloud	safe
https://api.company-target.com/api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign	0%	Avira URL Cloud	safe
https://s.ml-attr.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID	0%	Avira URL Cloud	safe
https://s.ml-attr.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3orhvfyxudxxq.cloudfront.net	18.65.25.53	true	false	high
s.ml-attr.com.pxlsrv.net	68.67.153.60	true	false	unknown
afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	50.16.7.188	true	false	high
segments.company-target.com	216.137.39.63	true	false	unknown
ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	44.207.238.46	true	false	high
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
platform.twitter.map.fastly.net	146.75.92.157	true	false	unknown
stats.g.doubleclick.net	142.250.101.157	true	false	high
dl7g9llrghqi1.cloudfront.net	18.65.25.102	true	false	high
scontent.xx.fbcdn.net	31.13.70.7	true	false	high
tag.demandbase.com	108.139.10.26	true	false	high
t.co	104.244.42.69	true	false	high
www.google.com	142.250.141.106	true	false	high
id.rlcdn.com	35.244.154.8	true	false	high
tag-logger.demandbase.com	18.239.199.124	true	false	high
d2qlomkzr3gd97.cloudfront.net	18.244.214.96	true	false	high
logx.optimizely.com	34.111.140.246	true	false	high
p01k.hs.eloqua.com	192.29.14.118	true	false	high
star-mini.c10r.facebook.com	31.13.70.36	true	false	high
s.twitter.com	104.244.42.195	true	false	high
edge.fullstory.com	35.201.112.186	true	false	high
arya-1323461286.us-west-2.elb.amazonaws.com	35.162.217.246	true	false	high
docusign.netlifyglobalcdn.com	54.67.4.46	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
rs.fullstory.com	35.186.194.58	true	false	high
googleads.g.doubleclick.net	142.251.2.156	true	false	high
dsum-sec.casalemedia.com	104.18.36.155	true	false	high
d1nie5ipy0d64w.cloudfront.net	216.137.39.52	true	false	high
api.company-target.com	18.154.144.129	true	false	unknown
analytics.google.com	142.250.141.138	true	false	high
api.mixpanel.com	35.186.241.51	true	false	high
tags.srv.stackadapt.com	3.225.21.46	true	false	high
geo-1040374038.us-west-2.elb.amazonaws.com	35.81.127.23	true	false	high
partners-alb-1113315349.us-east-1.elb.amazonaws.com	34.233.102.171	true	false	high
ib.anycast.adnxs.com	104.254.151.60	true	false	high
cdn.cookielaw.org	104.19.178.52	true	false	high
geolocation.onetrust.com	172.64.155.119	true	false	high
static.ads-twitter.com	unknown	unknown	false	unknown
metrics.api.drift.com	unknown	unknown	false	high
track.docusign.com	unknown	unknown	false	high
secure.adnxs.com	unknown	unknown	false	high
js.driftt.com	unknown	unknown	false	high
eu.docusign.net	unknown	unknown	false	high
bootstrap.driftapi.com	unknown	unknown	false	unknown
conversation.api.drift.com	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	unknown
geo.docusign.com	unknown	unknown	false	high
chat.docusign.net	unknown	unknown	false	high
img.en25.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
images.ctfassets.net	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
www.docusign.com	unknown	unknown	false	high
cdn.optimizely.com	unknown	unknown	false	high
a.docusign.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	unknown
attr.ml-api.io	unknown	unknown	false	unknown
customer.api.drift.com	unknown	unknown	false	high
event.api.drift.com	unknown	unknown	false	high
47616-16.chat.api.drift.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
log.api.drift.com	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
s.ml-attr.com	unknown	unknown	false	unknown
targeting.api.drift.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
docucdn-a.akamaihd.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=7&ClientTime=1713961359094&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=5&ClientTime=1713961364880&PageStart=1713961356089&PrevBundleTime=1713961362539&SkipResponseBody=true	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961350864&PageStart=1713961346738&PrevBundleTime=1713961349958&IsNewSession=true&SkipResponseBody=true	false		high
https://js.driftt.com/core/assets/css/28.812d5a7c.chunk.css	false		high
https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1	false		high
https://js.driftt.com/core/assets/js/16.9ef4a519.chunk.js	false		high
https://geo.docusign.com/country	false		high
https://47616-16.chat.api.drift.com/ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPfiDhCPAWIAAVGA._747cUV2B9rtMigh7-bkZmx-j7rp-CNJywL9Tqj-f2c&remote_ip=18.232.245.220&vsn=2.0.0	false		high
https://images.ctfassets.net/0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png	false		high
https://js.driftt.com/core/assets/js/28.caa75eae.chunk.js	false		high
about:blank	false	Avira URL Cloud: safe	low
https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242	false		high
https://chat.docusign.net/_next/static/PFxQpRcdah7Fp208MVJfR/_buildManifest.js	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=2&ClientTime=1713961375538&PageStart=1713961370476&PrevBundleTime=1713961374014&LastActivity=747&ContentEncoding=gzip	false		high
https://js.driftt.com/core/assets/js/runtime~main.58de437c.js	false		high
https://a.docusign.com/f	false		high
https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js	false		high
https://eu.docusign.net/Signing/?ti=390d35cb143942b7938b8e8b7c81f40c	false		high
https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961354696	false		high
https://js.driftt.com/core/assets/js/8.10f90e75.chunk.js	false		high
https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=3&ClientTime=1713961364853&PageStart=1713961356089&PrevBundleTime=1713961362539&SkipResponseBody=true	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961354341&PageStart=1713961346738&PrevBundleTime=1713961352559&IsNewSession=true&SkipResponseBody=true	false		high
https://attr.ml-api.io/?domain=docusign.com&pId=402488676481365330	false	Avira URL Cloud: safe	unknown
https://bootstrap.driftapi.com/widget_bootstrap	false	URL Reputation: safe	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=7&ClientTime=1713961361866&PageStart=1713961346738&PrevBundleTime=1713961359852&LastActivity=2949&IsNewSession=true&ContentEncoding=gzip	false		high
https://t.co/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=5eca3ebf-b54e-4636-a6d2-13859a89dbb0&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=2c5cb771-da73-4f98-91bf-03da634f79df&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30	false		high
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ba09147f-f683-4645-8fd1-29d73113864b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=d762e230-38b8-4739-8e24-1785b9e4c192&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30	false		high
https://edge.fullstory.com/datalayer/v4/latest.js	false		high
https://api.company-target.com/api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign	false	Avira URL Cloud: safe	unknown
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=866850028.1713961341&jid=1575686851&_u=YCDACEAABAAAACgAI~&z=1853450934	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=7&ClientTime=1713961358918&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true	false		high
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=5eca3ebf-b54e-4636-a6d2-13859a89dbb0&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=2c5cb771-da73-4f98-91bf-03da634f79df&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30	false		high
https://rs.fullstory.com/rec/page	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961355121&PageStart=1713961346738&PrevBundleTime=1713961352559&IsNewSession=true	false		high
https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297oK2PbHebak6yhb9aSDTXntf_qExefZWv5WZyr9HktTA	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=866850028.1713961341&jid=1575686851&gjid=673361439&_gid=1110259529.1713961342&_u=YCDACEAABAAAACgAI~&z=490274514	false		high
https://chat.docusign.net/_next/static/chunks/webpack-a0deeec5c85c92d3.js	false		high
https://www.facebook.com/tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961347304&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961341208&coo=false&tm=1&rqm=GET	false		high
https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253ddocusign.com%2526pId%253d%2524UID	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961354343&PageStart=1713961346738&PrevBundleTime=1713961352559&LastActivity=5337&IsNewSession=true&ContentEncoding=gzip	false		high
https://tag-logger.demandbase.com/bg9s?x-amz-cf-id=CNkC30MmCEymIBRSpXksEuNedl3gfP5wLvbEDeCgK34V2MKFKeuLHQ==&api-version=v2	false		high
https://log.api.drift.com/log	false		high
https://track.docusign.com/visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=188&optin=disabled&elq1pcGUID=D32BF32183754911A4896AC2751429EC	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime=1713961356079&PageStart=1713961346738&PrevBundleTime=1713961356265&IsNewSession=true&DeltaT=1738	false		high
https://s.ml-attr.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=3&ClientTime=1713961380536&PageStart=1713961370476&PrevBundleTime=1713961376482&LastActivity=4260&ContentEncoding=gzip	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=6&ClientTime=1713961358927&PageStart=1713961346738&PrevBundleTime=1713961357742&LastActivity=0&IsNewSession=true&ContentEncoding=gzip	false		high
https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1	false		high
https://tags.srv.stackadapt.com/events.js	false		high
https://www.docusign.com/privacy	false		high
https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcCenter.json	false		high
https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961371016	false		high
https://www.google.com/pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=732472092.1713961369&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340	false		high
https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=732472092.1713961369&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340	false		high
https://logx.optimizely.com/v1/events	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=6&ClientTime=1713961359093&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true	false		high
https://metrics.api.drift.com/monitoring/metrics/event3/bulk	false		high
https://rs.fullstory.com/rec/integrations?OrgId=12BP4E	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime=1713961354342&PageStart=1713961346738&PrevBundleTime=1713961352559&IsNewSession=true&SkipResponseBody=true	false		high
https://www.facebook.com/privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961347304&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961341208&coo=false&tm=1&rqm=FGET	false		high
https://js.driftt.com/core/assets/js/27.42a90a1f.chunk.js	false		high
https://analytics.twitter.com/1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=743a8742-115d-4d01-947e-bb54db271770&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=4d75221e-04d7-422c-acb3-428f9fc3823d&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=9&ClientTime=1713961376387&PageStart=1713961346738&PrevBundleTime=1713961368130&LastActivity=17462&IsNewSession=true&ContentEncoding=gzip	false		high
https://images.ctfassets.net/0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png	false		high
https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=6&ClientTime=1713961377939&PageStart=1713961356089&PrevBundleTime=1713961372813&LastActivity=14530&ContentEncoding=gzip	false		high
https://js.driftt.com/core/assets/js/main~493df0b3.9e1d5232.chunk.js	false		high
https://js.driftt.com/core/assets/js/24.f2a14bf3.chunk.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_355.2.dr	false		high
https://github.com/zloirock/core-js	chromecache_347.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_423.2.dr	false		high
https://px.ads.linkedin.com/collect?	chromecache_245.2.dr	false		high
https://github.com/zloirock/core-js/blob/v3.25.2/LICENSE	chromecache_347.2.dr	false		high
https://metrics.api.drift.com	chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	false		high
https://support.docusign.com/s/contactSupport?language=nl_NL&langSet=1&transfer=dc	chromecache_403.2.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_423.2.dr	false		high
http://dbj.org/dbj/?p=286	chromecache_302.2.dr	false	URL Reputation: safe	unknown
https://www.docusign.com/privacy/#3	chromecache_269.2.dr	false		high
https://www.docusign.com/privacy/#1	chromecache_269.2.dr	false		high
https://www.docusign.com/privacy/#5	chromecache_269.2.dr	false		high
https://ecom.docusign.com/plans-and-pricing/real-estate	chromecache_269.2.dr	false		high
https://www.docusign.com/privacy/#8	chromecache_269.2.dr	false		high
https://support.docusign.com/s/contactSupport?language=en_US&transfer=dc	chromecache_403.2.dr	false		high
https://www.docusign.com/company/cookie-policy	chromecache_269.2.dr, chromecache_308.2.dr, chromecache_247.2.dr	false		high
https://customer.api.drift.com	chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	false		high
https://www.docusign.com/privacy/#11	chromecache_269.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_355.2.dr	false		high
https://www.docusign.com/free-account	chromecache_416.2.dr	false		high
http://hacks.mozilla.org/2009/07/cross-site-xmlhttprequest-with-cors/	chromecache_302.2.dr	false		high
https://github.com/ReactTooltip/react-tooltip	chromecache_420.2.dr	false		high
https://support.docusign.com/s/contactSupport?language=de&langSet=1&transfer=dc	chromecache_403.2.dr	false		high
https://privacyportal.my.onetrust.com/webform/3506ce9e-320f-4c4a-adbb-5e48afbd595d/f11f42bc-d74a-420	chromecache_269.2.dr	false		high
https://www.docusign.com/en-ca/privacy	chromecache_269.2.dr	false		high
https://www.docusign.com/nl-nl/privacy	chromecache_269.2.dr	false		high
https://conversation.api.drift.com	chromecache_444.2.dr, chromecache_359.2.dr, chromecache_342.2.dr, chromecache_324.2.dr, chromecache_404.2.dr, chromecache_343.2.dr	false		high
https://www.docusign.com/ai/innovation-principles	chromecache_269.2.dr	false		high
https://www.docusign.com/legal/law-enforcement.	chromecache_269.2.dr	false		high
https://developer.mozilla.org/en-US/docs/DOM/XMLHttpRequest#withCredentials	chromecache_302.2.dr	false		high
https://www.docusign.com/company/privacy-policy	chromecache_269.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_245.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.186.241.51	api.mixpanel.com	United States	15169	GOOGLEUS	false
18.239.199.12	unknown	United States	16509	AMAZON-02US	false
18.65.25.53	d3orhvfyxudxxq.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
35.186.194.58	rs.fullstory.com	United States	15169	GOOGLEUS	false
18.154.144.129	api.company-target.com	United States	16509	AMAZON-02US	false
35.244.154.8	id.rlcdn.com	United States	15169	GOOGLEUS	false
34.233.102.171	partners-alb-1113315349.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
50.16.7.188	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
142.250.101.157	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.101.155	unknown	United States	15169	GOOGLEUS	false
104.18.32.137	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.141.106	www.google.com	United States	15169	GOOGLEUS	false
142.250.141.103	unknown	United States	15169	GOOGLEUS	false
68.67.153.60	s.ml-attr.com.pxlsrv.net	United States	29990	ASN-APPNEXUS	false
192.29.14.118	p01k.hs.eloqua.com	United States	31898	ORACLE-BMC-31898US	false
142.251.2.156	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
31.13.70.36	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
216.137.39.17	unknown	United States	16509	AMAZON-02US	false
54.67.4.46	docusign.netlifyglobalcdn.com	United States	16509	AMAZON-02US	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
18.65.25.102	dl7g9llrghqi1.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
216.137.39.52	d1nie5ipy0d64w.cloudfront.net	United States	16509	AMAZON-02US	false
54.148.51.66	unknown	United States	16509	AMAZON-02US	false
104.18.36.155	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
18.239.199.124	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false
74.125.137.103	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.244.214.96	d2qlomkzr3gd97.cloudfront.net	United States	16509	AMAZON-02US	false
104.19.177.52	unknown	United States	13335	CLOUDFLARENETUS	false
3.225.21.46	tags.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
216.137.39.63	segments.company-target.com	United States	16509	AMAZON-02US	false
44.207.238.46	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.162.217.246	arya-1323461286.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.81.127.23	geo-1040374038.us-west-2.elb.amazonaws.com	United States	237	MERIT-AS-14US	false
18.154.144.27	unknown	United States	16509	AMAZON-02US	false
54.186.38.246	unknown	United States	16509	AMAZON-02US	false
216.137.39.37	unknown	United States	16509	AMAZON-02US	false
104.254.151.60	ib.anycast.adnxs.com	United States	29990	ASN-APPNEXUS	false
104.19.178.52	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
104.244.42.69	t.co	United States	13414	TWITTERUS	false
34.193.113.164	unknown	United States	14618	AMAZON-AESUS	false
34.111.140.246	logx.optimizely.com	United States	15169	GOOGLEUS	false
104.244.42.195	s.twitter.com	United States	13414	TWITTERUS	false
35.201.112.186	edge.fullstory.com	United States	15169	GOOGLEUS	false
31.13.70.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
146.75.92.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
142.250.141.138	analytics.google.com	United States	15169	GOOGLEUS	false
108.139.10.26	tag.demandbase.com	United States	16509	AMAZON-02US	false
18.244.214.75	unknown	United States	16509	AMAZON-02US	false
3.94.218.138	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431058
Start date and time:	2024-04-24 14:20:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@23/395@168/52
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.docusign.com/company/privacy-policy Browse: https://www.docusign.com/company/privacy-policy Browse: https://www.docusign.com/company/privacy-policy

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 74.125.137.94, 142.251.2.102, 142.251.2.138, 142.251.2.139, 142.251.2.113, 142.251.2.100, 142.251.2.101, 142.251.2.84, 34.104.35.123, 185.81.100.27, 184.50.26.64, 184.50.26.59, 74.125.137.95, 13.85.23.86, 199.232.210.172, 142.250.101.95, 142.251.2.95, 192.229.211.108, 13.85.23.206, 142.250.141.95, 151.101.194.133, 151.101.66.133, 151.101.130.133, 151.101.2.133, 20.3.187.198, 23.204.249.168, 142.251.2.97, 23.6.184.46, 184.30.148.208, 184.30.148.215, 216.239.32.178, 216.239.34.178, 216.239.36.178, 216.239.38.178, 20.150.84.228, 13.107.42.14, 13.107.21.237, 204.79.197.237, 8.39.36.141, 8.39.36.142, 142.251.2.94, 23.1.234.24, 23.1.234.57
Excluded domains from analysis (whitelisted): bat-bing-com.dual-a-0034.a-msedge.net, pixel.rubiconproject.net.akadns.net, slscr.update.microsoft.com, blob.dub21prdstr08a.store.core.windows.net, wildcard.en25.com.edgekey.net, clientservices.googleapis.com, a767.dspw65.akamai.net, e5048.dsca.akamaiedge.net, a1737.b.akamai.net, l-0005.l-msedge.net, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, bat.bing.com, update.googleapis.com, e5763.x.akamaiedge.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, www-linkedin-com.l-0005.l-msedge.net, eu.docusign.net.akadns.net, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, www-alv.google-analytics.com, ctldl.windowsupdate.com, optanon.blob.core.windows.net, www.googleapis.com, d.sni.global.fastly.net, docucdn-a.akamaihd.net.edgesuite.net, od.linkedin.edgesuite.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.micros
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 11:21:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9751013409164915
Encrypted:	false
SSDEEP:	48:8OSd4T8kMHxidAKZdA19ehwiZUklqehSy+3:8OxvC1y
MD5:	9109479567C8E6F8661A0C98E3F5F6A2
SHA1:	599CCD6D38A4BCC275A0312441BAD6D99EFC2700
SHA-256:	C5F2AD51F0F545C88D16828661658E277DB061A46817E6B548E23DA2622EEB3D
SHA-512:	5F9276B3BD7C3BC3FA1789C067034E5B56767472B9F874AB4B5D2353AE42A1532CB49BE97BECFB6BE5FAB74697D1DC34167DCF14710211AB49465482348B52C5
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,........A...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............p;l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 11:21:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.98975153516549
Encrypted:	false
SSDEEP:	48:84d4T8kMHxidAKZdA1weh/iZUkAQkqehly+2:8PvY9Q4y
MD5:	3D3F4E9B2AFD7DBE7604014D416E2435
SHA1:	6CC9056488895CA6641C50E47785DBDAB8226C02
SHA-256:	FBE52451DBF62A1C08205FDB67812B72788CA38B1F61B561269D0D857B045BCE
SHA-512:	0943926DCBE210358C9795A0520176C2E5A4C4A3BA75184AE7928D20E705921553AF529DE79B23DFD0E6494BFD86CF397F0994F2265F66F2A55F73BBF91C4168
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....`w..A...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............p;l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0016862073325
Encrypted:	false
SSDEEP:	48:8xdd4T8ksHxidAKZdA14tseh7sFiZUkmgqeh7sry+BX:8xovwnpy
MD5:	DCAB96E6E89B838E64DF8B12A0194571
SHA1:	241BF3C95DC0ACB2EA201F0D5307611CD2601013
SHA-256:	84457DBC0557AF9CE0110FCFA1335C938A3CCF7D45B756874C9CCBD2B6E71050
SHA-512:	70A70EC2468F1CCA09EDD8FFD8BD43D4169E00E368CD780D1EE2E0040BD139798DABC50C5EAB21170811023B034BD6C91D214796618D5B198422D82EE5A646DF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............p;l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 11:21:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9893480901567764
Encrypted:	false
SSDEEP:	48:8Gd4T8kMHxidAKZdA1vehDiZUkwqehRy+R:8FvDTy
MD5:	5778F6C20A0A1557148453172C70FB39
SHA1:	E8717488D67592E21B947C4293E234A3064E5505
SHA-256:	0F1B9421C590EDD4A2B4BAAC0CB1BB2912A25FFDA436D15D68F361B3C4DE48BA
SHA-512:	B2DDB391A45C0309ED8733B6762871A60EBF5E146B3FB01ECDDAEA8E306E735A52FE3156EF53CC8FE72283279EBFE98B54D854D4FE3AC567B83A2FB61A8D85EA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....T...A...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............p;l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 11:21:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9783563900001
Encrypted:	false
SSDEEP:	48:8sd4T8kMHxidAKZdA1hehBiZUk1W1qehfy+C:8TvT9/y
MD5:	05B2BF3D841CEE0DC7BB4DD7B4CCED2C
SHA1:	5C63297814CFD51E75E6E361E29AA6B2165E6741
SHA-256:	6E65ACEE405181706150333AECA4C686FF7B0F2148536515C5D933D3A9724569
SHA-512:	3BF5D5469019AA06BA11E198DA7897B660089ACECC1F29BD89AC4FCBCADE84B1345DECDCD678F7DA38B2B41569F3A7CFEEAC21AFB6320CDA0E2D7F011C205D8C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....]t..A...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............p;l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Apr 24 11:21:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9899939683274734
Encrypted:	false
SSDEEP:	48:8hd4T8kMHxidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbpy+yT+:8cvDT/TbxWOvTbpy7T
MD5:	9D2703C6A6093270DD1C936F26A64682
SHA1:	098936ACDE615D6D8367053C343E0D507538ABDC
SHA-256:	343AE60C5AC8A8E4C0E9339BC8E86190CFEC5D830BD82E83E8DAA80169E1A863
SHA-512:	0B1E2924B1C2342D5042B70123BB31BD54264AD1D928BE8E9CB9FB2A971B1407967F11887D568006080DAB71930F73A4481AFD0B7B40305059EBA7D7C5B710FC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....Y..A...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.b....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.b....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.b....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.b..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.b...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............p;l.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34102)
Category:	downloaded
Size (bytes):	210602
Entropy (8bit):	5.29981192146341
Encrypted:	false
SSDEEP:	3072:4U3+tF7OMb1ibvJh4Aj+AhEJBjxP9UxtMaz5d1ruhpdPQ:4vzkkAj+AABZ9il5XoQ
MD5:	AC382439A1906EC25557036A918F08A6
SHA1:	1403A8B61F54C29FA9A56AE2310F30FFD7BA499E
SHA-256:	C378EDB7D69ADCBBF574853F9FF51988A8873846C97898DAA06C8C23EDC36C46
SHA-512:	0D272511BFBAA88486384EADB574A412FA6F1A18746B8EE4CAD9D9DFD1419F00BA39A47A10DC9B63A47B9885A672270A16033B923A344534520B93EA6CD6F408
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/framework-e9e659db89d286d1.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{1350:function(e,t,n){/*. @license React. * react-dom-server-legacy.browser.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */var r=n(2784);function a(e){for(var t="https://reactjs.org/docs/error-decoder.html?invariant="+e,n=1;n<arguments.length;n++)t+="&args[]="+encodeURIComponent(arguments[n]);return"Minified React error #"+e+"; visit "+t+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var l=Object.prototype.hasOwnProperty,o=/^[:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD][:A-Z_a-z\u00C0-\u00D6\u00D8-\u00F6\u00F8-\u02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5140)
Category:	downloaded
Size (bytes):	67113
Entropy (8bit):	5.332498844099295
Encrypted:	false
SSDEEP:	1536:RJeUwT76HXltMHM9eEqJ1UJnTZ02LKVlEyX:RIT7OX4s9eZYtj8ltX
MD5:	1DFA8D41C76ED2385BF5A96275C03CBC
SHA1:	B2503E20CDE68A5383A6E4408FE5FED9FD52A5C3
SHA-256:	FF9713CB5481FF6598742A350EF32CB3371BAC6EA74D4EE40B3EA899DD60C56F
SHA-512:	079B296AC9585030F17022A3C0B66B9C284B5048C903D6492B9F116044C7F9C752F98B0B76C730BE8A3B3EE3B5F744EED033054C288A93AC711E8D8B8F13400A
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/signals/config/357123711145934?v=2.9.154&r=stable&domain=www.docusign.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	136177
Entropy (8bit):	5.178504502403718
Encrypted:	false
SSDEEP:	1536:8prIg2sdtEyE4aoo/Iy4onqRmn4r4B52zqdiq85fhdsbPvLKaSlMaQLp9jU:AtcqoIzqdiqcsRSlMzY
MD5:	45E9F15CED8CBD83BCC82A5944B39B51
SHA1:	3ED7652897552ED89586170F19F38D05182007AA
SHA-256:	6536407B38F198296F45A08A4B01FB42F6F8138F158F4C75289EF10C53F8E3F4
SHA-512:	4C6A75B62BAE35D489E0AB39580D706EF1821A9F922C9BE18B4948DA4A698D9B644371EFC4A134B53E95407D71313A125BF1FED23CEEF9A3FC0C65CAD4563237
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.olive.js?cs=6967951d2ad3b4b0daf8
Preview:	/! For license information please see signing_iframeless_mobile.olive.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3784],{483788:function(e){e.exports=function(e){function t(i){if(n[i])return n[i].exports;var o=n[i]={exports:{},id:i,loaded:!1};return e[i].call(o.exports,o,o.exports,t),o.loaded=!0,o.exports}var n={};return t.m=e,t.c=n,t.p="/",t(0)}([function(e,t,n){"use strict";n(1),n(2),n(3);var i=n(76);i.keys().forEach((function(e){i(e)}))},function(e,t,n){"use strict";!function(e,t){e.config={closePopoverOnEsc:!0,closePopoverOnClickAnywhere:!0,debug:!1,isAutoInitEnabled:!0},e.version="17.20.0",e.KEYS={tab:9,enter:13,esc:27,left:37,up:38,right:39,down:40},e.l10n={close:"Close",characterLimit:"{{REMAINING}} (maximum {{MAX}} characters)"},e.init=function(e){var t=[],n={add:function(e){return t.push(e),n},run:function(){var e;for(e=0;e<t.length;e++)t[e]();return n},afterLoad:function(){e.config.isAutoInitEnabled&&e.init.run(),e.util.polyfillFl

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (31339), with no line terminators
Category:	downloaded
Size (bytes):	31339
Entropy (8bit):	5.400276740986088
Encrypted:	false
SSDEEP:	192:KaHMD5DU8gZDYLY/j/KA5YotDREoqNF/DA0YttKREtqIpCMk2UOZhWUgeyDjAtLN:K9Ds0YEz5zR+h
MD5:	1E97F00F07B87F701D0BF06259F954E4
SHA1:	0FCEDFBE2C5B8AD22E9D69905A0317D81F4B7380
SHA-256:	FF8F406B684C6674DBD3705D3F6D2CD10B5EEDBC2C67A7773F235D69EF122D04
SHA-512:	7E73388B5152C2DBAC871D2C2EC20EFD3AE71836601D4E885F649C6024C0587A96E96959286B0C6A019FBACBD43BA07A22E39B6865D88957F0AB0D85922ACDE6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/8.ab226b4a.chunk.css
Preview:	.drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.drift-widget-avatar.drift-widget-avatar--small{width:28px;height:28px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-avatar.drift-widget-avatar--medium{width:46px;height:46px;-webkit-box-shadow:none;-moz-box-shadow:none;box-shadow:none}.drift-widget-landingpage-layout .drift-widget-avatar.drift-widget-avatar--small{width:42px;height:42px}@font-face{font-family:Brandon;font-style:normal;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Regular.woff)}@font-face{font-family:Brandon;font-weight:700;src:url(https://js.driftt.com/deploy/assets/static/fonts/BrandonText-Bold.woff)}@font-face{font-family:Lato;font-style:normal;font-weight:400;font-display:swap;src:url(https://js.driftt.com/deploy/ass

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (37942), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	168907
Entropy (8bit):	5.471593773106688
Encrypted:	false
SSDEEP:	1536:bW95pUq+jn+pal8Vip1xbpkYzo31lIRjsOM46WXPrcygsuiPyOESV72VQ3tYI:bznlPp/dkz6jJ76e72Vw+I
MD5:	D3CFD27D7C446BB6990F77270FE22618
SHA1:	968A527F295CEF9D789B3C1DC4B7805AFB948D0E
SHA-256:	A79F2067FCDCF733F15CF6773ADCDEBFC3CC7DDC1E86992DF70A4C76D7FAA743
SHA-512:	8C832B46F85A2EA89421C1F1E05F155D79E65FBDD90922E4AE88FAC8C1ADBC00C5849DED43FC2DE7E51486B8A1AEB4E467BCA40F3AF219D288AF670DD4493395
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2492.js?cs=db236daf727ce4deba4a
Preview:	/! For license information please see signing_iframeless_mobile.2492.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2492],{111328:function(t,e,r){var n=r(492784),i=r(582504),a="EN-US";function o(t){return n.currencies[t.toUpperCase()]\|\|""}function s(t,e){return i.formatNumber(t,i.getNumberFormat(e,n.numberFormats))}e.formatNumber=function(t,e){return s(t,e=e?i.unifyLocale(e):a)},e.formatCurrencyNumber=function(t,e,r,u){r=r?i.unifyLocale(r):a,e=e.toUpperCase();var c={num:s(t,r),sym:o(e),iso:e},l=i.getCurrencyFormat(e,r,n.currencyFormats);return l=u?l[1]:l[0],i.replacePlaceholders(l,c)},e.getSymbol=o},582504:function(t,e){e.unifyLocale=function(t){return t.replace("_","-").toUpperCase()},e.getNumberFormat=function t(e,r){var n=r[e]\|\|r.DEFAULT;if(!n)return{LEAD_SEP:"",GROUP_SEP:"",DECIMAL_SEP:".",DECIMAL_NUM:2};var i=n.split("\|");return 4!==i.length?t("DEFAULT",r):{LEAD_SEP:i[0],GROUP_SEP:i[1],DECIMAL_SEP:i[2],DECIMAL_NUM:parseInt(i[3])}},e.getCu

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (41495), with no line terminators
Category:	downloaded
Size (bytes):	41495
Entropy (8bit):	5.438392841199253
Encrypted:	false
SSDEEP:	384:LOxuPE9oBCBfonCRG8C+zNBwk88ivNcdRtg1jQjzJufN+kDY9IlFCFdtuhiVWVER:KiOmIw5O/w1DYqFCFdIiVpIBHtQFEW
MD5:	A013D30AD611B4379CE2CAA016620CBF
SHA1:	002827DF62207C310DBC2941B0AAAB04D44AB859
SHA-256:	04C07B8B81F862CA7992E57F80E16957CF50B245B2DB8BEABED85F8581BEE0FB
SHA-512:	DFB6AAF41DC71E4C3F8225724566687D4570E0B8087748C1C608D1407721F75957EAC15D8BAF8160C967F17B4AC133723BB9F4A3186DB969874D69ACE803459E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/17.aa20860d.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",VISITOR_PRESENCE:"visitor_presence"}),o=Object.freeze({CHAT:"chat",USER:"user",ORG_PUBLIC:"live",LIVE:"live"}),a=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence"})},"+Zvl":function(e,t,n){"use strict";var r=n("QtlZ"),o=n("ILQF"),a=n("H/qh"),c=["__DRIFT_WIDGET_RECEIVE_CHANNEL","REPLACE_STATE"];t.a=function actionSyncMiddleware(){return function(e){return function(t){return t._foreignDispatch\|\|Object(a.a)(t.type,c)\|\|r.a&&r.a.name&&Object(o.a)({topic:"".concat(r.a.name,":action-dispatch"),message:{action:t}}),e(t)}}}},"0lfv":function(e,t,n){"use strict";n.d(t,"j",function(){return T}),n.d(t,"q",function(){return N}),n.d(t,"g",function(){return forceFocus}),n.d(t,"r",function(){return j}),n.d(t,"s",function(){return I}),n.d(t,"e"

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	7.848241773312019
Encrypted:	false
SSDEEP:	96:LySLYC0Jd+4kjIs94lJFTofWUkyfwVMSUwT:10T+3sbLofWUkyfwVBTT
MD5:	0D26DF8D62B0515D1DBFC983FF628FA5
SHA1:	CC4EEF914638B5574314BD89338D34B4C4016CDB
SHA-256:	82213C7339A1E45DCE1CD6911CE68D652E22244E562F5F67FD5316118EB5BB0C
SHA-512:	A6B902CD8E14B6E355658006A2DBBBE0BE622CD24C86A44980D47918C011BE271503F5E29AAE677C872728C8A3147DE8590B528CE71C70D8A48972CA07A651C4
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png
Preview:	.PNG........IHDR.......T.....Z......,PLTE..............................................................................sss666...uuu...lllEEE...111 ...,,,...XXX.........[[[..................ppp```UUU......\|\|\|......xxx???................NNN.......eeeKKK(((...........bbbQQQ......hhhGGG..................AAA999.........;;;III$$$...ddd........tRNS....[.....ujP.+.{....IDATx...g_.P..q....... 4.0e..%X.QQ......~....b.C.J.B...HBr...'s.v.wo.=.3..{a.z..s..s..-..[...%.7..3.g/l.1..^c.....\{i....s......H..?`..g..E$.A....9@...N.....?.0....D..1. 'g!.>.E..EL..n.....e......".aX...f.`]!..I\...=N_..`.......3.v....E..y.v.....f04#.b.....D$x\|..f.......%.H.............I.T...$.d.....2..,M.eX.X..`n.t.....3~..)9 .)Q..GE...~...mp.a........dkC.+...N...a..A#..1..5......._C.2.Y...IP...X.C..L._3\..P.[.=..)I....`..U..%e...9....K....R;].G.....&Q.G.....e..R..qK.P...j'..8.72..i2}.t.\|T.`.*.....+<...R8.4.r......].m.(.3..H..T.....(....p.C.x..<Wt..h...6.H.P..b...?<..'aO.2.".H

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45529)
Category:	downloaded
Size (bytes):	481304
Entropy (8bit):	5.5616300400321315
Encrypted:	false
SSDEEP:	6144:+fjlGF7qbeKRNQ7VfsheJMNOFq4HDe5LfV9CF3Z6u:+fjlGFKysGhFFFL
MD5:	24579B6373305C33DA9F3D8FB345735A
SHA1:	4237F391BA4E8070349FB74E11D08FC70EE0BCB6
SHA-256:	126C41118392DCCC7080AC2F3C8D328645A7420F81D40626569206F68482FAEB
SHA-512:	49EFE69717D5687955CB560A4C1D71F61D6497F18DD7FCBEDAEE3214EF9EC0E9F3787B3C86CEAEEB009B778F05D2EB61EB16B853B1F9283B86AB232BAB6EB4AE
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-NXX2M47
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. . (function(w,g){w[g]=w[g]\|\|{};. w[g].e=function(s){return eval(s);};})(window,'google_tag_manager');. .(function(){..var data = {."resource": {. "version":"407",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__jsm","vtp_javascript":["template","(function(){return!1})();"]},{"function":"__smm","vtp_setDefaultValue":true,"vtp_input":["macro",1],"vtp_defaultValue":["macro",2],"vtp_map":["list",["map","key","\/25dbafb5-b299-4118-868b-a6a7de82e2f4.html","value",["macro",2]]]},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":false,"vtp_name":"OnetrustActiveGroups"},{"function":"__remm","vtp_setDefaultValue":true,"vtp_input":["macro",4],"vtp_fullMatch":false,"vtp_replaceAfterMatch":false,"vtp_defaultValue":"false","vtp_ignoreCase":true,"vtp_map":["list",["map","key",",C0002,","value","true"]]},{"function":"__

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	97
Entropy (8bit):	4.787114349566797
Encrypted:	false
SSDEEP:	3:k0WYL12AoJTeW6QfpX/W6Qen:UYR2AY6EpXO6h
MD5:	A63B3FF3178BC6BB6B93E0BA67FD0406
SHA1:	455519DED7CB02961EBAE0E5654A3E66E4DBE2CC
SHA-256:	587CEB3B7372C1EC7E1D260EBD92FB648B148632E2CEF0AD87E759B9A25685C7
SHA-512:	3DB96F92FF313A65779E338508311AF064DCCD42991CE475F5EDD17B47D8AFB3F03B02B5CB75DC11D69F9937AE21805659DA0D0F5AE7231AC855117C8DB38D6D
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/7e62994d52a35bab3a33efea7caf3320a22c86de/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set(["\u002F[...page]"]);self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB()

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	71663
Entropy (8bit):	5.438176761243166
Encrypted:	false
SSDEEP:	1536:gIXxlOtJCeX5whYXCkJkzkKIzYcc9uSlYRUMRn7B:XXxlcCrkJkzkIRYOMd7B
MD5:	489B1FF4B0D187650DC5B9899B9FA5B3
SHA1:	9FEFDA89D7E1BE195773CD2F2806A77D5C6A517D
SHA-256:	D7CCD77B205B05362BE85D33D9A12243E164501B4AE8908D7CFC391675991E08
SHA-512:	08142F936413EFD75A5942D9D9AC30A56E680709F1825AF8FEF393BCDFABB08B12F86588857151266907E27596BB7318E7ADDAA6347DE21AACC8FE642EB5107C
Malicious:	false
Reputation:	low
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65440)
Category:	downloaded
Size (bytes):	295068
Entropy (8bit):	5.667345759166351
Encrypted:	false
SSDEEP:	6144:9AcFOqIHmCedWSbjwyNXFbTr7rmA5J2cq:dO31zUdL5bq
MD5:	BE7390BAE52B8717E322A188619DDCCD
SHA1:	085ECAC0DA107DF5BB089E4F041E26A52C524E45
SHA-256:	EE5E5B2A208DFBCBB9606525993D4A36BE191A8E4AD26508E920C56A57D0CD93
SHA-512:	0C27A2517FDB0E8D9BFBAE4A836B6B08F2F43C2BF3EF084CA6E9FE58BF720E7EA5FB7B50EE9F01602C17599F0396803D8F2C88F2DA8F4CB8735085364F08F8BF
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.6524.js?cs=1c48f97ab5dd702e48d2
Preview:	/! For license information please see signing_iframeless_mobile.6524.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6524],{453800:function(t,e,n){"use strict";n(952312);var r=n(835536);t.exports=r("Array").includes},368960:function(t,e,n){"use strict";var r=n(509080),o=n(453800),a=n(540400),i=Array.prototype,s=String.prototype;t.exports=function(t){var e=t.includes;return t===i\|\|r(i,t)&&e===i.includes?o:"string"==typeof t\|\|t===s\|\|r(s,t)&&e===s.includes?a:e}},540400:function(t,e,n){"use strict";n(473488);var r=n(835536);t.exports=r("String").includes},641416:function(t,e,n){"use strict";var r=n(233164)("match");t.exports=function(t){var e=/./;try{"/./"[t](e)}catch(n){try{return e[r]=!1,"/./"[t](e)}catch(t){}}return!1}},349879:function(t,e,n){"use strict";var r=n(843028),o=n(856936),a=n(233164)("match");t.exports=function(t){var e;return r(t)&&(void 0!==(e=t[a])?!!e:"RegExp"==o(t))}},80856:function(t,e,n){"use strict";var r=n(349879),o=TypeError

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	18
Entropy (8bit):	3.5032583347756456
Encrypted:	false
SSDEEP:	3:YJK6Hmk4:YVE
MD5:	1F0C5750EBBE38CB64D732D89E864A9D
SHA1:	E6581E282A0CA5FF121481E17E0B05059688AB62
SHA-256:	02A353CE2AA6CBD20A3CBED11AD580344534C0C465EEA42403DA6D79BC1E8BAB
SHA-512:	F7CEEB9B09E2671954AFC5052F184E054C1B2ABC29292312ACB79E3223683E2282BC1BF4CC25A14E9EABE97DF65D4D54F069A1741E571BFCAD769621804B47AF
Malicious:	false
Reputation:	low
Preview:	{"locale":"en-US"}

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35552), with no line terminators
Category:	downloaded
Size (bytes):	35552
Entropy (8bit):	5.272922801597397
Encrypted:	false
SSDEEP:	384:zeUUsSi7WTPK47rBtSTECq0XBkpurOMiQvNvvFJcXkryfGvWzo2t8YnO676kg5+n:pYichBgol0XadAvFgOvHzUW7S
MD5:	C6F58DD3D60F07462254B842DD4F9CA1
SHA1:	62C507FC6CC05F9732BCD5C593F3D8D0E0A3D7E2
SHA-256:	2A8A441D8086F20A64563EDC759ABA1DE84D932E34FF77B8BB0279A730CDB428
SHA-512:	21BF35D36D4859188BF32B21F84B71975B72503C72F5B64D7AB98CEFB58045F3F991960CAF9E8BCC95CDC284C6758DB639B4087750206450076263677CA4513B
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/9.4a3e9801.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2:return function(n,r){return t.call(e,n,r)};case 3:return function(n,r,o){return t.call(e,n,r,o)}}return function(){return t.apply(e,arguments)}}},"/GqU":function(t,e,n){var r=n("RK3t"),o=n("HYAF");t.exports=function(t){return r(o(t))}},"07d7":function(t,e,n){var r=n("busE"),o=n("sEFX"),i=Object.prototype;o!==i.toString&&r(i,"toString",o,{unsafe:!0})},"0BK2":function(t,e){t.exports={}},"0Dky":function(t,e){t.exports=function(t){try{return!!t()}catch(e){return!0}}},"0GbY":function(t,e,n){var r=n("Qo9l"),o=n("2oRo"),i=function aFunction(t){return"function"==typeof t?t:void 0};t.exports=function(t,e){return arguments.length<2?i(r[t])\|\|i(o[t]):r[t]&&r[t][e]\|\|o[t]&&o[t][e]}},"0eef":function(t,e,n){"use strict";var r={}.propertyIsEnumerable,

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.577819531114783
Encrypted:	false
SSDEEP:	3:HAOfaY:gOfaY
MD5:	4C8A26E14EDABDD7D6BFBF1472AFC853
SHA1:	F268C3DB54608F753ED9320CB2411B00A40C8D65
SHA-256:	B9224CA870B658AB694ECED1FBB07A971FCE7D0C990E50046929E9968BAF435C
SHA-512:	820B85A739953E8A71E89FEB45BBFB01E2D2F8977D30B0AB11BED28A7CA2B0365595AA7074A3A9780C8DE95E0C8DE839B5C390519F5238E8435F44736CDD497F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAml2N3ZtRlm3BIFDaWTNiQ=?alt=proto
Preview:	CgkKBw2lkzYkGgA=

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17003), with no line terminators
Category:	downloaded
Size (bytes):	17003
Entropy (8bit):	5.252540905926642
Encrypted:	false
SSDEEP:	384:RxFVDGRHhfiYI8Z3xtsH7aK4N9eke+Kt/y6CtVeAkS486a:RAfM94N9ekjKt/y6WeC
MD5:	65E5C965272E021AE33FF8BC39565EF5
SHA1:	C5A2C0CDF9C821B6EE43A1EEB52680FFEEA15557
SHA-256:	B84595CC8461BB6E8376FE94F0DD23D6657172103B03653534089C5992B058A1
SHA-512:	C177A508A3ED03C91567765E51EFB6E39E9DC20200BC6A30C708B7FA339B1DAC17CC46BEBCA5B5267C9CF10EFD24FE054B078352F8460A3E12422A6AD7CC1B90
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/21.b8c41db9.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){return t?e.replace(/\/+$/,"")+"/"+t.replace(/^\/+/,""):e}},"9rSQ":function(e,t,r){"use strict";var n=r("xTJ+");function InterceptorManager(){this.handlers=[]}InterceptorManager.prototype.use=function use(e,t){return this.handlers.push({fulfilled:e,rejected:t}),this.handlers.length-1},InterceptorManager.prototype.eject=function eject(e){this.handlers[e]&&(this.handlers[e]=null)},InterceptorManager.prototype.forEach=function forEach(e){n.forEach(this.handlers,function forEachHandler(t){null!==t&&e(t)})},e.exports=InterceptorManager},CgaS:function(e,t,r){"use strict";var n=r("JEQr"),o=r("xTJ+"),a=r("9rSQ"),s=r("UnBK");function Axios(e){this.defaults=e,this.interceptors={request:new a,response:new a}}Axios.prototype.request=function request(e){

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=46370&time=1713961340645&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy
Preview:	{}

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	92674
Entropy (8bit):	5.288414419714851
Encrypted:	false
SSDEEP:	1536:aituX55DPfb/wFG26UtHnbTcCAC0dn4Bs9qatj9N+jpT:Z+hwFGme4nT
MD5:	16D7AE86E21434A32157D3226AC9BB77
SHA1:	6EAA4577EFA2568AA7752B00AA42523BDA14CA95
SHA-256:	6C9C6406C9BD9814CF84974221433003377B67F071EC5411FDDBCBA4EC109BCA
SHA-512:	818A9CBFACFBC15F382F286E9C5B3476C4F508B30F4DAD880309C586C8725C52CA43266E3B04912A9E0423D93DA15997F3EAE563542767EDA63321E1BCEC1DEB
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/14.e24a6190.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){function Action(t,r){return e.call(this)\|\|this}return n.a(Action,e),Action.prototype.schedule=function(e,t){return void 0===t&&(t=0),this},Action}(r("LR82").a);r.d(t,"a",function(){return i});var i=function(e){function AsyncAction(t,r){var n=e.call(this,t,r)\|\|this;return n.scheduler=t,n.work=r,n.pending=!1,n}return n.a(AsyncAction,e),AsyncAction.prototype.schedule=function(e,t){if(void 0===t&&(t=0),this.closed)return this;this.state=e;var r=this.id,n=this.scheduler;return null!=r&&(this.id=this.recycleAsyncId(n,r,t)),this.pending=!0,this.delay=t,this.id=this.id\|\|this.requestAsyncId(n,this.id,t),this},AsyncAction.prototype.requestAsyncId=function(e,t,r){return void 0===r&&(r=0),setInterval(e.flush.bind(e,this),r)},AsyncAction.prototype.re

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24899)
Category:	downloaded
Size (bytes):	25070
Entropy (8bit):	5.317406014272339
Encrypted:	false
SSDEEP:	192:m4V2MvfhCmNtGb0okfQrgP0C8HjF6EE5rZ7s5t0SzM4M1vVAHeGeYk2uNlEs9g0L:m4AMvYV60yHDSPMflGm3/PgLc1cwHDIs
MD5:	DDF6663591E468727C75B88FA21E5376
SHA1:	53AA908ED7A8C4B1010B2D30A9274062F9D46801
SHA-256:	20D3C68FBB41F58733C0B4086F86655315F00D314A958E1985D6ECEBC9DE2A8F
SHA-512:	6DFF031EED5CDCE7B7D62AA6192B834D6F760440B825712F4D25B38C527B08A3296DDC8FEE1D1D9FBEA40E0DD90B58C1B970078E42C3E59E6D57167F4885669F
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5956.js?cs=469b8cedb356c5024593
Preview:	/! For license information please see signing_iframeless_mobile.5956.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5956],{807268:function(t,e,o){o(248276);var r=o(716304),n=o(997156);r.JSON\|\|(r.JSON={stringify:JSON.stringify}),t.exports=function(t,e,o){return n(r.JSON.stringify,null,arguments)}},213805:function(t,e,o){var r=o(807268);t.exports=r},150400:function(t,e,o){"use strict";o.d(e,{O:function(){return bt}});var r=o(544864),n=o(577204),a=o(514260),i=o.n(a),l=o(811504),c=o(203268),d=o.n(c),s=o(272116),p=o(953486),b=o(583476),f=o(395132),u=o(146356),x=o(747384),m=o(260296),v=o(459528),h=o(803512),g=o(323e3),w=o(117752),y=o(781352),C=o(718552),k=o(248048),S=(0,l.createContext)({dark:!1});function E(){return(0,l.useContext)(S)}var A=o(542344),I=o(719813),R=o(758320),O=o(823524),z=o(49208),W=o.n(z),B=o(844280),q=o(735716);function T(t){return"small"===t?"320px":"medium"===t?"384px":"large"===t?"480px":"xlarge"===t?"640px":void 0}var F={base:

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15387), with no line terminators
Category:	downloaded
Size (bytes):	15387
Entropy (8bit):	5.345386519288367
Encrypted:	false
SSDEEP:	192:ebUAsQWfVA1RsJiRsCS1XXe3euvUkJZJqul9B5U2e2qSSflggnIBOdveSp:8ZRsQRsCwYeuMkFBa2e2VOGBOdz
MD5:	3305C113ACC7BE7B8411ABD6ABFA37BA
SHA1:	A186937D8522085D26F50BA351886021919F88A4
SHA-256:	B781A271D23F8FCB33421408A4AB099770B32368548F88C651C0FD1C15CB2A0E
SHA-512:	6E9DC6D35ACEC635CFB495E8CB705FA0DD981B92A1A0F1E734DA3BB44ED61F205ACD784B5F6CFC186186081A239E4072616D58ADC7A30DB3C1DC62B8BD7BF03C
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/27.42a90a1f.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),o=n.n(c);t.a=function FillerElement(){return o.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex:0})}},"3y+j":function(e,t,n){},"BA/U":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var c=function onKeyDownSubmit(e){var t=!(arguments.length>1&&void 0!==arguments[1])\|\|arguments[1];return function(n){(function isEnter(e){return"Enter"===e.key\|\|13===e.keyCode}(n)\|\|t&&function isSpace(e){return"Space"===e.key\|\|32===e.keyCode}(n))&&(n.preventDefault(),e())}}},BY8A:function(e,t,n){"use strict";var c=n("s8DI"),o=n("QtlZ"),a=n("Hvhg"),i=n("ERkP"),r=n.n(i),s=n("rTkt");n("zoZM");t.a=function ThemeStyleSheets(){var e=Object(i.useState)(!1),t=Object(c.a)(e,2),n=t[0],l=t[1],d=Object(a.b)(Object(o.b)());return Object(i.useEffect)(function(){n\|\|(Object(s.a)(d),Object(s.b)(d),l(!0))},[d,n]),r.a.createElement("div",{className:"drift

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94897
Entropy (8bit):	5.313063961878945
Encrypted:	false
SSDEEP:	768:QlKHUAjOZ0yeI11yGbqtOZ8uH/CUU6Yn/ATdTGBNx+Jy/t58u9wVXVKGHZKA+3ai:Ql0xCVG5t3wVaTIDDAwQPOeH5cBe1+8X
MD5:	B32CCC4557EBAEAEBC835C96712693C2
SHA1:	5747BD14940CC3A54AF65924CC5421B9C92211D5
SHA-256:	D55ABB3750D355B96BB3D095FD440B8F439A83253D66243737F67836077BE254
SHA-512:	BB85ED395A9E8CB96456F46904BE92BB0B05596EAE5B40A4BEFF1081DCDEB6E7BE1201907E3D178BA0F556B30FFC5C0D0A54ADF8F08B69CCD9D7AC77E070DD44
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/16.9ef4a519.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n("pqMu"),g=n("PjZB"),m=n("gG69"),E=n("0lfv"),j=n("3DW5"),I=n("uIJS"),C=n("LvsC"),h=n("qytN"),_=n("7jL2"),y=n("K7i0"),A=n("xwTo"),S=n("g6eD"),T=n("7BJg");function _createSuper2(e){return function(){var t,n=Object(_.a)(e);if(function isNativeReflectConstruct(){if("undefined"===typeof Reflect\|\|!Reflect.construct)return!1;if(Reflect.construct.sham)return!1;if("function"===typeof Proxy)return!0;try{return Date.prototype.toString.call(Reflect.construct(Date,[],function(){})),!0}catch(e){return!1}}()){var a=Object(_.a)(this).constructor;t=Reflect.construct(n,arguments,a)}else t=n.apply(this,arguments);return Object(h.a)(this,t)}}var x=100,k=new(function(e){Object(C.a)(AgentMessageEventBuffer,e);var t=_createSuper2(AgentMessageEventBuffer);func

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16436), with no line terminators
Category:	downloaded
Size (bytes):	16436
Entropy (8bit):	5.046420217723836
Encrypted:	false
SSDEEP:	192:iQ0dizaqHG3uoRQIsWUq0+DfyvRMRpiyhVAh/qP5SM9/:aj3uoqH9fvRMRpiyhVAh/s571
MD5:	6F779260053E30787F84DFA7BA6743E5
SHA1:	95E6B54A6B0D402191A7D4656D06A5696EDBBDB8
SHA-256:	A03B854D10519FD5BE9CDCBC78FAD3927C1A3DE9E84FA74353C8A19CC20D0501
SHA-512:	4900847584724D9D4880B011038AAFD6D1293290A9A3ADC345E177DB22B3BA3168FB5EB065FE963AEEB1C9E28C51079D400606BE63BEBD6863EA5BBC81D427AC
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/28.812d5a7c.chunk.css
Preview:	.drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-widget-header{color:#fff}.drift-widget-header:not(.drift-widget-header--collapsed){z-index:1}.drift-widget-close{position:absolute;-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;top:8px;right:8px;height:16px;width:16px;padding:8px;cursor:pointer;display:none;visibility:hidden}.drift-widget-close svg path{fill:currentColor}.drift-widget-header--collapsed .drift-widget-close svg path{fill:#687882}.drift-widget-close line{stroke:#fff;stroke-width:2px}.drift-widget-chat-wrapper:not(.drift-widget-chat-wrapper__active-conversation) .drift-widget-close line{stroke:#687882}.drift-widget-chat-layout.widget--xs .drift-widget-close,.drift-widget-chat-layout__takeover .drift-widget-header--gdpr-consent .drift-widg

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4167), with no line terminators
Category:	downloaded
Size (bytes):	4167
Entropy (8bit):	5.342497950086159
Encrypted:	false
SSDEEP:	96:B2HkTE9qkuWlRvkNJUgE8jNVCzLBYVDW5Sc2W55SL3bo3:B2Ew9+WllkrUcjN8mwH54Q3
MD5:	408CBF58AC50E304CA9DA35C3EF06C40
SHA1:	0EDD9FFCE9381D007B72B652A722FDE9F6057A46
SHA-256:	0C975905FD30E2A636810B231A627905BD8BDF88ADE9449AEF6D46AD6BD12DF7
SHA-512:	BD8B6C33DFAD48320D82A05520941237E21E596FA8886E25D4F1B0357D0F58A231ED2EA881CA939CF3168E2981F129485A9DD1C2461F4A2B570BD6621ED39A02
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/webpack-d201a4b30a0ceca4.js
Preview:	!function(){"use strict";var e,t,n,r,o,u,i,c,a,f={},d={};function l(e){var t=d[e];if(void 0!==t)return t.exports;var n=d[e]={id:e,loaded:!1,exports:{}},r=!0;try{f[e].call(n.exports,n,n.exports,l),r=!1}finally{r&&delete d[e]}return n.loaded=!0,n.exports}l.m=f,e=[],l.O=function(t,n,r,o){if(n){o=o\|\|0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[n,r,o];return}for(var i=1/0,u=0;u<e.length;u++){for(var n=e[u][0],r=e[u][1],o=e[u][2],c=!0,a=0;a<n.length;a++)i>=o&&Object.keys(l.O).every(function(e){return l.O[e](n[a])})?n.splice(a--,1):(c=!1,o<i&&(i=o));if(c){e.splice(u--,1);var f=r();void 0!==f&&(t=f)}}return t},l.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return l.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},l.t=function(e,r){if(1&r&&(e=this(e)),8&r\|\|"object"==typeof e&&e&&(4&r&&e.__esModule\|\|16&r&&"function"==typeof e.then))return e;var o=Object.create(null);l.r(o);va

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	18
Entropy (8bit):	3.5032583347756456
Encrypted:	false
SSDEEP:	3:YJK6Hmk4:YVE
MD5:	1F0C5750EBBE38CB64D732D89E864A9D
SHA1:	E6581E282A0CA5FF121481E17E0B05059688AB62
SHA-256:	02A353CE2AA6CBD20A3CBED11AD580344534C0C465EEA42403DA6D79BC1E8BAB
SHA-512:	F7CEEB9B09E2671954AFC5052F184E054C1B2ABC29292312ACB79E3223683E2282BC1BF4CC25A14E9EABE97DF65D4D54F069A1741E571BFCAD769621804B47AF
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/.netlify/functions/locale-detect
Preview:	{"locale":"en-US"}

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (47844)
Category:	downloaded
Size (bytes):	48017
Entropy (8bit):	5.498513095967245
Encrypted:	false
SSDEEP:	768:dwbsNbSfQuvn0rB5kuER4Nt8VqB89l3uugj3T9DcgjbCiI2KwDx:UsNbSouvnN+gVvojDy2bCBJwDx
MD5:	6F2EBD7E343EB220939F9395112B7590
SHA1:	F9FE686621CD0BE2C2920E9D2B19C3D20AFD302F
SHA-256:	E73D30312784C02BEB64EDEDC070279C437A81E5AE24EEAAF071B028B392C01B
SHA-512:	97F7A8C8586BFE61FEF9D403AA4DE2401B801BF22770DF4CE9C81A2615BCE4E948FCB3EB13F3A1087D69A1BAD0AA80BE0C93FDA3849087BE04B8966FD660195C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5186.js?cs=25337ada72d8624b6829
Preview:	/! For license information please see signing_iframeless_mobile.5186.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5186],{995186:function(e,t,n){"use strict";n.d(t,{y:function(){return S}});var r=n(265408),o=n.n(r),i=n(449740),a=n(260448);function u(e){return u="function"==typeof i&&"symbol"==typeof a?function(e){return typeof e}:function(e){return e&&"function"==typeof i&&e.constructor===i&&e!==i.prototype?"symbol":typeof e},u(e)}var s,c=n(128836),f=n.n(c),p=n(93376),l=n.n(p),d=["ar","bg_bg","cs_cz","da_dk","de_de","el_gr","en_au","en_gb","en_us","es_es","es_mx","et_ee","fa_ir","fi_fi","fr_ca","fr_fr","he_il","hi_in","hr_hr","hu_hu","hy_am","id_id","it_it","ja_jp","ko_kr","lt_lt","lv_lv","ms_my","nb_no","nl_nl","pl_pl","pt_br","pt_pt","ro_ro","ru_ru","sk_sk","sl_si","sr","sv_se","th_th","tr_tr","uk_ua","vi_vn","zh_cn","zh_tw","en_ca","en_ie","en_ph","en_in","en_za","en_nz","es_co","es_pr","fr_be","nl_be","es_ar","es_cr","es_cl","es_pe","ar_a

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	downloaded
Size (bytes):	651
Entropy (8bit):	6.855422700006461
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfd:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHen1
MD5:	D3A1017060B4669F2FD8894B2B8B69C3
SHA1:	D5A37A76A94A6914123E817A7C4DB3E0D8B8BAE8
SHA-256:	DE0A3F8190808781B5658024B46926FFB7D397C60E85A7C3C3CE06CEDDEF58D7
SHA-512:	8652FF9659019922390A23924B21F08DF305F3D71096895305602C18AF208EE5CFC6CB9E58E37189DBB8AB3933A35F9836D33D18D1B18064A2884C07A2CE5147
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.jpeg
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?...."...\.[.bz..x...i$

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23897), with no line terminators
Category:	downloaded
Size (bytes):	23897
Entropy (8bit):	5.309124558333512
Encrypted:	false
SSDEEP:	384:qiH5aLGGy474znD9oSZXH79WfhaONcgnCXg9:XuGGhaXXY5TcgnCXg9
MD5:	CD29B9BC973E48A7FCD0EE7153BDF03B
SHA1:	AC3E5CF1C0D4183B2DF14C34BEBB84B3EE657799
SHA-256:	7CB58278C8F54A62C0AFA6DA0C67B3A45AAD637A0BF614E9C0DD42B73CEE266B
SHA-512:	253356199738322AE0D761A162136D91BA00018B180FF54C4D014C0B8AE4A93F5DD4D21664E8C582A4DB73F0F4265D34604D2B4C03CEF02A67882815ED328C2D
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/52.b1edaf4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n("wQh9"),b=n("yvDu"),m=n("LvsC"),O=n("qytN"),g=n("7jL2"),y=n("LfGp"),j=n("uHEx"),E=n("Iwrg"),k=n("+OSO"),S=n("MiOA"),x=n("8dVd"),w=n("26VM"),T=n("mekd"),R=n("3QMb");function exceptionFromError(e,t){var n=parseStackFrames(e,t),r={type:t&&t.name,value:extractMessage(t)};return n.length&&(r.stacktrace={frames:n}),void 0===r.type&&""===r.value&&(r.value="Unrecoverable error caught"),r}function eventFromError(e,t){return{exception:{values:[exceptionFromError(e,t)]}}}function parseStackFrames(e,t){var n=t.stacktrace\|\|t.stack\|\|"",r=function getPopSize(e){if(e){if("number"===typeof e.framesToPop)return e.framesToPop;if(F.test(e.message))return 1}return 0}(t);try{return e(n,r)}catch(a){}return[]}var F=/Minified React error #\d+;/i;function extr

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34089)
Category:	downloaded
Size (bytes):	34260
Entropy (8bit):	5.339487486189771
Encrypted:	false
SSDEEP:	768:VCuEUqpCksnHr1C6CC0p4o+LLRU8+3RpJr+L6RUL+Zbh06uCpr6x:MpClGp4vWpJImY
MD5:	BC61DB1F1379E2963CC5627E6F5BADA0
SHA1:	E58AE9F7622C6BBAC9E010BEC9F85C6C726B3354
SHA-256:	47A7A18D799E2FBE195A07137A9750BC095050E468D40F5E47AFABA66C1B4459
SHA-512:	7F32448A7FBB11B9D60F2205A84BEF89B915A966770284CD88512116553A56E586086635972F802B132ED3004620C8112AEA2EDE9C8EE7F2D7F5493C900A59A8
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.4464.js?cs=ee0fc2459764d3eac1ea
Preview:	/! For license information please see signing_iframeless_mobile.4464.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4464],{341416:function(e,t,r){r.d(t,{y:function(){return j},Q:function(){return I}}),r(761088),r(326972),r(853224),r(427164),r(174016),r(627632),r(439952);var n=r(811504),o=r(271448),a=r(694070),i=r(386160),c=r(594956),l=(r(417368),r(971088),r(279800),r(454068),r(284204),r(757768),r(409624),r(185179),r(321992),r(394976),r(373656),r(394107),r(49896),r(686832),r(938252),r(147240),r(952288),r(215396),r(282480),r(121952),r(155036),r(954736),r(632520),r(685120),r(737588)),u=r.n(l),s=r(656212),h=r(825796),f=r(357792),p=r(507416),d=r(108328),y=r(749099),v=r(247601);function m(e,t){return function(e){if(Array.isArray(e))return e}(e)\|\|function(e,t){var r=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e["@@iterator"];if(null!=r){var n,o,a,i,c=[],l=!0,u=!1;try{if(a=(r=r.call(e)).next,0===t){if(Object(r)!==r)return

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (31005)
Category:	downloaded
Size (bytes):	31180
Entropy (8bit):	5.242185131314682
Encrypted:	false
SSDEEP:	768:qyo3xcGSQWQ0UGUEQsF8h6m9qW6A4MzK7n8CutA2q0d2KP6LJgRMVUWFgHmbOfvO:qvSQWQ0UGUEQsFy6m9qW6A4MzK7n8CuA
MD5:	F74F1271B67DFB96179C4BA27B20BF0A
SHA1:	DC721E2F34473A538DD87A02139CD17441E97620
SHA-256:	6C6D911A39760F96E3199E42928A3A8E2C1BD6FF1AEE44E8864C51AE5D85DD4A
SHA-512:	8B85F0ACA883F6D9D85E3EE0DD704CA4CB513C65E3C0B5FDE66A4F820707BC7C6521A0AE3EE40FB3CC8FC721FED04A72203360E1190B296D753BADE637E2C10A
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.4024.js?cs=0438efdd1ff3cb642e6b
Preview:	/! For license information please see signing_iframeless_mobile.4024.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4024],{893184:function(e,t,n){var i,o;"undefined"!=typeof self&&self,i=function(){"function"!=typeof Promise&&function(t){function n(e,t){return function(){e.apply(t,arguments)}}function i(e){if("object"!=typeof this)throw new TypeError("Promises must be constructed via new");if("function"!=typeof e)throw new TypeError("not a function");this._state=null,this._value=null,this._deferreds=[],c(e,n(r,this),n(a,this))}function o(e){var t=this;return null===this._state?void this._deferreds.push(e):void p((function(){var n=t._state?e.onFulfilled:e.onRejected;if(null!==n){var i;try{i=n(t._value)}catch(t){return void e.reject(t)}e.resolve(i)}else(t._state?e.resolve:e.reject)(t._value)}))}function r(e){try{if(e===this)throw new TypeError("A promise cannot be resolved with itself.");if(e&&("object"==typeof e\|\|"function"==typeof e)){var t=e.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2879
Entropy (8bit):	7.660950602080433
Encrypted:	false
SSDEEP:	48:D9itNn2VQJ3znK9gJS9mvS4yUhIwYZ7lNodG26472DYf6F/9:DO2knK9gQmbyUhvYZ7lF26Je6V9
MD5:	C87DA3413DAD0BC57D3F6C42C3848657
SHA1:	5F307E843AE7B61DBB541B55CC159386664A40F4
SHA-256:	AE8E67BAA196F0D1A50103804DA7CC8EA1B30F97A3878F044D2EE03902D9925E
SHA-512:	A5D1E1F35C47264FF5616FBA0409249394B6DC44347C0F4B5536679AA1965B8A69AD3C20E42CAE4D82C44B63D1054C5F985B9FA72A7BE563FE2EC3438AFCFB77
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...O...O.....%V......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C298895EA7E911E0B1F8FF0264B08A24" xmpMM:DocumentID="xmp.did:C298895FA7E911E0B1F8FF0264B08A24"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C298895CA7E911E0B1F8FF0264B08A24" stRef:documentID="xmp.did:C298895DA7E911E0B1F8FF0264B08A24"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...{....IDATx..\kO.:..!.z[.. $.......(o..s..u....)...U.R..}x.............kQ.xS.G.D+......W._i....v~F.6...7.\..8'.t.eY.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	78
Entropy (8bit):	4.224031547526729
Encrypted:	false
SSDEEP:	3:LUfQ2pHWiR8HnH7OE9HstmyRHfHyI:x2pHDYiElkjyI
MD5:	E9183FBF1E46F0916C4A41675F38C75F
SHA1:	C10CCC2A61CC4CD6B836540D4BFC77A66488101A
SHA-256:	4A8FD6F166E1EF01A1588BB636279FE5DD135FEE5DE06C045D64AE36D726679C
SHA-512:	FF1165D76CF1624F64E443E319E4061C287B370D6A59F965FA34386610D1A0A548210C56D48BE2FEC3C42F50D4C9478930C7F64E6BD218D27B624E955ABC2912
Malicious:	false
Reputation:	low
Preview:	jsonFeed({"country":"US","state":"NV","stateName":"Nevada","continent":"NA"});

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (60187)
Category:	downloaded
Size (bytes):	734197
Entropy (8bit):	5.267640173827941
Encrypted:	false
SSDEEP:	6144:OyxRBxFmwiB5fbzIn0OSRHn7HczP2qgHCUQjV0OSRHn7NSMj:HFmwiPveg4zP2qgHCUQjVgRSMj
MD5:	E2D9AA7B7E5353AD2151773530DB4D7C
SHA1:	355EA5F5D460C4C584D403D9664016B820CFF3F1
SHA-256:	5287993DA8FECB15B6F640A0C13A41B3CD44AC7B9957EFF3E7201ECD0B1C4222
SHA-512:	4FD3A65C781DB5B339A76BC02047B3CAB4C0D717FF8A021CA61B6E6687195516D2A51A038FBBD7D290C158ACDDCB990760E680F7C868E287B1CBAB64443542FA
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/privacy
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><script type="text/javascript" src="/optimizely-edge/20917322951" referrerPolicy="no-referrer-when-downgrade"></script><script> Google Tag Manager -->.(function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':.new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],.j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=.'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);.})(window,document,'script','dataLayer','GTM-NXX2M47');. End Google Tag Manager --></script><title>Privacy Notice \| DocuSign</title><meta name="google-site-verification" content="io0A5nFy9g127SL6JozTz0jBKahXJ32iW2WMjRKowWg"/><meta name="title" property="og:title" content="Privacy Notice"/><meta name="description" property="og:description"/><meta name="twitter:title" content="Privacy Notice"/><meta name="twitter:description"/><link rel="can

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 55, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3596
Entropy (8bit):	7.894947048332223
Encrypted:	false
SSDEEP:	48:wyswH+u23+1WKBr5FJ9IZr1K/BD0JjYXXPuxZVpnqi17eTophMLtOIyCMT1a+JfF:Fqf+1W45FJ9IVcBD06Xm3n+opCZO1TI4
MD5:	0AC9B4E034D6AF4BA312D08FFF684B6A
SHA1:	4DBFB16E92276845073B90970F427CEA1AB214CB
SHA-256:	57547C7DC8143F8A877BCCFA4B4F4867D46DC0FB5A915D844BDD290596DC8594
SHA-512:	2901EEB73506879337AB5682135B91B36444E63D2787ACEB1007FF1BEB3C97317244E32A494E2369888248F33FAE514309AF09A5CA73179352A3A22E64507DFD
Malicious:	false
Reputation:	low
URL:	https://eu.docusign.net/Signing/Image.aspx?i=logo&l=cde1c23b-345a-49bd-9e31-a553c30364af
Preview:	.PNG........IHDR.......7.............sRGB.........gAMA......a.....pHYs...#...#.x.?v....tEXtSoftware.Paint.NET v3.5.11G.B7...{IDATx^.yPU...I.....A..E@\b.X.L.hX$.;........". .%f1f1F.d...I.ig..4....$.e..N.i...}...{...5....3....{..s~.{-.p8..)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)N.....T...u..M..lW5b..8.j..1..[....&lNo...<N.Vu36+.Y...F<.\B..9.......k.......nb.al.!j....!l..F.....1n..a..\.......{..~.7..;..{..,...Gl9.%.....\|....Qc..T.......%o....>...}..h._J3....F..Ik2./..'.......].<....R..{.kP.6.oi..@%r.G].}.0..j}......\X.R.!(.v...S.......2H...l...a&a.L.,wj`....@.. ..$.t..N..9.O.A.&ff..R..........~.d.cfz...z.......q.I..!kUg.1...n....7...c.g...X..^....."..37..!.."].'N\|.Q6(...O7........rz>...shz.Dv...g.M..t3..?.....?!o.k.?{...j.....x'..mO5uMm..Ht5T.Q.m.Lq:h..yg...U.{....J`.T...r.(...#......"8...>.....14.....1.....{r....#...5.E.fv......=./g...^..{`......fe\..f.3U].....O.5dq\|..f.u.U...@.1mIL.h,...

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	169
Entropy (8bit):	4.8436943585630665
Encrypted:	false
SSDEEP:	3:UJXca4MKLFVrWnNCF8YtQRVCL6DlTFPKKKBK1caJC4B/Yp/GCF8YtQRVCL5V:UJXuMKTMS848COFFyKKXaJkZGS848CVV
MD5:	7363E1A92A77C2F6AB0332C9A64CC051
SHA1:	B424892E6298C96B00A63BF7B3244AFC93EFDEAB
SHA-256:	4E640814854B6E878309D5B3ADD69C450D0995CF83617BBFAFBA63EA2043CF2F
SHA-512:	8D2D619DCFD1DB0FDEC275BC59C6627F32C37FF58F46C7E72970591F8CF335D37B7A3E21D1640DD40101511183C82487FE2836763B9FEBDFD60867CFB7511EF6
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing-cdn-failure-reporter.js
Preview:	/! For license information please see signing-cdn-failure-reporter.js.LICENSE.txt /.window.cdnReportFailure();.//# sourceMappingURL=signing-cdn-failure-reporter.js.map

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7951)
Category:	downloaded
Size (bytes):	8285
Entropy (8bit):	5.244135284520358
Encrypted:	false
SSDEEP:	192:oyCmhZ5RDGwnmL1Q2oVgdTlK92bHMhgsF3F7gj0ea:ZhPRDGwnYndA8MVF3F7AA
MD5:	A59CAAE29D0AD8C65398377F51B21BDD
SHA1:	158C3C7AF006C2F3FAFFF3F55A09384A23D0CF2B
SHA-256:	AB5961246DDCDA5ACF22A32E165ED8D15758CEC5EC566F3039B1D395A68F1A05
SHA-512:	7053F106088EB0BD6A599F5AD0C5AC04345A5CCA4995EFBB04061F20CD714539F133A641EC68DC6D8E069A6C0AF8780A4CD56B2BB3DE517B3C2B2FBFC2B5603F
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/349f80dd-8f4d13fff1aeee64.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{16060:function(e,t,n){var a,r,l,i;/*. @remix-run/router v1.15.1. . Copyright (c) Remix Software Inc.. . This source code is licensed under the MIT license found in the. * LICENSE.md file in the root directory of this source tree.. . @license MIT. */function s(){return(s=Object.assign?Object.assign.bind():function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var a in n)Object.prototype.hasOwnProperty.call(n,a)&&(e[a]=n[a])}return e}).apply(this,arguments)}function h(e){let t;void 0===e&&(e={});let{initialEntries:n=["/"],initialIndex:r,v5Compat:l=!1}=e;t=n.map((e,t)=>d(e,"string"==typeof e?null:e.state,0===t?"default":void 0));let i=f(null==r?t.length-1:r),h=a.Pop,o=null;function f(e){return Math.min(Math.max(e,0),t.length-1)}function d(e,n,a){var r,l;void 0===n&&(n=null);let h=(r=t?t[i].pathname:"/",void 0===(l=n)&&(l=null),s({pathname:"string"==typeof r?r:r.pathname,search:"",hash:"

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8967)
Category:	downloaded
Size (bytes):	9138
Entropy (8bit):	5.257421412019015
Encrypted:	false
SSDEEP:	192:s4RvN2CpxMEbGTHN6JHJQbfqOf6yMBhVkdD69BQjRHAIYE:s4eCL1eZbCOf6yMBhVIYE
MD5:	720904553B1E146F7027AE0F4E4826E5
SHA1:	E6FA7A61AD077BD11428C1B8F5224336E0E0EFA6
SHA-256:	F3DE92A7263951F2B1E83A83E7CDAD7F15D3213EDC517C98C0295413328A9679
SHA-512:	0E2AE87FFDEDB36DE333978FFD6FF3DF6EA5AEC46CC797056DCF2A8C71A60A9507DEF0D1C6771BDF1630A821D2E89CED240CF589C2E4AFEDF63B21B584E0512C
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.6615.js?cs=4e7ab17cd1e543471d4b
Preview:	/! For license information please see signing_iframeless_mobile.6615.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6615],{641548:function(e,t,i){i(761088),i(326972),i(853224),i(427164),i(174016),i(627632),i(439952);var s=i(654888),n=i.n(s),a=i(752856);function o(e,t){(null==t\|\|t>e.length)&&(t=e.length);for(var i=0,s=new Array(t);i<t;i++)s[i]=e[i];return s}function r(e,t,i){var s,o=(i=i\|\|{})._isSideEffect,r=null===(s=this.computed)\|\|void 0===s?void 0:s[e],d=r&&this.computed[e].set,u={};return r&&(u=a.cp.extend({useTwoWayBinding:!0,useModel:this},this.computedDefaults)),o\|\|!r?n().Model.prototype.set.call(this,e,t,i):d?d.call(this,t,i):u.useTwoWayBinding&&g.call(this,e,t,i),this}function d(e,t){var i,s,n=(t=t\|\|{}).useModel\|\|this,a=t.useAttribute,r=t.useAttributes;return a?e=a:null!=r&&r.length&&(e=(i=r,s=1,function(e){if(Array.isArray(e))return e}(i)\|\|function(e,t){var i=null==e?null:"undefined"!=typeof Symbol&&e[Symbol.iterator]\|\|e

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4122
Entropy (8bit):	7.906100259481781
Encrypted:	false
SSDEEP:	96:L6dUUUoz8b4lDAqZUzvEXpeXcV/hPN2L0hXKdE:2SxclBpesN32L0t
MD5:	3C5F851C455BADA111C434545ABF9263
SHA1:	F65580803EC30072F0D9D562687AB4D2A88B2509
SHA-256:	DE57FF946D44291CFF4122EF129D6954911C749F52CD897859401322839C88D2
SHA-512:	11723B1C0395A9FC205ECBC9CC9F13E8355CEDB7C7BEB56FEA2054C86ADB2939B2B8871E8DD1E8864E1D95EDF6AE9C744E95815D309481FC7DA349BF69483501
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T.....Z.......PLTE......................................................nnn......>>>.........................3........N.......TTT............S..FFF......V..!!!...............E.....$.....:::......^..Y.....P..J..@..7..)...{.......H.....vvv..f[[[o....hJJK...a..}}}'''...f.....B../..fffOOO. 6444......k..[......u......e..c```BBB+++c.....:.....-........001. 0h........<......miii..a..%.....o.sss..b."T. ;666.55{.....s........yyy..i.$a.!N. D. @.12.%,w..b.............$i.$ZLLL.!I.....cdbXXX.)9.,/U.o.=.......ppp.!+}.x.....$rkkk.._.4X.&$......o..R..h..)..Bu..m.b:..I..y.....y.Zn.fH`P..._..R..B...t...}]^\|.fx..p.Mg"A;p..h..6..i.....h}..x..rsXrZVha.`ALVrGV.}Q%VJ.pH.>Da=7BN5xJ.I).m."....=..\..n....m.....@...}.}.\|..{..uk.u?.t.ytz\|h>xe.faVNZ.iO.c>.S2....;......tRNS....[.....ujPO.+.....IDATx...klKa..._....V..U[.f..%e.sYL.0Y%.bl...K....q}...A..!. "q.#A...K.....3+9..4.}..mr...}z....U.1.h.S..).M......m...5....:.X.(RV.+..; .uhgh......)...=RZ{.R\K..

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (47358), with no line terminators
Category:	downloaded
Size (bytes):	47358
Entropy (8bit):	5.255490031239481
Encrypted:	false
SSDEEP:	768:QHLc09BEYZldc0ydPmDLy9IlyaJkhtgcHB5qEeaLE0P8lBSAfZ:QHLcvccq0NBEh
MD5:	2D79B64B95D2AA829A460E0D02CCA148
SHA1:	112031F4E0EB04F10227A437E3A52570C5348680
SHA-256:	257CBDCB36FEB3EF9BC1C5BDB9C777AF5AE08F0834ECE8A4CE5D74FBFEB7EA0D
SHA-512:	C114D93BFEDDA3536658D0E4BBE3D3AC4F8B30AE8E9259CA29A5517E79E0140ED93BDE608C17F04107E6E3B64E9780394D214E665C057652F4631F1112698CF1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/3.2a4c7561.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e};t.renderViewDefault=function renderViewDefault(e){return o.default.createElement("div",e)},t.renderTrackHorizontalDefault=function renderTrackHorizontalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,left:2,borderRadius:3});return o.default.createElement("div",n({style:i},r))},t.renderTrackVerticalDefault=function renderTrackVerticalDefault(e){var t=e.style,r=_objectWithoutProperties(e,["style"]),i=n({},t,{right:2,bottom:2,top:2,borderRadius:3});return o.default.createElement("div",n({style

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (365), with no line terminators
Category:	downloaded
Size (bytes):	365
Entropy (8bit):	4.983341365130917
Encrypted:	false
SSDEEP:	6:5zQ4MtMXRSNIQPELV0H0e66GIKELV0H0e3LV0H0e+nOtaLVeVEy0zmAUSrzmczgn:58Bt4RSCQPU+0eeU+0eR+0esOta5eVAy
MD5:	06B2963B029C0824382815165BFEA73E
SHA1:	DE23FB128E2589CF384603CFBB7F6B7BEF969B05
SHA-256:	EC3A84E593065A50CD77CE9FBA273B4196936940C0813CA248B045DF2E2C8EFF
SHA-512:	1CD97E2DB15DD10C65D22E7EF911E6A6DB742F34574F91743A9C6CC7922C7FE0CBCED0AE837EB6C43617D23FAF959FF3C9D1B3ED49F44FE000FC191FFD60C002
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/25.c695453b.chunk.css
Preview:	.drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12px;border:none;padding:0;-webkit-transform:translateZ(0);-moz-transform:translateZ(0);transform:translateZ(0)}

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	77
Entropy (8bit):	4.37144473219773
Encrypted:	false
SSDEEP:	3:k0WYL12AvZ/W6QfpX/W6Qee:UYR2AvZO6EpXO6I
MD5:	B6652DF95DB52FEB4DAF4ECA35380933
SHA1:	65451D110137761B318C82D9071C042DB80C4036
SHA-256:	6F5B4AA00D2F8D6AED9935B471806BF7ACEF464D0C1D390260E5FE27F800C67E
SHA-512:	3390C5663EF9081885DF8CDBC719F6C2F1597A4E25168529598097E9472608A4A62EC7F7E0BC400D22AAC81BF6EA926532886E4DC6E4E272D3B588490A090473
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/PFxQpRcdah7Fp208MVJfR/_ssgManifest.js
Preview:	self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631), with no line terminators
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	5.161360843283687
Encrypted:	false
SSDEEP:	12:2QSkMnt0YPhgmQNVGIkTLFMdOGn61CCq4jBAHOYZcQP3rSzD1JZqA:2QSkammQVGr3F4hCZjiuOhPWNJD
MD5:	627C232D7293C9DA831A3B9D2E14049F
SHA1:	0735F9EC20C57DE85008EDB85C8458FEFBF3CE27
SHA-256:	FCD017F8BCAF269918E7FA0D09196D13F2AD8BB14920C2060D559AEFFD6FC2EF
SHA-512:	D0A72FB14DD2124126EEA6977A493389A4D8C605645F4D7312C63632DACF94BABD2B2F61CDED5A0E62B4CFD7641D3F54BD3F6518E0C7E90C86AA967A4E715E55
Malicious:	false
Reputation:	low
URL:	https://a.docusign.com/ds_arya_wrapper.min.js?f=1
Preview:	(function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(function(){}),s({})),a=s("");function d(n){throw t+"-"+n}function s(n){var t=typeof n;return function(n){return typeof n==t}}function h(n){for(var t in n)u[t]=n[t]}return{i:function(n){i++?d(1):n!==o&&c(n)&&!n[e]?h(n):d(11)},g:function(n,t){return n&&a(n)?t&&t(u[n])\|\|u[n]\|\|!1:t&&t(u)\|\|u\|\|!1}}})}).call(this);;DS_Arya.i({"DS_A":"e726a659-b15e-4860-84f0-a4f96f541646","DS_A_C":""});

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1576 x 1184, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	207158
Entropy (8bit):	7.963624648532845
Encrypted:	false
SSDEEP:	6144:gg+KTosVUo6STP4DjuxcSP/2hKttDZNEs:gg+KTpiU4Djux1n2haZNEs
MD5:	3AB004A1051B551CF461646929EAADA0
SHA1:	1A4CCCD10CE73A0D3023546F1F41DC5B0F029FB7
SHA-256:	3E868055F70214B873B3FDFB32A9849D581FE317EC8D70493F05470CCDE157B3
SHA-512:	B54DE968B4FB4F031282EA52F8F698FF56895AF3608B247AEC2752C0095174B010B143EC894FF6103B169EF0A8FE1EB3F0496D47160928D23B8A474C52973B86
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(.........U90.....PLTE...L...."p3.L..K.....I..H..K..J.....G.....E..J.....F..I.....H........D.....E.....\|.C........{....54>......m2....ont............B....E..A.......-+8......'&/l2.SRZNMU......}....K.c...j1.@....m2....a`g...n3.i1.h0........~}.?........109i0.hgm...DDK.~.............kjpg/.f/......o4..........QQX......KKR........................................32;...k1...p3............]\ca-.HGN...d..ZY`.........$#,............>..............e/...{z..................<<D...........dcjrrx+3.......b-..........WV]...vu{... .(....@?G...............yx}98A.....................#........................BAI=.........l3....................<.....EBSIFV...P.....A:X]%....s].;..d.tF....7vN...A.YQ..G._wI.'N:.)....`C 80.q.Y%.[".R......u.u.t?.fS.TFz.'....%.IDATx.....0.D+....E../.-Kq.~V....I}......... h..d.?../D./.-T.X.-.....K..../..sT.8..o...y...$N...._.?..>.....MT.X...o.y}\Y..&..;...._.?...xOf.*...."e...L,.............T....Ki^.R.g..}..".

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (52313), with no line terminators
Category:	downloaded
Size (bytes):	52313
Entropy (8bit):	5.3303524261891395
Encrypted:	false
SSDEEP:	768:wSDv5zYoNbyP+FUJcBtopGTaY/zcAcbcVvwxaTLYqj6cw68KK0oZjjQmaLehU277:tVP+u6J7jJQzbM
MD5:	EEB141D15A5542CC12F6697498A4DAE4
SHA1:	31F378B1AF777F61E9242FDD59C53533CE1BE0AD
SHA-256:	80CA50F229E6A99C3A0E04D6E6B2AA216152DFBC3DD81B8A59E2934782F4328D
SHA-512:	BE195B1A1B0F446F3840CD609E2E4D2CFB55C246390DDCE31552299119CEEF872F4CBAB59A4F27F84D86F07FBC42E7195B22AD797397E308119D9A7CA056BBB0
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/24.f2a14bf3.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n.d(t,"t",function(){return O}),n.d(t,"u",function(){return p}),n.d(t,"r",function(){return v}),n.d(t,"k",function(){return E}),n.d(t,"s",function(){return g}),n.d(t,"e",function(){return j}),n.d(t,"g",function(){return _}),n.d(t,"h",function(){return I}),n.d(t,"f",function(){return C}),n.d(t,"l",function(){return m}),n.d(t,"p",function(){return h}),n.d(t,"c",function(){return T}),n.d(t,"v",function(){return y}),n.d(t,"o",function(){return S}),n.d(t,"i",function(){return R}),n.d(t,"j",function(){return A}),n.d(t,"n",function(){return N}),n.d(t,"d",function(){return x});var r=n("mj2O"),a=n.n(r),c=n("7SM1"),i=n("QtlZ"),o=n("NFvl"),u=n("LVcX"),s=function getSession(){if(!i.a\|\|!i.a.getState)return{};var e=Object(i.b)().session;return void 0

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (64347)
Category:	downloaded
Size (bytes):	223683
Entropy (8bit):	5.454805360153245
Encrypted:	false
SSDEEP:	3072:tt8WClBZIncVuP0bteuvQ+AMPpgArl0xYu5GKnPt:ttlWBZ7O0bvQQGArHu5GKn1
MD5:	85F41014BE15CC3E54A4123C00C5021E
SHA1:	1E5468F507A8B0216114A8D8F63309BE8CBCAB9F
SHA-256:	01E9582655224C83E6C075F44B7EECB135E108B6AD2150BF6F78A0A77C4AD5E0
SHA-512:	78F6D6CD922AA42FD340CF215D7D91DDFABEF5EC393DFA5EB578436B9B668F839747218A4DE980AEC2395194667B1E0215623EC902EAAF8CE592536172414FCD
Malicious:	false
Reputation:	low
URL:	https://connect.facebook.net/en_US/fbevents.js
Preview:	/*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved... You are hereby granted a non-exclusive, worldwide, royalty-free license to use,.* copy, modify, and distribute this software in source code or binary form for use.* in connection with the web services and APIs provided by Facebook... As with any software that integrates with the Facebook platform, your use of.* this software is subject to the Facebook Platform Policy.* [http://developers.facebook.com/policy/]. This copyright notice shall be.* included in all copies or substantial portions of the software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR.* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS.* FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR.* COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER.* IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN.* CONNECTION WI

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otFlat.json
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	225878
Entropy (8bit):	5.3173493547118
Encrypted:	false
SSDEEP:	3072:XmqIrl5phQk+VC2xILRcP2QBYfoSjqkxtxFC2b8L0UzRrD:gS2qVkxtxFo0q9D
MD5:	D320E83A1B98D0793815B4E22B96825B
SHA1:	5EFB94C459DBFA3C3B01CD8564066B81C6906A01
SHA-256:	28E132EA525A5B852DC1A77FCADC939BA1B70D68F321DD2DDEEDC4B8A8CB93EC
SHA-512:	6E27FB634DFED287B4D8043C2E7C5CB0B078A42BB5C29475CFF54E0349F394CA9D6A25F7366FFE6DB53F669B5EC5DA9C20E8B4602CF39F8C1CF6E87FF30F9203
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/conductor
Preview:	!function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};function __webpack_require__(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,__webpack_require__),r.l=!0,r.exports}__webpack_require__.e=function requireEnsure(e){var t=[],r=n[e];if(0!==r)if(r)t.push(r[2]);else{var o=new Promise(function(t,o){r=n[e]=[t,o]});t.push(r[2]=o);var i,a=document.createElement("script");a.charset="utf-8",a.timeout=120,__webpack_require__.nc&&a.setAttribute("nonce",__webpack_require__.nc),a.src=function jsonpScriptSrc(e){return __webpack_require__.p+"assets/"+({}[e]\|\|e)+"."+{1:"37afe153",2:"2a722653",3:"ee35dea2"}[e]+".chunk.js"}(e);var s=new Error;i=function(t){a.onerror=a.onload=null,clearTimeout(c);var r=n[e];if(0!==r){if(r){var o=t&&("load"===t.type?"missing"

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.137537511266052
Encrypted:	false
SSDEEP:	3:D9inuSqaY:D99SqaY
MD5:	3E9B2C6CFE8DCEDA1C67FCD756D85153
SHA1:	521E7FCB2B51D2B4A8592CD61A48517E09239BAF
SHA-256:	0C2A9E97033AABD2D4ECA748786555F48BA8530DE837CEEA6FFCB1AF69F0CF44
SHA-512:	F8E07031538CFAE237D799696A83CC9D53E34916220BF2FF47BA83A2DC284E20D253F6F6C776BD5D28E8531EF0115BB69C423C72B8FD298BFDCA3FB9FF90537C
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwnzvU6P7wsYCBIFDZSQkvoSBQ2lkzYk?alt=proto
Preview:	ChIKBw2UkJL6GgAKBw2lkzYkGgA=

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=46370&time=1713961353970&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy
Preview:	{}

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1576 x 1184, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	207158
Entropy (8bit):	7.963624648532845
Encrypted:	false
SSDEEP:	6144:gg+KTosVUo6STP4DjuxcSP/2hKttDZNEs:gg+KTpiU4Djux1n2haZNEs
MD5:	3AB004A1051B551CF461646929EAADA0
SHA1:	1A4CCCD10CE73A0D3023546F1F41DC5B0F029FB7
SHA-256:	3E868055F70214B873B3FDFB32A9849D581FE317EC8D70493F05470CCDE157B3
SHA-512:	B54DE968B4FB4F031282EA52F8F698FF56895AF3608B247AEC2752C0095174B010B143EC894FF6103B169EF0A8FE1EB3F0496D47160928D23B8A474C52973B86
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png
Preview:	.PNG........IHDR...(.........U90.....PLTE...L...."p3.L..K.....I..H..K..J.....G.....E..J.....F..I.....H........D.....E.....\|.C........{....54>......m2....ont............B....E..A.......-+8......'&/l2.SRZNMU......}....K.c...j1.@....m2....a`g...n3.i1.h0........~}.?........109i0.hgm...DDK.~.............kjpg/.f/......o4..........QQX......KKR........................................32;...k1...p3............]\ca-.HGN...d..ZY`.........$#,............>..............e/...{z..................<<D...........dcjrrx+3.......b-..........WV]...vu{... .(....@?G...............yx}98A.....................#........................BAI=.........l3....................<.....EBSIFV...P.....A:X]%....s].;..d.tF....7vN...A.YQ..G._wI.'N:.)....`C 80.q.Y%.[".R......u.u.t?.fS.TFz.'....%.IDATx.....0.D+....E../.-Kq.~V....I}......... h..d.?../D./.-T.X.-.....K..../..sT.8..o...y...$N...._.?..>.....MT.X...o.y}\Y..&..;...._.?...xOf.*...."e...L,.............T....Ki^.R.g..}..".

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6141), with no line terminators
Category:	downloaded
Size (bytes):	6141
Entropy (8bit):	5.412388424157133
Encrypted:	false
SSDEEP:	96:EQvUKvaRiF7grvVZ7IRn+DVkrD+5qk2NHPmWlewaN9kVvngpH43X6C+:DpSYF7mvVZ7IRn+DVk3+kk21uWlfaN9d
MD5:	44C56AE0F8BD42AD553B7316B388EA1E
SHA1:	07D8437020F67D97308E36ADA14A22538500135B
SHA-256:	BE4142CD009204F9C6B524AB8AAC0CBBDB6B552F26FE4973C12664DA04F1C416
SHA-512:	F8FE27C24B6815C0B1EE1654CF5B78D3AB92F8F850350326F7EE8117C7802D8064F0724FF8851B4A26C3015A0EA6DFDD3C7FC9B827490577117FDACC6CF819BB
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/runtime~main.58de437c.js
Preview:	!function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.apply(f,_\|\|[]),checkDeferredModules()}function checkDeferredModules(){for(var e,c=0;c<f.length;c++){for(var r=f[c],d=!0,t=1;t<r.length;t++){var n=r[t];0!==a[n]&&(d=!1)}d&&(f.splice(c--,1),e=__webpack_require__(__webpack_require__.s=r[0]))}return e}var c={},r={6:0},a={6:0},f=[];function __webpack_require__(r){if(c[r])return c[r].exports;var a=c[r]={i:r,l:!1,exports:{}};return e[r].call(a.exports,a,a.exports,__webpack_require__),a.l=!0,a.exports}__webpack_require__.e=function requireEnsure(e){var c=[];r[e]?c.push(r[e]):0!==r[e]&&{1:1,3:1,8:1,16:1,23:1,25:1,27:1,28:1,30:1,32:1,34:1,36:1,37:1,38:1,39:1,44:1,45:1,46:1,47:1,48:1}[e]&&c.push(r[e]=new Promise(function(c,a){for(var f="assets/css/"+({}[e]\|\|e)+"."+{0:"31d6cfe0",1:"1bcc8082",2:"31d6

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (26548)
Category:	downloaded
Size (bytes):	29171
Entropy (8bit):	5.38243745805455
Encrypted:	false
SSDEEP:	768:j024ULQwfaekOYoyjgXIHOQ0fNcm7+Jhq3Jt5a6O:j2maekOzysX1fNcm7m
MD5:	62C886989751A359D306FB4B2C31F68C
SHA1:	50AFAD558DA5CFC3849BEDBDA819F84C0D43A861
SHA-256:	D081EC33FF0193ADC9CAAC97511216D6C64CC6B75B1AAA50B78D5C9E859F9513
SHA-512:	43953342632A04FC7BCDB6A684E24E05A270EC3E9C2514F89DF68064A407A827E9FA8696CE68468E7CDB50576975ED948AC6FC324434A9EB5F384B0E33776BBF
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/610-2bd6294a230ecff5.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[610],{4811:function(__unused_webpack_module,__webpack_exports__,__webpack_require__){"use strict";__webpack_require__.d(__webpack_exports__,{HY:function(){return Fragment},tZ:function(){return jsx},BX:function(){return jsxs}});var cache,func,cursor,react=__webpack_require__(7294),react_namespaceObject=__webpack_require__.t(react,2),StyleSheet=function(){function StyleSheet(options){var _this=this;this._insertTag=function(tag){var before;before=0===_this.tags.length?_this.insertionPoint?_this.insertionPoint.nextSibling:_this.prepend?_this.container.firstChild:_this.before:_this.tags[_this.tags.length-1].nextSibling,_this.container.insertBefore(tag,before),_this.tags.push(tag)},this.isSpeedy=void 0===options.speedy\|\|options.speedy,this.tags=[],this.ctr=0,this.nonce=options.nonce,this.key=options.key,this.container=options.container,this.prepend=options.prepend,this.insertionPoint=options.insertionPoint,this.before=null}var _proto=S

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3777), with no line terminators
Category:	downloaded
Size (bytes):	3777
Entropy (8bit):	5.201597179155406
Encrypted:	false
SSDEEP:	96:h9zMCQ0G6KAbuGQ2f4BKrnmPuv2060qWa7yRtp1n1VdW6v8CS:fMCLXfvP60jWyH/h0CS
MD5:	12FAA2B69DBCAF002B66F9071D8D0978
SHA1:	2D681E56ABADD90CC10631AA01554E4CD1A609C2
SHA-256:	919A2F39571110A63107EDB4E885ABF3734688DE0928137933DC717D185BD657
SHA-512:	454A89741ACD2C6C255941EA40ADD37C17041BE228321757D16D06E774E27F46BDB9E831711A54BA37B12C808922E59FBE17663D8D60EF1750DECCA051C4BD18
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/webpack-a0deeec5c85c92d3.js
Preview:	!function(){"use strict";var deferred,leafPrototypes,getProto,installedChunks,webpackJsonpCallback,chunkLoadingGlobal,__webpack_modules__={},__webpack_module_cache__={};function __webpack_require__(moduleId){var cachedModule=__webpack_module_cache__[moduleId];if(void 0!==cachedModule)return cachedModule.exports;var module=__webpack_module_cache__[moduleId]={exports:{}},threw=!0;try{__webpack_modules__[moduleId](module,module.exports,__webpack_require__),threw=!1}finally{threw&&delete __webpack_module_cache__[moduleId]}return module.exports}__webpack_require__.m=__webpack_modules__,deferred=[],__webpack_require__.O=function(result,chunkIds,fn,priority){if(chunkIds){priority=priority\|\|0;for(var i=deferred.length;i>0&&deferred[i-1][2]>priority;i--)deferred[i]=deferred[i-1];deferred[i]=[chunkIds,fn,priority];return}for(var notFulfilled=1/0,i=0;i<deferred.length;i++){for(var chunkIds=deferred[i][0],fn=deferred[i][1],priority=deferred[i][2],fulfilled=!0,j=0;j<chunkIds.length;j++)notFulfilled

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	74516
Entropy (8bit):	5.505393259268924
Encrypted:	false
SSDEEP:	768:Yzc3vzcCDQG7x2GEefEcY9VU5gBFELVQrOJsjJabPN7bfE3lslJZ0RVBbRjIhV1u:mYbQGdB89VGQrOJs3z0V7Wb
MD5:	3D2EECFEAB24C42F510811F441FC9BCB
SHA1:	54132CD97C80B587F8397D6E721F59C7ABC12DB4
SHA-256:	5DC5CDFA5ABE4D19100A5C64466E15878D12979C87845B5CE66F38E1CDE57ECA
SHA-512:	7BCCB4CD32085A7DFA84078EE913FD48F5AAC4CF315AA29B681DC157ECDAE9DD7BE377A6B041CB5F413A9661CFDF9F97B94DA79EB502FC89830CE5A0FCF010E1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/1.0ca46fe3.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"),r=n("TbSn"),i=n("ERkP"),c=n("0lfv");function useGetConversationRatingMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.l)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.l)(n))return n}}}return null},[e])}function useGetConversationRatedMessage(e){return Object(i.useMemo)(function(){if(e&&e.length){var t=Object(r.a)(e);if(!Object(c.m)(t)){if(Object(a.f)(t))return t;if(Object(a.k)(t)&&e.length>1){var n=e[e.length-2];if(Object(a.f)(n))return n}}}return null},[e])}},"1b8i":function(e,t,n){"use strict";var a=n("s8DI"),r=n("da4L"),i=n("ERkP");t.a=function useTimedMessages(e,t){var n=Object(i.useState)(function(){return e}),c=Object(a.a)(n,2),o=c[0

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	65
Entropy (8bit):	4.4378490674947475
Encrypted:	false
SSDEEP:	3:fFwNyhIAn3czX3V2Y:fFvjn3ccY
MD5:	25A615EB83790CD70FEF4CAAE67769EB
SHA1:	8B068A93B0C8701358E30B002ACCCEE8EB2D2F1B
SHA-256:	C8E58ADA9DAC919D2B3F588F17209AFF029C8F1C5B7D6A7BBA1EE90403C86CEB
SHA-512:	F803103162950EC1F5F6C0C8573619060314B5D571DE26BF0373B6B1B8C679FF4581818F05F193C975DB96262477EE4BD5CE6546C74282B3C92046544DF10D64
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/sa.css
Preview:	:root {. --sa-uid: '0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892';.}

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65440)
Category:	downloaded
Size (bytes):	903395
Entropy (8bit):	5.333218430022891
Encrypted:	false
SSDEEP:	6144:sezgezZ5VNIkLRt9ZxhquB66/3Po89f3jeRuEN9Z2Cqko8Vo87CINZoo8pD:SezZm83lENPbCD
MD5:	4C89310FD1D20D92E9B97E241528457D
SHA1:	A36EF469EA62D71ED9B14B219DDB42F4973EE08A
SHA-256:	2B3FB028BCBFCA99B0BEBE0535E585F3B8227ADC64E83F1C3522340BD40A90C1
SHA-512:	EFCF86A4B727A4EC9D319E6CCCC122FA4E70BAAEFDC5026FDE69B4D6FD42433EEB037E13DF892F691D9E171F085CA3C6FD0C94FD3DAB57608BD0F609CD35F535
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.backbone-app.js?cs=822a399789fd26ba5f5e
Preview:	/! For license information please see signing_iframeless_mobile.backbone-app.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[7576,284],{683392:function(e,t,n){var a=n(813624);e.exports=(a.default\|\|a).template({compiler:[8,">= 4.3.0"],main:function(e,t,n,a,l){var i,o=null!=t?t:e.nullContext\|\|{},r=e.hooks.helperMissing,s=e.escapeExpression,c="function",u=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return'<div id="simple-verify-dialog" class="modal-wrap dialog" data-qa="simple-dialog"><div class="modal-content" role="dialog" aria-labelledby="simple-verify-dialog-title" aria-describedby="simple-verify-dialog-content"><button type="button" class="icon icon-times x-close close" data-action="canceled"><span class="btn-label">'+s((u(n,"$")\|\|t&&u(t,"$")\|\|r).call(o,"DocuSign_Close",{name:"$",hash:{},data:l,loc:{start:{line:1,column:322},end:{line:1,column:344}}}))+'</span></button><div class="header"><h1 id="

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmp18a2f87s", last modified: Mon Apr 15 13:22:39 2024, max compression, original size modulo 2^32 269376
Category:	downloaded
Size (bytes):	86823
Entropy (8bit):	7.997639143608175
Encrypted:	true
SSDEEP:	1536:bfGD+w7xXv8N3w3nNW2q6rrccag1NjyIAIPHQOBBF17aSd7po8PUa0m0:TGxNXvysIL6sc/1NjNAYHTDG4p1ca05
MD5:	5BA6754535C0E28386EC10C56C25E639
SHA1:	19AE658521CC50A1ACCB4F4B6ADD33AB54CF20D7
SHA-256:	42AFCE9DB68FD08FEADD7B8C6F89F5BACDE283835C3797BCD3BDF5B86232EE64
SHA-512:	AE38B77D685D673F7BAD6FE2B4B01F0C58B3C432A42056A3181C170DD27B0CBF28DE6370A439575C0433AA11F37CE84AA461C0DB68FC7D2072B1E54E21FF557F
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/s/fs.js
Preview:	......f..tmp18a2f87s..i[... .}~....j%B...........v.:<..@.Q.....~#"..........6.....XVW../ER.Ec^..i....^.Z..7b.!2.n..kg...l2.Q\|.j;.Q....r......:HE...t.....9.kiT.L.i.^]...m.C%.V..E..~.LVS._'+A8^.E.X`%...[]]:.b..n..1..kY8.F....d...B'....n.^&..&..Icw.Co......d...b.:...,.a..{...1.D.Lx.1O.8tS...;......q.F.....?>>..N1\|z...g"L. .q.R/....eS[.B.!m..~8{\|,.B.]...BO.8..5....6..<Na...:....1.C...<..ut.55.q.::.Y.F.X^.a.\|_x.e...B~[;..8..8.. Ij....8......z../.p.Ww...(....0.8.....?....~.0...+..BJ.ca>P.K.....Q..Ckm7.....a.coF..[k*...TU0.q..3..;..o.....i..."..qG....i..\|8.Z\.....C.....h......)b.j{!c..&Xl...v..+\|h.Z$..\32.......H...!.9.a=!..FA:.....f&wd..8.........,v..8.y..i....-..7...7..m\9......`.5`.n."o..n..z....`..h..'/...[......e..$8.v.%0.m.:`O....9T.....^...1...v6...3......#..15?.hA@...7c......._.E...d ?...d..aX....3.%.km".j...Q..o....C.&n.`..l\|......6v..-d.$.M..".#......!h`._ ..k......?l...=......;..m.{..%XB....).r...!..+.In.Ba.=..\|..d..K(.z.c.a

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	119869
Entropy (8bit):	4.18401975910281
Encrypted:	false
SSDEEP:	1536:h5nLZxjaZ8x2R3Ud4FqBW92ZgyFqBW9sLBHdyoXwIWc1GO9GwIw6CTq14e7pnvaM:h5LZxjml1GO9xqB7pnva38
MD5:	ECE7A224F69AB2205D90900589AE1D05
SHA1:	3D861B816A5DA892C8A88D5755A5537C036239DE
SHA-256:	FFA8C6A4CE199BFD9E32B05E0E4DECE330C6A577FB3A0E8518291619C658C486
SHA-512:	EEF4BDD54AF95BE42224FFE605BB627293DAEA0C58A50B328ACC8B56040C81FDCB5EC8406F56856FC617A552E4D6DD28BB892467666889D27F03EE8BFCD16D7B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/v/static/mixpanel-2-2-1b.js
Preview:	/. DocuSign modified version of Mixpanel JS Library v2.2.1. * $initial_referer and $referer have been removed, as not to send any senstive information. * $initial_referring_domain and referring_domain have been retained.. . Mixpanel JS Library v2.2.1. . . * Copyright 2012, Mixpanel, Inc. All Rights Reserved. * http://mixpanel.com/. . Includes portions of Underscore.js. * http://documentcloud.github.com/underscore/. * (c) 2011 Jeremy Ashkenas, DocumentCloud Inc.. * Released under the MIT License.. /..// ==ClosureCompiler==.// @compilation_level ADVANCED_OPTIMIZATIONS.// @output_file_name mixpanel-2.2.min.js.// ==/ClosureCompiler==../.Will export window.mixpanel./../.SIMPLE STYLE GUIDE:..this.x == public function.this._x == internal - only use within this file.this.__x == private - only use within the class..Globals should be all caps./.(function(mixpanel) {. /. * Saved references to long variable names, so that closure compiler can. * minimize file size.. */. var

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3114), with no line terminators
Category:	downloaded
Size (bytes):	3114
Entropy (8bit):	5.256224332537812
Encrypted:	false
SSDEEP:	48:lD58u5a2nLPHMXC9Y1/65EyUV1GZW1nttv+r3SKlTaob8wfsJ3pFWaUGA9oUOkio:A2DHMSS1/LltCRiwYMoUX
MD5:	B5201FF04DA30312910B71E1DA072DD2
SHA1:	84B0303592849AE0E16C33F9EA4776B22D6F326F
SHA-256:	9373A860524D692CE81C1F8F266B511CD597A7F1DBB9FB674C57A303101C21BB
SHA-512:	5F3C0F76106D54056FCB06A8B41C5D390AD6E410C0290E8B0F24985259ED526433395FF87F9E2658C0DCFFD41B4FA33172A169B6C675F9FD0D1A00EE6461DBE5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/39.f1d268f5.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),h=function forceComposerFocus(){if(Object(m.a)()){var e=document.querySelector("textarea.drift-widget-input:focus");e&&setTimeout(function(){var t=e.value;e.value=" ",e.value=t},50)}},v=a("SkRI"),O=a("Cpup"),w=a("HSQL");l.a.name="chat";var j=Object(f.lazy)(Object(r.a)(n.a.mark(function _callee(){return n.a.wrap(function _callee$(e){for(;;)switch(e.prev=e.next){case 0:return e.abrupt("return",Object(v.a)(function(){return Promise.all([a.e(0),a.e(3),a.e(1),a.e(28)]).then(a.bind(null,"SrLZ"))}));case 1:case"end":return e.stop()}},_callee)})));t.default=function ChatPage(){return Object(f.useEffect)(function(){Object(o.a)({name:"chat",syncWith:"controller",store:l.a}),Object(u.c)({topic:"CONDUCTOR:action-from-plugin",handler:function handl

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7555), with no line terminators
Category:	downloaded
Size (bytes):	7555
Entropy (8bit):	4.968086769227201
Encrypted:	false
SSDEEP:	192:+vkz1/kwiMULuOsvzo2qKFOb2/gh75uG2m5vnbsW4RZYH8SP:kYG75X5vnbsW4Rc
MD5:	189AEFFD571884559DABABA22C66D75A
SHA1:	7B8BC38FB8A289535FC0C369E16F241D604828FB
SHA-256:	DD09E3BA26066ABE27C4DAD57C8E0C8A63FE23A0BC87E63BCAB94F25E9096459
SHA-512:	1B1BC05A69CB53E252ED017D28AA0709A08C39715A6656D2D9EFF029EDEC8EBDE28B20FFC1C033A769BA66430ABD79B9A8E4F9A4B3E0D9524C939EC25B4B7DE2
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/3.07aa08a5.chunk.css
Preview:	.emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#fff}.emoji-mart .emoji-mart-emoji{padding:6px}.emoji-mart-bar{border:0 solid #d9d9d9}.emoji-mart-bar:first-child{border-bottom-width:1px;border-top-left-radius:5px;border-top-right-radius:5px}.emoji-mart-bar:last-child{border-top-width:1px;border-bottom-left-radius:5px;border-bottom-right-radius:5px}.emoji-mart-anchors{display:flex;flex-direction:row;justify-content:space-between;padding:0 6px;line-height:0}.emoji-mart-anchor{position:relative;display:block;flex:1 1 auto;color:#858585;text-align:center;padding:12px 4px;overflow:hidden;transition:color .1s ease-out;margin:0;box-shadow:none;background:none;border:none}.emoji-mart-anchor:focus{outline:0}.emoji-mart-anchor-selected,.emoji-mart-anchor:focus,.emoji-mart-anchor:hover{color:#464

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 145 x 60
Category:	dropped
Size (bytes):	5469
Entropy (8bit):	7.404941626697962
Encrypted:	false
SSDEEP:	96:IvklPN/PqPZ8M86x9pOa36SrhE/knsz7BklPN/n:IIFHqPZbx9tKSrhtseFf
MD5:	097D652B65DEC6E954C335739754FC61
SHA1:	83155314927200EC3B9951246D0C1C3B631B088A
SHA-256:	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
SHA-512:	DE13A4A8CCEC57F7AF23143D55A93AF581D04F6066DF5C0D0B910DEC17EA0EA430621ACD88A25422A5180F37EDAC44A6746051BCE942F8D5E07BF8842A3F08EB
Malicious:	false
Reputation:	low
Preview:	GIF89a..<...............................................................................................................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39E8547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39E7547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22335ebf-8a2f-43c0-a35d-602b0ebe7cf3" stRef:documentID="xmp.did:695

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (451), with no line terminators
Category:	downloaded
Size (bytes):	451
Entropy (8bit):	5.475555025944294
Encrypted:	false
SSDEEP:	12:ZaiGmFMFVHFGwX7d5WK2HPdGdRq2NFXjV:Z8cMvHYw3QHPQdXNFV
MD5:	BFF21D31FDD0AFEE86AD7D9D69F7B509
SHA1:	EE50386079FC977EDC9CDE0ACE7C9F12A479C67E
SHA-256:	B56E0BD6B800A8C6EA4E77EF22E55E58BF98F92DE70FFF7A0A1CCB455795B540
SHA-512:	DE95DE2EC354F9C9EAF1039F38A737FB3C5AA84028C227B48638CFC6FF1A6B7BF3E516093F372F360513A8B17F2F29CEB85776A02662DC5CEA8CDAF9F8D4ADFE
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/7e62994d52a35bab3a33efea7caf3320a22c86de/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/404":["static/chunks/pages/404-502801e88e907967.js"],"/_error":["static/chunks/pages/_error-5276d7836f3b57bf.js"],"/[...page]":["static/chunks/349f80dd-8f4d13fff1aeee64.js","static/chunks/951-7cd610ccb5dc592c.js","static/chunks/pages/[...page]-109849364cec612d.js"],sortedPages:["/404","/_app","/_error","/[...page]"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65156)
Category:	downloaded
Size (bytes):	142036
Entropy (8bit):	5.387650585201245
Encrypted:	false
SSDEEP:	1536:YEvlNAND5d7fCJZKYYfLif/5VolRqZwKksm/S6bQg5FSrJRR/C:YEN87KrYfL7Exj6E7bZC
MD5:	89C853C4D5D8DA361D51F767FD6D3A7B
SHA1:	B20432BC1B0A4A8FCD3A0F701B39205FC8D6F931
SHA-256:	CF8DC859D765E3697558BFFA27D942011DDB1049B359DE2AF1C5AE5FFB679871
SHA-512:	0DAD5F5509ED0FE24E9FFEAFD8A8372CB7151EE7DFA82A14823BD459D90EA48485953022B03F7BA4AE0BA0CA54CE34465CC847CAD253776E5D84CD63534443AC
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/framework-ffee79c6390da51e.js
Preview:	"use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(__unused_webpack_module,exports,__webpack_require__){/*. @license React. * react-dom.production.min.js. . Copyright (c) Facebook, Inc. and its affiliates.. . This source code is licensed under the MIT license found in the. * LICENSE file in the root directory of this source tree.. */ var xe,Aj,Bj,Cj,Dj,Wk,aa=__webpack_require__(7294),ca=__webpack_require__(3840);function p(a){for(var b="https://reactjs.org/docs/error-decoder.html?invariant="+a,c=1;c<arguments.length;c++)b+="&args[]="+encodeURIComponent(arguments[c]);return"Minified React error #"+a+"; visit "+b+" for the full message or use the non-minified dev environment for full errors and additional helpful warnings."}var da=new Set,ea={};function fa(a,b){ha(a,b),ha(a+"Capture",b)}function ha(a,b){for(ea[a]=b,a=0;a<b.length;a++)da.add(b[a])}var ia=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createE

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	71663
Entropy (8bit):	5.438176761243166
Encrypted:	false
SSDEEP:	1536:gIXxlOtJCeX5whYXCkJkzkKIzYcc9uSlYRUMRn7B:XXxlcCrkJkzkIRYOMd7B
MD5:	489B1FF4B0D187650DC5B9899B9FA5B3
SHA1:	9FEFDA89D7E1BE195773CD2F2806A77D5C6A517D
SHA-256:	D7CCD77B205B05362BE85D33D9A12243E164501B4AE8908D7CFC391675991E08
SHA-512:	08142F936413EFD75A5942D9D9AC30A56E680709F1825AF8FEF393BCDFABB08B12F86588857151266907E27596BB7318E7ADDAA6347DE21AACC8FE642EB5107C
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json
Preview:	{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Preference Center","MainInfoText":"When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. This information might be about you, your preferences or your device and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies. Click on the different category headings to find out more and change our default settings. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.","AboutText":"More information","AboutCookiesText":"Your Priv

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	13614
Entropy (8bit):	5.21163185311822
Encrypted:	false
SSDEEP:	384:7Iy0clDjbn42OXOw85csXf1NFyNg/OoH6iAHyPtJJAR:7Iy5F/i
MD5:	9B1F8DDF85FB0CBFD926FAACB1FC0405
SHA1:	ADE7F952C70F07FD3497CD3E8656CA1F28C78633
SHA-256:	F4AAA18C55C90588C5E828E56DCC6B2CB0ACF9A4280494C7D1A53FC5E3669112
SHA-512:	E4459B7442F642BAB997BCA930530D2353ED53E24CA0F7D7A6ADED68CF6852693EEDFBC4594FEB4D80BBA779F566BA8918D3462C690F70D277D3E2C155C02280
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otFlat",. "html": "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

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	497
Entropy (8bit):	4.684891921463926
Encrypted:	false
SSDEEP:	12:t4O6aVCd3luZsgbfFTLE+C1ydL0ZQ9jXcaggOCedJI5iNtcME:t4O6aUdVmLCwdL0u/OTJAOtcME
MD5:	B57C99C9D1E3C50B2114C6DB053D7FF0
SHA1:	ADA8ABFED92BA8A545BBD9D299D74D5972CC4AE8
SHA-256:	691DCDB24853A0F5CE4E6597E5713DEA66799B57FFE2C2A10F28F98E0B569B19
SHA-512:	0DAB6D06F386D922FB28F70F2590D4F9C361E7F4E5D5E581B98E59AAC12B266CBA596FFCCD87203B4330673EE4EC1D459A1ABDFC4B066D243A43B2BF7909F0EE
Malicious:	false
Reputation:	low
URL:	https://optanon.blob.core.windows.net/logos/static/ot_guard_logo.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path class="ot-floating-button__svg-fill" d="M14.588 0l.445.328c1.807 1.303 3.961 2.533 6.461 3.688 2.015.93 4.576 1.746 7.682 2.446 0 14.178-4.73 24.133-14.19 29.864l-.398.236C4.863 30.87 0 20.837 0 6.462c3.107-.7 5.668-1.516 7.682-2.446 2.709-1.251 5.01-2.59 6.906-4.016zm5.87 13.88a.75.75 0 00-.974.159l-5.475 6.625-3.005-2.997-.077-.067a.75.75 0 00-.983 1.13l4.172 4.16 6.525-7.895.06-.083a.75.75 0 00-.16-.973z" fill="#FFF" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	23144
Entropy (8bit):	4.609989283730634
Encrypted:	false
SSDEEP:	384:ao0Hmh3q58PeYRwKBjrUxpuuh3q58PeYRwKBrYhkq58neYR2KB8O/babh3q58PeS:1L3YPxKBjrUxpB3YPxKBrakY3TKB8Omp
MD5:	F0C49B7F657C685F8856350167161D08
SHA1:	E30839010C9012F55C3727445B0F5CD181197FF0
SHA-256:	F61547DE93D90087E381250884A50F6B458B56C81501606DE9603FD9BB20DF26
SHA-512:	CFC46F8E567509C78DE83F3A1009EF890CC90AC6A8AC75BF57BBD05DD49A5C5BEEC7980A9A02F1070747052C02A0D86DCEE9592B8EA964289CC83DEED4D70140
Malicious:	false
Reputation:	low
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8335b-1f5b-415d-923b-2daa2d0de9bd","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","al","pr","dc","ny","ut","nh","ia","ok","az","hi","mp","oh","ri","id","wa","mt","nd","nm","md","ak","de","nv","wv","nj","in","tx","gu","il","ma","me"]},"LanguageSwitcherPlaceholder":{"ps":"ps","sr-SR":"sr-SR","pt":"pt","es-BO":"es-BO","en-AE":"en-AE","el-GR":"el-GR","en-AM":"en-AM","zh

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 44
Category:	downloaded
Size (bytes):	3745
Entropy (8bit):	7.319238994753888
Encrypted:	false
SSDEEP:	48:Hu2/EvnLJnOcLJ3JK/L8GlRq8weMpUVCvoIhy7bEhCcmR687yHxl:Nklla/Jnq8vkNhjolyRl
MD5:	DEBD77E543E64173837073B5751ABB08
SHA1:	71577CA453893F08A57A63953B836E8198D878AF
SHA-256:	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
SHA-512:	0FB269F547FFB69E59448FA4E9E234DC4E9B381D5336947C12113D7A1DEC71A7D9EC4F6B2841C032EA1E3FB6E68328D34C1EE1B94761171E523AFBFA962280F2
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/imgs/loader.gif
Preview:	GIF89a,.,..2.+++RRRCCCTTT---LLLiii###SSS777@@@EEE888666KKK&&&NNN333%%%<<<000......>>>QQQ(((bbb......WWW...999,,,.................tttuuu$$$...zzzXXXmmm......UUU"""..........................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39EC547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39EB547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6189959b-1072-4052-a607-820f04aae975" stRef:documentID="xmp.did:695

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	123098
Entropy (8bit):	5.307263521497999
Encrypted:	false
SSDEEP:	1536:KjfIOJe2RcAFEV8WaIIURxIZF9Esdwv0yFm9McHJ96G196:4e2K4URxIZF9EdJuRp196
MD5:	B481CAC2657584EEEC6CB46DDF750890
SHA1:	0AAFD440DCFCC791570B0F755AAAFA087207CB20
SHA-256:	EF79802452C1E4657E54CC81DF50C42B831A19000BA6988CE31DE740E7E5782E
SHA-512:	21ACD3806E560915C83FE8D5EB0B8E63C20DF0773B9C70D6FA8D8692E9343843D55C489659F78C7C4C0F545960802A7ABBF8C8D3F8CCDA8A5B9CD1C00A860CD3
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/main-96f41e99722bcfe8.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[377],{26783:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"addBasePath",{enumerable:!0,get:function(){return a}});var n=r(67891),o=r(69291);function a(e,t){return(0,o.normalizePathTrailingSlash)((0,n.addPathPrefix)(e,""))}("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},96484:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"addLocale",{enumerable:!0,get:function(){return n}}),r(69291);var n=function(e){for(var t=arguments.length,r=Array(t>1?t-1:0),n=1;n<t;n++)r[n-1]=arguments[n];return e};("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Objec

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2783), with no line terminators
Category:	downloaded
Size (bytes):	2783
Entropy (8bit):	5.030747095760829
Encrypted:	false
SSDEEP:	24:Y1AJ3Hkp/yDWTkk3VyBWTikgCyOHFC5fkIhz0s6X06kCvfkaz046X06vCufkrz0y:YWJUVZnLKB4zxi/8x9A5ApRbSR/k
MD5:	87532C4DB85F1429FA6D759BC3332F36
SHA1:	4E576E680C9843DAE6FBBFBAEA10822B3B70158D
SHA-256:	E40B6EAE9D66C60B9C750DA70DA6B2BC5D35C2AE9689CC1E9547E300FAC4A3BA
SHA-512:	CC961007D9F014C4CD2086C977315B26128EF627F707316FE672F3CBE9688BCEAC40B3D24CD4DCC1D390D5A390208004DD3213A23AE293C5C422DE5F89D192E1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/39.11d2b6a7.chunk.css
Preview:	.drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animation:bounce 1s infinite;-moz-animation:bounce 1s infinite;-o-animation:bounce 1s infinite;animation:bounce 1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(2){-webkit-animation:bounce 1s .1s infinite;-moz-animation:bounce 1s .1s infinite;-o-animation:bounce 1s .1s infinite;animation:bounce 1s .1s infinite}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:nth-of-type(3){-webkit-animation:bounce 1s .2s infinite;-moz-animation:bounce 1s .2s infinite;-o-animation:bounce 1s .2s infinite;animation:bounce 1s .2s infinite}.drift-widget-loader-balls--small{width:16px}@-webkit-keyframes bounce{0%,25%,50%,75%,to{-webkit-transform:translateY(0);transform:translateY(0)}40%{-webkit-transf

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 788 x 591, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	8739
Entropy (8bit):	7.925138481694344
Encrypted:	false
SSDEEP:	192:cqbEkA4NlWkOiICMfzJPcgdvY7lKl8Ws3+gli0teVQSejn7k2cMS:nbJRNlWkObP7NfclG8Wo3XtgHpAS
MD5:	E259D49AD1B22D7F61343B11E3D63454
SHA1:	43CF47F1223CF0C69BB3C03974EC569BA7A812D9
SHA-256:	051DF612B9831A8AED7A441B878157B717C0AB1B374F3F0E89AF8BE2C6CC381C
SHA-512:	51B061A1242688F4283C951B87C63389DF9220AC3377573952BCC1661C42B59B88A6925A20465546FCA0B16D5987E9DB7955E1DCBF1F2DB44DC660E15CC802D8
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png
Preview:	.PNG........IHDR.......O......cb#....PLTEL......W2...E......y..+...... C...R?W..&...e.......l1....c...LL.Aey.....!..`.9....@\'.T...a..L,...H.... ....`...\|I.]'.c ....\..tF..6.b .0...y.LI`I.....`!..,....y@....t.....dL...20@.................e`.........@.....B&...\...7 .m..7..R/d$.....U....XTpp&..vm.G).6..1.t=.Q..0..0...U...+..!.p=..rl.".z.^?....p..P......0...h7.Q....kX..n....&.h6.....FXP..@;T>.....<r..0&%0..4...<#P..h7...P.. ..0..Z-.D..y..!..v....y'6.r;L.. .IDATx...;N.1.......tPp.t..J.."......v'A.Y.v.......C.g....{.......&.....>..M..>..Aq....A.rP8.qP(@..6{.W..7...i.9...X.S.m...lUY.XUYf..T.iv..X.>.....s./.nOZ...=.?Q.=.?..{.A...;.'&t....[.........R..T0#..TPyJ!.`N.B...^s.w.^g.<.,`...ic..x...}..9...eZ.........v.W..Hl.DEVM.o...Pxad$.9m....3...s.z.......U.EK.A!(............V?Q..AA!(.....HN..`JP...Aas.....}bJPX..%..yOAC/9..Q...2Y..c...?....F..6....!Yl.(4.....C......BE..T.....'.'&..^`p.?T.9.i......<....`..y..0..H.D.l..!.6hm....Y2K..H.n elR)....{.x.~

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 47748, version 1.0
Category:	downloaded
Size (bytes):	47748
Entropy (8bit):	7.989435227374723
Encrypted:	false
SSDEEP:	768:1yzfdQMQzGg04WTWcg8awnHWLEB6B9xN/F7iGDXCt6R9HlDw90XamA4er:1qeAqcgI2gsN7jXfHls90Xab
MD5:	4A573FAC9111D6ADCB3994983539BD75
SHA1:	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C
SHA-256:	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
SHA-512:	6ADF6B31AE697E2CFF767BD613E2F787EBB088749EA5D8263044188EA020336ED1368C9EA9C39A19C70B7D96226B018F50C0E319EED1E6A6DBD9F32BCFA2E064
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/HelveticaNeueW01-55Roma.woff
Preview:	wOFF........................................LTSH............._gOS/2.......V...`e8..VDMX...l...g....r.z$cmap...............cvt .......F...F.C..fpgm...........b2Msfgasp................glyf..........MlS...hdmx...\|...~...(...vhead.......6...6..1yhhea...4... ...$...Fhmtx...T.......x.h"fkern...L........v.v.loca.......g...\|....maxp...8... ... ....name...X...b........post........... ...2prep..............\x.].1..0.E....l.......z.w..\.....q...)....o+.K)...4...n\Y.....A.J8.%6.4..6[.1.{...f.?.#.?..<...c..sA>Q..g.L......z....N3!x.c`f.e..........................X.@....A_......\|<...........N0.`...3..X.N1(.!...D.4..x...ex...F..?....%.AB:......)..FB..s06V,...m.........d!.....FV..w..Mf'..A......\..-.G.%..G>.J~.....) .Q.P.B...eQ..b...)f.)AqY....%...)%.PZ...,GYY.r...eE*X&..(+SIV...J...Ueu...T.5.!kQ..M-Y...u,.z.......eC..F4..id.4..l...Md3...4..Z.\......-ekZY2?.Z.qlK....H;......h/;:.B.K...eg:..t.]......NW.n.'.e/zX...)..K.....>..}....'.._.t...9..........1D..q.g...09...wF.Q2...c.%.2

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 4688
Category:	downloaded
Size (bytes):	1328
Entropy (8bit):	7.832802759962834
Encrypted:	false
SSDEEP:	24:XtqsAy0Z6XD6U2gVJC1EQzjAYMGsH2ytCXKyFkrcb3KVTwXjy8llMuH:XMq0Z07017MLH2yeK0cuD5wuH
MD5:	DC228CFA17FB29F09BF996AF94BA58FF
SHA1:	F2CA829572982D8EF3F3653CED28E226A4B56F60
SHA-256:	05A14B342385AC9193EAE07C8297929B7A0D95E5BB3084E7F022DE968C490906
SHA-512:	C4EDC424BA9B330D5E285BEEB91B7942E23368D9FCF62217699B767CA034F61DD0955D1F71097E01CD0D8673B4AD6490EF890B605B02F3A4CEF41E992F321866
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/s/settings/12BP4E/v1/web
Preview:	...........WMo.=...X(...(.GwQ..!M.d.v.mR.q.Z.gTk.Y.......i....'.b..d..G..G..(.~...... .?..x..L..;.;.w.l\...Q\|.X....I4~.whQ.'1..U5.U.K..5..2 5.Ef.z..\|.I...D...1.0B{. n...Q.U.J\a.[./.(c....L41.X...r...._.q)...>9?sk..l.e..N._..0..k..:n.....B18[f.........P.W..,2..TJ..y..i\|.e\|2.......v......,U...T..D.a..........{.e_j.Hr...>xa.L.(.. .....p.^pi...5n...^.....Ax.x.>..p.D....J?!VA.\m.Z...6<.M...l...sH.....".Sk\...m6...x..O.~1G_).6.+f2..156k..d....bp..{..@..L.3&` .)..+........S4.b...N{a.Q.z...u...AN..S).....>....C.U.j..y...b_.....,(,..H..6K..y..R...+..k.6..x...l..p~x.. /U..~.Og.....U.v.^.l....].R..?og....'...#...;\.b'..6`....d.@.._D.....x....s...Sc.............................t.k..'.....D.#.r%.!^.L.Jj..%r..n}.D(2.2...o.....Q...E.s....o..x..,.4..B.w4.4...T.....>D...2^.._.....8...y.]......=..0....'O&71.. /.!].)....).: I....r.4.MM..\S...]H&Ph.X.:TqZ..f.!..:.^.".."..s..W>`.h[...'.<[.!C..Qo.[.....)wI.....2L...&T>.-i..k.=.}'..W...&#W..g.F. ......6.9.S..};.+..\C..

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 79 x 79, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2879
Entropy (8bit):	7.660950602080433
Encrypted:	false
SSDEEP:	48:D9itNn2VQJ3znK9gJS9mvS4yUhIwYZ7lNodG26472DYf6F/9:DO2knK9gQmbyUhvYZ7lF26Je6V9
MD5:	C87DA3413DAD0BC57D3F6C42C3848657
SHA1:	5F307E843AE7B61DBB541B55CC159386664A40F4
SHA-256:	AE8E67BAA196F0D1A50103804DA7CC8EA1B30F97A3878F044D2EE03902D9925E
SHA-512:	A5D1E1F35C47264FF5616FBA0409249394B6DC44347C0F4B5536679AA1965B8A69AD3C20E42CAE4D82C44B63D1054C5F985B9FA72A7BE563FE2EC3438AFCFB77
Malicious:	false
Reputation:	low
URL:	https://eu.docusign.net/Signing/Images/Profile_Default_New.png
Preview:	.PNG........IHDR...O...O.....%V......tEXtSoftware.Adobe ImageReadyq.e<... iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:C298895EA7E911E0B1F8FF0264B08A24" xmpMM:DocumentID="xmp.did:C298895FA7E911E0B1F8FF0264B08A24"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C298895CA7E911E0B1F8FF0264B08A24" stRef:documentID="xmp.did:C298895DA7E911E0B1F8FF0264B08A24"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...{....IDATx..\kO.:..!.z[.. $.......(o..s..u....)...U.R..}x.............kQ.xS.G.D+......W._i....v~F.6...7.\..8'.t.eY.

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	174350
Entropy (8bit):	5.269598618040973
Encrypted:	false
SSDEEP:	3072:ZJ7JDrS7vqzJLM3Bm6a+IGdG3fCk0XqSAcKhJy+w:gNWKeSAcF
MD5:	2648778C10A159F200A675966FEC9AAE
SHA1:	2BCB891D9760564AB49DF105FB30633C71323816
SHA-256:	7A49F25222BBFCB59BD71EF06A083F4BDC77341484FACBBA00C845CD70C07CF0
SHA-512:	AAEE70D103392FB82745FBDF359F8EADF78ECDBB5D32DFDA8A992B559BB71D7E6287971EF2FA3EAE558568EC493B1C1174BD0F915571CCEEB334A74DCAA1DE76
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.preloader.js?cs=ec337f5ef9a9fc8930c9
Preview:	/! For license information please see signing_iframeless_mobile.preloader.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[8316,2232],{424664:function(t,e,r){var n=r(737588),o=r.n(n),i=r(247601),a=r(939136),c=!1;function u(t,e,r){c\|\|o().ajax((0,a.Wy)("monitoring"),{timeout:i.cp.getValue("AppMonitoringRequestTimeout",50),type:"POST",contentType:"application/json",responseType:"json",data:JSON.stringify({EventSource:t,MonitoringProperties:e})}).always((function(){r&&r()}))}e.c={post:u,logEvent:function(t,e,r){u(t,e,r)},stopMonitoring:function(t){i.cp.getValue("SIGN_28925_StopMonitoringCallsAfterEnd",!1)&&"boolean"==typeof t&&(c=t)}}},386264:function(t,e,r){r.d(e,{Qx:function(){return n},C6:function(){return l},sf:function(){return y},Kc:function(){return f}});var n="https://a.docusign.com/f",o=(r(761088),r(855331),r(947192),r(853224),r(232048),r(427164),r(625744),r(211056),r(331432),r(819672),r(726456),r(185179),r(321992),r(480168),r(

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 47748, version 1.0
Category:	downloaded
Size (bytes):	47748
Entropy (8bit):	7.989435227374723
Encrypted:	false
SSDEEP:	768:1yzfdQMQzGg04WTWcg8awnHWLEB6B9xN/F7iGDXCt6R9HlDw90XamA4er:1qeAqcgI2gsN7jXfHls90Xab
MD5:	4A573FAC9111D6ADCB3994983539BD75
SHA1:	69BEBEFE9EDEAC85CC27516DBE0EA176C1C2C25C
SHA-256:	DAC5803D6CBE40244DFD39661406239F83E94E86C976E7229A4E35305A9B5EFE
SHA-512:	6ADF6B31AE697E2CFF767BD613E2F787EBB088749EA5D8263044188EA020336ED1368C9EA9C39A19C70B7D96226B018F50C0E319EED1E6A6DBD9F32BCFA2E064
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/fonts/HelveticaNeueW01-55Roma.woff
Preview:	wOFF........................................LTSH............._gOS/2.......V...`e8..VDMX...l...g....r.z$cmap...............cvt .......F...F.C..fpgm...........b2Msfgasp................glyf..........MlS...hdmx...\|...~...(...vhead.......6...6..1yhhea...4... ...$...Fhmtx...T.......x.h"fkern...L........v.v.loca.......g...\|....maxp...8... ... ....name...X...b........post........... ...2prep..............\x.].1..0.E....l.......z.w..\.....q...)....o+.K)...4...n\Y.....A.J8.%6.4..6[.1.{...f.?.#.?..<...c..sA>Q..g.L......z....N3!x.c`f.e..........................X.@....A_......\|<...........N0.`...3..X.N1(.!...D.4..x...ex...F..?....%.AB:......)..FB..s06V,...m.........d!.....FV..w..Mf'..A......\..-.G.%..G>.J~.....) .Q.P.B...eQ..b...)f.)AqY....%...)%.PZ...,GYY.r...eE*X&..(+SIV...J...Ueu...T.5.!kQ..M-Y...u,.z.......eC..F4..id.4..l...Md3...4..Z.\......-ekZY2?.Z.qlK....H;......h/;:.B.K...eg:..t.]......NW.n.'.e/zX...)..K.....>..}....'.._.t...9..........1D..q.g...09...wF.Q2...c.%.2

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31436, version 1.0
Category:	downloaded
Size (bytes):	31436
Entropy (8bit):	7.993250168057893
Encrypted:	true
SSDEEP:	768:lIQXpJaSv1p16Copvvta/RKIxLD+fSw88A9mWLkYWsxMppOD95:eSNzxopta/8IZGA93LtxMppOL
MD5:	BA0E987E564CD3409E9D6F690D641F55
SHA1:	1C2684BD20C775B7497796C2FA66AD4943F6B824
SHA-256:	346CFD3DF3DBB80D08655AE396A413F66CBCCFCF201EAE36A6403DCF7ED372BC
SHA-512:	DFBA7D6B8114C9DD1A3288E053F6E7C18A1909F6CBBDF35E46B1972E15497D1C35FE1007FC90CAF111D20AB036D9E1C73C15EDD7B2BF24F24CA4A2A36EBA571D
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-semibold.woff2
Preview:	wOF2......z.......jl..zc........................?FFTM..6...H..t.`..V.(..e.....l..).....6.$..(. ..4..3..M[WL.....{(HD.!..:.jV;\.......vy.b.a.us.f..j........{.I..%.%....H.j.v.n.53sP....CI..D.^.>`Jdb.y.. .E.L...I....I...vD.c. .VD..S.f..x.E....v!...k...b.../.....;...s..T..Y~....~N7m...P.wv..t.....K\|.(...b...h..~.....m..{\|......SdU.RI._M.......s...,wW.0.~..P...F1Q..Umt..LP..#.'...........3.......BL..4.\....qL&\.o"...[.A.0..+.r.b...s.y.Y..d..o...KOa.M..Dk..u.?XS..J.i.7..6..)B..W.].....P.......K)q.f.._.Xy.~....>.Cn#G681..jb....3u........I..;....CBI....Tb.T....5.Z...jFi9~.'.1.g.M.h<.S....:[..m.3g...,.DQ.A..i..j.T@.E...1u.....X.s._.s.....'.......O....`,...y@......U/a.!.......T.[.0.'`..l(....h.Z..$...m4..h...*._..@...;!=......ZM.TP.......^N.T..p.!.4@.(m...~._....{..&.85j...Q#f...)......................j. t.s]..m..&.^.G...2.........<..(..(..(..(..(..h4..F..._vx...g....P...PU/`...L<..RJ)..i.+3..p.A.+[....=.X...........B...../.(..X........T.U...3M..]....&

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (21991)
Category:	downloaded
Size (bytes):	22167
Entropy (8bit):	5.438181299581006
Encrypted:	false
SSDEEP:	384:P4m/+oi/7ADufFzOZOISBmoq2b8l3WOHctYfZcqUW8RXRfX0vv:oHdkTSwoxW/fZcqX8xpEvv
MD5:	4A7F6BE2ADDF88491D421527D91DA4B2
SHA1:	D6349AD3B401EED202B732AFFB50DD8A7C5068B3
SHA-256:	7CAFD0160C369FC5E17EEB51EF5C7EDA55B6A5BE3A6C979F8A624DF9A7F7DB7B
SHA-512:	46DBE7BCC2F8BBA7CC81E814409CB14830FCA7A28929245088CCA94F9429F4CDBDE2148D60F21EDF108769BF965A2E7BE91F2983FB3DE6E95A4E6A5722ABF36B
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.9368.js?cs=0eb35d8aa9e3f259fcf0
Preview:	/! For license information please see signing_iframeless_mobile.9368.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9368],{920072:function(e,t,r){var n=r(149924),s=r(810152),i=r(295032),a=Array,o=Math.max;e.exports=function(e,t,r){for(var u=s(e),h=n(t,u),f=n(void 0===r?u:r,u),c=a(o(f-h,0)),l=0;h<f;h++,l++)i(c,l,e[h]);return c.length=l,c}},147972:function(e,t,r){var n=r(920072),s=Math.floor,i=function(e,t){var r=e.length,u=s(r/2);return r<8?a(e,t):o(e,i(n(e,0,u),t),i(n(e,u),t),t)},a=function(e,t){for(var r,n,s=e.length,i=1;i<s;){for(n=i,r=e[i];n&&t(e[n-1],r)>0;)e[n]=e[--n];n!==i++&&(e[n]=r)}return e},o=function(e,t,r,n){for(var s=t.length,i=r.length,a=0,o=0;a<s\|\|o<i;)e[a+o]=a<s&&o<i?n(t[a],r[o])<=0?t[a++]:r[o++]:a<s?t[a++]:r[o++];return e};e.exports=i},299584:function(e,t,r){"use strict";var n=r(800376),s=r(749352),i=r(179132),a=r(540996),o=r(913008),u=r(317928),h=r(930008),f=r(158648),c=r(988048),l=Object.assign,p=Object.defineProperty,g=s([].

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	dropped
Size (bytes):	27198
Entropy (8bit):	2.459230633161204
Encrypted:	false
SSDEEP:	48:Bu111111111w1111111111Y1111111111Y111h11n1i91nYk1nZ1ocJ1i1gn111W:BZAvF892d5TaAtMH3LOCaGshCaGsu
MD5:	1904FDCB027ED618D24601BFE5121096
SHA1:	3384FA317742DD9B6D6C8995AB6B0131579311B3
SHA-256:	300AD21B2AFE161BE399D3C4034131DEEF4FC22A9BE39FA70AC3716295DAFDB9
SHA-512:	3E9D51836FEB63D18D2B05592F80A8B79FF627DD2E1F50C68520D4C180647E7A12E6B73BFA081CD368D5C43F13AAE69696E071F0B191701E17A13E7E7197E766
Malicious:	false
Reputation:	low
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......00.... ..%...D..(....... ..... ...........................L...L...L...L...L...L...L...L...L...L...L...L...K...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...M...M...M...M...M...M...M...L...............L...L...L...L...:...&...&...&...&...&.z.#.k.f.RT.cRR."__..TT....L...L...L...M.w.#.........................&&v.SS..RR..RR.EQQ....L...L...L...M.v.#.........................&&v.SS..RR..RR..SS.,..L...L...L...M.v.#.........................&&v.SS..RR..RR..RR....L...L...L...M.v.#.........................((\|.SS..RR..RR..RR....L...L...L...M.v.#.......................3.CC..SS..RR..RR..RR....L...L...L...M.v.#...................3.BB..SS..RR..RR..RR..RR....L...L...L...L.k.i.%&v.&&v.&&v.((\|.CC..SS..RR..RR..RR..RR..RR..............UT..RR..SS..SS..SS..SS..SS..RR..RR..RR..RR..RR..RR..............TT..RR..RR..RR..RR..RR..RR..RR

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	257
Entropy (8bit):	4.936853809456331
Encrypted:	false
SSDEEP:	6:tnrwdhC/i3mc4sl5RIFnzrnUg3QxUn3voPt0Bd+5IABcL0n:trwdU/i3vqZ/nnGevR2RBcL+
MD5:	6E132855B6DDD5C7A1FA7DAD2C9FE964
SHA1:	0342D3665682749F7C312B8B1EE6A169FA4C68C5
SHA-256:	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
SHA-512:	F3314BB8BFC2D262F98FAE116DC50A38BDB2A6AD2D6950BD42BBA43457A934B68894AD8C0952E7C2286E31433185DA1424CAC3048CE47AB0B2A0338C14210761
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/img/mobile-web/mw-comments-24x24.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <path d="M13.36 15H20V4H4v11h5v3.114L13.36 15zM4 2h16c1.105 0 2 .895 2 2v11c0 1.105-.895 2-2 2h-6l-7 5v-5H4c-1.105 0-2-.895-2-2V4c0-1.105.895-2 2-2z" fill="#333"/>.</svg>.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (36995), with no line terminators
Category:	downloaded
Size (bytes):	36995
Entropy (8bit):	5.200129010508312
Encrypted:	false
SSDEEP:	384:z90Wjj74oB5Tf1JcNvDIweEzpg3pmAX7XODXWcWLfN5HS8IWpMvyfA+g/v:z90yj74A4pDNpM7XGWRfN51IOfA+2v
MD5:	46FA5A7BC37A22544A908E4AD950309C
SHA1:	7C63D2A96EDDD4BC0D2C1D03947DA197B4625804
SHA-256:	E0C6F8695589DF90E63442FEE1C9CF14E60DFC4FD8CE7296515B1D6DB41E1D3D
SHA-512:	A2A18AE69D4BB9F5D2B8FFD0D4B74ED7F5769E432F5B81DEC8F0DEDF0DDF8AE13144DFDF09098CFEE0B59E44A5381EDE0EE17E96DE88588D40EF8B285EBA04C6
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/35.d0f1ccda.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DEBUG__?r.c.enable():console.warn("[Sentry] Cannot initialize SDK with `debug` option using a non-debug bundle."));var n=Object(i.a)(),s=n.getScope();s&&s.update(t.initialScope);var a=new e(t);n.bindClient(a)}},"5g57":function(e,t,n){"use strict";n.d(t,"a",function(){return v}),n.d(t,"b",function(){return addGlobalEventProcessor});var r=n("WwEg"),i=n("jm9a"),s=n("nfbA"),a=n("uIJS"),o=n("wQh9"),c=n("26VM"),u=n("xqFT"),_=n("bTzN"),d=n("zgdO"),l=n("Iwrg"),p=n("2nP+"),f=n("Te+l"),v=function(){function Scope(){Object(a.a)(this,Scope),this._notifyingListeners=!1,this._scopeListeners=[],this._eventProcessors=[],this._breadcrumbs=[],this._attachments=[],this._user={},this._tags={},this._extra={},this._contexts={},this._sdkProcessingMetadata={}}r

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1803), with no line terminators
Category:	downloaded
Size (bytes):	1803
Entropy (8bit):	5.205326896473008
Encrypted:	false
SSDEEP:	48:fbci9MVXFHvwICNSxJ7/SK46mMgyxsXSUdxAKDr:ky8H7s6sCaAc
MD5:	492A292AF349774AC90503DB7025D983
SHA1:	70A1FBC06ED17D3B255318F3392CF9F0B9D5627E
SHA-256:	B7268DFBBBF118CDC38C54DED726A7F844615B8292E5B79E9DDFBC0D07652102
SHA-512:	0F5ED3854BFB032A3D755209A097F0C65209E937F9A445C269F70980718D358EFE8463A45953E667BAB48F0757F8D36CEC52DC95F5B9ED8643BAC092803F4502
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/pages/_app-4a36b7240ff60e5c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888,451],{24451:function(t,e,n){"use strict";var r=n(28526),u=n(22624),o=n(85458),c=n(80065),a=n(75034),f=n(22073),i=n(75424);Object.defineProperty(e,"__esModule",{value:!0}),Object.defineProperty(e,"default",{enumerable:!0,get:function(){return _}});var l=n(43219)._(n(2784)),s=n(41950);function p(t){return d.apply(this,arguments)}function d(){return(d=i(r.mark(function t(e){var n,u,o;return r.wrap(function(t){for(;;)switch(t.prev=t.next){case 0:return n=e.Component,u=e.ctx,t.next=3,(0,s.loadGetInitialProps)(n,u);case 3:return o=t.sent,t.abrupt("return",{pageProps:o});case 5:case"end":return t.stop()}},t)}))).apply(this,arguments)}var _=function(t){c(r,t);var e,n=(e=function(){if("undefined"==typeof Reflect\|\|!Reflect.construct\|\|Reflect.construct.sham)return!1;if("function"==typeof Proxy)return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(t){return!1}}(),function(){var t,n=f(r);i

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (62585), with LF, NEL line terminators
Category:	downloaded
Size (bytes):	246560
Entropy (8bit):	5.363677245530164
Encrypted:	false
SSDEEP:	3072:MivgpLGrbsYWZSA4boJDEFjek2X+WuVYKySfqgVyDCevgk5J0CVubZYOgHWSAD:L4GrbsY2FLDmu+YKySODCeXJD2SE
MD5:	1B15E5C099FE16B350195BF371DFF43A
SHA1:	FF1E1EE7979DAB7CF219DA0C5105927836A6826E
SHA-256:	64330E8B5F3794CE9F2615BB5B2FC245F5C71848F65B2990F459465F4AED24D4
SHA-512:	91EA46B83D1A0C2EFC009EE1B33CAF17CB6B9EB36306EC69B9A89CBA2F3BD1C53DE23BFF8387B365BDE6BE02950BF735E7E4647E41690E203FE1680109469F44
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2096.js?cs=70f65921e029e60a0b0d
Preview:	/! For license information please see signing_iframeless_mobile.2096.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2096],{407300:function(t,n,e){"use strict";var o=e(80572);t.exports=o},798981:function(t,n,e){"use strict";var o=e(984876);t.exports=o},56928:function(t,n,e){"use strict";var o=e(640416);t.exports=o},698092:function(t,n,e){"use strict";var o=e(717288);t.exports=o},364868:function(t,n,e){"use strict";var o=e(836080);t.exports=o},200008:function(t,n,e){"use strict";e(438256),e(402440);var o=e(843696);t.exports=o.Array.from},871763:function(t,n,e){"use strict";e(653204);var o=e(843696);t.exports=o.Array.isArray},278156:function(t,n,e){"use strict";e(461120);var o=e(835536);t.exports=o("Array").slice},332724:function(t,n,e){"use strict";e(835571),e(438256);var o=e(709184);t.exports=o},121472:function(t,n,e){"use strict";var o=e(509080),a=e(278156),r=Array.prototype;t.exports=function(t){var n=t.slice;return t===r\|\|o(r,t)&&n===r.slice

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27881), with no line terminators
Category:	downloaded
Size (bytes):	27881
Entropy (8bit):	5.145165347426631
Encrypted:	false
SSDEEP:	768:NYQPNzPHhXrmg831enXU/a1inBnYEBCGpKz8fsn/HU:yozPBXagHuxr4gj
MD5:	80A16A7469ECE9A85DF7AC8D39605662
SHA1:	54E64975F24647D242FA4DC0E20BA048A603DED2
SHA-256:	7236BA4D18121D1C1E55329FD2110EB585B49DED5D66B2FE461F15369C7D3DDA
SHA-512:	07968309BC3F528C0CCF239EBDEB79802BD474794498453D2ED664D15F260F77E29219DEF8D5D25B4F1CF85B94D47A07AFF6B34ABF3A9B3808EAEDBA6BDAA5D5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/31.c043863a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[31],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a]))for(i=0,o=(n=e?flatt(t[a]):t[a]).length;i<o;)s[s.length]=n[i],i+=1;else s[s.length]=t[a];a+=1}return s}}},"3fZ3":function(e,t,n){var r=n("utat");e.exports=function(e,t,n){return void 0===n?r(e,t,!1):r(e,n,!1!==t)}},"3kqR":function(e,t,n){"use strict";var r=n("8s1R"),o=n("p9qs"),i=Object(r.a)(function forEachObjIndexed(e,t){for(var n=Object(o.a)(t),r=0;r<n.length;){var i=n[r];e(t[i],i,t),r+=1}return t});t.a=i},"42TE":function(e,t,n){"use strict";var r=n("Jn/H"),o=Object(r.a)(function not(e){return!e});t.a=o},"4Vr+":function(e,t,n){"use strict";var r=n("8s1R"),o=Object(r.a)(function pickBy(e,t){var n={};for(var r in t)e(t[r],r,t)&&(n[r]=t[r]);return n});t.a=o},"4Zd6":function(e,t,n){"use strict";var r=n("8s1R"),o=n("U/ZD"),i=n("pQZd")

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	59
Entropy (8bit):	4.299862066560922
Encrypted:	false
SSDEEP:	3:Yh2/v3Xfc2oEP+fH4:YmX0hLw
MD5:	1A48C29222D60672223E483A010DE123
SHA1:	A50CAD04403EB3D95842FBCE5F36635EF9328775
SHA-256:	7498D2C6DAD226E5274F3FD88AD8BA9B16E89EB4E344160BB71A7EB94344731F
SHA-512:	68CBCAAC1A488D77A1433C3A4EF63BB54C39404BEDB7295947B42FF9D46D66A07BCD55E25D04584571DC9A6FFF52BBED2458E50321A33DA3E8B63B5E8B97E228
Malicious:	false
Reputation:	low
URL:	https://a.docusign.com/f
Preview:	{"DS_A":"e726a659-b15e-4860-84f0-a4f96f541646","DS_A_C":""}

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7215), with no line terminators
Category:	downloaded
Size (bytes):	7215
Entropy (8bit):	5.715150265850369
Encrypted:	false
SSDEEP:	192:XFl9r8FRHF6U/Atg28bngH1nlm6AVPhJ98evibOEOxWShjulmu/TuVH5coKW8AB6:DVfnzeuN/Tk4
MD5:	73B9F4A9EB62A2176090BF9C21A639A7
SHA1:	1C601CF93D1BE4E6B9C55F273DD9EE758076BE00
SHA-256:	9DCB7DF984F468CEE4F41F0E76EA672A02601350AEFE9BCCFFA7BD0120782941
SHA-512:	0E55F3682ED12AE6A022FD44E1B371344AF82ECCE03F8093369446F60E9947CF5BE48D10675922C98CAA76CF57E6739458C7378954D0EE8953349ECEEAE7DDB3
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/main~493df0b3.9e1d5232.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}catch(i){Promise.all([E.e(49).then(E.t.bind(null,"imET",7)),Promise.all([E.e(2),E.e(40)]).then(E.t.bind(null,"H+SE",7)),E.e(15).then(E.t.bind(null,"2GZm",7)),Promise.all([E.e(2),E.e(12),E.e(7)]).then(E.t.bind(null,"LSZE",7)),E.e(54).then(E.t.bind(null,"3yYM",7))]).then(function(){t()}).catch(function(t){return console.error("Error importing polyfills",t)})}}(function kickOff(){Promise.all([E.e(52),E.e(35),E.e(22),E.e(19),E.e(43),E.e(20),E.e(26),E.e(14),E.e(11),E.e(18),E.e(50),E.e(42),E.e(29),E.e(21),E.e(8),E.e(16),E.e(24),E.e(17)]).then(E.bind(null,"V+70")).catch(function(t){return console.warn("loading root widget failed",t)})})},0:function(t,i,E){t.exports=E("/7QA")},"91+0":function(t){t.exports={"//WS_CHAT_BASE":"localhost:4000",ENV:"

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	74
Entropy (8bit):	3.9826031985455645
Encrypted:	false
SSDEEP:	3:qVvlKMD/WAGv4qgvOs+oNGb:qFMQ/H4lnoQb
MD5:	792E7DA69F9637E2F63C0FD5245DAC86
SHA1:	589F6FE5CE5EFBD111AC635C747838A84475CD6D
SHA-256:	F5FC14181849CB5F911A632A9663DD875BD7FA4A0565D05A17D8185CF643853C
SHA-512:	E78D9812F95CA53E1F591445AD731040F7A51107CBB411B533A36C7BC9534346DEE99FF6D3A5F948898B189471C01ECC68634DCD3CAB0B38E8EA077D56746C1D
Malicious:	false
Reputation:	low
URL:	https://s.company-target.com/s/sync?exc=lr
Preview:	<html>..<head>...<title>Pixels</title>..</head>..<body>....</body>.</html>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (49273)
Category:	downloaded
Size (bytes):	49276
Entropy (8bit):	5.46054574462855
Encrypted:	false
SSDEEP:	768:TCoEqoinIC7q2gh0CKUxEGWUwcvXWP6Ta8vHKPPSvCC1anVD//B/ZX8RNIB8HxKg:TPJi0LUxEpyv0StEZ/Bd8RNIsxZ
MD5:	FB2E085CDC32D0BC97C24A8A82C12946
SHA1:	194A95809592E6984151A465946EF7EDB7A47959
SHA-256:	6CC4C722A50B4152194B13E7E3C8A1A5A5F23B17988F8FA85404394EFC5C0984
SHA-512:	D9399F04E6965CC59C6A730F85E10DAF949A0BDA30DDE85710A27380650F8194362CA51E28C8D751B3B4F23C451715B14F2A3A1AB9F872DE8B3202F8F1698B0A
Malicious:	false
Reputation:	low
URL:	https://snap.licdn.com/li.lms-analytics/insight.min.js
Preview:	!function(){"use strict";function t(t,n,e){return n in t?Object.defineProperty(t,n,{value:e,enumerable:!0,configurable:!0,writable:!0}):t[n]=e,t}var n,e,r,o,i={ADVERTISING:"ADVERTISING",ANALYTICS_AND_RESEARCH:"ANALYTICS_AND_RESEARCH",FUNCTIONAL:"FUNCTIONAL"},a="GUEST",u="MEMBER",c=0,l=1,s=2,f=(t(n={},a,"li_gc"),t(n,u,"li_mc"),n),d=function ar(){var t=arguments.length>0&&arguments[0]!==undefined?arguments[0]:null,n=arguments.length>1&&arguments[1]!==undefined?arguments[1]:null,e=arguments.length>2&&arguments[2]!==undefined?arguments[2]:null,r=arguments.length>3&&arguments[3]!==undefined?arguments[3]:null;for(var o in function(t,n){if(!(t instanceof n))throw new TypeError("Cannot call a class as a function")}(this,ar),t=t\|\|{},this.consentAvailable=!1,this.issuedAt=n,this.userMode=e,this.optedInConsentMap={},i)t[o]=t[o]\|\|c,t[o]!==c&&(this.consentAvailable=!0),this.optedInConsentMap[o]=t[o]===l\|\|t[o]===c&&r===l},v=(e=[i.ADVERTISING,i.ANALYTICS_AND_RESEARCH,i.FUNCTIONAL],r=[c,l,s,c],o=new R

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 33, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1886
Entropy (8bit):	7.860616806628173
Encrypted:	false
SSDEEP:	24:rUB/6em6NQ0DVOigRCzrFmSSxz6JEwnlKKU3cZDzUeMDtTRA5R4JUmnKqFBe1Ozw:rUB/6h6R6IzY2lKKU3kDzUeMZFAiNcec
MD5:	66B7ACA9C7FE038F8B505ED6F4826560
SHA1:	7C6EB9F053597DAE9D9A1991BB0FD29A5908918F
SHA-256:	2681FBBF618EEA1A872364FB3D5596C8166C3F83E3C9AF3A5BCC152A24E82888
SHA-512:	DAA989B04A108729552850DDF6317DC2A2BB4DCA471FC6F5A35F0A53377F2DE8FCFDDA5FCEF4EB488A3D903B1B7AEE3B85B14D10AD222B7F2E524DCD38DE0255
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......!.....;.R/....pHYs.................sRGB.........gAMA......a.....IDATx..[.N.G...5.....fyx...0{...-G90(...'`y...;.)F..H.wx..r..c.\ W[..b.MM.......'.;..U.SS]]]=.4h0.D.....Z.PA.>d...e...M..\|..!^.<.(......s..B.D..HZ..(.{.....m...n1f.5B....'./_F...j.Td,i$/.RI1.SH=..#I#y}$...k....f.J....Ka..Vb.......-hP7N.`Z..~;..^...uG.).....9.j.4qv....A-......;..s..%.G..?....+......b.....%...7.}........!...813....R.h...sI.U\=.xA2b..3\|?D..>....?'.=C....L}........T...Y.P........l/...>.L....;.G.R.SY.I\|.\n...}.....H.m....!.W....V..G...D.,..)iW..E...c..?.......8R.n..w........._"..!oM..9f..V.E...9.G..L.c.~]..<..E1.07...=G..2>..T....4T"X.6C.E.SGr...I.r...XR/..;F.y...ySp.......S.\|W........._.'&.bv..\|........%.&...IQ$.S......$P.7..A...eI....S..,(/..*q.......0.].!6A....wx.!.)....{l2RV............^+.xH\..>....&C...X.u....m..(..b.MF.y.a./....L.CZ..W.....X....R.h.}....lIA}.\Y..~Yk......0..?.f.G..bI..?.....A.\|...E.......Ay)}fc..a...uK7z6R.E...>.-.T........?.

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	94361
Entropy (8bit):	5.268906933862704
Encrypted:	false
SSDEEP:	768:FT3+kw9UO7GpSeOqRlCFYRKW16y13BUNxekUG/6GUX5+M6lhrLfyZ6sMOqLIdPVD:Fai9tUNeGDM6lhrLo6szIG/2xICB4Lf
MD5:	1FAB3E8D98E98FE27B86BDEA9085F17B
SHA1:	D0CFBD4819FECE863D18C58474B759755797C357
SHA-256:	77C1FEE067F934F8D9268DFACC3BD33674EFFD759B0AD1B702E2C5DFF710CE21
SHA-512:	FA3BBD91F6B5E65D6EE16793CA3481EB716C0F034634551CF07B8229B6FA91C0B44557F351E9136AEDDEBFDE26103C28B076840F81AC26178616A4911CC1F0D7
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/25.b8d3a33a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r.a.mark(function _callee(){var e,t,n,a,c;return r.a.wrap(function _callee$(r){for(;;)switch(r.prev=r.next){case 0:if(e=Object(o.b)(),t=Object(l.a)(!1,["embed","configuration","theme","soundNotificationEnabled"],e),n=Object(l.a)(!1,["embed","configuration","theme","notificationOnFirstVisitOnlyEnabled"],e),a=Object(u.c)(e),c=Object(s.a)(e)\|\|null,!t){r.next=8;break}return r.next=8,Object(i.a)({topic:"play-host-notification",message:{chatOpen:a,notificationOnFirstVisitOnly:n,activeConversationId:c}});case 8:case"end":return r.stop()}},_callee)}));return function playSoundNotification(){return e.apply(this,arguments)}}()},"76KI":function(e,t,n){"use strict";n.d(t,"a",function(){return c});var a=n("QtlZ"),r=n("LVcX"),c=function hasGate(e){re

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
URL:	https://geo.docusign.com/country
Preview:	{"country":"US"}

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961371016
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7938)
Category:	downloaded
Size (bytes):	8109
Entropy (8bit):	5.138907230789502
Encrypted:	false
SSDEEP:	192:14rl8Oxxm9nN4ipLI64aEfwVFcCO3EKKZUdEKyM9a+VtN6p6jLqysXM:14rl8OxWnNDpLI6nFcCOjbaW5H
MD5:	4E4F6EF13840E47059B7C2194270E625
SHA1:	53BC1DDB76A5C965CC9FB5182903942C8D4C98C2
SHA-256:	0258CCB27A2C5E5E22EBC7231D1368B62483887D10863865A7695E91724ABAF7
SHA-512:	85C7EF20E2D65ACD37BD93916BA17BD293DBAA4CEF6FF02C269CF03BBCD503351B6F2C73F73D2AD0C77452C87E1033B64ABE63000BC4CF7BBC00BED931326028
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2515.js?cs=8bc887e594720e178c1f
Preview:	/! For license information please see signing_iframeless_mobile.2515.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2515],{942515:function(e,t,a){a(964900),a(321992),a(905004);var i=a(752856),n=a(737588),o=a.n(n),c=a(441988),d=a(642344),r=a(349268),l=a(507416),s=a(799020),h=a(486672),u=a(213224),g=a(387660),p=a(867712),v=0,f=c.c.extend({tagName:"div",className:"modal",events:{"click .close":"cancelOrClose"},dialogId:null,uri:null,useCache:!0,$lastActiveElement:o()([]),initialize(e){},mapUriData(e){return e},update(e,t){t=t\|\|{},e=e\|\|{};var a=this;function n(e){var t=!!e;if(s.c.envelope){var n=e.resources\|\|{},o=s.c.envelope.resources\|\|{};(e=i.cp.extend({},s.c.envelope,e)).resources=i.cp.extend({},o,n)}t?a.reload(a.mapUriData(e)):a.render(),a.$el.attr("modal-ready","")}"envelope"!==this.uri&&s.c[this.uri]?(n(s.c[this.uri]),t.afterUpdate&&t.afterUpdate()):this.uri&&!s.c[this.uri]?(t.showProgress&&l.c.trigger("progressStarted"),o().get

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65438)
Category:	downloaded
Size (bytes):	107155
Entropy (8bit):	5.532438398424527
Encrypted:	false
SSDEEP:	768:Nemk+IVmSCc0Vpm13gV1e/JZ8Q7h3pPGYgsB1iVVvtbKTL4LQ+gcR+4giRbeRO5X:kVHEpm13gGnkE1iY4LQqTGs1Vdq+7
MD5:	CE0EC0BA273485291EBBFDEF0CCEA139
SHA1:	D205F53A8BD82FEE05521AE6A17741AA33F27B37
SHA-256:	00F3D2C14F26C4890046AA4D5BDAAAAF3625EBA41E11FDC19C24699FBE0D0442
SHA-512:	650480F5E4F6946BD0A9EA05B489C3CF5F36F7C91355636F158EEBF94F4A0633C87B27D8174E28F3167524076F8C73EA843091B601FDA6E5C0C8077EB45F9B4E
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.optimizely-sdk.js?cs=2875f1dcf350103e8c90
Preview:	/! For license information please see signing_iframeless_mobile.optimizely-sdk.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[4596],{884364:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=r(831100),i=function(){function e(){this.errorCount=0}return e.prototype.getDelay=function(){return 0===this.errorCount?0:1e3n.BACKOFF_BASE_WAIT_SECONDS_BY_ERROR_COUNT[Math.min(n.BACKOFF_BASE_WAIT_SECONDS_BY_ERROR_COUNT.length-1,this.errorCount)]+Math.round(1e3Math.random())},e.prototype.countError=function(){this.errorCount<n.BACKOFF_BASE_WAIT_SECONDS_BY_ERROR_COUNT.length-1&&this.errorCount++},e.prototype.reset=function(){this.errorCount=0},e}();t.default=i},755096:function(e,t,r){"use strict";var n,i=this&&this.__extends\|\|(n=function(e,t){return n=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__proto__=t}\|\|function(e,t){for(var r in t)t.hasOwnProperty(r)&&(e[r]=t[r])},n(e,t)},function(e,t){func

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65447)
Category:	downloaded
Size (bytes):	1135196
Entropy (8bit):	5.54793087263863
Encrypted:	false
SSDEEP:	12288:aVPfZ+3K7VQcbCKAIrGVcFHHrl9eKFtm7Ly1T:q+3K72ceKAI1Nrl93Ftm7Ly1T
MD5:	0EB0EE030670BC0718AD1B6D4CCBCCF3
SHA1:	CF03A01FD61F66D9D3F419A63B47980707EE9D71
SHA-256:	1106A8174A497260805776E926C4B40C36B51E7D9F0014B14C98308D8DFFC6B2
SHA-512:	8D7F3D47948D47E70ACF3824C9977E06BBDBB0F9DA5C5A5763A9CFFCD5D9841216A23722ACD7A29EC12C730CD81B85DE1E0881A0D583F9562728EE438897D044
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.3444.js?cs=12612e1d13678ed781a1
Preview:	/! For license information please see signing_iframeless_mobile.3444.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[3444,364],{439587:function(t,e,n){"use strict";var r=n(497352);t.exports=r},610076:function(t,e,n){"use strict";var r=n(170560);t.exports=r},520456:function(t,e,n){"use strict";var r=n(959304);t.exports=r},853180:function(t,e,n){"use strict";var r=n(567040);t.exports=r},958944:function(t,e,n){"use strict";var r=n(52684);t.exports=r},557896:function(t,e,n){"use strict";var r=n(840056);t.exports=r},575684:function(t,e,n){"use strict";var r=n(471800);t.exports=r},401312:function(t,e,n){"use strict";var r=n(616812);t.exports=r},742704:function(t,e,n){"use strict";var r=n(245380);t.exports=r},840944:function(t,e,n){"use strict";var r=n(25928);t.exports=r},10448:function(t,e,n){"use strict";var r=n(876804);t.exports=r},215876:function(t,e,n){"use strict";var r=n(535564);t.exports=r},431720:function(t,e,n){"use strict";var r=n(855772);n

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11685)
Category:	downloaded
Size (bytes):	11854
Entropy (8bit):	5.26546499828219
Encrypted:	false
SSDEEP:	192:64EAhy6YpOKpRmYrY+LS/ABuz/hqycEZAtfqI+nuVaF+68KrxgzGIn0Z+gxg9Qyc:64EPpRmh+Xuc7t3+nuVI+mrTAEZL
MD5:	96B55250BAAA04EF2DAC631B6190877F
SHA1:	5E0AA57A41969344DC930F24BF236EDA65AC3CBC
SHA-256:	371B1F93965BA791AD0A4AD4919813FDCE683CAD4791F3C9DA8C9E222BB72767
SHA-512:	A5B9CDD751DF548D4C49695D87F3F0F2B646D18AFF266EAFB183CBC9C9BCFC21EB56288C941EC82B1F520F00ED45ED54918C8050C6A765261A3B25EFFF8DC9E8
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.884.js?cs=401df0d909d9ecb50c0e
Preview:	/! For license information please see signing_iframeless_mobile.884.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[884],{470884:function(e,t,r){r(855331),r(971088),r(112084),r(853224),r(761088),r(947192),r(232048),r(427164),r(625744),r(211056),r(331432),r(819672),r(284204),r(726456),r(185179),r(321992),r(480168),r(394976),r(685120),r(439952);var n=r(395132),o=r(770572),i=r(278068),a=["SearchExperience"];function c(){c=function(){return t};var e,t={},r=Object.prototype,n=r.hasOwnProperty,o=Object.defineProperty\|\|function(e,t,r){e[t]=r.value},i="function"==typeof Symbol?Symbol:{},a=i.iterator\|\|"@@iterator",s=i.asyncIterator\|\|"@@asyncIterator",u=i.toStringTag\|\|"@@toStringTag";function l(e,t,r){return Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}),e[t]}try{l({},"")}catch(e){l=function(e,t,r){return e[t]=r}}function h(e,t,r,n){var i=t&&t.prototype instanceof g?t:g,a=Object.create(i.prototype),c=new I(n\|\|

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 33, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1886
Entropy (8bit):	7.860616806628173
Encrypted:	false
SSDEEP:	24:rUB/6em6NQ0DVOigRCzrFmSSxz6JEwnlKKU3cZDzUeMDtTRA5R4JUmnKqFBe1Ozw:rUB/6h6R6IzY2lKKU3kDzUeMZFAiNcec
MD5:	66B7ACA9C7FE038F8B505ED6F4826560
SHA1:	7C6EB9F053597DAE9D9A1991BB0FD29A5908918F
SHA-256:	2681FBBF618EEA1A872364FB3D5596C8166C3F83E3C9AF3A5BCC152A24E82888
SHA-512:	DAA989B04A108729552850DDF6317DC2A2BB4DCA471FC6F5A35F0A53377F2DE8FCFDDA5FCEF4EB488A3D903B1B7AEE3B85B14D10AD222B7F2E524DCD38DE0255
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png
Preview:	.PNG........IHDR.......!.....;.R/....pHYs.................sRGB.........gAMA......a.....IDATx..[.N.G...5.....fyx...0{...-G90(...'`y...;.)F..H.wx..r..c.\ W[..b.MM.......'.;..U.SS]]]=.4h0.D.....Z.PA.>d...e...M..\|..!^.<.(......s..B.D..HZ..(.{.....m...n1f.5B....'./_F...j.Td,i$/.RI1.SH=..#I#y}$...k....f.J....Ka..Vb.......-hP7N.`Z..~;..^...uG.).....9.j.4qv....A-......;..s..%.G..?....+......b.....%...7.}........!...813....R.h...sI.U\=.xA2b..3\|?D..>....?'.=C....L}........T...Y.P........l/...>.L....;.G.R.SY.I\|.\n...}.....H.m....!.W....V..G...D.,..)iW..E...c..?.......8R.n..w........._"..!oM..9f..V.E...9.G..L.c.~]..<..E1.07...=G..2>..T....4T"X.6C.E.SGr...I.r...XR/..;F.y...ySp.......S.\|W........._.'&.bv..\|........%.&...IQ$.S......$P.7..A...eI....S..,(/..*q.......0.].!6A....wx.!.)....{l2RV............^+.xH\..>....&C...X.u....m..(..b.MF.y.a./....L.CZ..W.....X....R.h.}....lIA}.\Y..~Yk......0..?.f.G..bI..?.....A.\|...E.......Ay)}fc..a...uK7z6R.E...>.-.T........?.

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, CFF, length 33752, version 0.0
Category:	downloaded
Size (bytes):	33752
Entropy (8bit):	7.984139047245452
Encrypted:	false
SSDEEP:	768:8VyJ64rZFHKtB7wvkAKE0/40pQeOSHKOfITzE1SRSgyTAIW4l8:mbeZJOSvkFB/40p/HKOfI8gyTAcC
MD5:	4DE7535F6F5DF8D5437C21C068DDB0EC
SHA1:	3553204B4624CA41CF1C4F3BD9B37D8C968CBA23
SHA-256:	8F6A520A392FF62149E5FC5AA87BFAB9B3816CD6010D4D4FCA194E8683CA498B
SHA-512:	E2A9B45F69BD1CBCF0D5F3710BECFACF6A28AF0A9FD034262F6AF4803628DADCE4C2FCC385758F88130AB68D362F3694ED786D0971CF7FD7E8FAF6CD1C2860DE
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/maven_pro_bold.woff
Preview:	wOFFOTTO...........x........................CFF ......Om......FFTM...h........Z...GDEF..T........ ....GPOS..TH..-....DiP}7GSUB..T(... ... l.t.OS/2.......H...`...Ccmap.......\|....#G..head...0...3...6....hhea...d... ...$.U.>hmtx.......Q...X.Xl7maxp..............P.name.......4....N...post........... .j.fx.c`d```d8...l<..W.n...8..2.F.../..)...:..&.(..v...x.c`d``../........g.2.EP.5.......P.....x.c`b.......u..1...<.f........p...).,fP`P...._....N.u05..X.@r.L.GP..x.m.1O.A.....(...XL...K....+.[...-..@.A....6..K...e#.x..\|.......^.p..PzV...s...=7q.O..z..+.xn.R=Q.....m.Y.......s..><........6n..c.lq@..klPC.....!".,AJ.`N.e.&.L....F..7g..&..w<.J...P..M-..@.Q.Kz.yn.)dRg...B..J...v:....gR.vFC..N.2....PF0..=.)V.,..{..LY.g"...;9..]p..2n!f....IW67..a.%.mO..-......iXax.c```f.`..F..8..1..,..........P..a)........L..(.(H).)().)X).QTz..........@....1.AU.+H(.UZBU2.................n...}.`...V=X.`.I...Q8.z....#..A.L.,.l...\.<.\|...B.".b...R.2.r...J..j...Z.:.z...F.&.f...V.6.v...N...n...

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
URL:	https://attr.ml-api.io/?domain=docusign.com&pId=402488676481365330
Preview:	null

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	46
Entropy (8bit):	4.4144413036949715
Encrypted:	false
SSDEEP:	3:YXca47fcaDFCIn:YMa49YI
MD5:	EA09F91FEBAA0DAA6FF7CA083C32EF03
SHA1:	7DB97F9A004B2197111F3DEED9F88773435EE2F5
SHA-256:	18942862D38FF7690D608CAD7358CB6012E0E21CF6239A8122FD1CE1D7E0D7F7
SHA-512:	C01CBDE1C9549A79DD203E06864EEB54F7B0E2369C4855EEBB35014D40888D7FED1BE734D02A510506E349F8E839E6A9A8AA91B7F88C4FBEEE367BF0154C81C0
Malicious:	false
Reputation:	low
Preview:	{"reason_code":9,"reason":"Invalid page URL"}.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HFjRn:hRn
MD5:	C9785540787087E135E2E3256D4128E6
SHA1:	41BD40CDDBF7127B59A6D093F72D6EF7AC2E45D4
SHA-256:	ADB38815ED6BC0240FFD0E7299D9CFA5860D5C662C7C2B4DAE11EF97EC951B05
SHA-512:	6B30566B0D5AEA45E318E7FF711E7BD4873933FB61C438B3F3C1ED46D81BF2AA1AB5EAB72EE3E2577E5785DADB479670157A0332AE9775AFD18DA77FAB0005B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAn2AGgSocVs4hIFDaLAi2s=?alt=proto
Preview:	CgkKBw2iwItrGgA=

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	283938
Entropy (8bit):	5.609618515258129
Encrypted:	false
SSDEEP:	3072:FAz4ejchzgNSNow8VNz2T1Z8S71+TYc20DCSY1KGoub1QgD4tL+aVsQCRhmN8LMb:64xhewMNz29qSJD4tLfV9CR4N8SsAN
MD5:	6EC08AACE1BBB3A031570A0344DCCB41
SHA1:	8731660052E8EEA95EA2FB9542A15D5CBB754C60
SHA-256:	E263440368045A1D71B979202E107C14F82991D990D890FB9AD113C014F485C8
SHA-512:	64EC7137831D59903A2014EEF4A0E73682320E4CF8D1759F2506F1BEE45CEEC93B9E64DAFDC989B6DC4EB9691C73EF5FB7ED785D50FCC60F3D97BD817CA717A4
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-1TZ7S9D6BQ&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":false},{"vtp_signal":1,"function":"__c","vtp_value":1},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":21,"vtp_rules":["list","docusign\\.(com\|ca\|co\\.uk\|com\|com\\.au\|com\\.br\|de\|fr\|nl\|in\|jp\|mx\|es\|sg\|net)$","docusign\\."],"tag_id":112},{"function":"__ogt_ip_mark","priority":11,"vtp_instanceOrder":0,"vtp_paramValue":"internal","vtp_ruleResult":["macro",4],"vtp_enableIpRegex":true,"tag_id":114},{"function":"__ogt_referral_exclusion","priority":11,"vtp_includeConditions":["list","docusign\\.com$","docusign\\.(ae\|ca\|co\|co\\.uk\|com\|com\\.au\|com\\.br\|com\\.es\|de\|es\|fr\|in\|it\|jp\|lt\|lu\|mx\|nl\|no\|org\|pl\|se\|sg)$","docusign\\.net","^(apid

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5194
Entropy (8bit):	3.976628767895142
Encrypted:	false
SSDEEP:	96:mD6VAMcWnVRSNUrN3Sky4gNeLSYiJ7iFsAkl2+heNm7iprXbep5DkoG23b+WYYY:p9bSNURZyNNnRJqsAehheImprmDkozYV
MD5:	63E737D3544164D2B7F4FBCA416AC807
SHA1:	030370AA38715E4C41589633F69D0BFE8255D46C
SHA-256:	5FA00D047ACD959697B9D7772C31DCD37BEC33C70C6FBF80AB8316205D1D286D
SHA-512:	31EE1BB536C0E50F5568A415EA3308367BFCFD11D2A6F7DFF1C8E3A982F7BE790C240A603CD4C6E187672824B8E5D07646049A28C6A88A7B001EB9A0142F312B
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/logos/static/powered_by_logo.svg
Preview:	<svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83 0 01.74.77 2.25 2.25 0 01.25 1.07 2.26 2.26 0 01-.25 1.08 1.77 1.77 0 01-.74.77 2.55 2.55 0 01-1.28.29H.66v-.72h1.59a1.81 1.81 0 00.87-.19 1.1 1.1 0 00.48-.5 1.73 1.73 0 00.15-.73A1.66 1.66 0 003.6 7a1.1 1.1 0 00-.48-.5 1.86 1.86 0 00-.88-.18H.81v6zm7.74.1a2.29 2.29 0 01-1.2-.32 2.29 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 00-.16-.94 1.67 1.67 0 00-.5-.71 1.37 1.37 0 00-.85-.26 1.35 1.35 0 00-.85.26 1.67 1.67 0 00-.5.71 2.85 2.85 0 00-.16.94 2.9 2.9 0 00.16.94 1.6 1.6 0 00.5.69 1.29 1.29 0 00.85.27zm4.43.59l-1.54-5h.82l1.08 3

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
URL:	https://px.ads.linkedin.com/attribution_trigger?pid=46370&time=1713961369602&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy
Preview:	{}

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=4fa5f37d-70c4-4e9b-b1c3-09263b62017d&sessionStarted=1713961356.318&campaignRefreshToken=7b35cf35-500a-499b-99e5-39b4a9791167&hideController=false&pageLoadStartTime=1713961354696&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	20
Entropy (8bit):	3.921928094887362
Encrypted:	false
SSDEEP:	3:acDan:zDan
MD5:	1000A6CAF7299F030F5C73974CCD617E
SHA1:	44C1943894BE0A43D5F1176C085F82A9CF75DAAA
SHA-256:	BB107868145E022BC860243BF8E7144DB9F5350D02F73F9EF56F70C3B89A2BEB
SHA-512:	5864B198DC92823E2F166D2F594BF37B28F53CC0786D4680EB47B3B91D8C3ED831C446AF833EBF5E43A2F03336B8EBE17DDAC57AF5B03F835DE7F15FC551D294
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/signing/cdn-reporter.js
Preview:	window.cdnReport();

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16402)
Category:	downloaded
Size (bytes):	16571
Entropy (8bit):	5.49235449290822
Encrypted:	false
SSDEEP:	384:k4YJBmXWsREQc2tKcLqcuskVHMrpESpJDArKO3Ara9d6r8Io7WdSmJY/jj:iJBgWsrkiJudVHMrpESDw3KInIBd6j
MD5:	68161CACDFD7F74EBB7AF7597DD8E850
SHA1:	7ACEFEB295AB703650F9EE1182D528620D8C28AC
SHA-256:	473FDF13AE0C2DEEF522C62100A6B208E7C5AF87B1264CC9F5EA6181B6319423
SHA-512:	D8930108C987E9FECA762AD9E8AD36C41119EB7770BC60481BB1C5498041E15BBFEDC0845FDDE112DAFBC0B1CBB47D710A4DECDE0D03E61BC0B7A8BB6EDF09EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.580.js?cs=ff525cf25d60ede3ea6a
Preview:	/! For license information please see signing_iframeless_mobile.580.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[580],{434008:function(t,e,i){"use strict";var n=i(446331),o=i(482576),s=i(296648),r=i(810152),h=i(511452),a=Math.min,c=[].lastIndexOf,u=!!c&&1/[1].lastIndexOf(1,-0)<0,d=h("lastIndexOf"),l=u\|\|!d;t.exports=l?function(t){if(u)return n(c,this,arguments)\|\|0;var e=o(this),i=r(e),h=i-1;for(arguments.length>1&&(h=a(h,s(arguments[1]))),h<0&&(h=i+h);h>=0;h--)if(h in e&&e[h]===t)return h\|\|0;return-1}:c},873320:function(t,e,i){var n=i(622808),o=i(434008);n({target:"Array",proto:!0,forced:o!==[].lastIndexOf},{lastIndexOf:o})},635904:function(t,e,i){"use strict";var n=i(800376),o=i(5775),s=i(158648),r=i(810152),h=i(480972);n&&(h(Array.prototype,"lastIndex",{configurable:!0,get:function(){var t=s(this),e=r(t);return 0==e?0:e-1}}),o("lastIndex"))},674336:function(t,e,i){"use strict";i.d(e,{Cy:function(){return n}});class n{constructor(){this._dat

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	83519
Entropy (8bit):	5.538821824248939
Encrypted:	false
SSDEEP:	1536:zHI/ev1BjikFMJdwUCkRI+XafM3kRnFgKr:MWF6VXsM3kRFj
MD5:	A8CEAC2E3BD2C128D8F2E2F1B0EF0290
SHA1:	A1C4D2B832CE5CFB0D5E46B1EB6A8E708CD7F937
SHA-256:	7418C75F5B92AEBD9204DE88288757D6864F8DC8CF782EEE24BB788F9F02C338
SHA-512:	7D00DB637BD194B07F56E1C6B77DE07570BB71B9EB0E308FEF1B62CB9462C974F97F5B2D8E423920AC5B898CD18DEA2384941D868A521C03A46891B6DE6867D5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/8.10f90e75.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP"),c=n.n(o),i=function Attachment(e){var t=e.fill,n=void 0===t?a.a.composerIconColor:t,o=e.height,i=void 0===o?16:o,s=e.width,u=void 0===s?18:s;return c.a.createElement(r.a,{className:"drift-default-icon drift-default-icon--back-arrow",width:u,height:i,viewBox:"0 0 16 18"},c.a.createElement("path",{fill:n,fillRule:"evenodd",d:"M8.078 16a.71.71 0 0 1-.513-.222.784.784 0 0 1 0-1.075l7.53-7.879c.562-.587.871-1.368.871-2.199 0-.83-.31-1.611-.87-2.197a2.883 2.883 0 0 0-4.204 0l-8.735 9.139c-.493.516-.73 1.012-.703 1.476.026.452.298.801.46.968.27.284.563.402.892.358.413-.054.888-.35 1.375-.86l6.854-7.172a.703.703 0 0 1 1.026 0 .784.784 0 0 1 0 1.074l-6.853 7.172c-.728.761-1.475 1.196-2.222 1.293-.783.102-1.509-.172-2.1-.79-.528-.553-.841-1.2

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (25600), with no line terminators
Category:	downloaded
Size (bytes):	25600
Entropy (8bit):	5.448672016604878
Encrypted:	false
SSDEEP:	768:RYzFZflJreLbrCS9h7vo/TMNt340KrExPdtS9p:eeLP7vobcSr
MD5:	48BE1563378F7C36BDADC0F2EB616856
SHA1:	2AA42B08FE8CC7AC0DC371D2309A38D5A465247F
SHA-256:	63C035E2F43180086B19EC08F35C8DEEE82B2B804DDFCF92F7F0E6D835957BFE
SHA-512:	6BD0492F48D247C598BB23CD41063A90C95B93AC491F80BB80FD755D004A2275CD04D0D456CDF618D70E344C74B6EA51FBD1EE3AFC62F68A91DA322A0BF9692F
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/43.7ac85d58.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(1===t.length)return t;e=e\|\|1;var r=t.slice(0,e),n=t.slice(e);return Array.prototype.concat.call([],decodeComponents(r),decodeComponents(n))}function decode(t){try{return decodeURIComponent(t)}catch(f){for(var e=t.match(n),r=1;r<e.length;r++)e=(t=decodeComponents(e,r).join("")).match(n);return t}}t.exports=function(t){if("string"!==typeof t)throw new TypeError("Expected `encodedURI` to be of type `string`, got `"+typeof t+"`");try{return t=t.replace(/\+/g," "),decodeURIComponent(t)}catch(e){return function customDecodeURIComponent(t){for(var r={"%FE%FF":"\ufffd\ufffd","%FF%FE":"\ufffd\ufffd"},n=f.exec(t);n;){try{r[n[0]]=decodeURIComponent(n[0])}catch(e){var i=decode(n[0]);i!==n[0]&&(r[n[0]]=i)}n=f.exec(t)}r["%C2"]="\ufffd";for(var o=Obj

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45138), with no line terminators
Category:	downloaded
Size (bytes):	45138
Entropy (8bit):	4.971380621374382
Encrypted:	false
SSDEEP:	768:J0pH3w4JWZdsTvfjsdPlyYVtSxOc9EHV5d2VLuqaUnkdaBK1At:um4otSxOdVunkda9t
MD5:	3B8BA82E1BAC13EE29E9764A55620D99
SHA1:	D68D0E4A43779884F7FDA72C7FEBEE83BA287E0C
SHA-256:	58FDB03FAC3E89E51525A5A45EB777395D1B499BF4483E96201B6BECDDBE516F
SHA-512:	5A873467CF51F97362E289AFC8BFA1D63A118970D89A1F0A0845DE66F7751DAF95652BB0FEC5B6D7D545461DBFE1F2ECBC3FEB4B4D882F10E3B94001B1A97875
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/1.1bcc8082.chunk.css
Preview:	.drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-height:114px;left:-16px;width:-webkit-calc(100% + 32px);width:-moz-calc(100% + 32px);width:calc(100% + 32px);opacity:0;visibility:hidden;overflow:hidden;-webkit-transition:opacity .2s ease;-o-transition:opacity .2s ease;-moz-transition:opacity .2s ease;transition:opacity .2s ease;border-bottom:1px solid #eff3f5}.drift-widget-composer-emoji-picker>.emoji-mart{width:100%!important;padding-top:8px;-webkit-border-radius:6px 6px 0 0;-moz-border-radius:6px 6px 0 0;border-radius:6px 6px 0 0;border-color:#eff3f5;border-bottom:none;border-left:none;border-right:none}.drift-widget-composer-emoji-picker .emoji-mart-search input{appearance:searchfield;-moz-appearance:searchfield;-webkit-appearance:searchfield;-webkit-box-sizing:border-box;-moz-box

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33094), with no line terminators
Category:	downloaded
Size (bytes):	33094
Entropy (8bit):	5.271194779008479
Encrypted:	false
SSDEEP:	384:+MT7wsVvhAfNL2hzOtDENEhe2xZc9KhvpcFvRrfVBejwX:+M/wsVvhAfNL2CEQbc9KVpcFvFVB6y
MD5:	D8739A9FE9A3A42936F5CD86C8727494
SHA1:	4FB60EC9F1C4EFF985C219BF24E4B1F340D62C97
SHA-256:	8F0F8792237470EE661C6AFC32CA68200DD74BCC0D544D0FD54C7777AF362EAE
SHA-512:	3326F37AE1DB03E06E8A1EC7E0B39D4F055C55E0B2DE6386F0677250A48B0146A081B3E17B42E01C194F0CD3FA5B63871FAE86478891644EA41BA1747A647EE5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/22.6b9a301a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{timestamp:e\|\|Object(i.a)(),discarded_events:t}];return Object(r.c)(n?{dsn:n}:{},[o])}},"/brt":function(t,n,e){"use strict";e.d(n,"a",function(){return severityLevelFromString});var r=["fatal","error","warning","log","info","debug"];function severityLevelFromString(t){return"warn"===t?"warning":r.includes(t)?t:"log"}},"26VM":function(t,n,e){"use strict";e.d(n,"a",function(){return isDOMError}),e.d(n,"b",function(){return isDOMException}),e.d(n,"c",function(){return isElement}),e.d(n,"d",function(){return isError}),e.d(n,"e",function(){return isErrorEvent}),e.d(n,"f",function(){return isEvent}),e.d(n,"g",function(){return isInstanceOf}),e.d(n,"h",function(){return isNaN}),e.d(n,"i",function(){return isPlainObject}),e.d(n,"j",function(){ret

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	94757
Entropy (8bit):	5.441212591752589
Encrypted:	false
SSDEEP:	1536:ALFDOPWMZMl2fsgGbe3N+oDM0RQERMNBQaxpp:ALFD/MZMkEX0+oDGnpp
MD5:	FBEBF89AD3D0B551C8F45F0A4A1A8B81
SHA1:	BC123A6E618C37D3521A43FBE0EB8794B7532FD9
SHA-256:	F96DE5E02EE3826A8849C6B23C4845EAAC1FC5A8592B5B379E477B4BA787541B
SHA-512:	1B35596CB800179C06F9C933E674891410453907023CA52F130DA41DA626F7CFE90E8E8B808BBAE7EBA4A63DE83E65918AEA2A065478D0AC9C43DBB997B8B1DC
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.1038.js?cs=243cd7ab26978187facc
Preview:	/! For license information please see signing_iframeless_mobile.1038.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1038],{634596:function(e,t,n){"use strict";n(644564);var r=n(835536);e.exports=r("Array").map},63012:function(e,t,n){"use strict";n(899920);var r=n(835536);e.exports=r("Array").sort},563104:function(e,t,n){"use strict";var r=n(509080),o=n(634596),i=Array.prototype;e.exports=function(e){var t=e.map;return e===i\|\|r(i,e)&&t===i.map?o:t}},80900:function(e,t,n){"use strict";var r=n(509080),o=n(63012),i=Array.prototype;e.exports=function(e){var t=e.sort;return e===i\|\|r(i,e)&&t===i.sort?o:t}},996256:function(e,t,n){"use strict";var r=n(75120),o=Math.floor,i=function(e,t){var n=e.length,s=o(n/2);return n<8?a(e,t):c(e,i(r(e,0,s),t),i(r(e,s),t),t)},a=function(e,t){for(var n,r,o=e.length,i=1;i<o;){for(r=i,n=e[i];r&&t(e[r-1],n)>0;)e[r]=e[--r];r!==i++&&(e[r]=n)}return e},c=function(e,t,n,r){for(var o=t.length,i=n.length,a=0,c=0;a<o\|\|c<i;)e[a+

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16730)
Category:	downloaded
Size (bytes):	16901
Entropy (8bit):	5.307127382012041
Encrypted:	false
SSDEEP:	384:t4fK5ybTgZTyTyEmsUJURmJqhpny/Ay82JrHGw3+euhJ21Z7gnf87CQNmc/3v:D5uTgZTy+ERUmAMhYHfHjg2r7gSV3v
MD5:	ACCD21972586665CB525B445132FDF69
SHA1:	AA94DE09663C2BF3E30B7EC8432E3A416A432A13
SHA-256:	280F8BC4429C46BA61F6903E4249777C2704EF7816ED35E5D8D120C87264FCA5
SHA-512:	725182716721D4CB3E5946273A6C97A972E49DDD0EAFDA1643CF47CF8BF5DD17BCE3509C2909D5D7FFBA34D6E6D5258C0291A79D37AC534B0279BA5FA398807D
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.2120.js?cs=2623d9b0e32eb7c179de
Preview:	/! For license information please see signing_iframeless_mobile.2120.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2120],{402120:function(e,t,s){s(112084),s(375300),s(454068),s(174016),s(627632),s(757768),s(409624);var n=s(737588),i=s.n(n),r=s(349268),o=s(247601);t.c=function(e,t,s){var n,a,l,u=e.ss\|\|{},p=/^\s+/,h=/\s+$/,c=/[xy]/g,d=/.(\/\|\\)/,f=/.[.]/,_=/[\t\r\n]/g,g=Object.prototype.toString.call(e.HTMLElement).indexOf("Constructor")>0,m=t.createElement("input");return m.type="file",n="multiple"in m&&"undefined"!=typeof File&&void 0!==(new XMLHttpRequest).upload,u.obj2string=function(e,t){var s=[];for(var n in e)if(Object.prototype.hasOwnProperty.call(e,n)){var i=t?t+"["+n+"]":n,r=e[n];s.push("object"==typeof r?u.obj2string(r,i):encodeURIComponent(i)+"="+encodeURIComponent(r))}return s.join("&")},u.extendObj=function(e,t){for(var s in t)Object.prototype.hasOwnProperty.call(t,s)&&(e[s]=t[s])},u.contains=function(e,t){for(var s

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	67
Entropy (8bit):	3.9522734754511992
Encrypted:	false
SSDEEP:	3:YGKeMfQ2pHWiR8HnH7OE9HstmyRHfHyY:YGKed2pHDYiElkjyY
MD5:	A3C0FEF79E5AA3D558CB31F43446CC65
SHA1:	1351602A11F88D358F2BCB7B2A9E6AC778A12F32
SHA-256:	C888D85A166193FF4213885592062A1EFE7CCF72FB449150C8CC9E3767FC2EAF
SHA-512:	0D4077C40C52D7B843CD3888E761FBC7FEA31EAA61F1B8DFDFFF430674CCF7BBA59102D3955FB234AE2693872091FB9844B7825C9981BDB98341873CD4C186C4
Malicious:	false
Reputation:	low
URL:	https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location
Preview:	{"country":"US","state":"NV","stateName":"Nevada","continent":"NA"}

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	3429
Entropy (8bit):	7.848241773312019
Encrypted:	false
SSDEEP:	96:LySLYC0Jd+4kjIs94lJFTofWUkyfwVMSUwT:10T+3sbLofWUkyfwVBTT
MD5:	0D26DF8D62B0515D1DBFC983FF628FA5
SHA1:	CC4EEF914638B5574314BD89338D34B4C4016CDB
SHA-256:	82213C7339A1E45DCE1CD6911CE68D652E22244E562F5F67FD5316118EB5BB0C
SHA-512:	A6B902CD8E14B6E355658006A2DBBBE0BE622CD24C86A44980D47918C011BE271503F5E29AAE677C872728C8A3147DE8590B528CE71C70D8A48972CA07A651C4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......T.....Z......,PLTE..............................................................................sss666...uuu...lllEEE...111 ...,,,...XXX.........[[[..................ppp```UUU......\|\|\|......xxx???................NNN.......eeeKKK(((...........bbbQQQ......hhhGGG..................AAA999.........;;;III$$$...ddd........tRNS....[.....ujP.+.{....IDATx...g_.P..q....... 4.0e..%X.QQ......~....b.C.J.B...HBr...'s.v.wo.=.3..{a.z..s..s..-..[...%.7..3.g/l.1..^c.....\{i....s......H..?`..g..E$.A....9@...N.....?.0....D..1. 'g!.>.E..EL..n.....e......".aX...f.`]!..I\...=N_..`.......3.v....E..y.v.....f04#.b.....D$x\|..f.......%.H.............I.T...$.d.....2..,M.eX.X..`n.t.....3~..)9 .)Q..GE...~...mp.a........dkC.+...N...a..A#..1..5......._C.2.Y...IP...X.C..L._3\..P.[.=..)I....`..U..%e...9....K....R;].G.....&Q.G.....e..R..qK.P...j'..8.72..i2}.t.\|T.`.*.....+<...R8.4.r......].m.(.3..H..T.....(....p.C.x..<Wt..h...6.H.P..b...?<..'aO.2.".H

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.06610893983748
Encrypted:	false
SSDEEP:	3:pA9uSARn:u9uSARn
MD5:	197825007018C4FAD22B53CD57403554
SHA1:	87CE6D214B1189F103704F7882C82112BD38662F
SHA-256:	24F90B3A9F5344838C77DC1D6E35D516E12733A3AD7A2FBF9339B78D42A33E14
SHA-512:	9F32B9FA139CFE6F8C41B7B42230DAC76318C2145EDCC3229130DEE86944DA9FE50EB683FB0F2478226CAFB85EB58821E5AAC454C67FAD8D64D1913A839F27A9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwl7xOD1u0vt9hIFDSu96_sSBQ2iwItr?alt=proto
Preview:	ChIKBw0rvev7GgAKBw2iwItrGgA=

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=Pus5UEGTXSHTGgS1938xlm6cDo-3t7ol3e4KT7-Lgik&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=ffd8ffe000104a46494600010101006000600000ffdb004300080606070605080707070909080a0c140d0c0b0b0c1912130f141d1a1f1e1d1a1c1c20242e2720222c231c1c2837292c30313434341f27393d38323c2e333432ffdb0043010909090c0b0c180d0d1832211c213232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232323232ffc00011080001000103012200021101031101ffc4001f0000010501010101010100000000000000000102030405060708090a0bffc400b5100002010303020403050504040000017d01020300041105122131410613516107227114328191a1082342b1c11552d1f02433627282090a161718191a25262728292a3435363738393a434445464748494a535455565758595a636465666768696a737475767778797a838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae1e2e3e4e5e6e7e8e9eaf1f2f3f4f5f6f7f8f9faffc4001f0100030101010101010101010000000000000102030405060708090a0bffc400b51100020102040403040705040400010277000102031104052131061241510761711322328108144291a1b1c109233352f0156272d10a162434e125f11718191a262728292a35363738393a434445464748494a535455565758595a636465666768696a737475767778797a82838485868788898a92939495969798999aa2a3a4a5a6a7a8a9aab2b3b4b5b6b7b8b9bac2c3c4c5c6c7c8c9cad2d3d4d5d6d7d8d9dae2e3e4e5e6e7e8e9eaf2f3f4f5f6f7f8f9faffda000c03010002110311003f00f7fa28a2803fffd9ccfb22a29a9c5cf15bd0627a80ad78929a106924&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CUnl/7yltxlHh/:/+/
MD5:	07FFF40B5DD495ACA2AC4E1C3FBC60AA
SHA1:	E8AC224BA9EE97E87670ED6F3A2F0128B7AF9FE4
SHA-256:	A065920DF8CC4016D67C3A464BE90099C9D28FFE7C9E6EE3A18F257EFC58CBD7
SHA-512:	49B8DAF1F5BA868BC8C6B224C787A75025CA36513EF8633D1D8F34E48EE0B578F466FCC104A7BED553404DDC5F9FAFF3FEF5F894B31CD57F32245E550FAD656A
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (20426), with no line terminators
Category:	downloaded
Size (bytes):	20426
Entropy (8bit):	5.333536009628743
Encrypted:	false
SSDEEP:	192:QrYSlzX09IrLtW9rLvasGXEnbXpkzaD8l9mJsQ8pVqBWxMzVVQd7V6tvQ4xS:QrbXov3MEnKz08Fbqv7Qv2o
MD5:	481AAB9660002090188FEE60921B6EC7
SHA1:	8E2BEAC7E106ED5D0EF7612FA9C360F1407BF138
SHA-256:	D51A4C1C5D8E010E04D9EB59E04242C20557BC928BC36E401C157A05C0171788
SHA-512:	D6F02F8DF842EC114F15B427F3279A1F1930B6667F02A018B67E562D75ABA083E23206470A2336CA0B6C1FC27B08D6AC7BCD47FE375B2D60A8E7CE759CBFF449
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/28.caa75eae.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;function useReflowFrameClassName(){var e="";if(!f){var t=Object(l.f)(i.a.parse(document.location.search));e=(null===t\|\|void 0===t?void 0:t.isXSScreenSize)?"widget--xs":"",f=!0}var n=Object(u.useState)(e),s=Object(r.a)(n,2),p=s[0],d=s[1],b=Object(u.useState)(void 0),v=Object(r.a)(b,2),g=v[0],h=v[1];return Object(u.useEffect)(function(){Object(c.c)({topic:"CONDUCTOR:reflowFrame",handler:function handler(e){var t=e.data;d(function(){return t.isXSScreenSize?"widget--xs":""}),a.a.dispatch(Object(o.f)(t.isXSScreenSize)),t.clientInnerHeight&&h(function(){return t.clientInnerHeight})}})},[]),{reflowFrameCX:p,clientInnerHeight:g}}},"2uLe":function(e,t,n){"use strict";var r=n("mj2O"),a=n.n(r),c=n("7SM1"),o=n("s8DI"),s=n("8ZCy"),i=n("VkHq"),u=n("ILQF"

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	downloaded
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/otCommonStyles.css
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65446)
Category:	downloaded
Size (bytes):	240332
Entropy (8bit):	4.90143584748836
Encrypted:	false
SSDEEP:	1536:xhHcHQsUBvcrfZ3GEGa1xcpMvemTMvU6cTkX+hNtYhBrORhjsxQF6F0hwps3XhFs:uUBsxd1xcpMvemTMvU6gha
MD5:	D84152CB935DBFB9300ED4A50708BCF1
SHA1:	9826051D514F3DB2A1B4CB24EF9054A1C0BF3567
SHA-256:	3B28154BDBEF1919953ADB20005C0E3C7220F9FA66656879780327AA6B6DBBE5
SHA-512:	5BB8F4AEF53A829023C93508635271D1A3CE77EA16691B2A9F91B7404B94BD84070F9F532F826541C9D9524DCB9BD59BCF6B50A845362E8B2EEADFFF5E1EFFD6
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.styles.js?cs=97ccd6f635c970474c8c
Preview:	/! For license information please see signing_iframeless_mobile.styles.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2176],{542396:function(e,t,o){var a=o(955500),i=o.n(a),r=o(302312),n=o.n(r)()(i());n.push([e.id,'.btn .icon,.btn-text{color:#333}img{max-width:none}.dialog.modal-wrap{background:rgba(0,0,0,.5);top:0;left:0;width:100%;height:100%;position:fixed;overflow:auto;outline:0!important;text-align:center;padding:0 2em}.icon{width:auto;height:auto;background:0 0;overflow:visible}.mvn-pro{font-family:"Maven Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:700}.helv,div:not([data-disable-olive-div] ){font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:400}div:not([data-disable-olive-div] ){font-size:13px;line-height:normal;text-rendering:optimizeLegibility}h1,h2,h3,h4{font-family:"Maven Pro","Helvetica Neue",Helvetica,Arial,sans-serif;font-weight:700}h5{font-family:"Helvetica Neue",Helvetica,Arial,

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=vMjW7wmFekEYRAMj46SPHvjNV01n_ZFwWD23cG3JJgM&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, was "tmphfz7c73b", last modified: Tue Apr 9 19:11:10 2024, max compression, original size modulo 2^32 43575
Category:	downloaded
Size (bytes):	11986
Entropy (8bit):	7.982450351626027
Encrypted:	false
SSDEEP:	192:YS268zKiFWcYMzpr0qMTcRAfBRzLl/NFkqiJI0qaIqJy7yuq0mmC67ycQKUegZ:89zKi9lpA4uptLNkxu0vsz0cQJB
MD5:	DBB9BE044FDB87BB792EB7B0B848A857
SHA1:	51DE9AA28D24A0DF7C8827D75FE5B73728DD1034
SHA-256:	EAFF9936C3AE7F53E15B2B26F2FB1B539A7A7D6F2C70042F93D1B46B22DBBE80
SHA-512:	4418C7D44E1AEC33DE9674663204C15598DC3425970FD1E9CC97D612830B195436D5FCC8026E09648AD9BC2F859C9FBEA2B42EF23BFA7AF51D827D1FC7EE187B
Malicious:	false
Reputation:	low
URL:	https://edge.fullstory.com/datalayer/v4/latest.js
Preview:	......f..tmphfz7c73b..}is.F..w....h.P...4.Rd9.-y%9yv..."..b....lE....{n..\|$....".....kzf...\|Z.E..w...^U...G7I.qV.r.............I<..>...&..wr..B...I.G/... ........!..../.......:..............v..G).Gd.......\|...)....(..,;(..}..a.Giv..'5o..D.Q..."K.P.MY,Ly..a:/.[...uZ7.cR.....n.=.....1.O..(.>..../ox.z..."..0ez...'<.I.....d....y....}y/.<....a.a..L.)..J...~....RUC.....V...)....2=7W.^.5.V.EX/.:y...f.J.K@..x.&yyQ{.b..p4.~J.%...x..^..a.n=X0T...~..Y../..4V\|.z.....Uq.+...VP......Rb.0..P].z)~cSP..y....c..x..0-..~...y..}.-8WI.Ud..#x<..b..X.j.\|.d......\.....#.o.......l..5RuWX....rz....y.\,..v.WQ.......gIy...%M.1...".D.w..j.,/..T..j-kz.Ue'o..[....U.........C..L~y7..D.=.......^.)Xn..@.%.;..<........y.,...._..a....\|..!.2...".....;.7<c....U.\............2...e..~8.>.....i../.F$...U........H.B..,.!)s....f.4..V..-....}.3~.....5..A.#........uz.e}8..e.).......o.`!......y..O...d.'.t.....T#;1.fU\..(.]..Q.dF.0Y1*.Qw.....V..A?./...8......e...O.3...eB.@..R.ZU.,...t.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (23865), with no line terminators
Category:	downloaded
Size (bytes):	23865
Entropy (8bit):	5.17066773670714
Encrypted:	false
SSDEEP:	384:dEiPYBr8tDTHrmZjlvbbPal9pGh6rk4scHWeqBEcpAODhBwXTzWDg8GUeAwkO06o:OigBgtnQvbbPkGh6Q4scQEcpAODySDig
MD5:	4049F38C00ADD1738DC4806148FF8829
SHA1:	0A631D2CCDE970A13F60E147A5B5AEACB6A1B2E0
SHA-256:	C501DE88FBB90A445F1754A529BC772E7047071BF653C8C3F0330F7BB736D140
SHA-512:	8ADA588F646C3D9456EA5C8F28C994078B6D2F88527E998C3329F53BD915403283F498E31A9532B7488DC23C74F0CB60AFC93F47891D9E73CF6FB96085A97EC1
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/11.639238ba.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._items["-0"]=!0),!1):null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?t in e._items[c]\|\|(n&&(e._items[c][t]=!0),!1):(n&&(e._items[c]={},e._items[c][t]=!0),!1);case"boolean":if(c in e._items){var a=t?1:0;return!!e._items[c][a]\|\|(n&&(e._items[c][a]=!0),!1)}return n&&(e._items[c]=t?[!1,!0]:[!0,!1]),!1;case"function":return null!==e._nativeSet?n?(r=e._nativeSet.size,e._nativeSet.add(t),e._nativeSet.size===r):e._nativeSet.has(t):c in e._items?!!Object(u.a)(t,e._items[c])\|\|(n&&e._items[c].push(t),!1):(n&&(e._items[c]=[t]),!1);case"undefined":return!!e._items[c]\|\|(n&&(e._items[c]=!0),!1);case"object":if(null===t)return!!e._items.null\|\|(n&&(e._items.null=!0),!1);default:return(c

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 29516, version 1.0
Category:	downloaded
Size (bytes):	29516
Entropy (8bit):	7.993944632054563
Encrypted:	true
SSDEEP:	768:YDWMT03T1/sy4Upj+7eLeD2qaWOJEPiAnKJ/JJzySg41:l35/syg7eLeD2PaiaKAV41
MD5:	5D66C3D97D4F69A2B3527E3997CBB66B
SHA1:	94EF4F31C1A1CD780A172EDFBF9E3DE61697EF5A
SHA-256:	1BF53B33743C5C45D6C944815F74CBF58B228806858FB6E3A0B86C1204F4BE06
SHA-512:	FEB229CF976DC037130CE7E7A6C0E32FA8BD0C63382B0FFAD82E4448767B88F8C17C431055BF834AF6A5E92E2D34A6EC7432AFDABCEA9FAE867517613AFD3621
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-regular.woff2
Preview:	wOF2......sL......b...r.........................?FFTM..6...l..t.`..V...e.....\..V.....6.$..(. ..Z..3..p[sDq....2.r...n....%2...z..q.Te-;@..%..I......;......{...Rk...@...HG.)G...8.U.x2.q.qZ.../....6".tQw..YVg9V.k.b.)...j.x..D4L_(.Y0.....k(.w...#U.. .;F.T8..j.v.x..p.:$-[o-.W.~~...{.u..3...)..J.<w..M.V.(a.......;..7g.,X.fu...............i.]..@..Y.[x......!....lG....a"...Nd../.k.V...Q...(.BPe.S.E...C$.........W....L.2.%.2.+O..D..TV...h"T.h/N!....,.gaX.....%...x..r.,.Zz....-...f^.T..sZ..e.Ed.8N....%:./...B...m3......E@A...#.....#.}.~.f,2..3.o_..wX.U.uRI...`i...../D.../~.3.......W..#....U2.r.2.u.B.{.]r"rP{M....V.........LhNU=..{L.......'.U...].0.`...$...4Y..RN...E/........i..<@Y.....:...X.-...R.]..@z...(....p...Y.....").N=...!....,..]D....Z.......o........N.y......g.t..1f#.........o.Y;.y..{...G.......K......>/.,.d.....NU.>7v..KQ....J..l..{w.FH..&..!..?4.q...1wY..7..RJ):..a....<..*..G.M.m..k......."Vhq..xsk...M\|...o..d.....w......F.(..(..(..(..(..(..(::

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	588
Entropy (8bit):	4.940560498328831
Encrypted:	false
SSDEEP:	12:TMHdVoF97FpM/n/KYE86a07dWwRLIKSQwR/4ESE3dUTLnBSG:2di7bM/nLK3RWwm4wZ4EmTLnx
MD5:	21F840ABAA13C71AFB622EEC231F720C
SHA1:	41F57D2E935AD0EED26F96729789470737FB6F3E
SHA-256:	0DC820F1B38866F9EF0C1D25880AF9F4C924B8D1B82D1463876D0724FD4A03C8
SHA-512:	3F9E214E17A3D66FB3336712C5E9D5393F4D08B1E7F459B08A752098D8DBE18C69C5885FE7D5018AD8E6B7D252106A56A43B8DBF1C49AD4FC361A517AC893F43
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/imgs/icons/sign-here-active.svg
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="59px" height="59px" viewBox="0 0 59 59" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>SignHereActive</title>. <g id="SignHereActive" fill-rule="nonzero">. <g id="arrow">. <polygon points="25 41 34 41 34 0 25 0"></polygon>. <polygon points="29.5050892 47 7 24.0803538 12.9703759 18 29.5050892 34.8392925 46.0296241 18.0103659 52 24.0907197"></polygon>. </g>. <polygon id="bar" points="0 59 59 59 59 50 0 50"></polygon>. </g>.</svg>

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 31644, version 1.0
Category:	downloaded
Size (bytes):	31644
Entropy (8bit):	7.993065566948634
Encrypted:	true
SSDEEP:	768:QpME5mXXDrh5SBgD1LiXEBZiLKLWWPTO45o/fdQIdJAL:QpFEhFDRiXUoReOO4QId6L
MD5:	89C979CFF1EBCBD06171DCD15927EB3A
SHA1:	DDFB17DA64F896EA2682BEC12499ED9D8F65F69D
SHA-256:	F2C05D1D723BD31646C2C5ADB65C29F317FEAB778A02511FBDCBC180853CA042
SHA-512:	AD58C49E307E87D94BCD1AD7DD7D729B752817DC2451D5869A7ECB652622FDC0BE51C4BAA263747D986898756D6B178570BA9AC839AF748FA808DC9B7CECED9E
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/fonts/dsindigo-medium.woff2
Preview:	wOF2......{.......k...{1........................?FFTM..6...H..t.`..V.$..e.....$..S.....6.$..(. .. ..3..3[.M...iWu.........~s..`..ws.m...ao..B..U..g.............vl.1B...jf......).ir...Hi.y]Zwp0./QH...V%G.q.....p....f.M.\|.4.\.#....7..S.{Q,8sQ..E.J...e.K.i...z...w.j.Q.h..I.})...E-.mjw.~1.7p.\|...[...v[.y^.G......q.........,Mydu9..~._hF~..j...#.........j.~..w.k..j......LR..G+r..d.?!\.Mf.Sg...a.,...D_....`.{=./...........}...T.m.?.6.2`H.5.........=...}.JRI".D.1$..P).xrM.8?O.\|...R.TP..P.pX..W..U.Wi.]...t.......h6...l.-...R.EY....C...T...X1s.f....`..%.Q..CEf.......hu.{.........'".i.Q.....-.......T@.l.f^\|...\|...1....h...[..u...!.Q.....t...P......^8b....=...q.{6g.,b.....C!4B...m4..,z...4NB...2.C.......n.@..Jo.>).ULf........7U..#.-...TYx-...MH?.Q.....DpM.....3H..L..^......T.km....:.@.X...z....qosW..t.t.K..g(5.#4x..n.Z..d/$..i.....(..(..(..(..(.v.y.;..(...h4...n. .9. ...CC._k..R..x.}QY;..{..."%..EJ.A7qi....<C...&....m19..+..(-@../ P...X.._..O

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24823), with no line terminators
Category:	dropped
Size (bytes):	24823
Entropy (8bit):	4.792811205299742
Encrypted:	false
SSDEEP:	384:+Z8C4hGoFpHwAuLlCS7FGAVsq1nwGfg4xqsQMPNE:JlMuJ
MD5:	E04AD89975C535B30BAE773D0EB0D3B2
SHA1:	0C72555D0FD844150B6EC407A57DA2D29BF380E2
SHA-256:	06C0EDBFC1B871FB45195265F5FAAD3E23191305F6FF2125557A9FBC287C8992
SHA-512:	6044553C64225C3F3F2AA5EF866BF55B1148CD5B7FE1A668417BF9BC24B70BB7C10048049C2201D986A28CFF85B1A93CE673CBF687FA4B8BE2DAEB5B8C6B73D7
Malicious:	false
Reputation:	low
Preview:	#onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .onetrust-vendors-list-handler:hover{color:#1f96db}#onetrust-banner-sdk:focus{outline:2px solid #000;outline-offset:-2px}#onetrust-banner-sdk a:focus{outline:2px solid #000}#onetrust-banner-sdk #onetrust-accept-btn-handler,#onetrust-banner-sdk #onetrust-reject-all-handler,#onetrust-banner-sdk #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-icon,#ot-sync-ntfy .ot-close-icon{background-size:contain;background-repeat:no-repeat;background-position:center;height:12px;width:12px}#onetrust-banner-sdk .powered-by-logo,#onetrust-banner-sdk .ot-pc-fo

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	996
Entropy (8bit):	7.667690083187348
Encrypted:	false
SSDEEP:	12:6v/78EUMdg6AUGUutzYXPuP8vi3nKS/s8NkTo/P/6iYLGQ3rjWRBZZSNG35wlE31:MAQutzME6Is85nQ3rjyBZZ2lEVza6C81
MD5:	F4B52A4EB3D0CDD585A73EADE7CC734A
SHA1:	00BD17DB2EA7F845910C713CBFF3A6719D59A1EC
SHA-256:	94BACE793EA5F351B65F5B2948BEB949B01FB811274A3F8EB8D52B9719A149BB
SHA-512:	763AF2EADA1D18687D5A4B2BD8323A10D93CC22AE4E78139446D7DDDB617631CE55B695F24D07DF5FAD14B48F0674E56BD031B4DDC50AFCE013F320CF6447EAC
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/imgs/icon_avatar.png
Preview:	.PNG........IHDR...P...P............tEXtSoftware.Adobe ImageReadyq.e<....IDATx..Kr.@...S2...l...,\|.T..@\|.N.8.."....... +....T..B..Dw..Z@..W.=.M.{&..?.}.>..vnT..0h.._>..{.w.LR.}.<.tri5l3.U..D.@.....Jjq....=4....m?\|^,..m.>{s.x.\.....j.z.........l.`...8L1..Z.t..@7......<s;.1...N.<:zg>\|....s.vC].....^...P..%..B._. r.....lU.`..7U.e.B..+`.+.Y.....;.Mr.X.aW....lF/....Q..%p.f.@1.e.@...r.>.M.>...K.U...R{..P..T{.&....z".....T.......RZ....Xd...(>@.>..\......@..x.-...l3............M....$r!l.v%.........a....&.../Hr.lU..!...M.m...N&.....bV.......Y...ww..!...}<.. tsNV....."..3....@o..s....;.....c...@..nG. .v4...:.KJ.o>.JX$..r..:.....M.... .,....u.1.."`r.FH..n^....q..Z.<.tB...).6$......f..6..D'op...G...W...vy.t...u?]...,W..."...T.dV....%G...p./E..ie..6..i.!.4.>......^E...I.:......U..2.al.#.@x..VU..1IY....l.E.......l..%....v!l..y[..../.2%..z[...Z..}g.......%..Q,......7.B...B%....6.`\&o....%e.ML..[%....2.}..J%!..bH-C..(..2......zb2..3..+..X.(K.......IEND.B`.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	23144
Entropy (8bit):	4.609989283730634
Encrypted:	false
SSDEEP:	384:ao0Hmh3q58PeYRwKBjrUxpuuh3q58PeYRwKBrYhkq58neYR2KB8O/babh3q58PeS:1L3YPxKBjrUxpB3YPxKBrakY3TKB8Omp
MD5:	F0C49B7F657C685F8856350167161D08
SHA1:	E30839010C9012F55C3727445B0F5CD181197FF0
SHA-256:	F61547DE93D90087E381250884A50F6B458B56C81501606DE9603FD9BB20DF26
SHA-512:	CFC46F8E567509C78DE83F3A1009EF890CC90AC6A8AC75BF57BBD05DD49A5C5BEEC7980A9A02F1070747052C02A0D86DCEE9592B8EA964289CC83DEED4D70140
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json
Preview:	{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8335b-1f5b-415d-923b-2daa2d0de9bd","GeolocationUrl":"https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","al","pr","dc","ny","ut","nh","ia","ok","az","hi","mp","oh","ri","id","wa","mt","nd","nm","md","ak","de","nv","wv","nj","in","tx","gu","il","ma","me"]},"LanguageSwitcherPlaceholder":{"ps":"ps","sr-SR":"sr-SR","pt":"pt","es-BO":"es-BO","en-AE":"en-AE","el-GR":"el-GR","en-AM":"en-AM","zh

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	240748
Entropy (8bit):	5.092451370734677
Encrypted:	false
SSDEEP:	1536:baBhpy5W6DPDtHrI+t/UNqM0aBw2Zgq/BpDr2TKwC4psiB09UiFkET:oy5W6DPDtHrI+t/cCaBw2Z5NN9UiLT
MD5:	2C73DD9B48CB342C5FEB81C8A378B291
SHA1:	FA52BCA3CF57FFE2FBA82D3C923B1A3DE1E38E76
SHA-256:	DA90AEA8421C31DDAB9FADDF17FC9D1F7EE9B466786C8113F0C523DB8CB3F00C
SHA-512:	FA16248370983FFFE7DD3E1F68B988FF24D11633CC61C796EE285D06CB4368FBF647CE7805B57B6736038D7E961FD242529D7254938CB6F38217DFC1759B4047
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/css/olive.min.css
Preview:	@font-face{font-family:olive-icons;font-style:normal;font-weight:400;src:url(../fonts/olive-icons.eot);src:url(../fonts/olive-icons.eot?#iefix) format("eot"),url(../fonts/olive-icons.woff) format("woff"),url(../fonts/olive-icons.ttf) format("truetype"),url(../fonts/olive-icons.svg#olive-icons) format("svg")}@-webkit-keyframes slightFadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,5px,0);transform:translate3d(0,5px,0)}to{opacity:1;-webkit-transform:none;transform:none}}@keyframes slightFadeInUp{0%{opacity:0;-webkit-transform:translate3d(0,5px,0);transform:translate3d(0,5px,0)}to{opacity:1;-webkit-transform:none;transform:none}}@-webkit-keyframes scaleIn{0%{-webkit-transform:scale(0);transform:scale(0)}to{-webkit-transform:scale(1);transform:scale(1)}}@keyframes scaleIn{0%{-webkit-transform:scale(0);transform:scale(0)}to{-webkit-transform:scale(1);transform:scale(1)}}/! normalize.css v3.0.1 \| MIT License \| git.io/normalize /html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:1

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	257
Entropy (8bit):	4.936853809456331
Encrypted:	false
SSDEEP:	6:tnrwdhC/i3mc4sl5RIFnzrnUg3QxUn3voPt0Bd+5IABcL0n:trwdU/i3vqZ/nnGevR2RBcL+
MD5:	6E132855B6DDD5C7A1FA7DAD2C9FE964
SHA1:	0342D3665682749F7C312B8B1EE6A169FA4C68C5
SHA-256:	06DADA60F95EF29D2483D66D0412FF1EE698503F7E29DAE26403F6C5E071507F
SHA-512:	F3314BB8BFC2D262F98FAE116DC50A38BDB2A6AD2D6950BD42BBA43457A934B68894AD8C0952E7C2286E31433185DA1424CAC3048CE47AB0B2A0338C14210761
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg">. <path d="M13.36 15H20V4H4v11h5v3.114L13.36 15zM4 2h16c1.105 0 2 .895 2 2v11c0 1.105-.895 2-2 2h-6l-7 5v-5H4c-1.105 0-2-.895-2-2V4c0-1.105.895-2 2-2z" fill="#333"/>.</svg>.

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	4
Entropy (8bit):	1.5
Encrypted:	false
SSDEEP:	3:s:s
MD5:	37A6259CC0C1DAE299A7866489DFF0BD
SHA1:	2BE88CA4242C76E8253AC62474851065032D6833
SHA-256:	74234E98AFE7498FB5DAF1F36AC2D78ACC339464F950703B8C019892F982B90B
SHA-512:	04F8FF2682604862E405BF88DE102ED7710AC45C1205957625E4EE3E5F5A2241E453614ACC451345B91BAFC88F38804019C7492444595674E94E8CF4BE53817F
Malicious:	false
Reputation:	low
Preview:	null

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	588
Entropy (8bit):	4.940560498328831
Encrypted:	false
SSDEEP:	12:TMHdVoF97FpM/n/KYE86a07dWwRLIKSQwR/4ESE3dUTLnBSG:2di7bM/nLK3RWwm4wZ4EmTLnx
MD5:	21F840ABAA13C71AFB622EEC231F720C
SHA1:	41F57D2E935AD0EED26F96729789470737FB6F3E
SHA-256:	0DC820F1B38866F9EF0C1D25880AF9F4C924B8D1B82D1463876D0724FD4A03C8
SHA-512:	3F9E214E17A3D66FB3336712C5E9D5393F4D08B1E7F459B08A752098D8DBE18C69C5885FE7D5018AD8E6B7D252106A56A43B8DBF1C49AD4FC361A517AC893F43
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="59px" height="59px" viewBox="0 0 59 59" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>SignHereActive</title>. <g id="SignHereActive" fill-rule="nonzero">. <g id="arrow">. <polygon points="25 41 34 41 34 0 25 0"></polygon>. <polygon points="29.5050892 47 7 24.0803538 12.9703759 18 29.5050892 34.8392925 46.0296241 18.0103659 52 24.0907197"></polygon>. </g>. <polygon id="bar" points="0 59 59 59 59 50 0 50"></polygon>. </g>.</svg>

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	107348
Entropy (8bit):	5.264039514215191
Encrypted:	false
SSDEEP:	1536:ReqhZjvnk1z3vrsja9cxEf6+6Glby/XJ42qbVTE4wLyPe9VAs:R1hZjKJ1y/Z4rbrwLPVAs
MD5:	114785899CEB423273FCC17AAAD202E9
SHA1:	CE53389286218FE6D7CE1EB86208074C024ACCA5
SHA-256:	C8C302716CF94980A0D77E614D9FB6C430F166B5EF7C42B7C382771955E52BA6
SHA-512:	6E357A327420598542BFFEDF8F03F7F4C327469CDC6CC52B39C0B542DA4EF09C6739F46161C8D2796BFA05193D94B47420308CF4F2A50A2F0DF73EE9712544A4
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/50.de3b5864.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE(checkDCE)}catch(e){console.error(e)}}(),e.exports=n("w/UT")},"w/UT":function(n,r,a){"use strict";var i=a("ERkP"),o=a("maj8"),u=a("jiMj");function x(e){for(var t=arguments.length-1,n="https://reactjs.org/docs/error-decoder.html?invariant="+e,r=0;r<t;r++)n+="&args[]="+encodeURIComponent(arguments[r+1]);!function ba(e,t,n,r,l,a,i,o){if(!e){if(e=void 0,void 0===t)e=Error("Minified exception occurred; use the non-minified dev environment for the full error message and additional helpful warnings.");else{var u=[n,r,l,a,i,o],c=0;(e=Error(t.replace(/%s/g,function(){return u[c++]}))).name="Invariant Violation"}throw e.framesToPop=1,e}}(!1,"Minified React error #"+e+"; visit %s for the full message or use the non-minified dev

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	532999
Entropy (8bit):	5.34496817174915
Encrypted:	false
SSDEEP:	6144:0viJx0C9xUqCb8d2bHIbHrbHNb82bDRNRSaXQUsmwvzHKW03vFLbHXbHKbHGb82W:DJx0qRSaXQUsmwbHKW03tH2N
MD5:	0AF6DCA66CA1EC28D3E0C8785DCB51E7
SHA1:	47004EBF8292B046B01443E080FC8F632BBCD6BC
SHA-256:	D662B00392CEE959E9A0DD0CB45A247DA076307E0922DA98E852AE53DFD16CA6
SHA-512:	3D0CF608B306B230C73B54C3B0C0D645616BBD30D983E0035F106EBBA14147D79DFBA0315A14C7D8C70ECEF85750BC028C14B79EE442FB8DA6D934A4D912DCB1
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.6672.js?cs=007e2853c7065f467cc6
Preview:	/! For license information please see signing_iframeless_mobile.6672.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[6672],{864400:function(e,t,n){var r=n(813624);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,i){var a,o,s=null!=t?t:e.nullContext\|\|{},c=e.hooks.helperMissing,l="function",u=e.escapeExpression,d=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" <"+u(typeof(o=null!=(o=d(n,"htmlTag")\|\|(null!=t?d(t,"htmlTag"):t))?o:c)===l?o.call(s,{name:"htmlTag",hash:{},data:i,loc:{start:{line:3,column:3},end:{line:3,column:14}}}):o)+'\n class="pdf-ua_'+u(typeof(o=null!=(o=d(n,"tag")\|\|(null!=t?d(t,"tag"):t))?o:c)===l?o.call(s,{name:"tag",hash:{},data:i,loc:{start:{line:4,column:18},end:{line:4,column:25}}}):o)+"_"+u(typeof(o=null!=(o=d(n,"pathString")\|\|(null!=t?d(t,"pathString"):t))?o:c)===l?o.call(s,{name:"pathString",hash:{},data:i,loc:{start:{line:4,column:26},end:{line:4,column:40}}}):o)

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	354019
Entropy (8bit):	5.779943706611949
Encrypted:	false
SSDEEP:	3072:1j/bj1jhcNH/MRypzxH20qRmpZgfnzQmvqQbo5N/5ebsw5mcSaE8Pj+ZgfJwk9u0:1jDhjhcNlqRmGzRaN/5cswhE8kXA9ash
MD5:	11187D94C5A405A5DDD664B738500F50
SHA1:	192CF557753AFCD7A8462EB4BE915DABED19AF40
SHA-256:	E85F8AAAD58F656CC96E8F58B30CB2EBF84C011FBAE2820886692BA8BAADC17A
SHA-512:	68D7B235A1CC1C3F50A5D28920C296081B1B591F2398F4BE1D3937443CB091C3136367BF0B4A8679B482F681A96BDD0F36530EAFFE104B62BDB38BC348F1ADB9
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5936.js?cs=86c32bc2df3904a0d75c
Preview:	/! For license information please see signing_iframeless_mobile.5936.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5936],{514600:function(e){"use strict";var t,r={DEBUG:!1,LIB_VERSION:"2.45.0"};if("undefined"==typeof window){var o={hostname:""};t={navigator:{userAgent:""},document:{location:o,referrer:""},screen:{width:0,height:0},location:o}}else t=window;var a,n,i,s,l,c,u,d,p,m,v,h=Array.prototype,f=Function.prototype,y=Object.prototype,g=h.slice,_=y.toString,b=y.hasOwnProperty,w=t.console,x=t.navigator,k=t.document,M=t.opera,C=t.screen,S=x.userAgent,T=f.bind,z=h.forEach,H=h.indexOf,A=h.map,E=Array.isArray,B={},O={trim:function(e){return e.replace(/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,"")}},D={log:function(){if(r.DEBUG&&!O.isUndefined(w)&&w)try{w.log.apply(w,arguments)}catch(e){O.each(arguments,(function(e){w.log(e)}))}},warn:function(){if(r.DEBUG&&!O.isUndefined(w)&&w){var e=["Mixpanel warning:"].concat(O.toArray(arguments));try{w.warn.appl

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 44 x 44
Category:	dropped
Size (bytes):	3745
Entropy (8bit):	7.319238994753888
Encrypted:	false
SSDEEP:	48:Hu2/EvnLJnOcLJ3JK/L8GlRq8weMpUVCvoIhy7bEhCcmR687yHxl:Nklla/Jnq8vkNhjolyRl
MD5:	DEBD77E543E64173837073B5751ABB08
SHA1:	71577CA453893F08A57A63953B836E8198D878AF
SHA-256:	ECDF09E611F9FC3875113D06E39110DE786C9A46BB7F596F7F8AFEE1C0D75A3D
SHA-512:	0FB269F547FFB69E59448FA4E9E234DC4E9B381D5336947C12113D7A1DEC71A7D9EC4F6B2841C032EA1E3FB6E68328D34C1EE1B94761171E523AFBFA962280F2
Malicious:	false
Reputation:	low
Preview:	GIF89a,.,..2.+++RRRCCCTTT---LLLiii###SSS777@@@EEE888666KKK&&&NNN333%%%<<<000......>>>QQQ(((bbb......WWW...999,,,.................tttuuu$$$...zzzXXXmmm......UUU"""..........................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39EC547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39EB547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6189959b-1072-4052-a607-820f04aae975" stRef:documentID="xmp.did:695

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (27579)
Category:	downloaded
Size (bytes):	27748
Entropy (8bit):	5.296182707067212
Encrypted:	false
SSDEEP:	768:RkRJKayOijW/PD3h1SvFBFJNChS0cu+CIGFvJEnLF8gyai/yoNAe3MGKAX8TNzfe:Ta5Ph84ncu/LyuUloNWAX8BAIH47
MD5:	0802EB5648BD5B06ECAA83EAD5429B67
SHA1:	9CC9B66CA845440ADEDFFDBC4860D809771CFC2B
SHA-256:	3D04E6F79B5EC3B2F83B39879E06E605AE454C5C85C32443D9BD677AA15CCB43
SHA-512:	92A48C3A181ACC520B222D8C1E10CE19729B16583E9056535B50068652D0288B7C2933917F9E86889163A4DA70EA1178B7F6CE8BDFE3D7F3AB842FA62EC9D389
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.327.js?cs=3df6fc1638547934485b
Preview:	/! For license information please see signing_iframeless_mobile.327.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[327],{248048:function(e,t,n){n.d(t,{k:function(){return l}});var r=n(921699),o=n(811504),i=n(794664),l=function(){var e=(0,o.useState)((0,i.Et)()\|\|""),t=(0,r.c)(e,2),n=t[0],l=t[1];return(0,o.useEffect)((function(){var e=function(){l(arguments.length>0&&void 0!==arguments[0]?arguments[0]:"")};return(0,i.am)(e),function(){return(0,i.IP)(e)}}),[]),n}},260296:function(e,t,n){n.d(t,{_:function(){return _e}});var r=n(953504),o=n(577204),i=n(811504),l=n.t(i,2),s=n(248048),c=n(146356),a=n(283504);const f=Math.min,u=Math.max,d=Math.round,m=Math.floor,p=e=>({x:e,y:e}),g={left:"right",right:"left",bottom:"top",top:"bottom"},h={start:"end",end:"start"};function y(e,t,n){return u(e,f(t,n))}function v(e,t){return"function"==typeof e?e(t):e}function w(e){return e.split("-")[0]}function x(e){return e.split("-")[1]}function b(e){retur

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (63529), with no line terminators
Category:	downloaded
Size (bytes):	63529
Entropy (8bit):	5.281778375193074
Encrypted:	false
SSDEEP:	768:A1yEnyxQEWJZDb4aJ0hHUaHFLPrW+p0B3zmE7ceIU1xeAGxM9:sJ1ENL4cFMr9
MD5:	02F09379C544BEFA413D22EB57ED41DE
SHA1:	156FF3FBF28D890EB0F79754E436AC3A66B3DE24
SHA-256:	E555F4B34B579E6528D6BBD4819620A634C0759B41DFA99520B7CA5AA5117B11
SHA-512:	C2252DE8C217909D15CBA15F47631751B69FE56DD167716A5BE05A4104DDFE28332764EBFDCFFF0DF2614DC9187E2C70B199B5EAC49D45F7A6DA7FF2F3E4AB8E
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/18.9c1bd1fb.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r])}return e};function _possibleConstructorReturn(e,t){if(!e)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return!t\|\|"object"!==typeof t&&"function"!==typeof t?e:t}var d=function(e){function Router(){var t,n;!function _classCallCheck(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}(this,Router);for(var r=arguments.length,o=Array(r),i=0;i<r;i++)o[i]=arguments[i];return t=n=_possibleConstructorReturn(this,e.call.apply(e,[this].concat(o))),n.state={match:n.computeMatch(n.props.history.location.pathname)},_possibleConstructorReturn(n,t)}return function _inherits(e,t){if("functio

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (46429), with no line terminators
Category:	downloaded
Size (bytes):	46430
Entropy (8bit):	5.303853365298302
Encrypted:	false
SSDEEP:	768:OaOFhhR5OIahpjfRys3LzQR04TYYyDMOWPKQ:OaOFnRqDRtzQ64IfWiQ
MD5:	72BCA04FD669EB89FC65D59052D0FC00
SHA1:	27E60AEF86F0CB1B2F6B6ED9DF9A4E3BA88EFD21
SHA-256:	823804A7807864B44093A3843788F4CD076E89CF4A6FDEB8D153AE5C2C2DF721
SHA-512:	56058E4C927563CA37DEC4979AF28A415EA3042A389C0BA22738C76D39131317A703A38A95EAB9D913F116F7C2D1DA62A0A87750F47DECA2DDB3447D64303B12
Malicious:	false
Reputation:	low
URL:	https://bat.bing.com/bat.js
Preview:	function UET(o){this.stringExists=function(n){return n&&n.length>0};this.domain="bat.bing.com";this.domainCl="bat.bing.net";this.URLLENGTHLIMIT=4096;this.pageLoadEvt="pageLoad";this.customEvt="custom";this.pageViewEvt="page_view";o.Ver=o.Ver!==undefined&&(o.Ver==="1"\|\|o.Ver===1)?1:2;this.uetConfig={};this.uetConfig.consent={enabled:!1,adStorageAllowed:!0,adStorageUpdated:!1,hasWaited:!1,waitForUpdate:0};this.uetConfig.tcf={enabled:!1,vendorId:1126,hasLoaded:!1,timeoutId:null,gdprApplies:undefined,adStorageAllowed:undefined,measurementAllowed:undefined,personalizationAllowed:undefined};this.beaconParams={};this.supportsCORS=this.supportsXDR=!1;this.paramValidations={string_currency:{type:"regex",regex:/^[a-zA-Z]{3}$/,error:"{p} value must be ISO standard currency code"},number:{type:"num",digits:3,max:999999999999},integer:{type:"num",digits:0,max:999999999999},hct_los:{type:"num",digits:0,max:30},date:{type:"regex",regex:/^\d{4}-\d{2}-\d{2}$/,error:"{p} value must be in YYYY-MM-DD date

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57671), with no line terminators
Category:	downloaded
Size (bytes):	57671
Entropy (8bit):	5.406436595808325
Encrypted:	false
SSDEEP:	1536:buM99dAoLYPNh7S5BTF94zGnSJpSFD2No5/g:buMdAVNiTF94zGnSJpSFDr5/g
MD5:	BBBCF811D8437A575D796A4C1E5D4FAD
SHA1:	CCE821AAE4F2B8982D9C08B308FB5306945EA68E
SHA-256:	4D15FF2317E16CCD8CA1D3248FEA7D91130E022369BB032824A84AD9967064DF
SHA-512:	6D0E3E9079DB4C175F0E8EC0279E9A89DF786D226685C0764AB20179D69E19CA269E8CC40646A97D31F95597654EC869472358BB72071011DF3410FC32E501C0
Malicious:	false
Reputation:	low
URL:	https://static.ads-twitter.com/uwt.js
Preview:	!function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=globalThis.crypto),!r&&"undefined"!=typeof window&&window.msCrypto&&(r=window.msCrypto),!r&&void 0!==n.g&&n.g.crypto&&(r=n.g.crypto),!r)try{r=n(2480)}catch(t){}var i=function(){if(r){if("function"==typeof r.getRandomValues)try{return r.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof r.randomBytes)try{return r.randomBytes(4).readInt32LE()}catch(t){}}throw new Error("Native crypto module could not be used to get secure random number.")},o=Object.create\|\|function(){function t(){}return function(e){var n;return t.prototype=e,n=new t,t.prototype=null,n}}(),a={},c=a.lib={},u=c.Base={extend:function(t){var e=o(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (19663), with no line terminators
Category:	downloaded
Size (bytes):	19693
Entropy (8bit):	4.87536443988664
Encrypted:	false
SSDEEP:	384:saMUJ9AI2CDmfasNEl6oB3loL9cpNnlAQoOphSeXSOdtv1XCn:sI5LJBV4yL5V8n
MD5:	6E468851A94F01BB73616C555F24D10A
SHA1:	98DD862557208E264C037266C067A0274FB35964
SHA-256:	6F023494EBEE0ADECBDFED6655D8BDF41FF07C9477B5869671A46D6DB31B19C3
SHA-512:	832541F6ED33C092DB619651555733B3005168069D5DABB4876AE8282D3A448AB8B43944B32ED6317658D263EF8185302744DC5D619EF4EC3F85E7176222A2EF
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/pages/drift-8f9623a7a70f033a.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[194],{5237:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/drift",function(){return __webpack_require__(5938)}])},5938:function(__unused_webpack_module,__webpack_exports__,__webpack_require__){"use strict";__webpack_require__.r(__webpack_exports__);var _emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_2__=__webpack_require__(4811),next_head__WEBPACK_IMPORTED_MODULE_0__=__webpack_require__(9008),next_head__WEBPACK_IMPORTED_MODULE_0___default=__webpack_require__.n(next_head__WEBPACK_IMPORTED_MODULE_0__),next_script__WEBPACK_IMPORTED_MODULE_1__=__webpack_require__(4298),next_script__WEBPACK_IMPORTED_MODULE_1___default=__webpack_require__.n(next_script__WEBPACK_IMPORTED_MODULE_1__);let DriftSandboxIframe=()=>(0,_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_2__.BX)(_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_2__.HY,{children:[(0,_emotion_react

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961354696
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57690)
Category:	downloaded
Size (bytes):	57861
Entropy (8bit):	5.301977857356686
Encrypted:	false
SSDEEP:	768:tNC0POVWCTDCkJkC98+XCUC3CUNCwCaCeChCs2CYCdCGCl1ig3xneRCbeCq1C2CP:0t8+liV
MD5:	69A1A76B24F1AE90395E6D9CFB58F01B
SHA1:	B4B1F89D7C68BA2D622F155AAC74573FE05B9F01
SHA-256:	F9B34613D38C8908AAC9B40FC4C2BEFE550BADEAA59E746D061DB28D3ECADB66
SHA-512:	E1B0ACCA73AAD6A7C666FD81811D4FFB71427A1A76153C2DADF9E11C96DB9905683EB4FE94B752748C979251CEA01983514D6C8ABC833DE74F8E1D39176C89C1
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.5132.js?cs=484fcc52c9255e8d2439
Preview:	/! For license information please see signing_iframeless_mobile.5132.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[5132],{607632:function(t,e,r){r.d(e,{W:function(){return v},U:function(){return m}});var n=r(811504),o=(r(761088),r(947192),r(326972),r(853224),r(427164),r(331432),r(174016),r(627632),r(726456),r(185179),r(270980),r(321992),r(480168),r(394976),r(931432),r(685120),r(439952),r(486672)),i=r(882320),a=r(247601),u=r(825796),c=r(608712);function l(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}function f(t,e){var r=Object.keys(t);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(t);e&&(n=n.filter((function(e){return Object.getOwnPropertyDescriptor(t,e).enumerable}))),r.push.apply(r,n)}return r}function s(t){for(var e=1;e<arguments.length;e++){var r=null!=arguments[e]?arguments[e]:{};e%2?f(Object(r),!0).forEach((function(e){var n,o,i,a;n=t,o=e,i=r[e],(o="symb

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 788 x 591, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	8739
Entropy (8bit):	7.925138481694344
Encrypted:	false
SSDEEP:	192:cqbEkA4NlWkOiICMfzJPcgdvY7lKl8Ws3+gli0teVQSejn7k2cMS:nbJRNlWkObP7NfclG8Wo3XtgHpAS
MD5:	E259D49AD1B22D7F61343B11E3D63454
SHA1:	43CF47F1223CF0C69BB3C03974EC569BA7A812D9
SHA-256:	051DF612B9831A8AED7A441B878157B717C0AB1B374F3F0E89AF8BE2C6CC381C
SHA-512:	51B061A1242688F4283C951B87C63389DF9220AC3377573952BCC1661C42B59B88A6925A20465546FCA0B16D5987E9DB7955E1DCBF1F2DB44DC660E15CC802D8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......O......cb#....PLTEL......W2...E......y..+...... C...R?W..&...e.......l1....c...LL.Aey.....!..`.9....@\'.T...a..L,...H.... ....`...\|I.]'.c ....\..tF..6.b .0...y.LI`I.....`!..,....y@....t.....dL...20@.................e`.........@.....B&...\...7 .m..7..R/d$.....U....XTpp&..vm.G).6..1.t=.Q..0..0...U...+..!.p=..rl.".z.^?....p..P......0...h7.Q....kX..n....&.h6.....FXP..@;T>.....<r..0&%0..4...<#P..h7...P.. ..0..Z-.D..y..!..v....y'6.r;L.. .IDATx...;N.1.......tPp.t..J.."......v'A.Y.v.......C.g....{.......&.....>..M..>..Aq....A.rP8.qP(@..6{.W..7...i.9...X.S.m...lUY.XUYf..T.iv..X.>.....s./.nOZ...=.?Q.=.?..{.A...;.'&t....[.........R..T0#..TPyJ!.`N.B...^s.w.^g.<.,`...ic..x...}..9...eZ.........v.W..Hl.DEVM.o...Pxad$.9m....3...s.z.......U.EK.A!(............V?Q..AA!(.....HN..`JP...Aas.....}bJPX..%..yOAC/9..Q...2Y..c...?....F..6....!Yl.(4.....C......BE..T.....'.'&..^`p.?T.9.i......<....`..y..0..H.D.l..!.6hm....Y2K..H.n elR)....{.x.~

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (509), with no line terminators
Category:	downloaded
Size (bytes):	509
Entropy (8bit):	5.027366178032786
Encrypted:	false
SSDEEP:	12:fbjrmrcWIqWAfzSxAU7bXyW+ZH/dA3CZxDWs05d02ayWA4HAsz026:fbjSrcPqHWxAU7bXyvZK3YFWU2ayH7ft
MD5:	07526B51026E33C9BF8AF0ED7453A7F4
SHA1:	6DA245A154497CDF0CECE38E7A8E47368448E20A
SHA-256:	F7106FBDFABAF49BE5EE54A0AA3C438FCCBA736E80705E7A9D24B9C5E3490DF7
SHA-512:	050B6F2748849A3DF4A43B5D8D6461C66A9814A18ACDE292338AA9E7E96BEFA50ADFC2FDB19BF7C257AF29F1910163C753E895107C3A2B181A31B6CE31162387
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/pages/_app-ef9da0a6572b3989.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return __webpack_require__(4297)}])}},function(__webpack_require__){var __webpack_exec__=function(moduleId){return __webpack_require__(__webpack_require__.s=moduleId)};__webpack_require__.O(0,[774,179],function(){return __webpack_exec__(1597),__webpack_exec__(880)}),_N_E=__webpack_require__.O()}]);

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	79485
Entropy (8bit):	5.295179463756473
Encrypted:	false
SSDEEP:	768:BYzrKlmwof889F9r20BXhR2H3ZrD/5ud7yruWvZ2okNNgCJpJff/gvfVbC41CflB:mNuH0BRReZrDW7yKFnxyiJqEH
MD5:	1D494E4D7E386CAC2FDDA2BA9041E157
SHA1:	12B0537067F498F36EE2F53994C101A8A64C6034
SHA-256:	3DD381EE79E794ACD8D282720B2649E60375C36F5507212F50BB1CE7988DB37A
SHA-512:	50EC339D23ED2060916EBFE17818C4DCF18752B3F8F3664599A78B2C8D3DE1A4FB7732939B7861DD22638C4A2A31D849E5FEB4689B822DBDE4EE5C55BB2200E4
Malicious:	false
Reputation:	low
Preview:	{. "_PACKAGE_VERSION": "1.205.0",. "_LOCALE": "es",. "Powered by": "Tecnolog.a de {{DOCUSIGN_LOGO}}",. "Contact Us": "Cont.ctenos",. "Terms of Use": "Condiciones de uso",. "Privacy": "Privacidad",. "Intellectual Property": "Propiedad intelectual",. "xDTM Compliant": "Conformidad con xDTM",. "Copyright . {{CURRENT_YEAR}} DocuSign, Inc. All rights reserved": "Copyright . {{CURRENT_YEAR}} DocuSign, Inc. Reservados todos los derechos",. "Feedback": "Comentarios",. "Aria-language-selector": "selector de idioma",. "D_P:January": "Enero",. "D_P:February": "Febrero",. "D_P:March": "Marzo",. "D_P:April": "Abril",. "D_P:May": "Mayo",. "D_P:June": "Junio",. "D_P:July": "Julio",. "D_P:August": "Agosto",. "D_P:September": "Septiembre",. "D_P:October": "Octubre",. "D_P:November": "Noviembre",. "D_P:December": "Diciembre",. "D_P:Su": "Do.",. "D_P:Mo": "Lu.",. "D_P:Tu": "Ma.",. "D_P:We": "Mi.",. "D_P:Th": "Ju.",.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8798), with no line terminators
Category:	downloaded
Size (bytes):	8798
Entropy (8bit):	5.089726318453755
Encrypted:	false
SSDEEP:	192:lYRFIAAwwGRfQBMRV04Ip7LZzr9ZVkiiQK:mRFIZwwGRfPRitp7Fzr9ZVkrj
MD5:	C5EFCDC9E465604F32CF24AF10FD6C13
SHA1:	20FB642D2BFA7B5593CCF14AA11FFF2CCC3E8DF8
SHA-256:	862BAE5C822D87DB86D0B893F474177CA1D9A51309354F12CC0AB85CD9BD9CF7
SHA-512:	5D09DAC4F395C8682D3DEC65573CFF441BBF0C22CFC5ABF524DCC54693D0AFDFFDCF00B13010F6995DA81EC4AEC59FE315B5E131523EC2833B86C1A1704D7589
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/0.0b2ebd4a.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}return function(){function class_1(){this.__entries__=[]}return Object.defineProperty(class_1.prototype,"size",{get:function get(){return this.__entries__.length},enumerable:!0,configurable:!0}),class_1.prototype.get=function(e){var t=getIndex(this.__entries__,e),n=this.__entries__[t];return n&&n[1]},class_1.prototype.set=function(e,t){var n=getIndex(this.__entries__,e);~n?this.__entries__[n][1]=t:this.__entries__.push([e,t])},class_1.prototype.delete=function(e){var t=this.__entries__,n=getIndex(t,e);~n&&t.splice(n,1)},class_1.prototype.has=function(e){return!!~getIndex(this.__entries__,e)},class_1.prototype.clear=function(){this.__entries__.splice(0)},class_1.prototype.forEach=function(e,t){void 0===t&&(t=null);for(var n=0,r=this.__entrie

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1x1, components 3
Category:	dropped
Size (bytes):	651
Entropy (8bit):	6.855422700006461
Encrypted:	false
SSDEEP:	12:FC9YM8fwy0lJ0Xx0WzOsvWGKkCHdcfmcGHMf/qXzUOrS07DAzEgOsvWGKkCHdcfd:49YMWbo0XxDuLHeOWXG4OZ7DAJuLHen1
MD5:	D3A1017060B4669F2FD8894B2B8B69C3
SHA1:	D5A37A76A94A6914123E817A7C4DB3E0D8B8BAE8
SHA-256:	DE0A3F8190808781B5658024B46926FFB7D397C60E85A7C3C3CE06CEDDEF58D7
SHA-512:	8652FF9659019922390A23924B21F08DF305F3D71096895305602C18AF208EE5CFC6CB9E58E37189DBB8AB3933A35F9836D33D18D1B18064A2884C07A2CE5147
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C................................... $.' ",#..(7),01444.'9=82<.342...C...........2!.!22222222222222222222222222222222222222222222222222..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(..?...."...\.[.bz..x...i$

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11808), with no line terminators
Category:	downloaded
Size (bytes):	11808
Entropy (8bit):	5.094303402754285
Encrypted:	false
SSDEEP:	192:ZCm/w6kClAgsaFtPrjPFXg5db/oC3AigvNBN6sXIWhBqUkx8Elo9VEMbu3V38Cgg:ZCVClAgsqTj+5db/ki/W4bloXERl38C1
MD5:	C65DB597E762D33246CFBEC56B886523
SHA1:	DE968F5D5A9EBA6F17C47BEECBBAD50430C806C3
SHA-256:	DF3B4F7EE9B54DC67162D74792E3906D8888A0A83068B490FB6830CC6954D5C4
SHA-512:	36B33E0BDFA05937FB86CB2C5E6980CDBAEA9AD08533E50A71B75D8191D068C560957590265220ACEC17E838A3C3E3D1E0314A31F3D5DE5E2910705631B1CC08
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/42.f634da7c.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){return applyMiddleware}),n.d(t,"d",function(){return compose});var r=n("hE+J"),o=function randomString(){return Math.random().toString(36).substring(7).split("").join(".")},i={INIT:"@@redux/INIT"+o(),REPLACE:"@@redux/REPLACE"+o(),PROBE_UNKNOWN_ACTION:function PROBE_UNKNOWN_ACTION(){return"@@redux/PROBE_UNKNOWN_ACTION"+o()}};function isPlainObject(e){if("object"!==typeof e\|\|null===e)return!1;for(var t=e;null!==Object.getPrototypeOf(t);)t=Object.getPrototypeOf(t);return Object.getPrototypeOf(e)===t}function createStore(e,t,n){var o;if("function"===typeof t&&"function"===typeof n\|\|"function"===typeof n&&"function"===typeof arguments[3])throw new Error("It looks like you are passing several store enhancers to createStore(). This is not suppor

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65468)
Category:	downloaded
Size (bytes):	391874
Entropy (8bit):	5.485261963450005
Encrypted:	false
SSDEEP:	6144:tjP0v7oOWsYOKH9SrwtjNaatTdJHcrfqcK+gQciNvOEiOcrQAFILwkjtywMSF:tIoFHMMNTTcrfqcK5QciNvOEiOcrQryO
MD5:	6365C6807789D001CA7FC405F75441D5
SHA1:	1B8F32AD3B2C8FD9E202E7425E8E184D5418AD19
SHA-256:	04BDBA80E81BAA222AC227AEB3EF0B4386340D70F11F7DAE248B5231AE3686B4
SHA-512:	F6D516806D294D8633AC44BFCC0D082AC7F5D37653710C05229D9A46387FE5E2B78D73D90F8964403B1A514F1535FCDB8D6D571E9A6466822EFDDF6AA1B87BFD
Malicious:	false
Reputation:	low
URL:	https://cdn.optimizely.com/public/275532918/20917322951/7283_04bdba80e81baa222ac227aeb3ef0b4386340d70f11f7dae248b5231ae3686b4_edge_helper.js
Preview:	/! For license information please see client.min.js.LICENSE.txt /.(function(){var __webpack_modules__={7584:function(t,n,e){var i;!function(r,o){"use strict";var a="function",u="undefined",c="object",s="string",f="model",l="name",d="type",h="vendor",v="version",p="architecture",g="console",m="mobile",_="tablet",w="smarttv",y="wearable",b="embedded",E="Amazon",I="Apple",A="ASUS",T="BlackBerry",S="Firefox",R="Google",k="Huawei",N="LG",D="Microsoft",C="Motorola",O="Opera",x="Samsung",P="Sharp",M="Sony",L="Xiaomi",U="Zebra",V="Facebook",F=function(t){for(var n={},e=0;e<t.length;e++)n[t[e].toUpperCase()]=t[e];return n},z=function(t,n){return typeof t===s&&-1!==j(n).indexOf(j(t))},j=function(t){return t.toLowerCase()},G=function(t,n){if(typeof t===s)return t=t.replace(/^\s\s*/,""),typeof n===u?t:t.substring(0,350)},q=function(t,n){for(var e,i,r,u,s,f,l=0;l<n.length&&!s;){var d=n[l],h=n[l+1];for(e=i=0;e<d.length&&!s&&d[e];)if(s=d[e++].exec(t))for(r=0;r<h.length;r++)f=s[++i],typeof(u=h[r])==

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13063), with no line terminators
Category:	downloaded
Size (bytes):	13063
Entropy (8bit):	5.5914712509986515
Encrypted:	false
SSDEEP:	192:z1FrNYuBWyiwkaCRykTCfWU94NDjQj8+24i6gHueo1CNCfWd9PYEN4Ywi1wl:z3KyW0CRy3T9gjQjywZCNSWrkYwv
MD5:	455157CB49065FB85FED54901DDAEB0E
SHA1:	248D056B36813AE68A2179DF92860E07CECD7A34
SHA-256:	7641F066C35D0CA15D4897BFE49D640ED4C143FF8F04030C2020CBB2ACFA7B0B
SHA-512:	290DF8FB129D5A33135E6332C0EE89BAD8225CAF1FB13872D06AFB277C867718E7C5F970E10A25D55FB9B6A2BB27AD48267F16C1DD62BBD78590F4E99890ECF3
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/29.31d09948.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \xA0\u1680\u2000-\u200A\u2028\u2029\u202F\u205F\u3000]/},EfWO:function(t,u,e){"use strict";var r=e("q3/s"),s=e("s+nu");function Url(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}u.parse=urlParse,u.resolve=function urlResolve(t,u){return urlParse(t,!1,!0).resolve(u)},u.resolveObject=function urlResolveObject(t,u){return t?urlParse(t,!1,!0).resolveObject(u):u},u.format=function urlFormat(t){s.isString(t)&&(t=urlParse(t));return t instanceof Url?t.format():Url.prototype.format.call(t)},u.Url=Url;var n=/^([a-z0-9.+-]+:)/i,h=/:[0-9]$/,o=/^(\/\/?(?!\/)[^\?\s])(\?[^\s]*)?$/,a=["{","}","\|","\

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	81322
Entropy (8bit):	5.322186351369348
Encrypted:	false
SSDEEP:	1536:eofDMcb7ZZJ4XZM79ubX4w46N0cxoIeNh6KRlnhHqX:/Mcb7ZncxoIeNh66u
MD5:	A64476C6FE3674D0810193ABBD925B08
SHA1:	FB4FD8B526055812C823219DC585C773B0347B5F
SHA-256:	23F3B44BF5993406B730574A8E1D22F96C840FEB2CBCA25A03746F64419CC03D
SHA-512:	DBC1F5BC4CDA7ABFF522959C5A7D7B40CFADEE7EF1DDFF47A375F81B683614FBC1F922C70F67DB16E55A9CD30FFAE695819912A67BD0F1E761B316B0669C6965
Malicious:	false
Reputation:	low
URL:	https://tag.demandbase.com/1IEYtQv1.min.js
Preview:	var Demandbase=window.Demandbase\|\|{};!function(d){"use strict";var N,x=this&&this.__spreadArray\|\|function(e,t,i){if(i\|\|2===arguments.length)for(var n,o=0,r=t.length;o<r;o++)!n&&o in t\|\|((n=n\|\|Array.prototype.slice.call(t,0,o))[o]=t[o]);return e.concat(n\|\|Array.prototype.slice.call(t))},n=this&&this.__extends\|\|(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var i in t)t.hasOwnProperty(i)&&(e[i]=t[i])}),function(e,t){N(e,t);function i(){this.constructor=e}e.prototype=null===t?Object.create(t):(i.prototype=t.prototype,new i)}),t=this&&this.__awaiter\|\|function(r,a,s,l){return new(s=s\|\|b)(function(e,t){function i(e){try{o(l.next(e))}catch(e){t(e)}}function n(e){try{o(l.throw(e))}catch(e){t(e)}}function o(t){t.done?e(t.value):new s(function(e){e(t.value)}).then(i,n)}o((l=l.apply(r,a\|\|[])).next())})},l=this&&this.__generator\|\|function(n,o){var r,a,s,l={label:0,sent:function(){if(1&s[0])throw s[1];return s[1]},trys:[],ops:[]},e={next:t(0

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17191)
Category:	downloaded
Size (bytes):	17990
Entropy (8bit):	5.356146797852156
Encrypted:	false
SSDEEP:	384:SuJ57bov6hzkgl9Vv6p+wF3g/d28bH1cCFTNAU:SuJuv6ho2wF3g/dFcCFTX
MD5:	B7C02DE3A6652344804D306C9579B499
SHA1:	77DA13CCD1AC369EF1D2478AFE2EDC12D551A183
SHA-256:	BFCBEE8C7BD1F7D9C99CE8EE70CE443C8319970B1190D0CA3589B7C7BEAB3DFF
SHA-512:	8BA673487E72AFA3E69E3CB6934D93AC3DE690A4C26E88E64E67FFB8AE71753FB18ADB04E941146A10A6338382C7564A9517FB6BDEC29308B2AEEACF8F44243D
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/events.js
Preview:	(function (w) {. // Begin doc.. var is_dev = false;.. if ( false ) {. is_dev = true;. }.. var disable_sync = false;.. if ( true ) {. disable_sync = true. }.. var tip = "Pus5UEGTXSHTGgS1938xlm6cDo-3t7ol3e4KT7-Lgik". . var userIdCookieValue = "s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks". var userIdV2CookieValue = "s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw". var userIdV3CookieValue = "s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s". var campCookieName = "". var campCookieValue = "". var campaignCookieLiveDuration = 7776000. var userIdCookiesLiveDuration = 31536000..var globals={load_num:0,init:!1,addr:is_dev?"http://127.0.0.1":"https://tags.srv.stackadapt.com",aid:"",impid:"",default_params:"",landing_page:"",secs_passed:0,tec_secs_passed:0,hidden:!1,host:encodeURIComponent(window.location.protocol+"/

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1095240
Entropy (8bit):	5.459094837539358
Encrypted:	false
SSDEEP:	12288:MfwoaBvIO/sJSvbbpZNrwNMyhmCxLEs69Z5OE/ueg:MfwoaBAO/sJSvbdwNMyhmCxL+9/o
MD5:	81609F265D6788743B13507EDE2F1153
SHA1:	20B37BDFD13C9BC45A188B02AD26CEEA08B86876
SHA-256:	D9F2419E9E0F732C498DB71BD4736612E2C0A6F64FA99529027271019F67E33D
SHA-512:	38530DB27996C9816CCAB7ABCB5157BF852B6AAC6BF35B112EECB9696EC548674EF8A81F0E7C149C5546D94B1C3BA85274E3B676A943E645D93307FEB263D885
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/951-7cd610ccb5dc592c.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[951],{24179:function(e,t,r){"use strict";var n=r(2784),o=r(34153),i=r.n(o),a=r(35048),l=r.n(a);/! @name @brightcove/react-player-loader @version 1.4.2 @license Apache-2.0 /function s(){return(s=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}/! @name @brightcove/player-loader @version 1.8.0 @license Apache-2.0 /function u(){return(u=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var r=arguments[t];for(var n in r)Object.prototype.hasOwnProperty.call(r,n)&&(e[n]=r[n])}return e}).apply(this,arguments)}var c="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(e){return typeof e}:function(e){return e&&"function"==typeof Symbol&&e.constructor===Symbol&&e!==Symbol.prototype?"symbol":typeof e},f=["catalogSearch","catalogSequence"],d=["adConfigId","applicationId","cat

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65448)
Category:	downloaded
Size (bytes):	85896
Entropy (8bit):	5.378199552244632
Encrypted:	false
SSDEEP:	1536:iphy0/1Pha/EFoYY8RHfysWcSQMEYP/oEr2DdVHBV8lPlV:YNY/EFoYY8RHfysWcSQMRGDdVHBclV
MD5:	A3014F212C6DEA6D270E366B6FB644C6
SHA1:	078744C792FA3B823010826DFA652B67823A3664
SHA-256:	F9F22595B4537D349C563C1872B1633B7476A1DB83E4398E26733D0E685F2153
SHA-512:	E3AE3F7E3CFDA5811FAB73A6EBDA13680114DF364A13C3503E0C16BE1F0F0B1259415C0C70BD5E648B063E5D38D8E2297F1DFB6EF6934D76D7858C1EFA018E2A
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.1177.js?cs=5d71c250dbc142e06823
Preview:	/! For license information please see signing_iframeless_mobile.1177.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[1177],{139840:function(e,t,n){var r=n(813624);e.exports=(r.default\|\|r).template({1:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeError",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:57},end:{line:1,column:97}}}))+" "},3:function(e,t,n,r,o){var i=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return" "+e.escapeExpression((i(n,"getResource")\|\|t&&i(t,"getResource")\|\|e.hooks.helperMissing).call(null!=t?t:e.nullContext\|\|{},"DocuSign_NotarizeWarning",{name:"getResource",hash:{},data:o,loc:{start:{line:1,column:107},end:{line:1,column:149}}}))+" "},5:function(e,t,n,r

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19457)
Category:	downloaded
Size (bytes):	19652
Entropy (8bit):	5.221303203150861
Encrypted:	false
SSDEEP:	384:Bi4Dtv7bELnmtxyEaov7bELnmtxyH/uypa:nwbmtxyE9wbmtxyH2y4
MD5:	E888FC1F73D3B85262B8C6C51149E737
SHA1:	C1B3CB29DE1B2699530D672FD59EA44B037B8F38
SHA-256:	799ED7D2D26FA3DB59B56544528A9AEF5B12733190B348BFBA47773D606D9657
SHA-512:	7B3D24990A48E0137CC39E39616822E76229D7851550BF6ADD4ABD71A1BF00214F172D671D7610696E1275318EB133E9ED98E0944EE3855FCBE37B65E1DF1402
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.ai-q-and-a-entry.js?cs=b233370aa77eada3977a
Preview:	/! For license information please see signing_iframeless_mobile.ai-q-and-a-entry.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[2804],{395132:function(t,e,r){"use strict";r.d(e,{IL:function(){return c},of:function(){return a}});var n=r(968996),o=r(369904),i=r(711156),a=function(){function t(e){(0,n.c)(this,t),(0,i.c)(this,"thunk",void 0),this.thunk=e}return(0,o.c)(t,[{key:"value",get:function(){return this.thunk()}}]),t}(),c=(new a((function(){return window})),new a((function(){return document})))},264928:function(t,e,r){var n=r(622808),o=r(752976),i=r(295032);n({target:"Object",stat:!0},{fromEntries:function(t){var e={};return o(t,(function(t,r){i(e,t,r)}),{AS_ENTRIES:!0}),e}})},622064:function(t,e,r){"use strict";r.r(e),r(761088),r(855331),r(971088),r(853224),r(306988),r(232048),r(427164),r(625744),r(279800),r(211056),r(264928),r(819672),r(185179),r(790292),r(321992),r(394976),r(440720),r(373656),r(394107),r(49896),r(686832),r(938252),r(1472

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65443)
Category:	downloaded
Size (bytes):	285461
Entropy (8bit):	5.370638273815559
Encrypted:	false
SSDEEP:	3072:JIDpADo21ivYF+/s+//5qYjZYkpO/hATbgjuqJ3PNnpO/zupO/llxdjs:JwpAIvYFos+/QYjZYkpO5vPppOCpO9dY
MD5:	19570FA9125E4E045338E85DD7B69AE9
SHA1:	AE683CE9E9B3B1BDE43D818E0BBAA3CC270A3C81
SHA-256:	C644EC09BF1885BA7903269FB8CBB83F370577D789A59FD5AD32487F38A0DDC9
SHA-512:	C048E8D897DEE40B38C119E8A16E29CA5BFCA132C318DADE2EA087223E5D14C46118343F1B6AA06551796FEB5C3CFA53F4C25E979C1B6EB7BD7D760BE8C93208
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.react-app.js?cs=9b01a425ded6b1853e55
Preview:	/! For license information please see signing_iframeless_mobile.react-app.js.LICENSE.txt /.(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[536,2676],{934080:function(e,t,r){var n=r(813624);e.exports=(n.default\|\|n).template({compiler:[8,">= 4.3.0"],main:function(e,t,r,n,o){var i,a=e.lambda,l=e.escapeExpression,c=e.lookupProperty\|\|function(e,t){if(Object.prototype.hasOwnProperty.call(e,t))return e[t]};return'<div class="center-content"><div class="text-wrap"><h3>'+l(a(null!=(i=null!=t?c(t,"resources"):t)?c(i,"slideUpTitle"):i,t))+"</h3> <p>"+(null!=(i=a(null!=(i=null!=t?c(t,"resources"):t)?c(i,"slideUpText"):i,t))?i:"")+'</p></div><button type="button" class="finish-button btn btn-main btn-lg" data-action="action-bar-finish" data-qa="slide-up-bar-finish-button" id="slide-up-bar-finish-button" aria-label="Finish" data-allow-unprompted-exit disabled="disabled"> '+l(a(null!=(i=null!=t?c(t,"resources"):t)?c(i,"slideUpButton"):i,t))+" </button></div>"},useData:!0})},

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65452)
Category:	downloaded
Size (bytes):	72461
Entropy (8bit):	5.4237135717000795
Encrypted:	false
SSDEEP:	768:w7wniIfrm+qQ5HrQpchaYpaKaDszTNGdEKLOgUcBzkpYPSUn5Qp4HZ8ua8Yx2jCe:wkiIFqQ5LechaYjaDc5kpzPPp5HHAoWe
MD5:	365AE4E5F2C60A59971F2EDCEFC2BC1C
SHA1:	17A236030FEBB3E64521A9619D5BE36C6A5B4AFE
SHA-256:	D0FAD299D743FD442C27E1B0821294B9707A7C9E39BAB3271429E53AD0AE066D
SHA-512:	00B259F24AF8F53E407D160A750E2ECFFFFBDDD360974A57A7E589B730AF9ED9E6ED2C372290F74F97CD6FBFADC6AD5A6734181059D3761B3BADC60DDD628928
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.js?cs=6fe1c0b1d
Preview:	/! For license information please see signing_iframeless_mobile.js.LICENSE.txt /.!function(){var t,e,r,n,o,i={477548:function(t,e,r){var n=r(722155),o=r(508024),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a function")}},745952:function(t,e,r){var n=r(349112),o=r(508024),i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not a constructor")}},776960:function(t,e,r){var n=r(722155),o=String,i=TypeError;t.exports=function(t){if("object"==typeof t\|\|n(t))return t;throw i("Can't set "+o(t)+" as a prototype")}},5775:function(t,e,r){var n=r(33280),o=r(707536),i=r(683984).f,a=n("unscopables"),c=Array.prototype;null==c[a]&&i(c,a,{configurable:!0,value:o(null)}),t.exports=function(t){c[a][t]=!0}},527852:function(t,e,r){var n=r(674192),o=TypeError;t.exports=function(t,e){if(n(e,t))return t;throw o("Incorrect invocation")}},235968:function(t,e,r){var n=r(926840),o=String,i=TypeError;t.exports=function(t){if(n(t))return t;throw i(o(t)+" is not an obje

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1233), with no line terminators
Category:	downloaded
Size (bytes):	1233
Entropy (8bit):	5.236835228088376
Encrypted:	false
SSDEEP:	24:haHLFWtejW7OPGrVJ8Jut0JQJ40IJCyJmt0PJr1uJrVX/ZlE4o4Izh1I:QWteq7OPY8uOYiCebRxCx/ZljIw
MD5:	1BDFFD54F35FBB86979DD9B636978D1B
SHA1:	99F8535F78EF0BD7299ABE3B3AA18C2BFFA0137A
SHA-256:	0F9ED0A3535919AE9D5F3C87544D320F51843536A945DAC87533ED2B68260423
SHA-512:	52F9B9F0C1FD0709AA8418B3ED62EBC64550DE25660C07854C168743B7CA670E4710C8FE2C0BD3DD8AB24B515BD821EB1F357E29F7D58F2954E008A99E09A319
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1
Preview:	<!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Docusign Chatbot</title><meta name="next-head-count" content="3"/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/static/chunks/polyfills-c67a75d1b6f99dc8.js"></script><script src="/_next/static/chunks/webpack-a0deeec5c85c92d3.js" defer=""></script><script src="/_next/static/chunks/framework-ffee79c6390da51e.js" defer=""></script><script src="/_next/static/chunks/main-5848164edc7f05e2.js" defer=""></script><script src="/_next/static/chunks/pages/_app-ef9da0a6572b3989.js" defer=""></script><script src="/_next/static/chunks/610-2bd6294a230ecff5.js" defer=""></script><script src="/_next/static/chunks/pages/drift-8f9623a7a70f033a.js" defer=""></script><script src="/_next/static/PFxQpRcdah7Fp208MVJfR/_buildManifest.js" defer=""></script><script src="/_next/static/PFxQpRcdah7Fp208MVJfR/_ssgManifest.js" defer=""></script></head><body><div id="__next"></div><

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	17043
Entropy (8bit):	4.760557546588692
Encrypted:	false
SSDEEP:	192:hMAC/QcoYzYs781juHYdL0NgGvQESj0POwvfsg7sZqSilNS/cy7cvfcgeANcEDDS:hG81Ruw
MD5:	30A37CA417736D32B4A4D1FF9E817F6F
SHA1:	FC37884CDE42A87BDDE560D08ECC6097633B54DA
SHA-256:	CEEFED0AEA7D71E9CD6443F08FB079B68E7CC72ACEBA4924883BF18EFCDD6624
SHA-512:	1FCD6F4B0A01069F1C41B8BF192D16CCED94CA8DBC406F28FD4C959D6DD9A027816CEBA2137988A2A9AE0D051CE14779A9F5AE92BCE385679D68A58D00A2AB48
Malicious:	false
Reputation:	low
URL:	https://rs.fullstory.com/rec/integrations?OrgId=12BP4E
Preview:	(function(FS) {. var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL();. function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) {. var totalTimeExpired = 0;. var wait = 64;. var resultFn = function() {. if (condition()) {. callback();. return;. }. wait = Math.min(wait * 2, 1024);. if (totalTimeExpired > maxWait) {. FS.log('warn', failureMsg);. !!timeoutCallback && timeoutCallback(failureMsg);. return;. }. totalTimeExpired += wait. setTimeout(resultFn, wait);. };. return resultFn;. }. function loadSession(key) {..var lastSession = window['localStorage'].getItem(key);. if (!lastSession) {. lastSession = FS._cookies()[key];. }. return lastSession. }. function saveSession(key, session) {. window['localStorage'].setItem(key, session);. }...window['_dlo_appender'] = 'fullstory';..window['_dlo_telemetryExporter'] = (function(FS) {...

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (332), with no line terminators
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	5.431034035056176
Encrypted:	false
SSDEEP:	6:ZdYeLGmOYHKkCwv3WqmdGZVuN5mt0OEmUJ+YRo5d6EpXjd6I:ZaiGmFMZqqx6t0rmU0SqFXjV
MD5:	682BB861B11658DEFC6A853FB7BB1F21
SHA1:	F21B5FEF27AD04737471BDDC22C47804EF943F4E
SHA-256:	7A6D843D37AF33066709F76C6F3ACA124E65A95F85E6E9C8513DD920CA4961A1
SHA-512:	606BED09ABC271CF1EF370D45E5E732F7983D57487DE29CC5124112570DCA2E5DEE60948A2D4A1A21FC7322537B02CCC006D46393BBD45E83DE4D29C434CE4A4
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/PFxQpRcdah7Fp208MVJfR/_buildManifest.js
Preview:	self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/_error":["static/chunks/pages/_error-c829feec71ce8a09.js"],"/drift":["static/chunks/610-2bd6294a230ecff5.js","static/chunks/pages/drift-8f9623a7a70f033a.js"],sortedPages:["/_app","/_error","/drift"]},self.__BUILD_MANIFEST_CB&&self.__BUILD_MANIFEST_CB();

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	68076
Entropy (8bit):	5.253482511347538
Encrypted:	false
SSDEEP:	1536:bx5P+lx5LhQk+9dSwgx+DFF3rUMFWgqKh20zK5wd:bnmz5LhQk+9d6xwWP0u5+
MD5:	49CE5445DDCF5D24EF3BADC4EB1A11DD
SHA1:	DBE8CF782A53824BAC569AA3EA42992DD21064D6
SHA-256:	D70FA5DC6C8BFE9D7824BE31E669528533D0879A2B1600A7DF68B880F4D44296
SHA-512:	A720C00082E803A92EF54A1829BC845B187CD4544F5B202BC98F234A4FC9401EE76B21F8CB21E4C93F88B8DD8AA63D93A03DFF5A39570DA19EB6D105FFEC6683
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/26.04e7f30b.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:function(){return Date.now()};function throwIfEmpty(e){if(!e)throw new Error("name must be non-empty")}if(i&&i.mark)r=function mark(e){throwIfEmpty(e),i.mark("start "+e)},o=function stop(e){throwIfEmpty(e),i.mark("end "+e),i.measure(e,"start "+e,"end "+e);var t=i.getEntriesByName(e);return t[t.length-1]},function getEntries(){return i.getEntriesByType("measure")},function clear(){i.clearMarks(),i.clearMeasures()};else{var s={},c=[];r=function mark(e){throwIfEmpty(e);var t=a();s["$"+e]=t},o=function stop(e){throwIfEmpty(e);var t=a(),n=s["$"+e];if(!n)throw new Error("no known mark: "+e);var r={startTime:n,name:e,duration:t-n,entryType:"measure"};return function insertSorted(e,t){for(var n,r=0,o=e.length;r<o;)e[n=r+o>>>1].startTime<t.startTi

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	326
Entropy (8bit):	6.860674885804344
Encrypted:	false
SSDEEP:	6:6v/lhPe/6TsR/rnMXvFGVAkFjqYCm8BQ5XIYDg/jruT0l8pgVy6EybrNcVp:6v/7m/6Ts/rnAF4nFWF5BQWdae82yXys
MD5:	AFE00DB89CE086B91A541C227EDBF136
SHA1:	961B2EE6FB39C4D515BDC49EC1BA688B0916F104
SHA-256:	E11827C678AF8519E702F364E525AC34509CAD49F8D839677E089949EDDA060E
SHA-512:	85F265A917E83BA92FEDB2152FBFADA273FCFF2937A85B080641307FD2E61D0138493162883E016796C9F68062A01D79DA60F546EFC2CB1FB4078760EB3451F0
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-icons-favicon-default-16x16.png
Preview:	.PNG........IHDR................a....pHYs.................sRGB.........gAMA......a.....IDATx.....0...Uq...UP.\|..v.K.>.O`.$.[.B....'pvJ}..B..P.h...I.!.rs.%.$....O"r!.I.m....J..........U.. ..F[.....j4<...6.b6.T!x..Y..]..;._.,..........K.F..b.~.$..M.......M....,...i....*.z...x8."C.r.{.2~.~........x...B.G.6.....IEND.B`.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17065), with no line terminators
Category:	downloaded
Size (bytes):	17065
Entropy (8bit):	5.1089101567430735
Encrypted:	false
SSDEEP:	384:FtDuCrl6xOIVoCM6qbSjbCMTYozln0/s4MXcK/qtQCZ69CmC4yVs:FtDuCrl6x1OCM1SjbCMTYoz10/s4mcKF
MD5:	E28EBC3391B56E8F01EA063DC089E9D3
SHA1:	D0EB0EDDB70199DB3533F492E7F2E22BE890A1FA
SHA-256:	AFBD41E7209FA3AEF6F53C7A5713AA542A7BE54C432FEC2D690E0DFACCD528D1
SHA-512:	A2ED47575F06F20F3C53845F527E5CEF910A85AAB2CC8F07EFD761239C2255920A154CDF432E170207BE23841458D22BFA96C47CD4ECA590BC71A948B8F98F46
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/19.6f85b843.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototypeOf\|\|function _setPrototypeOf(t,e){return t.__proto__=e,t})(t,e)}r.d(e,"a",function(){return _setPrototypeOf})},"4+fu":function(t,e,r){"use strict";function _assertThisInitialized(t){if(void 0===t)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return t}r.d(e,"a",function(){return _assertThisInitialized})},"5aO3":function(t,e,r){"use strict";function _arrayLikeToArray(t,e){(null==e\|\|e>t.length)&&(e=t.length);for(var r=0,n=new Array(e);r<e;r++)n[r]=t[r];return n}r.d(e,"a",function(){return _arrayLikeToArray})},"7Ru6":function(t,e){t.exports=function _nonIterableRest(){throw new TypeError("Invalid attempt to destructure non-iterable instance.\nIn order to be iterable, non-array objects must have a [S

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, original size modulo 2^32 4688
Category:	dropped
Size (bytes):	1328
Entropy (8bit):	7.832802759962834
Encrypted:	false
SSDEEP:	24:XtqsAy0Z6XD6U2gVJC1EQzjAYMGsH2ytCXKyFkrcb3KVTwXjy8llMuH:XMq0Z07017MLH2yeK0cuD5wuH
MD5:	DC228CFA17FB29F09BF996AF94BA58FF
SHA1:	F2CA829572982D8EF3F3653CED28E226A4B56F60
SHA-256:	05A14B342385AC9193EAE07C8297929B7A0D95E5BB3084E7F022DE968C490906
SHA-512:	C4EDC424BA9B330D5E285BEEB91B7942E23368D9FCF62217699B767CA034F61DD0955D1F71097E01CD0D8673B4AD6490EF890B605B02F3A4CEF41E992F321866
Malicious:	false
Reputation:	low
Preview:	...........WMo.=...X(...(.GwQ..!M.d.v.mR.q.Z.gTk.Y.......i....'.b..d..G..G..(.~...... .?..x..L..;.;.w.l\...Q\|.X....I4~.whQ.'1..U5.U.K..5..2 5.Ef.z..\|.I...D...1.0B{. n...Q.U.J\a.[./.(c....L41.X...r...._.q)...>9?sk..l.e..N._..0..k..:n.....B18[f.........P.W..,2..TJ..y..i\|.e\|2.......v......,U...T..D.a..........{.e_j.Hr...>xa.L.(.. .....p.^pi...5n...^.....Ax.x.>..p.D....J?!VA.\m.Z...6<.M...l...sH.....".Sk\...m6...x..O.~1G_).6.+f2..156k..d....bp..{..@..L.3&` .)..+........S4.b...N{a.Q.z...u...AN..S).....>....C.U.j..y...b_.....,(,..H..6K..y..R...+..k.6..x...l..p~x.. /U..~.Og.....U.v.^.l....].R..?og....'...#...;\.b'..6`....d.@.._D.....x....s...Sc.............................t.k..'.....D.#.r%.!^.L.Jj..%r..n}.D(2.2...o.....Q...E.s....o..x..,.4..B.w4.4...T.....>D...2^.._.....8...y.]......=..0....'O&71.. /.!].)....).: I....r.4.MM..\S...]H&Ph.X.:TqZ..f.!..:.^.".."..s..W>`.h[...'.<[.!C..Qo.[.....)wI.....2L...&T>.-i..k.=.}'..W...&#W..g.F. ......6.9.S..};.+..\C..

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8586), with no line terminators
Category:	downloaded
Size (bytes):	8586
Entropy (8bit):	4.980754057922192
Encrypted:	false
SSDEEP:	192:j/c/K/iNadyZ8MUB+lE9Y8MUB+dFVJkEE+Zg23nIXs:ZdyZ8MUB+lE9Y8MUB+Dks13nJ
MD5:	E7107BC29CCB3C6D928F0F8F10A0F22D
SHA1:	7F4B6237B2D74DE5F5A83C77841070A797BA4276
SHA-256:	7849BA1748F8188749DF28E9D59CA4E570A8495684353D8DF4715FA70A81E787
SHA-512:	38A7259987C29A4DC349AC812656318F45BE7D8E34D0C9B39AE7AF13DDADCFA0CCBD624440A09F3C0FB08CD0B9C8014DBE14B29304821072CABAB0AB703ABCB5
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/27.b5e8f5e1.chunk.css
Preview:	.drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);-moz-box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);box-shadow:0 2px 10px 0 rgba(53,63,69,.15),0 1px 2px 0 rgba(0,0,0,.2);opacity:1}.drift-widget-close-button--align-right{margin-left:-14px}.drift-widget-close-button--align-left{margin-left:4px}.drift-widget-message-close-button svg{display:table-cell;text-align:center}.drift-widget-message-close-button svg path{fill:#fff}.drift-widget-message-close-button:hover{background:#414141}@media (max-width:367px),(min-device-width:320px) and (max-device-width:480px) and (-webkit-min-device-pixel-ratio:2),(min-width:369px) and (max-width:380px){.drift-widget-message-close-button{opacity:1}}.drift-widget

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	59
Entropy (8bit):	4.299862066560922
Encrypted:	false
SSDEEP:	3:Yh2/v3Xfc2oEP+fH4:YmX0hLw
MD5:	1A48C29222D60672223E483A010DE123
SHA1:	A50CAD04403EB3D95842FBCE5F36635EF9328775
SHA-256:	7498D2C6DAD226E5274F3FD88AD8BA9B16E89EB4E344160BB71A7EB94344731F
SHA-512:	68CBCAAC1A488D77A1433C3A4EF63BB54C39404BEDB7295947B42FF9D46D66A07BCD55E25D04584571DC9A6FFF52BBED2458E50321A33DA3E8B63B5E8B97E228
Malicious:	false
Reputation:	low
Preview:	{"DS_A":"e726a659-b15e-4860-84f0-a4f96f541646","DS_A_C":""}

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 37560, version 1.0
Category:	downloaded
Size (bytes):	37560
Entropy (8bit):	7.986336222628645
Encrypted:	false
SSDEEP:	768:LFg7GVJ6kU5VXtwAmsgqioep+spJaIKsuo+e4dc+csTfC/DuRD6rSNN:Gxp3SnsGDdEIZmxTq/Du6sN
MD5:	B9D0556A2C620A939D54C63BE3DF6C6C
SHA1:	97968884D4C5A93C46AB1334CE9E9156C694EA4D
SHA-256:	90973DB3F26FE86B648EC735F3183B44902E5CEDF2B1A042402BAC39DA70404F
SHA-512:	37B59878D38EC5E9CEFB9877E53D616696FE430298CE4F26D61DBBD7402F2867554E25DBD78BA95C445BC145EA469895BE43E2BD30C1906B8D27D8AF14E84EDA
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/fonts/2.11.0/HelveticaNeueW01-75Bold.woff
Preview:	wOFF..............=4........................LTSH............F.jOS/2...8...V...`e<..VDMX.......m....sPz.cmap...............cvt .......>...>....fpgm...........b2Msfgasp................glyf......m'...h/z..hdmx..u@.......(..'.head.......6...6..2.hhea....... ...$...Ghmtx...(.......x.j..kern...$.......<...loca.............i.vmaxp....... ... ....name.......e.......post........... ...2prep... ............x.5.!..0.....6.....y......"d...H8.....;...vg."3.v../..^.,...m...c.d[.N5.. ..x...xSH...I....H...g.,(.....[J.80.#.a...M<.......n.....)..}J.F.qc_1N....iD?....x.c`f.a.........................9X.@....A_......\|<...........N0.g...3..X.N1(.!...J.h..x...c`.....w.....m.p..m..k..Zm............@..#..N..N...d...$3.Yf!.."..ld....s....IN..\27.e....4.O.'.,@.Y.....,....E(".RT....P...%dIJ.R...)m...,KYY.r.<.e.X...(+QIV..T...J...Ue5...2..T.5.!kQS...Cm...ud=.....R_6.....a#...4.Mh,...biFS.f...eKZX...R...lMk.FF.6..me{.......`Qt...L'..+]d7.Z$..&{.]....EO.^.A.z.....+.....@.9..r...

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	63419
Entropy (8bit):	5.403664628819526
Encrypted:	false
SSDEEP:	768:/i2VpDUAEpBqbh7snupKWz1j18n6XrHoQ0hF:s/PMggFz1j18nMr0F
MD5:	E3D76F8BC5704E1E8E71BB22A91ED4FA
SHA1:	032B1F5185419DBFFB99B898B959A2EB3413A2AC
SHA-256:	F40F57620246D052EA666F8F9D25DC6FCD93A7BBD6314077A2EB7213E98A4B5A
SHA-512:	07C00B4A95C5C1EF435796DF7A712BAC43EE20EF330613F73ECFF7015BCA36DD9D3BFFB5A88834E522941F90F86C3FAC727E0EC3CD020BC7D2F0955A009E13B1
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/assets/v2/otPcCenter.json
Preview:	. {. "name": "otPcCenter",. "html": "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

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	94
Entropy (8bit):	4.19215926745789
Encrypted:	false
SSDEEP:	3:YGKy++6QMBWHjt0C0MT6QMBWHjzlRQMBWHjV:YGKY6ZBAJ70MT6ZBA9RZBAB
MD5:	2D12C1129F6FF37622D03DB4A2A5949E
SHA1:	BC44653C4A06E671CE423600755FED86FAD8EC24
SHA-256:	078F3DD88E751C3C421B2007E1CB27BCB65A95DAF278BD25DE81BA7B2BF3C4E4
SHA-512:	420AFB8CEB53E68C593A1242DB304C4F551C23A3C181B4D4EEBD2B74E3EB9740C803C182FFB646AF57D2E778E9D802D8A44E5C0CB9FF11FA272D1E9C0F2B0D36
Malicious:	false
Reputation:	low
URL:	https://tags.srv.stackadapt.com/saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=V9VrKIqTI2a9WM-UTxQtpbYo86WF2Plb1FfItFnE55g&host=https%3A%2F%2Fwww.docusign.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks
Preview:	{"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (1551), with no line terminators
Category:	downloaded
Size (bytes):	1551
Entropy (8bit):	5.163393106624588
Encrypted:	false
SSDEEP:	24:0E01AZ14iwMsom6ZgzZv9QxlR/sJ5u/s+QxQ75jmlf1X5E1wO1I:0EG+1pgzZvKxoTlQ7Rm1
MD5:	F4497BFB5A87B7C4365BE2CAC47F8D1A
SHA1:	439E46ACEDEF664E6F5F6E5F60CBF0339D2061F5
SHA-256:	55F7793C7ABB620730AF4D7D3943765EB5CF886A3D412745111B7EFC1FEE2F82
SHA-512:	F76C22E9123087720957D1FF3C1BEDAD4B1DE6BFB7AA96D6D52A6EFCA35874CAFF70958420B10BC7681A5C85D6E72405B2E1C64889AD9B2F301520F50BB59E68
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=3f17fa25-37c9-4972-a9d1-e0d99afca2b0&sessionStarted=1713961372.558&campaignRefreshToken=de56d2c1-70ea-45f7-ba05-f71ca02d2cdd&hideController=false&pageLoadStartTime=1713961371016&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1
Preview:	<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefetch" href="https://js.driftt.com" crossorigin><link rel="dns-prefetch" href="https://customer.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://conversation.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://targeting.api.drift.com" crossorigin><link rel="dns-prefetch" href="https://metrics.api.drift.com" crossorigin><title>Drift Widget</title><script type="text/javascript">__ENV__="PRODUCTION",__BUILD_ID__="20240404184614-d8190ce",__REGION__=window.location.search.match("[\\?&]region=([^&#])")?window.location.search.match("[\\?&]region=([^&#])")[1]:"US"</script><link rel="preload" href="/core/assets/js/runtime~main.58de437c.js" as="script" crossorigin="anonymous"><link rel="preload" href="/core/assets/j

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	75961
Entropy (8bit):	5.284364477342943
Encrypted:	false
SSDEEP:	768:QsOblXdRFlP6SupyNG6jtspnJWuUTzHUBDnBIuqoci+4cW/mK5NtUO6PnUZHBO8n:QDvFlP6Supyqpcu23O/ziSO87QRi8k
MD5:	6D77A76055D81227033363AF2F18CAF8
SHA1:	B1B94517954F8F8889A0822886DEA6F5AD7C931F
SHA-256:	19473EEBFB0672867A4438E2A015DE79FDED34B9F5AE5598BADE57EB01CF0563
SHA-512:	8E576150D0CB1FCB21DA5EC65C73EE2CB2E48A5F762C3926243471CAE4D0334F4D5B464A08C189A223E8E56D47C28323EFA4A053405D06BF35776C5154762FC7
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/js/20.8c21ea18.chunk.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnProperty.call(n,o)&&(e[o]=n[o])}return e}).apply(this,arguments)}var o=n("QS52"),r=(n("c58o"),n("h7FZ"));function addLeadingSlash(e){return"/"===e.charAt(0)?e:"/"+e}function stripBasename(e,t){return function hasBasename(e,t){return new RegExp("^"+t+"(\\/\|\\?\|#\|$)","i").test(e)}(e,t)?e.substr(t.length):e}function stripTrailingSlash(e){return"/"===e.charAt(e.length-1)?e.slice(0,-1):e}function createPath(e){var t=e.pathname,n=e.search,o=e.hash,r=t\|\|"/";return n&&"?"!==n&&(r+="?"===n.charAt(0)?n:"?"+n),o&&"#"!==o&&(r+="#"===o.charAt(0)?o:"#"+o),r}function createLocation(e,t,n,r){var i;"string"===typeof e?(i=function parsePath(e){var t=e\|\|"/",n="",o="",r=t.indexOf("#");-1!==r&&(o=t.substr(r),t=t.substr(0,r));var i=t.indexOf("?");return-1!==i&&(

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16
Entropy (8bit):	3.5
Encrypted:	false
SSDEEP:	3:YGKeMfQ24:YGKed24
MD5:	055DE8F64447F10ED2C4C7F78E27B7CD
SHA1:	BBFCC7FBB135D3893E9BD559E44E069F57DFAB31
SHA-256:	30C714BF4216E577686D238B98561D093672CB25BF90BAAB50DD956F75CDA4B3
SHA-512:	1A726490120152235BBCE20368630EF20FAC7964BA32F846FAC2C1F1A58EE9722356AD94FA6342685E8CEB5015CE2E944EDD739B901D3D9B0A22A5238118142B
Malicious:	false
Reputation:	low
Preview:	{"country":"US"}

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	26
Entropy (8bit):	2.738149333192866
Encrypted:	false
SSDEEP:	3:CUWJ/3e:4JW
MD5:	6A43099D5C8FE991A7AA7EBACA53069D
SHA1:	5BCE2F0D57305C58C7B05BFCE29EBB39A18F5570
SHA-256:	3B7B8A4B411DDF8DB9BACC2F3AABF406F8E4C0C087829B336CA331C40ADFDFF1
SHA-512:	B82C6AA1AE927ADE5FADBBAB478CFAEF26D21C1AC441F48E69CFC04CDB779B1E46D7668B4368B933213276068E52F9060228907720492A70FD9BC897191EE77C
Malicious:	false
Reputation:	low
URL:	https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297oK2PbHebak6yhb9aSDTXntf_qExefZWv5WZyr9HktTA
Preview:	GIF89a.......,...........;

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 170 x 55, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3596
Entropy (8bit):	7.894947048332223
Encrypted:	false
SSDEEP:	48:wyswH+u23+1WKBr5FJ9IZr1K/BD0JjYXXPuxZVpnqi17eTophMLtOIyCMT1a+JfF:Fqf+1W45FJ9IVcBD06Xm3n+opCZO1TI4
MD5:	0AC9B4E034D6AF4BA312D08FFF684B6A
SHA1:	4DBFB16E92276845073B90970F427CEA1AB214CB
SHA-256:	57547C7DC8143F8A877BCCFA4B4F4867D46DC0FB5A915D844BDD290596DC8594
SHA-512:	2901EEB73506879337AB5682135B91B36444E63D2787ACEB1007FF1BEB3C97317244E32A494E2369888248F33FAE514309AF09A5CA73179352A3A22E64507DFD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......7.............sRGB.........gAMA......a.....pHYs...#...#.x.?v....tEXtSoftware.Paint.NET v3.5.11G.B7...{IDATx^.yPU...I.....A..E@\b.X.L.hX$.;........". .%f1f1F.d...I.ig..4....$.e..N.i...}...{...5....3....{..s~.{-.p8..)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)r8R.)N.....T...u..M..lW5b..8.j..1..[....&lNo...<N.Vu36+.Y...F<.\B..9.......k.......nb.al.!j....!l..F.....1n..a..\.......{..~.7..;..{..,...Gl9.%.....\|....Qc..T.......%o....>...}..h._J3....F..Ik2./..'.......].<....R..{.kP.6.oi..@%r.G].}.0..j}......\X.R.!(.v...S.......2H...l...a&a.L.,wj`....@.. ..$.t..N..9.O.A.&ff..R..........~.d.cfz...z.......q.I..!kUg.1...n....7...c.g...X..^....."..37..!.."].'N\|.Q6(...O7........rz>...shz.Dv...g.M..t3..?.....?!o.k.?{...j.....x'..mO5uMm..Ht5T.Q.m.Lq:h..yg...U.{....J`.T...r.(...#......"8...>.....14.....1.....{r....#...5.E.fv......=./g...^..{`......fe\..f.3U].....O.5dq\|..f.u.U...@.1mIL.h,...

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 84, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4122
Entropy (8bit):	7.906100259481781
Encrypted:	false
SSDEEP:	96:L6dUUUoz8b4lDAqZUzvEXpeXcV/hPN2L0hXKdE:2SxclBpesN32L0t
MD5:	3C5F851C455BADA111C434545ABF9263
SHA1:	F65580803EC30072F0D9D562687AB4D2A88B2509
SHA-256:	DE57FF946D44291CFF4122EF129D6954911C749F52CD897859401322839C88D2
SHA-512:	11723B1C0395A9FC205ECBC9CC9F13E8355CEDB7C7BEB56FEA2054C86ADB2939B2B8871E8DD1E8864E1D95EDF6AE9C744E95815D309481FC7DA349BF69483501
Malicious:	false
Reputation:	low
URL:	https://images.ctfassets.net/0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png
Preview:	.PNG........IHDR.......T.....Z.......PLTE......................................................nnn......>>>.........................3........N.......TTT............S..FFF......V..!!!...............E.....$.....:::......^..Y.....P..J..@..7..)...{.......H.....vvv..f[[[o....hJJK...a..}}}'''...f.....B../..fffOOO. 6444......k..[......u......e..c```BBB+++c.....:.....-........001. 0h........<......miii..a..%.....o.sss..b."T. ;666.55{.....s........yyy..i.$a.!N. D. @.12.%,w..b.............$i.$ZLLL.!I.....cdbXXX.)9.,/U.o.=.......ppp.!+}.x.....$rkkk.._.4X.&$......o..R..h..)..Bu..m.b:..I..y.....y.Zn.fH`P..._..R..B...t...}]^\|.fx..p.Mg"A;p..h..6..i.....h}..x..rsXrZVha.`ALVrGV.}Q%VJ.pH.>Da=7BN5xJ.I).m."....=..\..n....m.....@...}.}.\|..{..uk.u?.t.ytz\|h>xe.faVNZ.iO.c>.S2....;......tRNS....[.....ujPO.+.....IDATx...klKa..._....V..U[.f..%e.sYL.0Y%.bl...K....q}...A..!. "q.#A...K.....3+9..4.}..mr...}z....U.1.h.S..).M......m...5....:.X.(RV.+..; .uhgh......)...=RZ{.R\K..

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	124492
Entropy (8bit):	5.273006124300861
Encrypted:	false
SSDEEP:	1536:fFAOlIn7x+HjHwpoKLP8eVno2YkObV/nHsSXO79ABLrjjcViK955M1jL//aUFQM:fF+meno2KbV/HLzcgoDqdT
MD5:	4B3C998169D377850AF9762C0F9D90B2
SHA1:	82CF5B5D421B2A3DE2940C37D9F8FAA1615F5FA8
SHA-256:	85E40D540127A759D102AB27F165CBEFE8E59F24968349FB687A45E0F34CE174
SHA-512:	8C8E9857CA175F5723C270612B6AD37C0BD8BBB766C3E47CB5BBFDDE3E701ED57D806AF149257683D804E897AC88A992EB92A10B8E0707B3E2407483CAE8D19D
Malicious:	false
Reputation:	low
URL:	https://chat.docusign.net/_next/static/chunks/main-5848164edc7f05e2.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{932:function(__unused_webpack_module,exports){"use strict";function asyncGeneratorStep(gen,resolve,reject,_next,_throw,key,arg){try{var info=gen[key](arg),value=info.value}catch(error){reject(error);return}info.done?resolve(value):Promise.resolve(value).then(_next,_throw)}exports.Z=function(fn){return function(){var self1=this,args=arguments;return new Promise(function(resolve,reject){var gen=fn.apply(self1,args);function _next(value){asyncGeneratorStep(gen,resolve,reject,_next,_throw,"next",value)}function _throw(err){asyncGeneratorStep(gen,resolve,reject,_next,_throw,"throw",err)}_next(void 0)})}}},6495:function(__unused_webpack_module,exports){"use strict";function extends_(){return(extends_=Object.assign\|\|function(target){for(var i=1;i<arguments.length;i++){var source=arguments[i];for(var key in source)Object.prototype.hasOwnProperty.call(source,key)&&(target[key]=source[key])}return target}).apply(this,arguments)}expor

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21229)
Category:	downloaded
Size (bytes):	21230
Entropy (8bit):	5.307579290440548
Encrypted:	false
SSDEEP:	384:TRFZ2wWtdbD5ABwXwLrekrff8eTr+x5RxMcBn9LuJ4vV/:T8wAD5ABwXw+krfflyxzxJn9D/
MD5:	0CD317A7B9C520801230E944F7D50E41
SHA1:	E3985FF0C2E8B1EAACB617C7C5AF5BEBFCBCEDA6
SHA-256:	6F08699117C1F15F6D35E7B4380D12D18A1881F075E177B5853B1017A3307544
SHA-512:	EA081268CBB1E95BE578EDDFC82E83AFF07F51D1863E58B1275D36C589998FA4434CAA00B70BFE82ED4DE5069125DCD8939BF85DD874FD64BF6BB988B811D0F5
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/otSDKStub.js?did=f9d8335b-1f5b-415d-923b-2daa2d0de9bd
Preview:	var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookieName="eupubconsent",this.oneTrustIsIABCrossConsentEnableParam="isIABGlobal",this.isStubReady=!0,this.geolocationCookiesParam="geolocation",this.EUCOUNTRIES=["BE","BG","CZ","DK","DE","EE","IE","GR","ES","FR","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks",m[m.Months=30]="Months",m[m.Years=365]="Years",(m=i=i\|\|{}).Name="OTGPPConsent",m[m.ChunkSize=4e3]="ChunkSize

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 13780, version 1.0
Category:	downloaded
Size (bytes):	13780
Entropy (8bit):	7.973002703865565
Encrypted:	false
SSDEEP:	384:TNY9PsTenykDcMLHye3cVV4FI7MvH36TYMa:TXwykhLHOM3Ma
MD5:	D2793531447C140874B62B7448EF7191
SHA1:	1CE36AA9C6445DACDFA8B597BD79A34514CC9F60
SHA-256:	2B1A1F78DF06385464750F48AED402C315164D51FD9475E8B5A47D897CF9C084
SHA-512:	33EDD561F46BFEE5D1A9AFA119F8EC6CAD9B9FD6B54FFD25B1862B5AFFFB1B82DB74D2A4AE11B7893D8261E0520EF5B5E5AF21E7D2D39D02BB849B9FDA268DDD
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/olive/17.20.0/fonts/olive-icons.woff
Preview:	wOFF......5......._.........................GSUB.......;...T .%zOS/2...D...A...V6>H.cmap...........P.<..glyf......(v..E.....head.......3...6...hhea...P.......$.?..hmtx...p...J...dU...loca.......4...4CYTHmaxp../........ ....name..0....0...:...Lpost..1@.........+@.x.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d~.8.....A.i.............X.....4........_..Q.....4#H.....>...x....r.W...@.(.A..s..s..A..%r.ND..g.E.s.6.\|./.{....N.T.[.jfV.......[...S.wt..ok:..L..kk.......O.+...L.......^n...eyU.w.C..G.>..V6u.l....+.x.{...V~..W..cj.1...c..%>...\|..t.;=\|...M.....1...3...a(..c8#.....].a,....&2.g...L.yf0.Y.f.s..\|....\|.F.u).X..V...a-.X..6...la+....v....a/......D3.8.....1.s...r...,.8...h.".....r....&.....r..<.!......o...<.).x....{^..?..._.....?..W..?Y.../.._..?....M.....R..[....4D5CeRT.U..{.........w(.5..+m.]Ki.........=My.....}Ny.T..<..)/.S@y.T..*<..7.....O..]xn(..7...%...T...\|.N.IC..3.j......u.O$...M.=<..Gx^Q...^..F.........O8...u.?<......p....L@..t@

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	24
Entropy (8bit):	3.8868421881310122
Encrypted:	false
SSDEEP:	3:HE9vZ6n:SMn
MD5:	0C5DAD92482D9A7C7C253510F5082465
SHA1:	534B458F99B4D0BB90C2CF2C4BB3703EF44A52BF
SHA-256:	5DBAF0A4FF0F8AC8C1B67550EEE84390B089604FFAF71183E417636C7E183AC5
SHA-512:	3B889A1DB2E3D3184886111A1B20FC54E6F14B006DB29B1D92741AF5C0A5B8299E78CDF6939437915F2B350E0BFC781BB8E96D4119172FF0CD2CB178487D71E0
Malicious:	false
Reputation:	low
URL:	https://js.driftt.com/core/assets/css/16.22abfce0.chunk.css
Preview:	body{margin:0;padding:0}

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	996
Entropy (8bit):	7.667690083187348
Encrypted:	false
SSDEEP:	12:6v/78EUMdg6AUGUutzYXPuP8vi3nKS/s8NkTo/P/6iYLGQ3rjWRBZZSNG35wlE31:MAQutzME6Is85nQ3rjyBZZ2lEVza6C81
MD5:	F4B52A4EB3D0CDD585A73EADE7CC734A
SHA1:	00BD17DB2EA7F845910C713CBFF3A6719D59A1EC
SHA-256:	94BACE793EA5F351B65F5B2948BEB949B01FB811274A3F8EB8D52B9719A149BB
SHA-512:	763AF2EADA1D18687D5A4B2BD8323A10D93CC22AE4E78139446D7DDDB617631CE55B695F24D07DF5FAD14B48F0674E56BD031B4DDC50AFCE013F320CF6447EAC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P............tEXtSoftware.Adobe ImageReadyq.e<....IDATx..Kr.@...S2...l...,\|.T..@\|.N.8.."....... +....T..B..Dw..Z@..W.=.M.{&..?.}.>..vnT..0h.._>..{.w.LR.}.<.tri5l3.U..D.@.....Jjq....=4....m?\|^,..m.>{s.x.\.....j.z.........l.`...8L1..Z.t..@7......<s;.1...N.<:zg>\|....s.vC].....^...P..%..B._. r.....lU.`..7U.e.B..+`.+.Y.....;.Mr.X.aW....lF/....Q..%p.f.@1.e.@...r.>.M.>...K.U...R{..P..T{.&....z".....T.......RZ....Xd...(>@.>..\......@..x.-...l3............M....$r!l.v%.........a....&.../Hr.lU..!...M.m...N&.....bV.......Y...ww..!...}<.. tsNV....."..3....@o..s....;.....c...@..nG. .v4...:.KJ.o>.JX$..r..:.....M.... .,....u.1.."`r.FH..n^....q..Z.<.tB...).6$......f..6..D'op...G...W...vy.t...u?]...,W..."...T.dV....%G...p./E..ie..6..i.!.4.>......^E...I.:......U..2.al.#.@x..VU..1IY....l.E.......l..%....v!l..y[..../.2%..z[...Z..}g.......%..Q,......7.B...B%....6.`\&o....%e.ML..[%....2.}..J%!..bH-C..(..2......zb2..3..+..X.(K.......IEND.B`.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	825519
Entropy (8bit):	5.714331898136584
Encrypted:	false
SSDEEP:	6144:TrHIL63gpPwsdBOb6URb04Ao86UYtWndbPur7RmWH6W/RYD+JZDJSeBbNhy0byWO:f6PwIkvyMYD+JZDJSGbvyrzniyQT+
MD5:	A5F330F21A3AAE33559A0B67414A5533
SHA1:	0EDAFF9A14428DAB69C8CDB16C997D802C8A8C3C
SHA-256:	BA485646E11968AC4C20BFC2CE62BB7247E877E96DFE1D5F7273EFF0C313F2D0
SHA-512:	5AD35BA7A3A7F0BCA30440596183520E8E8266547073538E9721BE722AB68B808C90ECF90954B0F9C4EEECED0D3A50F388AF7FA7220F36227FE12435EE7F7C45
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/legacy-www/_next/static/chunks/pages/%5B...page%5D-109849364cec612d.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[240],{64797:function(e,t,n){"use strict";n.r(t),n.d(t,{__N_SSG:function(){return E9},default:function(){return Re}});var i,r,o,a,l,c,d,s,u,f,p,O,m,h,g,v,b,_,C,y,T,E,R=n(2784);function w(){var e,t,n,i=null===(e=window.optimizelyEdge)\|\|void 0===e?void 0:e.get("state").getActivePages();for(var r in i)null===(t=window.optimizelyEdge)\|\|void 0===t\|\|t.push({type:"page",pageName:i[r].apiName,isActive:!1}),null===(n=window.optimizelyEdge)\|\|void 0===n\|\|n.push({type:"page",pageName:i[r].apiName})}var L=function(){(0,R.useEffect)(w,[])},N=n(95235),A=n(11242),D=function(e){var t=e.datafile,n=e.isBrowser;return s\|\|(s=n?(0,A.Fs)({datafile:t,logLevel:A.kE.LOG_LEVEL.ERROR}):(0,A.Fs)({datafile:t,datafileOptions:{autoUpdate:!1}})),s},I="optimizely-user-id=",S=function(){var e,t=null===(e=document.cookie.split("; ").find(function(e){return e.startsWith(I)}))\|\|void 0===e?void 0:e.split(I)[1];return void 0===t&&(t=btoa(String.fromCharCode.apply(null,A

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 145 x 60
Category:	downloaded
Size (bytes):	5469
Entropy (8bit):	7.404941626697962
Encrypted:	false
SSDEEP:	96:IvklPN/PqPZ8M86x9pOa36SrhE/knsz7BklPN/n:IIFHqPZbx9tKSrhtseFf
MD5:	097D652B65DEC6E954C335739754FC61
SHA1:	83155314927200EC3B9951246D0C1C3B631B088A
SHA-256:	00E709E22EA18FB242C2F41290179522537ABEC841EEF2655D17E02B36CFDC7A
SHA-512:	DE13A4A8CCEC57F7AF23143D55A93AF581D04F6066DF5C0D0B910DEC17EA0EA430621ACD88A25422A5180F37EDAC44A6746051BCE942F8D5E07BF8842A3F08EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/imgs/transparentLoader.gif
Preview:	GIF89a..<...............................................................................................................................................................................................!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:6952efb6-7b37-44ad-8f49-fb6d57787754" xmpMM:DocumentID="xmp.did:CC4E39E8547B11E4960B8D7E59B6B241" xmpMM:InstanceID="xmp.iid:CC4E39E7547B11E4960B8D7E59B6B241" xmp:CreatorTool="Adobe Photoshop CC (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:22335ebf-8a2f-43c0-a35d-602b0ebe7cf3" stRef:documentID="xmp.did:695

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (15677)
Category:	downloaded
Size (bytes):	15850
Entropy (8bit):	5.431070377061582
Encrypted:	false
SSDEEP:	192:44coUl3IeIaepuexE2BtggKrdvmvr8WM6sOuZZvPG2De5nulCPXOYVPwYXLbAUJ:44PII8NqMUsp9PG8er2hyV
MD5:	BD8BC2BBC699C8D8A5E40FA9CF17C412
SHA1:	6E7E059F8A89FE9229231062EB54DE91C209C9D6
SHA-256:	0646FCC08074F7915854941B48670A84E93732D01A44F1FDCFAC2AC62333E15C
SHA-512:	6A663515CE7711466DB0526F0071AA2A144329BD08EC83001D0484AC1D475B3137D6EA735735ED44A7CF66F79047E4703713BE0F90844D4628797D4C3ADEDCAC
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/production/1ds/widgets/@ds/signing/24.4.38-9/signing_iframeless_mobile.9184.js?cs=7b6dd7ac7ee0acf13910
Preview:	/! For license information please see signing_iframeless_mobile.9184.js.LICENSE.txt /."use strict";(self.webpackChunk_ds_signing=self.webpackChunk_ds_signing\|\|[]).push([[9184],{680368:function(e,r,a){var t=a(161040),n=a(811504);r.c=({forwardedRef:e,...r})=>n.createElement("svg",(0,t.c)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 16 16",width:16,height:16,"aria-hidden":!0,fill:"currentColor",focusable:!1,ref:e},r),n.createElement("path",{d:"M15.9 14.6 8.9.7C8.8.3 8.4 0 8 0s-.8.2-.9.6l-7 13.9c-.1.2-.1.3-.1.5 0 .6.4 1 1 1h14c.6 0 1-.4 1-1 0-.2 0-.3-.1-.4zM9 14H7v-2h2v2zm0-4H7V5h2v5z"}))},453216:function(e,r,a){a.d(r,{K:function(){return x}});var t=a(544864),n=a(577204),i=a(811504),d=a(203268),o=a.n(d),l=a(146356),c=a(161040),s=({forwardedRef:e,...r})=>i.createElement("svg",(0,c.c)({xmlns:"http://www.w3.org/2000/svg",viewBox:"0 0 20 20",width:20,height:20,"aria-hidden":!0,fill:"currentColor",focusable:!1,ref:e},r),i.createElement("path",{d:"m18.82 9.57-8.39-8.39a.6.6 0 0 0-.86 0L1.1

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	452757
Entropy (8bit):	5.357829356102245
Encrypted:	false
SSDEEP:	6144:4WpRmnYxRgUE7qLCp1RyoSQW2Hm5uO74sjGGHYyGedkQEs:4W+YxRgUE7qsWj74tyG2h
MD5:	3AB7906A4D12B7D35C62BAC882D39D74
SHA1:	5D034541D6A9A05B0719C3605880FCFC9229E4B4
SHA-256:	15DE250A16CE58A10F84BEBAB59B9005CE36DF4EC8E87C3BB1ACC92726CFA971
SHA-512:	3A8346339679F82647E763E70E91113366828BA07023578BDB8EF29A0EFAD62707330B7973BB7245C58B8D4FF4029F2D879F8CD3171E4F3612841E0BC8C7CD85
Malicious:	false
Reputation:	low
URL:	https://cdn.cookielaw.org/scripttemplates/202403.1.0/otBannerSdk.js
Preview:	/** . * onetrust-banner-sdk. * v202403.1.0. * by OneTrust LLC. * Copyright 2024 . */.!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in t)Object.prototype.hasOwnProperty.call(t,o)&&(e[o]=t[o])}))(e,t)};function D(e,t){if("function"!=typeof t&&null!==t)throw new TypeError("Class extends value "+String(t)+" is not a constructor or null");function o(){this.constructor=e}N(e,t),e.prototype=null===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new(a=a\|\|Promise)(function(o,t){function n(e){try{i(l.next(e))}catch(e){t(e)}}function r(e){try{i(l.throw(e))}catch(e){t(e)}}function i(e){var t;e.done?o(e.value):((t=e.value)instanceof a?t:new a(fun

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 5 icons, 16x16, 32 bits/pixel, 24x24, 32 bits/pixel
Category:	downloaded
Size (bytes):	27198
Entropy (8bit):	2.459230633161204
Encrypted:	false
SSDEEP:	48:Bu111111111w1111111111Y1111111111Y111h11n1i91nYk1nZ1ocJ1i1gn111W:BZAvF892d5TaAtMH3LOCaGshCaGsu
MD5:	1904FDCB027ED618D24601BFE5121096
SHA1:	3384FA317742DD9B6D6C8995AB6B0131579311B3
SHA-256:	300AD21B2AFE161BE399D3C4034131DEEF4FC22A9BE39FA70AC3716295DAFDB9
SHA-512:	3E9D51836FEB63D18D2B05592F80A8B79FF627DD2E1F50C68520D4C180647E7A12E6B73BFA081CD368D5C43F13AAE69696E071F0B191701E17A13E7E7197E766
Malicious:	false
Reputation:	low
URL:	https://www.docusign.com/assets/images/favicon.ico
Preview:	............ .h...V......... ......... .... .....F...00.... ..%......00.... ..%...D..(....... ..... ...........................L...L...L...L...L...L...L...L...L...L...L...L...K...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...L...L...L...L...L...L...L...J...............L...L...L...L...L...M...M...M...M...M...M...M...L...............L...L...L...L...:...&...&...&...&...&.z.#.k.f.RT.cRR."__..TT....L...L...L...M.w.#.........................&&v.SS..RR..RR.EQQ....L...L...L...M.v.#.........................&&v.SS..RR..RR..SS.,..L...L...L...M.v.#.........................&&v.SS..RR..RR..RR....L...L...L...M.v.#.........................((\|.SS..RR..RR..RR....L...L...L...M.v.#.......................3.CC..SS..RR..RR..RR....L...L...L...M.v.#...................3.BB..SS..RR..RR..RR..RR....L...L...L...L.k.i.%&v.&&v.&&v.((\|.CC..SS..RR..RR..RR..RR..RR..............UT..RR..SS..SS..SS..SS..SS..RR..RR..RR..RR..RR..RR..............TT..RR..RR..RR..RR..RR..RR..RR

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	19
Entropy (8bit):	3.4713544870139303
Encrypted:	false
SSDEEP:	3:dRYtyn:Tuyn
MD5:	34C520D87664032692C4315FFF455D18
SHA1:	978C8B03E97680EB62057A7000F6E7FD97FB9658
SHA-256:	C40AA69F0B306CEA296DD1193C334BC0781587ED51AAB579C0433698BA9E0C4B
SHA-512:	BC6ECF7B39E2C5882C693072A7F541A7C03117A28D14067FED6FDAB6BD455FD8E79C6FE9B81FDF327E64814B91ACEE6F9C1A62134C32CF39731477B712466F38
Malicious:	false
Reputation:	low
Preview:	Method Not Allowed.

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3728
Entropy (8bit):	4.718277261919778
Encrypted:	false
SSDEEP:	96:JvfEcg0UqvMcOAvXa4zwjo0HtedznCOpKpFWgot:5Ecg04cXvXa4f0Y4p0
MD5:	EC396047518A7FEF11D53D1B4F6BE65B
SHA1:	E3BEC4CDAF5567641517A23019ADBFA2328B0A7F
SHA-256:	8F77CFC832517C619BC1B8D82A6A478EE18D97442B4C78B006B0286CEC91E1A8
SHA-512:	34AD62B5CC5EE5C950F340D65800102AE1CD06D34D24A611E7AC2CB9F23308AC96AC669D3B226C258DC6F862D985030EC3D5BB29609ECFEDF34E14F8F48529EB
Malicious:	false
Reputation:	low
URL:	https://docucdn-a.akamaihd.net/olive/images/2.63.0/global-assets/ds-logo-default.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 28.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1200 241.4" style="enable-background:new 0 0 1200 241.4;" xml:space="preserve">.<style type="text/css">...st0{fill:#4C00FF;}...st1{fill:#FF5252;}.</style>.<g>..<g>...<g>....<path d="M1169.2,109.7v78.7h-28.9v-73.5c0-17.9-7.7-27.9-22.7-27.9s-24.9,10.5-27.7,28.1c-0.8,4.2-1,10.7-1,24.4v48.8H1060v-125.....h25.6c0.1,1.1,0.7,12.3,0.7,13c0,0.9,1.1,1.4,1.8,0.8c10.6-8.4,22.3-16.2,38.6-16.2C1153.5,60.9,1169.2,79,1169.2,109.7z"/>....<path d="M1013.4,63.4l-0.9,14.3c-0.1,0.9-1.2,1.4-1.8,0.8c-3.5-3.3-16.4-17.5-38.3-17.5c-31.4,0-54.5,27.1-54.5,63.9l0,0.....c0,37.3,22.9,64.5,54.5,64.5c21.1,0,34-13.7,36.4-16.7c0.7-0.8,2-0.3,2,0.7c-0.3,3.8-0.8,13.3-4,21.4c-4,10.2-13,19.7-31.1,19.7.....c-14.9,0-28.1-5.7-40.6-17.9L920,217.3c13.7,15.5,35

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 14:21:32.794193983 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:32.794199944 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:32.887923956 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:42.395450115 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:42.402293921 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:42.495866060 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:42.790865898 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:42.790910006 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:42.791091919 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:42.791472912 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:42.791498899 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:43.158932924 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:43.162811041 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:43.162839890 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:43.164442062 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:43.164511919 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:43.178632021 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:43.178826094 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:43.232193947 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:43.232208967 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:43.282016993 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:43.796753883 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:43.796797991 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:43.797039986 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:43.800403118 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:43.800421953 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:43.870429993 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:43.870548964 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:44.150873899 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.150954008 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.160023928 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.160043955 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.160393000 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.215296984 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.304542065 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.344393969 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:44.344435930 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:44.344722986 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:44.345127106 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:44.345150948 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:44.348128080 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.487026930 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.487201929 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.487267017 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.487591982 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.487601042 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.487623930 CEST	49715	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.487629890 CEST	443	49715	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.539000988 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.539035082 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.539156914 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.539671898 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.539685965 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.888251066 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.888345003 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.892064095 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.892071962 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.892488003 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.895071030 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:44.927328110 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:44.927908897 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:44.927928925 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:44.929584026 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:44.929730892 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:44.931133032 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:44.931222916 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:44.931746006 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:44.931752920 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:44.940115929 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:44.979923010 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:45.120804071 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:45.120990038 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:45.121043921 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:45.121545076 CEST	49716	443	192.168.2.5	35.162.217.246
Apr 24, 2024 14:21:45.121567965 CEST	443	49716	35.162.217.246	192.168.2.5
Apr 24, 2024 14:21:45.221441984 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:45.221617937 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:45.221683025 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:45.222417116 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:45.222454071 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:45.222480059 CEST	49720	443	192.168.2.5	23.206.6.29
Apr 24, 2024 14:21:45.222497940 CEST	443	49720	23.206.6.29	192.168.2.5
Apr 24, 2024 14:21:45.684833050 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:45.684878111 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:45.684946060 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:45.685194016 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:45.685237885 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:45.685292006 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:45.686119080 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:45.686134100 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:45.686292887 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:45.686340094 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.045717955 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.046185970 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.046205997 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.046854019 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.047208071 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.047259092 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.047867060 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.047959089 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.049020052 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.049093962 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.050714016 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.050796986 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.052391052 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.052504063 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.053070068 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.053078890 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.053500891 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.053520918 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.106400967 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.106422901 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.427234888 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.427489042 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.427556038 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.429100990 CEST	49728	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.429121971 CEST	443	49728	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.430325985 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.430650949 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.430715084 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.431744099 CEST	49727	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.431782961 CEST	443	49727	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.595261097 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.595309019 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.595439911 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.595663071 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.595700979 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.595750093 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.596112013 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.596124887 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.596537113 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.596564054 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.943020105 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.943264961 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.943294048 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.944766998 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.944833040 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.945197105 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.945288897 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.945319891 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.947935104 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.948136091 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.948153019 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.951653004 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.951719999 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.952052116 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.952138901 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.952177048 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.992119074 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.993649006 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.993669987 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:46.993679047 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:46.993691921 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:47.040880919 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:47.040899038 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:47.337105036 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:47.337188005 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:47.337394953 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:47.337739944 CEST	49737	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:47.337754965 CEST	443	49737	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:47.340976954 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:47.341273069 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:47.341515064 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:47.342345953 CEST	49738	443	192.168.2.5	35.186.241.51
Apr 24, 2024 14:21:47.342355013 CEST	443	49738	35.186.241.51	192.168.2.5
Apr 24, 2024 14:21:53.147675991 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:53.147753954 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:53.147809982 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:53.380995035 CEST	49713	443	192.168.2.5	142.250.141.106
Apr 24, 2024 14:21:53.381020069 CEST	443	49713	142.250.141.106	192.168.2.5
Apr 24, 2024 14:21:54.691948891 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:54.692140102 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:54.692775965 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:54.692840099 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:54.692918062 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:54.693370104 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:54.693401098 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:54.851625919 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:54.851664066 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.031028032 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.031152010 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:55.165329933 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:55.165374994 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.166481018 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.166728973 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:55.168051004 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:55.168138981 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.168303013 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:55.168318987 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.414943933 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.415020943 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:55.415380955 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.415437937 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:55.415498972 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:55.415558100 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:56.088649988 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:56.088685036 CEST	443	49785	23.1.237.91	192.168.2.5
Apr 24, 2024 14:21:56.088701010 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:21:56.088736057 CEST	49785	443	192.168.2.5	23.1.237.91
Apr 24, 2024 14:22:09.720745087 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:09.720772028 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:09.720832109 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:09.721203089 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:09.721234083 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:09.721288919 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:09.721714973 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:09.721730947 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:09.722023964 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:09.722038984 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.054841042 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.060256958 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.108639956 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.108642101 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.186711073 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.186718941 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.187067986 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.187077999 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.190516949 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.190561056 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.190588951 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.190659046 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.190745115 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.193511009 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.193703890 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.193737030 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.194093943 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.194194078 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.194279909 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.194289923 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.236138105 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.248491049 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.248492002 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.248498917 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.291363001 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.306519032 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.306562901 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.306647062 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.369596958 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392080069 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392119884 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392139912 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392159939 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.392175913 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392195940 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392211914 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.392216921 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392235994 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392250061 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.392267942 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.392280102 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.418562889 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.418626070 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.418644905 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.418648005 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.418673038 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.418699980 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.418706894 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.418731928 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.423003912 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.423187017 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.423194885 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.470688105 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.470750093 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.470772028 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.470805883 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.470807076 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.470827103 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.470853090 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.470855951 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.471081972 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.471796036 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.473248959 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.473387957 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.473453045 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.548243046 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.548259020 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.548331976 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.548367977 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.548389912 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.548408985 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.548434019 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.548456907 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.579557896 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.579567909 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.579610109 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.579629898 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.579643011 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.579688072 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.579708099 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.608774900 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.608829021 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.608885050 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.608896971 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.608935118 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.608953953 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.625691891 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.625751019 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.625788927 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.625798941 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.625829935 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.707973003 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.708026886 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.708049059 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.708060980 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.708108902 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.728519917 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.728540897 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.728584051 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.728595018 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.728642941 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.728646040 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.728667974 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.728691101 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.754395962 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.754447937 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.754489899 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.754498005 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.754534960 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.754560947 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.775295019 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.775342941 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.775382042 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.775388956 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.775423050 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.775443077 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.796000957 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.796065092 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.796123981 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.796129942 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.796150923 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.796184063 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.817166090 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.817214966 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.817246914 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.817253113 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.817289114 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.817296982 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.830599070 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.830655098 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.830677986 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.830683947 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.830710888 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:10.830835104 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:10.830912113 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.584712029 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.584749937 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.584847927 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.593888998 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.594552040 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.594573021 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.596304893 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.596318960 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.707519054 CEST	49817	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.707540035 CEST	443	49817	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.709743977 CEST	49818	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.709762096 CEST	443	49818	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.888972998 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.889009953 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.889084101 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.889113903 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.889139891 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.889190912 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.889506102 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.889518023 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.889673948 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.889689922 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.919248104 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.919488907 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.919511080 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.919848919 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.920190096 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.920252085 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.920324087 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.931746006 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.932096958 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.932120085 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.932606936 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.932944059 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.933027029 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.933043957 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:12.964144945 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:12.976121902 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.123467922 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.216156960 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.216347933 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.216362953 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.216417074 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.216610909 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.216629028 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.217593908 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.217648983 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.217813969 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.217868090 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.218024015 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.218086004 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.218386889 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.218466043 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.218539000 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.218545914 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.218586922 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.218592882 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.270109892 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.270138979 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.270191908 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.270210028 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.270250082 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.270839930 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.270874023 CEST	443	49819	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.270932913 CEST	49819	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.274574041 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.274599075 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.274672031 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.274853945 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.274864912 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.281636953 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.281702042 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.281797886 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.281824112 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.281888962 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.282495022 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.282577991 CEST	443	49820	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.282676935 CEST	49820	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.285804033 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.285837889 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.285903931 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.286092043 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.286112070 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.424155951 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.424215078 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.425313950 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.536940098 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.538347006 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.545934916 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.545980930 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.546004057 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.546020031 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.546063900 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.546240091 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.546287060 CEST	443	49828	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.546344042 CEST	49828	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.559200048 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.559211016 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.559241056 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.559253931 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.559261084 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.559269905 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.559288979 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.559298992 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.559312105 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.559318066 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.559330940 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.586126089 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586150885 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586174011 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586188078 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.586196899 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586219072 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.586225986 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586244106 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586262941 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586272955 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.586289883 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.586299896 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.599325895 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.599544048 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.599560976 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.599898100 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.600250006 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.600321054 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.600395918 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.617444992 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.617662907 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.617703915 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.621284962 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.621371031 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.622840881 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.622934103 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.623281002 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.623297930 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.636677027 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.644118071 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.710233927 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.710242987 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.710273981 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.710287094 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.710289955 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.710314989 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.710324049 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.710325003 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.710371017 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.741564989 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.741574049 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.741614103 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.741625071 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.741741896 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.741741896 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.741755009 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.743163109 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.770723104 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.770735979 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.770761013 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.770792961 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.770801067 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.770829916 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.770849943 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.824136019 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.856829882 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.856851101 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.856919050 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.856930017 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.857151985 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.877489090 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.877504110 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.877574921 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.877588034 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.877633095 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.898416996 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.898431063 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.898489952 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.898499966 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.898591995 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.920109987 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.920303106 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.920363903 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.920381069 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.920423985 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.920697927 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.920711994 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.920773983 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.920783043 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.920826912 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.920882940 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.921134949 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.921175003 CEST	443	49829	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.921231985 CEST	49829	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.937499046 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.937555075 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.937618971 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.937652111 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.937823057 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.937886953 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.938128948 CEST	49830	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.938157082 CEST	443	49830	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.944588900 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.944602966 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.944690943 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.944700956 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.944746017 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.965152025 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.965167046 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.965306044 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.965317965 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.965485096 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.983331919 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.983347893 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.983403921 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.983418941 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.983560085 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.996715069 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.996748924 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.996778011 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.996787071 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.996797085 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:13.996900082 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.997601032 CEST	49827	443	192.168.2.5	18.65.25.53
Apr 24, 2024 14:22:13.997612000 CEST	443	49827	18.65.25.53	192.168.2.5
Apr 24, 2024 14:22:15.983393908 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:15.983438015 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:15.983505011 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:15.983725071 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:15.983737946 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.018640995 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.018671036 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.018776894 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.018884897 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.018907070 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.019072056 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.019129992 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.019148111 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.019345045 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.019359112 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.306334972 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.306566954 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.306583881 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.307746887 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.307810068 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.310813904 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.310877085 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.311041117 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.311047077 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.355376959 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.449528933 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.449562073 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.449630022 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.449875116 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.449889898 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.587759018 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.588004112 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.588040113 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.589544058 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.589612007 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.591468096 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.591552019 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.591643095 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.594053030 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.594254017 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.594265938 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.595750093 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.595822096 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.596153975 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.596231937 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.596271038 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.636161089 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.638552904 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.638575077 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.638633013 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.638644934 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.653851032 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.653970957 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654108047 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654167891 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.654187918 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654242992 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.654247999 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654365063 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654428959 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.654433966 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654803991 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654860973 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.654865026 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.654963970 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.655014992 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.655019045 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.655757904 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.655824900 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.655828953 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.656038046 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.656155109 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.656203032 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.656208038 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.656420946 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.656498909 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.656761885 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.656842947 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.657418966 CEST	49839	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.657433033 CEST	443	49839	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.662421942 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.662466049 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.662549019 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.662868023 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.662885904 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.684261084 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.684421062 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.780545950 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.780642033 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.780807972 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.781541109 CEST	49841	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.781553984 CEST	443	49841	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.786998987 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.787101984 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.787199020 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.787862062 CEST	49840	443	192.168.2.5	54.186.38.246
Apr 24, 2024 14:22:16.787879944 CEST	443	49840	54.186.38.246	192.168.2.5
Apr 24, 2024 14:22:16.798710108 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.799087048 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.799109936 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.800173998 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.800244093 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.801117897 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.801177979 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.801398039 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.801407099 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.801424026 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.844162941 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:16.848459959 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:16.940396070 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.940442085 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.940510988 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.940728903 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:16.940747976 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:16.945135117 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:16.945161104 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:16.945245028 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:16.945460081 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:16.945473909 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:16.978480101 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.978703022 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.978730917 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.981908083 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.981966019 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.982583046 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.982644081 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:16.982745886 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:16.982754946 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.027216911 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.202450037 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:17.202545881 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:17.202601910 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:17.202843904 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:17.202863932 CEST	443	49842	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:17.202873945 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:17.202913046 CEST	49842	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:17.320892096 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.321127892 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.321157932 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.322591066 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.322665930 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.322999954 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.323080063 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.323126078 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.341047049 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341223001 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341280937 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.341305971 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341423988 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341483116 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.341490030 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341614962 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341682911 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.341689110 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341804028 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.341847897 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.341852903 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.342082024 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.342139006 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.342144966 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.342319965 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.342430115 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.342475891 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.342482090 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.342518091 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.342529058 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.343182087 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.343259096 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.343265057 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.343400002 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.343453884 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.343458891 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.343621969 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.343682051 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.343821049 CEST	49844	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:17.343837023 CEST	443	49844	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:17.368132114 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.372221947 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.372230053 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.420212984 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.502301931 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.502327919 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:17.502396107 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.502767086 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.502772093 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:17.502860069 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.503041029 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.503053904 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:17.503182888 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.503191948 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:17.520448923 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.520673990 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:17.520684004 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.521724939 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.521783113 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:17.522212029 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:17.522272110 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.522344112 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:17.522351980 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.575054884 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:17.699150085 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.699244022 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.699309111 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.704262018 CEST	49845	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:17.704282045 CEST	443	49845	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:17.714299917 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.714376926 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.714452982 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:17.715393066 CEST	49846	443	192.168.2.5	54.148.51.66
Apr 24, 2024 14:22:17.715411901 CEST	443	49846	54.148.51.66	192.168.2.5
Apr 24, 2024 14:22:17.817022085 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:17.817547083 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.817563057 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:17.817759037 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:17.818434954 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.818444967 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:17.818453074 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:17.818542957 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.820430994 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.820496082 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:17.820614100 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.820621967 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:17.821697950 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:17.821753025 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.822176933 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.822262049 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:17.822984934 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.822993040 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:17.873848915 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:17.873930931 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:17.958704948 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:17.958784103 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:17.958885908 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:17.959115982 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:17.959153891 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.177995920 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:18.178261995 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:18.178349018 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:18.178556919 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.178774118 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.178879023 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.178893089 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179018974 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179104090 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.179114103 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179215908 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179272890 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.179284096 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179405928 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179497957 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.179507017 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179536104 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179579973 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.179644108 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179828882 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.179925919 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.179934978 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.180037022 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.180179119 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.180258989 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.180269003 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.180320024 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.180768013 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.180943966 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.180993080 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.181000948 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.181184053 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.181277990 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.183614969 CEST	49848	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:18.183628082 CEST	443	49848	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:18.186976910 CEST	49849	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:18.186983109 CEST	443	49849	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:18.188945055 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.188978910 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.189146042 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.189367056 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.189380884 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.347238064 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.347286940 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:18.347533941 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.347829103 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.347856998 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:18.411958933 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.412302971 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.412372112 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.413254976 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.413336992 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.414356947 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.414421082 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.414941072 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.414958000 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.466291904 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.500060081 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.500317097 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.500330925 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.500891924 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.501302958 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.501383066 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.501630068 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.548124075 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.658277988 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:18.658514977 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.658543110 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:18.659836054 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:18.659908056 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.660284996 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.660373926 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:18.660515070 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.660521984 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:18.701030016 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:18.855443954 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.855501890 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.855535984 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.855559111 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.855567932 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.855581045 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.855619907 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.855679989 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.855765104 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.855792999 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.856456041 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.856513977 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.856528044 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.856662989 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.856703043 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.856703997 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.856715918 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.856753111 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.857332945 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.857391119 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.857548952 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.857551098 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.857559919 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.857599020 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.857748032 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.857830048 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.857907057 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.858319998 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.858428001 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.858469963 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.858479023 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.859162092 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.859210014 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.859216928 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.859246969 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.859905005 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.859934092 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.859939098 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.859947920 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.859982967 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.860018969 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.860055923 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.860105038 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.860904932 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.860960960 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.861016035 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.861023903 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.861063957 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.861646891 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.861810923 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.861838102 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.861862898 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.861872911 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.861911058 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.862539053 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.862621069 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.862654924 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.862694025 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.862703085 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.862745047 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.863347054 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.863662004 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.863692045 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.863734007 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.863742113 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.863785028 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.864661932 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:18.864721060 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:18.866604090 CEST	49850	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.866640091 CEST	443	49850	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.869354963 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.869400024 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:18.869467974 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.869663000 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:18.869679928 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.008661032 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.008738995 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.008752108 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.008791924 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.009424925 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.009479046 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.009783030 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.009830952 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.010723114 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.010783911 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.011182070 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.011234045 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.011944056 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.012017012 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.012936115 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.013029099 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.013627052 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.013725042 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.013842106 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.013895035 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.014540911 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.014609098 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.015651941 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.015733957 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.016223907 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.016300917 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.016959906 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.017026901 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.017426968 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:19.017517090 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.017541885 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:19.017573118 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.017611027 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:19.019184113 CEST	49852	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:19.019203901 CEST	443	49852	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:19.061259985 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.061319113 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.161767006 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.161833048 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.161839008 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.161853075 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.161878109 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.161900043 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.161904097 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.162576914 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.162636995 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.162645102 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.162683010 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.163512945 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.163564920 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.163933992 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.163995028 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.164957047 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.165010929 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.165703058 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.165752888 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.165880919 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.165930033 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.166533947 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.166608095 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.167517900 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.167578936 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.168205976 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.168277025 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.168941021 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.169007063 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.169487953 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.169540882 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.170172930 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.170238972 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.170958996 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.171010971 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.171814919 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.171869040 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.172605991 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.172665119 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.172693968 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.172739983 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.173626900 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.173680067 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.174381018 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.174431086 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.175173044 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.175246954 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.175563097 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.175622940 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.178381920 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.178390026 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.178427935 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.178443909 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.178451061 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.178494930 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.181637049 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.181653023 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.181710005 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.181716919 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.184163094 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.184185028 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.184283018 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.184292078 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.186434984 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.186449051 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.186501980 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.186511993 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.189083099 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.189102888 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.189141989 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.189151049 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.189186096 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.192337990 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.192353010 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.192435026 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.192446947 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.215668917 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.215689898 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.215728998 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.215738058 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.215775967 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.264949083 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.314548016 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.314937115 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.314955950 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.315290928 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.315646887 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.315669060 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.315695047 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.315705061 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.315761089 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.315771103 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.315819025 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.315819979 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.318552971 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.318569899 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.318722963 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.318738937 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.318864107 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.321325064 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.321341991 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.321397066 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.321403980 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.321444988 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.323764086 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.323779106 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.323833942 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.323841095 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.323895931 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.326468945 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.326484919 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.326545954 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.326558113 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.326608896 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.329051018 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.329066992 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.329121113 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.329128027 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.329396009 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.332257032 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.332273006 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.332330942 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.332339048 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.332390070 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.333858013 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.333894968 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.333925009 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.333931923 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.333967924 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.333981991 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.334009886 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.334412098 CEST	49851	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.334429979 CEST	443	49851	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.344129086 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.344166994 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.344240904 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.344443083 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.344456911 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.356162071 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.654557943 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.654956102 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.654987097 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.655275106 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.655595064 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.655667067 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.655740976 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:19.696129084 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:19.813987970 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.814080954 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.814776897 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.815037012 CEST	49853	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.815059900 CEST	443	49853	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.973922968 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.973967075 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:19.974066019 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.974302053 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:19.974320889 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.017985106 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018080950 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018136978 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018193007 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018239975 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.018259048 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018316984 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018346071 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.018352985 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018429041 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.018460989 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.018467903 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.019001961 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.019032955 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.019040108 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.019063950 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.019135952 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.019527912 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.019535065 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.019856930 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.019917965 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.019999027 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.020025969 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.020032883 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.020060062 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.020764112 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.020867109 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.020881891 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.020934105 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.021236897 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.021243095 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.021713018 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.021770000 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.022106886 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.022113085 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.022198915 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.022420883 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.022666931 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.022727013 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.022757053 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.022763014 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.022820950 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.023293018 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.023432970 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.023488045 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.023515940 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.023521900 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.023737907 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.024317980 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.024497032 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.024734020 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.024739981 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.025150061 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.025219917 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.025243998 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.025250912 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.025362015 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.025367975 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.026032925 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.026134968 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.026160002 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.026166916 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.026878119 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.026983976 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.027151108 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.171226025 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.171394110 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.171422005 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.171803951 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.171859980 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.171890020 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.171900034 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.171928883 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.171993017 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.175225973 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.175422907 CEST	49854	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.175445080 CEST	443	49854	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.201164007 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.201215982 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.201344967 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.201673031 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.201700926 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.239079952 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.239119053 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.240339994 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.240341902 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.240359068 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.240375042 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.240410089 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.240431070 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.240432978 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.240968943 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.240983963 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.241154909 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.241168976 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.241435051 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.241455078 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.363136053 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:20.363178015 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:20.367345095 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:20.367429972 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:20.367441893 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:20.375134945 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.375155926 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:20.375391960 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.376132965 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.376148939 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:20.378859997 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.378892899 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:20.379028082 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.379213095 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.379228115 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:20.424112082 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.424381971 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.424407005 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.425467014 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.425816059 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.426156044 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.426229954 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.426470995 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.468122959 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.480568886 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.480581045 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.516566992 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.516834021 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.516854048 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.517299891 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.519474030 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.519565105 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.519625902 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.528090954 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.551232100 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.551954031 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.551980972 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.552362919 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.552804947 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.552804947 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.552820921 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.552876949 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.553368092 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.554079056 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.554095984 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.557823896 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.558185101 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.558552027 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.558552027 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.558563948 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.558727980 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.559087038 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.559360027 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.559385061 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.560122967 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.560517073 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.560894012 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.561064959 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.561556101 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.575171947 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.604139090 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.605531931 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.605542898 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.605575085 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.652344942 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.705987930 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:20.706233978 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.706243992 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:20.707209110 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:20.707274914 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.708554983 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.708615065 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:20.708853006 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.708865881 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:20.731842995 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:20.733921051 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.733966112 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:20.734956980 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:20.735064983 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.735440969 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.735511065 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:20.735591888 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.735609055 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:20.752758026 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:20.792675972 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:20.887561083 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.887655973 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.887707949 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.889090061 CEST	49856	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:20.889111996 CEST	443	49856	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:20.914438009 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.914515972 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.914555073 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.914570093 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.914596081 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.914637089 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.914642096 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.914654016 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.914699078 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.914741039 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.915178061 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.915215969 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.915226936 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.915235996 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.915277958 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.915282965 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.915927887 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.915967941 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.915973902 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.916773081 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.916857004 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.916863918 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.916939020 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.916995049 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.917001009 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.917655945 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.917705059 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.917712927 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.917823076 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.917857885 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.917867899 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.918682098 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.918718100 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.918721914 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.918730021 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.918778896 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.918838978 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.919493914 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.919590950 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.919740915 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.919764042 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.919785976 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.919810057 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.919820070 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.919943094 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.919990063 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920017004 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.920023918 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920056105 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.920061111 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920388937 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920418978 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920428991 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.920434952 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920474052 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.920588970 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920619965 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.920625925 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920670986 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920705080 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.920710087 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920770884 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920917988 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920950890 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.920957088 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.920969009 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.921124935 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.921535969 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.921571016 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.921580076 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.921587944 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.921658993 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.921745062 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.921878099 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.921909094 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.921925068 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.921931982 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.922002077 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.922338963 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.922404051 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.922454119 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.922491074 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.922497034 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.922533035 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.922595978 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.922786951 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.922836065 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.922842026 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.923345089 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.923650980 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.923722982 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.923827887 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.923834085 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.923868895 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.924382925 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:20.924423933 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:20.924593925 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:20.924787045 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:20.924803972 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:20.924946070 CEST	49860	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.924959898 CEST	443	49860	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925236940 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925276041 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925388098 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.925409079 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925477982 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925517082 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.925524950 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925797939 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925823927 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925867081 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.925874949 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.925915003 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.926393032 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.926685095 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.926716089 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.926727057 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.926737070 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.926790953 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.926829100 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.928319931 CEST	49861	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:20.928337097 CEST	443	49861	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:20.931416988 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.931448936 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.931538105 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.931798935 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.931818962 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.931866884 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.932142973 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.932156086 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.932360888 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:20.932373047 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:20.964370966 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:21.023993015 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024058104 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024097919 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024120092 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.024135113 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024205923 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.024213076 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024348974 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024393082 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024411917 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.024419069 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.024470091 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.025145054 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.025240898 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.025274038 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.025326014 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.025333881 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.025389910 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.026026011 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.026151896 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.026195049 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.026196957 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.026210070 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.026264906 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.026961088 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.027051926 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.027113914 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.027123928 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.027968884 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.028011084 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.028038979 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.028048038 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.028104067 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.028127909 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.028870106 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.028912067 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.028944016 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.028949022 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.028954029 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.029002905 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.029009104 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.029037952 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.029083967 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.029140949 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.029149055 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.029237032 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.029692888 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.029792070 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.029846907 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.029855013 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.030129910 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.030622005 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.030746937 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.030795097 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.030802011 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.031409979 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.031447887 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.031481981 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.031490088 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.031548023 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.031568050 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.032381058 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.032444000 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.032452106 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.032733917 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.032818079 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.032866955 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.032875061 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.032919884 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.033425093 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.033502102 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.035660028 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.035940886 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.035976887 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.037739038 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.037838936 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.038732052 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.038822889 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.038850069 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.067804098 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:21.067893028 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:21.067934990 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:21.068092108 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:21.068104029 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:21.068140030 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:21.068356037 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:21.068739891 CEST	49859	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:21.068751097 CEST	443	49859	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:21.073703051 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.084146023 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.089121103 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.089140892 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.096157074 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:21.096219063 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:21.096304893 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:21.114160061 CEST	49863	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:21.114202976 CEST	443	49863	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:21.136939049 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.164773941 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.164804935 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.164854050 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.165165901 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.165178061 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.177340984 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.177411079 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.177422047 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.177462101 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.178412914 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.178481102 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.178564072 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.178608894 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.178615093 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.178647995 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.178668976 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.178724051 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.179356098 CEST	49857	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.179368019 CEST	443	49857	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.188302994 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.188313961 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.188349962 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.188359976 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.188371897 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.188389063 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.188399076 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.188438892 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.239420891 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.239485979 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.239552021 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.239778042 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.239784956 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.239845037 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.240214109 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.240252972 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.240366936 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.240379095 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.242647886 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.242899895 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.242913008 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.243211031 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.243568897 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.243643999 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.243699074 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.246164083 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.246364117 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.246385098 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.247448921 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.247751951 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.247919083 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.248068094 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.258749008 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.258805037 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.258826017 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.258863926 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.258867979 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.258887053 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.258903027 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.258912086 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.261998892 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.262012005 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.262053967 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.262064934 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.262073040 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.262124062 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.284113884 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.285304070 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.285484076 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.285501003 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.287203074 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.287266970 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.288095951 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.288187027 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.288336992 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.288346052 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.290328979 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.290354013 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:21.290441036 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.290663958 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.290677071 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:21.292118073 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.292973995 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.308614969 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.339867115 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.347749949 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.347779989 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.347820044 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.347830057 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.347873926 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.396444082 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.396466017 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.396517038 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.396526098 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.396620989 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.397089005 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.397176981 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.435802937 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.435842991 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.435892105 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.435899019 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.435951948 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.477241993 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.477277994 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.477296114 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.477335930 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.477340937 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.477364063 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.477391958 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.477418900 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.477596045 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.477655888 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.477771044 CEST	49862	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.477793932 CEST	443	49862	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.483458042 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.483480930 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.483545065 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.483555079 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.483588934 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.483602047 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.483908892 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.483952999 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.484035969 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.485090971 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.485105991 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.485546112 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.485584974 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.485975981 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.486154079 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.486171007 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.490556002 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.490777016 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.490794897 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.493757010 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.493818045 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.494179964 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.494255066 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.494350910 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.494357109 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.529437065 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.529457092 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.529500008 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.529506922 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.529540062 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.529560089 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.543293953 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.549985886 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.550021887 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.550055981 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.550061941 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.550100088 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.553832054 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.553883076 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.576989889 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.577023983 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.577048063 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.577054024 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.577076912 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.577088118 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.597778082 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.597970963 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.597980022 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.598623991 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.598645926 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.598690033 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.598696947 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.598723888 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.598742008 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.598942995 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.598999977 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.599926949 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.599987984 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.600084066 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.600090981 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.601701021 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.601742983 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.601773977 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.601830006 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.601830006 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.601874113 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.601907015 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.601931095 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.602112055 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.602124929 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.602292061 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.602458000 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.602507114 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.602519989 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.602567911 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.603173971 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.603208065 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.603382111 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.603396893 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.603688002 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.603739023 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.603750944 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.604532957 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.604587078 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.604598045 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.604824066 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.604867935 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.604880095 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.605015039 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.605071068 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.605248928 CEST	49869	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.605277061 CEST	443	49869	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614236116 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614365101 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614428043 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.614450932 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614531994 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614623070 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614675999 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.614684105 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614746094 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.614749908 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614778042 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.614826918 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.615046978 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.615220070 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.615276098 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.615283012 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.615479946 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.615571976 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.615787029 CEST	49868	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.615802050 CEST	443	49868	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.616969109 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.616995096 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.617032051 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.617038965 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.617068052 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.617085934 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.636384964 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.636416912 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.636459112 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.636465073 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.636511087 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.642266035 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.642324924 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.652110100 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.657047033 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.657078981 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.657170057 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.657174110 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.657198906 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.659297943 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:21.659657955 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.659667015 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:21.661093950 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:21.661151886 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.662403107 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.662478924 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:21.662765026 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.662770033 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:21.672218084 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.672262907 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.672288895 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.672293901 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.672313929 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.672355890 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.672789097 CEST	49864	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:21.672806025 CEST	443	49864	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:21.713246107 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:21.723684072 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.723961115 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.724019051 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.732613087 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.734636068 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.734657049 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.735440969 CEST	49867	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.735469103 CEST	443	49867	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.735650063 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.735729933 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.737443924 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.737514019 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.737590075 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.749130011 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.749161959 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.749250889 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.749553919 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.749589920 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.749799013 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.750011921 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.750035048 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.750392914 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.750411987 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.750422001 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.750641108 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.750861883 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.750885963 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.751152039 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.751245022 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.751270056 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.751503944 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.751630068 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.751646042 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.751791954 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.751808882 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.751959085 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.751971006 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.752115011 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.752125025 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.752253056 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.752268076 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.752465963 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:21.752479076 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:21.784121990 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.785675049 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.785693884 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.840050936 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.845946074 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846015930 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846060038 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846106052 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846122980 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.846141100 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846151114 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.846185923 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846230984 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.846236944 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846656084 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846720934 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.846726894 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846852064 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.846966028 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.846971989 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.847503901 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.847553968 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.847553968 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.847564936 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.847754002 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.847759962 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.848490000 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.848539114 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.848551989 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.848558903 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.848651886 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.849241018 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.849343061 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.849390984 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.849407911 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.849412918 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.849450111 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.850183964 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.850277901 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.850317001 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.850369930 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.850375891 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.850509882 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.851070881 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.851218939 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.851588964 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.851594925 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.851985931 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.852032900 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.852035046 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.852044106 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.852091074 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.852317095 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.852864981 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.852906942 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.852924109 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.852930069 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.853009939 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.853014946 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.853751898 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.853853941 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.853909969 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.853915930 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.854149103 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.854573011 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.854928017 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.855005980 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.855011940 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:21.898359060 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.898464918 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.898498058 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.898519993 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.898546934 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.898603916 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.898647070 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.898663044 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.899091959 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.902554035 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:21.903915882 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.909352064 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.909439087 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.909545898 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.909564018 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.909626961 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.914901018 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.918675900 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.918872118 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.918886900 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.919903040 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.919930935 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.919956923 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.920139074 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.920154095 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.920202971 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.920372963 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.920389891 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.920500040 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.920558929 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.920650959 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.920658112 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.921272993 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.921597958 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.921731949 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.921736956 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.921768904 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.925668955 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.925729990 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.925744057 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.931056023 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.931113005 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.931126118 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.936512947 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.936718941 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.936732054 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.942006111 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.942081928 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.942095995 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.954032898 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.954062939 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.954098940 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.954117060 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.954677105 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.961292028 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.963681936 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.963747025 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:21.963762045 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:21.965045929 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.965148926 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.988591909 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.988614082 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.988625050 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.988646030 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.988657951 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.988667965 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.988681078 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.988692999 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:21.988724947 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.988758087 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:21.992400885 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.992427111 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:21.992698908 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.992918015 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:21.992928982 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.000245094 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:22.000286102 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:22.000334978 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:22.000489950 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:22.000547886 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:22.000695944 CEST	49870	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:22.000710011 CEST	443	49870	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:22.011940956 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.015993118 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:22.016062021 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:22.016582012 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:22.016724110 CEST	49875	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:22.016741991 CEST	443	49875	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:22.018095970 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.018119097 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.018162966 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.018172026 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.018204927 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.018224955 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.057742119 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.060137987 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.060184002 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.060219049 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.060260057 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.060391903 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.065262079 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.070000887 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.070056915 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.070072889 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.074610949 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.074664116 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.074676991 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.078872919 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.078943968 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.078958035 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.082847118 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.082910061 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.082922935 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.086721897 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.087153912 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.087171078 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.090605974 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.090703964 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.090871096 CEST	49872	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:22.090899944 CEST	443	49872	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:22.098193884 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.102787018 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.103888035 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.103902102 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.103981972 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.103997946 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.105142117 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.105161905 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.105202913 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.105251074 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.105278969 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.105284929 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.105776072 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.105834961 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.105851889 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.106137991 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.106209993 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.106484890 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.106493950 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.106566906 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.106575966 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.106759071 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.106771946 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.106972933 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.106987953 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.107224941 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.107238054 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.108143091 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.108165979 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.108221054 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.108632088 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.108702898 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.108755112 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.112025976 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.112111092 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.112276077 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.112293959 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.112612963 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.112698078 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.112790108 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.113185883 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.113254070 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.113675117 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.113681078 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.113809109 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.113862991 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.113872051 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.115040064 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.115122080 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.115360975 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.148704052 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.148724079 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.148787975 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.148797989 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.149005890 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.154201031 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.154216051 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.154223919 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.154226065 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.156176090 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.160115957 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.183204889 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.183223009 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.183279991 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.183290958 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.183331966 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.215106010 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.215121984 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.215162992 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.215168953 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.215195894 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.215215921 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.215219975 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.215230942 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.216722965 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.221026897 CEST	49873	443	192.168.2.5	108.139.10.26
Apr 24, 2024 14:22:22.221038103 CEST	443	49873	108.139.10.26	192.168.2.5
Apr 24, 2024 14:22:22.347197056 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.347287893 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.347383022 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.347440958 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.347482920 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.348733902 CEST	49878	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.348750114 CEST	443	49878	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.348776102 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.365861893 CEST	49879	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.365888119 CEST	443	49879	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.427875996 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.428255081 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.428267002 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.429835081 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.430143118 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.430179119 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:22.430459976 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.430500031 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.430624962 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.430768967 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.430780888 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:22.430814028 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.479252100 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.479295969 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.479368925 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.479391098 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.479408026 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.479449034 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.481198072 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.488317966 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.488416910 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.488595963 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.488652945 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.488653898 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.488703966 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.488724947 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.488886118 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.488887072 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.488898039 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.488918066 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.488945007 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.489902973 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.489943981 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.489993095 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.490008116 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.490153074 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.490192890 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.490201950 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.491138935 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.608659029 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.608715057 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.608788013 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.608803988 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.608817101 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.608864069 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.608871937 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.611140966 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.612052917 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.612087011 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.612132072 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.612149954 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.612395048 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.612437010 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.612442970 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.615147114 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.649372101 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.649406910 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.649641991 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.650721073 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:22.650755882 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:22.650810957 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:22.651485920 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:22.651498079 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:22.652147055 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.652163982 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.658911943 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.659003973 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.659189939 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.659249067 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.659498930 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.659507036 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.659559011 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.659564018 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.659660101 CEST	49880	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.659678936 CEST	443	49880	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.660073042 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.660141945 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.660146952 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.660320997 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.660331011 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.660372972 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.660716057 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.660769939 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.660821915 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.661174059 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.661181927 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.661226988 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.661240101 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.661513090 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.661561012 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.661570072 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.661741018 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.665112019 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.665136099 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.665301085 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.665477037 CEST	49882	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.665483952 CEST	443	49882	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.666728973 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.666740894 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.673563004 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.673573971 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.673727989 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.674123049 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.674132109 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.759557962 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:22.759887934 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.759903908 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:22.760929108 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:22.760986090 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.762592077 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.762654066 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:22.763071060 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.763078928 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:22.779076099 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.779160976 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.779187918 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.779213905 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.779239893 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.779356956 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.779402018 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.779895067 CEST	49881	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.779916048 CEST	443	49881	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782294035 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782304049 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782356024 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.782375097 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782413960 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.782434940 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782475948 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.782812119 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782819033 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782866001 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.782870054 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782891989 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.782903910 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.782932043 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.783240080 CEST	49885	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.783252001 CEST	443	49885	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.809326887 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:22.829324007 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.829360962 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.829380989 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.829385996 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.829422951 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.829993010 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.830025911 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.830045938 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.830049038 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.830080032 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.830456972 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.830486059 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.830507994 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.830509901 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.830529928 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.831118107 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.831147909 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.831170082 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.831172943 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.831218958 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.832317114 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.832350016 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.832366943 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.832391024 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.832401991 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.832412958 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.832427979 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.832431078 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.832442999 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.832451105 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.832461119 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.834300041 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.834361076 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.834372044 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.834388971 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.834414959 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.855655909 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.855737925 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.855782986 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.856328011 CEST	49886	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.856338978 CEST	443	49886	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.866765976 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.866842985 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.866914988 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.867340088 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:22.867371082 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:22.878246069 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.878305912 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.878326893 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.878349066 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.878365040 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.918699026 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.999780893 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.999833107 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.999850988 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.999864101 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:22.999907017 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:22.999986887 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.000030994 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.000710011 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.000734091 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.000771046 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.000776052 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.000803947 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.001112938 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.001163960 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.001168013 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.001182079 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.001208067 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.001260042 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.002513885 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.002531052 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.002561092 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.002574921 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.002597094 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.002614975 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.002623081 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.002640963 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.002655029 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.003411055 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.003433943 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.003465891 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.003470898 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.003510952 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.004354000 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.004378080 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.004437923 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.004443884 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.004475117 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.004597902 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.004645109 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.004650116 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.004682064 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.004724026 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.006635904 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:23.007143974 CEST	49883	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.007167101 CEST	443	49883	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.008965015 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:23.008976936 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:23.010078907 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:23.010145903 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:23.012815952 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:23.012871981 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:23.013220072 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:23.013226986 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:23.020267963 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.020658016 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.021195889 CEST	49884	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.021210909 CEST	443	49884	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.022346973 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.022366047 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.023515940 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.059336901 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:23.071655035 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.071893930 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.084434986 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.094556093 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.094573021 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.095240116 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.104865074 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.105030060 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.105046988 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.105132103 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.106714010 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.106779099 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.107057095 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.107414961 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.111377001 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.111524105 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.112917900 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.113429070 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.113539934 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.113554955 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.117014885 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.117100000 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.117182970 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.117471933 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.117507935 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.117571115 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.118155003 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.118186951 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.118379116 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.118401051 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.127643108 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:23.128216028 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:23.128289938 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:23.130485058 CEST	49888	443	192.168.2.5	18.154.144.129
Apr 24, 2024 14:22:23.130502939 CEST	443	49888	18.154.144.129	192.168.2.5
Apr 24, 2024 14:22:23.156116962 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.156126022 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.168031931 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.304467916 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.355588913 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.415158987 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.415261984 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.415344954 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.415373087 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.415460110 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:23.415512085 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:23.418626070 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:23.418689966 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:23.418739080 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:23.432558060 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.433386087 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.480525970 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.480532885 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.515867949 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.515975952 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.516031027 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.543474913 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.543490887 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.543761015 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.543775082 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.544218063 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.544476032 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.553282022 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.553301096 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.554811001 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.554863930 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:23.554930925 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.556322098 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.556353092 CEST	443	49902	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:23.556402922 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.556858063 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:23.556890011 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:23.556932926 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:23.557266951 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.557343006 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.557627916 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.557655096 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:23.557719946 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.560983896 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.561016083 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:23.561079979 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.561464071 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.561489105 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:23.561549902 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.562350988 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.562510014 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.562952995 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:23.562983036 CEST	443	49907	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:23.563031912 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:23.564028025 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.564215899 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.565753937 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.565767050 CEST	443	49909	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:23.565818071 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.566176891 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.566205025 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:23.566719055 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.566735983 CEST	443	49902	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:23.567050934 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:23.567071915 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:23.567763090 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.567828894 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.568269968 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.568286896 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:23.568442106 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.568459034 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:23.568658113 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.568665981 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:23.568989992 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:23.569005013 CEST	443	49907	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:23.570020914 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.570044041 CEST	443	49909	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:23.570314884 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.570375919 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.570446014 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.570455074 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.612155914 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.612205029 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.621021032 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:23.787146091 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.787201881 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.787260056 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.787290096 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.787349939 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.788743019 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.789345026 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.789390087 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.789422989 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.789453983 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.789489031 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.789505959 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.789526939 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:23.789699078 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:23.896240950 CEST	443	49902	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:23.900458097 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:23.924407959 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:23.925797939 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:23.930659056 CEST	443	49909	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:23.931020975 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:23.947221994 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.949201107 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:23.979345083 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.979347944 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.979346991 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:23.979376078 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:23.999895096 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:23.999977112 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:24.000176907 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:24.239928961 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.253926039 CEST	443	49907	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.297204018 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.297219992 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.519495010 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.519532919 CEST	443	49907	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.519942999 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.519953966 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.520709038 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.520725965 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.520915031 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.520946980 CEST	443	49909	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.521073103 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.521086931 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.521126986 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.521869898 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.521934032 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.522383928 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.522397995 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.522443056 CEST	443	49909	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.522504091 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.522938013 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.522948027 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.523464918 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.523467064 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.523472071 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.523478985 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.523514032 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.523766994 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.523780107 CEST	443	49902	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.524826050 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.524874926 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.526197910 CEST	443	49907	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.526288033 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.526782036 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.526815891 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.526842117 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.527657032 CEST	443	49902	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.527746916 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.533757925 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.533813953 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.534782887 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.534842014 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.535590887 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.535662889 CEST	443	49909	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.536092997 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.536165953 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.536325932 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.536508083 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.537646055 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.537708998 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.538680077 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.538903952 CEST	443	49907	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.539242983 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.539431095 CEST	443	49902	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.539787054 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.539791107 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.539887905 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.539895058 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.540236950 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.540245056 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.540334940 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.540339947 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.567353964 CEST	49891	443	192.168.2.5	34.96.71.22
Apr 24, 2024 14:22:24.567375898 CEST	443	49891	34.96.71.22	192.168.2.5
Apr 24, 2024 14:22:24.568124056 CEST	49893	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:24.568133116 CEST	443	49893	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:24.568425894 CEST	49892	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:24.568442106 CEST	443	49892	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:24.569247961 CEST	49889	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:24.569263935 CEST	443	49889	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:24.575747967 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.575772047 CEST	443	49909	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.575784922 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.575793028 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.579325914 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.579334021 CEST	443	49902	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.589288950 CEST	49898	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:24.589339972 CEST	443	49898	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:24.590635061 CEST	49895	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:24.590651035 CEST	443	49895	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:24.593911886 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.593911886 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.593915939 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.593939066 CEST	443	49907	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.593970060 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.593972921 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.594969034 CEST	49899	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:24.594985962 CEST	443	49899	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:24.621567011 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.621573925 CEST	49902	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.621576071 CEST	49909	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.637207031 CEST	49907	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.717844009 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.717926025 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.717973948 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.761143923 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.761234045 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:24.761286974 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:24.788853884 CEST	49905	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:24.788865089 CEST	443	49905	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:24.934648037 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957001925 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957012892 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957084894 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.957082033 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957143068 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957165003 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957201958 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957227945 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.957227945 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.957227945 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.957237005 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.957252979 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.961055040 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.961142063 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:24.961194992 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:24.983808041 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.983829021 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.983875036 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.983896017 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:24.983921051 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:24.983942986 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.100572109 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.108038902 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.108056068 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.108114958 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.108141899 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.108154058 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.108181953 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.108191967 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.108221054 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.108253002 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.139298916 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.139316082 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.139338017 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.139348030 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.139400959 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.139413118 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.139457941 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.139478922 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.168334961 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.168344021 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.168391943 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.168411970 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.168418884 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.168463945 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.195229053 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.195245028 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.195300102 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.195306063 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.195349932 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.211150885 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.213654041 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:25.213689089 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:25.213743925 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:25.214369059 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:25.214381933 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:25.218770981 CEST	49903	443	192.168.2.5	68.67.153.60
Apr 24, 2024 14:22:25.218801022 CEST	443	49903	68.67.153.60	192.168.2.5
Apr 24, 2024 14:22:25.220938921 CEST	49904	443	192.168.2.5	18.239.199.124
Apr 24, 2024 14:22:25.220954895 CEST	443	49904	18.239.199.124	192.168.2.5
Apr 24, 2024 14:22:25.270009041 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.270032883 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.270081997 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.270098925 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.270127058 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.270145893 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.290546894 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.290602922 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.290625095 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.290632010 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.290662050 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.313060999 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.313082933 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.313127041 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.313136101 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.313163996 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.333713055 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.333725929 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.333796024 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.333802938 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.355144024 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.355158091 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.355227947 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.355236053 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.375787973 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.375802040 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.375866890 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.375874043 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.391772032 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.391786098 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.391829014 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.391839981 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.391855955 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.391880989 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.409250975 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.409302950 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.409318924 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.409327984 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.409338951 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:25.409359932 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.409384012 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.564162970 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:25.699475050 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:25.995769978 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:25.995806932 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:25.997085094 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:25.997102022 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:25.997143984 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:25.997668028 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:25.997718096 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:25.997776985 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:25.998855114 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:25.998915911 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.002177000 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:26.002192974 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:26.005781889 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.005918026 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:26.006128073 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.006136894 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:26.050487995 CEST	49906	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.050515890 CEST	443	49906	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.176912069 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:26.177000999 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:26.177018881 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.177078962 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.208117962 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.208163023 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.208312035 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.208862066 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.208898067 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.208952904 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.211735010 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.211755991 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.211822987 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.213083029 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.213093996 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.213254929 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.213270903 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.213454008 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.213465929 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.269669056 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.269710064 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.269776106 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.270227909 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.270247936 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.270988941 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.271039963 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.271090984 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.271476984 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.271492004 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.273423910 CEST	49911	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.273446083 CEST	443	49911	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:26.282187939 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.282198906 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.282252073 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.282694101 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.282708883 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.325747967 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:26.326030970 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:26.326062918 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:26.326406002 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:26.326878071 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:26.326945066 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:26.327081919 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:26.372123957 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:26.433640003 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.433676958 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.433737040 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.434012890 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.434031963 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.451343060 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.451353073 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.451406002 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.451584101 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.451598883 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.570818901 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.570908070 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.570979118 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.572257996 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.572293043 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.573100090 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.573126078 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.573174000 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.574700117 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.574712038 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.592514992 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.592767954 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.592783928 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.593118906 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.593370914 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.593389988 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.593857050 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.593908072 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.594429970 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.594492912 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.595577955 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.595675945 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.595731020 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.595737934 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.597237110 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.597477913 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:26.597515106 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:26.597568035 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:26.597954988 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.597954988 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.597974062 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.598023891 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.598109961 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:26.598124981 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:26.598362923 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.598390102 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.599019051 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.599046946 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:26.599100113 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.599287987 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.599299908 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:26.599505901 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.599564075 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.600406885 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.600469112 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.600617886 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.600629091 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.601131916 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:26.601149082 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:26.601191044 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.601208925 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:26.601483107 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:26.601494074 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:26.601703882 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.601738930 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.602849007 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.602997065 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.604584932 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.604674101 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.604698896 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.637264013 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.637599945 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.637631893 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.638000011 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.638338089 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.638432026 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.638462067 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.648128986 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.663182020 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.663213968 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:26.680126905 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.688520908 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.688539982 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.688539982 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.688766003 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.688779116 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:26.701030970 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.701395035 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.701409101 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.702389002 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.702440023 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.704735994 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.704796076 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.704992056 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.704997063 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.728358984 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:26.728414059 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:26.728475094 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:26.728722095 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:26.728738070 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:26.729455948 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:26.729487896 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:26.729540110 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:26.729787111 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:26.729798079 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:26.731852055 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.731877089 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:26.731930971 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.732351065 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:26.732363939 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:26.762947083 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:26.781841993 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.782073021 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.782115936 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.783142090 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.783200979 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.784224987 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.784288883 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.784379959 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.793626070 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:26.793874979 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.802299023 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.802499056 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.802512884 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.803556919 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.803616047 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.804584980 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.804647923 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.804738045 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.832129955 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.852127075 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.865380049 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.865452051 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.865457058 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.865557909 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.866918087 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.866944075 CEST	443	49915	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.866951942 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.866986990 CEST	49915	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.880590916 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.880642891 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.880698919 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.880918026 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:26.880934954 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:26.882910013 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.883197069 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.883261919 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.883613110 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.883961916 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.884037971 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.884116888 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.890655041 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.890980959 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.890993118 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.891801119 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.892390966 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.892451048 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.892520905 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.913760900 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:26.914011955 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.914036989 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:26.915040016 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:26.915107965 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.916385889 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.916448116 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:26.916759014 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.916766882 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:26.921216011 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:26.921430111 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:26.921459913 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:26.922429085 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:26.922491074 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:26.922797918 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:26.922858953 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:26.922987938 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:26.922996044 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:26.924453020 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.924479008 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.940112114 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:26.964242935 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.964307070 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.964447021 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.965612888 CEST	49916	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:26.965630054 CEST	443	49916	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:26.992135048 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:26.992213964 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:26.996115923 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:26.996119022 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:26.996131897 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:26.996175051 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:26.996457100 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.996540070 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:26.996603012 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.997139931 CEST	49920	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:26.997153044 CEST	443	49920	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:27.000436068 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.000489950 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.000576973 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.000608921 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.000643969 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.000683069 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.006320953 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.006439924 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.006505013 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.009232998 CEST	49914	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.009248972 CEST	443	49914	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.027348995 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:27.033793926 CEST	49917	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.033874989 CEST	443	49917	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.047545910 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.047578096 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.047640085 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.048171043 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.048196077 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.048243999 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.048549891 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.048566103 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.048614979 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.049122095 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.049139977 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.049670935 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.049686909 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.050014019 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.050026894 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.080424070 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.080775976 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.080800056 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.082101107 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.082163095 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.082812071 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.082897902 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.082933903 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.083318949 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.083509922 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.083523989 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.084980011 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.085042000 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.085665941 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.085791111 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.085798025 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.088347912 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.088604927 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.088665962 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.091834068 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.091911077 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.092390060 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.092458010 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.092513084 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.124125004 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.125576019 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.125622988 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.125765085 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.125823975 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.125979900 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.126017094 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.126426935 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.126962900 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.126974106 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.128125906 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.136120081 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.143913031 CEST	49918	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.143927097 CEST	443	49918	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.156194925 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.156274080 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.156347036 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.156564951 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.156600952 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.170226097 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.170322895 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.170380116 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.172039032 CEST	49921	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.172058105 CEST	443	49921	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.173181057 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.173207045 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.173271894 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.173626900 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.173640013 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.187412024 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.187489033 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.187508106 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.200609922 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.201421976 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.201522112 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.201549053 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.201572895 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.201597929 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.201618910 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.201632977 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.202107906 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.202137947 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.202276945 CEST	443	49922	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.202295065 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.202323914 CEST	49922	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.205084085 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:27.212260008 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.212285042 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.212342978 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.212584972 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:27.212598085 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.212856054 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.212865114 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.213036060 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.214277983 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:27.214364052 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.214917898 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:27.217869997 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.217884064 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.217920065 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.217933893 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.240495920 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.240540981 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.240608931 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.240642071 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.240691900 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.247364044 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247404099 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247421980 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247437954 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247459888 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.247472048 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247503042 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.247592926 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247634888 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.247639894 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247680902 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.247860909 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.252111912 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:27.260111094 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.260282040 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.267963886 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:27.268052101 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:27.268105030 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:27.282018900 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.282028913 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.283353090 CEST	49926	443	192.168.2.5	18.154.144.27
Apr 24, 2024 14:22:27.283366919 CEST	443	49926	18.154.144.27	192.168.2.5
Apr 24, 2024 14:22:27.285832882 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.285906076 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.287795067 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.287858009 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.287909031 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.293734074 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.294150114 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.294739962 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.294748068 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.296155930 CEST	49923	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.296175957 CEST	443	49923	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.297293901 CEST	49925	443	192.168.2.5	104.19.177.52
Apr 24, 2024 14:22:27.297311068 CEST	443	49925	104.19.177.52	192.168.2.5
Apr 24, 2024 14:22:27.297447920 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.300044060 CEST	49927	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.300059080 CEST	443	49927	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.300673008 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.300694942 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.300781965 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.301107883 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.301120996 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.339399099 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.339457035 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.339515924 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.358633995 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.358669043 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.358827114 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.359066963 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.359078884 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.375355005 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.375591993 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.375617981 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.376054049 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.376457930 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.376564026 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.376564980 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.377155066 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.377331972 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.377392054 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.378555059 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.378639936 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.378925085 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.378998995 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.379012108 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.381628990 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.381853104 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.381864071 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.382065058 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:27.382123947 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:27.382222891 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.382278919 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:27.382344007 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:27.382355928 CEST	443	49900	142.250.101.157	192.168.2.5
Apr 24, 2024 14:22:27.382364988 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:27.382401943 CEST	49900	443	192.168.2.5	142.250.101.157
Apr 24, 2024 14:22:27.383202076 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.383265972 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.383506060 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.384052992 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.384079933 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.384689093 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.384884119 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.384895086 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.399883986 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.400005102 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.400026083 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.400062084 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.400089979 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.400114059 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.400122881 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.400132895 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.400166035 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.400171995 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.400208950 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.411057949 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.411241055 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.422182083 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.422211885 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.422230959 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.422240973 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.422269106 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.424124002 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.424143076 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.424150944 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.425771952 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.425894976 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.425952911 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.433216095 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.433267117 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.433268070 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.433274984 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.433309078 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.444461107 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.444576025 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.444703102 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.444768906 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.444876909 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.464262009 CEST	49949	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:27.464284897 CEST	443	49949	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:27.464476109 CEST	49949	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:27.466188908 CEST	49949	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:27.466201067 CEST	443	49949	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:27.467416048 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.467426062 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.467535019 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.468074083 CEST	49930	443	192.168.2.5	142.250.101.155
Apr 24, 2024 14:22:27.468096972 CEST	443	49930	142.250.101.155	192.168.2.5
Apr 24, 2024 14:22:27.469084024 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.469093084 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.499967098 CEST	49932	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:27.499984980 CEST	443	49932	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:27.502521992 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.502818108 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.502837896 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.504318953 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.504374027 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.504857063 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.504926920 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.505093098 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.505099058 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.510329962 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.510580063 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.510631084 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.512898922 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.513351917 CEST	49928	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.513369083 CEST	443	49928	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.515188932 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.515203953 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.516172886 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.516222954 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.516747952 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.516792059 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.517064095 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.517070055 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.520843983 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.521188974 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.521197081 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.521641970 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.522223949 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.522289038 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.522392988 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.559113026 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.559144020 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.559166908 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.559180975 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.559218884 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.564115047 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.564739943 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.564742088 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.564766884 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.564796925 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.564800978 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.564810038 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.564836979 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.564857960 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:27.575951099 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.576004028 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.584115028 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.584116936 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.584162951 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.584177017 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.586937904 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.586999893 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.587044954 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.587054014 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.587080956 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.590369940 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.590396881 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.590456009 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.591265917 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.591275930 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.591506958 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.591522932 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.593127966 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.593178988 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.598143101 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.598187923 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.598191023 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.598213911 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.599123001 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.609435081 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.609488010 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.613923073 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.615950108 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.616058111 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.616208076 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.616245985 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.616337061 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.616352081 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.616770983 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.617166996 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.617238998 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.617353916 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.618339062 CEST	49934	443	192.168.2.5	104.254.151.60
Apr 24, 2024 14:22:27.618357897 CEST	443	49934	104.254.151.60	192.168.2.5
Apr 24, 2024 14:22:27.620403051 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.620429039 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.620446920 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.620450974 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.620512962 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.623276949 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.623361111 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.631707907 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.631747961 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.631763935 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.631810904 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.642601013 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.642642975 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.648036957 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.648078918 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.658996105 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.659028053 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.659037113 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.659048080 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.659076929 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.660109997 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.670063019 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.670087099 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.670108080 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.670113087 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.670145035 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.672399998 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.672566891 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.672652006 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.672993898 CEST	49931	443	192.168.2.5	18.239.199.12
Apr 24, 2024 14:22:27.673010111 CEST	443	49931	18.239.199.12	192.168.2.5
Apr 24, 2024 14:22:27.680995941 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.681082010 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.692025900 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.692070961 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.692073107 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.692081928 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.692115068 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.695106983 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.696782112 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.699350119 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.699534893 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.699594975 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.699613094 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.699649096 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.700603008 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.701313972 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.701374054 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.701608896 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.701977968 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.701989889 CEST	443	49936	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.702091932 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.702100039 CEST	49936	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.705070019 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.705121040 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.705132008 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.705223083 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.706551075 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.706582069 CEST	443	49937	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.706660986 CEST	49937	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.718175888 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.718221903 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.718226910 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.718491077 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.718667984 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.718674898 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.719178915 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.719187975 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.719198942 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.719209909 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.719216108 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.719228029 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.719244957 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.719261885 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.719269991 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.719290972 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.719393015 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.719455004 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.720458984 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.720520973 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.721697092 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.721791983 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.721954107 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.721959114 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:27.722428083 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.722471952 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.722476959 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.730443954 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.730494022 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.730495930 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.730504990 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.730540037 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.730590105 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.731545925 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.731554985 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.732610941 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.732665062 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.732925892 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.733057976 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.733061075 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.733285904 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.733324051 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.733381033 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.733414888 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.733438969 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.733513117 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.733527899 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.733536005 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.738203049 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.738234043 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.738250017 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.738254070 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.738305092 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.745326996 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.745352983 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.745369911 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.745379925 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.745408058 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.746241093 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.746248960 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.746263981 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.746269941 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.746274948 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.746294975 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.746294975 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.746315002 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.746337891 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.750716925 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.750757933 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.750766039 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.750791073 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.750823021 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.751000881 CEST	49938	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.751012087 CEST	443	49938	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.752675056 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.752741098 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.759815931 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.759874105 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.759882927 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.759917021 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.760488033 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.760523081 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.760601044 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.761265039 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.761276007 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.761684895 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.761712074 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.761825085 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.762058020 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:27.762068033 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:27.767007113 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.767074108 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.767077923 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.767086029 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.767119884 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.767595053 CEST	49913	443	192.168.2.5	31.13.70.7
Apr 24, 2024 14:22:27.767605066 CEST	443	49913	31.13.70.7	192.168.2.5
Apr 24, 2024 14:22:27.775687933 CEST	443	49949	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:27.775912046 CEST	49949	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:27.775923014 CEST	443	49949	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:27.776258945 CEST	443	49949	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:27.776853085 CEST	49949	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:27.776911974 CEST	443	49949	104.19.178.52	192.168.2.5
Apr 24, 2024 14:22:27.777136087 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.777153015 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.777237892 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.777875900 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:27.777883053 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:27.787034988 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:27.787041903 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:27.787122011 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:27.787354946 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:27.787364006 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:27.813744068 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.813945055 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.813951969 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.814821959 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.814872026 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.815270901 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.815310001 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.815395117 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.856122017 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.873586893 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.873671055 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.873826027 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.875538111 CEST	49940	443	192.168.2.5	74.125.137.103
Apr 24, 2024 14:22:27.875551939 CEST	443	49940	74.125.137.103	192.168.2.5
Apr 24, 2024 14:22:27.878350019 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.878442049 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.878767014 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.879211903 CEST	49939	443	192.168.2.5	104.244.42.69
Apr 24, 2024 14:22:27.879226923 CEST	443	49939	104.244.42.69	192.168.2.5
Apr 24, 2024 14:22:27.887520075 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:27.887522936 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.887532949 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.920420885 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.920516014 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.920782089 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.921981096 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.921988964 CEST	443	49941	35.244.154.8	192.168.2.5
Apr 24, 2024 14:22:27.922014952 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.922035933 CEST	49941	443	192.168.2.5	35.244.154.8
Apr 24, 2024 14:22:27.933500051 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.933516979 CEST	49949	443	192.168.2.5	104.19.178.52
Apr 24, 2024 14:22:27.944906950 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.945149899 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.945158958 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.945534945 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.945872068 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.945939064 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.946119070 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:27.965352058 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.965408087 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.965594053 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.966950893 CEST	49942	443	192.168.2.5	104.244.42.195
Apr 24, 2024 14:22:27.966964960 CEST	443	49942	104.244.42.195	192.168.2.5
Apr 24, 2024 14:22:27.988166094 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:27.990075111 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.990130901 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.990251064 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.991208076 CEST	49944	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:27.991250038 CEST	443	49944	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:27.994820118 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.075351954 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.075530052 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.075608015 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.075809002 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.075834990 CEST	443	49945	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.075846910 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.075922012 CEST	49945	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.083256006 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.083302975 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.083426952 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.083626986 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.083647966 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.087748051 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.088036060 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.088057041 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.088573933 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.089158058 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.089247942 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.089301109 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.092288017 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.092518091 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.092530012 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.093961000 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.094017982 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.094366074 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.094448090 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.094685078 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.094693899 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.136111021 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.148093939 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.148603916 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:28.148617029 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.149756908 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.149832010 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:28.151751041 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:28.151822090 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.152793884 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.152832031 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.152905941 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.153099060 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:28.153110027 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.153578043 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.153592110 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.195655107 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.206119061 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.206427097 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.206504107 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.206621885 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.206949949 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:28.206964970 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.207058907 CEST	49950	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.207076073 CEST	443	49950	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.208045006 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.208120108 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:28.208607912 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:28.208682060 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.208873987 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:28.208882093 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.234683990 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.234761953 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:28.283520937 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.283559084 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.283668995 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.283879995 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.283893108 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.296333075 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:28.337213993 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.337270021 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.337296009 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.337323904 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.337363005 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.337512016 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.337893009 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.347812891 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.347951889 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.348020077 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.348670006 CEST	49946	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.348689079 CEST	443	49946	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.349070072 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.349122047 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.349148989 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.351757050 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.351787090 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.351854086 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.352128029 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.352144957 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.356748104 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.356811047 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.356829882 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.368715048 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.368771076 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.368794918 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.408262968 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.419017076 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.419233084 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.419272900 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.420933962 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.421014071 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.422734022 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.422822952 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.422976971 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.430432081 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.430444002 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.430474997 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.430488110 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.430493116 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.430502892 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.430516958 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.430540085 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.430540085 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.430568933 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.430569887 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.434398890 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.434469938 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.434489965 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.434526920 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.434530973 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.434551001 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.434561014 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.434571981 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.434581041 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.434601068 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.434604883 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.434619904 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.434655905 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.435607910 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.435621977 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.443766117 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.443798065 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.443834066 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.443845987 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.443862915 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.443866014 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.443907976 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.444173098 CEST	49953	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.444190979 CEST	443	49953	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.448208094 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.448231936 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.448373079 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.448673010 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.448684931 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.461041927 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.461066961 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.461112976 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.461132050 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.461157084 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.461169004 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.461178064 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.461201906 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.467740059 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.467947960 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.467961073 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.468126059 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.468935966 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.468995094 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.469295025 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.469352961 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.469422102 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.469835043 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.469902039 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.469913006 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.470020056 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.470060110 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.470072031 CEST	443	49954	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.470079899 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.470098019 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.470114946 CEST	49954	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.474405050 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.474504948 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.474662066 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.475059032 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.475099087 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.507498026 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.507539034 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.507559061 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.507584095 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.507805109 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.513325930 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.513428926 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.513482094 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.516119957 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.524383068 CEST	49952	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.524399996 CEST	443	49952	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.622179031 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.622212887 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.633780956 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.633928061 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.633999109 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:28.634758949 CEST	49955	443	192.168.2.5	34.233.102.171
Apr 24, 2024 14:22:28.634782076 CEST	443	49955	34.233.102.171	192.168.2.5
Apr 24, 2024 14:22:28.646143913 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.646380901 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.646399975 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.646475077 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.646648884 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.646689892 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:28.647068024 CEST	49957	443	192.168.2.5	18.244.214.96
Apr 24, 2024 14:22:28.647089005 CEST	443	49957	18.244.214.96	192.168.2.5
Apr 24, 2024 14:22:28.647617102 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.648135900 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.648303032 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.648303032 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.648425102 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:28.676126957 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.676187038 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.697057009 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.697357893 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.697390079 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.697789907 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.698218107 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.698292017 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.698379040 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:28.732702017 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.732714891 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:28.744119883 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:28.774152040 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.774439096 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.774458885 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.774945021 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.775332928 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.775417089 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.775773048 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.796541929 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.796632051 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.796792984 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.797461987 CEST	49959	443	192.168.2.5	216.137.39.63
Apr 24, 2024 14:22:28.797482014 CEST	443	49959	216.137.39.63	192.168.2.5
Apr 24, 2024 14:22:28.799619913 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.800043106 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.800126076 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.800535917 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.800869942 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.800954103 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.801026106 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:28.804590940 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:28.804630995 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:28.804697037 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:28.804805040 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:28.804838896 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:28.805041075 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:28.805072069 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:28.805088043 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:28.805231094 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:28.805243969 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:28.820127964 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.822460890 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:28.822524071 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:28.822766066 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:28.822956085 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:28.822992086 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:28.844125032 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:28.847837925 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.847909927 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.848042965 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.848963976 CEST	49960	443	192.168.2.5	104.18.36.155
Apr 24, 2024 14:22:28.848978996 CEST	443	49960	104.18.36.155	192.168.2.5
Apr 24, 2024 14:22:28.963987112 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:28.964025021 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:28.964111090 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:28.964374065 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:28.964382887 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.001316071 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:29.001616001 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:29.001900911 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:29.001930952 CEST	443	49961	142.250.141.138	192.168.2.5
Apr 24, 2024 14:22:29.001944065 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:29.001985073 CEST	49961	443	192.168.2.5	142.250.141.138
Apr 24, 2024 14:22:29.088876963 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.088996887 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.089050055 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.089728117 CEST	49962	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.089745045 CEST	443	49962	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.094549894 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.117018938 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.117047071 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.117085934 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.117099047 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.117144108 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.117167950 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.120731115 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.120803118 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.120857954 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.121473074 CEST	49964	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.121494055 CEST	443	49964	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.126905918 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.127330065 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.127357006 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.127877951 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.127907991 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.127985954 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.128345013 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.128355980 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.128698111 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.128753901 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.129981995 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.130049944 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.130171061 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.131405115 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.131584883 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.131603003 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.133126974 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.133189917 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.133491039 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.133562088 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.133585930 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.143654108 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.143692970 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.143726110 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.143729925 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.143759012 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.143771887 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.143982887 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.144093990 CEST	49963	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.144108057 CEST	443	49963	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.147938967 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.147967100 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.148025036 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.148344994 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.148356915 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.169936895 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.169946909 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.176142931 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.176348925 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.176378965 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.177869081 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.177943945 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.178272963 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.178354979 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.178381920 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.180121899 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.186577082 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.186588049 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.217246056 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.224123955 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.232624054 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.232641935 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.279056072 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.288259983 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.288480997 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.288499117 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.289598942 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.289680004 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.290396929 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.290462017 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.290546894 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.295835018 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.309611082 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.309648037 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:29.309724092 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.310019970 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.310036898 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:29.330523014 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.330540895 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.361361027 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.361393929 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.361474037 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.361859083 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.361896992 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.361987114 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.362282991 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.362303972 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.362360954 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.362953901 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.362993956 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.363123894 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.366374969 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.366396904 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.369801044 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.369816065 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.370193005 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.370209932 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.370574951 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.370589018 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.371973038 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.446027994 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.446113110 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.446196079 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.452764034 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.469842911 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.469858885 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.470343113 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.470698118 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.470760107 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.471164942 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.471710920 CEST	49968	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.471741915 CEST	443	49968	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.473809958 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.474323988 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.474343061 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.474842072 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.475250959 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.475334883 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.475398064 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.498686075 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.498714924 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.498795986 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.499274969 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.499291897 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.503647089 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.503674984 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.503765106 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.504131079 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.504143953 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.512132883 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.520118952 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.524981976 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.525100946 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.525199890 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.525223970 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.525341034 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.525399923 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.525408030 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.525662899 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.525718927 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.526887894 CEST	49969	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.526901960 CEST	443	49969	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.654841900 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:29.655066967 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.655097008 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:29.656115055 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:29.656189919 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.656505108 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.656573057 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:29.656656981 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.656666040 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:29.667431116 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.667463064 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.667581081 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.668344021 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.668375969 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.668534994 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.669893980 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.669909000 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.670156002 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:29.670176983 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.673094034 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.673377991 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.673423052 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.693974018 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.694456100 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.694479942 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.696010113 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.696078062 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.696223974 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.696592093 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.696729898 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.696923018 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.696930885 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.697220087 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.697237015 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.697905064 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:29.698925972 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.698990107 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.699847937 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.699978113 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.699978113 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.701803923 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.702148914 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.702168941 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.703619957 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.703685045 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.704118013 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.704293013 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.704339981 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.704504967 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.704511881 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.704632044 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.704648972 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.705660105 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.705729961 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.706022978 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.706079960 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.706130028 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.712613106 CEST	49971	443	192.168.2.5	216.137.39.37
Apr 24, 2024 14:22:29.712636948 CEST	443	49971	216.137.39.37	192.168.2.5
Apr 24, 2024 14:22:29.737482071 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.740134001 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.748131037 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.752798080 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.752796888 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.752810955 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.752815008 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.752820969 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.756844997 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:29.756884098 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:29.757033110 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:29.757229090 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:29.757241964 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:29.793881893 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.795872927 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.795902014 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.795917034 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.795977116 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.795989037 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.796025991 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.799454927 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.799468040 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.799670935 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.799873114 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.799990892 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.800889015 CEST	49970	443	192.168.2.5	18.244.214.75
Apr 24, 2024 14:22:29.800908089 CEST	443	49970	18.244.214.75	192.168.2.5
Apr 24, 2024 14:22:29.816289902 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.816314936 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.816359043 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.816376925 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.816425085 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.816431999 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.816457987 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.816504955 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.817265034 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.817279100 CEST	443	49973	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.817351103 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.817372084 CEST	49973	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.819092989 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.819123030 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.819258928 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.820055008 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.820064068 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.822798014 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.822822094 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.822863102 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.822870016 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.822902918 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.822920084 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.827064991 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.827141047 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.827203035 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.827303886 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.827316046 CEST	443	49972	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.827327967 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.827404976 CEST	49972	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.830394030 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.830416918 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.830462933 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.830745935 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:29.830754042 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:29.848803043 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.848926067 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.849106073 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.849123001 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.849365950 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.849390984 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.849483013 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.849895954 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.849917889 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.849982977 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.850507021 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.850584984 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.850732088 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.850864887 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.850895882 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.850996017 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.851037979 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.851083040 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.851150036 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:29.851155996 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:29.994255066 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:29.995798111 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.000432968 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.000473976 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.000504971 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.000549078 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:30.000575066 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.000624895 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:30.000633001 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.007961035 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.007999897 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.008187056 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.008199930 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.009556055 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.009627104 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.010648966 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.010713100 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.012224913 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.012268066 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.012307882 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:30.012319088 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.012358904 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:30.013784885 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.023938894 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.025228977 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.025485039 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.026185989 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.026356936 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.026560068 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.026582956 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.027035952 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.027057886 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.035763025 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.035881042 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.035986900 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:30.035986900 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:30.036248922 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.036261082 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.036273956 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.036320925 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.036358118 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.036376953 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.036389112 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.036420107 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.036959887 CEST	49974	443	192.168.2.5	35.201.112.186
Apr 24, 2024 14:22:30.036988020 CEST	443	49974	35.201.112.186	192.168.2.5
Apr 24, 2024 14:22:30.040266037 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.040303946 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.040316105 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.040355921 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.040365934 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.040395021 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.040397882 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.040426016 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.040441036 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.040441036 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.040465117 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.044430971 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.044475079 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.044514894 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.044527054 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.044539928 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.044537067 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.044604063 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.044639111 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.044639111 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.044689894 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.048648119 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.048679113 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.048691034 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.048718929 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.048729897 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.048760891 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.048763990 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.048785925 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.048801899 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.048801899 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.048823118 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.054276943 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.054373026 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.054409981 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.054483891 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.054497004 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.054786921 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.056353092 CEST	49977	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.056391001 CEST	443	49977	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.066963911 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.067022085 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.067050934 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.067074060 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.067094088 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.067112923 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.069385052 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.069449902 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.069516897 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.070197105 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.070220947 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.071353912 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.071409941 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.071448088 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.071463108 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.071512938 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.071512938 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.074814081 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.074820995 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.075634003 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.075691938 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.075728893 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.075738907 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.075773001 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.134490967 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.136570930 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.136583090 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.136967897 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.145443916 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.151664019 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.151772022 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.152834892 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.152854919 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.153440952 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.153769970 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.154201031 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.154278040 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.154668093 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.155267954 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.156569958 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.156584024 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.156930923 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.158138990 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.158194065 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.158741951 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.188812017 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.188843966 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.188895941 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.188913107 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.188941956 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.188958883 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.193011999 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.193048000 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.193100929 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.193166971 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.193202972 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.193224907 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.197208881 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.197237015 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.197295904 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.197318077 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.197339058 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.197355986 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.200119019 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.200129032 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.204109907 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.220175028 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.220205069 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.220280886 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.220303059 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.220328093 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.220371962 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.224342108 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.224405050 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.224440098 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.224456072 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.224482059 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.224498987 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.228480101 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.228499889 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.228601933 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.228617907 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.228710890 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.228785038 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.228853941 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.228863001 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.228895903 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.228948116 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.228991032 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.240205050 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.240240097 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.240274906 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.240315914 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.240320921 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.240415096 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.257601976 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.257625103 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.257699013 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.257709980 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.257750988 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.266542912 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.266664028 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.266747952 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:30.275558949 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.275597095 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.275626898 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.275635004 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.275681019 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.310080051 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.310194016 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.310265064 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:30.313486099 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.313652992 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.313730955 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.315109015 CEST	49987	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:30.315135956 CEST	443	49987	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.316804886 CEST	49988	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:30.316848993 CEST	443	49988	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.320492029 CEST	49978	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.320508957 CEST	443	49978	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.322770119 CEST	49980	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.322784901 CEST	443	49980	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.325294971 CEST	49979	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.325304031 CEST	443	49979	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.336946964 CEST	49989	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.336961031 CEST	443	49989	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.350295067 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.350318909 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.350410938 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.350980997 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.350999117 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.353540897 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.353625059 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.353780985 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.353965044 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.354003906 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.357404947 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.357428074 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.357522011 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.359936953 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.359963894 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.394753933 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.398200989 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.398300886 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.398416042 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.398500919 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.398514032 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.398528099 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.398566961 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.428577900 CEST	49990	443	192.168.2.5	31.13.70.36
Apr 24, 2024 14:22:30.428592920 CEST	443	49990	31.13.70.36	192.168.2.5
Apr 24, 2024 14:22:30.429156065 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.429176092 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.430471897 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.430545092 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.442481995 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.442646027 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.465893984 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.466712952 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.466731071 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.488008976 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.488049030 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.488080978 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.488115072 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.488142967 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.488166094 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.498769045 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.498795986 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.498814106 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.498846054 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.498858929 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.498918056 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.501408100 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.501472950 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.501492977 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.501514912 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.501555920 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.509172916 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.509614944 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.509696007 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.509809971 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.525538921 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.525563002 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.525614023 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.525620937 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.525675058 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.534962893 CEST	49992	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.534975052 CEST	443	49992	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.539738894 CEST	49991	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.539746046 CEST	443	49991	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.589668036 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.589713097 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.589792967 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.590404034 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.590419054 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.647124052 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.647151947 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.647229910 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.647241116 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.647281885 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.673888922 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.673984051 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.673990011 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.674022913 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.674037933 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.674056053 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.674087048 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.675544024 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.682909966 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.686274052 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.707550049 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:30.707603931 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:30.707685947 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:30.707788944 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.707855940 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.708123922 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.708142042 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.708622932 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.708647966 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.709094048 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.709111929 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.709183931 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.709470034 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.709722996 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.709804058 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.710248947 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.710458040 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.710694075 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:30.710712910 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:30.711055994 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.711083889 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.711148977 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.711627960 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.711817026 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.711963892 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.714395046 CEST	49993	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.714411020 CEST	443	49993	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.714736938 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.734435081 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.734456062 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.734523058 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.734846115 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.734859943 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.735928059 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:30.735954046 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:30.736119032 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:30.736643076 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:30.736656904 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:30.737138033 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.737148046 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.737169981 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.737175941 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.737179041 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.737212896 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.737238884 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.737265110 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.737272024 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.737291098 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.752154112 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.756127119 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.763144016 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.764203072 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.764254093 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.764264107 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.764283895 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.764300108 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.764326096 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.764353991 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.810620070 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.848649025 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:30.848673105 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.848839998 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:30.852247000 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:30.852257967 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:30.854195118 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.854204893 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.854368925 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.854882002 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:30.854890108 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:30.889343977 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.889358044 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.889389992 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.889400959 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.889478922 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.889513969 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.889534950 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.889549017 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.914629936 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.916160107 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.916177034 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.916203976 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.916251898 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.916280031 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.916304111 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.920012951 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.920043945 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.920429945 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.945045948 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.945070982 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.945121050 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.945137978 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.945179939 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.967540026 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.971896887 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.971909046 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.971960068 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.971971989 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.971988916 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.972027063 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.991766930 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.991961002 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:30.993347883 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:30.995949030 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.013900995 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.013933897 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.013967991 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.013978958 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.014018059 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.014040947 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.014081001 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.024842978 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.024933100 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.024952888 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.024986982 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.025006056 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.025011063 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.025064945 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.025104046 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.025104046 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.025213957 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.025263071 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.026344061 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.026406050 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.026451111 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.026514053 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.026541948 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.026568890 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.026596069 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.030495882 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.030572891 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.030591965 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.030627012 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.030677080 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.040132046 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.045289993 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.045335054 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.045358896 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.045383930 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.045434952 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.052659988 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.055577040 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.066694975 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.075360060 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:31.075376034 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.075818062 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.081176043 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:31.081192017 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.082525015 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.086844921 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.086859941 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.088155985 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.090730906 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:31.090826988 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.093483925 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:31.093643904 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.094650984 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.094826937 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.097219944 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:31.097356081 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:31.097368956 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.097534895 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:31.100044012 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.140157938 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.144113064 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.159837008 CEST	49994	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.159843922 CEST	443	49994	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.166054964 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.166140079 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.166260958 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.166488886 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.166522980 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.170684099 CEST	50000	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.170713902 CEST	443	50000	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.171830893 CEST	49998	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.171849966 CEST	443	49998	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.172811985 CEST	49999	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.172827005 CEST	443	49999	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.173870087 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.173887014 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.174160004 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.174385071 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.174395084 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.198247910 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.198451042 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.198465109 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.198795080 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.199182034 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.199240923 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.199368000 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.231918097 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:31.232155085 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:31.232167006 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:31.232522964 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:31.233073950 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:31.233160019 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:31.233269930 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:31.234858990 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.240125895 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.257261992 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.257270098 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.257281065 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.257343054 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.257363081 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.257415056 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.276144981 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:31.284132957 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.284152031 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.284230947 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.284241915 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.332154989 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.408139944 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408149004 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408188105 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408205986 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408221006 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.408233881 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408272982 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.408308029 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.408787012 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408860922 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408905029 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408936977 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.408951998 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.408977032 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.408993959 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.413662910 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.413743019 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.413863897 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:31.414366007 CEST	50007	443	192.168.2.5	172.64.155.119
Apr 24, 2024 14:22:31.414377928 CEST	443	50007	172.64.155.119	192.168.2.5
Apr 24, 2024 14:22:31.435054064 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.435097933 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.435142994 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.435146093 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.435195923 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.435209036 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.435409069 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.435453892 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.435483932 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.435492992 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.435522079 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.435539007 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.461016893 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.461097002 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.461148977 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:31.461513042 CEST	50005	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:31.461535931 CEST	443	50005	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:31.464194059 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.464225054 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.464287996 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.464318037 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.464333057 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.468549013 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.468610048 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.468616009 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.468650103 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.468661070 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.468710899 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.468892097 CEST	50002	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.468907118 CEST	443	50002	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.492525101 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.492917061 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.492966890 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.493345976 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.493843079 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.493926048 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.493990898 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.499638081 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.499851942 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.499866962 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.500226021 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.500536919 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.500588894 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.500777960 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.536155939 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.542133093 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.544114113 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.557147026 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.557215929 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.557239056 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.557255030 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.557292938 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.557306051 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.588495970 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.588546038 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.588613987 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.588634968 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.588661909 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.588673115 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.591590881 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.591715097 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.591768026 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.607014894 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:31.607086897 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:31.607147932 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:31.617366076 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.617403030 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.617465973 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.617475033 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.617516994 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.652050018 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.652116060 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.652132988 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.652141094 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.652187109 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.652189016 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.655127048 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.710192919 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.710232019 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.710400105 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.710839987 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.710855961 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.812855005 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.818022966 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.818052053 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.818226099 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.818608999 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.818622112 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.819658041 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.819703102 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.819824934 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.821820974 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.821885109 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.821950912 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.823214054 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.823244095 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.823688984 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:31.823714018 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:31.835119009 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.835130930 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.835144997 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.835238934 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.835264921 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.835324049 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.843020916 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.843049049 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.843070030 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.843172073 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.843209028 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.843271971 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.861993074 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.862001896 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.862067938 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.862093925 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.862121105 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.862153053 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.862200022 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.869971037 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.869993925 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.870055914 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.870136976 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.870176077 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.870269060 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.982650995 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.982692957 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.982731104 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.982748032 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.982820034 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.986017942 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.986042023 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.986133099 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.986213923 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.986285925 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.994914055 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.994992971 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:31.994999886 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:31.995049000 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:32.054338932 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.107063055 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.165163040 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.170967102 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.171241999 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.205122948 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.220355034 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.220354080 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.435225964 CEST	50006	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:32.435260057 CEST	443	50006	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:32.436805010 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:32.436865091 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:32.436934948 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:32.438155890 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.438194990 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.438471079 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.438499928 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.438734055 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.438868046 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.438894033 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.439013958 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.439023972 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.439044952 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.440076113 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.440134048 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.440324068 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.440377951 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.443917036 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:32.443949938 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:32.445357084 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.445456028 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.446304083 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.446387053 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.447547913 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.447662115 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.448091030 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.448251963 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.451329947 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.451366901 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.451389074 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.451651096 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.451742887 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.451761007 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.452594995 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.452614069 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.452862024 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.452894926 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.453108072 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.453139067 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.453300953 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.496124983 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.874103069 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.874191999 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.874244928 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.876626968 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.876738071 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.876810074 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.877299070 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.877378941 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.877432108 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.880146027 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.880206108 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.880251884 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.887619019 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:32.935173035 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:32.938028097 CEST	50008	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.938057899 CEST	443	50008	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.938638926 CEST	50009	443	192.168.2.5	35.81.127.23
Apr 24, 2024 14:22:32.938648939 CEST	443	50009	35.81.127.23	192.168.2.5
Apr 24, 2024 14:22:32.941137075 CEST	50013	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.941155910 CEST	443	50013	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.944315910 CEST	50014	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.944350004 CEST	443	50014	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.954817057 CEST	50015	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.954845905 CEST	443	50015	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.956037998 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:32.956048965 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:32.956619978 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:32.957221031 CEST	50012	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:32.957235098 CEST	443	50012	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:32.958502054 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:32.958578110 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:32.959220886 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:32.959254026 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:32.982127905 CEST	50010	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:32.982146025 CEST	443	50010	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:32.983916044 CEST	50011	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:32.983941078 CEST	443	50011	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:33.340904951 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:33.341142893 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:33.341202974 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:33.341892004 CEST	50016	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:33.341907978 CEST	443	50016	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:33.605062962 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:33.605099916 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:33.605201006 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:33.655391932 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:33.655414104 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:33.744030952 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:33.744079113 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:33.744136095 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:33.782020092 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:33.782064915 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:33.782218933 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:33.817145109 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:33.817186117 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:33.817296982 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:33.896445036 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:33.896467924 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:33.897052050 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:33.897066116 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:33.927021027 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:33.927053928 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.007891893 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.019124031 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:34.019135952 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.019884109 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.030668020 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:34.030668020 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:34.030687094 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.030749083 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.030781984 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:34.076109886 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.183403969 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:34.251904964 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.315129995 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:34.315157890 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.315629959 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.325500965 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:34.325500965 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:34.325526953 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.325601101 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.328485012 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.329900026 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.329911947 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.330265045 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.357517004 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.370779991 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:34.370894909 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.400516033 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.400520086 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.400538921 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.400657892 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.401027918 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.401081085 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.401567936 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.401638985 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.403186083 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.414412022 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.414499044 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.415453911 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:34.422354937 CEST	50018	443	192.168.2.5	34.111.140.246
Apr 24, 2024 14:22:34.422396898 CEST	443	50018	34.111.140.246	192.168.2.5
Apr 24, 2024 14:22:34.444128990 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.448115110 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.452533007 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:34.452563047 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:34.452691078 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:34.455095053 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:34.455108881 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:34.547086000 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.561853886 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.611840963 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.611934900 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.612097025 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:34.639137030 CEST	50022	443	192.168.2.5	142.250.141.103
Apr 24, 2024 14:22:34.639158964 CEST	443	50022	142.250.141.103	192.168.2.5
Apr 24, 2024 14:22:34.643275976 CEST	50026	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:34.643309116 CEST	443	50026	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:34.643544912 CEST	50026	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:34.643979073 CEST	50026	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:34.643990993 CEST	443	50026	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:34.745759964 CEST	50027	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:34.745788097 CEST	443	50027	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:34.745917082 CEST	50027	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:34.747092962 CEST	50027	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:34.747101068 CEST	443	50027	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:34.756994963 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.757070065 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.758600950 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.761954069 CEST	50021	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.761975050 CEST	443	50021	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.786107063 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.786132097 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.786226034 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.786241055 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:34.786336899 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:34.800249100 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:34.803359032 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:34.803378105 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:34.803744078 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:34.804517984 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:34.804593086 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:34.811578035 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:34.856126070 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:34.998152971 CEST	443	50026	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:34.998420000 CEST	50026	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:34.998435974 CEST	443	50026	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:34.999006033 CEST	443	50026	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:34.999721050 CEST	50026	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:34.999825954 CEST	443	50026	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:34.999877930 CEST	50026	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:35.000540018 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:35.000556946 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:35.000587940 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:35.000598907 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:35.000616074 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:35.000619888 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:35.000648022 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:35.000670910 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:35.000679016 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:35.000725031 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:35.001108885 CEST	50019	443	192.168.2.5	3.225.21.46
Apr 24, 2024 14:22:35.001121998 CEST	443	50019	3.225.21.46	192.168.2.5
Apr 24, 2024 14:22:35.004085064 CEST	50028	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:35.004122019 CEST	443	50028	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:35.004259109 CEST	50028	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:35.004618883 CEST	50028	443	192.168.2.5	146.75.92.157
Apr 24, 2024 14:22:35.004627943 CEST	443	50028	146.75.92.157	192.168.2.5
Apr 24, 2024 14:22:35.044118881 CEST	443	50026	142.251.2.156	192.168.2.5
Apr 24, 2024 14:22:35.057588100 CEST	443	50027	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:35.058075905 CEST	50027	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:35.058089018 CEST	443	50027	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:35.058423996 CEST	443	50027	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:35.058871984 CEST	50027	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:35.058924913 CEST	443	50027	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:35.059545040 CEST	50027	443	192.168.2.5	104.18.32.137
Apr 24, 2024 14:22:35.104118109 CEST	443	50027	104.18.32.137	192.168.2.5
Apr 24, 2024 14:22:35.171457052 CEST	50026	443	192.168.2.5	142.251.2.156
Apr 24, 2024 14:22:35.188561916 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.188640118 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.188688993 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.189054012 CEST	50023	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.189064980 CEST	443	50023	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.232919931 CEST	50029	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.232953072 CEST	443	50029	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.233057976 CEST	50029	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.234708071 CEST	50029	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.234729052 CEST	443	50029	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.243699074 CEST	50030	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.243724108 CEST	443	50030	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.243833065 CEST	50030	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.244268894 CEST	50030	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.244281054 CEST	443	50030	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.245153904 CEST	50031	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.245239973 CEST	443	50031	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.245321989 CEST	50031	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.245682955 CEST	50031	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.245717049 CEST	443	50031	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.257102966 CEST	50032	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.257110119 CEST	443	50032	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.257177114 CEST	50032	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.257447958 CEST	50032	443	192.168.2.5	35.186.194.58
Apr 24, 2024 14:22:35.257457018 CEST	443	50032	35.186.194.58	192.168.2.5
Apr 24, 2024 14:22:35.259738922 CEST	50033	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.259768009 CEST	443	50033	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.259820938 CEST	50033	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.260241032 CEST	50033	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.260251045 CEST	443	50033	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.283687115 CEST	50034	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.283704042 CEST	443	50034	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.283755064 CEST	50034	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.284486055 CEST	50034	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.284497976 CEST	443	50034	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.285942078 CEST	50035	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:35.285965919 CEST	443	50035	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:35.286179066 CEST	50035	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:35.286665916 CEST	50035	443	192.168.2.5	192.29.14.118
Apr 24, 2024 14:22:35.286675930 CEST	443	50035	192.29.14.118	192.168.2.5
Apr 24, 2024 14:22:35.291414022 CEST	50036	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.291465998 CEST	443	50036	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.291527033 CEST	50036	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.291908026 CEST	50036	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.291939974 CEST	443	50036	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.292676926 CEST	50037	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.292691946 CEST	443	50037	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.292767048 CEST	50037	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.293198109 CEST	50037	443	192.168.2.5	18.65.25.102
Apr 24, 2024 14:22:35.293207884 CEST	443	50037	18.65.25.102	192.168.2.5
Apr 24, 2024 14:22:35.301078081 CEST	50039	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.301085949 CEST	443	50039	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.301214933 CEST	50039	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.301580906 CEST	50039	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.301590919 CEST	443	50039	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.302267075 CEST	50040	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.302292109 CEST	443	50040	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.302341938 CEST	50040	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.302826881 CEST	50040	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.302844048 CEST	443	50040	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.303570986 CEST	50041	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.303639889 CEST	443	50041	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.303725004 CEST	50041	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.304173946 CEST	50041	443	192.168.2.5	54.67.4.46
Apr 24, 2024 14:22:35.304208040 CEST	443	50041	54.67.4.46	192.168.2.5
Apr 24, 2024 14:22:35.304725885 CEST	50042	443	192.168.2.5	54.67.4.46

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 24, 2024 14:21:40.112535954 CEST	192.168.2.5	1.1.1.1	0x83de	Standard query (0)	eu.docusign.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:40.112679958 CEST	192.168.2.5	1.1.1.1	0x743d	Standard query (0)	eu.docusign.net	65	IN (0x0001)	false
Apr 24, 2024 14:21:42.628175974 CEST	192.168.2.5	1.1.1.1	0xaa96	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:42.628439903 CEST	192.168.2.5	1.1.1.1	0x3299	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:21:44.149947882 CEST	192.168.2.5	1.1.1.1	0x9a6b	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:44.150784016 CEST	192.168.2.5	1.1.1.1	0x260d	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Apr 24, 2024 14:21:44.154201984 CEST	192.168.2.5	1.1.1.1	0x9de8	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:44.173312902 CEST	192.168.2.5	1.1.1.1	0x9453	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:21:45.521444082 CEST	192.168.2.5	1.1.1.1	0x61cc	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:45.521859884 CEST	192.168.2.5	1.1.1.1	0xc182	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Apr 24, 2024 14:21:45.837930918 CEST	192.168.2.5	1.1.1.1	0x1ad2	Standard query (0)	docucdn-a.akamaihd.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:45.838299036 CEST	192.168.2.5	1.1.1.1	0x9279	Standard query (0)	docucdn-a.akamaihd.net	65	IN (0x0001)	false
Apr 24, 2024 14:21:46.440722942 CEST	192.168.2.5	1.1.1.1	0x7cac	Standard query (0)	api.mixpanel.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:46.441200972 CEST	192.168.2.5	1.1.1.1	0x504a	Standard query (0)	api.mixpanel.com	65	IN (0x0001)	false
Apr 24, 2024 14:21:53.381489992 CEST	192.168.2.5	1.1.1.1	0x2b58	Standard query (0)	eu.docusign.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:53.381735086 CEST	192.168.2.5	1.1.1.1	0xac7a	Standard query (0)	eu.docusign.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:07.880274057 CEST	192.168.2.5	1.1.1.1	0x9293	Standard query (0)	www.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:07.880569935 CEST	192.168.2.5	1.1.1.1	0x6361	Standard query (0)	www.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:09.559374094 CEST	192.168.2.5	1.1.1.1	0xed32	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:09.559673071 CEST	192.168.2.5	1.1.1.1	0xa2f8	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:12.734481096 CEST	192.168.2.5	1.1.1.1	0x4404	Standard query (0)	images.ctfassets.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:12.734621048 CEST	192.168.2.5	1.1.1.1	0x1d6f	Standard query (0)	images.ctfassets.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:13.641136885 CEST	192.168.2.5	1.1.1.1	0x7319	Standard query (0)	cdn.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:13.641259909 CEST	192.168.2.5	1.1.1.1	0xc4a5	Standard query (0)	cdn.optimizely.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:15.829058886 CEST	192.168.2.5	1.1.1.1	0x7e8d	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:15.829262018 CEST	192.168.2.5	1.1.1.1	0x859b	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 24, 2024 14:22:15.832499981 CEST	192.168.2.5	1.1.1.1	0x99b6	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:15.832879066 CEST	192.168.2.5	1.1.1.1	0x2b13	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:15.835073948 CEST	192.168.2.5	1.1.1.1	0xc7c3	Standard query (0)	geo.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:15.835439920 CEST	192.168.2.5	1.1.1.1	0xe23a	Standard query (0)	geo.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:16.295016050 CEST	192.168.2.5	1.1.1.1	0xc03a	Standard query (0)	logx.optimizely.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.295377970 CEST	192.168.2.5	1.1.1.1	0xc8d2	Standard query (0)	logx.optimizely.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:16.424814939 CEST	192.168.2.5	1.1.1.1	0x27fc	Standard query (0)	www.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.424947977 CEST	192.168.2.5	1.1.1.1	0xbff7	Standard query (0)	www.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:16.785320044 CEST	192.168.2.5	1.1.1.1	0x8b3d	Standard query (0)	geo.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.785657883 CEST	192.168.2.5	1.1.1.1	0xa5ff	Standard query (0)	geo.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:16.789810896 CEST	192.168.2.5	1.1.1.1	0xe256	Standard query (0)	img.en25.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.790165901 CEST	192.168.2.5	1.1.1.1	0x3dbf	Standard query (0)	img.en25.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:16.790898085 CEST	192.168.2.5	1.1.1.1	0x3050	Standard query (0)	a.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.791153908 CEST	192.168.2.5	1.1.1.1	0xb35a	Standard query (0)	a.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:17.347917080 CEST	192.168.2.5	1.1.1.1	0x152e	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:17.348082066 CEST	192.168.2.5	1.1.1.1	0x3e8	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:17.348571062 CEST	192.168.2.5	1.1.1.1	0x4116	Standard query (0)	cdn.cookielaw.org	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:17.348702908 CEST	192.168.2.5	1.1.1.1	0x7d34	Standard query (0)	cdn.cookielaw.org	65	IN (0x0001)	false
Apr 24, 2024 14:22:17.674503088 CEST	192.168.2.5	1.1.1.1	0x1121	Standard query (0)	track.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:17.674818039 CEST	192.168.2.5	1.1.1.1	0xa9be	Standard query (0)	track.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:18.192744970 CEST	192.168.2.5	1.1.1.1	0xd119	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:18.192919016 CEST	192.168.2.5	1.1.1.1	0xfd4e	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:19.819519997 CEST	192.168.2.5	1.1.1.1	0x208e	Standard query (0)	track.docusign.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:19.819520950 CEST	192.168.2.5	1.1.1.1	0xa151	Standard query (0)	track.docusign.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.207565069 CEST	192.168.2.5	1.1.1.1	0x5add	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.207565069 CEST	192.168.2.5	1.1.1.1	0x75ba	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:20.216135025 CEST	192.168.2.5	1.1.1.1	0x7ad5	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.216353893 CEST	192.168.2.5	1.1.1.1	0xa73f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:20.224296093 CEST	192.168.2.5	1.1.1.1	0xe3dc	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.224755049 CEST	192.168.2.5	1.1.1.1	0x6aad	Standard query (0)	connect.facebook.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:20.225229979 CEST	192.168.2.5	1.1.1.1	0x96a5	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.225425959 CEST	192.168.2.5	1.1.1.1	0xbb17	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:20.738567114 CEST	192.168.2.5	1.1.1.1	0x2832	Standard query (0)	chat.docusign.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.738887072 CEST	192.168.2.5	1.1.1.1	0x1ed9	Standard query (0)	chat.docusign.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:21.076433897 CEST	192.168.2.5	1.1.1.1	0x7530	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.076641083 CEST	192.168.2.5	1.1.1.1	0xf733	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:21.077022076 CEST	192.168.2.5	1.1.1.1	0x9981	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.077022076 CEST	192.168.2.5	1.1.1.1	0x52bb	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:21.135926962 CEST	192.168.2.5	1.1.1.1	0xb5b5	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.136084080 CEST	192.168.2.5	1.1.1.1	0x962d	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:21.136734009 CEST	192.168.2.5	1.1.1.1	0x86c8	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.136902094 CEST	192.168.2.5	1.1.1.1	0x15e7	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:22.274468899 CEST	192.168.2.5	1.1.1.1	0x713d	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.274821043 CEST	192.168.2.5	1.1.1.1	0x4e17	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:22.296323061 CEST	192.168.2.5	1.1.1.1	0xdff6	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.296583891 CEST	192.168.2.5	1.1.1.1	0x8c54	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:22.327821016 CEST	192.168.2.5	1.1.1.1	0x8676	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.328061104 CEST	192.168.2.5	1.1.1.1	0x2937	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:22.378221989 CEST	192.168.2.5	1.1.1.1	0x9984	Standard query (0)	tags.srv.stackadapt.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.378474951 CEST	192.168.2.5	1.1.1.1	0xd853	Standard query (0)	tags.srv.stackadapt.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:23.112097979 CEST	192.168.2.5	1.1.1.1	0xdbd2	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.112548113 CEST	192.168.2.5	1.1.1.1	0x15a5	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:23.114630938 CEST	192.168.2.5	1.1.1.1	0xbc4a	Standard query (0)	js.driftt.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.114787102 CEST	192.168.2.5	1.1.1.1	0xf4ce	Standard query (0)	js.driftt.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:23.116400003 CEST	192.168.2.5	1.1.1.1	0x7788	Standard query (0)	s.ml-attr.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.116599083 CEST	192.168.2.5	1.1.1.1	0xb973	Standard query (0)	s.ml-attr.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:23.150707960 CEST	192.168.2.5	1.1.1.1	0xe48b	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.150948048 CEST	192.168.2.5	1.1.1.1	0xd733	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:24.817588091 CEST	192.168.2.5	1.1.1.1	0xfc6b	Standard query (0)	edge.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:24.817954063 CEST	192.168.2.5	1.1.1.1	0x3597	Standard query (0)	edge.fullstory.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:25.998466015 CEST	192.168.2.5	1.1.1.1	0x96e2	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:25.998653889 CEST	192.168.2.5	1.1.1.1	0xfa3c	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.002799034 CEST	192.168.2.5	1.1.1.1	0xd603	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.002952099 CEST	192.168.2.5	1.1.1.1	0xa709	Standard query (0)	secure.adnxs.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.032354116 CEST	192.168.2.5	1.1.1.1	0xdf38	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.032594919 CEST	192.168.2.5	1.1.1.1	0x1bf0	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.279325962 CEST	192.168.2.5	1.1.1.1	0x9b39	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.279570103 CEST	192.168.2.5	1.1.1.1	0x9761	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.297415972 CEST	192.168.2.5	1.1.1.1	0x876d	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.297669888 CEST	192.168.2.5	1.1.1.1	0xd3d5	Standard query (0)	rs.fullstory.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.440022945 CEST	192.168.2.5	1.1.1.1	0x962e	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.440181971 CEST	192.168.2.5	1.1.1.1	0x8339	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.443458080 CEST	192.168.2.5	1.1.1.1	0xc37c	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.443603039 CEST	192.168.2.5	1.1.1.1	0x1ff6	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.445211887 CEST	192.168.2.5	1.1.1.1	0x2d56	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.445674896 CEST	192.168.2.5	1.1.1.1	0xa9fe	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.446357012 CEST	192.168.2.5	1.1.1.1	0x7ee3	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.446479082 CEST	192.168.2.5	1.1.1.1	0xf5c7	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.574120998 CEST	192.168.2.5	1.1.1.1	0x213d	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.574398041 CEST	192.168.2.5	1.1.1.1	0x71c2	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.575145006 CEST	192.168.2.5	1.1.1.1	0x5db7	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.575309038 CEST	192.168.2.5	1.1.1.1	0xc35b	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.577661991 CEST	192.168.2.5	1.1.1.1	0x4277	Standard query (0)	edge.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.577893972 CEST	192.168.2.5	1.1.1.1	0x710b	Standard query (0)	edge.fullstory.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:26.971343040 CEST	192.168.2.5	1.1.1.1	0x6e1f	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.971489906 CEST	192.168.2.5	1.1.1.1	0x77f0	Standard query (0)	t.co	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.001991987 CEST	192.168.2.5	1.1.1.1	0xc59	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.002136946 CEST	192.168.2.5	1.1.1.1	0xb2d0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.041807890 CEST	192.168.2.5	1.1.1.1	0xd860	Standard query (0)	customer.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.042049885 CEST	192.168.2.5	1.1.1.1	0xd1f8	Standard query (0)	customer.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.042987108 CEST	192.168.2.5	1.1.1.1	0x4588	Standard query (0)	conversation.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.043386936 CEST	192.168.2.5	1.1.1.1	0x4346	Standard query (0)	conversation.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.044306040 CEST	192.168.2.5	1.1.1.1	0xf590	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.044682980 CEST	192.168.2.5	1.1.1.1	0x20fe	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.050641060 CEST	192.168.2.5	1.1.1.1	0xb4f9	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.050825119 CEST	192.168.2.5	1.1.1.1	0x6a4f	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.204269886 CEST	192.168.2.5	1.1.1.1	0x5a8a	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.204649925 CEST	192.168.2.5	1.1.1.1	0x6799	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.218892097 CEST	192.168.2.5	1.1.1.1	0xe11b	Standard query (0)	targeting.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.219037056 CEST	192.168.2.5	1.1.1.1	0x9328	Standard query (0)	targeting.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.307344913 CEST	192.168.2.5	1.1.1.1	0xe4d6	Standard query (0)	rs.fullstory.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.307590961 CEST	192.168.2.5	1.1.1.1	0xd752	Standard query (0)	rs.fullstory.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.345557928 CEST	192.168.2.5	1.1.1.1	0xed1a	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.345835924 CEST	192.168.2.5	1.1.1.1	0xf1a1	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.619785070 CEST	192.168.2.5	1.1.1.1	0xd0d1	Standard query (0)	attr.ml-api.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.619946003 CEST	192.168.2.5	1.1.1.1	0x9df9	Standard query (0)	attr.ml-api.io	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.621999979 CEST	192.168.2.5	1.1.1.1	0x77ef	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.622821093 CEST	192.168.2.5	1.1.1.1	0xfb66	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.686470985 CEST	192.168.2.5	1.1.1.1	0x557	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.686697006 CEST	192.168.2.5	1.1.1.1	0x33a2	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.929389000 CEST	192.168.2.5	1.1.1.1	0x229f	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.929564953 CEST	192.168.2.5	1.1.1.1	0x13be	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:27.998125076 CEST	192.168.2.5	1.1.1.1	0xcf22	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.998348951 CEST	192.168.2.5	1.1.1.1	0x5fc2	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:28.650202990 CEST	192.168.2.5	1.1.1.1	0x7d4a	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.650371075 CEST	192.168.2.5	1.1.1.1	0x8fa9	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:28.652801991 CEST	192.168.2.5	1.1.1.1	0x78f3	Standard query (0)	attr.ml-api.io	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.653172016 CEST	192.168.2.5	1.1.1.1	0x9435	Standard query (0)	attr.ml-api.io	65	IN (0x0001)	false
Apr 24, 2024 14:22:28.802234888 CEST	192.168.2.5	1.1.1.1	0x5e7e	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.802414894 CEST	192.168.2.5	1.1.1.1	0x5ff4	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:29.513165951 CEST	192.168.2.5	1.1.1.1	0x17b2	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:29.513389111 CEST	192.168.2.5	1.1.1.1	0x6648	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:37.490159035 CEST	192.168.2.5	1.1.1.1	0xbc87	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:37.490384102 CEST	192.168.2.5	1.1.1.1	0x59f9	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:37.887931108 CEST	192.168.2.5	1.1.1.1	0x1353	Standard query (0)	bootstrap.driftapi.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:37.888065100 CEST	192.168.2.5	1.1.1.1	0x39dd	Standard query (0)	bootstrap.driftapi.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:38.899719954 CEST	192.168.2.5	1.1.1.1	0x5d38	Standard query (0)	event.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:38.900006056 CEST	192.168.2.5	1.1.1.1	0xa7c	Standard query (0)	event.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:38.961498976 CEST	192.168.2.5	1.1.1.1	0xb7fe	Standard query (0)	bootstrap.driftapi.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:38.961901903 CEST	192.168.2.5	1.1.1.1	0x2b53	Standard query (0)	bootstrap.driftapi.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:42.269530058 CEST	192.168.2.5	1.1.1.1	0x8001	Standard query (0)	metrics.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.270255089 CEST	192.168.2.5	1.1.1.1	0x7b3d	Standard query (0)	metrics.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:42.275480032 CEST	192.168.2.5	1.1.1.1	0x8404	Standard query (0)	event.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.276813984 CEST	192.168.2.5	1.1.1.1	0xa24	Standard query (0)	event.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:42.591581106 CEST	192.168.2.5	1.1.1.1	0xc669	Standard query (0)	47616-16.chat.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.592384100 CEST	192.168.2.5	1.1.1.1	0x171b	Standard query (0)	47616-16.chat.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:49.289846897 CEST	192.168.2.5	1.1.1.1	0x12e4	Standard query (0)	log.api.drift.com	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:49.290174961 CEST	192.168.2.5	1.1.1.1	0xbec1	Standard query (0)	log.api.drift.com	65	IN (0x0001)	false
Apr 24, 2024 14:22:54.285449982 CEST	192.168.2.5	1.1.1.1	0xc077	Standard query (0)	eu.docusign.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:54.285875082 CEST	192.168.2.5	1.1.1.1	0xad69	Standard query (0)	eu.docusign.net	65	IN (0x0001)	false
Apr 24, 2024 14:22:55.745619059 CEST	192.168.2.5	1.1.1.1	0x4823	Standard query (0)	eu.docusign.net	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:55.745619059 CEST	192.168.2.5	1.1.1.1	0x92fb	Standard query (0)	eu.docusign.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 14:21:40.313725948 CEST	1.1.1.1	192.168.2.5	0x743d	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:40.318308115 CEST	1.1.1.1	192.168.2.5	0x83de	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:42.781800032 CEST	1.1.1.1	192.168.2.5	0xaa96	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:42.781800032 CEST	1.1.1.1	192.168.2.5	0xaa96	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:42.781800032 CEST	1.1.1.1	192.168.2.5	0xaa96	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:42.781800032 CEST	1.1.1.1	192.168.2.5	0xaa96	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:42.781800032 CEST	1.1.1.1	192.168.2.5	0xaa96	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:42.781800032 CEST	1.1.1.1	192.168.2.5	0xaa96	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:42.781933069 CEST	1.1.1.1	192.168.2.5	0x3299	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:21:44.307976007 CEST	1.1.1.1	192.168.2.5	0x9de8	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:44.307976007 CEST	1.1.1.1	192.168.2.5	0x9de8	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.162.217.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:44.307976007 CEST	1.1.1.1	192.168.2.5	0x9de8	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.148.51.66	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:44.307976007 CEST	1.1.1.1	192.168.2.5	0x9de8	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.186.38.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:44.356971979 CEST	1.1.1.1	192.168.2.5	0x9453	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:44.388379097 CEST	1.1.1.1	192.168.2.5	0x9a6b	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:44.437995911 CEST	1.1.1.1	192.168.2.5	0x260d	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:45.674868107 CEST	1.1.1.1	192.168.2.5	0x61cc	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:45.674868107 CEST	1.1.1.1	192.168.2.5	0x61cc	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:45.674868107 CEST	1.1.1.1	192.168.2.5	0x61cc	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:45.674868107 CEST	1.1.1.1	192.168.2.5	0x61cc	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:45.991729021 CEST	1.1.1.1	192.168.2.5	0x1ad2	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:45.991787910 CEST	1.1.1.1	192.168.2.5	0x9279	No error (0)	docucdn-a.akamaihd.net	docucdn-a.akamaihd.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:46.594369888 CEST	1.1.1.1	192.168.2.5	0x7cac	No error (0)	api.mixpanel.com		35.186.241.51	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:46.594369888 CEST	1.1.1.1	192.168.2.5	0x7cac	No error (0)	api.mixpanel.com		107.178.240.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:46.594369888 CEST	1.1.1.1	192.168.2.5	0x7cac	No error (0)	api.mixpanel.com		35.190.25.25	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:46.594369888 CEST	1.1.1.1	192.168.2.5	0x7cac	No error (0)	api.mixpanel.com		130.211.34.183	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:53.535394907 CEST	1.1.1.1	192.168.2.5	0xac7a	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:53.535479069 CEST	1.1.1.1	192.168.2.5	0x2b58	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:54.040162086 CEST	1.1.1.1	192.168.2.5	0x1de5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:54.040162086 CEST	1.1.1.1	192.168.2.5	0x1de5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:21:54.146328926 CEST	1.1.1.1	192.168.2.5	0x364a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:21:54.146328926 CEST	1.1.1.1	192.168.2.5	0x364a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:08.034075022 CEST	1.1.1.1	192.168.2.5	0x9293	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:08.054213047 CEST	1.1.1.1	192.168.2.5	0x6361	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:08.316767931 CEST	1.1.1.1	192.168.2.5	0xaf43	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:08.316767931 CEST	1.1.1.1	192.168.2.5	0xaf43	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:09.713485956 CEST	1.1.1.1	192.168.2.5	0xed32	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:09.713485956 CEST	1.1.1.1	192.168.2.5	0xed32	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.53	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:09.713485956 CEST	1.1.1.1	192.168.2.5	0xed32	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.29	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:09.713485956 CEST	1.1.1.1	192.168.2.5	0xed32	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.112	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:09.713485956 CEST	1.1.1.1	192.168.2.5	0xed32	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:09.714093924 CEST	1.1.1.1	192.168.2.5	0xa2f8	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:12.888076067 CEST	1.1.1.1	192.168.2.5	0x1d6f	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:12.888513088 CEST	1.1.1.1	192.168.2.5	0x4404	No error (0)	images.ctfassets.net	d3orhvfyxudxxq.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:12.888513088 CEST	1.1.1.1	192.168.2.5	0x4404	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.53	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:12.888513088 CEST	1.1.1.1	192.168.2.5	0x4404	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.112	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:12.888513088 CEST	1.1.1.1	192.168.2.5	0x4404	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.82	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:12.888513088 CEST	1.1.1.1	192.168.2.5	0x4404	No error (0)	d3orhvfyxudxxq.cloudfront.net		18.65.25.29	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:13.794523001 CEST	1.1.1.1	192.168.2.5	0x7319	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:13.809981108 CEST	1.1.1.1	192.168.2.5	0xc4a5	No error (0)	cdn.optimizely.com	cdn.o6.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:15.982709885 CEST	1.1.1.1	192.168.2.5	0x7e8d	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:15.982709885 CEST	1.1.1.1	192.168.2.5	0x7e8d	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:15.982877016 CEST	1.1.1.1	192.168.2.5	0x859b	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 24, 2024 14:22:16.007550955 CEST	1.1.1.1	192.168.2.5	0x99b6	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.007550955 CEST	1.1.1.1	192.168.2.5	0x99b6	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.186.38.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.007550955 CEST	1.1.1.1	192.168.2.5	0x99b6	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.162.217.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.007550955 CEST	1.1.1.1	192.168.2.5	0x99b6	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.148.51.66	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.007566929 CEST	1.1.1.1	192.168.2.5	0xc7c3	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.007566929 CEST	1.1.1.1	192.168.2.5	0xc7c3	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.81.127.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.007566929 CEST	1.1.1.1	192.168.2.5	0xc7c3	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.84.94.41	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.007566929 CEST	1.1.1.1	192.168.2.5	0xc7c3	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		54.201.173.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.017807961 CEST	1.1.1.1	192.168.2.5	0x2b13	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.017998934 CEST	1.1.1.1	192.168.2.5	0xe23a	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.448385954 CEST	1.1.1.1	192.168.2.5	0xc03a	No error (0)	logx.optimizely.com		34.111.140.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.578337908 CEST	1.1.1.1	192.168.2.5	0x27fc	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.578867912 CEST	1.1.1.1	192.168.2.5	0xbff7	No error (0)	www.docusign.com	www-geo.docusign.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.939393997 CEST	1.1.1.1	192.168.2.5	0xa5ff	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.939651012 CEST	1.1.1.1	192.168.2.5	0x8b3d	No error (0)	geo.docusign.com	geo-1040374038.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.939651012 CEST	1.1.1.1	192.168.2.5	0x8b3d	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.81.127.23	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.939651012 CEST	1.1.1.1	192.168.2.5	0x8b3d	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		35.84.94.41	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.939651012 CEST	1.1.1.1	192.168.2.5	0x8b3d	No error (0)	geo-1040374038.us-west-2.elb.amazonaws.com		54.201.173.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.944458008 CEST	1.1.1.1	192.168.2.5	0xb35a	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.944633007 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	a.docusign.com	arya-1323461286.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.944633007 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.148.51.66	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.944633007 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		35.162.217.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.944633007 CEST	1.1.1.1	192.168.2.5	0x3050	No error (0)	arya-1323461286.us-west-2.elb.amazonaws.com		54.186.38.246	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:16.958209991 CEST	1.1.1.1	192.168.2.5	0xe256	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:16.982501030 CEST	1.1.1.1	192.168.2.5	0x3dbf	No error (0)	img.en25.com	wildcard.en25.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:17.501424074 CEST	1.1.1.1	192.168.2.5	0x152e	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:17.501424074 CEST	1.1.1.1	192.168.2.5	0x152e	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:17.501755953 CEST	1.1.1.1	192.168.2.5	0x7d34	No error (0)	cdn.cookielaw.org			65	IN (0x0001)	false
Apr 24, 2024 14:22:17.501775026 CEST	1.1.1.1	192.168.2.5	0x3e8	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 24, 2024 14:22:17.501893044 CEST	1.1.1.1	192.168.2.5	0x4116	No error (0)	cdn.cookielaw.org		104.19.177.52	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:17.501893044 CEST	1.1.1.1	192.168.2.5	0x4116	No error (0)	cdn.cookielaw.org		104.19.178.52	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:17.931392908 CEST	1.1.1.1	192.168.2.5	0xa9be	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:17.931392908 CEST	1.1.1.1	192.168.2.5	0xa9be	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:17.958158016 CEST	1.1.1.1	192.168.2.5	0x1121	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:17.958158016 CEST	1.1.1.1	192.168.2.5	0x1121	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:17.958158016 CEST	1.1.1.1	192.168.2.5	0x1121	No error (0)	p01k.hs.eloqua.com		192.29.14.118	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:18.346199989 CEST	1.1.1.1	192.168.2.5	0xd119	No error (0)	geolocation.onetrust.com		104.18.32.137	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:18.346199989 CEST	1.1.1.1	192.168.2.5	0xd119	No error (0)	geolocation.onetrust.com		172.64.155.119	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:18.346283913 CEST	1.1.1.1	192.168.2.5	0xfd4e	No error (0)	geolocation.onetrust.com			65	IN (0x0001)	false
Apr 24, 2024 14:22:19.973174095 CEST	1.1.1.1	192.168.2.5	0xa151	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:19.973174095 CEST	1.1.1.1	192.168.2.5	0xa151	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:19.973174095 CEST	1.1.1.1	192.168.2.5	0xa151	No error (0)	p01k.hs.eloqua.com		192.29.14.118	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:19.973272085 CEST	1.1.1.1	192.168.2.5	0x208e	No error (0)	track.docusign.com	s566810826.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:19.973272085 CEST	1.1.1.1	192.168.2.5	0x208e	No error (0)	s566810826.hs.eloqua.com	p01k.hs.eloqua.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:20.361243010 CEST	1.1.1.1	192.168.2.5	0x5add	No error (0)	tags.srv.stackadapt.com		3.225.21.46	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.361243010 CEST	1.1.1.1	192.168.2.5	0x5add	No error (0)	tags.srv.stackadapt.com		52.86.27.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.361243010 CEST	1.1.1.1	192.168.2.5	0x5add	No error (0)	tags.srv.stackadapt.com		18.210.31.191	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.361243010 CEST	1.1.1.1	192.168.2.5	0x5add	No error (0)	tags.srv.stackadapt.com		18.210.82.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.361243010 CEST	1.1.1.1	192.168.2.5	0x5add	No error (0)	tags.srv.stackadapt.com		100.26.119.80	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.361243010 CEST	1.1.1.1	192.168.2.5	0x5add	No error (0)	tags.srv.stackadapt.com		54.84.194.59	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.369376898 CEST	1.1.1.1	192.168.2.5	0x7ad5	No error (0)	www.google.com		142.250.141.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.369376898 CEST	1.1.1.1	192.168.2.5	0x7ad5	No error (0)	www.google.com		142.250.141.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.369376898 CEST	1.1.1.1	192.168.2.5	0x7ad5	No error (0)	www.google.com		142.250.141.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.369376898 CEST	1.1.1.1	192.168.2.5	0x7ad5	No error (0)	www.google.com		142.250.141.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.369376898 CEST	1.1.1.1	192.168.2.5	0x7ad5	No error (0)	www.google.com		142.250.141.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.369376898 CEST	1.1.1.1	192.168.2.5	0x7ad5	No error (0)	www.google.com		142.250.141.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.369657993 CEST	1.1.1.1	192.168.2.5	0xa73f	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:22:20.377396107 CEST	1.1.1.1	192.168.2.5	0xe3dc	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:20.377396107 CEST	1.1.1.1	192.168.2.5	0xe3dc	No error (0)	scontent.xx.fbcdn.net		31.13.70.7	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.378329039 CEST	1.1.1.1	192.168.2.5	0x6aad	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:20.379064083 CEST	1.1.1.1	192.168.2.5	0x96a5	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:20.379232883 CEST	1.1.1.1	192.168.2.5	0xbb17	No error (0)	snap.licdn.com	od.linkedin.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:20.920711994 CEST	1.1.1.1	192.168.2.5	0x1ed9	No error (0)	chat.docusign.net	docusign.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:20.923646927 CEST	1.1.1.1	192.168.2.5	0x2832	No error (0)	chat.docusign.net	docusign.netlifyglobalcdn.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:20.923646927 CEST	1.1.1.1	192.168.2.5	0x2832	No error (0)	docusign.netlifyglobalcdn.com		54.67.4.46	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:20.923646927 CEST	1.1.1.1	192.168.2.5	0x2832	No error (0)	docusign.netlifyglobalcdn.com		54.177.145.149	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.229865074 CEST	1.1.1.1	192.168.2.5	0x7530	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:21.229865074 CEST	1.1.1.1	192.168.2.5	0x7530	No error (0)	platform.twitter.map.fastly.net		146.75.92.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.230446100 CEST	1.1.1.1	192.168.2.5	0x9981	No error (0)	tag.demandbase.com		108.139.10.26	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.230446100 CEST	1.1.1.1	192.168.2.5	0x9981	No error (0)	tag.demandbase.com		108.139.10.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.230446100 CEST	1.1.1.1	192.168.2.5	0x9981	No error (0)	tag.demandbase.com		108.139.10.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.230446100 CEST	1.1.1.1	192.168.2.5	0x9981	No error (0)	tag.demandbase.com		108.139.10.76	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.230645895 CEST	1.1.1.1	192.168.2.5	0xf733	No error (0)	static.ads-twitter.com	platform.twitter.map.fastly.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:21.289252996 CEST	1.1.1.1	192.168.2.5	0xb5b5	No error (0)	googleads.g.doubleclick.net		142.251.2.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.289252996 CEST	1.1.1.1	192.168.2.5	0xb5b5	No error (0)	googleads.g.doubleclick.net		142.251.2.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.289252996 CEST	1.1.1.1	192.168.2.5	0xb5b5	No error (0)	googleads.g.doubleclick.net		142.251.2.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.289252996 CEST	1.1.1.1	192.168.2.5	0xb5b5	No error (0)	googleads.g.doubleclick.net		142.251.2.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:21.289717913 CEST	1.1.1.1	192.168.2.5	0x962d	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Apr 24, 2024 14:22:21.290076971 CEST	1.1.1.1	192.168.2.5	0x86c8	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:21.290076971 CEST	1.1.1.1	192.168.2.5	0x86c8	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:21.290925980 CEST	1.1.1.1	192.168.2.5	0x15e7	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:21.290925980 CEST	1.1.1.1	192.168.2.5	0x15e7	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:22.429064989 CEST	1.1.1.1	192.168.2.5	0x713d	No error (0)	api.company-target.com		18.154.144.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.429064989 CEST	1.1.1.1	192.168.2.5	0x713d	No error (0)	api.company-target.com		18.154.144.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.429064989 CEST	1.1.1.1	192.168.2.5	0x713d	No error (0)	api.company-target.com		18.154.144.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.429064989 CEST	1.1.1.1	192.168.2.5	0x713d	No error (0)	api.company-target.com		18.154.144.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.452370882 CEST	1.1.1.1	192.168.2.5	0xdff6	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:22.452370882 CEST	1.1.1.1	192.168.2.5	0xdff6	No error (0)	s.dsp-prod.demandbase.com		34.96.71.22	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.483115911 CEST	1.1.1.1	192.168.2.5	0x8676	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:22.483115911 CEST	1.1.1.1	192.168.2.5	0x8676	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:22.483191013 CEST	1.1.1.1	192.168.2.5	0x2937	No error (0)	px.ads.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:22.483191013 CEST	1.1.1.1	192.168.2.5	0x2937	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:22.514919043 CEST	1.1.1.1	192.168.2.5	0x8c54	No error (0)	s.company-target.com	s.dsp-prod.demandbase.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:22.531955004 CEST	1.1.1.1	192.168.2.5	0x9984	No error (0)	tags.srv.stackadapt.com		3.225.21.46	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.531955004 CEST	1.1.1.1	192.168.2.5	0x9984	No error (0)	tags.srv.stackadapt.com		52.86.27.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.531955004 CEST	1.1.1.1	192.168.2.5	0x9984	No error (0)	tags.srv.stackadapt.com		18.210.31.191	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.531955004 CEST	1.1.1.1	192.168.2.5	0x9984	No error (0)	tags.srv.stackadapt.com		18.210.82.4	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.531955004 CEST	1.1.1.1	192.168.2.5	0x9984	No error (0)	tags.srv.stackadapt.com		100.26.119.80	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:22.531955004 CEST	1.1.1.1	192.168.2.5	0x9984	No error (0)	tags.srv.stackadapt.com		54.84.194.59	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.268974066 CEST	1.1.1.1	192.168.2.5	0xdbd2	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.268974066 CEST	1.1.1.1	192.168.2.5	0xdbd2	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.268974066 CEST	1.1.1.1	192.168.2.5	0xdbd2	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.268974066 CEST	1.1.1.1	192.168.2.5	0xdbd2	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.271761894 CEST	1.1.1.1	192.168.2.5	0xbc4a	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:23.271761894 CEST	1.1.1.1	192.168.2.5	0xbc4a	No error (0)	dl7g9llrghqi1.cloudfront.net		18.65.25.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.271761894 CEST	1.1.1.1	192.168.2.5	0xbc4a	No error (0)	dl7g9llrghqi1.cloudfront.net		18.65.25.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.271761894 CEST	1.1.1.1	192.168.2.5	0xbc4a	No error (0)	dl7g9llrghqi1.cloudfront.net		18.65.25.22	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.271761894 CEST	1.1.1.1	192.168.2.5	0xbc4a	No error (0)	dl7g9llrghqi1.cloudfront.net		18.65.25.125	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.277829885 CEST	1.1.1.1	192.168.2.5	0xf4ce	No error (0)	js.driftt.com	dl7g9llrghqi1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:23.288393974 CEST	1.1.1.1	192.168.2.5	0x7788	No error (0)	s.ml-attr.com	s.ml-attr.com.pxlsrv.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:23.288393974 CEST	1.1.1.1	192.168.2.5	0x7788	No error (0)	s.ml-attr.com.pxlsrv.net		68.67.153.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.288505077 CEST	1.1.1.1	192.168.2.5	0xb973	No error (0)	s.ml-attr.com	s.ml-attr.com.pxlsrv.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:23.307925940 CEST	1.1.1.1	192.168.2.5	0xe48b	No error (0)	tag-logger.demandbase.com		18.239.199.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.307925940 CEST	1.1.1.1	192.168.2.5	0xe48b	No error (0)	tag-logger.demandbase.com		18.239.199.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.307925940 CEST	1.1.1.1	192.168.2.5	0xe48b	No error (0)	tag-logger.demandbase.com		18.239.199.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:23.307925940 CEST	1.1.1.1	192.168.2.5	0xe48b	No error (0)	tag-logger.demandbase.com		18.239.199.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:24.970985889 CEST	1.1.1.1	192.168.2.5	0xfc6b	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.151843071 CEST	1.1.1.1	192.168.2.5	0x96e2	No error (0)	t.co		104.244.42.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	secure.adnxs.com	g.geo.appnexusgslb.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	g.geo.appnexusgslb.net	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	ib.anycast.adnxs.com		104.254.151.60	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	ib.anycast.adnxs.com		104.254.151.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	ib.anycast.adnxs.com		104.254.151.68	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	ib.anycast.adnxs.com		104.254.151.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	ib.anycast.adnxs.com		104.254.148.252	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	ib.anycast.adnxs.com		104.254.150.241	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.156096935 CEST	1.1.1.1	192.168.2.5	0xd603	No error (0)	ib.anycast.adnxs.com		104.254.148.251	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.185937881 CEST	1.1.1.1	192.168.2.5	0x1bf0	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.185937881 CEST	1.1.1.1	192.168.2.5	0x1bf0	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.188024998 CEST	1.1.1.1	192.168.2.5	0xdf38	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.188024998 CEST	1.1.1.1	192.168.2.5	0xdf38	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.188024998 CEST	1.1.1.1	192.168.2.5	0xdf38	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.432948112 CEST	1.1.1.1	192.168.2.5	0x9b39	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.450822115 CEST	1.1.1.1	192.168.2.5	0x876d	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.593929052 CEST	1.1.1.1	192.168.2.5	0x962e	No error (0)	api.company-target.com		18.154.144.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.593929052 CEST	1.1.1.1	192.168.2.5	0x962e	No error (0)	api.company-target.com		18.154.144.9	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.593929052 CEST	1.1.1.1	192.168.2.5	0x962e	No error (0)	api.company-target.com		18.154.144.129	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.593929052 CEST	1.1.1.1	192.168.2.5	0x962e	No error (0)	api.company-target.com		18.154.144.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.596785069 CEST	1.1.1.1	192.168.2.5	0x1ff6	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 14:22:26.596926928 CEST	1.1.1.1	192.168.2.5	0xc37c	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.596926928 CEST	1.1.1.1	192.168.2.5	0xc37c	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.233.102.171	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.233.2.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.158.64.5	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.234.41.35	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.215.83.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.226.174.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.85.86.236	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.598773956 CEST	1.1.1.1	192.168.2.5	0x2d56	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.145.107.179	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.599437952 CEST	1.1.1.1	192.168.2.5	0x7ee3	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.599948883 CEST	1.1.1.1	192.168.2.5	0xf5c7	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.599998951 CEST	1.1.1.1	192.168.2.5	0xa9fe	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:26.727807999 CEST	1.1.1.1	192.168.2.5	0x213d	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.727807999 CEST	1.1.1.1	192.168.2.5	0x213d	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.727807999 CEST	1.1.1.1	192.168.2.5	0x213d	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.727807999 CEST	1.1.1.1	192.168.2.5	0x213d	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.729099989 CEST	1.1.1.1	192.168.2.5	0x5db7	No error (0)	tag-logger.demandbase.com		18.239.199.12	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.729099989 CEST	1.1.1.1	192.168.2.5	0x5db7	No error (0)	tag-logger.demandbase.com		18.239.199.122	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.729099989 CEST	1.1.1.1	192.168.2.5	0x5db7	No error (0)	tag-logger.demandbase.com		18.239.199.34	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.729099989 CEST	1.1.1.1	192.168.2.5	0x5db7	No error (0)	tag-logger.demandbase.com		18.239.199.124	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:26.731103897 CEST	1.1.1.1	192.168.2.5	0x4277	No error (0)	edge.fullstory.com		35.201.112.186	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.125283003 CEST	1.1.1.1	192.168.2.5	0x6e1f	No error (0)	t.co		104.244.42.69	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.155409098 CEST	1.1.1.1	192.168.2.5	0xc59	No error (0)	www.google.com		74.125.137.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.155409098 CEST	1.1.1.1	192.168.2.5	0xc59	No error (0)	www.google.com		74.125.137.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.155409098 CEST	1.1.1.1	192.168.2.5	0xc59	No error (0)	www.google.com		74.125.137.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.155409098 CEST	1.1.1.1	192.168.2.5	0xc59	No error (0)	www.google.com		74.125.137.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.155409098 CEST	1.1.1.1	192.168.2.5	0xc59	No error (0)	www.google.com		74.125.137.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.155409098 CEST	1.1.1.1	192.168.2.5	0xc59	No error (0)	www.google.com		74.125.137.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.155744076 CEST	1.1.1.1	192.168.2.5	0xb2d0	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 14:22:27.196429968 CEST	1.1.1.1	192.168.2.5	0x4588	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.196429968 CEST	1.1.1.1	192.168.2.5	0x4588	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.196429968 CEST	1.1.1.1	192.168.2.5	0x4588	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.196429968 CEST	1.1.1.1	192.168.2.5	0x4588	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.196429968 CEST	1.1.1.1	192.168.2.5	0x4588	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.196429968 CEST	1.1.1.1	192.168.2.5	0x4588	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.198184967 CEST	1.1.1.1	192.168.2.5	0xf590	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.198184967 CEST	1.1.1.1	192.168.2.5	0xf590	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.198184967 CEST	1.1.1.1	192.168.2.5	0xf590	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.198184967 CEST	1.1.1.1	192.168.2.5	0xf590	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.198184967 CEST	1.1.1.1	192.168.2.5	0xf590	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.198184967 CEST	1.1.1.1	192.168.2.5	0xf590	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.203902006 CEST	1.1.1.1	192.168.2.5	0xb4f9	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.203902006 CEST	1.1.1.1	192.168.2.5	0xb4f9	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.203902006 CEST	1.1.1.1	192.168.2.5	0xb4f9	No error (0)	s.twitter.com		104.244.42.195	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.204004049 CEST	1.1.1.1	192.168.2.5	0x6a4f	No error (0)	analytics.twitter.com	ads.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.204004049 CEST	1.1.1.1	192.168.2.5	0x6a4f	No error (0)	ads.twitter.com	s.twitter.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.209363937 CEST	1.1.1.1	192.168.2.5	0xd860	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.209363937 CEST	1.1.1.1	192.168.2.5	0xd860	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.209363937 CEST	1.1.1.1	192.168.2.5	0xd860	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.209363937 CEST	1.1.1.1	192.168.2.5	0xd860	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.209363937 CEST	1.1.1.1	192.168.2.5	0xd860	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.213013887 CEST	1.1.1.1	192.168.2.5	0x4346	No error (0)	conversation.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.213013887 CEST	1.1.1.1	192.168.2.5	0x4346	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.213107109 CEST	1.1.1.1	192.168.2.5	0xd1f8	No error (0)	customer.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.213159084 CEST	1.1.1.1	192.168.2.5	0x20fe	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.213159084 CEST	1.1.1.1	192.168.2.5	0x20fe	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.357496977 CEST	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	analytics.google.com		142.250.141.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.357496977 CEST	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	analytics.google.com		142.250.141.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.357496977 CEST	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	analytics.google.com		142.250.141.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.357496977 CEST	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	analytics.google.com		142.250.141.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.357496977 CEST	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	analytics.google.com		142.250.141.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.357496977 CEST	1.1.1.1	192.168.2.5	0x5a8a	No error (0)	analytics.google.com		142.250.141.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.372458935 CEST	1.1.1.1	192.168.2.5	0xe11b	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.372458935 CEST	1.1.1.1	192.168.2.5	0xe11b	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.372458935 CEST	1.1.1.1	192.168.2.5	0xe11b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.372458935 CEST	1.1.1.1	192.168.2.5	0xe11b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.372458935 CEST	1.1.1.1	192.168.2.5	0xe11b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.372458935 CEST	1.1.1.1	192.168.2.5	0xe11b	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.379239082 CEST	1.1.1.1	192.168.2.5	0x9328	No error (0)	targeting.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.379239082 CEST	1.1.1.1	192.168.2.5	0x9328	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.460299969 CEST	1.1.1.1	192.168.2.5	0xe4d6	No error (0)	rs.fullstory.com		35.186.194.58	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.499902964 CEST	1.1.1.1	192.168.2.5	0xed1a	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.500570059 CEST	1.1.1.1	192.168.2.5	0xf1a1	No error (0)	pixel.rubiconproject.com	pixel.rubiconproject.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.773482084 CEST	1.1.1.1	192.168.2.5	0xd0d1	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.773482084 CEST	1.1.1.1	192.168.2.5	0xd0d1	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.96	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.773482084 CEST	1.1.1.1	192.168.2.5	0xd0d1	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.773482084 CEST	1.1.1.1	192.168.2.5	0xd0d1	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.78	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.773482084 CEST	1.1.1.1	192.168.2.5	0xd0d1	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.75	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.233.102.171	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.238.45.159	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		18.215.83.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.233.2.13	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.230.195.204	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		3.225.117.71	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		54.221.105.180	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.775243044 CEST	1.1.1.1	192.168.2.5	0x77ef	No error (0)	partners-alb-1113315349.us-east-1.elb.amazonaws.com		34.239.87.50	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:27.776451111 CEST	1.1.1.1	192.168.2.5	0xfb66	No error (0)	partners.tremorhub.com	partners-alb-1113315349.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.786659002 CEST	1.1.1.1	192.168.2.5	0x9df9	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.839587927 CEST	1.1.1.1	192.168.2.5	0x557	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.839587927 CEST	1.1.1.1	192.168.2.5	0x557	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.839806080 CEST	1.1.1.1	192.168.2.5	0x33a2	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:27.839806080 CEST	1.1.1.1	192.168.2.5	0x33a2	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:28.082657099 CEST	1.1.1.1	192.168.2.5	0x229f	No error (0)	segments.company-target.com		216.137.39.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.082657099 CEST	1.1.1.1	192.168.2.5	0x229f	No error (0)	segments.company-target.com		216.137.39.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.082657099 CEST	1.1.1.1	192.168.2.5	0x229f	No error (0)	segments.company-target.com		216.137.39.37	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.082657099 CEST	1.1.1.1	192.168.2.5	0x229f	No error (0)	segments.company-target.com		216.137.39.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.151397943 CEST	1.1.1.1	192.168.2.5	0xcf22	No error (0)	dsum-sec.casalemedia.com		104.18.36.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.151397943 CEST	1.1.1.1	192.168.2.5	0xcf22	No error (0)	dsum-sec.casalemedia.com		172.64.151.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.151704073 CEST	1.1.1.1	192.168.2.5	0x5fc2	No error (0)	dsum-sec.casalemedia.com			65	IN (0x0001)	false
Apr 24, 2024 14:22:28.803726912 CEST	1.1.1.1	192.168.2.5	0x8fa9	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:28.804145098 CEST	1.1.1.1	192.168.2.5	0x7d4a	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:28.804145098 CEST	1.1.1.1	192.168.2.5	0x7d4a	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.807029009 CEST	1.1.1.1	192.168.2.5	0x9435	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:28.821930885 CEST	1.1.1.1	192.168.2.5	0x78f3	No error (0)	attr.ml-api.io	d2qlomkzr3gd97.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:28.821930885 CEST	1.1.1.1	192.168.2.5	0x78f3	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.75	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.821930885 CEST	1.1.1.1	192.168.2.5	0x78f3	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.32	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.821930885 CEST	1.1.1.1	192.168.2.5	0x78f3	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.78	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.821930885 CEST	1.1.1.1	192.168.2.5	0x78f3	No error (0)	d2qlomkzr3gd97.cloudfront.net		18.244.214.96	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.955663919 CEST	1.1.1.1	192.168.2.5	0x5e7e	No error (0)	segments.company-target.com		216.137.39.37	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.955663919 CEST	1.1.1.1	192.168.2.5	0x5e7e	No error (0)	segments.company-target.com		216.137.39.21	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.955663919 CEST	1.1.1.1	192.168.2.5	0x5e7e	No error (0)	segments.company-target.com		216.137.39.63	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:28.955663919 CEST	1.1.1.1	192.168.2.5	0x5e7e	No error (0)	segments.company-target.com		216.137.39.126	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:29.666307926 CEST	1.1.1.1	192.168.2.5	0x17b2	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:29.666307926 CEST	1.1.1.1	192.168.2.5	0x17b2	No error (0)	star-mini.c10r.facebook.com		31.13.70.36	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:29.666997910 CEST	1.1.1.1	192.168.2.5	0x6648	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:32.480588913 CEST	1.1.1.1	192.168.2.5	0x3fea	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:32.480588913 CEST	1.1.1.1	192.168.2.5	0x3fea	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:37.643223047 CEST	1.1.1.1	192.168.2.5	0xbc87	No error (0)	id.rlcdn.com		35.244.154.8	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:38.041616917 CEST	1.1.1.1	192.168.2.5	0x1353	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:38.041616917 CEST	1.1.1.1	192.168.2.5	0x1353	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:38.041616917 CEST	1.1.1.1	192.168.2.5	0x1353	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.52	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:38.041616917 CEST	1.1.1.1	192.168.2.5	0x1353	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.118	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:38.041616917 CEST	1.1.1.1	192.168.2.5	0x1353	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.17	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:38.041616917 CEST	1.1.1.1	192.168.2.5	0x1353	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:38.141936064 CEST	1.1.1.1	192.168.2.5	0x39dd	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:38.141936064 CEST	1.1.1.1	192.168.2.5	0x39dd	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.053215981 CEST	1.1.1.1	192.168.2.5	0x5d38	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.053215981 CEST	1.1.1.1	192.168.2.5	0x5d38	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.053215981 CEST	1.1.1.1	192.168.2.5	0x5d38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:39.053215981 CEST	1.1.1.1	192.168.2.5	0x5d38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:39.053215981 CEST	1.1.1.1	192.168.2.5	0x5d38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:39.053215981 CEST	1.1.1.1	192.168.2.5	0x5d38	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:39.069652081 CEST	1.1.1.1	192.168.2.5	0xa7c	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.069652081 CEST	1.1.1.1	192.168.2.5	0xa7c	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.117686987 CEST	1.1.1.1	192.168.2.5	0x2b53	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.117686987 CEST	1.1.1.1	192.168.2.5	0x2b53	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.144814968 CEST	1.1.1.1	192.168.2.5	0xb7fe	No error (0)	bootstrap.driftapi.com	api-ingress.driftapi.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.144814968 CEST	1.1.1.1	192.168.2.5	0xb7fe	No error (0)	api-ingress.driftapi.com	d1nie5ipy0d64w.cloudfront.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:39.144814968 CEST	1.1.1.1	192.168.2.5	0xb7fe	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.17	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:39.144814968 CEST	1.1.1.1	192.168.2.5	0xb7fe	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.116	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:39.144814968 CEST	1.1.1.1	192.168.2.5	0xb7fe	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.118	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:39.144814968 CEST	1.1.1.1	192.168.2.5	0xb7fe	No error (0)	d1nie5ipy0d64w.cloudfront.net		216.137.39.52	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.422837019 CEST	1.1.1.1	192.168.2.5	0x8001	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.422837019 CEST	1.1.1.1	192.168.2.5	0x8001	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.422837019 CEST	1.1.1.1	192.168.2.5	0x8001	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.422837019 CEST	1.1.1.1	192.168.2.5	0x8001	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.422837019 CEST	1.1.1.1	192.168.2.5	0x8001	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.422837019 CEST	1.1.1.1	192.168.2.5	0x8001	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.423505068 CEST	1.1.1.1	192.168.2.5	0x7b3d	No error (0)	metrics.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.423505068 CEST	1.1.1.1	192.168.2.5	0x7b3d	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.429480076 CEST	1.1.1.1	192.168.2.5	0x8404	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.429480076 CEST	1.1.1.1	192.168.2.5	0x8404	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.429480076 CEST	1.1.1.1	192.168.2.5	0x8404	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.429480076 CEST	1.1.1.1	192.168.2.5	0x8404	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.429480076 CEST	1.1.1.1	192.168.2.5	0x8404	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.429480076 CEST	1.1.1.1	192.168.2.5	0x8404	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.430205107 CEST	1.1.1.1	192.168.2.5	0xa24	No error (0)	event.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.430205107 CEST	1.1.1.1	192.168.2.5	0xa24	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	47616-16.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.207.238.46	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.214.17.22	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		34.195.199.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.213.20.27	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		44.220.102.53	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		54.89.241.133	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.213.23.230	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766433001 CEST	1.1.1.1	192.168.2.5	0xc669	No error (0)	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		3.222.206.211	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:42.766561985 CEST	1.1.1.1	192.168.2.5	0x171b	No error (0)	47616-16.chat.api.drift.com	ee15ba61-wschat-wschatalb-6fcf-2062696737.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:49.443147898 CEST	1.1.1.1	192.168.2.5	0x12e4	No error (0)	log.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:49.443147898 CEST	1.1.1.1	192.168.2.5	0x12e4	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:49.443147898 CEST	1.1.1.1	192.168.2.5	0x12e4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		34.193.113.164	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:49.443147898 CEST	1.1.1.1	192.168.2.5	0x12e4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		54.147.21.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:49.443147898 CEST	1.1.1.1	192.168.2.5	0x12e4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		3.94.218.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:49.443147898 CEST	1.1.1.1	192.168.2.5	0x12e4	No error (0)	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		50.16.7.188	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:49.444036007 CEST	1.1.1.1	192.168.2.5	0xbec1	No error (0)	log.api.drift.com	istio.api.drift.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:49.444036007 CEST	1.1.1.1	192.168.2.5	0xbec1	No error (0)	istio.api.drift.com	afe79c04fd8464db69f453355c110684-6aa967fe209738b1.elb.us-east-1.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:51.719928026 CEST	1.1.1.1	192.168.2.5	0xf606	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:51.719928026 CEST	1.1.1.1	192.168.2.5	0xf606	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 14:22:54.488449097 CEST	1.1.1.1	192.168.2.5	0xad69	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:54.489845037 CEST	1.1.1.1	192.168.2.5	0xc077	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:55.899244070 CEST	1.1.1.1	192.168.2.5	0x92fb	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 14:22:55.899348974 CEST	1.1.1.1	192.168.2.5	0x4823	No error (0)	eu.docusign.net	eu.docusign.net.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49715	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:44 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:21:44 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=240124 Date: Wed, 24 Apr 2024 12:21:44 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49720	23.206.6.29	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 12:21:45 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=240116 Date: Wed, 24 Apr 2024 12:21:45 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 12:21:45 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	35.162.217.246	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:44 UTC	539	OUT	GET /ds_arya_wrapper.min.js?f=1 HTTP/1.1 Host: a.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://eu.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:21:45 UTC	313	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:21:45 GMT Content-Length: 631 Connection: close Server: DS-Arya Expires: Thu, 25 Apr 2024 12:21:45 GMT Cache-Control: max-age=86400 Set-Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-04-24 12:21:45 UTC	631	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 75 3d 74 68 69 73 3b 21 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 69 2c 66 2c 72 2c 65 2c 6f 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 72 65 74 75 72 6e 20 64 65 66 69 6e 65 28 6f 29 3b 66 26 26 66 5b 72 5d 3f 66 5b 72 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 3a 75 5b 6e 5d 3d 6f 28 6e 2c 30 2c 21 30 2c 66 2c 72 2c 65 29 7d 28 22 44 53 5f 41 72 79 61 22 2c 30 2c 30 2c 75 2e 6d 6f 64 75 6c 65 2c 22 65 78 70 6f 72 74 73 22 2c 22 6c 65 6e 67 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 2c 66 2c 72 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 75 3d 7b 7d 2c 63 3d 28 73 28 66 75 6e 63 74 Data Ascii: (function(){var u=this;!function(n,t,i,f,r,e,o){if("function"==typeof define&&define.amd)return define(o);f&&f[r]?f[r]=o(n,0,!0,f,r,e):u[n]=o(n,0,!0,f,r,e)}("DS_Arya",0,0,u.module,"exports","length",function(t,i,n,f,r,e,o){"use strict";var u={},c=(s(funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49728	35.186.241.51	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:46 UTC	1081	OUT	GET /track/?data=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&ip=1&_=1713961304989 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://eu.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eu.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:21:46 UTC	578	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://eu.docusign.net access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Wed, 24 Apr 2024 12:21:46 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-24 12:21:46 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49727	35.186.241.51	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:46 UTC	1083	OUT	GET /track/?data=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%3D&ip=1&_=1713961304990 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://eu.docusign.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://eu.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:21:46 UTC	578	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: https://eu.docusign.net access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Wed, 24 Apr 2024 12:21:46 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-24 12:21:46 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49737	35.186.241.51	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:46 UTC	877	OUT	GET /track/?data=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&ip=1&_=1713961304989 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:21:47 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Wed, 24 Apr 2024 12:21:47 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-24 12:21:47 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49738	35.186.241.51	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:46 UTC	879	OUT	GET /track/?data=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%3D&ip=1&_=1713961304990 HTTP/1.1 Host: api.mixpanel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:21:47 UTC	556	IN	HTTP/1.1 200 OK access-control-allow-credentials: true access-control-allow-headers: X-Requested-With access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * access-control-expose-headers: X-MP-CE-Backoff access-control-max-age: 1728000 cache-control: no-cache, no-store content-type: application/json strict-transport-security: max-age=604800; includeSubDomains date: Wed, 24 Apr 2024 12:21:47 GMT Content-Length: 1 x-envoy-upstream-service-time: 0 server: envoy Via: 1.1 google Alt-Svc: clear Connection: close
2024-04-24 12:21:47 UTC	1	IN	Data Raw: 31 Data Ascii: 1

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.5	49785	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:21:55 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1713961282968&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-24 12:21:55 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-24 12:21:55 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-24 12:21:55 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: 28DD3097C7314086B3F5583381DF44FB Ref B: LAX311000108017 Ref C: 2024-04-24T12:21:55Z Date: Wed, 24 Apr 2024 12:21:55 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1713961315.3a44d61

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49817	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:10 UTC	680	OUT	GET /0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:10 UTC	514	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8739 Connection: close Date: Tue, 23 Apr 2024 13:33:42 GMT Last-Modified: Thu, 04 Apr 2024 21:36:01 GMT ETag: "e259d49ad1b22d7f61343b11e3d63454" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 b996c07514e4a2d6fd2b292923e453a0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 4H2ilYfbwxu-E4GgSb0wm2xJ_ezPwVSMMFUO5Cge5FuirtH-kmT4Gw== Age: 82109
2024-04-24 12:22:10 UTC	8739	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 14 00 00 02 4f 08 03 00 00 00 d2 63 62 23 00 00 01 b0 50 4c 54 45 4c 00 ff cb c2 ff ff 57 32 00 00 00 45 08 f4 ff ff ff 9b 79 ff a5 2b 98 e8 e0 fe 09 00 20 43 00 df f4 52 3f 57 05 f2 26 00 80 8b 65 f8 b9 a2 fb e9 df ff 6c 31 ff bc 9f ff 63 0b e5 e9 4c 4c d2 41 65 79 16 cc bb a9 ff 8f 21 b2 8f 60 ff 39 00 bf 13 00 40 5c 27 f5 54 0c ff 8b 61 ff df 4c 2c 05 00 10 48 00 ef 19 19 20 20 0b 06 1d 00 60 ab 91 ff 7c 49 ff 5d 27 f5 63 20 ff d1 c1 fc 5c 18 ff 74 46 f7 bc 36 7f 62 20 ff 30 00 9f 7f 79 9f 4c 49 60 49 04 f9 d1 b5 e5 a2 83 fa 60 21 13 80 2c 19 b2 aa df 79 40 ff d2 bf ff 96 74 f9 f4 ef ff f9 64 4c f3 f0 fe 32 30 40 be b6 ef dd d1 fe ae 93 fa df 9a b3 98 91 bf 0d 0c 10 65 60 80 c3 b6 ff b1 aa df eb Data Ascii: PNGIHDROcb#PLTELW2Ey+ CR?W&el1cLLAey!`9@\'TaL,H `\|I]'c \tF6b 0yLI`I`!,y@tdL20@e`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49818	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:10 UTC	674	OUT	GET /0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:10 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 207158 Connection: close Date: Tue, 23 Apr 2024 16:13:41 GMT Last-Modified: Fri, 05 Apr 2024 16:35:23 GMT ETag: "3ab004a1051b551cf461646929eaada0" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 9077d521265906f5bce86659dc65d41e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: vhYFCJTxi5uqjnv5Zq3Z9elmhnqsPL4kM2xT3nMiNsimHN89doLCbA== Age: 72510
2024-04-24 12:22:10 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 28 00 00 04 a0 08 03 00 00 00 55 39 30 ba 00 00 02 f7 50 4c 54 45 ff ff ff 4c 00 ff 19 18 22 70 33 ff 4c 00 fd 4b 00 fa e9 e9 ea 49 00 f3 48 00 ef 4b 00 fc 4a 00 f7 f6 f6 f6 47 00 ec fa fa fa 45 00 e6 4a 00 f8 f3 f3 f3 46 00 ea 49 00 f5 ef ef f0 48 00 f1 eb eb eb e7 e7 e7 44 00 e2 ed ed ed 45 00 e8 e5 e5 e5 a2 7c fb 43 01 e0 e3 e3 e3 dd dd dd a2 7b fd db da db 35 34 3e df df df eb ea ed 6d 32 f9 e8 e7 eb 6f 6e 74 a5 81 fa e1 e1 e1 e6 e4 ec c6 c5 c8 42 01 dc a8 a8 ac 45 08 f4 41 01 d9 a4 7f fa a7 84 fa 2d 2b 38 8c 8b 90 a8 85 fa 27 26 2f 6c 32 f5 53 52 5a 4e 4d 55 9a 9a 9e e2 de ed a3 7d fd e9 e8 ee 4b a3 63 df d9 ee 6a 31 f2 40 01 d6 a7 84 fd 6d 32 f7 d2 c5 f1 61 60 67 a9 85 fc 6e 33 fb 69 31 f0 68 Data Ascii: PNGIHDR(U90PLTEL"p3LKIHKJGEJFIHDE\|C{54>m2ontBEA-+8'&/l2SRZNMU}Kcj1@m2a`gn3i1h
2024-04-24 12:22:10 UTC	16384	IN	Data Raw: 2a 76 99 19 c5 ad c4 02 2e 5d 28 c8 85 9d 27 68 45 ae 9e 10 1b 85 ec b2 99 49 b6 3a 81 6a 4c d9 e3 0c 42 f1 fb ce 71 9c 0f e5 cf 1c 42 d1 a7 29 c5 f1 41 2b 05 91 8b a8 e7 25 85 94 13 30 69 e5 0b 0a 90 d7 88 0a 46 13 89 c5 0b 85 08 2e ea 8a 42 2c e0 db e8 d8 1d 0c f5 6a 44 21 df f4 01 54 75 db ce 58 28 c6 7e aa 50 3c 3e dd 39 8e f3 c1 3c bd cc 21 14 52 53 e8 39 85 39 89 4a 9d 80 eb 6e 87 05 59 3b d0 ee 50 53 94 5b 4f b5 78 b3 17 2e 14 27 98 30 6e 67 14 99 7a 82 a1 80 f7 00 79 80 2a be c3 06 8c 4b 86 a4 94 a1 53 2b 8a 17 6f 3b 39 4e 96 a5 b5 9f fa 38 a4 90 7f f8 85 8a 62 10 e7 55 c6 49 b1 2b c6 02 96 85 a2 9e f1 c4 91 e5 0b 45 9b 3e da ec e6 53 c7 de 93 ed 3c 45 89 47 22 e0 5e be 1f 51 87 28 36 c6 97 9d b6 9e 64 92 7d c4 75 c2 71 16 cf 64 a5 e8 d3 2c 1b 77 Data Ascii: v.]('hEI:jLBqB)A+%0iF.B,jD!TuX(~P<>9<!RS99JnY;PS[Ox.'0ngzyKS+o;9N8bUI+E>S<EG"^Q(6d}uqd,w
2024-04-24 12:22:10 UTC	2410	IN	Data Raw: 15 95 a0 cb ec 3f 88 05 24 a1 f8 aa 44 8c 9e 82 c0 15 a9 13 0c 9e f8 90 e2 fd 7d 50 70 15 6a 95 1e bb aa 4a c0 cc ae fb 28 4e 8a 45 01 bc 59 14 5e 84 a2 11 0b 28 e0 89 87 26 54 ba cc 5e 91 e0 01 2f 1b 42 71 45 3d 51 c1 dd a5 13 71 47 f1 8f bd f3 79 6d 1a 0c e3 f8 bb 74 c4 1f b5 5a 57 d4 29 56 96 0a 41 c2 7b b1 94 d7 dc 7b 7c 0f 25 14 26 e9 c5 83 64 64 3d f5 e4 ae 45 f1 a0 ee e0 45 7a 50 d8 5a c1 93 ac 03 4f 3a 28 43 51 11 4f 1e f4 ef f1 4d de bc 79 f2 ee 6d 85 d6 e2 1a 97 8f 6d 75 d4 24 4d 32 f6 dd fb fc f8 3e 19 19 29 23 37 23 4c 26 54 9b 71 9e a4 50 ec 63 79 17 85 34 e1 0e aa 9e 40 27 60 41 c1 19 a7 13 a9 a9 8f 5d 74 a1 00 5b c0 25 d5 16 90 c7 9d e4 25 45 40 f0 1a 57 c7 86 9d 14 49 9b 71 08 3b b1 27 47 29 7a ca bc 9e 32 32 d2 48 6e 5a 54 af 27 70 05 bc Data Ascii: ?$D}PpjJ(NEY^(&T^/BqE=QqGymtZW)VA{{\|%&dd=EEzPZO:(CQOMymmu$M2>)#7#L&TqPcy4@'`A]t[%%E@WIq;'G)z22HnZT'p
2024-04-24 12:22:10 UTC	16384	IN	Data Raw: dd d8 62 7b 30 0f 93 2d 64 f6 a8 65 18 9a c6 b6 b7 ed b5 b8 a5 f0 05 19 78 de 2e 3e 08 76 6d 34 9b 18 7b 88 b1 6d b6 9a cd 27 5a 8d 84 b0 bd ae 1e bd 8c bd e0 84 5e 1b 46 78 ae f1 41 4a a3 d1 5b 63 4b d3 3e 34 bb 18 eb a1 a4 78 3b 84 d4 02 08 e3 71 b5 ba ce cf e5 20 3a 97 96 89 cb 65 24 a1 63 ec 90 57 ec 93 1a ef 08 a3 e7 79 f1 ae 1b c1 ae df 8e 46 25 24 20 a4 6a f9 f1 15 ac 50 4a 9a ec f8 ef 9a 1b 62 53 2e 14 bb 5e 27 ba 03 bf 46 ae 52 51 1b 1c b0 19 1f 70 80 71 24 14 5f 8b 65 4a ef 07 d7 b2 6b 56 f9 69 72 30 a6 c1 77 c3 6f f6 ce df 37 79 23 8c e3 2d 6a e9 0f 9a 96 96 36 4d 51 a9 70 aa 5a 91 c5 12 cb c2 de 3d 7a 40 c8 12 08 56 84 e5 64 62 4a 56 e4 c8 03 21 43 32 bc ca 10 24 02 48 4c 28 20 31 15 24 14 a5 4a a2 28 53 86 b7 7f 4f 9f f3 f9 7c be 5c 08 6f 5f Data Ascii: b{0-dex.>vm4{m'Z^FxAJ[cK>4x;q :e$cWyF%$ jPJbS.^'FRQpq$_eJkVir0wo7y#-j6MQpZ=z@VdbJV!C2$HL( 1$J(SO\|\o_
2024-04-24 12:22:10 UTC	16384	IN	Data Raw: 58 78 57 de 91 7a 2c c8 9e 6e a7 af ae 7e 39 28 a4 52 97 44 59 73 b9 0e 14 54 8c b5 0b 8a 1c a9 83 68 e3 ea 4a 4d a7 f9 82 3b 4c 78 9c a7 e7 8a 52 3c 38 23 0a 6f 60 8e 68 e7 5e 1c 6c 4c aa a3 aa 4a 36 0e d6 97 e5 e0 4a 50 d0 c8 c9 3e d1 0b ac c3 09 a3 a0 b1 47 e4 f7 2c 11 14 70 2f d0 1e 01 18 14 fd 1e 7a 7c 22 28 c8 a1 67 69 e8 2d 41 2e 38 46 9a 13 0c e9 84 b0 12 14 61 c8 8c 8d 67 14 e5 ec 20 46 5a 6a 6a 54 e7 95 33 29 9a 25 f7 ad 1b 46 34 9a 52 94 38 b5 3a dd 54 77 64 51 13 d1 6a 96 dc 21 95 e8 40 09 d8 63 6f 05 a1 2c 9f c7 c1 34 05 8e 54 34 b2 90 e6 99 4e fe 0b a0 a8 19 20 0d 3c ca 3d 90 ce a2 06 e8 ff a6 f7 c5 82 3b 2a 0c 02 17 9f 1f 1d 80 35 00 15 ab 41 11 90 8b 71 30 18 a6 58 b4 00 a0 cc c7 99 a7 28 aa c7 56 40 ca f0 20 66 e3 69 db 09 19 20 28 30 94 Data Ascii: XxWz,n~9(RDYsThJM;LxR<8#o`h^lLJ6JP>G,p/z\|"(gi-A.8Fag FZjjT3)%F4R8:TwdQj!@co,4T4N <=;*5Aq0X(V@ fi (0
2024-04-24 12:22:10 UTC	16384	IN	Data Raw: e8 d1 13 93 cc a6 9c 70 cc 9e 70 c2 9d f3 9b 05 4a 30 67 4f 5f 53 61 c9 13 f9 26 fa 30 23 8a 60 3c 5e 2e 6e 70 ff 4c f9 93 93 5a 2d cb fd 4d 85 82 c1 f3 9a bf 72 f1 78 88 f3 93 3e 50 6a b5 18 07 ea 0f aa b9 dc a3 5e 26 9b cd d5 ce b9 95 fe 7f 5a 7b a2 46 33 05 30 a2 c0 80 c2 d7 3e f6 53 7a 8a 8d a0 a0 94 70 6a 9e 3c b0 18 5b 02 fa 27 b3 c7 07 4f 0b cf 8a 45 06 05 6e e1 ec ea 58 f8 fa d8 6b 1f 8b 21 05 f6 db 31 1e 1e 6c 7d ac b7 e1 6e 44 89 0f 75 1e 45 44 92 6c b9 c8 fd 33 59 9a 96 48 e4 fe 36 28 22 91 41 c2 5f 2d 49 0a 72 7e 4a 8b 99 44 22 ce 81 92 62 5b 51 1e 85 c2 5c ee 3a 31 e0 56 fa ff 69 ed 29 c2 79 14 de a3 27 26 9b 4d 45 07 db 4c f6 66 33 2e e3 7e f5 b1 2c 2a 96 67 64 f6 42 83 02 85 f1 84 6f 48 31 25 ef c4 6c cc 51 50 52 80 c6 9c 70 49 c1 f4 db 7d Data Ascii: ppJ0gO_Sa&0#`<^.npLZ-Mrx>Pj^&Z{F30>Szpj<['OEnXk!1l}nDuEDl3YH6("A_-Ir~JD"b[Q\:1Vi)y'&MELf3.~,*gdBoH1%lQPRpI}
2024-04-24 12:22:10 UTC	11610	IN	Data Raw: b4 90 35 79 28 09 17 22 bc c8 c3 df d5 db e3 4f 54 19 22 99 42 03 c9 e5 0a 0e 65 28 c5 46 a3 d3 a9 27 28 67 6e 57 b7 79 7b 26 95 a2 3a ca 89 c4 60 70 52 ed 85 c3 bf 4b 92 02 71 96 bf 1a 0c 36 1b a4 31 3c 26 ca 85 ba e3 e4 e8 fc 14 d4 73 83 72 83 46 35 db ed ae e4 6f 0a 05 42 09 9f e4 6d 6a 35 41 b2 d3 2d 65 1b 9b 9d 4e 39 71 45 b9 3d 5f b7 5a 4d 0d df f0 37 66 a4 b1 f6 30 60 c9 0d 72 b9 fe 72 79 e8 b8 06 2d 82 52 e2 0d e5 c1 ed b7 d5 ea 3f ba ab 92 17 11 0d d2 d5 ea 20 77 9e a7 8c f2 34 47 c7 34 aa 15 aa 70 37 58 76 9c a4 f0 2a 47 18 c9 f7 07 f7 8d b5 b7 ed 6e 3e 7f 5c 4e 45 a3 2e 28 56 86 c7 cb cb 89 c4 6a fb 3d 9d 30 d5 77 9c 2f d9 96 ca 6d 78 98 49 a5 9a f5 2e 9f ad 52 20 a1 7c b9 44 56 a7 06 33 e6 ac 50 6f 85 5d 99 a7 68 3a e5 41 6e 93 b5 a7 04 0b 5b Data Ascii: 5y("OT"Be(F'(gnWy{&:`pRKq61<&srF5oBmj5A-eN9qE=_ZM7f0`rry-R? w4G4p7Xv*Gn>\NE.(Vj=0w/mxI.R \|DV3Po]h:An[
2024-04-24 12:22:10 UTC	16384	IN	Data Raw: da fa b9 fa 73 05 96 44 d1 a1 bf cb 7f b1 fe f9 8b 7f 84 fe 77 1c 23 91 6b 5b c9 cc b7 52 5f 85 11 31 8e 8d 36 1c 93 45 71 13 a6 08 b6 08 68 04 59 5a 3e 1d 97 55 91 8c 8a 85 45 e1 60 a2 3b 40 ff 6c 10 1c e1 6b 4f 3c d4 c0 91 75 9a a8 4f 55 f5 a2 c8 e3 c8 22 17 32 e8 47 7f 3f 0a 49 2c 2e 96 6e 75 bd 24 01 88 63 63 4f 24 c3 4d 6e 27 86 ee 68 ce 27 bf 3c 6a 1d ab 50 36 80 28 c0 69 66 ca 6e 48 dd b2 e1 09 88 02 36 10 d8 1c e1 04 97 62 e5 c5 23 77 e1 17 eb e5 1a a8 6a 6b 95 7b e5 fb 60 ed 24 b5 e8 67 e2 c4 4f d6 9f c2 6e fd cb d7 36 fd ff 4a fd 0d 57 ac 6a 52 25 55 3b 61 89 91 9a 3c ce e6 44 20 42 8c 37 27 9a b0 45 51 0a 45 b2 53 9c 22 cc 09 16 85 29 16 c3 02 92 db d2 88 22 1e 56 be 88 2e 64 53 a8 4b 45 2f e4 de 11 47 fc ee 21 3c f6 7f b1 50 bf 78 9d 13 d6 0e Data Ascii: sDw#k[R_16EqhYZ>UE`;@lkO<uOU"2G?I,.nu$ccO$Mn'h'<jP6(ifnH6b#wjk{`$gOn6JWjR%U;a<D B7'EQES")"V.dSKE/G!<Px
2024-04-24 12:22:10 UTC	16384	IN	Data Raw: 88 b7 b9 80 62 d4 8a 2c 81 c2 88 a0 37 83 02 fc e9 a0 41 50 44 3c db c0 5e 05 8a c8 26 a0 a0 c3 10 28 4c 73 c8 c1 0a 82 e2 67 4a ed 05 14 d3 e1 d0 e2 35 f9 4c 00 26 5a 1c 86 88 02 05 59 14 c2 98 88 4a 01 23 91 42 85 41 c1 bb 89 4c 14 28 7a a5 43 d3 3e dd 8e d3 ae 23 00 0a fb ec 2f 81 a2 37 e1 c3 b5 5a ae b9 02 14 90 43 cf a8 9e 0e 7d 50 44 22 7b 83 c3 6c a9 0a 5b 32 28 72 f3 8e 9b 4c 6e bd 0c 8a ce 5c c5 ff 05 50 44 08 14 95 02 86 2a a1 6e 2f 05 8a 88 2c 49 6d 23 28 04 c5 72 9a 60 d3 e7 05 50 44 36 04 45 84 d6 66 8b 22 0c 8a 6a ab c2 a0 90 eb 8f d3 bf 72 ff 4b 04 42 db 84 27 3c 2f 4b c5 77 b5 21 81 0f 28 fe 44 00 09 95 85 fc 13 bc 16 06 6b c8 0a 27 70 c4 d4 22 fc 5d 8a cf d9 a2 f0 c4 05 da 30 06 ec 89 e5 2f 18 7d 2c cd b3 fd 26 da f4 0b a6 7f ab 9a 69 f3 Data Ascii: b,7APD<^&(LsgJ5L&ZYJ#BAL(zC>#/7ZC}PD"{l[2(rLn\PD*n/,Im#(r`PD6Ef"jrKB'</Kw!(Dk'p"]0/},&i
2024-04-24 12:22:10 UTC	1335	IN	Data Raw: 4f 4c 7a b2 a3 91 27 48 81 c0 44 48 93 d9 e1 28 fa 1c c5 27 99 ca 66 69 76 9b a5 c0 4e 50 1f 3b b1 14 26 6c 45 3f 14 b0 1a 0a 8a 9e 84 13 87 63 01 6b 17 85 df 9b 20 85 8c f0 70 58 78 2e 9b e2 58 14 ad 76 90 82 3c 05 a8 f8 8f 07 9f 60 c5 2c 4b 31 3a ee 60 04 bf 94 a4 e0 83 9a 88 40 c3 0d 99 a2 b8 21 00 11 4e e2 70 c1 9d df 2e 28 81 c2 52 7c 15 72 48 5c 6e e7 04 a9 6c bb fa 6c 76 71 14 88 c8 53 d1 8e 12 76 27 24 3c f4 d4 58 8a 3e 45 31 0d 3d 7d 28 9b 50 d9 70 a7 9c 70 35 8e 42 fa ed 0e 86 02 ea 94 f1 5f af cc f6 87 86 9e f0 13 fe 20 b4 ee af e0 04 0a 3f e1 4f 54 2c 85 9d c3 91 4f 2c ba 9b 4d 7b 42 f6 e5 a9 11 1e a4 c4 a7 9b 50 81 c4 c1 e0 d8 b8 c9 4f 90 a4 08 4b e1 18 a5 30 36 d6 15 39 29 10 7e c2 ce 1f c8 51 48 d1 93 0c 8f ed 73 14 ec cc ae 39 0a 1c 85 86 Data Ascii: OLz'HDH('fivNP;&lE?ck pXx.Xv<`,K1:`@!Np.(R\|rH\nllvqSv'$<X>E1=}(Ppp5B_ ?OT,O,M{BPOK069)~QHs9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49819	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:12 UTC	670	OUT	GET /0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:13 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4122 Connection: close Last-Modified: Wed, 17 Nov 2021 20:12:28 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 23 Apr 2024 16:34:28 GMT Cache-Control: max-age=31536000 ETag: "3c5f851c455bada111c434545abf9263" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5bd918b219147fe5383554f645d96f74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: a1E_HyK1SlkdjEPN638PXWK_XAAmOMO-bwp5l-OghEsa--9dDFBNvw== Age: 71265
2024-04-24 12:22:13 UTC	4122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 02 f4 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 05 06 06 fd fd fd 03 03 03 6e 6e 6e f5 f5 f5 ec ec ec 3e 3e 3e 2e 2e 2e 08 0b 0b f9 f9 f9 ee ee ee 8e 8e 8e f0 f0 f0 0e 0f 0f d7 d7 d7 17 17 17 33 90 a0 09 08 08 e0 e0 e0 4e a3 af dc dc dc 8a 8a 8a 54 54 54 f7 f7 f7 f4 f4 f4 cc cc cc fc fc fc 53 a8 b2 46 46 46 fb fb fb ea ea ea 56 aa b4 21 21 21 c9 c9 c9 c4 c4 c4 c0 c0 c0 13 13 13 ae ae ae 45 9d aa a2 a2 a2 24 85 98 1f 80 95 3a 3a 3a 1d 1d 1d d0 d0 d0 5e b0 b8 59 ac b5 b1 b1 b1 50 a5 b1 4a a1 ad 40 99 a8 37 93 a2 29 88 9b 18 7b 92 bc bc bc b8 b8 b8 48 Data Ascii: PNGIHDRTZPLTEnnn>>>...3NTTTSFFFV!!!E$:::^YPJ@7){H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49820	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:12 UTC	668	OUT	GET /0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:13 UTC	535	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3429 Connection: close Last-Modified: Mon, 10 Jan 2022 22:34:57 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Wed, 24 Apr 2024 12:18:39 GMT Cache-Control: max-age=31536000 ETag: "0d26df8d62b0515d1dbfc983ff628fa5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1d4c12e1d99255c676c0a5445e866a5a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: wklLEjPReiQrendM4N585akBT6DDCWteIBKaeSDAwyB5LkgTYDQjiQ== Age: 215
2024-04-24 12:22:13 UTC	3429	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 01 2c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 03 03 fd fd fd 06 06 06 f9 f9 f9 ee ee ee fb fb fb f2 f2 f2 bf bf bf c4 c4 c4 90 90 90 f4 f4 f4 bb bb bb 73 73 73 36 36 36 cb cb cb 75 75 75 e7 e7 e7 6c 6c 6c 45 45 45 13 13 13 31 31 31 20 20 20 df df df 2c 2c 2c 0a 0a 0a 58 58 58 f6 f6 f6 eb eb eb c7 c7 c7 5b 5b 5b 1b 1b 1b 0f 0f 0f b8 b8 b8 ad ad ad a8 a8 a8 9d 9d 9d 70 70 70 60 60 60 55 55 55 af af af 84 84 84 7c 7c 7c d9 d9 d9 d6 d6 d6 78 78 78 3f 3f 3f d2 d2 d2 a1 a1 a1 92 92 92 8b 8b 8b cf cf cf 81 81 81 4e 4e 4e 0b 0b 0b e2 e2 e2 99 99 99 65 Data Ascii: PNGIHDRTZ,PLTEsss666uuulllEEE111 ,,,XXX[[[ppp```UUU\|\|\|xxx???NNNe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49828	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:13 UTC	444	OUT	GET /0jnmtsdzg6p5/5icnOLLbYj5amywtaUaoP5/4836b80639d246024bca7d358e1b16d2/illustration-agreement-trap.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:13 UTC	514	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 8739 Connection: close Date: Tue, 23 Apr 2024 13:33:42 GMT Last-Modified: Thu, 04 Apr 2024 21:36:01 GMT ETag: "e259d49ad1b22d7f61343b11e3d63454" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 8c0cf74a8ac4637a28b8ef40ac35c710.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: AVpz6Uws0DXaw07weNJ2AxMQrxjUnAdYZ63-jDueDzfsYX4Ux_5_vQ== Age: 82112
2024-04-24 12:22:13 UTC	8739	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 14 00 00 02 4f 08 03 00 00 00 d2 63 62 23 00 00 01 b0 50 4c 54 45 4c 00 ff cb c2 ff ff 57 32 00 00 00 45 08 f4 ff ff ff 9b 79 ff a5 2b 98 e8 e0 fe 09 00 20 43 00 df f4 52 3f 57 05 f2 26 00 80 8b 65 f8 b9 a2 fb e9 df ff 6c 31 ff bc 9f ff 63 0b e5 e9 4c 4c d2 41 65 79 16 cc bb a9 ff 8f 21 b2 8f 60 ff 39 00 bf 13 00 40 5c 27 f5 54 0c ff 8b 61 ff df 4c 2c 05 00 10 48 00 ef 19 19 20 20 0b 06 1d 00 60 ab 91 ff 7c 49 ff 5d 27 f5 63 20 ff d1 c1 fc 5c 18 ff 74 46 f7 bc 36 7f 62 20 ff 30 00 9f 7f 79 9f 4c 49 60 49 04 f9 d1 b5 e5 a2 83 fa 60 21 13 80 2c 19 b2 aa df 79 40 ff d2 bf ff 96 74 f9 f4 ef ff f9 64 4c f3 f0 fe 32 30 40 be b6 ef dd d1 fe ae 93 fa df 9a b3 98 91 bf 0d 0c 10 65 60 80 c3 b6 ff b1 aa df eb Data Ascii: PNGIHDROcb#PLTELW2Ey+ CR?W&el1cLLAey!`9@\'TaL,H `\|I]'c \tF6b 0yLI`I`!,y@tdL20@e`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49827	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:13 UTC	438	OUT	GET /0jnmtsdzg6p5/1tTgqEdlVv1NDJyzAea2r4/a35fe32c30ef9644c8a52e345216cca8/ds-ui-ai-analysis__1_.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:13 UTC	516	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 207158 Connection: close Date: Tue, 23 Apr 2024 16:13:41 GMT Last-Modified: Fri, 05 Apr 2024 16:35:23 GMT ETag: "3ab004a1051b551cf461646929eaada0" Cache-Control: max-age=31536000 Server: Contentful Images API Access-Control-Allow-Origin: * X-Cache: Hit from cloudfront Via: 1.1 893ef1bc6dfa69555f715c7ed525ee9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: -qLKiYPmWk8C8ojdC0wN__jHf9AiU5G6p2GF_9-hvzNTQCPw6PhEkw== Age: 72513
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 06 28 00 00 04 a0 08 03 00 00 00 55 39 30 ba 00 00 02 f7 50 4c 54 45 ff ff ff 4c 00 ff 19 18 22 70 33 ff 4c 00 fd 4b 00 fa e9 e9 ea 49 00 f3 48 00 ef 4b 00 fc 4a 00 f7 f6 f6 f6 47 00 ec fa fa fa 45 00 e6 4a 00 f8 f3 f3 f3 46 00 ea 49 00 f5 ef ef f0 48 00 f1 eb eb eb e7 e7 e7 44 00 e2 ed ed ed 45 00 e8 e5 e5 e5 a2 7c fb 43 01 e0 e3 e3 e3 dd dd dd a2 7b fd db da db 35 34 3e df df df eb ea ed 6d 32 f9 e8 e7 eb 6f 6e 74 a5 81 fa e1 e1 e1 e6 e4 ec c6 c5 c8 42 01 dc a8 a8 ac 45 08 f4 41 01 d9 a4 7f fa a7 84 fa 2d 2b 38 8c 8b 90 a8 85 fa 27 26 2f 6c 32 f5 53 52 5a 4e 4d 55 9a 9a 9e e2 de ed a3 7d fd e9 e8 ee 4b a3 63 df d9 ee 6a 31 f2 40 01 d6 a7 84 fd 6d 32 f7 d2 c5 f1 61 60 67 a9 85 fc 6e 33 fb 69 31 f0 68 Data Ascii: PNGIHDR(U90PLTEL"p3LKIHKJGEJFIHDE\|C{54>m2ontBEA-+8'&/l2SRZNMU}Kcj1@m2a`gn3i1h
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 2a 76 99 19 c5 ad c4 02 2e 5d 28 c8 85 9d 27 68 45 ae 9e 10 1b 85 ec b2 99 49 b6 3a 81 6a 4c d9 e3 0c 42 f1 fb ce 71 9c 0f e5 cf 1c 42 d1 a7 29 c5 f1 41 2b 05 91 8b a8 e7 25 85 94 13 30 69 e5 0b 0a 90 d7 88 0a 46 13 89 c5 0b 85 08 2e ea 8a 42 2c e0 db e8 d8 1d 0c f5 6a 44 21 df f4 01 54 75 db ce 58 28 c6 7e aa 50 3c 3e dd 39 8e f3 c1 3c bd cc 21 14 52 53 e8 39 85 39 89 4a 9d 80 eb 6e 87 05 59 3b d0 ee 50 53 94 5b 4f b5 78 b3 17 2e 14 27 98 30 6e 67 14 99 7a 82 a1 80 f7 00 79 80 2a be c3 06 8c 4b 86 a4 94 a1 53 2b 8a 17 6f 3b 39 4e 96 a5 b5 9f fa 38 a4 90 7f f8 85 8a 62 10 e7 55 c6 49 b1 2b c6 02 96 85 a2 9e f1 c4 91 e5 0b 45 9b 3e da ec e6 53 c7 de 93 ed 3c 45 89 47 22 e0 5e be 1f 51 87 28 36 c6 97 9d b6 9e 64 92 7d c4 75 c2 71 16 cf 64 a5 e8 d3 2c 1b 77 Data Ascii: v.]('hEI:jLBqB)A+%0iF.B,jD!TuX(~P<>9<!RS99JnY;PS[Ox.'0ngzyKS+o;9N8bUI+E>S<EG"^Q(6d}uqd,w
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 15 95 a0 cb ec 3f 88 05 24 a1 f8 aa 44 8c 9e 82 c0 15 a9 13 0c 9e f8 90 e2 fd 7d 50 70 15 6a 95 1e bb aa 4a c0 cc ae fb 28 4e 8a 45 01 bc 59 14 5e 84 a2 11 0b 28 e0 89 87 26 54 ba cc 5e 91 e0 01 2f 1b 42 71 45 3d 51 c1 dd a5 13 71 47 f1 8f bd f3 79 6d 1a 0c e3 f8 bb 74 c4 1f b5 5a 57 d4 29 56 96 0a 41 c2 7b b1 94 d7 dc 7b 7c 0f 25 14 26 e9 c5 83 64 64 3d f5 e4 ae 45 f1 a0 ee e0 45 7a 50 d8 5a c1 93 ac 03 4f 3a 28 43 51 11 4f 1e f4 ef f1 4d de bc 79 f2 ee 6d 85 d6 e2 1a 97 8f 6d 75 d4 24 4d 32 f6 dd fb fc f8 3e 19 19 29 23 37 23 4c 26 54 9b 71 9e a4 50 ec 63 79 17 85 34 e1 0e aa 9e 40 27 60 41 c1 19 a7 13 a9 a9 8f 5d 74 a1 00 5b c0 25 d5 16 90 c7 9d e4 25 45 40 f0 1a 57 c7 86 9d 14 49 9b 71 08 3b b1 27 47 29 7a ca bc 9e 32 32 d2 48 6e 5a 54 af 27 70 05 bc Data Ascii: ?$D}PpjJ(NEY^(&T^/BqE=QqGymtZW)VA{{\|%&dd=EEzPZO:(CQOMymmu$M2>)#7#L&TqPcy4@'`A]t[%%E@WIq;'G)z22HnZT'p
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 7e 04 fd 58 54 05 f4 25 c5 e6 b3 62 e3 41 01 86 11 0a b1 69 f6 07 04 d8 5e 4c 50 a0 3b 29 08 8e 2e a0 07 13 34 41 96 6f 47 41 fe 7c 8d 12 1e 48 8a 57 50 bc 82 e2 15 14 ff 17 50 60 65 f6 57 6e 88 c2 45 85 ab 09 88 31 0a 8c 67 b3 a6 d9 9f d3 92 3b 1a 25 15 f3 63 fd ec 65 08 3d 6d 6d 36 28 c8 f8 a1 d4 b8 af 53 81 ea b1 9e 52 3b 6c 48 81 69 4f 28 32 ce 6b 78 10 6f c2 6d 48 f1 d9 3b d6 7a fa 65 3c de df 6f 7b 15 17 1a 0d cb 03 0a 08 20 fb 83 a2 da d8 f1 ce db 96 d5 f7 01 45 bf 9f f2 39 e7 7c 6a 4e b8 2e 11 bd eb a4 0b 0a b5 d7 13 40 11 09 d7 b7 b7 49 f8 11 4d 1a 8d 32 7f 1a 14 3b 61 58 9b e8 f4 bc 73 c5 4e bf 9f 51 cf 1d 50 dc 55 1b 3e a0 a8 de bc 1d 0c 46 19 b0 5c ff 7a 32 89 44 1e 2d 43 8d a6 95 b7 6f 39 1a 5c 5f 12 50 04 23 11 75 bb db eb 79 37 d5 4b fd 6e Data Ascii: ~XT%bAi^LP;).4AoGA\|HWPP`eWnE1g;%ce=mm6(SR;lHiO(2kxomH;ze<o{ E9\|jN.@IM2;aXsNQPU>F\z2D-Co9\_P#uy7Kn
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: d0 79 82 84 c6 a5 88 87 ae e1 41 e0 2b 4f 37 54 f1 58 1e f4 f4 c7 09 77 e7 58 3c 08 f5 d8 73 2c 32 2e cd c7 9f ab c7 72 cc 5f 79 e2 53 0a 4e 13 fa 1e 85 30 2e 9a b5 49 b1 10 b2 80 3f d8 3b 63 e4 84 62 18 88 26 63 33 13 92 82 0a 68 38 41 86 c3 51 71 8a dc 20 1d 27 8d f4 f5 47 8b 59 43 e1 49 f1 fd ad 17 7f 72 84 1d 79 ad dd 25 0b 85 41 ad 45 94 e1 01 b0 46 61 13 05 9e 3d 91 50 f8 4c e1 3d a8 fe e8 e9 78 d7 5c 14 42 31 0a 21 14 ab 20 35 81 ce ec b2 8f 42 fe e0 66 a3 0b d5 e6 89 32 c2 03 e1 b1 72 4a b6 33 a4 12 d3 50 d1 87 4b b1 7c a1 50 cc ff 61 2b fb a1 32 7b 47 a9 80 c2 9d 50 c0 cb ae 15 dc 61 a6 40 1f 45 08 c5 30 84 50 ac 82 d4 c8 ac 13 22 12 34 52 b8 97 fd e8 52 a8 4a f8 6a b6 9b 14 9f 94 33 2e e4 2c 5f 8d c5 8f 12 13 bd 08 45 7e 39 52 40 2a 54 ce ed e3 Data Ascii: yA+O7TXwX<s,2.r_ySN0.I?;cb&c3h8AQq 'GYCIry%AEFa=PL=x\B1! 5Bf2rJ3PK\|Pa+2{GPa@E0P"4RRJj3.,_E~9R@*T
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 59 e9 5f 18 1e 67 b3 a2 51 8c 4f 7f fb ce 84 aa d5 3d a7 9c c9 44 55 86 ad ef 8f 62 3a 6e 15 d6 9f 17 7f 5c 4b eb 3a 76 fa 6b cd 1a 3b 6b 2b a9 79 1d 79 c0 37 1d 5e 62 04 88 73 42 d6 48 c8 1d 29 1a 85 2a 1f 2b a0 70 1d da f2 8d 29 e2 f5 98 e9 89 6b 78 a2 c1 13 f8 28 7e ec 2e 78 90 80 fd 5c 35 f9 c4 23 4d 90 2b 62 95 05 25 43 ff ed 7d e1 7d d7 a0 10 67 8d 1d 0d cd 49 5b bd e2 11 4b 72 0f b5 78 5a 9c d7 2c 20 48 81 e6 3b 18 f4 34 42 a0 51 a0 cc 93 90 82 15 4c c1 04 09 4c 4f a4 52 c8 c3 e5 c1 c1 2c 43 b1 f5 c2 48 30 47 e6 a4 8d 15 96 46 6d cf 75 d1 c1 51 df a0 f1 d9 98 fa 2e c6 3e 38 5d 24 1a 8d 46 ec bc 16 27 63 e1 05 ed 8b f8 9a a1 2b 14 89 46 a2 26 06 d8 dc 16 8d 22 8c 93 63 a2 4b 7a 06 f8 37 32 37 7f 12 7f 2b 5f 52 a0 f1 97 ad f8 e3 e7 6d 97 41 e7 b6 91 Data Ascii: Y_gQO=DUb:n\K:vk;k+yy7^bsBH)*+p)kx(~.x\5#M+b%C}}gI[KrxZ, H;4BQLLOR,CH0GFmuQ.>8]$F'c+F&"cKz727+_RmA
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 40 15 18 a7 b1 a5 71 8c 76 28 0a 51 58 a2 23 85 25 78 82 a4 66 4f ea 9a 8d 49 b1 8c 67 7b 16 0f 21 6c 0a 80 df c9 92 7b a0 0a 18 67 5c 6d 64 17 1d b5 bf b3 f1 13 e5 3c 9d 11 2c eb 47 3f 51 40 0d 79 3b f7 b2 ab ce b3 75 e0 90 53 8f 13 97 68 17 eb a9 22 06 79 d7 f0 e2 78 04 9b 51 21 8b 42 53 db 1d 66 b2 a2 c0 79 43 a6 89 1a ca 76 dc e6 6d 84 e0 17 16 45 c1 9d c4 12 b8 9e be f0 32 07 54 6b 90 91 2c 9b eb b4 25 0a b5 af 9c 82 3d ed 58 9d 31 a4 f2 67 6c c5 92 7f 42 ec d4 57 38 46 82 36 5b 55 35 b4 f2 ac 94 fe 2e 47 6e fa 6f fa ff 14 fd c9 ab fe c3 f7 60 8c 1c d7 93 21 f7 a5 60 1e b3 34 8e 07 ae a7 3c 25 ea 62 3e 54 fb c8 af e1 34 b1 ec 74 c7 dc 39 a5 7d 6c 84 61 27 39 9e 80 06 1e 8a ab f4 50 01 4d 90 97 58 76 07 f6 70 ce ec 1d 3d c8 fb 00 97 7a 9a e3 13 6d 02 Data Ascii: @qv(QX#%xfOIg{!l{g\md<,G?Q@y;uSh"yxQ!BSfyCvmE2Tk,%=X1glBW8F6[U5.Gno`!`4<%b>T4t9}la'9PMXvp=zm
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 8a d3 5f 83 62 b8 09 28 aa b7 00 8a e6 22 28 6e b9 a0 d8 6f 3b 8f b1 81 7d 8c b9 a0 18 0e 19 14 03 80 42 59 50 b4 17 40 21 82 bf bf 31 28 1e f7 75 82 36 02 85 bf 16 14 9e 03 8a d7 02 8a c1 0a 50 70 5a b9 84 05 14 f5 10 a0 a8 0f 73 6f 1e 14 4a 40 71 bf ef 85 bf 03 8a c1 3c 28 be fe 26 28 f6 37 01 45 01 50 5c 51 ff 85 f8 1e 74 25 75 17 62 65 60 c7 8a ea 23 57 34 7c 92 b7 4f 34 d1 9d 1d ca a3 dc 97 42 3a 53 2c ed 9f 8d 65 56 4b 71 91 e7 30 32 8b 0c 0f 68 b5 d6 a4 98 19 15 2e 22 d6 8f 25 eb 4c 6c fd ef 41 21 72 5a 37 ad 34 2d 18 79 58 59 67 d7 d5 61 63 d5 0e b7 1a 63 4a e8 32 25 77 81 12 a5 5a 6c 38 2c db dc 49 86 17 97 11 9e d8 7a a4 75 b9 41 81 eb 44 40 f1 fd ee cc 3c 75 d8 70 0f ab 6b 56 dc 5b 03 8a 2b 58 dc 7f 2e fc d5 6e 8c 83 20 5b e1 7f a5 0a d5 16 00 Data Ascii: _b("(no;}BYP@!1(u6PpZsoJ@q<(&(7EP\Qt%ube`#W4\|O4B:S,eVKq02h."%LlA!rZ74-yXYgaccJ2%wZl8,IzuAD@<upkV[+X.n [
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 66 e7 51 34 f4 13 3c 34 fa 54 d7 65 a7 a3 88 4b 87 01 46 91 58 f5 13 39 e8 29 2e 37 6f 57 ae f4 6d 14 8d a1 78 2c cb 9e 4c 3f 5e bb b4 b4 b4 f4 e7 f4 f3 71 79 2c c9 ec e7 0c 13 7e 76 98 b0 af bf bd 72 25 d2 d9 57 81 85 49 2c 45 dd 60 94 a2 3e 16 6d 3f 5a 23 ee c4 63 3e 16 90 d5 11 e7 92 d9 e0 46 30 a1 96 a2 16 c7 f6 8b 50 6f 46 da 95 9d 29 1c fc 84 54 c7 46 7e e2 ea 15 13 6c 50 54 68 c3 5d 19 e2 71 ef aa 77 5a 5a 5a fa d3 fa 5e aa 63 c9 51 3c 6f 27 87 3d c1 09 b7 16 84 9e 5c c5 51 c8 fe 22 1a b4 59 74 b7 99 8a 40 c5 f5 d9 4b d1 8f 05 cc c5 0f a8 19 0b 18 8f f3 a0 20 00 d5 53 62 cb 51 44 1e a5 21 05 03 01 cb 3c 40 30 91 d7 2e 93 8d a1 08 50 dc 66 4c b6 f3 87 86 02 d6 a9 80 ab 7f 62 69 69 e9 44 9b f6 bd d2 99 4d 1f 85 63 a2 1f e1 71 c5 fe 57 d7 4e 86 47 32 Data Ascii: fQ4<4TeKFX9).7oWmx,L?^qy,~vr%WI,E`>m?Z#c>F0PoF)TF~lPTh]qwZZZ^cQ<o'=\Q"Yt@K SbQD!<@0.PfLbiiDMcqWNG2
2024-04-24 12:22:13 UTC	16384	IN	Data Raw: 89 c2 65 b3 6f 0f 9d 42 35 38 89 62 3f 52 04 a2 58 c2 9a 2c e8 f0 e0 6e 91 06 b3 4d cd 0e 87 8b 50 b3 0f 7f 89 f7 ee 8d 15 2a 3c 46 b5 80 c0 af 9d c8 66 77 9a c0 1f ab 6f 25 c9 98 b7 7b 87 ed c9 29 14 1c cd a6 c2 e3 f4 83 14 ac 9e ae 8c ef bf 15 b5 01 29 14 9e 2e f4 1e c5 d4 22 77 32 57 c8 41 0a 89 51 8c 13 77 88 d9 c1 1e 3b b6 3d 75 9a 20 9b ad aa ef 1b 5f f6 14 c6 09 55 b3 6f a0 8a 40 17 ac 9c 68 f2 48 88 62 85 5a c0 30 f2 a8 57 4b 46 a2 5e 1e db 87 0a 90 e6 28 b8 70 47 90 c2 f6 4e 46 15 03 a2 b0 64 76 a0 89 7f 4c 14 8f b3 af a3 50 28 9c e6 7a 52 31 7b 39 4f dc 6b 87 c7 48 cc 36 cb 93 9f 28 10 b3 d3 ae 27 8d 28 bb 1b 77 dc 98 de ab c1 08 da 21 47 31 94 b2 1d 5b 9c 77 33 5b 5f e9 d5 22 a6 89 83 6c 81 41 16 2d bb 61 91 cc 16 04 df d3 bb 2e 67 2f 4c 4f 1b Data Ascii: eoB58b?RX,nMP*<Ffwo%{))."w2WAQw;=u _Uo@hHbZ0WKF^(pGNFdvLP(zR1{9OkH6('(w!G1[w3[_"lA-a.g/LO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49829	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:13 UTC	434	OUT	GET /0jnmtsdzg6p5/2AllED5U03vd2cebLfB6rU/531a6780832941786e6ed77e0ad694dd/badge-google-play.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:13 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 4122 Connection: close Last-Modified: Wed, 17 Nov 2021 20:12:28 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Tue, 23 Apr 2024 16:34:28 GMT Cache-Control: max-age=31536000 ETag: "3c5f851c455bada111c434545abf9263" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 91ef21a3655607bd999b3da05b64026c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: KcQsjF6g4T4EN4PZTlsfLxdW03PL7S5ar2igOZeNonoSP50gdgbffQ== Age: 71265
2024-04-24 12:22:13 UTC	4122	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 02 f4 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 05 06 06 fd fd fd 03 03 03 6e 6e 6e f5 f5 f5 ec ec ec 3e 3e 3e 2e 2e 2e 08 0b 0b f9 f9 f9 ee ee ee 8e 8e 8e f0 f0 f0 0e 0f 0f d7 d7 d7 17 17 17 33 90 a0 09 08 08 e0 e0 e0 4e a3 af dc dc dc 8a 8a 8a 54 54 54 f7 f7 f7 f4 f4 f4 cc cc cc fc fc fc 53 a8 b2 46 46 46 fb fb fb ea ea ea 56 aa b4 21 21 21 c9 c9 c9 c4 c4 c4 c0 c0 c0 13 13 13 ae ae ae 45 9d aa a2 a2 a2 24 85 98 1f 80 95 3a 3a 3a 1d 1d 1d d0 d0 d0 5e b0 b8 59 ac b5 b1 b1 b1 50 a5 b1 4a a1 ad 40 99 a8 37 93 a2 29 88 9b 18 7b 92 bc bc bc b8 b8 b8 48 Data Ascii: PNGIHDRTZPLTEnnn>>>...3NTTTSFFFV!!!E$:::^YPJ@7){H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49830	18.65.25.53	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:13 UTC	432	OUT	GET /0jnmtsdzg6p5/4WOSOeq00xri7k11Xb3kkF/5a2503a98c82d94aa387922221f3daea/badge-app-store.png HTTP/1.1 Host: images.ctfassets.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:13 UTC	535	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 3429 Connection: close Last-Modified: Mon, 10 Jan 2022 22:34:57 GMT Server: Contentful Images API Access-Control-Allow-Origin: * Date: Wed, 24 Apr 2024 12:18:39 GMT Cache-Control: max-age=31536000 ETag: "0d26df8d62b0515d1dbfc983ff628fa5" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e52e2837600a0e5014c3bbea3436b996.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: jJFhAONzxV7l24dTzEQamIBGtkspAIFPRu69J3HFBiAa4lOTcwAczQ== Age: 215
2024-04-24 12:22:13 UTC	3198	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 00 54 08 03 00 00 00 5a c4 19 01 00 00 01 2c 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 03 03 03 fd fd fd 06 06 06 f9 f9 f9 ee ee ee fb fb fb f2 f2 f2 bf bf bf c4 c4 c4 90 90 90 f4 f4 f4 bb bb bb 73 73 73 36 36 36 cb cb cb 75 75 75 e7 e7 e7 6c 6c 6c 45 45 45 13 13 13 31 31 31 20 20 20 df df df 2c 2c 2c 0a 0a 0a 58 58 58 f6 f6 f6 eb eb eb c7 c7 c7 5b 5b 5b 1b 1b 1b 0f 0f 0f b8 b8 b8 ad ad ad a8 a8 a8 9d 9d 9d 70 70 70 60 60 60 55 55 55 af af af 84 84 84 7c 7c 7c d9 d9 d9 d6 d6 d6 78 78 78 3f 3f 3f d2 d2 d2 a1 a1 a1 92 92 92 8b 8b 8b cf cf cf 81 81 81 4e 4e 4e 0b 0b 0b e2 e2 e2 99 99 99 65 Data Ascii: PNGIHDRTZ,PLTEsss666uuulllEEE111 ,,,XXX[[[ppp```UUU\|\|\|xxx???NNNe
2024-04-24 12:22:13 UTC	231	IN	Data Raw: 4e ed 89 5d 1f 85 bf 5b f1 15 97 51 70 cb eb c9 f8 44 a8 66 f2 c8 c9 68 9a d6 77 84 df 71 30 c2 13 56 36 ac f8 16 c0 a4 47 2f 9d 63 fb 6e a9 d9 b8 0b 5f 1a b3 a7 8e f4 fd fd 9b 9f 66 d2 f7 e9 55 16 30 82 d8 68 18 8a f6 d6 15 b0 05 c4 c1 d8 34 6f 82 66 62 c5 95 fc 9b a9 d1 dd cb 7e a3 5b 72 16 ae 8f 7a 2f a3 34 bf 92 d2 8d f0 cb e8 db 6f 60 a4 35 01 38 c9 a4 f6 5f f6 9e 53 f7 5c ea 2d e0 9f c0 0b 21 17 bc 10 fa 8f 2c 05 2c 05 2c 05 c0 bf 60 29 60 29 60 98 cf e7 77 c1 45 4a 14 46 3f 89 00 45 20 81 0b 89 4a e1 7f b2 fc d7 59 58 1e a0 f0 e9 8f d0 f8 f4 87 a8 7c fa 63 74 3e fd 41 4a cb a3 b4 96 87 a9 2d 8f d3 5b 1e a8 f8 99 f9 03 37 0e 1b 9c cd 4b 4c 0d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: N][QpDfhwq0V6G/cn_fU0h4ofb~[rz/4o`58_S\-!,,,`)`)`wEJF?E JYX\|ct>AJ-[7KLIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49839	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:16 UTC	586	OUT	GET /scripttemplates/otSDKStub.js?did=f9d8335b-1f5b-415d-923b-2daa2d0de9bd HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:16 UTC	815	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:16 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: zgTRIDojRJmnmBTwUyI2Vw== Last-Modified: Tue, 23 Apr 2024 02:35:10 GMT x-ms-request-id: 65eb82b8-301e-00a2-52bc-95039a000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 44677 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960ed19bb00a03-LAS
2024-04-24 12:22:16 UTC	554	IN	Data Raw: 35 32 65 65 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 52eevar OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 Data Ascii: HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",th
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 Data Ascii: his.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f Data Ascii: oveGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 Data Ascii: name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.p
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 63 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6e 6f 6e 63 65 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 6e 6f 6e 63 65 7c 7c 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 Data Ascii: ce=function(){this.nonce=p.stubScriptElement.nonce\|\|p.stubScriptElement.getAttribute("nonce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.pr
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 70 6f 6e 73 65 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 69 2e 63 6f 75 6e 74 72 79 43 6f 64 65 2c 69 2e 73 74 61 74 65 43 6f 64 65 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 Data Ascii: ponse,this.setGeoLocation(i.countryCode,i.stateCode),this.addBannerSDKScript(t)):(i=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScri
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 65 29 7b 70 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 74 2c 73 74 61 74 65 3a 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 22 22 3a 65 7d 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f Data Ascii: e){p.userLocation={country:t,state:e=void 0===e?"":e}},h.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.o
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 6f 6e 2c 6f 3d 74 2e 52 75 6c 65 53 65 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 Data Ascii: on,o=t.RuleSet.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.Ru
2024-04-24 12:22:16 UTC	1369	IN	Data Raw: 74 43 6f 6f 6b 69 65 28 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 4e 61 6d 65 29 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 69 64 61 74 65 49 41 42 47 44 50 52 41 70 70 6c 69 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 Data Ascii: tCookie(p.oneTrustIABCookieName)):p.isStubReady=!1},h.prototype.validateIABGDPRApplied=function(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.one

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49841	35.81.127.23	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:16 UTC	552	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:16 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:16 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-24 12:22:16 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49840	54.186.38.246	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:16 UTC	652	OUT	GET /f HTTP/1.1 Host: a.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145
2024-04-24 12:22:16 UTC	528	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:16 GMT Content-Type: application/json Content-Length: 59 Connection: close Server: DS-Arya Expires: Thu, 25 Apr 2024 12:22:16 GMT Cache-Control: max-age=86400 Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Vary: Origin Set-Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-04-24 12:22:16 UTC	59	IN	Data Raw: 7b 22 44 53 5f 41 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 44 53 5f 41 5f 43 22 3a 22 22 7d Data Ascii: {"DS_A":"e726a659-b15e-4860-84f0-a4f96f541646","DS_A_C":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49842	34.111.140.246	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:16 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1420 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:16 UTC	1420	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 38 33 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 39 36 31 33 32 39 38 32 39 72 30 2e 33 31 31 38 32 34 36 38 36 36 32 32 38 31 34 35 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7283","visitors":[{"visitor_id":"oeu1713961329829r0.3118246866228145","session_id":"AUTO","at
2024-04-24 12:22:17 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Wed, 24 Apr 2024 12:22:17 GMT server: istio-envoy x-envoy-upstream-service-time: 2 x-request-id: a3f83d7d-d2cc-445e-afaf-c068850cd71d x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49844	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:16 UTC	633	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:17 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:17 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87960ed5dfdfa984-LAS CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 29543 Cache-Control: public, max-age=86400 Expires: Thu, 25 Apr 2024 12:22:17 GMT Last-Modified: Thu, 11 Apr 2024 13:13:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Si1JP1gQRax3B39E15TBSA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 9d522b58-301e-0034-5f8a-8c0a4b000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-24 12:22:17 UTC	467	IN	Data Raw: 33 61 62 65 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 66 39 64 38 Data Ascii: 3abe{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 64 65 37 33 39 2d 30 31 35 35 2d 37 36 39 66 2d 39 61 33 61 2d 66 37 37 35 65 64 32 38 35 39 66 37 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 6d 69 6e 75 73 20 43 61 6c 69 66 6f 72 6e 69 61 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 61 73 22 2c 22 70 72 22 2c 22 76 69 22 2c 22 6d 70 22 2c 22 67 75 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 76 74 22 2c 22 77 79 22 2c 22 63 6f 22 2c 22 74 6e 22 2c 22 6d 69 22 2c 22 6d 6f 22 2c 22 6b 79 22 2c 22 61 73 22 2c 22 6f 72 22 2c 22 6c 61 22 2c 22 63 74 22 2c 22 77 69 22 2c 22 73 64 22 2c 22 76 61 22 2c 22 6e 63 22 2c 22 6d 73 22 2c 22 6e 65 22 2c 22 66 6c 22 2c 22 70 61 22 2c 22 6d 6e 22 2c 22 6b 73 22 2c 22 61 72 22 2c 22 67 61 22 2c 22 73 63 22 2c 22 61 Data Ascii: t":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","a
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 74 74 22 3a Data Ascii: "en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"da","tr":"tr","tt":
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 66 79 2d 4e 4c 22 2c 22 66 72 2d 43 41 22 3a 22 66 72 2d Data Ascii: A","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"fy-NL","fr-CA":"fr-
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c 22 6d 73 2d 42 4e 22 3a 22 6d 73 2d 42 4e 22 2c 22 65 73 Data Ascii: CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY","ms-BN":"ms-BN","es
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 Data Ascii: ,"gm","gn","gq","gs","gt","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","me","mg","mh","mk"
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 2c 22 73 74 22 3a 22 73 74 22 2c 22 65 6e 2d 50 4c 22 3a 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 Data Ascii: ,"st":"st","en-PL":"en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 6e 2d 49 4e 22 2c 22 65 6e 2d 5a 41 22 3a 22 65 6e 2d 5a 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 Data Ascii: n-IN","en-ZA":"en-ZA","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 6c 74 2d 4c 54 22 3a 22 6c 74 2d 4c 54 22 2c 22 65 6e 2d 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c Data Ascii: lt-LT":"lt-LT","en-CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY",
2024-04-24 12:22:17 UTC	1369	IN	Data Raw: 22 65 6e 2d 53 45 22 3a 22 65 6e 2d 53 45 22 2c 22 65 6e 2d 42 57 22 3a 22 65 6e 2d 42 57 22 2c 22 65 6e 2d 53 47 22 3a 22 65 6e 2d 53 47 22 2c 22 61 7a 22 3a 22 61 7a 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 65 6e 2d 53 4b 22 3a 22 65 6e 2d 53 4b 22 2c 22 6e 62 2d 4e 4f 22 3a 22 6e 62 2d 4e 4f 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 65 6e 2d 4f 4d 22 3a 22 65 6e 2d 4f 4d 22 2c 22 62 65 22 3a 22 62 65 22 2c 22 65 73 2d 50 52 22 3a 22 65 73 2d 50 52 22 2c 22 62 67 22 3a 22 62 67 22 2c 22 7a 68 2d 4d 4f 22 3a 22 7a 68 2d 4d 4f 22 2c 22 65 73 2d 50 59 22 3a 22 65 73 2d 50 59 22 2c 22 62 6e 22 3a 22 62 6e 22 2c 22 73 64 22 3a 22 73 64 22 2c 22 62 73 22 3a 22 62 73 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 70 74 22 2c 22 73 69 22 3a 22 73 69 22 2c 22 73 6b 22 3a 22 Data Ascii: "en-SE":"en-SE","en-BW":"en-BW","en-SG":"en-SG","az":"az","ro":"ro","en-SK":"en-SK","nb-NO":"nb-NO","ru":"ru","en-OM":"en-OM","be":"be","es-PR":"es-PR","bg":"bg","zh-MO":"zh-MO","es-PY":"es-PY","bn":"bn","sd":"sd","bs":"bs","default":"pt","si":"si","sk":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49845	35.81.127.23	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:17 UTC	455	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145
2024-04-24 12:22:17 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:17 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-24 12:22:17 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49846	54.148.51.66	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:17 UTC	447	OUT	GET /f HTTP/1.1 Host: a.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145
2024-04-24 12:22:17 UTC	473	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:17 GMT Content-Type: application/json Content-Length: 59 Connection: close Server: DS-Arya Expires: Thu, 25 Apr 2024 12:22:17 GMT Cache-Control: max-age=86400 Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Vary: Origin Set-Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646;Domain=.docusign.com;Max-Age=63072000;SameSite=None;Secure;Path=/;HttpOnly
2024-04-24 12:22:17 UTC	59	IN	Data Raw: 7b 22 44 53 5f 41 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 44 53 5f 41 5f 43 22 3a 22 22 7d Data Ascii: {"DS_A":"e726a659-b15e-4860-84f0-a4f96f541646","DS_A_C":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49848	172.64.155.119	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:17 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:18 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:18 GMT Content-Type: application/json Content-Length: 67 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87960edb0974a984-LAS
2024-04-24 12:22:18 UTC	67	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NV","stateName":"Nevada","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49849	104.19.177.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:17 UTC	427	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/f9d8335b-1f5b-415d-923b-2daa2d0de9bd.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:18 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:18 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87960edb1e230acf-LAS CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 50348 Cache-Control: public, max-age=86400 Expires: Thu, 25 Apr 2024 12:22:18 GMT Last-Modified: Thu, 11 Apr 2024 13:13:05 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: Si1JP1gQRax3B39E15TBSA== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 75679aaf-101e-000c-268b-8cae8b000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-24 12:22:18 UTC	467	IN	Data Raw: 35 61 36 38 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 33 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 66 39 64 38 Data Ascii: 5a68{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202403.1.0","OptanonDataJSON":"f9d8
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 64 65 37 33 39 2d 30 31 35 35 2d 37 36 39 66 2d 39 61 33 61 2d 66 37 37 35 65 64 32 38 35 39 66 37 22 2c 22 4e 61 6d 65 22 3a 22 55 53 20 6d 69 6e 75 73 20 43 61 6c 69 66 6f 72 6e 69 61 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 61 73 22 2c 22 70 72 22 2c 22 76 69 22 2c 22 6d 70 22 2c 22 67 75 22 5d 2c 22 53 74 61 74 65 73 22 3a 7b 22 75 73 22 3a 5b 22 76 74 22 2c 22 77 79 22 2c 22 63 6f 22 2c 22 74 6e 22 2c 22 6d 69 22 2c 22 6d 6f 22 2c 22 6b 79 22 2c 22 61 73 22 2c 22 6f 72 22 2c 22 6c 61 22 2c 22 63 74 22 2c 22 77 69 22 2c 22 73 64 22 2c 22 76 61 22 2c 22 6e 63 22 2c 22 6d 73 22 2c 22 6e 65 22 2c 22 66 6c 22 2c 22 70 61 22 2c 22 6d 6e 22 2c 22 6b 73 22 2c 22 61 72 22 2c 22 67 61 22 2c 22 73 63 22 2c 22 61 Data Ascii: t":[{"Id":"018de739-0155-769f-9a3a-f775ed2859f7","Name":"US minus California","Countries":["as","pr","vi","mp","gu"],"States":{"us":["vt","wy","co","tn","mi","mo","ky","as","or","la","ct","wi","sd","va","nc","ms","ne","fl","pa","mn","ks","ar","ga","sc","a
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 64 61 22 2c 22 74 72 22 3a 22 74 72 22 2c 22 74 74 22 3a Data Ascii: "en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"da","tr":"tr","tt":
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 66 79 2d 4e 4c 22 2c 22 66 72 2d 43 41 22 3a 22 66 72 2d Data Ascii: A","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"fy-NL","fr-CA":"fr-
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c 22 6d 73 2d 42 4e 22 3a 22 6d 73 2d 42 4e 22 2c 22 65 73 Data Ascii: CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY","ms-BN":"ms-BN","es
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 2c 22 67 6d 22 2c 22 67 6e 22 2c 22 67 71 22 2c 22 67 73 22 2c 22 67 74 22 2c 22 67 77 22 2c 22 67 79 22 2c 22 78 6b 22 2c 22 68 6b 22 2c 22 68 6d 22 2c 22 68 6e 22 2c 22 79 65 22 2c 22 68 74 22 2c 22 69 64 22 2c 22 69 6c 22 2c 22 69 6d 22 2c 22 69 6e 22 2c 22 69 6f 22 2c 22 7a 61 22 2c 22 69 71 22 2c 22 69 72 22 2c 22 7a 6d 22 2c 22 6a 65 22 2c 22 7a 77 22 2c 22 6a 6d 22 2c 22 6a 6f 22 2c 22 6a 70 22 2c 22 6b 65 22 2c 22 6b 67 22 2c 22 6b 68 22 2c 22 6b 69 22 2c 22 6b 6d 22 2c 22 6b 6e 22 2c 22 6b 70 22 2c 22 6b 72 22 2c 22 6b 77 22 2c 22 6b 79 22 2c 22 6b 7a 22 2c 22 6c 61 22 2c 22 6c 62 22 2c 22 6c 63 22 2c 22 6c 6b 22 2c 22 6c 72 22 2c 22 6c 73 22 2c 22 6c 79 22 2c 22 6d 61 22 2c 22 6d 64 22 2c 22 6d 65 22 2c 22 6d 67 22 2c 22 6d 68 22 2c 22 6d 6b 22 Data Ascii: ,"gm","gn","gq","gs","gt","gw","gy","xk","hk","hm","hn","ye","ht","id","il","im","in","io","za","iq","ir","zm","je","zw","jm","jo","jp","ke","kg","kh","ki","km","kn","kp","kr","kw","ky","kz","la","lb","lc","lk","lr","ls","ly","ma","md","me","mg","mh","mk"
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 2c 22 73 74 22 3a 22 73 74 22 2c 22 65 6e 2d 50 4c 22 3a 22 65 6e 2d 50 4c 22 2c 22 73 75 22 3a 22 73 75 22 2c 22 73 76 22 3a 22 73 76 22 2c 22 73 77 22 3a 22 73 77 22 2c 22 6b 6f 2d 4b 52 22 3a 22 6b 6f 2d 4b 52 22 2c 22 65 6e 2d 50 52 22 3a 22 65 6e 2d 50 52 22 2c 22 65 6e 2d 50 54 22 3a 22 65 6e 2d 50 54 22 2c 22 63 6f 22 3a 22 63 6f 22 2c 22 74 61 22 3a 22 74 61 22 2c 22 63 73 22 3a 22 63 73 22 2c 22 74 65 22 3a 22 74 65 22 2c 22 72 75 2d 52 55 22 3a 22 72 75 2d 52 55 22 2c 22 74 67 22 3a 22 74 67 22 2c 22 74 68 22 3a 22 74 68 22 2c 22 65 73 2d 41 52 22 3a 22 65 73 2d 41 52 22 2c 22 65 6e 2d 51 41 22 3a 22 65 6e 2d 51 41 22 2c 22 63 79 22 3a 22 63 79 22 2c 22 74 6c 22 3a 22 74 6c 22 2c 22 64 61 2d 44 4b 22 3a 22 64 61 2d 44 4b 22 2c 22 64 61 22 3a 22 Data Ascii: ,"st":"st","en-PL":"en-PL","su":"su","sv":"sv","sw":"sw","ko-KR":"ko-KR","en-PR":"en-PR","en-PT":"en-PT","co":"co","ta":"ta","cs":"cs","te":"te","ru-RU":"ru-RU","tg":"tg","th":"th","es-AR":"es-AR","en-QA":"en-QA","cy":"cy","tl":"tl","da-DK":"da-DK","da":"
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 6e 2d 49 4e 22 2c 22 65 6e 2d 5a 41 22 3a 22 65 6e 2d 5a 41 22 2c 22 68 72 22 3a 22 68 72 22 2c 22 6e 6f 2d 4e 4f 22 3a 22 6e 6f 2d 4e 4f 22 2c 22 65 6e 2d 49 52 22 3a 22 65 6e 2d 49 52 22 2c 22 68 75 22 3a 22 68 75 22 2c 22 65 6e 2d 49 54 22 3a 22 65 6e 2d 49 54 22 2c 22 65 6e 2d 49 53 22 3a 22 65 6e 2d 49 53 22 2c 22 79 69 22 3a 22 79 69 22 2c 22 68 79 22 3a 22 68 79 22 2c 22 79 6f 22 3a 22 79 6f 22 2c 22 65 6e 2d 5a 4d 22 3a 22 65 6e 2d 5a 4d 22 2c 22 69 64 22 3a 22 69 64 22 2c 22 72 75 2d 4d 44 22 3a 22 72 75 2d 4d 44 22 2c 22 65 6e 2d 5a 57 22 3a 22 65 6e 2d 5a 57 22 2c 22 65 6e 2d 4a 4f 22 3a 22 65 6e 2d 4a 4f 22 2c 22 69 73 22 3a 22 69 73 22 2c 22 69 74 22 3a 22 69 74 22 2c 22 65 6e 2d 4a 50 22 3a 22 65 6e 2d 4a 50 22 2c 22 66 79 2d 4e 4c 22 3a 22 Data Ascii: n-IN","en-ZA":"en-ZA","hr":"hr","no-NO":"no-NO","en-IR":"en-IR","hu":"hu","en-IT":"en-IT","en-IS":"en-IS","yi":"yi","hy":"hy","yo":"yo","en-ZM":"en-ZM","id":"id","ru-MD":"ru-MD","en-ZW":"en-ZW","en-JO":"en-JO","is":"is","it":"it","en-JP":"en-JP","fy-NL":"
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 6c 74 2d 4c 54 22 3a 22 6c 74 2d 4c 54 22 2c 22 65 6e 2d 43 4c 22 3a 22 65 6e 2d 43 4c 22 2c 22 65 73 2d 44 4f 22 3a 22 65 73 2d 44 4f 22 2c 22 65 6e 2d 43 4e 22 3a 22 65 6e 2d 43 4e 22 2c 22 65 6e 2d 43 4f 22 3a 22 65 6e 2d 43 4f 22 2c 22 65 73 2d 45 43 22 3a 22 65 73 2d 45 43 22 2c 22 65 6e 2d 54 48 22 3a 22 65 6e 2d 54 48 22 2c 22 6c 6f 2d 4c 41 22 3a 22 6c 6f 2d 4c 41 22 2c 22 65 6e 2d 43 5a 22 3a 22 65 6e 2d 43 5a 22 2c 22 65 6e 2d 43 59 22 3a 22 65 6e 2d 43 59 22 2c 22 65 6e 2d 54 52 22 3a 22 65 6e 2d 54 52 22 2c 22 66 72 2d 4d 41 22 3a 22 66 72 2d 4d 41 22 2c 22 65 6e 2d 44 45 22 3a 22 65 6e 2d 44 45 22 2c 22 66 72 2d 4d 43 22 3a 22 66 72 2d 4d 43 22 2c 22 65 6e 2d 54 57 22 3a 22 65 6e 2d 54 57 22 2c 22 65 73 2d 55 59 22 3a 22 65 73 2d 55 59 22 2c Data Ascii: lt-LT":"lt-LT","en-CL":"en-CL","es-DO":"es-DO","en-CN":"en-CN","en-CO":"en-CO","es-EC":"es-EC","en-TH":"en-TH","lo-LA":"lo-LA","en-CZ":"en-CZ","en-CY":"en-CY","en-TR":"en-TR","fr-MA":"fr-MA","en-DE":"en-DE","fr-MC":"fr-MC","en-TW":"en-TW","es-UY":"es-UY",
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 22 65 6e 2d 53 45 22 3a 22 65 6e 2d 53 45 22 2c 22 65 6e 2d 42 57 22 3a 22 65 6e 2d 42 57 22 2c 22 65 6e 2d 53 47 22 3a 22 65 6e 2d 53 47 22 2c 22 61 7a 22 3a 22 61 7a 22 2c 22 72 6f 22 3a 22 72 6f 22 2c 22 65 6e 2d 53 4b 22 3a 22 65 6e 2d 53 4b 22 2c 22 6e 62 2d 4e 4f 22 3a 22 6e 62 2d 4e 4f 22 2c 22 72 75 22 3a 22 72 75 22 2c 22 65 6e 2d 4f 4d 22 3a 22 65 6e 2d 4f 4d 22 2c 22 62 65 22 3a 22 62 65 22 2c 22 65 73 2d 50 52 22 3a 22 65 73 2d 50 52 22 2c 22 62 67 22 3a 22 62 67 22 2c 22 7a 68 2d 4d 4f 22 3a 22 7a 68 2d 4d 4f 22 2c 22 65 73 2d 50 59 22 3a 22 65 73 2d 50 59 22 2c 22 62 6e 22 3a 22 62 6e 22 2c 22 73 64 22 3a 22 73 64 22 2c 22 62 73 22 3a 22 62 73 22 2c 22 64 65 66 61 75 6c 74 22 3a 22 70 74 22 2c 22 73 69 22 3a 22 73 69 22 2c 22 73 6b 22 3a 22 Data Ascii: "en-SE":"en-SE","en-BW":"en-BW","en-SG":"en-SG","az":"az","ro":"ro","en-SK":"en-SK","nb-NO":"nb-NO","ru":"ru","en-OM":"en-OM","be":"be","es-PR":"es-PR","bg":"bg","zh-MO":"zh-MO","es-PY":"es-PY","bn":"bn","sd":"sd","bs":"bs","default":"pt","si":"si","sk":"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49850	192.29.14.118	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:18 UTC	856	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=188&optin=disabled&firstPartyCookieDomain=track.docusign.com HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145
2024-04-24 12:22:18 UTC	576	IN	HTTP/1.1 302 Found Cache-Control: no-store Pragma: no-cache Content-Type: text/html; charset=utf-8 Expires: -1 Location: https://track.docusign.com/visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=188&optin=disabled&elq1pcGUID=D32BF32183754911A4896AC2751429EC X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:18 GMT Connection: close Content-Length: 345
2024-04-24 12:22:18 UTC	345	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0d 0a 3c 68 32 3e 4f 62 6a 65 63 74 20 6d 6f 76 65 64 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 72 61 63 6b 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 76 69 73 69 74 6f 72 2f 76 32 30 30 2f 73 76 72 47 50 3f 70 70 73 3d 33 26 61 6d 70 3b 73 69 74 65 69 64 3d 35 36 36 38 31 30 38 32 36 26 61 6d 70 3b 72 65 66 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 26 61 6d 70 3b 72 65 66 32 3d 65 6c 71 4e 6f 6e 65 26 61 6d 70 3b 74 7a 6f 3d 2d 36 30 26 61 6d 70 3b 6d 73 3d 31 38 38 26 61 6d 70 3b 6f 70 74 69 6e 3d Data Ascii: <html><head><title>Object moved</title></head><body><h2>Object moved to <a href="https://track.docusign.com/visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=188&optin=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49851	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:18 UTC	558	OUT	GET /scripttemplates/202403.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:18 UTC	814	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:18 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: s7qm2vbmUNglr6Jt5k9KHA== Last-Modified: Thu, 21 Mar 2024 07:04:35 GMT x-ms-request-id: f463857b-001e-005d-3a08-7c3307000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 8445 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960edf58880a03-LAS
2024-04-24 12:22:18 UTC	555	IN	Data Raw: 37 63 37 33 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 33 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 4e 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c73/** * onetrust-banner-sdk * v202403.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var N=function(e,t){return(N=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 75 28 65 2c 73 2c 61 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 65 77 Data Ascii: type,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(this,arguments)};function u(e,s,a,l){return new
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 46 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 2c 74 3d 30 2c 6f 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6f 3b 74 2b 2b 29 65 2b 3d 61 72 67 Data Ascii: .label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function F(){for(var e=0,t=0,o=arguments.length;t<o;t++)e+=arg
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 65 6f 66 20 6a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 4a 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 58 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 4a 28 74 29 7d 63 61 74 63 68 28 65 29 7b 57 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 57 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f 76 61 6c 75 65 3d 74 2c 4a 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 29 7b 32 3d 3d 3d 65 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d Data Ascii: eof j)return t._state=3,t._value=e,void J(t);if("function"==typeof o)return void X((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,J(t)}catch(e){W(t,e)}var n,r}function W(e,t){e._state=2,e._value=t,J(e)}function J(e){2===e._state&&0===
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 6a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 6a 3f 74 3a 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 6a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 28 6f 29 7d 29 7d 2c 6a 2e 72 61 63 65 3d 66 75 6e 63 74 Data Ascii: turn void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},j.resolve=function(t){return t&&"object"==typeof t&&t.constructor===j?t:new j(function(e){e(t)})},j.reject=function(o){return new j(function(e,t){t(o)})},j.race=funct
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 51 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 74 68 69 73 2e 73 75 62 73 74 72 69 6e 67 28 74 2d 65 2e 6c 65 6e 67 74 68 2c 74 29 3d 3d 3d 65 7d 2c 77 72 69 74 61 62 6c 65 3a Data Ascii: :!0,configurable:!0})},Q.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length),this.substring(t-e.length,t)===e},writable:
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 2e 6c 65 6e 67 74 68 3e 3e 3e 30 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3e 3e 30 2c 72 3d 6e 3c 30 3f 4d 61 74 68 2e 6d 61 78 28 Data Ascii: initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t.length>>>0,n=arguments[1]>>0,r=n<0?Math.max(
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 5a 3d 5a 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 3d 22 55 70 64 61 74 65 43 6f 6e 73 65 6e 74 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 5b 65 2e 50 75 72 70 6f 73 65 3d 31 5d 3d 22 Data Ascii: [e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=Z=Z\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=ee=ee\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConsent="UpdateConsent",(e=te=te\|\|{})[e.Purpose=1]="
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 70 65 3d 70 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 48 6f 73 74 3d 22 48 6f 73 74 22 2c 65 2e 47 65 6e 56 65 6e 64 6f 72 3d 22 47 65 6e 56 65 6e 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 5b 65 Data Ascii: =5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=pe=pe\|\|{}).Active="1",e.InActive="0",(e=he=he\|\|{}).Host="Host",e.GenVendor="GenVen",(e=ge=ge\|\|{})[e
2024-04-24 12:22:18 UTC	1369	IN	Data Raw: 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 41 3d 22 43 43 50 41 22 2c 65 2e 49 41 42 32 3d 22 49 41 42 32 22 2c 65 2e 49 41 42 32 56 32 3d 22 49 41 42 32 56 32 22 2c 65 2e 47 45 4e 45 Data Ascii: nted="granted",e.denied="denied",0,(e=Ae=Ae\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Ie=Ie\|\|{}).cookies="cookies",e.vendors="vendors",(e=Le=Le\|\|{}).GDPR="GDPR",e.CCPA="CCPA",e.IAB2="IAB2",e.IAB2V2="IAB2V2",e.GENE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49852	104.18.32.137	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:18 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:19 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:18 GMT Content-Type: text/javascript Content-Length: 78 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87960ee05d6fa982-LAS
2024-04-24 12:22:19 UTC	78	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NV","stateName":"Nevada","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49853	192.29.14.118	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:19 UTC	858	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=188&optin=disabled&elq1pcGUID=D32BF32183754911A4896AC2751429EC HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145
2024-04-24 12:22:19 UTC	471	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Set-Cookie: ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; domain=docusign.com; expires=Sat, 24-May-2025 12:22:19 GMT; path=/ P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:18 GMT Connection: close Content-Length: 49
2024-04-24 12:22:19 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49854	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:19 UTC	639	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:20 UTC	902	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:19 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87960ee68c0709f7-LAS CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 28195 Cache-Control: public, max-age=86400 Expires: Thu, 25 Apr 2024 12:22:19 GMT Last-Modified: Thu, 11 Apr 2024 13:35:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: B9OqkJSiUEn1cFTd3rpn0Q== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: c18ccf4a-701e-0047-3b8a-8c52d8000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-24 12:22:20 UTC	467	IN	Data Raw: 37 63 31 62 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c1b{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 65 20 61 6e 64 20 69 73 20 6d 6f 73 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 Data Ascii: e and is mostly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some type
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 22 43 6f 6f 6b 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 53 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a Data Ascii: "CookiesText":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,"HasScriptArchive":false,"BannerPosition":"bottom","PreferenceCenterPosition":"default","PreferenceCenterConfirmText":
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 77 65 62 73 69 74 65 20 74 6f 20 66 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 69 6f 6e 73 20 6d 61 64 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6c 6f 67 67 69 6e 67 20 69 6e 20 6f 72 20 66 69 6c 6c 69 6e 67 20 69 6e 20 66 6f 72 6d 73 2e 20 c2 a0 20 c2 a0 59 6f 75 20 63 61 6e 20 73 65 74 20 Data Ascii: website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 63 35 35 64 39 31 39 64 2d 62 61 64 61 2d 34 30 32 35 2d 61 38 36 39 2d 35 64 34 65 38 65 36 36 65 64 65 66 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 41 4c 42 43 4f 52 53 22 2c 22 48 6f 73 74 22 3a 22 64 65 76 65 6c 6f 70 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6d 61 6e 61 67 65 64 20 62 79 20 41 57 53 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c Data Ascii: ry":null,"isThirdParty":false},{"id":"c55d919d-bada-4025-a869-5d4e8e66edef","Name":"AWSALBCORS","Host":"developers.docusign.com","IsSession":false,"Length":"7","description":"This cookie is managed by AWS and is used for load balancing.","DurationType":1,
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 6d 6f 6e 20 53 61 6c 65 73 66 6f 72 63 65 20 43 6f 6f 6b 69 65 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 33 64 35 37 39 36 38 2d 64 34 38 31 2d 34 30 64 35 2d 62 65 33 37 2d 31 35 35 39 66 36 31 34 35 31 63 38 22 2c 22 4e 61 6d 65 22 3a 22 73 65 73 73 69 6f 6e 5f 69 64 22 2c 22 48 6f 73 74 22 3a 22 63 61 72 65 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 Data Ascii: sign.com","IsSession":false,"Length":"0","description":"Common Salesforce Cookie","DurationType":1,"category":null,"isThirdParty":false},{"id":"03d57968-d481-40d5-be37-1559f61451c8","Name":"session_id","Host":"careers.docusign.com","IsSession":true,"Lengt
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 72 79 20 63 6f 6f 6b 69 65 20 73 65 74 20 62 79 20 77 65 62 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 41 53 50 2e 4e 45 54 20 4d 56 43 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 74 6f 70 20 75 6e 61 75 74 68 6f 72 69 73 65 64 20 70 6f 73 74 69 6e 67 20 6f 66 20 63 6f 6e 74 65 6e 74 20 74 6f 20 61 20 77 65 62 73 69 74 65 2c 20 6b 6e 6f 77 6e 20 61 73 20 43 72 6f 73 73 2d 53 69 74 65 20 52 65 71 75 65 73 74 20 46 6f 72 67 65 72 79 2e 20 49 74 20 68 6f 6c 64 73 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 69 73 20 64 65 73 74 72 6f 79 65 64 20 6f 6e 20 63 6c 6f 73 69 6e 67 20 74 68 65 20 62 72 6f 77 73 65 Data Ascii: ry cookie set by web applications built using ASP.NET MVC technologies. It is designed to stop unauthorised posting of content to a website, known as Cross-Site Request Forgery. It holds no information about the user and is destroyed on closing the browse
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 6d 61 74 63 68 65 73 20 63 72 69 74 65 72 69 61 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 62 6f 74 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 34 32 66 39 34 64 35 66 2d 34 35 65 66 2d 34 32 37 30 2d 39 66 34 62 2d 38 65 61 39 32 37 39 64 62 64 30 64 22 2c 22 4e 61 6d 65 22 3a 22 70 63 74 72 6b 22 2c 22 48 6f 73 74 22 3a 22 70 61 72 74 6e 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 73 65 64 20 74 6f 20 63 6f 75 6e 74 20 70 61 67 65 20 76 69 Data Ascii: matches criteria associated with bots.","DurationType":1,"category":null,"isThirdParty":false},{"id":"42f94d5f-45ef-4270-9f4b-8ea9279dbd0d","Name":"pctrk","Host":"partners.docusign.com","IsSession":false,"Length":"364","description":"Used to count page vi
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 79 20 77 68 65 6e 20 74 68 65 79 20 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 Data Ascii: y when they actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"id":"
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 61 62 6c 65 20 74 68 65 20 77 65 62 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 73 65 74 20 62 79 20 75 73 20 6f 72 20 62 79 20 74 68 69 72 64 20 70 61 72 74 79 20 70 72 6f 76 69 64 65 72 73 20 77 68 6f 73 65 20 73 65 72 76 69 63 65 73 20 77 65 20 68 61 76 65 20 61 64 64 65 64 20 74 6f 20 6f 75 72 20 70 61 67 65 73 2e 20 c2 a0 20 c2 a0 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 74 68 65 6e 20 73 6f 6d 65 20 6f 72 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 73 65 72 76 69 63 65 73 20 6d 61 79 20 6e 6f 74 20 66 75 6e 63 74 69 6f 6e Data Ascii: able the website to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49856	192.29.14.118	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:20 UTC	669	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=188&optin=disabled&elq1pcGUID=D32BF32183754911A4896AC2751429EC HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145; ELOQUA=GUID=D32BF32183754911A4896AC2751429EC
2024-04-24 12:22:20 UTC	471	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block Set-Cookie: ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; domain=docusign.com; expires=Sat, 24-May-2025 12:22:20 GMT; path=/ P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:19 GMT Connection: close Content-Length: 49
2024-04-24 12:22:20 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49857	104.19.177.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:20 UTC	433	OUT	GET /consent/f9d8335b-1f5b-415d-923b-2daa2d0de9bd/018de739-0155-769f-9a3a-f775ed2859f7/en-us.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	890	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:20 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close CF-Ray: 87960eebf9140ad3-LAS CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 Expires: Thu, 25 Apr 2024 12:22:20 GMT Last-Modified: Thu, 11 Apr 2024 13:35:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: B9OqkJSiUEn1cFTd3rpn0Q== X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 5cbf69ac-601e-0080-248b-8cc685000000 x-ms-version: 2009-09-19 Server: cloudflare
2024-04-24 12:22:21 UTC	479	IN	Data Raw: 37 63 32 37 0d 0a 7b 22 44 6f 6d 61 69 6e 44 61 74 61 22 3a 7b 22 70 63 63 6c 6f 73 65 42 75 74 74 6f 6e 54 79 70 65 22 3a 22 49 63 6f 6e 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 22 3a 22 59 65 61 72 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 59 72 73 22 3a 22 59 65 61 72 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 53 65 63 73 22 3a 22 41 20 66 65 77 20 73 65 63 6f 6e 64 73 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 22 3a 22 57 65 65 6b 22 2c 22 70 63 6c 69 66 65 53 70 61 6e 57 6b 73 22 3a 22 57 65 65 6b 73 22 2c 22 70 63 63 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 54 65 78 74 22 3a 22 43 6f 6e 74 69 6e 75 65 20 77 69 74 68 6f 75 74 20 41 63 63 65 70 74 69 6e 67 22 2c 22 4d 61 69 6e 54 65 78 74 22 3a 22 50 72 69 76 61 63 79 20 50 72 65 Data Ascii: 7c27{"DomainData":{"pccloseButtonType":"Icon","pclifeSpanYr":"Year","pclifeSpanYrs":"Years","pclifeSpanSecs":"A few seconds","pclifeSpanWk":"Week","pclifeSpanWks":"Weeks","pccontinueWithoutAcceptText":"Continue without Accepting","MainText":"Privacy Pre
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 74 6c 79 20 75 73 65 64 20 74 6f 20 6d 61 6b 65 20 74 68 65 20 73 69 74 65 20 77 6f 72 6b 20 61 73 20 79 6f 75 20 65 78 70 65 63 74 20 69 74 20 74 6f 2e 20 54 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 64 6f 65 73 20 6e 6f 74 20 75 73 75 61 6c 6c 79 20 64 69 72 65 63 74 6c 79 20 69 64 65 6e 74 69 66 79 20 79 6f 75 2c 20 62 75 74 20 69 74 20 63 61 6e 20 67 69 76 65 20 79 6f 75 20 61 20 6d 6f 72 65 20 70 65 72 73 6f 6e 61 6c 69 7a 65 64 20 77 65 62 20 65 78 70 65 72 69 65 6e 63 65 2e 20 42 65 63 61 75 73 65 20 77 65 20 72 65 73 70 65 63 74 20 79 6f 75 72 20 72 69 67 68 74 20 74 6f 20 70 72 69 76 61 63 79 2c 20 79 6f 75 20 63 61 6e 20 63 68 6f 6f 73 65 20 6e 6f 74 20 74 6f 20 61 6c 6c 6f 77 20 73 6f 6d 65 20 74 79 70 65 73 20 6f 66 20 63 6f 6f 6b 69 65 73 Data Ascii: tly used to make the site work as you expect it to. The information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 22 3a 22 43 6f 6f 6b 69 65 73 22 2c 22 43 61 74 65 67 6f 72 69 65 73 54 65 78 74 22 3a 22 43 6f 6f 6b 69 65 20 53 75 62 67 72 6f 75 70 22 2c 22 49 73 4c 69 66 65 73 70 61 6e 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4c 69 66 65 73 70 61 6e 54 65 78 74 22 3a 22 4c 69 66 65 73 70 61 6e 22 2c 22 56 65 6e 64 6f 72 4c 65 76 65 6c 4f 70 74 4f 75 74 22 3a 66 61 6c 73 65 2c 22 48 61 73 53 63 72 69 70 74 41 72 63 68 69 76 65 22 3a 66 61 6c 73 65 2c 22 42 61 6e 6e 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 62 6f 74 74 6f 6d 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 50 6f 73 69 74 69 6f 6e 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 50 72 65 66 65 72 65 6e 63 65 43 65 6e 74 65 72 43 6f 6e 66 69 72 6d 54 65 78 74 22 3a 22 43 6f 6e 66 69 72 6d 20 4d 79 20 Data Ascii: ":"Cookies","CategoriesText":"Cookie Subgroup","IsLifespanEnabled":false,"LifespanText":"Lifespan","VendorLevelOptOut":false,"HasScriptArchive":false,"BannerPosition":"bottom","PreferenceCenterPosition":"default","PreferenceCenterConfirmText":"Confirm My
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 61 6e 64 20 63 61 6e 6e 6f 74 20 62 65 20 73 77 69 74 63 68 65 64 20 6f 66 66 20 69 6e 20 6f 75 72 20 73 79 73 74 65 6d 73 2e 20 54 68 65 79 20 61 72 65 20 75 73 75 61 6c 6c 79 20 6f 6e 6c 79 20 73 65 74 20 69 6e 20 72 65 73 70 6f 6e 73 65 20 74 6f 20 61 63 74 69 6f 6e 73 20 6d 61 64 65 20 62 79 20 79 6f 75 20 77 68 69 63 68 20 61 6d 6f 75 6e 74 20 74 6f 20 61 20 72 65 71 75 65 73 74 20 66 6f 72 20 73 65 72 76 69 63 65 73 2c 20 73 75 63 68 20 61 73 20 73 65 74 74 69 6e 67 20 79 6f 75 72 20 70 72 69 76 61 63 79 20 70 72 65 66 65 72 65 6e 63 65 73 2c 20 6c 6f 67 67 69 6e 67 20 69 6e 20 6f 72 20 66 69 6c 6c 69 6e 67 20 69 6e 20 66 6f 72 6d 73 2e 20 c2 a0 20 c2 a0 59 6f 75 20 63 61 6e 20 73 65 74 20 79 6f 75 72 20 62 72 6f 77 73 65 72 Data Ascii: unction and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 63 35 35 64 39 31 39 64 2d 62 61 64 61 2d 34 30 32 35 2d 61 38 36 39 2d 35 64 34 65 38 65 36 36 65 64 65 66 22 2c 22 4e 61 6d 65 22 3a 22 41 57 53 41 4c 42 43 4f 52 53 22 2c 22 48 6f 73 74 22 3a 22 64 65 76 65 6c 6f 70 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 37 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 54 68 69 73 20 63 6f 6f 6b 69 65 20 69 73 20 6d 61 6e 61 67 65 64 20 62 79 20 41 57 53 20 61 6e 64 20 69 73 20 75 73 65 64 20 66 6f 72 20 6c 6f 61 64 20 62 61 6c 61 6e 63 69 6e 67 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e Data Ascii: ThirdParty":false},{"id":"c55d919d-bada-4025-a869-5d4e8e66edef","Name":"AWSALBCORS","Host":"developers.docusign.com","IsSession":false,"Length":"7","description":"This cookie is managed by AWS and is used for load balancing.","DurationType":1,"category":n
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 43 6f 6d 6d 6f 6e 20 53 61 6c 65 73 66 6f 72 63 65 20 43 6f 6f 6b 69 65 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 30 33 64 35 37 39 36 38 2d 64 34 38 31 2d 34 30 64 35 2d 62 65 33 37 2d 31 35 35 39 66 36 31 34 35 31 63 38 22 2c 22 4e 61 6d 65 22 3a 22 73 65 73 73 69 6f 6e 5f 69 64 22 2c 22 48 6f 73 74 22 3a 22 63 61 72 65 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 74 72 75 65 2c 22 4c 65 6e 67 74 68 22 3a 22 30 22 2c 22 64 65 73 63 Data Ascii: sSession":false,"Length":"0","description":"Common Salesforce Cookie","DurationType":1,"category":null,"isThirdParty":false},{"id":"03d57968-d481-40d5-be37-1559f61451c8","Name":"session_id","Host":"careers.docusign.com","IsSession":true,"Length":"0","desc
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 74 20 62 79 20 77 65 62 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 62 75 69 6c 74 20 75 73 69 6e 67 20 41 53 50 2e 4e 45 54 20 4d 56 43 20 74 65 63 68 6e 6f 6c 6f 67 69 65 73 2e 20 49 74 20 69 73 20 64 65 73 69 67 6e 65 64 20 74 6f 20 73 74 6f 70 20 75 6e 61 75 74 68 6f 72 69 73 65 64 20 70 6f 73 74 69 6e 67 20 6f 66 20 63 6f 6e 74 65 6e 74 20 74 6f 20 61 20 77 65 62 73 69 74 65 2c 20 6b 6e 6f 77 6e 20 61 73 20 43 72 6f 73 73 2d 53 69 74 65 20 52 65 71 75 65 73 74 20 46 6f 72 67 65 72 79 2e 20 49 74 20 68 6f 6c 64 73 20 6e 6f 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 61 62 6f 75 74 20 74 68 65 20 75 73 65 72 20 61 6e 64 20 69 73 20 64 65 73 74 72 6f 79 65 64 20 6f 6e 20 63 6c 6f 73 69 6e 67 20 74 68 65 20 62 72 6f 77 73 65 72 2e 22 2c 22 44 75 72 61 74 69 6f Data Ascii: t by web applications built using ASP.NET MVC technologies. It is designed to stop unauthorised posting of content to a website, known as Cross-Site Request Forgery. It holds no information about the user and is destroyed on closing the browser.","Duratio
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 65 72 69 61 20 61 73 73 6f 63 69 61 74 65 64 20 77 69 74 68 20 62 6f 74 73 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 34 32 66 39 34 64 35 66 2d 34 35 65 66 2d 34 32 37 30 2d 39 66 34 62 2d 38 65 61 39 32 37 39 64 62 64 30 64 22 2c 22 4e 61 6d 65 22 3a 22 70 63 74 72 6b 22 2c 22 48 6f 73 74 22 3a 22 70 61 72 74 6e 65 72 73 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 49 73 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 4c 65 6e 67 74 68 22 3a 22 33 36 34 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 55 73 65 64 20 74 6f 20 63 6f 75 6e 74 20 70 61 67 65 20 76 69 65 77 73 20 62 79 20 75 6e 61 75 74 Data Ascii: eria associated with bots.","DurationType":1,"category":null,"isThirdParty":false},{"id":"42f94d5f-45ef-4270-9f4b-8ea9279dbd0d","Name":"pctrk","Host":"partners.docusign.com","IsSession":false,"Length":"364","description":"Used to count page views by unaut
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 61 63 74 69 76 65 6c 79 20 63 6c 6f 73 65 20 74 68 65 20 6e 6f 74 69 63 65 20 64 6f 77 6e 2e 20 20 49 74 20 65 6e 61 62 6c 65 73 20 74 68 65 20 77 65 62 73 69 74 65 20 6e 6f 74 20 74 6f 20 73 68 6f 77 20 74 68 65 20 6d 65 73 73 61 67 65 20 6d 6f 72 65 20 74 68 61 6e 20 6f 6e 63 65 20 74 6f 20 61 20 75 73 65 72 2e 20 20 54 68 65 20 63 6f 6f 6b 69 65 20 68 61 73 20 61 20 6f 6e 65 20 79 65 61 72 20 6c 69 66 65 73 70 61 6e 20 61 6e 64 20 63 6f 6e 74 61 69 6e 73 20 6e 6f 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2c 22 44 75 72 61 74 69 6f 6e 54 79 70 65 22 3a 31 2c 22 63 61 74 65 67 6f 72 79 22 3a 6e 75 6c 6c 2c 22 69 73 54 68 69 72 64 50 61 72 74 79 22 3a 66 61 6c 73 65 7d 2c 7b 22 69 64 22 3a 22 61 61 33 35 35 38 36 62 2d 66 36 63 Data Ascii: actively close the notice down. It enables the website not to show the message more than once to a user. The cookie has a one year lifespan and contains no personal information.","DurationType":1,"category":null,"isThirdParty":false},{"id":"aa35586b-f6c
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 73 69 74 65 20 74 6f 20 70 72 6f 76 69 64 65 20 65 6e 68 61 6e 63 65 64 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 61 6e 64 20 70 65 72 73 6f 6e 61 6c 69 73 61 74 69 6f 6e 2e 20 54 68 65 79 20 6d 61 79 20 62 65 20 73 65 74 20 62 79 20 75 73 20 6f 72 20 62 79 20 74 68 69 72 64 20 70 61 72 74 79 20 70 72 6f 76 69 64 65 72 73 20 77 68 6f 73 65 20 73 65 72 76 69 63 65 73 20 77 65 20 68 61 76 65 20 61 64 64 65 64 20 74 6f 20 6f 75 72 20 70 61 67 65 73 2e 20 c2 a0 20 c2 a0 49 66 20 79 6f 75 20 64 6f 20 6e 6f 74 20 61 6c 6c 6f 77 20 74 68 65 73 65 20 63 6f 6f 6b 69 65 73 20 74 68 65 6e 20 73 6f 6d 65 20 6f 72 20 61 6c 6c 20 6f 66 20 74 68 65 73 65 20 73 65 72 76 69 63 65 73 20 6d 61 79 20 6e 6f 74 20 66 75 6e 63 74 69 6f 6e 20 70 72 6f 70 65 72 6c 79 2e 22 2c Data Ascii: site to provide enhanced functionality and personalisation. They may be set by us or by third party providers whose services we have added to our pages. If you do not allow these cookies then some or all of these services may not function properly.",

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49861	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:20 UTC	592	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:20 UTC	809	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 8bb24468-c01e-006d-0924-7c8dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75409 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960eec29290ad3-LAS
2024-04-24 12:22:20 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49859	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:20 UTC	599	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:20 UTC	809	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:20 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 26411414-a01e-008f-34c2-7bb0e9000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75409 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960eec28680ad7-LAS
2024-04-24 12:22:20 UTC	560	IN	Data Raw: 37 63 37 39 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c79 { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 5a 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e Data Ascii: ZSBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 53 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 Data Ascii: SBBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNr
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 Data Ascii: 48L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0ia
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 43 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 Data Ascii: Cb3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMT
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a Data Ascii: PjxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJ
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 6a 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 Data Ascii: jxhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 42 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 Data Ascii: BsaW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvd
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 76 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 Data Ascii: vbGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMT
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 59 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a Data Ascii: YWdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49860	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:20 UTC	599	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:20 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:20 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: fc146b4d-801e-000e-2d26-7c1033000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 75409 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960eec3fc30ad9-LAS
2024-04-24 12:22:20 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-04-24 12:22:20 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49864	31.13.70.7	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:20 UTC	537	OUT	GET /en_US/fbevents.js HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 12:22:21 UTC	1500	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 12:22:21 UTC	1	IN	Data Raw: 2f Data Ascii: /
2024-04-24 12:22:21 UTC	14842	IN	Data Raw: 2a 2a 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 Data Ascii: * Copyright (c) 2017-present, Facebook, Inc. All rights reserved. You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection wit
2024-04-24 12:22:21 UTC	16384	IN	Data Raw: 6c 6c 3b 61 3d 61 2e 65 78 74 72 61 63 74 6f 72 5f 63 6f 6e 66 69 67 3b 69 66 28 61 3d 3d 6e 75 6c 6c 7c 7c 28 74 79 70 65 6f 66 20 61 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 69 28 61 29 29 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 78 74 2c 63 3d 61 2e 70 61 72 61 6d 65 74 65 72 5f 74 79 70 65 3b 61 3d 61 2e 76 61 6c 75 65 3b 62 3d 62 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 62 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 62 21 3d 3d 22 22 3f 62 3a 6e 75 6c 6c 3b 63 3d 64 28 63 29 3b 61 3d 61 21 3d 6e 75 6c 6c 26 26 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 61 21 3d 3d 22 22 3f 61 3a 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 62 21 3d Data Ascii: ll;a=a.extractor_config;if(a==null\|\|(typeof a==="undefined"?"undefined":i(a))!=="object")return null;var b=a.context,c=a.parameter_type;a=a.value;b=b!=null&&typeof b==="string"&&b!==""?b:null;c=d(c);a=a!=null&&typeof a==="string"&&a!==""?a:null;return b!=
2024-04-24 12:22:21 UTC	16384	IN	Data Raw: 50 41 52 41 4d 45 54 45 52 2c 78 3d 73 2e 72 65 61 64 50 61 63 6b 65 64 43 6f 6f 6b 69 65 2c 79 3d 73 2e 43 4c 49 43 4b 54 48 52 4f 55 47 48 5f 43 4f 4f 4b 49 45 5f 4e 41 4d 45 3b 73 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 70 65 72 69 6d 65 6e 74 4e 61 6d 65 73 22 29 3b 76 61 72 20 7a 3d 73 2e 55 53 45 5f 46 42 43 5f 41 53 5f 43 41 43 48 45 5f 4b 45 59 5f 45 58 50 45 52 49 4d 45 4e 54 2c 41 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 51 45 22 29 2c 42 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4d 6f 64 75 6c 65 45 6e 63 6f 64 69 6e 67 73 Data Ascii: PARAMETER,x=s.readPackedCookie,y=s.CLICKTHROUGH_COOKIE_NAME;s=f.getFbeventsModules("SignalsFBEventsExperimentNames");var z=s.USE_FBC_AS_CACHE_KEY_EXPERIMENT,A=f.getFbeventsModules("SignalsFBEventsQE"),B=f.getFbeventsModules("SignalsFBEventsModuleEncodings
2024-04-24 12:22:21 UTC	16384	IN	Data Raw: 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 47 75 61 72 64 72 61 69 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 69 2c 6a 2c 6b 29 7b 76 61 72 20 6c 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6c 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 31 3b 62 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 76 61 72 20 63 3d 61 72 67 75 6d 65 6e 74 73 5b 62 5d 3b 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 Data Ascii: Registered("SignalsFBEventsGuardrail",function(){return function(g,i,j,k){var l={exports:{}};l.exports;(function(){"use strict";var a=Object.assign\|\|function(a){for(var b=1;b<arguments.length;b++){var c=arguments[b];for(var d in c)Object.prototype.hasOwnP
2024-04-24 12:22:21 UTC	1541	IN	Data Raw: 73 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 61 72 72 61 79 4f 66 28 62 2e 73 74 72 69 6e 67 28 29 29 29 7d 29 29 2c 61 64 64 69 74 69 6f 6e 61 6c 55 73 65 72 44 61 74 61 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 2e 6f 62 6a 65 63 74 57 69 74 68 46 69 65 6c 64 73 28 7b 73 65 6e 64 46 42 4c 6f 67 69 6e 49 44 3a 62 2e 61 6c 6c 6f 77 4e 75 6c 6c 28 62 5b 22 62 6f 6f 6c 65 61 6e 22 5d 28 29 29 7d 29 29 7d 29 3b 6b 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 4f 70 74 49 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: s:b.allowNull(b.arrayOf(b.string()))})),additionalUserData:b.allowNull(b.objectWithFields({sendFBLoginID:b.allowNull(b["boolean"]())}))});k.exports=a})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsOptIn",function(){return functi
2024-04-24 12:22:21 UTC	14843	IN	Data Raw: 6c 3f 63 28 64 28 62 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 62 5b 61 5d 3d 3d 3d 21 30 7d 29 3a 5b 5d 7d 7d 5d 29 3b 72 65 74 75 72 6e 20 61 7d 28 29 3b 6c 2e 65 78 70 6f 72 74 73 3d 61 7d 29 28 29 3b 72 65 74 75 72 6e 20 6c 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 50 61 72 61 6c 6c 65 6c 46 69 72 65 43 6f 6e 66 69 67 54 79 70 65 64 65 66 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 29 7b 76 61 72 20 6b 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 6b 2e 65 78 70 6f 72 74 73 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 Data Ascii: l?c(d(b),function(a){return b[a]===!0}):[]}}]);return a}();l.exports=a})();return l.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsParallelFireConfigTypedef",function(){return function(g,h,i,j){var k={exports:{}};k.exports;(function(){"use s
2024-04-24 12:22:21 UTC	16384	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 29 29 72 65 74 75 72 6e 3b 66 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 62 2c 22 63 75 73 74 6f 6d 44 61 74 61 22 29 26 26 74 79 70 65 6f 66 20 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 62 2e 63 75 73 74 6f 6d 44 61 74 61 21 3d 3d 6e 75 6c 6c 3b 66 7c 7c 28 62 2e 63 75 73 74 6f 6d 44 61 74 61 3d 7b 7d 29 3b 71 28 62 29 7d 6b 2e 65 78 70 6f 72 74 73 3d 72 7d 29 28 29 3b 72 65 74 75 72 6e 20 6b 2e 65 78 70 6f 72 74 73 7d 28 61 2c 62 2c 63 2c 64 29 7d 29 3b 66 2e 65 6e 73 75 72 65 4d 6f 64 75 6c 65 52 65 67 69 73 74 65 72 65 64 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 53 65 6e 64 45 76 Data Ascii: tion(a){return a}))return;f=Object.prototype.hasOwnProperty.call(b,"customData")&&typeof b.customData!=="undefined"&&b.customData!==null;f\|\|(b.customData={});q(b)}k.exports=r})();return k.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEventsSendEv
2024-04-24 12:22:21 UTC	16384	IN	Data Raw: 26 62 2e 70 75 73 68 28 73 5b 63 5d 29 3b 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 20 61 72 72 61 79 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 61 3d 4f 62 6a 65 63 74 28 61 29 3b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 3e 3e 3e 30 3b 69 66 28 74 79 70 65 6f 66 20 62 21 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 62 2b 22 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 76 61 72 20 64 3d 6e 65 77 20 41 72 72 61 79 28 63 29 2c 65 3d 30 3b 77 68 69 6c 65 28 65 3c 63 29 7b 76 61 72 20 66 3b 65 20 69 6e 20 61 26 26 28 66 3d 61 Data Ascii: &b.push(s[c]);return b}function v(a,b){if(a==null)throw new TypeError(" array is null or not defined");a=Object(a);var c=a.length>>>0;if(typeof b!=="function")throw new TypeError(b+" is not a function");var d=new Array(c),e=0;while(e<c){var f;e in a&&(f=a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49863	142.250.141.103	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:20 UTC	848	OUT	POST /pagead/landing?gcs=G111&gcd=13v3v3v3t5&rnd=538177932.1713961340&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	837	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3t5&rnd=538177932.1713961340&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49862	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	532	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	1700	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:21 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5 Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRceduJ.WzIwhHKYc2VGW0DD1A344D7%2BwRjDWmPOg6MtoZDBCFw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRceduJ.WzIwhHKYc2VGW0DD1A344D7%2BwRjDWmPOg6MtoZDBCFw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-04-24 12:22:21 UTC	6500	IN	Data Raw: 31 39 35 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 56 39 56 72 4b 49 71 54 49 32 61 39 57 4d 2d 55 54 78 51 74 70 62 59 6f 38 36 57 46 32 50 6c 62 31 46 66 49 74 46 6e 45 35 35 67 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 Data Ascii: 195c(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "V9VrKIqTI2a9WM-UTxQtpbYo86WF2Plb1FfItFnE55g" var userIdCookie
2024-04-24 12:22:21 UTC	11506	IN	Data Raw: 32 63 65 61 0d 0a 6a 73 3d 74 72 75 65 26 68 6f 73 74 3d 22 2b 67 6c 6f 62 61 6c 73 2e 68 6f 73 74 2b 22 26 75 69 64 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2b 22 26 64 65 73 74 69 6e 61 74 69 6f 6e 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 29 2b 22 26 74 69 70 3d 22 2b 74 69 70 29 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 55 6e 69 76 65 72 73 61 6c 50 69 78 65 6c 28 65 2c 6f 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 69 66 28 6f 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 6f 29 74 2b 3d 22 26 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 22 73 61 5f 63 6f 6e 76 5f 64 61 74 61 5f 22 2b 6e 29 2c 74 2b 3d 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 Data Ascii: 2ceajs=true&host="+globals.host+"&uid="+encodeURIComponent(e)+"&destination="+encodeURIComponent(a)+"&tip="+tip)}}}function loadUniversalPixel(e,o){if(e){var t="";if(o)for(var n in o)t+="&"+encodeURIComponent("sa_conv_data_"+n),t+="="+encodeURIComponent
2024-04-24 12:22:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49869	104.19.177.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/otCommonStyles.css HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:21 GMT Content-Type: text/css Content-Length: 24823 Connection: close Content-MD5: 4ErYmXXFNbMLrnc9DrDTsg== Last-Modified: Thu, 21 Mar 2024 07:04:40 GMT ETag: 0x8DC49752D6C72B8 x-ms-request-id: fc145aa7-801e-000e-2a26-7c1033000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 42952 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960ef078cc09ef-LAS
2024-04-24 12:22:21 UTC	543	IN	Data Raw: 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 74 72 75 73 74 2d 76 65 6e 64 6f 72 73 2d 6c 69 73 74 2d 68 61 6e 64 6c 65 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 63 6f 6c 6f 72 3a 23 31 66 39 36 64 62 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 6e 65 Data Ascii: #onetrust-banner-sdk{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#onetrust-banner-sdk .onetrust-vendors-list-handler{cursor:pointer;color:#1f96db;font-size:inherit;font-weight:bold;text-decoration:none;margin-left:5px}#onetrust-banner-sdk .one
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 31 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 62 6e 72 2d 77 2d 6c 6f 67 6f 20 2e 6f 74 2d 62 6e 72 2d 6c 6f 67 6f 7b 68 65 69 67 68 74 3a 36 34 70 78 3b 77 69 64 74 68 3a 36 34 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 74 63 66 32 2d 76 65 6e 64 6f 72 2d 63 6f 75 6e 74 2e 6f 74 2d 74 65 78 74 2d 62 6f 6c 64 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 6f 6e 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 63 6c 6f 73 65 2d 69 63 Data Ascii: k #onetrust-pc-btn-handler{outline-offset:1px}#onetrust-banner-sdk.ot-bnr-w-logo .ot-bnr-logo{height:64px;width:64px}#onetrust-banner-sdk .ot-tcf2-vendor-count.ot-text-bold{font-weight:bold}#onetrust-banner-sdk .ot-close-icon,#onetrust-pc-sdk .ot-close-ic
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 79 6e 63 2d 6e 74 66 79 20 62 75 74 74 6f 6e 20 2a 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 61 5b 64 61 74 61 2d 70 61 72 65 6e 74 2d 69 64 5d 20 2a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 68 69 64 65 2c 23 6f 74 2d 73 79 6e 63 2d 6e 74 66 79 20 2e 6f 74 2d 68 69 64 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 62 75 74 74 6f 6e 2e 6f 74 2d 6c 69 6e 6b 2d 62 74 6e 3a 68 6f 76 65 72 2c 23 6f Data Ascii: ync-ntfy button ,#ot-sync-ntfy a[data-parent-id] {font-size:inherit;font-weight:inherit;color:inherit}#onetrust-banner-sdk .ot-hide,#onetrust-pc-sdk .ot-hide,#ot-sync-ntfy .ot-hide{display:none !important}#onetrust-banner-sdk button.ot-link-btn:hover,#o
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 70 63 2d 6c 6f 67 6f 20 69 6d 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 70 63 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 78 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 73 63 72 Data Ascii: ackground-position:center;background-size:contain;background-repeat:no-repeat;display:inline-flex;justify-content:center;align-items:center}#onetrust-pc-sdk .pc-logo img,#onetrust-pc-sdk .ot-pc-logo img{max-height:100%;max-width:100%}#onetrust-pc-sdk .scr
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 6e 65 74 72 75 73 74 2d 66 61 64 65 2d 69 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6f 74 2d 63 6f 6f 6b 69 65 2d 6c 61 62 65 6c 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 32 36 70 78 29 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 38 39 36 70 78 29 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 6c 61 6e 64 73 63 61 70 65 29 7b 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 Data Ascii: netrust-fade-in{0%{opacity:0}100%{opacity:1}}.ot-cookie-label{text-decoration:underline}@media only screen and (min-width: 426px)and (max-width: 896px)and (orientation: landscape){#onetrust-pc-sdk p{font-size:.75em}}#onetrust-banner-sdk .banner-option-inp
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 61 79 3a 69 6e 6c 69 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 35 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 7b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 2e 35 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 2c 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 20 73 76 67 20 70 61 74 68 7b 66 69 6c 6c 3a 23 33 32 61 65 Data Ascii: ay:inline;margin-right:5px}#onetrust-banner-sdk .ot-optout-signal svg,#onetrust-pc-sdk .ot-optout-signal svg{height:20px;width:30px;transform:scale(0.5)}#onetrust-banner-sdk .ot-optout-signal svg path,#onetrust-pc-sdk .ot-optout-signal svg path{fill:#32ae
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 67 72 6f 75 70 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 63 6f 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 32 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 20 2e 6f 74 2d 73 69 67 6e 61 72 75 72 65 2d 70 61 72 61 67 72 61 70 68 2c 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 Data Ascii: nature-health .ot-signature-cont,#onetrust-consent-sdk .ot-signature-health-group .ot-signature-cont{display:flex;flex-direction:column;gap:.25rem}#onetrust-consent-sdk .ot-signature-health .ot-signarure-paragraph,#onetrust-consent-sdk .ot-signature-healt
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 67 61 70 3a 2e 35 72 65 6d 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 69 6e 70 75 74 2d 66 69 65 6c 64 2d 63 6f 6e 74 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 69 6e 70 75 74 7b 77 69 64 74 68 3a 36 35 25 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 6f 6e 65 74 72 75 73 74 2d 63 6f 6e 73 65 6e 74 2d 73 64 6b 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 68 65 61 6c 74 68 2d 66 6f 72 6d 20 2e 6f 74 2d 73 69 67 6e 61 74 75 72 65 2d 6c 61 62 65 6c 7b 6d 61 72 Data Ascii: -direction:column;gap:.5rem}#onetrust-consent-sdk .ot-input-field-cont .ot-signature-input{width:65%}#onetrust-consent-sdk .ot-signature-health-form{display:flex;flex-direction:column}#onetrust-consent-sdk .ot-signature-health-form .ot-signature-label{mar
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 62 61 6e 6e 65 72 2d 73 64 6b 20 61 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 61 62 65 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 69 6e 70 75 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 75 6c 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6c 69 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 6e 61 76 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 61 62 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 68 65 61 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 74 64 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: banner-sdk a,#onetrust-banner-sdk label,#onetrust-banner-sdk input,#onetrust-banner-sdk ul,#onetrust-banner-sdk li,#onetrust-banner-sdk nav,#onetrust-banner-sdk table,#onetrust-banner-sdk thead,#onetrust-banner-sdk tr,#onetrust-banner-sdk td,#onetrust-ban
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 63 79 20 73 76 67 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 62 75 74 74 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 73 65 63 74 69 6f 6e 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 61 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 61 62 65 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 69 6e 70 75 74 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 75 6c 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6c 69 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 6e 61 76 2c 23 6f 74 2d 73 64 6b 2d 63 6f 6f 6b 69 65 2d 70 6f 6c 69 63 79 20 74 61 62 6c 65 2c 23 6f 74 2d 73 Data Ascii: cy svg,#ot-sdk-cookie-policy button,#ot-sdk-cookie-policy section,#ot-sdk-cookie-policy a,#ot-sdk-cookie-policy label,#ot-sdk-cookie-policy input,#ot-sdk-cookie-policy ul,#ot-sdk-cookie-policy li,#ot-sdk-cookie-policy nav,#ot-sdk-cookie-policy table,#ot-s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49868	104.19.177.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	386	OUT	GET /scripttemplates/202403.1.0/assets/otFlat.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	809	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:21 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: KLWFssuowJEtDumTaVZD/A== Last-Modified: Thu, 21 Mar 2024 07:04:28 GMT x-ms-request-id: 8bb19052-c01e-006d-0924-7c8dc8000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 25928 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960ef078ce09ef-LAS
2024-04-24 12:22:21 UTC	560	IN	Data Raw: 33 35 32 65 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 46 6c 61 74 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 59 6d 46 75 62 6d 56 79 4c 58 4e 6b 61 79 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 52 6d 78 68 64 43 49 2b 50 47 52 70 64 69 42 79 62 32 78 6c 50 53 4a 68 62 47 56 79 64 47 52 70 59 57 78 76 5a 79 49 67 59 58 4a 70 59 53 31 6b 5a 58 4e 6a 63 6d 6c 69 5a 57 52 69 65 54 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 39 73 61 57 4e 35 4c 58 52 6c 65 48 51 69 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6b 61 79 31 6a 62 32 35 Data Ascii: 352e { "name": "otFlat", "html": "PGRpdiBpZD0ib25ldHJ1c3QtYmFubmVyLXNkayIgY2xhc3M9Im90RmxhdCI+PGRpdiByb2xlPSJhbGVydGRpYWxvZyIgYXJpYS1kZXNjcmliZWRieT0ib25ldHJ1c3QtcG9saWN5LXRleHQiPjxkaXYgY2xhc3M9Im90LXNkay1jb25
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 64 43 49 2b 64 47 6c 30 62 47 55 38 59 53 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 77 62 32 78 70 59 33 6b 38 4c 32 45 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 69 49 2b 50 47 67 7a 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 64 47 6c 30 62 47 55 69 50 6c 64 6c 49 47 4e 76 62 47 78 6c 59 33 51 67 5a 47 46 30 59 53 42 70 62 69 42 76 63 6d 52 6c 63 69 42 30 62 79 42 77 63 6d 39 32 61 57 52 6c 4f 6a 77 76 61 44 4d 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 5a 48 42 6b 4c 57 4e 76 62 6e 52 6c 62 6e 51 69 50 6a 78 77 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 6b 63 47 51 74 5a 47 56 7a 59 79 49 2b 5a 47 56 7a 59 33 4a 70 63 48 52 Data Ascii: dCI+dGl0bGU8YSBocmVmPSIjIj5wb2xpY3k8L2E+PC9kaXY+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRhaW5lciI+PGgzIGNsYXNzPSJvdC1kcGQtdGl0bGUiPldlIGNvbGxlY3QgZGF0YSBpbiBvcmRlciB0byBwcm92aWRlOjwvaDM+PGRpdiBjbGFzcz0ib3QtZHBkLWNvbnRlbnQiPjxwIGNsYXNzPSJvdC1kcGQtZGVzYyI+ZGVzY3JpcHR
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 32 39 75 49 6a 34 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 73 62 33 4e 6c 49 45 4a 31 64 48 52 76 62 69 42 46 54 6b 51 74 4c 54 34 38 4c 32 52 70 64 6a 34 38 4c 32 52 70 64 6a 34 3d 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 63 73 73 22 3a 20 22 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 31 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 46 6c 61 74 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 32 31 34 37 34 38 33 36 34 35 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d Data Ascii: 29uIj48L2J1dHRvbj48L2Rpdj48IS0tIENsb3NlIEJ1dHRvbiBFTkQtLT48L2Rpdj48L2Rpdj4=", "css": "#onetrust-banner-sdk{box-shadow:0 0 18px rgba(0,0,0,.2)}#onetrust-banner-sdk.otFlat{position:fixed;z-index:2147483645;bottom:0;right:0;left:0;background-
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 7b 63 6f 6c 6f 72 3a 64 69 6d 67 72 61 79 3b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 70 61 72 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e Data Ascii: k #onetrust-policy-title,#onetrust-banner-sdk #onetrust-policy-text{color:dimgray;float:left}#onetrust-banner-sdk #onetrust-button-group-parent{min-height:1px;text-align:center}#onetrust-banner-sdk #onetrust-button-group{display:inline-block}#onetrust-ban
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 32 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 69 6e 70 75 74 20 2a 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 23 6f 6e 65 74 72 75 73 74 Data Ascii: nner-option-input{cursor:pointer;width:auto;height:auto;border:none;padding:0;padding-right:3px;margin:0 0 10px;font-size:.82em;line-height:1.4}#onetrust-banner-sdk .banner-option-input *{pointer-events:none;font-size:inherit;line-height:inherit}#onetrust
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 64 6b 20 2e 6f 74 2d 61 72 72 6f 77 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 62 61 6e 6e 65 72 2d 6f 70 74 69 6f 6e 2d 64 65 74 61 69 6c 73 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 33 30 30 6d 73 20 65 61 73 65 2d 69 6e 20 30 73 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 Data Ascii: dk .ot-arrow-container,#onetrust-banner-sdk .banner-option-details{transition:all 300ms ease-in 0s;-webkit-transition:all 300ms ease-in 0s;-moz-transition:all 300ms ease-in 0s;-o-transition:all 300ms ease-in 0s}#onetrust-banner-sdk .ot-dpd-container{float
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 64 70 64 2d 64 65 73 63 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 32 35 70 78 29 7b 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 63 6c 6f 73 65 2d 62 74 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 36 70 78 Data Ascii: r-sdk .ot-dpd-desc{margin-bottom:10px}#onetrust-banner-sdk .ot-dpd-desc>.ot-b-addl-desc{margin-top:10px;margin-bottom:10px;font-size:1em}@media only screen and (max-width: 425px){#onetrust-banner-sdk #onetrust-close-btn-container{position:absolute;top:6px
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 68 61 73 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 62 75 74 74 6f 6e Data Ascii: sdk #onetrust-button-group button{display:inline-block}#onetrust-banner-sdk #onetrust-button-group{margin-right:0;text-align:center}#onetrust-banner-sdk .has-reject-all-button #onetrust-pc-btn-handler{float:left}#onetrust-banner-sdk .has-reject-all-button
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 72 75 73 74 2d 72 65 6a 65 63 74 2d 61 6c 6c 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 70 63 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 7b 77 69 64 74 68 3a 31 30 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 73 74 2d 61 63 63 65 70 74 2d 62 74 6e 2d 68 61 6e 64 6c 65 72 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 23 6f 6e 65 74 72 75 Data Ascii: rust-reject-all-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-pc-btn-handler{width:100%}#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetrust-accept-btn-handler,#onetrust-banner-sdk.ot-iab-2 #onetrust-button-group #onetru
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 72 61 6e 73 6c 61 74 65 59 28 2d 35 30 25 29 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 20 2e 6f 74 2d 6f 70 74 6f 75 74 2d 73 69 67 6e 61 6c 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 69 74 6c 65 7b 77 69 64 74 68 3a 35 30 25 7d 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 23 6f 6e 65 74 72 75 73 74 2d 70 6f 6c 69 63 79 2d 74 65 78 74 2c 23 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 2e 6f 74 2d 69 61 62 2d 32 20 3a 6e 6f 74 28 2e 6f 74 2d 64 70 64 2d 64 65 73 63 29 3e 2e 6f 74 2d 62 2d 61 64 64 6c 2d 64 65 73 63 7b 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: ranslateY(-50%)}#onetrust-banner-sdk .ot-optout-signal{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-title{width:50%}#onetrust-banner-sdk.ot-iab-2 #onetrust-policy-text,#onetrust-banner-sdk.ot-iab-2 :not(.ot-dpd-desc)>.ot-b-addl-desc{margin-bot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49867	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	801	OUT	GET /drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	409	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 1233 Content-Type: text/html; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:21 GMT Etag: "493647a445d610f59f14e994de89111a-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X4M6FFGCMXXBDDEQBNWN Connection: close
2024-04-24 12:22:21 UTC	777	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 2f 3e 3c 74 69 74 6c 65 3e 44 6f 63 75 73 69 67 6e 20 43 68 61 74 62 6f 74 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6e 65 78 74 2d 68 65 61 64 2d 63 6f 75 6e 74 22 20 63 6f 6e 74 65 6e 74 3d 22 33 22 2f 3e 3c 6e 6f 73 63 72 69 70 74 20 64 61 74 61 2d 6e 2d 63 73 73 3d 22 22 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 65 66 65 72 3d 22 22 20 6e 6f 6d 6f 64 75 6c 65 3d 22 22 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width"/><title>Docusign Chatbot</title><meta name="next-head-count" content="3"/><noscript data-n-css=""></noscript><script defer="" nomodule="" src="/_next/stat
2024-04-24 12:22:21 UTC	456	IN	Data Raw: 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 50 46 78 51 70 52 63 64 61 68 37 46 70 32 30 38 4d 56 4a 66 52 2f 5f 62 75 69 6c 64 4d 61 6e 69 66 65 73 74 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 50 46 78 51 70 52 63 64 61 68 37 46 70 32 30 38 4d 56 4a 66 52 2f 5f 73 73 67 4d 61 6e 69 66 65 73 74 2e 6a 73 22 20 64 65 66 65 72 3d 22 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 5f 5f 6e 65 78 74 22 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 20 69 64 3d 22 5f 5f 4e 45 58 54 5f 44 41 54 41 5f 5f 22 20 74 79 70 65 3d 22 Data Ascii: fer=""></script><script src="/_next/static/PFxQpRcdah7Fp208MVJfR/_buildManifest.js" defer=""></script><script src="/_next/static/PFxQpRcdah7Fp208MVJfR/_ssgManifest.js" defer=""></script></head><body><div id="__next"></div><script id="__NEXT_DATA__" type="

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49870	104.19.177.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	393	OUT	GET /scripttemplates/202403.1.0/assets/v2/otPcCenter.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	808	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:21 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Content-MD5: ZcF16z2xXnh51d4MuKhe/w== Last-Modified: Thu, 21 Mar 2024 07:04:30 GMT x-ms-request-id: 2afaf4cb-101e-0033-69c3-7b6628000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 7469 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960ef2094e69e6-LAS
2024-04-24 12:22:21 UTC	561	IN	Data Raw: 37 63 37 61 0d 0a 0a 20 20 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 6e 61 6d 65 22 3a 20 22 6f 74 50 63 43 65 6e 74 65 72 22 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 22 68 74 6d 6c 22 3a 20 22 50 47 52 70 64 69 42 70 5a 44 30 69 62 32 35 6c 64 48 4a 31 63 33 51 74 63 47 4d 74 63 32 52 72 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 52 51 59 30 4e 6c 62 6e 52 6c 63 69 42 76 64 43 31 6f 61 57 52 6c 49 47 39 30 4c 57 5a 68 5a 47 55 74 61 57 34 69 50 6a 78 6b 61 58 59 67 63 6d 39 73 5a 54 30 69 59 57 78 6c 63 6e 52 6b 61 57 46 73 62 32 63 69 49 47 46 79 61 57 45 74 62 57 39 6b 59 57 77 39 49 6e 52 79 64 57 55 69 49 47 46 79 61 57 45 74 5a 47 56 7a 59 33 4a 70 59 6d 56 6b 59 6e 6b 39 49 6d 39 30 4c 58 42 6a 4c 57 52 6c 63 32 4d 69 50 6a 77 Data Ascii: 7c7a { "name": "otPcCenter", "html": "PGRpdiBpZD0ib25ldHJ1c3QtcGMtc2RrIiBjbGFzcz0ib3RQY0NlbnRlciBvdC1oaWRlIG90LWZhZGUtaW4iPjxkaXYgcm9sZT0iYWxlcnRkaWFsb2ciIGFyaWEtbW9kYWw9InRydWUiIGFyaWEtZGVzY3JpYmVkYnk9Im90LXBjLWRlc2MiPjw
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 53 42 43 64 58 52 30 62 32 34 67 4c 53 30 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 59 32 39 75 64 47 56 75 64 43 49 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 42 6a 4c 58 4e 6a 63 6d 39 73 62 47 4a 68 63 69 49 2b 50 47 67 79 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 30 61 58 52 73 5a 53 49 2b 57 57 39 31 63 69 42 51 63 6d 6c 32 59 57 4e 35 50 43 39 6f 4d 6a 34 38 5a 47 6c 32 49 47 6c 6b 50 53 4a 76 64 43 31 77 59 79 31 6b 5a 58 4e 6a 49 6a 34 38 4c 32 52 70 64 6a 34 38 59 6e 56 30 64 47 39 75 49 47 6c 6b 50 53 4a 68 59 32 4e 6c 63 48 51 74 63 6d 56 6a 62 32 31 74 5a 57 35 6b 5a 57 51 74 59 6e 52 75 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6b 46 73 62 47 39 33 49 47 46 73 62 44 77 76 59 6e 56 30 64 47 39 75 50 6a 78 7a 5a 57 4e 30 Data Ascii: SBCdXR0b24gLS0+PGRpdiBpZD0ib3QtcGMtY29udGVudCIgY2xhc3M9Im90LXBjLXNjcm9sbGJhciI+PGgyIGlkPSJvdC1wYy10aXRsZSI+WW91ciBQcml2YWN5PC9oMj48ZGl2IGlkPSJvdC1wYy1kZXNjIj48L2Rpdj48YnV0dG9uIGlkPSJhY2NlcHQtcmVjb21tZW5kZWQtYnRuLWhhbmRsZXIiPkFsbG93IGFsbDwvYnV0dG9uPjxzZWN0
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 42 42 59 32 4e 76 63 6d 52 70 62 32 34 67 52 33 4a 76 64 58 41 67 63 32 56 6a 64 47 6c 76 62 69 42 6c 62 6d 52 7a 49 43 30 74 50 6a 77 76 63 32 56 6a 64 47 6c 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 63 32 56 6a 64 47 6c 76 62 69 42 70 5a 44 30 69 62 33 51 74 63 47 4d 74 62 48 4e 30 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 6c 6b 5a 53 42 76 64 43 31 6f 62 33 4e 30 63 79 31 31 61 53 42 76 64 43 31 77 59 79 31 7a 59 33 4a 76 62 47 78 69 59 58 49 69 50 6a 78 6b 61 58 59 67 61 57 51 39 49 6d 39 30 4c 58 42 6a 4c 57 68 6b 63 69 49 2b 50 47 52 70 64 69 42 70 5a 44 30 69 62 33 51 74 62 48 4e 30 4c 58 52 70 64 47 78 6c 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 57 35 72 4c 57 4a 30 62 69 42 69 59 57 4e 72 4c Data Ascii: BBY2NvcmRpb24gR3JvdXAgc2VjdGlvbiBlbmRzIC0tPjwvc2VjdGlvbj48L2Rpdj48c2VjdGlvbiBpZD0ib3QtcGMtbHN0IiBjbGFzcz0ib3QtaGlkZSBvdC1ob3N0cy11aSBvdC1wYy1zY3JvbGxiYXIiPjxkaXYgaWQ9Im90LXBjLWhkciI+PGRpdiBpZD0ib3QtbHN0LXRpdGxlIj48YnV0dG9uIGNsYXNzPSJvdC1saW5rLWJ0biBiYWNrL
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 63 33 51 74 63 33 56 69 61 47 52 79 49 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 46 79 59 32 67 74 59 32 35 30 63 69 49 2b 50 48 41 67 63 6d 39 73 5a 54 30 69 63 33 52 68 64 48 56 7a 49 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 4e 79 62 69 31 79 5a 48 49 69 50 6a 77 76 63 44 34 38 61 57 35 77 64 58 51 67 61 57 51 39 49 6e 5a 6c 62 6d 52 76 63 69 31 7a 5a 57 46 79 59 32 67 74 61 47 46 75 5a 47 78 6c 63 69 49 67 64 48 6c 77 5a 54 30 69 64 47 56 34 64 43 49 67 62 6d 46 74 5a 54 30 69 64 6d 56 75 5a 47 39 79 4c 58 4e 6c 59 58 4a 6a 61 43 31 6f 59 57 35 6b 62 47 56 79 49 6a 34 67 50 48 4e 32 5a 79 42 34 62 57 78 75 63 7a 30 69 61 48 Data Ascii: 8L2Rpdj48ZGl2IGNsYXNzPSJvdC1sc3Qtc3ViaGRyIj48ZGl2IGNsYXNzPSJvdC1zZWFyY2gtY250ciI+PHAgcm9sZT0ic3RhdHVzIiBjbGFzcz0ib3Qtc2Nybi1yZHIiPjwvcD48aW5wdXQgaWQ9InZlbmRvci1zZWFyY2gtaGFuZGxlciIgdHlwZT0idGV4dCIgbmFtZT0idmVuZG9yLXNlYXJjaC1oYW5kbGVyIj4gPHN2ZyB4bWxucz0iaH
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 62 33 67 39 49 6a 41 67 4d 43 41 30 4d 44 49 75 4e 54 63 33 49 44 51 77 4d 69 34 31 4e 7a 63 69 49 48 68 74 62 44 70 7a 63 47 46 6a 5a 54 30 69 63 48 4a 6c 63 32 56 79 64 6d 55 69 50 6a 78 30 61 58 52 73 5a 54 35 47 61 57 78 30 5a 58 49 67 53 57 4e 76 62 6a 77 76 64 47 6c 30 62 47 55 2b 50 47 63 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 49 32 5a 6d 5a 69 49 67 5a 44 30 69 54 54 51 77 4d 43 34 34 4e 54 67 73 4d 54 45 75 4e 44 49 33 59 79 30 7a 4c 6a 49 30 4d 53 30 33 4c 6a 51 79 4d 53 30 34 4c 6a 67 31 4c 54 45 78 4c 6a 45 7a 4d 69 30 78 4e 69 34 34 4e 54 51 74 4d 54 45 75 4d 54 4d 32 53 44 45 34 4c 6a 55 32 4e 47 4d 74 4e 79 34 35 4f 54 4d 73 4d 43 30 78 4d 79 34 32 4d 53 77 7a 4c 6a 63 78 4e 53 30 78 4e 69 34 34 4e 44 59 73 4d 54 45 75 4d 54 4d Data Ascii: b3g9IjAgMCA0MDIuNTc3IDQwMi41NzciIHhtbDpzcGFjZT0icHJlc2VydmUiPjx0aXRsZT5GaWx0ZXIgSWNvbjwvdGl0bGU+PGc+PHBhdGggZmlsbD0iI2ZmZiIgZD0iTTQwMC44NTgsMTEuNDI3Yy0zLjI0MS03LjQyMS04Ljg1LTExLjEzMi0xNi44NTQtMTEuMTM2SDE4LjU2NGMtNy45OTMsMC0xMy42MSwzLjcxNS0xNi44NDYsMTEuMTM
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 4e 6c 62 43 31 68 62 47 77 74 61 47 52 79 49 6a 34 38 63 33 42 68 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 59 32 39 75 63 32 56 75 64 43 31 6f 5a 48 49 69 50 6b 4e 76 62 6e 4e 6c 62 6e 51 38 4c 33 4e 77 59 57 34 2b 49 44 78 7a 63 47 46 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 73 61 53 31 6f 5a 48 49 69 50 6b 78 6c 5a 79 35 4a 62 6e 52 6c 63 6d 56 7a 64 44 77 76 63 33 42 68 62 6a 34 38 4c 32 52 70 64 6a 34 38 5a 47 6c 32 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 7a 5a 57 77 74 59 57 78 73 4c 57 4e 6f 61 32 4a 76 65 43 49 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 43 39 6b 61 58 59 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 63 32 52 72 4c 58 4a 76 Data Ascii: jxkaXYgY2xhc3M9Im90LXNlbC1hbGwtaGRyIj48c3BhbiBjbGFzcz0ib3QtY29uc2VudC1oZHIiPkNvbnNlbnQ8L3NwYW4+IDxzcGFuIGNsYXNzPSJvdC1saS1oZHIiPkxlZy5JbnRlcmVzdDwvc3Bhbj48L2Rpdj48ZGl2IGNsYXNzPSJvdC1zZWwtYWxsLWNoa2JveCI+PC9kaXY+PC9kaXY+PC9kaXY+PGRpdiBjbGFzcz0ib3Qtc2RrLXJv
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 78 68 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 31 32 5a 57 34 74 62 47 6c 75 61 79 49 67 61 48 4a 6c 5a 6a 30 69 49 79 49 2b 56 6d 6c 6c 64 79 42 51 63 6d 6c 32 59 57 4e 35 49 45 35 76 64 47 6c 6a 5a 54 77 76 59 54 34 38 59 6e 49 2b 50 47 45 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 6c 62 69 31 73 5a 57 64 6a 62 47 46 70 62 53 31 73 61 57 35 72 49 69 42 6f 63 6d 56 6d 50 53 49 6a 49 6a 35 57 61 57 56 33 49 45 78 6c 5a 79 42 4a 62 6e 51 67 51 32 78 68 61 57 30 67 54 6d 39 30 61 57 4e 6c 50 43 39 68 50 6a 77 76 5a 47 6c 32 50 6a 77 68 4c 53 30 67 64 47 39 6e 5a 32 78 6c 63 79 42 68 62 6d 51 67 59 58 4a 79 62 33 63 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 47 64 73 4c 57 4e 75 64 48 49 69 50 6a 77 76 5a 47 6c 32 50 Data Ascii: xhIGNsYXNzPSJvdC12ZW4tbGluayIgaHJlZj0iIyI+VmlldyBQcml2YWN5IE5vdGljZTwvYT48YnI+PGEgY2xhc3M9Im90LXZlbi1sZWdjbGFpbS1saW5rIiBocmVmPSIjIj5WaWV3IExlZyBJbnQgQ2xhaW0gTm90aWNlPC9hPjwvZGl2PjwhLS0gdG9nZ2xlcyBhbmQgYXJyb3cgLS0+PGRpdiBjbGFzcz0ib3QtdGdsLWNudHIiPjwvZGl2P
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 73 61 57 35 72 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 73 63 33 51 74 59 32 35 30 63 69 49 2b 50 47 4a 31 64 48 52 76 62 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 62 47 6c 75 61 79 31 69 64 47 34 67 59 32 46 30 5a 57 64 76 63 6e 6b 74 64 6d 56 75 5a 47 39 79 63 79 31 73 61 58 4e 30 4c 57 68 68 62 6d 52 73 5a 58 49 69 50 6c 5a 70 5a 58 63 67 56 6d 56 75 5a 47 39 79 49 45 78 70 63 33 51 38 4c 32 4a 31 64 48 52 76 62 6a 34 38 4c 32 52 70 64 6a 34 38 49 53 30 74 49 45 4e 76 62 32 74 70 5a 53 42 73 62 33 4e 30 49 47 78 70 62 6d 73 67 4c 53 30 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 61 47 78 7a 64 43 31 6a 62 6e 52 79 49 6a 34 38 59 6e 56 30 64 47 39 75 49 47 4e 73 59 58 4e 7a 50 53 4a 76 64 43 Data Ascii: saW5rIC0tPjxkaXYgY2xhc3M9Im90LXZsc3QtY250ciI+PGJ1dHRvbiBjbGFzcz0ib3QtbGluay1idG4gY2F0ZWdvcnktdmVuZG9ycy1saXN0LWhhbmRsZXIiPlZpZXcgVmVuZG9yIExpc3Q8L2J1dHRvbj48L2Rpdj48IS0tIENvb2tpZSBsb3N0IGxpbmsgLS0+PGRpdiBjbGFzcz0ib3QtaGxzdC1jbnRyIj48YnV0dG9uIGNsYXNzPSJvdC
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 62 47 55 39 49 6d 6c 74 5a 79 49 67 65 47 31 73 62 6e 4d 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 49 77 4d 44 41 76 63 33 5a 6e 49 69 42 32 61 57 56 33 51 6d 39 34 50 53 49 77 49 44 41 67 4d 54 6b 79 49 44 55 78 4d 69 49 2b 50 48 42 68 64 47 67 67 5a 6d 6c 73 62 44 30 69 59 33 56 79 63 6d 56 75 64 45 4e 76 62 47 39 79 49 69 42 6b 50 53 4a 4e 4d 54 59 32 4c 6a 6b 67 4d 6a 59 30 4c 6a 56 73 4c 54 45 78 4e 79 34 34 49 44 45 78 4e 6d 4d 74 4e 43 34 33 49 44 51 75 4e 79 30 78 4d 69 34 7a 49 44 51 75 4e 79 30 78 4e 79 41 77 62 43 30 33 4c 6a 45 74 4e 79 34 78 59 79 30 30 4c 6a 63 74 4e 43 34 33 4c 54 51 75 4e 79 30 78 4d 69 34 7a 49 44 41 74 4d 54 64 4d 4d 54 49 33 4c 6a 4d 67 4d 6a 55 32 49 44 49 31 4c 6a 45 67 4d 54 55 Data Ascii: bGU9ImltZyIgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc3ZnIiB2aWV3Qm94PSIwIDAgMTkyIDUxMiI+PHBhdGggZmlsbD0iY3VycmVudENvbG9yIiBkPSJNMTY2LjkgMjY0LjVsLTExNy44IDExNmMtNC43IDQuNy0xMi4zIDQuNy0xNyAwbC03LjEtNy4xYy00LjctNC43LTQuNy0xMi4zIDAtMTdMMTI3LjMgMjU2IDI1LjEgMTU
2024-04-24 12:22:21 UTC	1369	IN	Data Raw: 57 64 6c 49 47 46 75 5a 43 42 68 59 32 4e 6c 63 33 4d 67 64 47 56 7a 64 44 77 76 61 44 51 2b 50 43 39 6b 61 58 59 2b 50 43 45 74 4c 53 42 68 59 32 4e 76 63 6d 52 70 62 32 34 67 5a 47 56 30 59 57 6c 73 49 43 30 74 50 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 57 46 6a 59 79 31 6e 63 6e 42 6a 62 6e 52 79 49 47 39 30 4c 57 46 6a 59 79 31 30 65 48 51 67 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 74 59 32 35 30 63 69 49 2b 50 47 52 70 64 69 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 6c 75 5a 6d 38 69 50 6a 78 6f 4e 53 42 6a 62 47 46 7a 63 7a 30 69 62 33 51 74 64 6d 35 6b 4c 57 78 69 62 43 49 2b 55 32 56 79 64 6d 6c 6a 5a 53 42 4f 59 57 31 6c 50 43 39 6f 4e 54 34 38 61 44 59 67 59 32 78 68 63 33 4d 39 49 6d 39 30 4c 58 5a 75 Data Ascii: WdlIGFuZCBhY2Nlc3MgdGVzdDwvaDQ+PC9kaXY+PCEtLSBhY2NvcmRpb24gZGV0YWlsIC0tPjxkaXYgY2xhc3M9Im90LWFjYy1ncnBjbnRyIG90LWFjYy10eHQgb3Qtdm5kLWluZm8tY250ciI+PGRpdiBjbGFzcz0ib3Qtdm5kLWluZm8iPjxoNSBjbGFzcz0ib3Qtdm5kLWxibCI+U2VydmljZSBOYW1lPC9oNT48aDYgY2xhc3M9Im90LXZu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49873	108.139.10.26	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	533	OUT	GET /1IEYtQv1.min.js HTTP/1.1 Host: tag.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	858	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 81322 Connection: close Last-Modified: Tue, 16 Apr 2024 11:34:44 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: Uw8d0l6_scFmnWvrtiOuVAS9xGAhBODg Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 12:22:21 GMT Cache-Control: public, max-age=3600 ETag: "a64476c6fe3674d0810193abbd925b08" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 e2b6596be074ad87bd3300d4df7735b4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO5-P2 X-Amz-Cf-Id: mGJb7BiH7Pw2ICvm_WH5GgBkQuWDAfTjDlwq0-QcuSnKJpfKmFOuaw== Age: 792 Strict-Transport-Security: max-age=63072000; includeSubDomains; preload permissions-policy: accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=(), interest-cohort=()
2024-04-24 12:22:21 UTC	15526	IN	Data Raw: 76 61 72 20 44 65 6d 61 6e 64 62 61 73 65 3d 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 61 73 65 7c 7c 7b 7d 3b 21 66 75 6e 63 74 69 6f 6e 28 64 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 4e 2c 78 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 73 70 72 65 61 64 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 69 66 28 69 7c 7c 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 6e 2c 6f 3d 30 2c 72 3d 74 2e 6c 65 6e 67 74 68 3b 6f 3c 72 3b 6f 2b 2b 29 21 6e 26 26 6f 20 69 6e 20 74 7c 7c 28 28 6e 3d 6e 7c 7c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2c 30 2c 6f 29 29 5b 6f 5d 3d 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 65 2e 63 6f 6e 63 61 74 28 6e 7c 7c Data Ascii: var Demandbase=window.Demandbase\|\|{};!function(d){"use strict";var N,x=this&&this.__spreadArray\|\|function(e,t,i){if(i\|\|2===arguments.length)for(var n,o=0,r=t.length;o<r;o++)!n&&o in t\|\|((n=n\|\|Array.prototype.slice.call(t,0,o))[o]=t[o]);return e.concat(n\|\|
2024-04-24 12:22:22 UTC	16384	IN	Data Raw: 72 6c 3d 5b 74 68 69 73 2e 75 72 6c 5d 29 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 72 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 21 31 3b 66 6f 72 28 69 20 69 6e 20 74 68 69 73 2e 75 72 6c 29 69 66 28 74 68 69 73 2e 75 72 6c 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 75 72 6c 5b 69 5d 3b 61 2e 55 74 69 6c 69 74 69 65 73 2e 69 73 43 75 72 72 65 6e 74 50 61 67 65 28 74 29 26 26 28 65 3d 21 30 29 7d 69 66 28 65 29 7b 76 61 72 20 69 2c 6e 3d 21 31 3b 66 6f 72 28 69 20 69 6e 20 74 68 69 73 2e 73 65 67 6d 65 6e 74 73 29 69 66 28 74 68 69 73 2e 73 65 67 6d 65 6e 74 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 69 29 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 73 65 67 6d 65 6e 74 73 5b 69 5d 2c 72 Data Ascii: rl=[this.url])}e.prototype.run=function(){var e=!1;for(i in this.url)if(this.url.hasOwnProperty(i)){var t=this.url[i];a.Utilities.isCurrentPage(t)&&(e=!0)}if(e){var i,n=!1;for(i in this.segments)if(this.segments.hasOwnProperty(i)){var o=this.segments[i],r
2024-04-24 12:22:22 UTC	16384	IN	Data Raw: 72 6d 49 6e 70 75 74 53 65 6c 65 63 74 6f 72 73 3a 5b 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 74 65 78 74 22 5d 27 2c 27 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 27 5d 2c 69 6e 70 75 74 53 65 61 72 63 68 54 65 72 6d 73 3a 5b 22 65 6d 61 69 6c 22 2c 22 75 73 65 72 22 2c 22 6c 6f 67 69 6e 22 5d 7d 3b 74 2e 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 3d 7b 7d 3b 74 2e 62 61 73 65 55 72 6c 3d 22 68 74 74 70 73 3a 2f 2f 73 65 67 6d 65 6e 74 73 2e 63 6f 6d 70 61 6e 79 2d 74 61 72 67 65 74 2e 63 6f 6d 22 3b 74 2e 61 63 74 69 76 65 53 65 74 54 69 6d 65 6f 75 74 3d 30 3b 69 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 65 72 67 65 43 6f 6e 66 69 67 73 2e 63 61 6c 6c 28 74 2c 74 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 2c 65 7c 7c 67 2e 43 Data Ascii: rmInputSelectors:['input[type="text"]','input[type="email"]'],inputSearchTerms:["email","user","login"]};t.configuration={};t.baseUrl="https://segments.company-target.com";t.activeSetTimeout=0;i.prototype.mergeConfigs.call(t,t.DEFAULT_CONFIGURATION,e\|\|g.C
2024-04-24 12:22:22 UTC	16384	IN	Data Raw: 69 67 73 2e 63 61 6c 6c 28 74 2c 74 2e 44 45 46 41 55 4c 54 5f 43 4f 4e 46 49 47 55 52 41 54 49 4f 4e 2c 65 7c 7c 68 2e 43 6f 6e 66 69 67 2e 47 6f 6f 67 6c 65 5f 54 61 67 4d 61 6e 61 67 65 72 29 3b 72 65 74 75 72 6e 20 74 7d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 55 74 69 6c 69 74 69 65 73 2e 43 61 6c 6c 62 61 63 6b 73 2e 72 65 67 69 73 74 65 72 43 61 6c 6c 62 61 63 6b 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 68 2e 43 6f 6e 6e 65 63 74 6f 72 73 2e 47 6f 6f 67 6c 65 5f 54 61 67 4d 61 6e 61 67 65 72 2e 70 75 73 68 54 6f 44 61 74 61 4c 61 79 65 72 28 Data Ascii: igs.call(t,t.DEFAULT_CONFIGURATION,e\|\|h.Config.Google_TagManager);return t}e.prototype.initialize=function(){h.Utilities.Callbacks.registerCallback(this.callback.bind(this))};e.prototype.callback=function(e){h.Connectors.Google_TagManager.pushToDataLayer(
2024-04-24 12:22:22 UTC	16384	IN	Data Raw: 65 6e 63 65 20 6e 61 6d 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6e 61 6d 65 2c 22 20 63 68 65 63 6b 69 6e 67 20 74 68 65 73 65 20 55 52 4c 73 3a 20 22 29 2e 63 6f 6e 63 61 74 28 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 2e 70 61 67 65 73 29 29 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 74 68 69 73 2e 70 61 67 65 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 69 66 28 76 2e 55 74 69 6c 69 74 69 65 73 2e 69 73 43 75 72 72 65 6e 74 50 61 67 65 28 74 68 69 73 2e 70 61 67 65 73 5b 65 5d 7c 7c 22 22 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 6f 65 73 4c 6f 63 61 74 69 6f 6e 4d 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 43 6f 6d 70 Data Ascii: ence named: ".concat(this.name," checking these URLs: ").concat(JSON.stringify(this.pages)));for(var e=0;e<this.pages.length;e++)if(v.Utilities.isCurrentPage(this.pages[e]\|\|""))return!0;return!1};e.prototype.doesLocationMatch=function(){var e=this.getComp
2024-04-24 12:22:22 UTC	260	IN	Data Raw: 6d 61 69 6e 2e 6a 73 6f 6e 22 3b 64 2e 43 6f 6e 66 69 67 2e 67 65 6e 65 72 61 6c 2e 66 6f 72 6d 73 2e 65 6d 61 69 6c 41 50 49 50 61 74 68 3d 22 2f 61 70 69 2f 76 33 2f 65 6d 61 69 6c 2e 6a 73 6f 6e 22 3b 64 2e 43 6f 6e 66 69 67 2e 67 65 6e 65 72 61 6c 2e 66 6f 72 6d 73 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 50 61 74 68 3d 22 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 3b 64 2e 45 72 72 6f 72 52 65 70 6f 72 74 65 72 3d 6e 65 77 20 64 2e 45 72 72 6f 72 52 65 70 6f 72 74 65 72 4d 6f 64 75 6c 65 3b 64 2e 45 72 72 6f 72 52 65 70 6f 72 74 65 72 2e 69 6e 69 74 69 61 6c 69 7a 65 28 29 3b 64 2e 45 72 72 6f 72 52 65 70 6f 72 74 65 72 2e 77 72 61 70 28 64 2e 69 6e 69 74 69 61 6c 69 7a 65 2e 62 69 6e 64 28 64 29 29 28 29 7d 28 77 69 6e 64 6f 77 2e 44 65 6d 61 6e 64 62 Data Ascii: main.json";d.Config.general.forms.emailAPIPath="/api/v3/email.json";d.Config.general.forms.autocompletePath="/autocomplete";d.ErrorReporter=new d.ErrorReporterModule;d.ErrorReporter.initialize();d.ErrorReporter.wrap(d.initialize.bind(d))()}(window.Demandb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49875	142.251.2.156	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	807	OUT	GET /pagead/landing?gcs=G111&gcd=13v3v3v3t5&rnd=538177932.1713961340&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	791	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Wed, 24-Apr-2024 12:37:21 GMT; path=/; domain=.doubleclick.net; Secure; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:22 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49872	146.75.92.157	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	528	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:21 UTC	543	IN	HTTP/1.1 200 OK Connection: close Content-Length: 57671 Last-Modified: Thu, 04 Apr 2024 00:26:35 GMT ETag: "bbbcf811d8437a575d796a4c1e5d4fad" x-amz-server-side-encryption: AES256 Cache-Control: no-cache Content-Type: application/javascript; charset=utf-8 Accept-Ranges: bytes Date: Wed, 24 Apr 2024 12:22:21 GMT X-Served-By: cache-iad-kcgs7200164-IAD, cache-bur-kbur8200081-BUR X-Cache: HIT, HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 7b 36 31 37 33 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3b 74 2e 65 78 70 6f 72 74 73 3d 28 72 3d 72 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 72 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 26 26 28 72 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 72 79 70 74 6f 26 26 28 72 3d 73 65 6c 66 2e 63 72 79 70 74 6f 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 26 26 28 72 3d Data Ascii: !function(){var t={6173:function(t,e,n){var r;t.exports=(r=r\|\|function(t,e){var r;if("undefined"!=typeof window&&window.crypto&&(r=window.crypto),"undefined"!=typeof self&&self.crypto&&(r=self.crypto),"undefined"!=typeof globalThis&&globalThis.crypto&&(r=
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 68 69 73 2e 77 6f 72 64 73 3d 74 7c 7c 5b 5d 2c 74 68 69 73 2e 73 69 67 42 79 74 65 73 3d 6e 75 6c 6c 21 3d 65 3f 65 3a 34 2a 74 2e 6c 65 6e 67 74 68 7d 2c 74 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 7c 7c 66 29 2e 73 74 72 69 6e 67 69 66 79 28 74 68 69 73 29 7d 2c 63 6f 6e 63 61 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 77 6f 72 64 73 2c 6e 3d 74 2e 77 6f 72 64 73 2c 72 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 2c 69 3d 74 2e 73 69 67 42 79 74 65 73 3b 69 66 28 74 68 69 73 2e 63 6c 61 6d 70 28 29 2c 72 25 34 29 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 69 3b 6f 2b 2b 29 7b 76 61 72 20 61 3d 6e 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 72 2b 6f 3e Data Ascii: his.words=t\|\|[],this.sigBytes=null!=e?e:4t.length},toString:function(t){return(t\|\|f).stringify(this)},concat:function(t){var e=this.words,n=t.words,r=this.sigBytes,i=t.sigBytes;if(this.clamp(),r%4)for(var o=0;o<i;o++){var a=n[o>>>2]>>>24-o%48&255;e[r+o>
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 2e 70 61 72 73 65 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 7d 2c 70 3d 63 2e 42 75 66 66 65 72 65 64 42 6c 6f 63 6b 41 6c 67 6f 72 69 74 68 6d 3d 75 2e 65 78 74 65 6e 64 28 7b 72 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 64 61 74 61 3d 6e 65 77 20 73 2e 69 6e 69 74 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 3d 30 7d 2c 5f 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 68 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 Data Ascii: n(t){return d.parse(unescape(encodeURIComponent(t)))}},p=c.BufferedBlockAlgorithm=u.extend({reset:function(){this._data=new s.init,this._nDataBytes=0},_append:function(t){"string"==typeof t&&(t=h.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 65 28 72 29 26 26 28 69 3c 38 26 26 28 63 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 2e 35 29 29 29 2c 75 5b 69 5d 3d 6e 28 74 2e 70 6f 77 28 72 2c 31 2f 33 29 29 2c 69 2b 2b 29 2c 72 2b 2b 7d 28 29 3b 76 61 72 20 73 3d 5b 5d 2c 6c 3d 61 2e 53 48 41 32 35 36 3d 6f 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 69 2e 69 6e 69 74 28 63 2e 73 6c 69 63 65 28 30 29 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 74 68 69 73 2e 5f 68 61 73 68 2e 77 6f 72 64 73 2c 72 3d 6e 5b 30 5d 2c 69 3d 6e 5b 31 5d 2c 6f 3d 6e 5b 32 5d 2c 61 3d 6e 5b 33 5d 2c 63 Data Ascii: ar r=2,i=0;i<64;)e(r)&&(i<8&&(c[i]=n(t.pow(r,.5))),u[i]=n(t.pow(r,1/3)),i++),r++}();var s=[],l=a.SHA256=o.extend({_doReset:function(){this._hash=new i.init(c.slice(0))},_doProcessBlock:function(t,e){for(var n=this._hash.words,r=n[0],i=n[1],o=n[2],a=n[3],c
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 74 68 69 73 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 74 79 70 65 6f 66 20 74 2b 22 20 22 2b 74 2b 22 20 69 73 20 6e 6f 74 20 69 74 65 72 61 62 6c 65 28 63 61 6e 6e 6f 74 20 72 65 61 64 20 70 72 6f 70 65 72 74 79 20 53 79 6d 62 6f 6c 28 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 29 29 22 29 29 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 3b 69 66 28 30 3d 3d 3d 72 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 65 28 5b 5d 29 3b 76 61 72 20 69 3d 72 2e 6c 65 6e 67 74 68 3b 66 75 Data Ascii: function(t){return new this((function(e,n){if(!t\|\|void 0===t.length)return n(new TypeError(typeof t+" "+t+" is not iterable(cannot read property Symbol(Symbol.iterator))"));var r=Array.prototype.slice.call(t);if(0===r.length)return e([]);var i=r.length;fu
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 64 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 70 28 28 72 3d 6e 2c 69 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 61 70 70 6c 79 28 69 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 63 61 74 63 68 28 65 29 7b 66 28 74 2c 65 29 7d 76 61 72 20 72 2c 69 7d 66 75 6e 63 74 69 6f 6e 20 66 28 74 2c 65 29 7b 74 2e 5f 73 74 61 74 65 3d 32 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 64 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 74 29 7b 32 3d 3d 3d 74 2e 5f 73 74 61 74 65 26 26 30 3d 3d 3d 74 2e 5f 64 65 66 65 72 72 65 64 73 2e 6c 65 6e 67 74 68 26 26 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 28 28 66 75 6e Data Ascii: d(t);if("function"==typeof n)return void p((r=n,i=e,function(){r.apply(i,arguments)}),t)}t._state=1,t._value=e,d(t)}catch(e){f(t,e)}var r,i}function f(t,e){t._state=2,t._value=e,d(t)}function d(t){2===t._state&&0===t._deferreds.length&&u._immediateFn((fun
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 6e 28 74 29 7d 29 29 7d 2c 75 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 21 61 28 74 29 29 72 65 74 75 72 6e 20 6e 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 72 61 63 65 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 75 2e 72 65 73 6f 6c 76 65 28 74 5b 72 5d 29 2e 74 68 65 6e 28 65 2c 6e 29 7d 29 29 7d 2c 75 2e 5f 69 6d 6d 65 64 69 61 74 65 46 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 65 74 49 6d 6d 65 64 69 61 74 65 26 26 66 75 6e 63 Data Ascii: ew u((function(e,n){n(t)}))},u.race=function(t){return new u((function(e,n){if(!a(t))return n(new TypeError("Promise.race accepts an array"));for(var r=0,i=t.length;r<i;r++)u.resolve(t[r]).then(e,n)}))},u._immediateFn="function"==typeof setImmediate&&func
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 3d 69 29 74 68 72 6f 77 20 6f 3b 72 65 74 75 72 6e 20 43 28 29 7d 66 6f 72 28 6e 2e 6d 65 74 68 6f 64 3d 69 2c 6e 2e 61 72 67 3d 6f 3b 3b 29 7b 76 61 72 20 61 3d 6e 2e 64 65 6c 65 67 61 74 65 3b 69 66 28 61 29 7b 76 61 72 20 63 3d 67 28 61 2c 6e 29 3b 69 66 28 63 29 7b 69 66 28 63 3d 3d 3d 6c 29 63 6f 6e 74 69 6e 75 65 3b 72 65 74 75 72 6e 20 63 7d 7d 69 66 28 22 6e 65 78 74 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 6e 2e 73 65 6e 74 3d 6e 2e 5f 73 65 6e 74 3d 6e 2e 61 72 67 3b 65 6c 73 65 20 69 66 28 22 74 68 72 6f 77 22 3d 3d 3d 6e 2e 6d 65 74 68 6f 64 29 7b 69 66 28 22 73 75 73 70 65 6e 64 65 64 53 74 61 72 74 22 3d 3d 3d 72 29 74 68 72 6f 77 20 72 3d 22 63 6f 6d 70 6c 65 74 65 64 22 2c 6e 2e 61 72 67 3b 6e 2e 64 69 73 70 61 74 63 68 45 78 63 65 70 74 69 Data Ascii: =i)throw o;return C()}for(n.method=i,n.arg=o;;){var a=n.delegate;if(a){var c=g(a,n);if(c){if(c===l)continue;return c}}if("next"===n.method)n.sent=n._sent=n.arg;else if("throw"===n.method){if("suspendedStart"===r)throw r="completed",n.arg;n.dispatchExcepti
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 2c 61 29 7d 29 29 7d 72 65 74 75 72 6e 20 72 3d 72 3f 72 2e 74 68 65 6e 28 61 2c 61 29 3a 61 28 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 76 61 72 20 6e 3d 74 2e 69 74 65 72 61 74 6f 72 5b 65 2e 6d 65 74 68 6f 64 5d 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 6e 29 7b 69 66 28 65 2e 64 65 6c 65 67 61 74 65 3d 6e 75 6c 6c 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 7b 69 66 28 74 2e 69 74 65 72 61 74 6f 72 2e 72 65 74 75 72 6e 26 26 28 65 2e 6d 65 74 68 6f 64 3d 22 72 65 74 75 72 6e 22 2c 65 2e 61 72 67 3d 76 6f 69 64 20 30 2c 67 28 74 2c 65 29 2c 22 74 68 72 6f 77 22 3d 3d 3d 65 2e 6d 65 74 68 6f 64 29 29 72 65 74 75 72 6e 20 6c 3b 65 2e 6d 65 74 68 6f 64 3d 22 74 68 72 6f 77 22 2c 65 2e 61 72 67 3d 6e 65 77 20 54 79 70 65 45 72 Data Ascii: ,a)}))}return r=r?r.then(a,a):a()}}function g(t,e){var n=t.iterator[e.method];if(void 0===n){if(e.delegate=null,"throw"===e.method){if(t.iterator.return&&(e.method="return",e.arg=void 0,g(t,e),"throw"===e.method))return l;e.method="throw",e.arg=new TypeEr
2024-04-24 12:22:21 UTC	1379	IN	Data Raw: 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 72 65 74 75 72 6e 21 21 65 26 26 28 65 3d 3d 3d 64 7c 7c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 65 2e 6e 61 6d 65 29 29 7d 2c 74 2e 6d 61 72 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 68 29 3a 28 74 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 68 2c 63 28 74 2c 61 2c 22 47 65 6e 65 72 61 74 6f 72 46 75 6e 63 74 69 6f 6e 22 29 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d Data Ascii: ion=function(t){var e="function"==typeof t&&t.constructor;return!!e&&(e===d\|\|"GeneratorFunction"===(e.displayName\|\|e.name))},t.mark=function(t){return Object.setPrototypeOf?Object.setPrototypeOf(t,h):(t.__proto__=h,c(t,a,"GeneratorFunction")),t.prototype=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49879	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	560	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	1308	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:22 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000 Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD-8qOxBjABOgT87-jmQgQSPh61.yUZn8bf2%2ByZHgmlInR%2FZt8RwIQVCgJskoa5yc0xUvTA; Max-Age=31536000; Secure; SameSite=None Set-Cookie: sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD-8qOxBjABOgT87-jmQgQSPh61.yUZn8bf2%2ByZHgmlInR%2FZt8RwIQVCgJskoa5yc0xUvTA; Domain=srv.stackadapt.com; Max-Age=31536000; Secure; SameSite=None
2024-04-24 12:22:22 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49878	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:21 UTC	1235	OUT	GET /sa.css HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:22 UTC	222	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:22 GMT Content-Type: text/css Content-Length: 65 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2024-04-24 12:22:22 UTC	65	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 73 61 2d 75 69 64 3a 20 27 30 2d 63 63 66 62 32 32 61 32 2d 39 61 39 63 2d 35 63 66 31 2d 35 62 64 30 2d 36 32 37 61 38 30 61 64 37 38 39 32 27 3b 0a 7d Data Ascii: :root { --sa-uid: '0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892';}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49882	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	667	OUT	GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 145998 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 3777 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:22 GMT Etag: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X5DTY4ATV65SYP8RXDJ0 Connection: close
2024-04-24 12:22:22 UTC	764	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 64 65 66 65 72 72 65 64 2c 6c 65 61 66 50 72 6f 74 6f 74 79 70 65 73 2c 67 65 74 50 72 6f 74 6f 2c 69 6e 73 74 61 6c 6c 65 64 43 68 75 6e 6b 73 2c 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 63 68 75 6e 6b 4c 6f 61 64 69 6e 67 47 6c 6f 62 61 6c 2c 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 73 5f 5f 3d 7b 7d 2c 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 5f 63 61 63 68 65 5f 5f 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 6d 6f 64 75 6c 65 49 64 29 7b 76 61 72 20 63 61 63 68 65 64 4d 6f 64 75 6c 65 3d 5f 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 5f 63 61 63 68 65 5f 5f 5b 6d 6f 64 75 6c Data Ascii: !function(){"use strict";var deferred,leafPrototypes,getProto,installedChunks,webpackJsonpCallback,chunkLoadingGlobal,__webpack_modules__={},__webpack_module_cache__={};function __webpack_require__(moduleId){var cachedModule=__webpack_module_cache__[modul
2024-04-24 12:22:22 UTC	2372	IN	Data Raw: 69 5d 3d 64 65 66 65 72 72 65 64 5b 69 2d 31 5d 3b 64 65 66 65 72 72 65 64 5b 69 5d 3d 5b 63 68 75 6e 6b 49 64 73 2c 66 6e 2c 70 72 69 6f 72 69 74 79 5d 3b 72 65 74 75 72 6e 7d 66 6f 72 28 76 61 72 20 6e 6f 74 46 75 6c 66 69 6c 6c 65 64 3d 31 2f 30 2c 69 3d 30 3b 69 3c 64 65 66 65 72 72 65 64 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 66 6f 72 28 76 61 72 20 63 68 75 6e 6b 49 64 73 3d 64 65 66 65 72 72 65 64 5b 69 5d 5b 30 5d 2c 66 6e 3d 64 65 66 65 72 72 65 64 5b 69 5d 5b 31 5d 2c 70 72 69 6f 72 69 74 79 3d 64 65 66 65 72 72 65 64 5b 69 5d 5b 32 5d 2c 66 75 6c 66 69 6c 6c 65 64 3d 21 30 2c 6a 3d 30 3b 6a 3c 63 68 75 6e 6b 49 64 73 2e 6c 65 6e 67 74 68 3b 6a 2b 2b 29 6e 6f 74 46 75 6c 66 69 6c 6c 65 64 3e 3d 70 72 69 6f 72 69 74 79 26 26 4f 62 6a 65 63 74 2e Data Ascii: i]=deferred[i-1];deferred[i]=[chunkIds,fn,priority];return}for(var notFulfilled=1/0,i=0;i<deferred.length;i++){for(var chunkIds=deferred[i][0],fn=deferred[i][1],priority=deferred[i][2],fulfilled=!0,j=0;j<chunkIds.length;j++)notFulfilled>=priority&&Object.
2024-04-24 12:22:22 UTC	538	IN	Data Raw: 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6f 28 6d 6f 72 65 4d 6f 64 75 6c 65 73 2c 6d 6f 64 75 6c 65 49 64 29 26 26 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6d 5b 6d 6f 64 75 6c 65 49 64 5d 3d 6d 6f 72 65 4d 6f 64 75 6c 65 73 5b 6d 6f 64 75 6c 65 49 64 5d 29 3b 69 66 28 72 75 6e 74 69 6d 65 29 76 61 72 20 72 65 73 75 6c 74 3d 72 75 6e 74 69 6d 65 28 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7d 66 6f 72 28 70 61 72 65 6e 74 43 68 75 6e 6b 4c 6f 61 64 69 6e 67 46 75 6e 63 74 69 6f 6e 26 26 70 61 72 65 6e 74 43 68 75 6e 6b 4c 6f 61 64 69 6e 67 46 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 3b 69 3c 63 68 75 6e 6b 49 64 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 63 68 75 6e 6b 49 64 3d 63 68 75 6e 6b 49 64 73 5b 69 5d 2c 5f 5f 77 Data Ascii: ck_require__.o(moreModules,moduleId)&&(__webpack_require__.m[moduleId]=moreModules[moduleId]);if(runtime)var result=runtime(__webpack_require__)}for(parentChunkLoadingFunction&&parentChunkLoadingFunction(data);i<chunkIds.length;i++)chunkId=chunkIds[i],__w
2024-04-24 12:22:22 UTC	103	IN	Data Raw: 4c 6f 61 64 69 6e 67 47 6c 6f 62 61 6c 2e 70 75 73 68 3d 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2e 62 69 6e 64 28 6e 75 6c 6c 2c 63 68 75 6e 6b 4c 6f 61 64 69 6e 67 47 6c 6f 62 61 6c 2e 70 75 73 68 2e 62 69 6e 64 28 63 68 75 6e 6b 4c 6f 61 64 69 6e 67 47 6c 6f 62 61 6c 29 29 7d 28 29 3b Data Ascii: LoadingGlobal.push=webpackJsonpCallback.bind(null,chunkLoadingGlobal.push.bind(chunkLoadingGlobal))}();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49884	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	669	OUT	GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 2598 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 142036 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:22 GMT Etag: "ff808042b082f6ae8a6b808299655cad-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X5E2HV4WKR6XFMKEVBD1 Connection: close
2024-04-24 12:22:22 UTC	764	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(__unused_webpack_module,exports,__webpack_require__){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. *
2024-04-24 12:22:22 UTC	2372	IN	Data Raw: 70 66 75 6c 20 77 61 72 6e 69 6e 67 73 2e 22 7d 76 61 72 20 64 61 3d 6e 65 77 20 53 65 74 2c 65 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 68 61 28 61 2c 62 29 2c 68 61 28 61 2b 22 43 61 70 74 75 72 65 22 2c 62 29 7d 66 75 6e 63 74 69 6f 6e 20 68 61 28 61 2c 62 29 7b 66 6f 72 28 65 61 5b 61 5d 3d 62 2c 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 64 61 2e 61 64 64 28 62 5b 61 5d 29 7d 76 61 72 20 69 61 3d 21 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 7c 7c 76 6f 69 64 20 30 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 6a 61 3d 4f 62 6a 65 63 74 2e 70 Data Ascii: pful warnings."}var da=new Set,ea={};function fa(a,b){ha(a,b),ha(a+"Capture",b)}function ha(a,b){for(ea[a]=b,a=0;a<b.length;a++)da.add(b[a])}var ia=!("undefined"==typeof window\|\|void 0===window.document\|\|void 0===window.document.createElement),ja=Object.p
2024-04-24 12:22:22 UTC	538	IN	Data Raw: 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 3d 3d 62 7c 7c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 21 3d 3d 63 26 26 30 3d 3d 3d 63 2e 74 79 70 65 29 72 65 74 75 72 6e 21 31 3b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 62 29 7b 63 61 73 65 22 66 75 6e 63 74 69 6f 6e 22 3a 63 61 73 65 22 73 79 6d 62 6f 6c 22 3a 72 65 74 75 72 6e 21 30 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 69 66 28 64 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 63 29 72 65 74 75 72 6e 21 63 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3b 72 65 74 75 72 6e 22 64 61 74 61 2d 22 21 3d 3d 28 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 30 2c 35 29 29 26 26 22 61 72 69 61 2d 22 21 3d 3d 61 3b 64 65 66 61 75 6c 74 Data Ascii: ,c,d){if(null==b\|\|function(a,b,c,d){if(null!==c&&0===c.type)return!1;switch(typeof b){case"function":case"symbol":return!0;case"boolean":if(d)return!1;if(null!==c)return!c.acceptsBooleans;return"data-"!==(a=a.toLowerCase().slice(0,5))&&"aria-"!==a;default
2024-04-24 12:22:22 UTC	4744	IN	Data Raw: 6e 75 6c 6c 3d 3d 3d 63 3f 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 62 29 3a 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 62 2c 22 22 2b 63 29 29 29 3a 65 2e 6d 75 73 74 55 73 65 50 72 6f 70 65 72 74 79 3f 61 5b 65 2e 70 72 6f 70 65 72 74 79 4e 61 6d 65 5d 3d 6e 75 6c 6c 3d 3d 3d 63 3f 33 21 3d 3d 65 2e 74 79 70 65 26 26 22 22 3a 63 3a 28 62 3d 65 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 2c 64 3d 65 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 73 70 61 63 65 2c 6e 75 6c 6c 3d 3d 3d 63 3f 61 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 62 29 3a 28 63 3d 33 3d 3d 3d 28 65 3d 65 2e 74 79 70 65 29 7c 7c 34 3d 3d 3d 65 26 26 21 30 3d 3d 3d 63 3f 22 22 3a 22 22 2b 63 2c 64 3f 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 4e 53 28 64 2c 62 2c 63 29 Data Ascii: null===c?a.removeAttribute(b):a.setAttribute(b,""+c))):e.mustUseProperty?a[e.propertyName]=null===c?3!==e.type&&"":c:(b=e.attributeName,d=e.attributeNamespace,null===c?a.removeAttribute(b):(c=3===(e=e.type)\|\|4===e&&!0===c?"":""+c,d?a.setAttributeNS(d,b,c)
2024-04-24 12:22:22 UTC	5930	IN	Data Raw: 6e 63 74 69 6f 6e 20 57 61 28 61 29 7b 69 66 28 21 61 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 62 3d 61 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3b 69 66 28 21 62 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 63 3d 62 2e 67 65 74 56 61 6c 75 65 28 29 2c 64 3d 22 22 3b 72 65 74 75 72 6e 20 61 26 26 28 64 3d 54 61 28 61 29 3f 61 2e 63 68 65 63 6b 65 64 3f 22 74 72 75 65 22 3a 22 66 61 6c 73 65 22 3a 61 2e 76 61 6c 75 65 29 2c 28 61 3d 64 29 21 3d 3d 63 26 26 28 62 2e 73 65 74 56 61 6c 75 65 28 61 29 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 61 3d 61 7c 7c 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 3f 64 6f 63 75 6d 65 6e 74 3a 76 6f 69 64 20 30 29 29 29 72 65 Data Ascii: nction Wa(a){if(!a)return!1;var b=a._valueTracker;if(!b)return!0;var c=b.getValue(),d="";return a&&(d=Ta(a)?a.checked?"true":"false":a.value),(a=d)!==c&&(b.setValue(a),!0)}function Xa(a){if(void 0===(a=a\|\|("undefined"!=typeof document?document:void 0)))re
2024-04-24 12:22:22 UTC	7116	IN	Data Raw: 3d 5b 61 5d 3a 7a 62 3d 61 7d 66 75 6e 63 74 69 6f 6e 20 46 62 28 29 7b 69 66 28 7a 62 29 7b 76 61 72 20 61 3d 7a 62 2c 62 3d 41 62 3b 69 66 28 41 62 3d 7a 62 3d 6e 75 6c 6c 2c 42 62 28 61 29 2c 62 29 66 6f 72 28 61 3d 30 3b 61 3c 62 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 42 62 28 62 5b 61 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 48 62 28 29 7b 7d 76 61 72 20 49 62 3d 21 31 3b 66 75 6e 63 74 69 6f 6e 20 4a 62 28 61 2c 62 2c 63 29 7b 69 66 28 49 62 29 72 65 74 75 72 6e 20 61 28 62 2c 63 29 3b 49 62 3d 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 47 62 28 61 2c 62 2c 63 29 7d 66 69 6e 61 6c 6c 79 7b 49 62 3d 21 31 2c 28 6e 75 6c 6c 21 3d 3d 7a 62 7c 7c 6e 75 6c 6c 21 3d 3d 41 62 Data Ascii: =[a]:zb=a}function Fb(){if(zb){var a=zb,b=Ab;if(Ab=zb=null,Bb(a),b)for(a=0;a<b.length;a++)Bb(b[a])}}function Gb(a,b){return a(b)}function Hb(){}var Ib=!1;function Jb(a,b,c){if(Ib)return a(b,c);Ib=!0;try{return Gb(a,b,c)}finally{Ib=!1,(null!==zb\|\|null!==Ab
2024-04-24 12:22:22 UTC	8302	IN	Data Raw: 63 2c 64 2c 65 29 2c 21 30 3b 63 61 73 65 22 64 72 61 67 65 6e 74 65 72 22 3a 72 65 74 75 72 6e 20 4d 63 3d 54 63 28 4d 63 2c 61 2c 62 2c 63 2c 64 2c 65 29 2c 21 30 3b 63 61 73 65 22 6d 6f 75 73 65 6f 76 65 72 22 3a 72 65 74 75 72 6e 20 4e 63 3d 54 63 28 4e 63 2c 61 2c 62 2c 63 2c 64 2c 65 29 2c 21 30 3b 63 61 73 65 22 70 6f 69 6e 74 65 72 6f 76 65 72 22 3a 76 61 72 20 66 3d 65 2e 70 6f 69 6e 74 65 72 49 64 3b 72 65 74 75 72 6e 20 4f 63 2e 73 65 74 28 66 2c 54 63 28 4f 63 2e 67 65 74 28 66 29 7c 7c 6e 75 6c 6c 2c 61 2c 62 2c 63 2c 64 2c 65 29 29 2c 21 30 3b 63 61 73 65 22 67 6f 74 70 6f 69 6e 74 65 72 63 61 70 74 75 72 65 22 3a 72 65 74 75 72 6e 20 66 3d 65 2e 70 6f 69 6e 74 65 72 49 64 2c 50 63 2e 73 65 74 28 66 2c 54 63 28 50 63 2e 67 65 74 28 66 29 7c Data Ascii: c,d,e),!0;case"dragenter":return Mc=Tc(Mc,a,b,c,d,e),!0;case"mouseover":return Nc=Tc(Nc,a,b,c,d,e),!0;case"pointerover":var f=e.pointerId;return Oc.set(f,Tc(Oc.get(f)\|\|null,a,b,c,d,e)),!0;case"gotpointercapture":return f=e.pointerId,Pc.set(f,Tc(Pc.get(f)\|
2024-04-24 12:22:22 UTC	6178	IN	Data Raw: 3b 66 6f 72 28 61 3d 30 3b 63 3b 29 7b 69 66 28 33 3d 3d 3d 63 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 64 3d 61 2b 63 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 2c 61 3c 3d 62 26 26 64 3e 3d 62 29 72 65 74 75 72 6e 7b 6e 6f 64 65 3a 63 2c 6f 66 66 73 65 74 3a 62 2d 61 7d 3b 61 3d 64 7d 61 3a 7b 66 6f 72 28 3b 63 3b 29 7b 69 66 28 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 7b 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 3b 62 72 65 61 6b 20 61 7d 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 63 3d 76 6f 69 64 20 30 7d 63 3d 4a 65 28 63 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 77 69 6e 64 6f 77 2c 62 3d 58 61 28 29 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 61 2e 48 54 4d 4c 49 46 72 61 6d 65 45 6c 65 6d Data Ascii: ;for(a=0;c;){if(3===c.nodeType){if(d=a+c.textContent.length,a<=b&&d>=b)return{node:c,offset:b-a};a=d}a:{for(;c;){if(c.nextSibling){c=c.nextSibling;break a}c=c.parentNode}c=void 0}c=Je(c)}}function Me(){for(var a=window,b=Xa();b instanceof a.HTMLIFrameElem
2024-04-24 12:22:22 UTC	10674	IN	Data Raw: 22 62 6c 75 72 22 2c 6b 3d 46 64 3b 62 72 65 61 6b 3b 63 61 73 65 22 62 65 66 6f 72 65 62 6c 75 72 22 3a 63 61 73 65 22 61 66 74 65 72 62 6c 75 72 22 3a 6b 3d 46 64 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6c 69 63 6b 22 3a 69 66 28 32 3d 3d 3d 63 2e 62 75 74 74 6f 6e 29 62 72 65 61 6b 20 61 3b 63 61 73 65 22 61 75 78 63 6c 69 63 6b 22 3a 63 61 73 65 22 64 62 6c 63 6c 69 63 6b 22 3a 63 61 73 65 22 6d 6f 75 73 65 64 6f 77 6e 22 3a 63 61 73 65 22 6d 6f 75 73 65 6d 6f 76 65 22 3a 63 61 73 65 22 6d 6f 75 73 65 75 70 22 3a 63 61 73 65 22 6d 6f 75 73 65 6f 75 74 22 3a 63 61 73 65 22 6d 6f 75 73 65 6f 76 65 72 22 3a 63 61 73 65 22 63 6f 6e 74 65 78 74 6d 65 6e 75 22 3a 6b 3d 42 64 3b 62 72 65 61 6b 3b 63 61 73 65 22 64 72 61 67 22 3a 63 61 73 65 22 64 72 61 67 65 Data Ascii: "blur",k=Fd;break;case"beforeblur":case"afterblur":k=Fd;break;case"click":if(2===c.button)break a;case"auxclick":case"dblclick":case"mousedown":case"mousemove":case"mouseup":case"mouseout":case"mouseover":case"contextmenu":k=Bd;break;case"drag":case"drage
2024-04-24 12:22:22 UTC	11860	IN	Data Raw: 68 79 64 72 61 74 65 64 3a 62 2c 74 72 65 65 43 6f 6e 74 65 78 74 3a 63 2c 72 65 74 72 79 4c 61 6e 65 3a 31 30 37 33 37 34 31 38 32 34 7d 2c 28 63 3d 42 67 28 31 38 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 29 29 2e 73 74 61 74 65 4e 6f 64 65 3d 62 2c 63 2e 72 65 74 75 72 6e 3d 61 2c 61 2e 63 68 69 6c 64 3d 63 2c 78 67 3d 61 2c 79 67 3d 6e 75 6c 6c 2c 21 30 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 67 28 61 29 7b 72 65 74 75 72 6e 20 30 21 3d 28 31 26 61 2e 6d 6f 64 65 29 26 26 30 3d 3d 28 31 32 38 26 61 2e 66 6c 61 67 73 29 7d 66 75 6e 63 74 69 6f 6e 20 45 67 28 61 29 7b 69 66 28 49 29 7b 76 61 72 20 62 3d 79 67 3b 69 66 28 62 29 7b 76 61 72 20 63 3d 62 3b 69 66 28 21 43 67 28 61 2c 62 29 29 7b 69 66 28 44 67 28 Data Ascii: hydrated:b,treeContext:c,retryLane:1073741824},(c=Bg(18,null,null,0)).stateNode=b,c.return=a,a.child=c,xg=a,yg=null,!0);default:return!1}}function Dg(a){return 0!=(1&a.mode)&&0==(128&a.flags)}function Eg(a){if(I){var b=yg;if(b){var c=b;if(!Cg(a,b)){if(Dg(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49883	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	664	OUT	GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 70702 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 124492 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:22 GMT Etag: "02849653078c1b2461e1151d048ddd7d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X5E4QS9YZ8FFGZBHANAH Connection: close
2024-04-24 12:22:22 UTC	763	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 39 33 32 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 65 78 70 6f 72 74 73 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 61 73 79 6e 63 47 65 6e 65 72 61 74 6f 72 53 74 65 70 28 67 65 6e 2c 72 65 73 6f 6c 76 65 2c 72 65 6a 65 63 74 2c 5f 6e 65 78 74 2c 5f 74 68 72 6f 77 2c 6b 65 79 2c 61 72 67 29 7b 74 72 79 7b 76 61 72 20 69 6e 66 6f 3d 67 65 6e 5b 6b 65 79 5d 28 61 72 67 29 2c 76 61 6c 75 65 3d 69 6e 66 6f 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 65 72 72 6f 72 29 7b 72 65 6a 65 63 74 28 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{932:function(__unused_webpack_module,exports){"use strict";function asyncGeneratorStep(gen,resolve,reject,_next,_throw,key,arg){try{var info=gen[key](arg),value=info.value}catch(error){reject(
2024-04-24 12:22:22 UTC	2372	IN	Data Raw: 64 73 5f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 61 72 67 65 74 29 7b 66 6f 72 28 76 61 72 20 69 3d 31 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 73 6f 75 72 63 65 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 73 6f 75 72 63 65 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 6f 75 72 63 65 2c 6b 65 79 29 26 26 28 74 61 72 67 65 74 5b 6b 65 79 5d 3d 73 6f 75 72 63 65 5b 6b 65 79 5d 29 7d 72 65 74 75 72 6e 20 74 61 72 67 65 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 65 78 70 6f 72 74 73 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: ds_=Object.assign\|\|function(target){for(var i=1;i<arguments.length;i++){var source=arguments[i];for(var key in source)Object.prototype.hasOwnProperty.call(source,key)&&(target[key]=source[key])}return target}).apply(this,arguments)}exports.Z=function(){re
2024-04-24 12:22:22 UTC	538	IN	Data Raw: 66 20 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 74 2c 74 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 7c 7c 50 72 6f 6d 69 73 65 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 72 2e 72 65 73 6f 6c 76 65 28 74 28 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 72 2e 72 65 73 6f 6c 76 65 28 74 28 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 6f 7d 29 7d 29 7d 29 2c 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 7c 7c 28 4f 62 6a 65 63 74 2e 66 72 6f 6d 45 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 Data Ascii: f t)return this.then(t,t);var r=this.constructor\|\|Promise;return this.then(function(o){return r.resolve(t()).then(function(){return o})},function(o){return r.resolve(t()).then(function(){throw o})})}),Object.fromEntries\|\|(Object.fromEntries=function(t){re
2024-04-24 12:22:22 UTC	4744	IN	Data Raw: 67 53 6c 61 73 68 28 5f 61 64 64 50 61 74 68 50 72 65 66 69 78 2e 61 64 64 50 61 74 68 50 72 65 66 69 78 28 70 61 74 68 2c 22 22 29 29 7d 3b 76 61 72 20 5f 61 64 64 50 61 74 68 50 72 65 66 69 78 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 31 33 35 29 2c 5f 6e 6f 72 6d 61 6c 69 7a 65 54 72 61 69 6c 69 6e 67 53 6c 61 73 68 3d 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 32 37 30 30 29 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 65 78 70 6f 72 74 73 2e Data Ascii: gSlash(_addPathPrefix.addPathPrefix(path,""))};var _addPathPrefix=__webpack_require__(4135),_normalizeTrailingSlash=__webpack_require__(2700);("function"==typeof exports.default\|\|"object"==typeof exports.default&&null!==exports.default)&&void 0===exports.
2024-04-24 12:22:22 UTC	5930	IN	Data Raw: 2c 63 6c 6f 6e 65 54 61 67 2e 6e 6f 6e 63 65 3d 6e 6f 6e 63 65 2c 6e 6f 6e 63 65 3d 3d 3d 6f 6c 64 54 61 67 2e 6e 6f 6e 63 65 26 26 6f 6c 64 54 61 67 2e 69 73 45 71 75 61 6c 4e 6f 64 65 28 63 6c 6f 6e 65 54 61 67 29 7d 7d 72 65 74 75 72 6e 20 6f 6c 64 54 61 67 2e 69 73 45 71 75 61 6c 4e 6f 64 65 28 6e 65 77 54 61 67 29 7d 65 78 70 6f 72 74 73 2e 44 4f 4d 41 74 74 72 69 62 75 74 65 4e 61 6d 65 73 3d 44 4f 4d 41 74 74 72 69 62 75 74 65 4e 61 6d 65 73 2c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d Data Ascii: ,cloneTag.nonce=nonce,nonce===oldTag.nonce&&oldTag.isEqualNode(cloneTag)}}return oldTag.isEqualNode(newTag)}exports.DOMAttributeNames=DOMAttributeNames,("function"==typeof exports.default\|\|"object"==typeof exports.default&&null!==exports.default)&&void 0=
2024-04-24 12:22:22 UTC	7116	IN	Data Raw: 64 65 72 45 72 72 6f 72 28 72 65 6e 64 65 72 45 72 72 6f 72 50 72 6f 70 73 29 7b 6c 65 74 7b 41 70 70 2c 65 72 72 7d 3d 72 65 6e 64 65 72 45 72 72 6f 72 50 72 6f 70 73 3b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 65 72 72 29 2c 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 41 20 63 6c 69 65 6e 74 2d 73 69 64 65 20 65 78 63 65 70 74 69 6f 6e 20 68 61 73 20 6f 63 63 75 72 72 65 64 2c 20 73 65 65 20 68 65 72 65 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 3a 20 68 74 74 70 73 3a 2f 2f 6e 65 78 74 6a 73 2e 6f 72 67 2f 64 6f 63 73 2f 6d 65 73 73 61 67 65 73 2f 63 6c 69 65 6e 74 2d 73 69 64 65 2d 65 78 63 65 70 74 69 6f 6e 2d 6f 63 63 75 72 72 65 64 22 29 2c 70 61 67 65 4c 6f 61 64 65 72 2e 6c 6f 61 64 50 61 67 65 28 22 2f 5f 65 72 72 6f 72 22 Data Ascii: derError(renderErrorProps){let{App,err}=renderErrorProps;return console.error(err),console.error("A client-side exception has occurred, see here for more info: https://nextjs.org/docs/messages/client-side-exception-occurred"),pageLoader.loadPage("/_error"
2024-04-24 12:22:22 UTC	8302	IN	Data Raw: 6e 74 72 79 70 6f 69 6e 74 2e 65 72 72 6f 72 3b 43 61 63 68 65 64 43 6f 6d 70 6f 6e 65 6e 74 3d 70 61 67 65 45 6e 74 72 79 70 6f 69 6e 74 2e 63 6f 6d 70 6f 6e 65 6e 74 7d 63 61 74 63 68 28 65 72 72 6f 72 31 29 7b 69 6e 69 74 69 61 6c 45 72 72 3d 5f 69 73 45 72 72 6f 72 2e 67 65 74 50 72 6f 70 65 72 45 72 72 6f 72 28 65 72 72 6f 72 31 29 7d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 52 45 4c 4f 41 44 52 45 41 44 59 26 26 28 79 69 65 6c 64 20 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 52 45 4c 4f 41 44 52 45 41 44 59 28 69 6e 69 74 69 61 6c 44 61 74 61 2e 64 79 6e 61 6d 69 63 49 64 73 29 29 2c 65 78 70 6f 72 74 73 2e 72 6f 75 74 65 72 3d 72 6f 75 74 65 72 3d 5f 72 6f 75 74 65 72 2e 63 72 65 61 74 65 52 6f 75 74 65 72 28 69 6e 69 74 69 61 6c 44 61 74 61 Data Ascii: ntrypoint.error;CachedComponent=pageEntrypoint.component}catch(error1){initialErr=_isError.getProperError(error1)}window.__NEXT_PRELOADREADY&&(yield window.__NEXT_PRELOADREADY(initialData.dynamicIds)),exports.router=router=_router.createRouter(initialData
2024-04-24 12:22:22 UTC	6178	IN	Data Raw: 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 26 26 73 65 6c 66 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2e 62 69 6e 64 28 77 69 6e 64 6f 77 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 69 64 29 7b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 69 64 29 7d 3b 65 78 70 6f 72 74 73 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 3d 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c Data Ascii: lIdleCallback="undefined"!=typeof self&&self.cancelIdleCallback&&self.cancelIdleCallback.bind(window)\|\|function(id){return clearTimeout(id)};exports.cancelIdleCallback=cancelIdleCallback,("function"==typeof exports.default\|\|"object"==typeof exports.defaul
2024-04-24 12:22:22 UTC	10674	IN	Data Raw: 7b 6c 65 74 20 63 61 6e 63 65 6c 6c 65 64 3d 21 31 3b 70 2e 74 68 65 6e 28 72 3d 3e 7b 63 61 6e 63 65 6c 6c 65 64 3d 21 30 2c 72 65 73 6f 6c 76 65 28 72 29 7d 29 2e 63 61 74 63 68 28 72 65 6a 65 63 74 29 2c 5f 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 28 29 3d 3e 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 7b 63 61 6e 63 65 6c 6c 65 64 7c 7c 72 65 6a 65 63 74 28 65 72 72 29 7d 2c 6d 73 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 43 6c 69 65 6e 74 42 75 69 6c 64 4d 61 6e 69 66 65 73 74 28 29 7b 69 66 28 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 29 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 Data Ascii: {let cancelled=!1;p.then(r=>{cancelled=!0,resolve(r)}).catch(reject),_requestIdleCallback.requestIdleCallback(()=>setTimeout(()=>{cancelled\|\|reject(err)},ms))})}function getClientBuildManifest(){if(self.__BUILD_MANIFEST)return Promise.resolve(self.__BUILD
2024-04-24 12:22:22 UTC	11860	IN	Data Raw: 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 78 70 6f 72 74 73 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 78 70 6f 72 74 73 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 43 6f 6d 70 6f 73 65 64 43 6f 6d 70 6f 6e 65 6e 74 29 7b 66 75 6e 63 74 69 6f 6e 20 57 69 74 68 52 6f 75 74 65 72 57 72 61 70 70 65 72 28 70 72 6f 70 73 29 7b 72 65 74 75 72 6e 20 5f 72 65 61 63 74 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 6f 6d 70 6f 73 65 64 43 6f 6d 70 6f 6e 65 6e 74 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 72 6f 75 74 65 72 3a 5f 72 6f 75 74 65 72 2e 75 73 65 52 6f 75 74 65 72 28 29 7d 2c 70 72 6f 70 73 29 29 7d 72 65 74 75 72 6e 20 57 69 74 68 52 6f 75 74 65 72 57 Data Ascii: bject.defineProperty(exports,"__esModule",{value:!0}),exports.default=function(ComposedComponent){function WithRouterWrapper(props){return _react.default.createElement(ComposedComponent,Object.assign({router:_router.useRouter()},props))}return WithRouterW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49880	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	670	OUT	GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 61258 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 509 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:22 GMT Etag: "240735d2acf59b5018ec9ef6c3c99d54-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X5E45KJCCPKJQPEW90PQ Connection: close
2024-04-24 12:22:22 UTC	509	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 35 39 37 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 34 32 39 37 29 7d 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return __webpack_require__(4297)}])}},functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49885	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	663	OUT	GET /_next/static/chunks/610-2bd6294a230ecff5.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 29171 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:22 GMT Etag: "0df172718be759e155ef4ac9edb2dd12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X5E33NP9VEG695V10NNB Connection: close
2024-04-24 12:22:22 UTC	763	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 30 5d 2c 7b 34 38 31 31 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 64 28 5f 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 5f 5f 2c 7b 48 59 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 46 72 61 67 6d 65 6e 74 7d 2c 74 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6a 73 78 7d 2c Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[610],{4811:function(__unused_webpack_module,__webpack_exports__,__webpack_require__){"use strict";__webpack_require__.d(__webpack_exports__,{HY:function(){return Fragment},tZ:function(){return jsx},
2024-04-24 12:22:22 UTC	2372	IN	Data Raw: 3d 3d 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 79 7c 7c 6f 70 74 69 6f 6e 73 2e 73 70 65 65 64 79 2c 74 68 69 73 2e 74 61 67 73 3d 5b 5d 2c 74 68 69 73 2e 63 74 72 3d 30 2c 74 68 69 73 2e 6e 6f 6e 63 65 3d 6f 70 74 69 6f 6e 73 2e 6e 6f 6e 63 65 2c 74 68 69 73 2e 6b 65 79 3d 6f 70 74 69 6f 6e 73 2e 6b 65 79 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 6f 70 74 69 6f 6e 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 74 68 69 73 2e 70 72 65 70 65 6e 64 3d 6f 70 74 69 6f 6e 73 2e 70 72 65 70 65 6e 64 2c 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 3d 6f 70 74 69 6f 6e 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 2c 74 68 69 73 2e 62 65 66 6f 72 65 3d 6e 75 6c 6c 7d 76 61 72 20 5f 70 72 6f 74 6f 3d 53 74 79 6c 65 53 68 65 65 74 2e 70 72 6f 74 6f 74 79 70 Data Ascii: ==options.speedy\|\|options.speedy,this.tags=[],this.ctr=0,this.nonce=options.nonce,this.key=options.key,this.container=options.container,this.prepend=options.prepend,this.insertionPoint=options.insertionPoint,this.before=null}var _proto=StyleSheet.prototyp
2024-04-24 12:22:22 UTC	538	IN	Data Raw: 3a 63 61 73 65 20 31 32 36 3a 63 61 73 65 20 35 39 3a 63 61 73 65 20 31 32 33 3a 63 61 73 65 20 31 32 35 3a 72 65 74 75 72 6e 20 34 3b 63 61 73 65 20 35 38 3a 72 65 74 75 72 6e 20 33 3b 63 61 73 65 20 33 34 3a 63 61 73 65 20 33 39 3a 63 61 73 65 20 34 30 3a 63 61 73 65 20 39 31 3a 72 65 74 75 72 6e 20 32 3b 63 61 73 65 20 34 31 3a 63 61 73 65 20 39 33 3a 72 65 74 75 72 6e 20 31 7d 72 65 74 75 72 6e 20 30 7d 66 75 6e 63 74 69 6f 6e 20 61 6c 6c 6f 63 28 76 61 6c 75 65 29 7b 72 65 74 75 72 6e 20 6c 69 6e 65 3d 63 6f 6c 75 6d 6e 3d 31 2c 54 6f 6b 65 6e 69 7a 65 72 5f 6c 65 6e 67 74 68 3d 55 74 69 6c 69 74 79 5f 73 74 72 6c 65 6e 28 63 68 61 72 61 63 74 65 72 73 3d 76 61 6c 75 65 29 2c 70 6f 73 69 74 69 6f 6e 3d 30 2c 5b 5d 7d 66 75 6e 63 74 69 6f 6e 20 64 65 Data Ascii: :case 126:case 59:case 123:case 125:return 4;case 58:return 3;case 34:case 39:case 40:case 91:return 2;case 41:case 93:return 1}return 0}function alloc(value){return line=column=1,Tokenizer_length=Utility_strlen(characters=value),position=0,[]}function de
2024-04-24 12:22:22 UTC	4744	IN	Data Raw: 3f 74 79 70 65 2b 32 3a 34 30 3d 3d 3d 74 79 70 65 3f 74 79 70 65 2b 31 3a 74 79 70 65 29 2c 55 74 69 6c 69 74 79 5f 73 75 62 73 74 72 28 63 68 61 72 61 63 74 65 72 73 2c 62 65 67 69 6e 2c 65 6e 64 29 29 2e 74 72 69 6d 28 29 7d 76 61 72 20 45 6e 75 6d 5f 4d 53 3d 22 2d 6d 73 2d 22 2c 45 6e 75 6d 5f 4d 4f 5a 3d 22 2d 6d 6f 7a 2d 22 2c 45 6e 75 6d 5f 57 45 42 4b 49 54 3d 22 2d 77 65 62 6b 69 74 2d 22 2c 43 4f 4d 4d 45 4e 54 3d 22 63 6f 6d 6d 22 2c 45 6e 75 6d 5f 52 55 4c 45 53 45 54 3d 22 72 75 6c 65 22 2c 45 6e 75 6d 5f 44 45 43 4c 41 52 41 54 49 4f 4e 3d 22 64 65 63 6c 22 2c 45 6e 75 6d 5f 4b 45 59 46 52 41 4d 45 53 3d 22 40 6b 65 79 66 72 61 6d 65 73 22 3b 66 75 6e 63 74 69 6f 6e 20 53 65 72 69 61 6c 69 7a 65 72 5f 73 65 72 69 61 6c 69 7a 65 28 63 68 69 Data Ascii: ?type+2:40===type?type+1:type),Utility_substr(characters,begin,end)).trim()}var Enum_MS="-ms-",Enum_MOZ="-moz-",Enum_WEBKIT="-webkit-",COMMENT="comm",Enum_RULESET="rule",Enum_DECLARATION="decl",Enum_KEYFRAMES="@keyframes";function Serializer_serialize(chi
2024-04-24 12:22:22 UTC	5930	IN	Data Raw: 35 35 34 3a 72 65 74 75 72 6e 20 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 76 61 6c 75 65 2c 2f 28 5b 5e 2d 5d 29 28 74 72 61 6e 73 66 6f 72 6d 29 2f 67 2c 22 24 31 22 2b 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 22 24 32 22 29 2b 76 61 6c 75 65 3b 63 61 73 65 20 36 31 38 37 3a 72 65 74 75 72 6e 20 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 55 74 69 6c 69 74 79 5f 72 65 70 6c 61 63 65 28 76 61 6c 75 65 2c 2f 28 7a 6f 6f 6d 2d 7c 67 72 61 62 29 2f 2c 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 22 24 31 22 29 2c 2f 28 69 6d 61 67 65 2d 73 65 74 29 2f 2c 45 6e 75 6d 5f 57 45 42 4b 49 54 2b 22 24 31 22 29 2c 76 61 6c 75 65 2c 22 22 29 2b 76 61 6c 75 65 3b 63 61 73 65 20 35 34 39 Data Ascii: 554:return Enum_WEBKIT+Utility_replace(value,/([^-])(transform)/g,"$1"+Enum_WEBKIT+"$2")+value;case 6187:return Utility_replace(Utility_replace(Utility_replace(value,/(zoom-\|grab)/,Enum_WEBKIT+"$1"),/(image-set)/,Enum_WEBKIT+"$1"),value,"")+value;case 549
2024-04-24 12:22:22 UTC	1323	IN	Data Raw: 69 6f 6e 2e 73 74 79 6c 65 73 2b 22 3b 22 7d 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 65 72 67 65 64 50 72 6f 70 73 2c 72 65 67 69 73 74 65 72 65 64 2c 6f 62 6a 29 7b 76 61 72 20 73 74 72 69 6e 67 3d 22 22 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6f 62 6a 29 29 66 6f 72 28 76 61 72 20 69 3d 30 3b 69 3c 6f 62 6a 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 73 74 72 69 6e 67 2b 3d 68 61 6e 64 6c 65 49 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 28 6d 65 72 67 65 64 50 72 6f 70 73 2c 72 65 67 69 73 74 65 72 65 64 2c 6f 62 6a 5b 69 5d 29 2b 22 3b 22 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 5f 6b 65 79 20 69 6e 20 6f 62 6a 29 7b 76 61 72 20 76 61 6c 75 65 3d 6f 62 6a 5b 5f 6b 65 79 5d 3b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 76 61 Data Ascii: ion.styles+";"}return function(mergedProps,registered,obj){var string="";if(Array.isArray(obj))for(var i=0;i<obj.length;i++)string+=handleInterpolation(mergedProps,registered,obj[i])+";";else for(var _key in obj){var value=obj[_key];if("object"!=typeof va
2024-04-24 12:22:22 UTC	4096	IN	Data Raw: 69 7a 65 53 74 79 6c 65 73 3d 66 75 6e 63 74 69 6f 6e 28 61 72 67 73 2c 72 65 67 69 73 74 65 72 65 64 2c 6d 65 72 67 65 64 50 72 6f 70 73 29 7b 69 66 28 31 3d 3d 3d 61 72 67 73 2e 6c 65 6e 67 74 68 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 72 67 73 5b 30 5d 26 26 6e 75 6c 6c 21 3d 3d 61 72 67 73 5b 30 5d 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 73 5b 30 5d 2e 73 74 79 6c 65 73 29 72 65 74 75 72 6e 20 61 72 67 73 5b 30 5d 3b 76 61 72 20 6d 61 74 63 68 2c 73 74 72 69 6e 67 4d 6f 64 65 3d 21 30 2c 73 74 79 6c 65 73 3d 22 22 3b 63 75 72 73 6f 72 3d 76 6f 69 64 20 30 3b 76 61 72 20 73 74 72 69 6e 67 73 3d 61 72 67 73 5b 30 5d 3b 6e 75 6c 6c 3d 3d 73 74 72 69 6e 67 73 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 74 72 69 6e 67 73 2e 72 61 77 3f 28 73 Data Ascii: izeStyles=function(args,registered,mergedProps){if(1===args.length&&"object"==typeof args[0]&&null!==args[0]&&void 0!==args[0].styles)return args[0];var match,stringMode=!0,styles="";cursor=void 0;var strings=args[0];null==strings\|\|void 0===strings.raw?(s
2024-04-24 12:22:22 UTC	9405	IN	Data Raw: 35 39 3a 63 68 61 72 61 63 74 65 72 73 31 2b 3d 22 3b 22 3b 64 65 66 61 75 6c 74 3a 69 66 28 55 74 69 6c 69 74 79 5f 61 70 70 65 6e 64 28 72 65 66 65 72 65 6e 63 65 3d 72 75 6c 65 73 65 74 28 63 68 61 72 61 63 74 65 72 73 31 2c 72 6f 6f 74 2c 70 61 72 65 6e 74 2c 69 6e 64 65 78 2c 6f 66 66 73 65 74 2c 72 75 6c 65 73 2c 70 6f 69 6e 74 73 2c 74 79 70 65 2c 70 72 6f 70 73 3d 5b 5d 2c 63 68 69 6c 64 72 65 6e 3d 5b 5d 2c 6c 65 6e 67 74 68 29 2c 72 75 6c 65 73 65 74 73 29 2c 31 32 33 3d 3d 3d 63 68 61 72 61 63 74 65 72 31 29 7b 69 66 28 30 3d 3d 3d 6f 66 66 73 65 74 29 70 61 72 73 65 28 63 68 61 72 61 63 74 65 72 73 31 2c 72 6f 6f 74 2c 72 65 66 65 72 65 6e 63 65 2c 72 65 66 65 72 65 6e 63 65 2c 70 72 6f 70 73 2c 72 75 6c 65 73 65 74 73 2c 6c 65 6e 67 74 68 2c Data Ascii: 59:characters1+=";";default:if(Utility_append(reference=ruleset(characters1,root,parent,index,offset,rules,points,type,props=[],children=[],length),rulesets),123===character1){if(0===offset)parse(characters1,root,reference,reference,props,rulesets,length,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49881	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	671	OUT	GET /_next/static/chunks/pages/drift-8f9623a7a70f033a.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	423	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 19693 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:22 GMT Etag: "9bd292c8c30a5092cc5ecec26aefd5dc-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X5E89ZD1MH66EB5X7FS2 Connection: close
2024-04-24 12:22:22 UTC	763	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 34 5d 2c 7b 35 32 33 37 3a 66 75 6e 63 74 69 6f 6e 28 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 6d 6f 64 75 6c 65 2c 5f 5f 75 6e 75 73 65 64 5f 77 65 62 70 61 63 6b 5f 65 78 70 6f 72 74 73 2c 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 64 72 69 66 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 5f 77 65 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 28 35 39 33 38 29 7d 5d 29 7d 2c 35 39 33 38 3a 66 75 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[194],{5237:function(__unused_webpack_module,__unused_webpack_exports,__webpack_require__){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/drift",function(){return __webpack_require__(5938)}])},5938:fu
2024-04-24 12:22:22 UTC	2372	IN	Data Raw: 62 70 61 63 6b 5f 72 65 71 75 69 72 65 5f 5f 2e 6e 28 6e 65 78 74 5f 73 63 72 69 70 74 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 31 5f 5f 29 3b 6c 65 74 20 44 72 69 66 74 53 61 6e 64 62 6f 78 49 66 72 61 6d 65 3d 28 29 3d 3e 28 30 2c 5f 65 6d 6f 74 69 6f 6e 5f 72 65 61 63 74 5f 6a 73 78 5f 72 75 6e 74 69 6d 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 2e 42 58 29 28 5f 65 6d 6f 74 69 6f 6e 5f 72 65 61 63 74 5f 6a 73 78 5f 72 75 6e 74 69 6d 65 5f 5f 57 45 42 50 41 43 4b 5f 49 4d 50 4f 52 54 45 44 5f 4d 4f 44 55 4c 45 5f 32 5f 5f 2e 48 59 2c 7b 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 5f 65 6d 6f 74 69 6f 6e 5f 72 65 61 63 74 5f 6a 73 78 5f 72 75 6e 74 69 6d 65 5f 5f 57 45 42 50 Data Ascii: bpack_require__.n(next_script__WEBPACK_IMPORTED_MODULE_1__);let DriftSandboxIframe=()=>(0,_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_2__.BX)(_emotion_react_jsx_runtime__WEBPACK_IMPORTED_MODULE_2__.HY,{children:[(0,_emotion_react_jsx_runtime__WEBP
2024-04-24 12:22:22 UTC	538	IN	Data Raw: 63 6f 6d 2f 73 2f 63 6f 6e 74 61 63 74 53 75 70 70 6f 72 74 3f 6c 61 6e 67 75 61 67 65 3d 69 74 26 6c 61 6e 67 53 65 74 3d 31 26 74 72 61 6e 73 66 65 72 3d 64 63 22 2c 5c 6e 20 20 20 20 20 20 22 74 72 61 6e 73 66 65 72 69 72 20 61 20 61 73 69 73 74 65 6e 63 69 61 22 3a 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 73 2f 3f 6c 61 6e 67 75 61 67 65 3d 65 73 26 6c 61 6e 67 53 65 74 3d 31 26 74 72 61 6e 73 66 65 72 3d 64 63 22 5c 6e 20 20 20 20 7d 2c 5c 6e 20 20 20 20 79 65 73 41 6e 73 77 65 72 4c 6f 63 61 6c 65 4f 62 6a 65 63 74 20 3d 20 7b 5c 6e 20 20 20 20 20 20 22 79 65 73 22 3a 31 2c 5c 6e 20 20 20 20 20 20 22 6f 75 69 22 3a 31 2c 5c 6e 20 20 20 20 20 20 22 e3 81 af e3 81 84 22 3a 31 2c 5c 6e 20 20 20 20 20 20 Data Ascii: com/s/contactSupport?language=it&langSet=1&transfer=dc",\n "transferir a asistencia":"https://support.docusign.com/s/?language=es&langSet=1&transfer=dc"\n },\n yesAnswerLocaleObject = {\n "yes":1,\n "oui":1,\n "":1,\n
2024-04-24 12:22:22 UTC	4744	IN	Data Raw: 20 20 20 77 69 6c 6c 20 68 61 76 65 20 74 6f 20 63 68 61 6e 67 65 20 74 68 69 73 20 73 6f 20 69 74 20 67 65 74 73 20 70 61 73 73 65 64 20 74 68 65 20 6c 6f 63 61 6c 65 20 74 68 61 74 20 74 68 65 20 70 65 72 73 6f 6e 20 69 73 20 65 78 65 63 75 74 69 6e 67 20 69 6e 5c 6e 20 20 2a 2f 5c 6e 20 20 72 65 74 75 72 6e 20 74 72 61 6e 73 66 65 72 54 6f 53 75 70 70 6f 72 74 4c 6f 63 61 6c 65 4f 62 6a 65 63 74 5b 73 61 6e 69 74 69 7a 65 64 54 65 78 74 5d 20 7c 7c 20 22 22 3b 5c 6e 7d 5c 6e 5c 6e 66 75 6e 63 74 69 6f 6e 20 64 72 69 66 74 48 61 73 43 6f 6e 73 65 6e 74 56 69 61 43 6c 61 73 73 28 29 7b 5c 6e 20 20 2f 2a 5c 6e 20 20 20 20 73 6f 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 65 78 69 73 74 73 20 63 61 75 73 65 20 77 65 20 64 6f 6e 5c 27 74 20 68 61 76 65 20 Data Ascii: will have to change this so it gets passed the locale that the person is executing in\n /\n return transferToSupportLocaleObject[sanitizedText] \|\| "";\n}\n\nfunction driftHasConsentViaClass(){\n /\n so this function exists cause we don\'t have
2024-04-24 12:22:22 UTC	5930	IN	Data Raw: 2e 6f 70 65 6e 43 68 61 74 28 29 3b 5c 6e 20 20 20 20 20 20 20 20 7d 2c 20 33 30 30 29 3b 5c 6e 20 20 20 20 20 20 7d 5c 6e 20 20 20 20 7d 5c 6e 5c 6e 20 20 20 20 2f 2a 5c 6e 20 20 20 20 20 20 77 65 20 61 6c 77 61 79 73 20 6e 65 65 64 20 74 6f 20 62 65 20 75 70 20 74 6f 20 64 61 74 65 20 69 6e 20 74 65 72 6d 73 20 6f 66 20 6b 6e 6f 77 69 6e 67 20 77 68 61 74 20 74 68 65 20 6c 61 73 74 20 69 6e 74 65 72 61 63 74 69 6f 6e 20 69 64 5c 6e 20 20 20 20 20 20 63 61 75 73 65 20 77 65 20 64 6f 6e 74 20 77 61 6e 74 20 74 6f 20 67 65 74 20 6f 75 74 20 6f 66 20 73 79 6e 63 20 61 74 20 61 6e 79 74 69 6d 65 20 74 68 61 74 20 77 65 20 61 72 65 20 67 69 76 65 6e 20 6f 6e 65 2e 2e 2e 5c 6e 20 20 20 20 2a 2f 5c 6e 20 20 20 20 69 66 28 5c 6e 20 20 20 20 20 20 28 5c 6e 20 20 Data Ascii: .openChat();\n }, 300);\n }\n }\n\n /\n we always need to be up to date in terms of knowing what the last interaction id\n cause we dont want to get out of sync at anytime that we are given one...\n /\n if(\n (\n
2024-04-24 12:22:22 UTC	5346	IN	Data Raw: 52 4c 20 73 65 61 72 63 68 20 70 61 72 61 6d 20 76 61 6c 75 65 2e 2e 2e 20 5c 6e 20 20 20 20 20 20 20 20 20 20 4e 4f 54 45 3a 20 72 65 61 6c 69 7a 65 20 74 68 61 74 20 77 69 74 68 69 6e 20 47 54 4d 20 77 65 20 68 61 76 65 20 61 6c 72 65 61 64 79 20 73 63 72 75 62 62 65 64 28 76 69 61 20 72 65 67 65 78 29 20 66 6f 72 20 6e 75 6d 62 65 72 73 20 73 6f 20 76 69 61 20 5c 6e 20 20 20 20 20 20 20 20 20 20 47 54 4d 20 74 68 65 72 65 20 73 68 6f 75 6c 64 20 62 65 20 6e 6f 20 77 61 79 20 74 68 61 74 20 61 6e 79 74 68 69 6e 67 20 6f 74 68 65 72 20 74 68 61 6e 20 77 68 61 74 20 77 65 20 73 68 6f 75 6c 64 20 69 6e 74 65 72 70 72 65 74 20 61 73 20 61 20 6e 75 6d 62 65 72 5c 6e 20 20 20 20 20 20 20 20 20 20 67 6f 74 20 68 65 72 65 2e 2e 2e 20 75 6e 6c 65 73 73 20 77 65 Data Ascii: RL search param value... \n NOTE: realize that within GTM we have already scrubbed(via regex) for numbers so via \n GTM there should be no way that anything other than what we should interpret as a number\n got here... unless we

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49886	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	1816	OUT	GET /saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=V9VrKIqTI2a9WM-UTxQtpbYo86WF2Plb1FfItFnE55g&host=https%3A%2F%2Fwww.docusign.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:22 UTC	299	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:22 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com
2024-04-24 12:22:22 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49888	18.154.144.129	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:22 UTC	728	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:22 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 45 69 34 63 75 6b 57 6d 51 4d 61 33 6f 62 44 6c 41 4d 70 49 79 66 31 65 34 68 66 4a 70 64 31 35 62 44 54 73 66 4a 32 51 22 7d Data Ascii: {"src":"tag","auth":"Ei4cukWmQMa3obDlAMpIyf1e4hfJpd15bDTsfJ2Q"}
2024-04-24 12:22:23 UTC	957	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 457 Connection: close Date: Wed, 24 Apr 2024 12:22:23 GMT Server: nginx Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Tue, 23 Apr 2024 12:22:23 GMT Vary: Accept-Encoding, Origin Request-ID: 977c5e36-bf98-4ff1-b540-2c1a7eba4ece X-Cache: Miss from cloudfront Via: 1.1 fae55690a44dbb1f02e9b961e2f4a54c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: CNkC30MmCEymIBRSpXksEuNedl3gfP5wLvbEDeCgK34V2MKFKeuLHQ==
2024-04-24 12:22:23 UTC	457	IN	Data Raw: 7b 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 4f 47 45 4e 54 2d 31 37 34 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 38 33 39 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 Data Ascii: {"registry_company_name":"COGENT-174","registry_city":"Las Vegas","registry_state":"NV","region_name":"Nevada","registry_zip_code":"89101","registry_area_code":null,"registry_dma_code":839,"registry_country":"United States","registry_country_code":"US","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49891	34.96.71.22	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:23 UTC	716	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:23 UTC	511	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713961343\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Wed, 24 Apr 2024 12:22:23 GMT Content-Length: 634 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:23 UTC	634	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 73 75 6d 2d 73 65 63 2e 63 61 73 61 6c 65 6d 65 64 69 61 2e 63 6f 6d 2f 72 75 6d 3f 63 6d 5f 64 73 70 5f 69 64 3d 31 38 26 61 6d 70 3b 65 78 70 69 72 79 3d 31 37 32 39 37 37 32 35 34 33 26 61 6d 70 3b 65 78 74 65 72 6e 61 6c 5f 75 73 65 72 5f 69 64 3d 31 61 30 33 66 61 32 35 2d 33 63 65 34 2d 34 34 32 37 2d 61 31 38 65 2d 36 65 30 37 31 34 39 38 31 66 32 38 22 20 61 6c 74 3d 22 22 20 77 69 64 74 68 3d 22 30 22 20 68 65 69 67 68 74 3d 22 30 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 20 61 72 69 61 2d 68 Data Ascii: <html><head><title>Pixels</title></head><body><img src="https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1729772543&external_user_id=1a03fa25-3ce4-4427-a18e-6e0714981f28" alt="" width="0" height="0" style="display:none", aria-h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49892	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:23 UTC	672	OUT	GET /_next/static/PFxQpRcdah7Fp208MVJfR/_buildManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:23 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 74008 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 332 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:23 GMT Etag: "64ffbb523225316f9adfb6ac32d8acec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X6AX2JAP0NBYPQM48HRS Connection: close
2024-04-24 12:22:23 UTC	332	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 63 38 32 39 66 65 65 63 37 31 63 65 38 61 30 39 2e 6a 73 22 5d 2c 22 2f 64 72 69 66 74 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 36 31 30 2d 32 62 64 36 32 39 34 61 32 33 30 65 63 66 66 35 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 64 72 69 66 74 2d 38 66 39 36 32 33 61 37 61 37 30 66 30 33 33 61 2e 6a 73 22 5d 2c 73 6f 72 74 65 64 50 61 67 65 73 3a 5b 22 2f 5f 61 70 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/_error":["static/chunks/pages/_error-c829feec71ce8a09.js"],"/drift":["static/chunks/610-2bd6294a230ecff5.js","static/chunks/pages/drift-8f9623a7a70f033a.js"],sortedPages:["/_ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49893	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:23 UTC	670	OUT	GET /_next/static/PFxQpRcdah7Fp208MVJfR/_ssgManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:23 UTC	419	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 90472 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 77 Content-Type: application/javascript; charset=UTF-8 Date: Wed, 24 Apr 2024 12:22:23 GMT Etag: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80X6AYZNKC9Q50DQQKA32W Connection: close
2024-04-24 12:22:23 UTC	77	IN	Data Raw: 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 3d 6e 65 77 20 53 65 74 2c 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 26 26 73 65 6c 66 2e 5f 5f 53 53 47 5f 4d 41 4e 49 46 45 53 54 5f 43 42 28 29 3b Data Ascii: self.__SSG_MANIFEST=new Set,self.__SSG_MANIFEST_CB&&self.__SSG_MANIFEST_CB();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49889	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:23 UTC	1046	OUT	GET /sa.jpeg HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:23 UTC	225	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:23 GMT Content-Type: image/jpeg Content-Length: 651 Connection: close Access-Control-Allow-Origin: * Cache-Control: only-if-cached, no-transform, private, max-age=7776000
2024-04-24 12:22:23 UTC	651	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 12 13 0f 14 1d 1a 1f 1e 1d 1a 1c 1c 20 24 2e 27 20 22 2c 23 1c 1c 28 37 29 2c 30 31 34 34 34 1f 27 39 3d 38 32 3c 2e 33 34 32 ff db 00 43 01 09 09 09 0c 0b 0c 18 0d 0d 18 32 21 1c 21 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 ff c0 00 11 08 00 01 00 01 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``C $.' ",#(7),01444'9=82<.342C2!!22222222222222222222222222222222222222222222222222"}!1AQa"q2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49898	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:23 UTC	722	OUT	GET /logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:23 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:23 GMT Content-Type: image/png Content-Length: 1886 Connection: close Content-MD5: Zresqcf+A4+LUF7W9IJlYA== Last-Modified: Wed, 10 Apr 2024 06:17:13 GMT ETag: 0x8DC5925DCBA60C8 x-ms-request-id: 14d277d7-001e-00a9-250e-8bf8f1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 67745 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960efe2e5e0ad7-LAS
2024-04-24 12:22:23 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 21 08 06 00 00 00 3b ce 52 2f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 f3 49 44 41 54 78 01 ed 5b cd 4e 1c 47 10 ae 81 35 17 1f b2 be f8 66 79 78 02 c3 13 30 7b 8f e5 c5 92 2d 47 39 30 28 0f e0 dd 27 60 79 02 b0 94 3b cb 29 46 b2 0d 48 dc 77 78 02 88 72 8d b4 63 e5 94 5c 20 57 5b d0 e9 62 aa 4d 4d d3 7f 93 9d e5 c7 cc 27 15 3b d3 dd 55 dd 53 53 5d 5d 5d 3d 00 34 68 30 05 44 b6 0a d1 ed b6 a1 d5 5a 80 50 41 1f 3e 64 d0 a0 01 a1 65 ad 99 9d 4d e0 fc 7c 17 02 21 5e be 3c 85 28 da 83 07 0f d6 a3 f7 ef 73 a8 19 42 88 44 fe ac 48 5a 8f a2 28 87 7b 0a a9 07 9c ec 6d a9 83 0c 6e Data Ascii: PNGIHDR!;R/pHYssRGBgAMAaIDATx[NG5fyx0{-G90('`y;)FHwxrc\ W[bMM';USS]]]=4h0DZPA>deM\|!^<(sBDHZ({mn
2024-04-24 12:22:23 UTC	1343	IN	Data Raw: 9d 1d 21 f3 57 2e 1a bb fa 56 a9 04 47 0f 1b a8 44 ad 2c d1 15 29 69 57 b8 b1 45 0a b5 8d 63 c3 c3 3f d6 f9 b5 fa 81 e3 f9 38 52 ad 6e ec e9 77 c4 fb 95 d7 0b 82 e9 cb d0 5f 22 e9 c4 21 6f 4d 94 f5 39 66 bc 03 56 be 45 b2 c6 16 39 d8 47 02 0e 4c 16 63 bd 7e 5d fc da 3c 97 c3 aa 45 31 1b 30 37 15 83 1d 3d 47 9d f2 32 3e 19 88 54 12 2a aa a3 cf 34 54 22 58 bc 36 43 0c 45 ee a8 53 47 72 b6 c2 b8 13 49 f8 72 e7 a9 df 1e 58 52 2f a2 08 3b 46 1e 79 03 08 8b 79 53 70 eb 04 df dd 2e 8d cb b8 53 9d 7c 57 88 c6 f5 f8 b1 b9 ee fc fc 5f 07 27 26 fb 62 76 8f 03 7c 07 c5 ce a7 0f 85 db f5 c1 25 e3 9d 26 03 db 95 e2 49 51 24 1c 53 0b ff ba 8f 7f 02 24 50 1e 37 f6 85 41 f9 a2 a4 65 49 db bc 2e d0 98 f5 53 12 fe 2c 28 2f a7 f2 2a 71 af 2e 83 1b 91 be cc 97 30 dd 5d a1 21 Data Ascii: !W.VGD,)iWEc?8Rnw_"!oM9fVE9GLc~]<E107=G2>T4T"X6CESGrIrXR/;FyySp.S\|W_'&bv\|%&IQ$S$P7AeI.S,(/q.0]!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49899	104.19.178.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:23 UTC	609	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:23 UTC	829	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:23 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Tue, 23 Apr 2024 02:35:12 GMT ETag: 0x8DC633E00A5CEDF x-ms-request-id: 193c8836-501e-0032-44b1-9539f4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 5312 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960efe2dd069e6-LAS
2024-04-24 12:22:23 UTC	540	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-24 12:22:23 UTC	1369	IN	Data Raw: 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 30 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 0
2024-04-24 12:22:23 UTC	1369	IN	Data Raw: 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 30 Data Ascii: 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0 0
2024-04-24 12:22:23 UTC	1369	IN	Data Raw: 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 30 Data Ascii: .59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 00
2024-04-24 12:22:23 UTC	547	IN	Data Raw: 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e 31 Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49895	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:23 UTC	1610	OUT	GET /saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=V9VrKIqTI2a9WM-UTxQtpbYo86WF2Plb1FfItFnE55g&host=https%3A%2F%2Fwww.docusign.com&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:23 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:23 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 12:22:23 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49903	68.67.153.60	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:24 UTC	650	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: s.ml-attr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:24 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.25.1 Date: Wed, 24 Apr 2024 12:22:24 GMT Content-Type: text/html Content-Length: 145 Connection: close Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID
2024-04-24 12:22:24 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49904	18.239.199.124	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:24 UTC	643	OUT	GET /bg9s?x-amz-cf-id=CNkC30MmCEymIBRSpXksEuNedl3gfP5wLvbEDeCgK34V2MKFKeuLHQ==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:24 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 f282b9a77ad86b4ae9156d7da0578294.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: MuCRVm7oV5hLB2k6IU6Gne4l0-6AO4WnPY7qd-bWrqHvQqot0LUCaQ== Age: 13129 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49905	142.250.101.157	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:24 UTC	907	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=866850028.1713961341&jid=1575686851&gjid=673361439&_gid=1110259529.1713961342&_u=YCDACEAABAAAACgAI~&z=490274514 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:22:24 UTC	594	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.docusign.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 12:22:24 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:24 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49906	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:24 UTC	555	OUT	GET /conductor HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.docusign.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:24 UTC	979	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 225878 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 20:13:54 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ECpAIUHXvnHr64vvrQweEad8ZWUjBUSY Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 19 Date: Wed, 24 Apr 2024 12:22:24 GMT Cache-Control: no-cache ETag: "d320e83a1b98d0793815b4e22b96825b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 40dcbda4bd91e45eab647af7e1631a5e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: g8nfKfx3FvQ4p0T7J4SifZP33RgOtddp64Ec1OALj0SYTacpTQIMpA==
2024-04-24 12:22:24 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 74 29 7b 66 6f 72 28 76 61 72 20 72 2c 6f 2c 69 3d 74 5b 30 5d 2c 73 3d 74 5b 31 5d 2c 63 3d 30 2c 75 3d 5b 5d 3b 63 3c 69 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 6f 3d 69 5b 63 5d 2c 6e 5b 6f 5d 26 26 75 2e 70 75 73 68 28 6e 5b 6f 5d 5b 30 5d 29 2c 6e 5b 6f 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 73 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 73 2c 72 29 26 26 28 65 5b 72 5d 3d 73 5b 72 5d 29 3b 66 6f 72 28 61 26 26 61 28 74 29 3b 75 2e 6c 65 6e 67 74 68 3b 29 75 2e 73 68 69 66 74 28 29 28 29 7d 76 61 72 20 74 3d 7b 7d 2c 6e 3d 7b 30 3a 30 7d 3b 66 75 6e 63 74 69 Data Ascii: !function(e){function webpackJsonpCallback(t){for(var r,o,i=t[0],s=t[1],c=0,u=[];c<i.length;c++)o=i[c],n[o]&&u.push(n[o][0]),n[o]=0;for(r in s)Object.prototype.hasOwnProperty.call(s,r)&&(e[r]=s[r]);for(a&&a(t);u.length;)u.shift()()}var t={},n={0:0};functi
2024-04-24 12:22:24 UTC	16384	IN	Data Raw: 6f 2e 74 72 79 4c 6f 63 3c 3d 74 68 69 73 2e 70 72 65 76 26 26 72 2e 63 61 6c 6c 28 6f 2c 22 66 69 6e 61 6c 6c 79 4c 6f 63 22 29 26 26 74 68 69 73 2e 70 72 65 76 3c 6f 2e 66 69 6e 61 6c 6c 79 4c 6f 63 29 7b 76 61 72 20 69 3d 6f 3b 62 72 65 61 6b 7d 7d 69 26 26 28 22 62 72 65 61 6b 22 3d 3d 3d 65 7c 7c 22 63 6f 6e 74 69 6e 75 65 22 3d 3d 3d 65 29 26 26 69 2e 74 72 79 4c 6f 63 3c 3d 74 26 26 74 3c 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 26 26 28 69 3d 6e 75 6c 6c 29 3b 76 61 72 20 61 3d 69 3f 69 2e 63 6f 6d 70 6c 65 74 69 6f 6e 3a 7b 7d 3b 72 65 74 75 72 6e 20 61 2e 74 79 70 65 3d 65 2c 61 2e 61 72 67 3d 74 2c 69 3f 28 74 68 69 73 2e 6d 65 74 68 6f 64 3d 22 6e 65 78 74 22 2c 74 68 69 73 2e 6e 65 78 74 3d 69 2e 66 69 6e 61 6c 6c 79 4c 6f 63 2c 64 29 3a 74 68 Data Ascii: o.tryLoc<=this.prev&&r.call(o,"finallyLoc")&&this.prev<o.finallyLoc){var i=o;break}}i&&("break"===e\|\|"continue"===e)&&i.tryLoc<=t&&t<=i.finallyLoc&&(i=null);var a=i?i.completion:{};return a.type=e,a.arg=t,i?(this.method="next",this.next=i.finallyLoc,d):th
2024-04-24 12:22:25 UTC	16384	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 62 74 6f 61 29 72 65 74 75 72 6e 20 62 74 6f 61 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 25 28 5b 30 2d 39 41 2d 46 5d 7b 32 7d 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 70 61 72 73 65 49 6e 74 28 74 2c 31 36 29 29 7d 29 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 5d 2f 67 2c 22 22 29 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 29 72 65 74 75 72 6e 20 74 2e 66 72 6f 6d 28 65 2c 22 75 74 66 38 22 29 2e 74 6f 53 74 72 69 6e 67 28 22 62 61 73 65 36 34 22 29 2e 72 65 70 6c 61 63 65 28 2f 5b 3d 5d 2f 67 2c 22 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: "==typeof btoa)return btoa(encodeURIComponent(e).replace(/%([0-9A-F]{2})/g,function(e,t){return String.fromCharCode(parseInt(t,16))})).replace(/[=]/g,"");if("undefined"!=typeof t)return t.from(e,"utf8").toString("base64").replace(/[=]/g,"");throw new Erro
2024-04-24 12:22:25 UTC	16384	IN	Data Raw: 28 65 2c 74 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 74 68 65 6e 28 65 2c 74 29 7d 2c 72 2c 7b 6f 6e 3a 6f 2e 6f 6e 2c 73 65 6e 64 3a 6f 2e 73 65 6e 64 7d 29 7d 29 7d 28 65 2c 74 2c 6e 2c 72 2c 7b 6f 6e 3a 69 2c 73 65 6e 64 3a 61 7d 29 7d 2c 6f 2e 66 75 6e 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 5f 73 65 72 69 61 6c 69 7a 65 46 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 7b 6f 6e 3a 69 2c 73 65 6e 64 3a 61 7d 29 7d 2c 6f 2e 6f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 73 57 69 6e 64 6f 77 28 65 29 7c 7c 6b 2e 69 73 50 72 6f 78 79 57 69 6e 64 6f 77 28 65 29 3f 73 65 72 69 61 6c 69 7a 65 54 79 70 65 28 22 63 72 6f 73 73 5f Data Ascii: (e,t,function(e,t){return n.then(e,t)},r,{on:o.on,send:o.send})})}(e,t,n,r,{on:i,send:a})},o.function=function(n,r){return function_serializeFunction(e,t,n,r,{on:i,send:a})},o.object=function(e){return isWindow(e)\|\|k.isProxyWindow(e)?serializeType("cross_
2024-04-24 12:22:25 UTC	16384	IN	Data Raw: 65 72 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 29 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 74 3b 2b 2b 6e 29 65 5b 6e 5d 3d 30 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 66 72 6f 6d 41 72 72 61 79 4c 69 6b 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 2e 6c 65 6e 67 74 68 3c 30 3f 30 3a 30 7c 63 68 65 63 6b 65 64 28 74 2e 6c 65 6e 67 74 68 29 3b 65 3d 63 72 65 61 74 65 42 75 66 66 65 72 28 65 2c 6e 29 3b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 6e 3b 72 2b 3d 31 29 65 5b 72 5d 3d 32 35 35 26 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 65 64 28 65 29 7b 69 66 28 65 3e 3d 6b 4d 61 78 4c 65 6e 67 74 68 28 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 41 74 74 65 Data Ascii: er.TYPED_ARRAY_SUPPORT)for(var n=0;n<t;++n)e[n]=0;return e}function fromArrayLike(e,t){var n=t.length<0?0:0\|checked(t.length);e=createBuffer(e,n);for(var r=0;r<n;r+=1)e[r]=255&t[r];return e}function checked(e){if(e>=kMaxLength())throw new RangeError("Atte
2024-04-24 12:22:25 UTC	16384	IN	Data Raw: 4c 45 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3d 2b 65 2c 74 7c 3d 30 2c 6e 7c 7c 63 68 65 63 6b 49 6e 74 28 74 68 69 73 2c 65 2c 74 2c 32 2c 33 32 37 36 37 2c 2d 33 32 37 36 38 29 2c 42 75 66 66 65 72 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3f 28 74 68 69 73 5b 74 5d 3d 32 35 35 26 65 2c 74 68 69 73 5b 74 2b 31 5d 3d 65 3e 3e 3e 38 29 3a 6f 62 6a 65 63 74 57 72 69 74 65 55 49 6e 74 31 36 28 74 68 69 73 2c 65 2c 74 2c 21 30 29 2c 74 2b 32 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 20 77 72 69 74 65 49 6e 74 31 36 42 45 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 65 3d 2b 65 2c 74 7c 3d 30 2c 6e 7c 7c 63 68 65 63 6b 49 6e 74 28 74 68 69 73 2c 65 2c 74 Data Ascii: LE(e,t,n){return e=+e,t\|=0,n\|\|checkInt(this,e,t,2,32767,-32768),Buffer.TYPED_ARRAY_SUPPORT?(this[t]=255&e,this[t+1]=e>>>8):objectWriteUInt16(this,e,t,!0),t+2},Buffer.prototype.writeInt16BE=function writeInt16BE(e,t,n){return e=+e,t\|=0,n\|\|checkInt(this,e,t
2024-04-24 12:22:25 UTC	16384	IN	Data Raw: 3d 3d 3d 74 79 70 65 6f 66 20 74 2e 74 72 61 6e 73 66 6f 72 6d 3f 74 2e 74 72 61 6e 73 66 6f 72 6d 28 65 2e 63 73 73 29 3a 74 2e 74 72 61 6e 73 66 6f 72 6d 2e 64 65 66 61 75 6c 74 28 65 2e 63 73 73 29 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 65 2e 63 73 73 3d 69 7d 69 66 28 74 2e 73 69 6e 67 6c 65 74 6f 6e 29 7b 76 61 72 20 63 3d 73 2b 2b 3b 6e 3d 61 7c 7c 28 61 3d 63 72 65 61 74 65 53 74 79 6c 65 45 6c 65 6d 65 6e 74 28 74 29 29 2c 72 3d 61 70 70 6c 79 54 6f 53 69 6e 67 6c 65 74 6f 6e 54 61 67 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2c 63 2c 21 31 29 2c 6f 3d 61 70 70 6c 79 54 6f 53 69 6e 67 6c 65 74 6f 6e 54 61 67 2e 62 69 6e 64 28 6e 75 6c 6c 2c 6e 2c 63 2c 21 30 29 7d 65 6c 73 65 20 65 2e 73 6f 75 72 63 65 4d 61 70 26 26 22 66 75 Data Ascii: ===typeof t.transform?t.transform(e.css):t.transform.default(e.css)))return function(){};e.css=i}if(t.singleton){var c=s++;n=a\|\|(a=createStyleElement(t)),r=applyToSingletonTag.bind(null,n,c,!1),o=applyToSingletonTag.bind(null,n,c,!0)}else e.sourceMap&&"fu
2024-04-24 12:22:25 UTC	14999	IN	Data Raw: 65 74 61 2e 69 64 29 2c 63 5d 7d 29 2c 69 2e 6e 65 78 74 3d 31 33 2c 4f 62 6a 65 63 74 28 56 2e 73 65 6e 64 29 28 73 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 72 2c 63 2c 7b 74 69 6d 65 6f 75 74 3a 32 65 34 2c 77 69 6e 64 6f 77 3a 73 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2c 64 6f 6d 61 69 6e 3a 68 65 28 29 2c 66 69 72 65 41 6e 64 46 6f 72 67 65 74 3a 21 61 7d 29 3b 63 61 73 65 20 31 33 3a 72 65 74 75 72 6e 20 75 3d 69 2e 73 65 6e 74 2c 61 65 28 7b 64 61 74 61 3a 5b 22 52 45 53 50 4f 4e 53 45 3a 20 22 2e 63 6f 6e 63 61 74 28 74 2c 22 20 7c 20 22 29 2e 63 6f 6e 63 61 74 28 63 2e 5f 6d 65 74 61 2e 69 64 29 2c 75 5d 7d 29 2c 69 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 75 29 3b 63 61 73 65 20 31 38 3a 69 2e 70 72 65 76 3d 31 38 2c 69 2e 74 30 Data Ascii: eta.id),c]}),i.next=13,Object(V.send)(s.contentWindow,r,c,{timeout:2e4,window:s.contentWindow,domain:he(),fireAndForget:!a});case 13:return u=i.sent,ae({data:["RESPONSE: ".concat(t," \| ").concat(c._meta.id),u]}),i.abrupt("return",u);case 18:i.prev=18,i.t0
2024-04-24 12:22:25 UTC	16384	IN	Data Raw: 68 61 74 48 65 69 67 68 74 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3b 69 66 28 65 2e 24 64 69 76 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 72 69 66 74 2d 68 61 73 2d 63 68 61 74 22 29 29 7b 76 61 72 20 6f 2c 69 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 44 6f 6d 53 69 7a 69 6e 67 44 61 74 61 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3d 72 74 28 29 2c 6f 3d 7b 69 6e 6e 65 72 48 65 69 67 68 74 3a 6e 75 6c 6c 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 20 30 3a 6e 75 6c 6c 3d 3d 3d 28 74 3d 72 2e 77 69 6e 64 6f 77 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 69 6e 6e 65 72 57 69 64 74 68 3a 6e 75 6c 6c 3d 3d 3d 72 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 3f 76 6f 69 64 Data Ascii: hatHeight(e,t){var n,r;if(e.$div.classList.contains("drift-has-chat")){var o,i=function getDomSizingData(e){var t,n,r=rt(),o={innerHeight:null===r\|\|void 0===r?void 0:null===(t=r.window)\|\|void 0===t?void 0:t.innerHeight,innerWidth:null===r\|\|void 0===r?void
2024-04-24 12:22:25 UTC	16384	IN	Data Raw: 2c 72 2c 6f 2c 69 2c 61 2c 73 2c 63 2c 75 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 63 61 73 65 20 31 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 72 2c 6f 2c 69 2c 61 2c 73 2c 63 2c 75 2c 66 29 7b 72 65 74 75 72 6e 20 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 5f 61 72 69 74 79 20 6d 75 73 74 20 62 65 20 61 20 6e 6f 6e 2d 6e 65 67 61 74 69 76 65 20 69 6e 74 65 67 65 72 20 6e 6f 20 67 72 65 61 74 65 72 20 74 68 61 6e 20 74 65 6e 22 29 7d 7d 76 61 72 20 51 74 3d 5f 63 75 72 72 79 32 28 66 75 6e 63 74 69 6f 6e 20 63 75 Data Ascii: ,r,o,i,a,s,c,u){return t.apply(this,arguments)};case 10:return function(e,n,r,o,i,a,s,c,u,f){return t.apply(this,arguments)};default:throw new Error("First argument to _arity must be a non-negative integer no greater than ten")}}var Qt=_curry2(function cu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49911	35.201.112.186	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	572	OUT	GET /s/settings/12BP4E/v1/web HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:26 UTC	944	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqaeZSn_fY1pXXEM9tx58k7lW24xjyI_W0fT9jRcAMoDMwvdaJatsAk0kZ85PuBst3RLCw-KCL-6A x-goog-generation: 1713959408854533 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1328 Content-Encoding: gzip x-goog-hash: crc32c=VNHg+A== x-goog-hash: md5=3CKM+hf7KfCb+ZavlLpY/w== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 1328 Access-Control-Allow-Origin: * Server: UploadServer Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Date: Wed, 24 Apr 2024 12:09:35 GMT Expires: Wed, 24 Apr 2024 12:24:35 GMT Cache-Control: public,max-age=900,no-transform Age: 771 Last-Modified: Wed, 24 Apr 2024 12:05:08 GMT ETag: "dc228cfa17fb29f09bf996af94ba58ff" Content-Type: application/json Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:26 UTC	311	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff c4 57 4d 6f 1b 3d 0e be ef af 58 28 97 be c1 28 c8 47 77 51 18 c8 21 4d 0b 64 d1 76 9b 6d 52 ec a1 71 0b 5a a2 67 54 6b a4 59 8a e3 0f 04 fe ef 0b 69 c6 ce d8 19 27 f6 62 81 f7 64 0f c9 47 a4 c8 47 14 f5 28 ae 7e c3 fc df c0 aa c0 20 06 3f 86 99 78 8f 05 4c 8d a7 3b 93 3b b0 77 c8 6c 5c 1e c4 e0 51 7c b4 58 a2 e3 f7 d6 ab 49 34 7e 14 77 68 51 b1 27 31 10 c6 55 35 1f 55 e4 4b 7f ed 35 fe 00 32 20 35 06 45 66 84 7a b4 b8 7c 10 49 a9 bc c6 8f 44 9e 1e c4 b0 31 b2 30 42 7b f9 20 6e a3 fa af 51 1f 55 0e 4a 5c 61 ae 5b 19 2f aa 28 63 9c f3 83 18 8a 4c 34 31 c6 58 ce b3 b3 e1 72 b8 cc c4 07 5f 82 71 29 de af ce 2e 3e 39 3f 73 6b d9 18 6c c0 65 b6 c7 4e 1a 5f 15 84 30 f3 a4 a3 af 6b ef 02 3a 6e 17 c9 c4 fd a2 42 31 38 5b 66 bb c0 85 Data Ascii: WMo=X((GwQ!MdvmRqZgTkYi'bdGG(~ ?xL;;wl\Q\|XI4~whQ'1U5UK52 5Efz\|ID10B{ nQUJ\a[/(cL41Xr_q).>9?skleN_0k:nB18[f
2024-04-24 12:22:26 UTC	1017	IN	Data Raw: b2 d3 e7 f9 0e c0 be 0e fb f0 b5 7b d1 65 5f 6a 1a 48 72 fa 9a c7 3e 78 61 0e 4c eb 28 b2 f0 20 04 a1 f2 a4 f7 8a 70 1b 5e 70 69 f7 2e 80 35 6e ff d4 05 5e d8 dd 1b df b6 1e 41 78 c9 78 b8 3e a3 1f 70 8c 44 a8 db ee d4 4a 3f 21 56 41 0c 5c 6d ed 5a f6 d4 c5 36 3c 1d 4d c1 1a 0d 6c bc 93 b1 73 48 0b 81 7f c5 f6 22 b6 53 6b 5c b2 dd 96 1f 6d 36 ae 1b e3 78 db e4 4f e8 7e 31 47 5f 29 ef 36 e8 2b 66 32 a3 9a 31 35 36 6b 02 a7 64 dc 03 e5 c8 62 70 9a 89 7b c8 c5 40 1c 8b 4c fc 33 26 60 20 02 29 91 89 2b 15 d3 d3 12 e0 99 b9 19 53 34 ee 62 b4 ef c2 4e 7b 61 cf 51 af 7a fa df 1c 75 b6 a3 81 41 4e e5 d8 53 29 c7 06 ad de 05 3e eb 01 83 e5 43 cc 55 81 6a 82 07 79 88 e1 1d 62 5f 10 8e 0f b1 af 2c 28 2c bc d5 48 87 c0 36 4b b3 8f 79 c0 83 52 b5 ea 0d 2b c0 c5 6b 00 Data Ascii: {e_jHr>xaL( p^pi.5n^Axx>pDJ?!VA\mZ6<MlsH"Sk\m6xO~1G_)6+f2156kdbp{@L3&` )+S4bN{aQzuANS)>CUjyb_,(,H6KyR+k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49913	31.13.70.7	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	1311	OUT	GET /signals/config/357123711145934?v=2.9.154&r=stable&domain=www.docusign.com&hme=c3a545c63044e8e9102d4f32d84a1137594d024f28e801d670bc76dc5c075575&ex_m=67%2C112%2C99%2C103%2C58%2C3%2C93%2C66%2C15%2C91%2C84%2C49%2C51%2C158%2C161%2C172%2C168%2C169%2C171%2C28%2C94%2C50%2C73%2C170%2C153%2C156%2C165%2C166%2C173%2C121%2C14%2C48%2C178%2C177%2C123%2C17%2C33%2C38%2C1%2C41%2C62%2C63%2C64%2C68%2C88%2C16%2C13%2C90%2C87%2C86%2C100%2C102%2C37%2C101%2C29%2C25%2C154%2C157%2C130%2C27%2C10%2C11%2C12%2C5%2C6%2C24%2C21%2C22%2C54%2C59%2C61%2C71%2C95%2C26%2C72%2C8%2C7%2C76%2C46%2C20%2C97%2C96%2C9%2C19%2C18%2C81%2C53%2C79%2C32%2C70%2C0%2C89%2C31%2C78%2C83%2C45%2C44%2C82%2C36%2C4%2C85%2C77%2C42%2C39%2C34%2C80%2C2%2C35%2C60%2C40%2C98%2C43%2C75%2C65%2C104%2C57%2C56%2C30%2C92%2C55%2C52%2C47%2C74%2C69%2C23%2C105 HTTP/1.1 Host: connect.facebook.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	1465	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: application/x-javascript; charset=utf-8 timing-allow-origin: * reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src 'self' data: blob: ;script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://.google-analytics.com .google.com;style-src data: blob: 'unsafe-inline' ;connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src 'self' data: blob: * https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-04-24 12:22:27 UTC	1528	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-04-24 12:22:27 UTC	7	IN	Data Raw: 2f 2a 2a 0a 2a 20 43 Data Ascii: /*** C
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 37 2d 70 72 65 73 65 6e 74 2c 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 2a 0a 2a 20 59 6f 75 20 61 72 65 20 68 65 72 65 62 79 20 67 72 61 6e 74 65 64 20 61 20 6e 6f 6e 2d 65 78 63 6c 75 73 69 76 65 2c 20 77 6f 72 6c 64 77 69 64 65 2c 20 72 6f 79 61 6c 74 79 2d 66 72 65 65 20 6c 69 63 65 6e 73 65 20 74 6f 20 75 73 65 2c 0a 2a 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 61 6e 64 20 64 69 73 74 72 69 62 75 74 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 69 6e 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6f 72 20 62 69 6e 61 72 79 20 66 6f 72 6d 20 66 6f 72 20 75 73 65 0a 2a 20 69 6e 20 63 6f 6e 6e 65 63 74 69 6f 6e 20 77 69 74 68 20 74 68 65 20 Data Ascii: opyright (c) 2017-present, Facebook, Inc. All rights reserved.** You are hereby granted a non-exclusive, worldwide, royalty-free license to use,* copy, modify, and distribute this software in source code or binary form for use* in connection with the
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 29 29 72 65 74 75 72 6e 3b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 79 70 65 6f 66 20 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3a 22 40 40 69 74 65 72 61 74 6f 72 22 29 3d 3d 3d 22 73 79 6d 62 6f 6c 22 3f 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 61 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 26 26 61 21 3d 3d 28 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 53 Data Ascii: ))return;var g=typeof Symbol==="function"&&typeof (typeof Symbol==="function"?Symbol.iterator:"@@iterator")==="symbol"?function(a){return typeof a}:function(a){return a&&typeof Symbol==="function"&&a.constructor===Symbol&&a!==(typeof Symbol==="function"?S
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 61 2c 62 29 3a 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 7c 7c 28 66 2e 5f 5f 66 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 5f 5f 66 62 65 76 65 6e 74 73 52 65 73 6f 6c 76 65 64 4d 6f 64 75 6c 65 73 3d 7b 7d 2c 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 3d 66 75 6e 63 74 69 6f Data Ascii: setPrototypeOf?Object.setPrototypeOf(a,b):a.__proto__=b)}function l(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=functio
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 3b 61 3d 61 2e 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3b 76 61 72 20 6b 3d 61 26 26 69 3d 3d 6e 75 6c 6c 3b 69 3d 63 28 7b 62 75 74 74 6f 6e 3a 65 2c 63 6f 6e 74 61 69 6e 65 72 45 6c 65 6d 65 6e 74 3a 6b 3f 68 3a 69 2c 73 68 6f 75 6c 64 45 78 74 72 61 63 74 55 73 65 72 44 61 74 61 3a 61 7d 29 3b 61 3d 64 28 29 3b 76 61 72 20 6c 3d 69 2e 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3b 69 3d 69 2e 75 73 65 72 44 61 74 61 3b 66 3d 7b 62 75 74 74 6f 6e 46 65 61 74 75 72 65 73 3a 66 2c 62 75 74 74 6f 6e 54 65 78 74 3a 67 2c 66 6f 72 6d 46 65 61 74 75 72 65 73 3a 6b 3f 5b 5d 3a 6c 2c 70 61 67 65 46 65 61 74 75 72 65 73 3a 61 2c 70 61 72 61 6d 65 74 65 72 73 3a 62 2e 74 72 69 67 67 65 72 28 7b 70 69 78 65 6c 3a 6a 2c 74 61 72 67 65 Data Ascii: ;a=a.shouldExtractUserData;var k=a&&i==null;i=c({button:e,containerElement:k?h:i,shouldExtractUserData:a});a=d();var l=i.formFieldFeatures;i=i.userData;f={buttonFeatures:f,buttonText:g,formFeatures:k?[]:l,pageFeatures:a,parameters:b.trigger({pixel:j,targe
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 5d 2c 6c 3d 7b 7d 3b 69 66 28 68 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 7b 66 6f 72 6d 46 69 65 6c 64 46 65 61 74 75 72 65 73 3a 6b 2c 75 73 65 72 44 61 74 61 3a 6c 7d 3b 68 3d 68 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 68 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 68 5b 6d 5d 3b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 49 6e 70 75 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 54 65 78 74 41 72 65 61 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 53 65 6c 65 63 74 45 6c 65 6d 65 6e 74 7c 7c 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 Data Ascii: ],l={};if(h==null)return{formFieldFeatures:k,userData:l};h=h.querySelectorAll(e);for(var m=0;m<h.length;m++){var n=h[m];if(n instanceof HTMLInputElement\|\|n instanceof HTMLTextAreaElement\|\|n instanceof HTMLSelectElement\|\|n instanceof HTMLButtonElement){var
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 63 2c 64 29 26 26 28 61 5b 64 5d 3d 63 5b 64 5d 29 7d 72 65 74 75 72 6e 20 61 7d 2c 62 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 53 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 55 74 69 6c 73 22 29 2c 63 3d 62 2e 65 61 63 68 2c 64 3d 2f 5b 5e 5c 73 5c 22 5d 2f 2c 65 3d 2f 5b 5e 5c 73 3a 2b 5c 22 5d 2f 3b 66 75 6e 63 74 69 6f 6e 20 67 28 62 2c 63 2c 66 29 7b 69 66 28 66 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 64 2e 74 65 73 74 28 63 29 3f 63 3d 3d 3d 22 40 22 3f 6e 75 6c 6c 3a 7b 73 74 61 72 74 3a 62 2c 75 73 65 72 4f 72 44 6f 6d 61 69 6e 3a 22 75 73 65 72 22 7d 3a 6e 75 6c 6c Data Ascii: for(var d in c)Object.prototype.hasOwnProperty.call(c,d)&&(a[d]=c[d])}return a},b=f.getFbeventsModules("SignalsFBEventsUtils"),c=b.each,d=/[^\s\"]/,e=/[^\s:+\"]/;function g(b,c,f){if(f==null)return d.test(c)?c==="@"?null:{start:b,userOrDomain:"user"}:null
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 53 3d 63 7d 68 28 62 2c 5b 7b 6b 65 79 3a 22 5f 70 61 73 73 65 73 54 68 72 6f 74 74 6c 65 49 6d 70 6c 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 5f 6c 61 73 74 41 72 67 73 3b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 2c 63 3d 62 2d 74 68 69 73 2e 5f 6c 61 73 74 54 69 6d 65 3b 69 66 28 63 3e 3d 74 68 69 73 2e 5f 72 61 74 65 4d 53 29 72 65 74 75 72 6e 21 30 3b 66 6f 72 28 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 65 3d 41 72 72 61 79 28 64 29 2c 66 3d 30 3b 66 3c 64 3b 66 2b 2b 29 65 5b 66 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 66 5d 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e Data Ascii: S=c}h(b,[{key:"_passesThrottleImpl",value:function(){var a=this._lastArgs;if(a==null)return!0;var b=Date.now(),c=b-this._lastTime;if(c>=this._rateMS)return!0;for(var d=arguments.length,e=Array(d),f=0;f<d;f++)e[f]=arguments[f];if(a.length!==e.length)return
2024-04-24 12:22:27 UTC	1500	IN	Data Raw: 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 45 78 74 72 61 63 74 46 72 6f 6d 49 6e 70 75 74 73 22 29 2c 42 3d 6e 65 77 20 74 28 29 2c 43 3d 66 2e 67 65 74 46 62 65 76 65 6e 74 73 4d 6f 64 75 6c 65 73 28 22 73 69 67 6e 61 6c 73 46 42 45 76 65 6e 74 73 44 6f 41 75 74 6f 6d 61 74 69 63 4d 61 74 63 68 69 6e 67 22 29 2c 44 3d 31 30 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 21 3d 6e 75 6c 6c 26 26 62 2e 62 75 74 74 6f 6e 53 65 6c 65 63 74 6f 72 3d 3d 3d 22 65 78 74 65 6e 64 65 64 22 7d 66 75 6e 63 74 69 6f 6e 20 46 28 62 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 62 2e 64 69 73 61 62 6c 65 41 75 74 6f 43 6f 6e 66 69 67 29 72 65 74 75 72 6e 3b 76 61 72 20 Data Ascii: ventsModules("signalsFBEventsExtractFromInputs"),B=new t(),C=f.getFbeventsModules("signalsFBEventsDoAutomaticMatching"),D=100;function E(a,b){return b!=null&&b.buttonSelector==="extended"}function F(b){return function(c){if(b.disableAutoConfig)return;var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49916	104.244.42.69	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	849	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=5eca3ebf-b54e-4636-a6d2-13859a89dbb0&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=2c5cb771-da73-4f98-91bf-03da634f79df&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:26 UTC	551	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:26 GMT perf: 7402827104 server: tsa_p set-cookie: muc_ads=a46bf145-3aaa-4094-971d-11456caaeb47; Max-Age=63072000; Expires=Fri, 24 Apr 2026 12:22:26 GMT; Path=/; Domain=t.co; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 4ee9bb2ee9bf9f52 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 45432dd888db430e93b8b45ef9f5b6ddd98a1bb3c0859cc9beec5632f4629c34 connection: close
2024-04-24 12:22:26 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49914	104.244.42.195	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	866	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=5eca3ebf-b54e-4636-a6d2-13859a89dbb0&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=2c5cb771-da73-4f98-91bf-03da634f79df&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	1050	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:26 GMT perf: 7402827104 server: tsa_p set-cookie: guest_id_marketing=v1%3A171396134691071718; Max-Age=63072000; Expires=Fri, 24 Apr 2026 12:22:26 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id_ads=v1%3A171396134691071718; Max-Age=63072000; Expires=Fri, 24 Apr 2026 12:22:26 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: personalization_id="v1_O74RdUWbGOMZLTZGhxxEVA=="; Max-Age=63072000; Expires=Fri, 24 Apr 2026 12:22:26 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None set-cookie: guest_id=v1%3A171396134691071718; Max-Age=63072000; Expires=Fri, 24 Apr 2026 12:22:26 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 65afcecf594295d1 strict-transport-security: max-age=631138519 x-response-time: 6 x-connection-hash: 40cd60985f853f1676120020858378e7f1c073663c8f5906b44a66416678b90b connection: close
2024-04-24 12:22:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49918	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	1162	OUT	GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 16 Date: Wed, 24 Apr 2024 12:22:27 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 a6c9051c33e4e3f5189624306178fd02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: UEmEpYBIlct5UGKwuWqbbZIFBVF2wBL1SkDzQas6Ofz6t5sUK5hFzA==
2024-04-24 12:22:27 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49917	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	753	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:26 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 19 Date: Wed, 24 Apr 2024 12:22:26 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 c40a611016f947a8da0f087fe5d2af84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: BJTt-muXis6oFBvbV4L5p_Nnc7jvPkrLhCvOGrhiXRb7lKULVf8ifQ==
2024-04-24 12:22:26 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49920	142.250.141.103	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	817	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=866850028.1713961341&jid=1575686851&_u=YCDACEAABAAAACgAI~&z=1853450934 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:26 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:26 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:26 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49915	104.254.151.60	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	653	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:26 UTC	1504	IN	HTTP/1.1 307 Redirection Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 12:22:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://secure.adnxs.com/bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253ddocusign.com%2526pId%253d%2524UID AN-X-Request-Uuid: f6e99b52-099e-4270-a72b-5dd2ccfde9dc Set-Cookie: XANDR_PANID=8ADLn8EGw6GW4D1S0bAIQNfUY5ardES5dFOHze22sbnKQUwRzaiHDBhnoavoBaSrCMrAwilfnx79BSmAd0CkVePg1I20G1YF7Cc4xbpZjDk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:26 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 12:22:26 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=402488676481365330; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:26 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 899.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49921	35.244.154.8	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	582	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	664	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://id.rlcdn.com/1000.gif?memo=CI6tHBoNCIPzo7EGEgUI6AcQAEIASgA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=aNwicniGVqWD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:22:27 GMT; Secure; SameSite=None Set-Cookie: pxrc=CAA=; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:22:27 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49922	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	602	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 378 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:26 UTC	378	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 31 32 42 50 34 45 22 2c 22 55 73 65 72 49 64 22 3a 22 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 57 69 64 74 68 22 3a 31 32 36 33 2c 22 48 65 69 67 68 74 22 3a 39 30 37 2c 22 53 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 53 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 53 6e 69 70 70 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 33 2e 30 22 2c 22 52 65 66 65 72 72 65 72 22 3a 22 22 2c 22 50 72 65 72 6f 6c 6c 22 3a 31 36 38 33 30 2c 22 44 6f 63 74 79 70 65 22 3a 22 3c 21 44 4f 43 54 59 50 45 20 68 Data Ascii: {"OrgId":"12BP4E","UserId":"","Url":"https://www.docusign.com/privacy","Base":"https://www.docusign.com/privacy","Width":1263,"Height":907,"ScreenWidth":1280,"ScreenHeight":1024,"SnippetVersion":"1.3.0","Referrer":"","Preroll":16830,"Doctype":"<!DOCTYPE h
2024-04-24 12:22:27 UTC	319	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:27 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-24 12:22:27 UTC	1255	IN	Data Raw: 31 34 65 62 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 Data Ascii: 14eb{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"S
2024-04-24 12:22:27 UTC	1255	IN	Data Raw: 22 53 65 6c 65 63 74 6f 72 22 3a 22 2e 69 6e 76 61 6c 69 64 22 7d 5d 2c 22 55 72 6c 4b 65 65 70 73 22 3a 6e 75 6c 6c 2c 22 44 77 65 6c 6c 54 69 6d 65 22 3a 31 2c 22 41 6a 61 78 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 50 72 69 76 61 63 79 48 61 73 68 22 3a 22 22 2c 22 55 73 65 72 55 55 49 44 22 3a 22 22 2c 22 55 73 65 72 49 6e 74 49 64 22 3a 22 30 22 2c 22 53 65 73 73 69 6f 6e 49 6e 74 49 64 22 3a 22 30 22 2c 22 50 61 67 65 49 6e 74 49 64 22 3a 22 30 22 2c 22 45 6d 62 65 64 54 6f 6b 65 6e 22 3a 22 22 2c 22 50 61 67 65 53 74 61 72 74 22 3a 31 37 31 33 39 36 31 33 34 37 30 38 36 2c 22 49 73 4e 65 77 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 46 6c 61 67 73 22 3a 7b 22 41 6a 61 78 46 65 74 63 68 22 3a 74 72 75 65 2c 22 43 61 70 74 75 72 65 41 6e 69 6d 61 Data Ascii: "Selector":".invalid"}],"UrlKeeps":null,"DwellTime":1,"AjaxWatches":[],"PrivacyHash":"","UserUUID":"","UserIntId":"0","SessionIntId":"0","PageIntId":"0","EmbedToken":"","PageStart":1713961347086,"IsNewSession":false,"Flags":{"AjaxFetch":true,"CaptureAnima
2024-04-24 12:22:27 UTC	1255	IN	Data Raw: 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 76 61 6c 75 65 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 63 68 65 63 6b 65 64 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 61 6c 74 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 Data Ascii: Target":1,"Tag":"","Name":"value","Action":0},{"Target":2,"Tag":"","Name":"checked","Action":0},{"Target":2,"Tag":"","Name":"data","Action":0},{"Target":2,"Tag":"","Name":"alt","Action":1},{"Target":2,"Tag":"*","Name":"placeholder","Action":1},{"Targe
2024-04-24 12:22:27 UTC	1255	IN	Data Raw: 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 70 74 2d 70 61 74 63 68 22 2c 22 61 63 63 65 70 74 2d 72 61 6e 67 65 73 22 2c 22 61 67 65 22 2c 22 61 6c 6c 6f 77 22 2c 22 61 6c 74 2d 73 76 63 22 2c 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 2c 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 22 2c 22 63 6f 6e 74 Data Ascii: ol-expose-headers","access-control-max-age","access-control-allow-methods","access-control-allow-headers","accept-patch","accept-ranges","age","allow","alt-svc","cache-control","connection","content-disposition","content-encoding","content-language","cont
2024-04-24 12:22:27 UTC	348	IN	Data Raw: 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 22 70 72 6f 6d 6f 63 6f 64 65 45 72 72 6f 72 5c 22 5d 5b 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 50 72 6f 6d 6f 20 63 6f 64 65 5c 22 5d 5b 6e 61 6d 65 3d 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 5d 5b 74 79 70 65 3d 5c 22 74 65 78 74 5c 22 5d 22 2c 22 53 69 67 6e 61 6c 73 22 3a 5b 32 2c 31 5d 7d 5d 7d 2c 22 47 43 4c 42 53 75 62 64 6f 6d 61 69 6e 22 3a 22 72 73 22 2c 22 42 6c 6f 63 6b 73 22 3a 5b 5d 2c 22 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 41 6a 61 78 46 65 74 63 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 41 6a 61 78 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6e 73 6f 6c 65 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 47 65 74 43 75 72 72 65 6e 74 53 Data Ascii: ia-describedby=\"promocodeError\"][aria-label=\"Promo code\"][name=\"promoCode\"][type=\"text\"]","Signals":[2,1]}]},"GCLBSubdomain":"rs","Blocks":[],"Watches":[],"AjaxFetchEnabled":true,"AjaxWatcherEnabled":false,"ConsoleWatcherEnabled":true,"GetCurrentS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49923	104.19.177.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	486	OUT	GET /logos/fb186a2c-cd0e-4526-943d-54aad18159e5/018ec69d-e7ca-7fa5-95df-0f26ccd0830e/43b21f0e-96b8-4324-82c0-732bd1e7de65/DS_Logo_White_RGB_150x33.png HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	826	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Type: image/png Content-Length: 1886 Connection: close Content-MD5: Zresqcf+A4+LUF7W9IJlYA== Last-Modified: Wed, 10 Apr 2024 06:17:13 GMT ETag: 0x8DC5925DCBA60C8 x-ms-request-id: 14d277d7-001e-00a9-250e-8bf8f1000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 67749 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960f13b86a0ad9-LAS
2024-04-24 12:22:27 UTC	543	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 21 08 06 00 00 00 3b ce 52 2f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 06 f3 49 44 41 54 78 01 ed 5b cd 4e 1c 47 10 ae 81 35 17 1f b2 be f8 66 79 78 02 c3 13 30 7b 8f e5 c5 92 2d 47 39 30 28 0f e0 dd 27 60 79 02 b0 94 3b cb 29 46 b2 0d 48 dc 77 78 02 88 72 8d b4 63 e5 94 5c 20 57 5b d0 e9 62 aa 4d 4d d3 7f 93 9d e5 c7 cc 27 15 3b d3 dd 55 dd 53 53 5d 5d 5d 3d 00 34 68 30 05 44 b6 0a d1 ed b6 a1 d5 5a 80 50 41 1f 3e 64 d0 a0 01 a1 65 ad 99 9d 4d e0 fc 7c 17 02 21 5e be 3c 85 28 da 83 07 0f d6 a3 f7 ef 73 a8 19 42 88 44 fe ac 48 5a 8f a2 28 87 7b 0a a9 07 9c ec 6d a9 83 0c 6e Data Ascii: PNGIHDR!;R/pHYssRGBgAMAaIDATx[NG5fyx0{-G90('`y;)FHwxrc\ W[bMM';USS]]]=4h0DZPA>deM\|!^<(sBDHZ({mn
2024-04-24 12:22:27 UTC	1343	IN	Data Raw: 9d 1d 21 f3 57 2e 1a bb fa 56 a9 04 47 0f 1b a8 44 ad 2c d1 15 29 69 57 b8 b1 45 0a b5 8d 63 c3 c3 3f d6 f9 b5 fa 81 e3 f9 38 52 ad 6e ec e9 77 c4 fb 95 d7 0b 82 e9 cb d0 5f 22 e9 c4 21 6f 4d 94 f5 39 66 bc 03 56 be 45 b2 c6 16 39 d8 47 02 0e 4c 16 63 bd 7e 5d fc da 3c 97 c3 aa 45 31 1b 30 37 15 83 1d 3d 47 9d f2 32 3e 19 88 54 12 2a aa a3 cf 34 54 22 58 bc 36 43 0c 45 ee a8 53 47 72 b6 c2 b8 13 49 f8 72 e7 a9 df 1e 58 52 2f a2 08 3b 46 1e 79 03 08 8b 79 53 70 eb 04 df dd 2e 8d cb b8 53 9d 7c 57 88 c6 f5 f8 b1 b9 ee fc fc 5f 07 27 26 fb 62 76 8f 03 7c 07 c5 ce a7 0f 85 db f5 c1 25 e3 9d 26 03 db 95 e2 49 51 24 1c 53 0b ff ba 8f 7f 02 24 50 1e 37 f6 85 41 f9 a2 a4 65 49 db bc 2e d0 98 f5 53 12 fe 2c 28 2f a7 f2 2a 71 af 2e 83 1b 91 be cc 97 30 dd 5d a1 21 Data Ascii: !W.VGD,)iWEc?8Rnw_"!oM9fVE9GLc~]<E107=G2>T4T"X6CESGrIrXR/;FyySp.S\|W_'&bv\|%&IQ$S$P7AeI.S,(/q.0]!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49925	104.19.177.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	373	OUT	GET /logos/static/powered_by_logo.svg HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	829	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Type: image/svg+xml Content-Length: 5194 Connection: close Content-MD5: Y+c301RBZNK39PvKQWrIBw== Last-Modified: Tue, 23 Apr 2024 02:35:12 GMT ETag: 0x8DC633E00A5CEDF x-ms-request-id: 193c8836-501e-0032-44b1-9539f4000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 5316 Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 87960f13c9dc09f1-LAS
2024-04-24 12:22:27 UTC	540	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 31 36 22 20 77 69 64 74 68 3d 22 31 33 36 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 33 36 20 31 34 2e 36 22 3e 3c 64 65 66 73 3e 3c 63 6c 69 70 50 61 74 68 20 69 64 3d 22 61 22 3e 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 64 3d 22 4d 35 33 2e 37 36 20 30 48 31 33 36 76 31 34 2e 36 48 35 33 2e 37 36 7a 22 2f 3e 3c 2f 63 6c 69 70 50 61 74 68 3e 3c 2f 64 65 66 73 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 32 2e 33 56 35 2e 35 39 68 32 2e 32 37 61 32 2e 36 32 20 32 2e 36 32 20 30 20 30 31 31 2e 32 39 2e 32 38 20 31 2e 38 33 20 31 2e 38 33 20 Data Ascii: <svg height="16" width="136" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 136 14.6"><defs><clipPath id="a"><path fill="none" d="M53.76 0H136v14.6H53.76z"/></clipPath></defs><path d="M0 12.3V5.59h2.27a2.62 2.62 0 011.29.28 1.83 1.83
2024-04-24 12:22:27 UTC	1369	IN	Data Raw: 32 2e 32 39 20 30 20 30 31 2d 2e 38 2d 2e 39 31 20 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 38 2d 31 2e 33 36 20 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 2e 32 38 2d 31 2e 33 37 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 2d 31 2e 32 34 20 32 2e 31 34 20 32 2e 31 34 20 30 20 30 31 32 20 31 2e 32 34 41 33 2e 30 37 20 33 2e 30 37 20 30 20 30 31 31 30 20 39 2e 38 31 61 33 2e 30 36 20 33 2e 30 36 20 30 20 30 31 2d 2e 32 39 20 31 2e 33 36 20 32 2e 31 31 20 32 2e 31 31 20 30 20 30 31 2d 32 20 31 2e 32 33 7a 6d 30 2d 2e 36 39 61 31 2e 33 31 20 31 2e 33 31 20 30 20 30 30 2e 38 35 2d 2e 32 37 20 31 2e 36 20 31 2e 36 20 30 20 30 30 2e 35 2d 2e 36 39 20 32 2e 39 20 32 2e 39 20 30 20 30 30 2e 31 36 2d 2e 39 34 20 32 2e 38 35 20 32 2e 38 35 20 30 20 30 Data Ascii: 2.29 0 01-.8-.91 3.06 3.06 0 01-.28-1.36 3.07 3.07 0 01.28-1.37 2.14 2.14 0 012-1.24 2.14 2.14 0 012 1.24A3.07 3.07 0 0110 9.81a3.06 3.06 0 01-.29 1.36 2.11 2.11 0 01-2 1.23zm0-.69a1.31 1.31 0 00.85-.27 1.6 1.6 0 00.5-.69 2.9 2.9 0 00.16-.94 2.85 2.85 0 0
2024-04-24 12:22:27 UTC	1369	IN	Data Raw: 20 30 31 2e 38 2d 2e 39 32 41 32 2e 30 35 20 32 2e 30 35 20 30 20 30 31 32 39 20 37 2e 32 61 32 2e 35 34 20 32 2e 35 34 20 30 20 30 31 2e 37 37 2e 31 33 20 31 2e 39 20 31 2e 39 20 30 20 30 31 2e 37 2e 34 33 20 31 2e 39 34 20 31 2e 39 34 20 30 20 30 31 2e 35 2e 37 37 20 33 2e 31 39 20 33 2e 31 39 20 30 20 30 31 2e 31 39 20 31 2e 31 39 56 31 30 68 2d 33 2e 38 35 76 2d 2e 36 32 68 33 2e 30 39 61 31 2e 35 35 20 31 2e 35 35 20 30 20 30 30 2d 2e 31 37 2d 2e 37 36 20 31 2e 32 38 20 31 2e 32 38 20 30 20 30 30 2d 2e 34 37 2d 2e 35 33 41 31 2e 33 35 20 31 2e 33 35 20 30 20 30 30 32 39 20 37 2e 39 61 31 2e 33 39 20 31 2e 33 39 20 30 20 30 30 2d 2e 38 2e 32 32 20 31 2e 37 33 20 31 2e 37 33 20 30 20 30 30 2d 2e 35 32 2e 35 39 20 31 2e 37 38 20 31 2e 37 38 20 30 20 30 Data Ascii: 01.8-.92A2.05 2.05 0 0129 7.2a2.54 2.54 0 01.77.13 1.9 1.9 0 01.7.43 1.94 1.94 0 01.5.77 3.19 3.19 0 01.19 1.19V10h-3.85v-.62h3.09a1.55 1.55 0 00-.17-.76 1.28 1.28 0 00-.47-.53A1.35 1.35 0 0029 7.9a1.39 1.39 0 00-.8.22 1.73 1.73 0 00-.52.59 1.78 1.78 0 0
2024-04-24 12:22:27 UTC	1369	IN	Data Raw: 2e 35 39 20 30 20 31 2e 34 36 20 31 2e 34 36 20 30 20 30 30 2e 34 39 2d 2e 36 39 20 32 2e 35 35 20 32 2e 35 35 20 30 20 30 30 2e 31 37 2d 31 20 32 2e 35 39 20 32 2e 35 39 20 30 20 30 30 2d 2e 31 36 2d 2e 39 35 20 31 2e 34 35 20 31 2e 34 35 20 30 20 30 30 2d 2e 34 39 2d 2e 36 38 41 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 34 33 20 37 2e 39 61 31 2e 33 36 20 31 2e 33 36 20 30 20 30 30 2d 2e 37 39 2e 32 33 20 31 2e 34 37 20 31 2e 34 37 20 30 20 30 30 2d 2e 34 38 2e 36 37 20 32 2e 36 38 20 32 2e 36 38 20 30 20 30 30 2d 2e 31 38 2e 39 38 7a 6d 35 2e 31 38 20 34 2e 34 61 31 2e 39 20 31 2e 39 20 30 20 30 31 2d 2e 33 35 20 30 6c 2d 2e 32 31 2d 2e 30 36 2e 32 2d 2e 36 38 61 31 2e 32 39 20 31 2e 32 39 20 30 20 30 30 2e 35 2e 30 35 2e 35 36 2e 35 36 20 30 20 30 30 Data Ascii: .59 0 1.46 1.46 0 00.49-.69 2.55 2.55 0 00.17-1 2.59 2.59 0 00-.16-.95 1.45 1.45 0 00-.49-.68A1.29 1.29 0 0043 7.9a1.36 1.36 0 00-.79.23 1.47 1.47 0 00-.48.67 2.68 2.68 0 00-.18.98zm5.18 4.4a1.9 1.9 0 01-.35 0l-.21-.06.2-.68a1.29 1.29 0 00.5.05.56.56 0 00
2024-04-24 12:22:27 UTC	547	IN	Data Raw: 34 2e 34 36 20 38 33 2e 35 34 20 34 2e 34 36 7a 4d 31 30 35 2e 35 38 20 33 76 32 2e 33 35 63 2d 2e 37 38 20 30 2d 31 2e 30 39 2d 2e 30 37 2d 31 2e 33 36 2d 2e 30 37 2d 31 2e 36 35 20 30 2d 32 2e 37 31 2e 37 32 2d 33 2e 30 36 20 32 2e 37 38 61 37 2e 38 35 20 37 2e 38 35 20 30 20 30 30 2d 2e 30 39 20 31 2e 31 39 76 35 2e 31 34 68 2d 32 2e 33 33 56 33 68 32 2e 31 32 76 33 2e 35 38 61 31 34 2e 39 20 31 34 2e 39 20 30 20 30 31 2e 37 39 2d 32 41 32 2e 35 39 20 32 2e 35 39 20 30 20 30 31 31 30 34 20 33 7a 6d 32 37 2e 34 39 20 38 2e 38 35 63 30 20 2e 37 35 2e 32 37 20 31 20 31 20 31 68 31 2e 39 31 76 31 2e 34 39 68 2d 32 2e 37 32 61 32 2e 32 36 20 32 2e 32 36 20 30 20 30 31 2d 32 2e 34 38 2d 32 2e 34 39 56 34 2e 36 33 68 2d 32 2e 32 37 56 33 2e 33 31 68 31 2e 31 Data Ascii: 4.46 83.54 4.46zM105.58 3v2.35c-.78 0-1.09-.07-1.36-.07-1.65 0-2.71.72-3.06 2.78a7.85 7.85 0 00-.09 1.19v5.14h-2.33V3h2.12v3.58a14.9 14.9 0 01.79-2A2.59 2.59 0 01104 3zm27.49 8.85c0 .75.27 1 1 1h1.91v1.49h-2.72a2.26 2.26 0 01-2.48-2.49V4.63h-2.27V3.31h1.1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49927	104.18.36.155	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	636	OUT	GET /rum?cm_dsp_id=18&expiry=1729772543&external_user_id=1a03fa25-3ce4-4427-a18e-6e0714981f28 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	1204	IN	HTTP/1.1 302 Found Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Length: 0 Connection: close Location: /rum?cm_dsp_id=18&expiry=1729772543&external_user_id=1a03fa25-3ce4-4427-a18e-6e0714981f28&C=1 CF-Ray: 87960f13ef140ad5-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij5g9HM7SUAAC0sAUMKngAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:22:27 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPS=005; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:22:27 GMT; Max-Age=7776000; Secure; SameSite=None Set-Cookie: CMPRO=005; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:22:27 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IVsQY%2F6vadiPhleJouLhKOjoUAKL73VTABa6Q5%2BIgeMH%2BvqHZxXx2%2BfrVf9AQu0mFelFQ79kUdd1a18Ur%2BUPKJzBuCWzUwLJ%2F1fHdwGE1autAV2HBxfhRoLlgrBronx7YVt1kHnGyoLHyw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49926	18.154.144.27	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:26 UTC	551	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961343\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:27 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Wed, 24 Apr 2024 12:22:27 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: fb9059a4-0b75-4893-89cb-f1c66f22e30e Vary: Origin X-Cache: Error from cloudfront Via: 1.1 7ca6d2d626b960c9f2445a99b73406be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: _LpVxGNdm0Ewm0nskxj9EcZkTLCAtQNkSVZ72e89_4Xm-rL904Mz9Q==
2024-04-24 12:22:27 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49932	35.201.112.186	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	366	OUT	GET /s/settings/12BP4E/v1/web HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	944	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqaeZSn_fY1pXXEM9tx58k7lW24xjyI_W0fT9jRcAMoDMwvdaJatsAk0kZ85PuBst3RLCw-KCL-6A x-goog-generation: 1713959408854533 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 1328 Content-Encoding: gzip x-goog-hash: crc32c=VNHg+A== x-goog-hash: md5=3CKM+hf7KfCb+ZavlLpY/w== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 1328 Access-Control-Allow-Origin: * Server: UploadServer Access-Control-Expose-Headers: Content-Length, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Date: Wed, 24 Apr 2024 12:09:35 GMT Expires: Wed, 24 Apr 2024 12:24:35 GMT Cache-Control: public,max-age=900,no-transform Age: 772 Last-Modified: Wed, 24 Apr 2024 12:05:08 GMT ETag: "dc228cfa17fb29f09bf996af94ba58ff" Content-Type: application/json Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:27 UTC	311	IN	Data Raw: 1f 8b 08 00 00 00 00 00 00 ff c4 57 4d 6f 1b 3d 0e be ef af 58 28 97 be c1 28 c8 47 77 51 18 c8 21 4d 0b 64 d1 76 9b 6d 52 ec a1 71 0b 5a a2 67 54 6b a4 59 8a e3 0f 04 fe ef 0b 69 c6 ce d8 19 27 f6 62 81 f7 64 0f c9 47 a4 c8 47 14 f5 28 ae 7e c3 fc df c0 aa c0 20 06 3f 86 99 78 8f 05 4c 8d a7 3b 93 3b b0 77 c8 6c 5c 1e c4 e0 51 7c b4 58 a2 e3 f7 d6 ab 49 34 7e 14 77 68 51 b1 27 31 10 c6 55 35 1f 55 e4 4b 7f ed 35 fe 00 32 20 35 06 45 66 84 7a b4 b8 7c 10 49 a9 bc c6 8f 44 9e 1e c4 b0 31 b2 30 42 7b f9 20 6e a3 fa af 51 1f 55 0e 4a 5c 61 ae 5b 19 2f aa 28 63 9c f3 83 18 8a 4c 34 31 c6 58 ce b3 b3 e1 72 b8 cc c4 07 5f 82 71 29 de af ce 2e 3e 39 3f 73 6b d9 18 6c c0 65 b6 c7 4e 1a 5f 15 84 30 f3 a4 a3 af 6b ef 02 3a 6e 17 c9 c4 fd a2 42 31 38 5b 66 bb c0 85 Data Ascii: WMo=X((GwQ!MdvmRqZgTkYi'bdGG(~ ?xL;;wl\Q\|XI4~whQ'1U5UK52 5Efz\|ID10B{ nQUJ\a[/(cL41Xr_q).>9?skleN_0k:nB18[f
2024-04-24 12:22:27 UTC	1017	IN	Data Raw: b2 d3 e7 f9 0e c0 be 0e fb f0 b5 7b d1 65 5f 6a 1a 48 72 fa 9a c7 3e 78 61 0e 4c eb 28 b2 f0 20 04 a1 f2 a4 f7 8a 70 1b 5e 70 69 f7 2e 80 35 6e ff d4 05 5e d8 dd 1b df b6 1e 41 78 c9 78 b8 3e a3 1f 70 8c 44 a8 db ee d4 4a 3f 21 56 41 0c 5c 6d ed 5a f6 d4 c5 36 3c 1d 4d c1 1a 0d 6c bc 93 b1 73 48 0b 81 7f c5 f6 22 b6 53 6b 5c b2 dd 96 1f 6d 36 ae 1b e3 78 db e4 4f e8 7e 31 47 5f 29 ef 36 e8 2b 66 32 a3 9a 31 35 36 6b 02 a7 64 dc 03 e5 c8 62 70 9a 89 7b c8 c5 40 1c 8b 4c fc 33 26 60 20 02 29 91 89 2b 15 d3 d3 12 e0 99 b9 19 53 34 ee 62 b4 ef c2 4e 7b 61 cf 51 af 7a fa df 1c 75 b6 a3 81 41 4e e5 d8 53 29 c7 06 ad de 05 3e eb 01 83 e5 43 cc 55 81 6a 82 07 79 88 e1 1d 62 5f 10 8e 0f b1 af 2c 28 2c bc d5 48 87 c0 36 4b b3 8f 79 c0 83 52 b5 ea 0d 2b c0 c5 6b 00 Data Ascii: {e_jHr>xaL( p^pi.5n^Axx>pDJ?!VA\mZ6<MlsH"Sk\m6xO~1G_)6+f2156kdbp{@L3&` )+S4bN{aQzuANS)>CUjyb_,(,H6KyR+k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49931	18.239.199.12	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	437	OUT	GET /bg9s?x-amz-cf-id=CNkC30MmCEymIBRSpXksEuNedl3gfP5wLvbEDeCgK34V2MKFKeuLHQ==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 55e9464473b96a5fed56600591202122.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: QSKxFDGSYcBSReIg8Cyod2BvBq7_9803KkIRchJm037N81VUv_z5AQ== Age: 13132 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49930	142.250.101.155	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	655	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-39550292-1&cid=866850028.1713961341&jid=1575686851&gjid=673361439&_gid=1110259529.1713961342&_u=YCDACEAABAAAACgAI~&z=490274514 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:22:27 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Wed, 24 Apr 2024 12:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:27 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49900	142.250.101.157	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	849	OUT	POST /g/collect?v=2&tid=G-1TZ7S9D6BQ&cid=866850028.1713961341&gtm=45je44m0v879027428z8856130670za200&aip=1&dma=0&gcs=G111&gcd=13v3v3v3t5&npa=0 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:22:27 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.docusign.com Date: Wed, 24 Apr 2024 12:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49934	104.254.151.60	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	869	OUT	GET /bounce?%2Fgetuid%3Fhttps%253a%252f%252fattr.ml-api.io%252f%253fdomain%253ddocusign.com%2526pId%253d%2524UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=8ADLn8EGw6GW4D1S0bAIQNfUY5ardES5dFOHze22sbnKQUwRzaiHDBhnoavoBaSrCMrAwilfnx79BSmAd0CkVePg1I20G1YF7Cc4xbpZjDk.; receive-cookie-deprecation=1; uuid2=402488676481365330
2024-04-24 12:22:27 UTC	1432	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://attr.ml-api.io/?domain=docusign.com&pId=402488676481365330 AN-X-Request-Uuid: a94d7bc3-1398-4636-9431-ed2154648bcf Set-Cookie: XANDR_PANID=8ADLn8EGw6GW4D1S0bAIQNfUY5ardES5dFOHze22sbnKQUwRzaiHDBhnoavoBaSrCMrAwilfnx79BSmAd0CkVePg1I20G1YF7Cc4xbpZjDk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:27 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 12:22:27 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=402488676481365330; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:27 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 899.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49928	34.233.102.171	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	592	OUT	GET /sync?UIDM=1a03fa25-3ce4-4427-a18e-6e0714981f28 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	513	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tvid=812c99eb820a4c34b6312a21913d16cd; Domain=.tremorhub.com; Expires=Thu, 24-Apr-2025 18:10:47 GMT; Path=/; Secure; SameSite=None Set-Cookie: tv_UIDM=1a03fa25-3ce4-4427-a18e-6e0714981f28; Domain=.tremorhub.com; Expires=Fri, 24-Apr-2026 23:59:07 GMT; Path=/; Secure; SameSite=None
2024-04-24 12:22:27 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-24 12:22:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49936	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	654	OUT	GET /core/assets/js/runtime~main.58de437c.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 6141 Connection: close Server: istio-envoy Date: Thu, 04 Apr 2024 19:46:22 GMT Last-Modified: Thu, 04 Apr 2024 18:49:25 GMT ETag: "44c56ae0f8bd42ad553b7316b388ea1e" x-amz-server-side-encryption: AES256 x-amz-version-id: E0oHslzwcAyBCcPsjBe7YnkYdzCoH2Y4 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 60a739d966f0e7be8035a21cab92a320.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 1qgtxSeq-NvYUI9csQKe2W6oR0_02L7Va4mq_3wmgM4LSUI7BXC_8A== Age: 1701365
2024-04-24 12:22:27 UTC	6141	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 77 65 62 70 61 63 6b 4a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 72 2c 64 2c 74 3d 63 5b 30 5d 2c 6e 3d 63 5b 31 5d 2c 5f 3d 63 5b 32 5d 2c 75 3d 30 2c 69 3d 5b 5d 3b 75 3c 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 64 3d 74 5b 75 5d 2c 61 5b 64 5d 26 26 69 2e 70 75 73 68 28 61 5b 64 5d 5b 30 5d 29 2c 61 5b 64 5d 3d 30 3b 66 6f 72 28 72 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 72 29 26 26 28 65 5b 72 5d 3d 6e 5b 72 5d 29 3b 66 6f 72 28 6f 26 26 6f 28 63 29 3b 69 2e 6c 65 6e 67 74 68 3b 29 69 2e 73 68 69 66 74 28 29 28 29 3b 72 65 74 75 72 6e 20 66 2e 70 75 73 68 2e 61 70 Data Ascii: !function(e){function webpackJsonpCallback(c){for(var r,d,t=c[0],n=c[1],_=c[2],u=0,i=[];u<t.length;u++)d=t[u],a[d]&&i.push(a[d][0]),a[d]=0;for(r in n)Object.prototype.hasOwnProperty.call(n,r)&&(e[r]=n[r]);for(o&&o(c);i.length;)i.shift()();return f.push.ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49938	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	649	OUT	GET /core/assets/js/9.4a3e9801.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 35552 Connection: close Server: istio-envoy Date: Fri, 12 May 2023 13:10:24 GMT Last-Modified: Thu, 11 May 2023 20:21:37 GMT ETag: "c6f58dd3d60f07462254b842dd4f9ca1" x-amz-server-side-encryption: AES256 x-amz-version-id: oUY5zUVrutKMtDcKGi_h.0DrJfE7FjbF Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8c0cf74a8ac4637a28b8ef40ac35c710.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: gSMzLRtsI0s3WT6r5IK-Wsf-lOebnfkzMiN-Vu3p2AM6HK55zxEseg== Age: 30064323
2024-04-24 12:22:27 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 5d 2c 7b 22 2b 4d 4c 78 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 28 22 48 41 75 4d 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 69 66 28 72 28 74 29 2c 76 6f 69 64 20 30 3d 3d 3d 65 29 72 65 74 75 72 6e 20 74 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 29 7d 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 65 2c 6e 29 7d 3b 63 61 73 65 20 32 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[9],{"+MLx":function(t,e,n){var r=n("HAuM");t.exports=function(t,e,n){if(r(t),void 0===e)return t;switch(n){case 0:return function(){return t.call(e)};case 1:return function(n){return t.call(e,n)};case 2
2024-04-24 12:22:27 UTC	16384	IN	Data Raw: 2c 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 2c 69 74 2e 64 65 6c 65 74 65 50 72 6f 70 65 72 74 79 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 69 74 2e 73 65 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 2c 65 2c 76 6f 69 64 20 30 29 7d 2c 69 74 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6f 74 2e 73 65 74 2e 63 61 6c 6c 28 74 68 69 73 2c 74 5b 30 5d 2c 65 2c 6e 2c 74 5b 30 5d 29 7d 3b 76 61 72 20 75 74 3d 6e 65 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 76 61 72 20 72 3d 74 68 69 73 3b 74 68 69 73 2e 67 3d 48 2c 74 68 69 73 2e 46 3d 21 30 2c 74 68 69 73 2e 70 72 6f 64 75 63 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 69 29 7b Data Ascii: ,e.apply(this,arguments)}}),it.deleteProperty=function(t,e){return it.set.call(this,t,e,void 0)},it.set=function(t,e,n){return ot.set.call(this,t[0],e,n,t[0])};var ut=new(function(){function e(e){var r=this;this.g=H,this.F=!0,this.produce=function(e,o,i){
2024-04-24 12:22:27 UTC	2695	IN	Data Raw: 72 74 69 65 73 3a 75 74 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 3a 66 74 7d 29 2c 72 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 21 63 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 4e 61 6d 65 73 3a 61 74 2c 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 73 74 7d 29 2c 72 28 7b 74 61 72 67 65 74 3a 22 4f 62 6a 65 63 74 22 2c 73 74 61 74 3a 21 30 2c 66 6f 72 63 65 64 3a 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 2e 66 28 31 29 7d 29 7d 2c 7b 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 3a 66 75 6e 63 74 69 6f 6e 20 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 74 29 7b 72 65 74 75 72 6e 20 77 2e 66 28 76 28 Data Ascii: rties:ut,getOwnPropertyDescriptor:ft}),r({target:"Object",stat:!0,forced:!c},{getOwnPropertyNames:at,getOwnPropertySymbols:st}),r({target:"Object",stat:!0,forced:f(function(){w.f(1)})},{getOwnPropertySymbols:function getOwnPropertySymbols(t){return w.f(v(
2024-04-24 12:22:27 UTC	89	IN	Data Raw: 6e 28 22 32 6f 52 6f 22 29 2c 6f 3d 6e 28 22 58 32 55 2b 22 29 3b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 72 79 7b 6f 28 72 2c 74 2c 65 29 7d 63 61 74 63 68 28 6e 29 7b 72 5b 74 5d 3d 65 7d 72 65 74 75 72 6e 20 65 7d 7d 7d 5d 29 3b Data Ascii: n("2oRo"),o=n("X2U+");t.exports=function(t,e){try{o(r,t,e)}catch(n){r[t]=e}return e}}}]);

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49937	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	661	OUT	GET /core/assets/js/main~493df0b3.9e1d5232.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://js.driftt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 7215 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:31 GMT Last-Modified: Fri, 08 Mar 2024 21:52:28 GMT ETag: "73b9f4a9eb62a2176090bf9c21a639a7" x-amz-server-side-encryption: AES256 x-amz-version-id: rlUjojg2gTbtwdGP_pdjObQJE7FQKLQJ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 21 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 60a739d966f0e7be8035a21cab92a320.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: KzBm_04lJ_eq5SjCHXQxHNtCXKFEfShThGt9XR94dMVoc-ceRgVWJQ== Age: 4024735
2024-04-24 12:22:27 UTC	7215	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 5d 2c 7b 22 2f 37 51 41 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 45 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 45 2e 72 28 69 29 2c 22 70 72 6f 64 75 63 74 69 6f 6e 22 21 3d 3d 45 28 22 4c 65 4a 30 22 29 2e 61 2e 45 4e 56 26 26 45 28 22 43 70 34 31 22 29 3b 76 61 72 20 41 3d 45 28 22 39 45 57 48 22 29 2c 5f 3d 45 28 22 41 44 47 43 22 29 3b 4f 62 6a 65 63 74 28 5f 2e 62 29 28 29 26 26 4f 62 6a 65 63 74 28 41 2e 62 29 28 29 3b 21 66 75 6e 63 74 69 6f 6e 20 70 6f 6c 79 66 69 6c 6c 4b 69 63 6b 6f 66 66 28 74 29 7b 74 72 79 7b 5b 31 5d 2e 69 6e 63 6c 75 64 65 73 28 31 29 26 26 74 28 29 7d 63 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[5],{"/7QA":function(t,i,E){"use strict";E.r(i),"production"!==E("LeJ0").a.ENV&&E("Cp41");var A=E("9EWH"),_=E("ADGC");Object(_.b)()&&Object(A.b)();!function polyfillKickoff(t){try{[1].includes(1)&&t()}ca

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49939	104.244.42.69	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	667	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=5eca3ebf-b54e-4636-a6d2-13859a89dbb0&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=2c5cb771-da73-4f98-91bf-03da634f79df&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a46bf145-3aaa-4094-971d-11456caaeb47
2024-04-24 12:22:27 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:27 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 1727fb7ffbf11282 strict-transport-security: max-age=0 x-response-time: 6 x-connection-hash: 2e737d5e5a68abe23af5179a00ff17b51b0b4226e459ab10344cab284e61e06a connection: close
2024-04-24 12:22:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49940	74.125.137.103	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	581	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-39550292-1&cid=866850028.1713961341&jid=1575686851&_u=YCDACEAABAAAACgAI~&z=1853450934 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:27 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49941	35.244.154.8	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	688	OUT	GET /1000.gif?memo=CI6tHBoNCIPzo7EGEgUI6AcQAEIASgA HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=aNwicniGVqWD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; pxrc=CAA=
2024-04-24 12:22:27 UTC	735	IN	HTTP/1.1 307 Temporary Redirect Cache-Control: no-cache, no-store Location: https://segments.company-target.com/log?vendor=liveramp&user_id=Xc1297oK2PbHebak6yhb9aSDTXntf_qExefZWv5WZyr9HktTA P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=aNwicniGVqWD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:22:27 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:22:27 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49942	104.244.42.195	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	804	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=5eca3ebf-b54e-4636-a6d2-13859a89dbb0&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=2c5cb771-da73-4f98-91bf-03da634f79df&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171396134691071718; guest_id_ads=v1%3A171396134691071718; personalization_id="v1_O74RdUWbGOMZLTZGhxxEVA=="; guest_id=v1%3A171396134691071718
2024-04-24 12:22:27 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:26 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 8113304293da39c9 strict-transport-security: max-age=631138519 x-response-time: 8 x-connection-hash: f6d52aff358ff79827f63dc74dee5d493e10dd06879a2bafe316871761ebb9ef connection: close
2024-04-24 12:22:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49944	104.18.36.155	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	700	OUT	GET /rum?cm_dsp_id=18&expiry=1729772543&external_user_id=1a03fa25-3ce4-4427-a18e-6e0714981f28&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zij5g9HM7SUAAC0sAUMKngAA; CMPS=005; CMPRO=005
2024-04-24 12:22:27 UTC	987	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:27 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87960f1848b069e3-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij5g9HM7SUAAC0sAUMKngAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:22:27 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=005; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:22:27 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FXWR%2FZ5EgFNdhrxgIkFEoyoQ4tVC7yAXiH5geJp7jACuiryGspPJ72ck1s7M9FcDSsBMMsdTin1B6v5J8ObPvdcZMw%2BroedmnQrety50QDXgPf2T%2Bw73LK%2Buk59S%2BxtMxNZzwfkmijQdUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 12:22:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49945	142.250.141.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	1407	OUT	POST /g/collect?v=2&tid=G-1TZ7S9D6BQ&gtm=45je44m0v879027428z8856130670za200&_p=1713961329734&_gaz=1&gcs=G111&gcd=13v3v3v3t5&npa=0&dma=0&gdid=dYWJhMj&cid=866850028.1713961341&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=1&dr=&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&sid=1713961341&sct=1&seg=0&dt=Privacy%20Notice%20%7C%20DocuSign&en=page_view&_fv=1&_nsi=1&_ss=1&ep.gtm_setting=407%20%7C%20GTM-NXX2M47%20%7C%20&ep.hostname=www.docusign.com&ep.page_name=privacy%20policy&ep.page_section=legal&up.client_id=false&up.u_uuid=e726a659-b15e-4860-84f0-a4f96f541646&tfd=14177 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:28 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.docusign.com Date: Wed, 24 Apr 2024 12:22:27 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49946	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	885	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=1&ClientTime=1713961347077&PageStart=1713961346738&PrevBundleTime=0&LastActivity=131&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 66390 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:27 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 89 92 db 46 b2 28 fa 2b 38 ad 70 58 6d 93 14 76 12 dd 33 7e 47 23 db cf 3e 23 7b 26 c6 1e 9f 45 76 38 40 12 24 a1 06 17 01 60 2f 62 e8 fc da fd a4 f7 0b 2f 6b 03 6a c5 42 b2 65 8d ae a4 19 0b ac 25 2b 2b 2b 2b 2b 33 ab 2a eb 70 f1 53 f2 e6 e2 ca 19 5c fc e7 2a d9 e0 8f 6f 6e cb e2 e2 ea d5 e1 e2 af e9 66 7e 71 e5 06 83 8b e7 f9 12 25 5d ac ca 72 57 5c 3d 7b 76 77 77 37 9a 6f 67 fb 22 5d 6e 46 b3 ed fa d9 2e 4f 6f e3 d9 c3 c5 e0 e2 4f ff f6 f5 df 5e fc fc df 7f ff c6 5a 95 eb ec 2b 48 e9 50 e9 e2 b7 aa fd 77 03 d6 f0 c4 89 26 55 d3 8b 38 2b 92 81 a3 2f d7 0b c1 4d 7c 9b 2e e3 32 d1 b6 c9 b5 78 31 4f 16 f1 3e 2b 2f 06 9b 7d 96 0d 2e e6 db 35 fd c4 b8 68 31 09 eb da 49 e2 d8 b6 ed 2c e2 c9 64 1c 4e 3d 57 db 5c 50 37 e7 f8 Data Ascii: F(+8pXmv3~G#>#{&Ev8@$`/b/kjBe%+++++3pS\onf~q%]rW\={vww7og"]nF.OoO^Z+HPw&U8+/M\|.2x1O>+/}.5h1I,dN=W\P7
2024-04-24 12:22:27 UTC	16384	OUT	Data Raw: c6 67 61 5b 3a df 5e 4f 21 01 dd 08 97 3a 34 c4 4b 44 75 33 a5 2f fe 5f c6 87 7a 4f b2 85 e1 f0 2f d4 7a b6 b9 69 3f 57 43 0b ea 9d 4b 4c ae 78 b5 5c 91 ac c3 3c d9 25 38 94 08 fd 12 67 ab 78 da 23 54 6c 0c 43 4f 34 e8 89 93 c8 20 a6 11 5e 62 48 42 e1 6c 8a 8e c7 3a 40 a1 03 ca 54 d1 51 68 5e 45 49 3c ed 95 67 d8 1e e9 7e 88 40 de 82 10 0f 63 88 dd 6a 7c 75 48 bf 69 26 e0 5b 3d 64 c5 1d 1a 53 62 02 37 84 3f 14 77 0d f1 09 b6 fa 69 0c ea 67 6d 0d 9d ad 00 a1 6b d5 15 90 71 96 ac a0 5b f5 e1 92 b9 8f fe 52 fc b0 65 9c 96 80 d9 4c 77 8e 04 cf a5 61 01 53 67 b6 aa d8 82 79 6a 1d d1 53 2b 5a 96 81 fc a8 47 fd e4 16 3b d8 10 c8 fb 14 4e ad 7e f1 27 bc 1a 46 82 3f da 26 45 2e d7 68 51 39 b3 29 1b 15 b9 83 f4 02 dd b5 b2 2f 25 78 6a c7 5a 3f b8 8b ee 33 f0 9b 0c Data Ascii: ga[:^O!:4KDu3/_zO/zi?WCKLx\<%8gx#TlCO4 ^bHBl:@TQh^EI<g~@cj\|uHi&[=dSb7?wigmkq[ReLwaSgyjS+ZG;N~'F?&E.hQ9)/%xjZ?3
2024-04-24 12:22:27 UTC	16384	OUT	Data Raw: a7 0c 15 b4 e9 b7 f1 d3 e4 3a 08 af 02 ff c3 0b d4 1e 97 a1 17 a2 f7 2e e0 ab 71 f8 6d ac 7f c2 2f 68 63 7e 7a e1 75 78 15 3a bf 83 d0 fa d8 0b 9f 16 4e 5f 98 92 2d f9 b0 0a fc 89 1f e0 4b 4c c9 96 a2 d3 e9 89 b4 f2 29 de ef db fc 0a 7b ba c2 14 14 94 56 26 4e 63 51 b8 db 16 dc 66 9b 6e eb 77 16 76 79 2e 6e 05 e4 70 f9 fc 05 ee fe 19 b2 24 70 82 80 55 05 e7 fc 1d f6 27 4e 85 c6 9d e1 d2 8f de 86 76 e2 c5 33 34 9d 18 8a 52 77 de bc 5e 2c 2a 4c b1 89 0e 0a 25 ba 20 a0 83 dc 4d e5 ed a0 f3 69 d5 6d 9a 77 95 02 16 ce 66 0b bf 3b bc 19 e8 a2 40 35 94 d0 81 0c 27 57 bd 2f 67 5b f8 8d 66 1f 7a bb ae aa f9 e4 68 e4 fa 94 bc 5d 7c 78 5f 70 3c fb 7d 32 b6 e4 78 1c eb 68 13 21 30 14 c6 f4 3d e1 16 02 14 6e a6 82 52 86 dc 1e ae 83 ec ba bc b1 bd 1e 62 0c 5d 15 89 e5 Data Ascii: :.qm/hc~zux:N_-KL){V&NcQfnwvy.np$pU'Nv34Rw^,*L% Mimwf;@5'W/g[fzh]\|x_p<}2xh!0=nRb]
2024-04-24 12:22:27 UTC	16384	OUT	Data Raw: aa e6 47 d5 19 42 89 24 cc 55 1c a6 2e 35 67 b4 4c 36 04 21 74 05 66 e3 1f ae c0 7f a8 ac d5 d7 e3 df f6 7c b5 4e 81 e1 06 f1 bc e9 b0 7e d2 a3 d3 ab ba 5a 68 a1 fd e5 02 68 78 d5 3e 76 b0 bd aa 42 2a 59 cd 73 2c 73 91 b2 d6 5f 72 88 28 f5 f7 c8 c5 ea 81 97 67 99 97 85 be 17 fa b0 4b de 1d 86 01 cd 0f 8e f6 4d 03 83 53 1c 79 cf 09 15 3e a9 50 24 e3 7a dd 9f 6c 35 88 22 e6 f8 c3 34 f3 c9 63 03 4b b9 dc dc dc 8c d1 39 11 d3 dc 77 e3 04 50 60 3b 5e 54 d5 7c 5a ce de 1d 8d 8e 7e f3 d5 cb 97 af cf 5e 1d 59 fe 7c c1 d5 3a bb ee de d2 a3 62 74 b4 2e af 85 1d fb 8a 3c c4 e9 ae b2 a1 84 9a 87 c5 3a 4e 77 5e 15 6c 8a b4 5b 7c 08 f8 3d 87 1f 06 31 57 97 e1 7e cb 18 c4 f0 dc ab b2 b7 f1 ea c3 14 0d 7b ce fb ac ae df de bc b5 5f 87 71 16 9b cf b7 bb 55 e4 bf 35 9a e5 Data Ascii: GB$U.5gL6!tf\|N~Zhhx>vB*Ys,s_r(gKMSy>P$zl5"4cK9wP`;^T\|Z~^Y\|:bt.<:Nw^l[\|=1W~{_qU5
2024-04-24 12:22:27 UTC	854	OUT	Data Raw: c0 82 4f 9c c0 f4 89 df 07 06 2a 45 92 fa 5d 84 5d a8 bc ec 00 e8 c7 70 be 77 f7 eb 00 73 87 a2 a3 3a dd 0f 70 d7 07 ba 01 56 b2 57 23 8f 50 e3 40 80 d2 5d 10 b6 ed 3a d6 96 66 eb ee fe ac 6f b6 bb 27 fa 9a 3e f6 8b 1c b3 be 93 9d 2e 21 6d 87 61 2f 6f f8 75 f3 f8 35 6a d1 67 16 b5 68 cd 44 6d bd 1c b2 ad dd 0e 97 43 b6 0b 37 5f 63 1d ad 8d 75 74 0b e4 7d 8d 75 a4 cb 37 c4 3a fa f0 68 fd 1a eb e8 23 21 f6 0b 8d 75 f4 e1 11 f9 85 c5 3a fa f0 08 fc 22 63 1d 7d 78 34 7e 39 b1 8e 3e 20 ee be c6 3a fa 58 0c f1 6b ac a3 4f 4d b1 5f 42 ac a3 3b da b5 ff aa 58 47 77 35 bf ff 65 b1 8e ee 08 e8 a7 89 75 74 47 a0 ff c2 58 47 db 21 fd 1a b4 48 75 fe 97 05 2d da 8d 35 7f 96 e1 83 6e 4b f7 5f 7c f8 a0 3b 21 ee 8b 0f 1f 74 27 ec 7d 71 e1 83 6e 21 fa 7d e9 81 6d 76 db 25 Data Ascii: O*E]]pws:pVW#P@]:fo'>.!ma/ou5jghDmC7_cut}u7:h#!u:"c}x4~9> :XkOM_B;XGw5eutGXG!Hu-5nK_\|;!t'}qn!}mv%
2024-04-24 12:22:28 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:28 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:28 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 34 37 38 34 31 7d 0a Data Ascii: {"BundleTime":1713961347841}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49950	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:28 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:28 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:28 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49952	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:27 UTC	545	OUT	GET /rec/integrations?OrgId=12BP4E HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:28 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 66 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e Data Ascii: f4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 29 20 7b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 72 69 63 4e 61 6d 65 20 3d 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 5b 65 76 74 2e 6e 61 6d 65 5d 3b 0a 09 09 09 69 66 20 28 21 6d 65 74 72 69 63 4e 61 6d 65 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 09 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 53 74 61 74 75 73 20 3d 20 65 76 74 2e 6e 61 6d 65 20 3d 3d 3d 20 27 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 27 20 3f 20 27 46 41 49 4c 55 52 45 27 20 3a 20 27 53 55 43 43 45 53 53 27 3b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 61 64 61 74 61 20 3d 20 65 76 74 2e 61 74 74 72 69 62 75 74 65 73 20 7c 7c 20 7b 7d 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e 6e 61 6d 65 20 3d 20 6d 65 74 72 69 63 4e 61 6d 65 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e 76 Data Ascii: ) {const metricName = eventNameMap[evt.name];if (!metricName) {return;}const eventStatus = evt.name === 'dlo_client_error' ? 'FAILURE' : 'SUCCESS';const metadata = evt.attributes \|\| {};metadata.name = metricName;metadata.v
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 61 67 65 76 69 65 77 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 64 65 74 61 69 6c 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 64 65 74 61 69 6c 2e 61 63 74 69 6f 6e 46 69 65 6c 64 Data Ascii: me": "insert", "value": "pageview" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-detail-action", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.detail.actionField
2024-04-24 12:22:28 UTC	158	IN	Data Raw: 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 61 63 74 69 6f 6e 46 69 65 6c 64 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 0d 0a Data Ascii: r", "operators": [ { "name": "query", "select": "$.ecommerce.add.actionField" }, { "name": "insert", "value": "add" } ], "
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 70 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 70 72 6f 64 75 Data Ascii: 1000destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-product", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.add.products[0]" }, { "name": "insert", "value": "add_produ
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 70 72 6f 6d 6f 43 6c 69 63 6b 2e 70 72 6f 6d 6f 74 69 6f 6e 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 72 6f 6d 6f 5f 63 6c 69 63 6b 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 Data Ascii: { "name": "query", "select": "$.ecommerce.promoClick.promotions[0]" }, { "name": "insert", "value": "promo_click_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-checkout-action", "sour
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 61 6e 2d 6f 75 74 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 72 65 66 75 6e 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a Data Ascii: an-out" }, { "name": "insert", "value": "purchase_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-refund-action", "source": "dataLayer", "operators": [ { "name": "query", "select":
2024-04-24 12:22:28 UTC	339	IN	Data Raw: 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 76 69 65 77 5f 69 74 65 6d 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 Data Ascii: t": "$[?(event=view_item)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_item" } ], "destination": "FS.event" }, {
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 61 64 64 5f 74 6f 5f 63 61 72 74 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 74 6f 5f 63 61 72 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 Data Ascii: 1000rs": [ { "name": "query", "select": "$[?(event=add_to_cart)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "add_to_cart" } ],
2024-04-24 12:22:28 UTC	1255	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 73 65 6c 65 63 74 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 34 2d 65 2d 63 6f 6d 6d 65 72 63 Data Ascii: { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "select_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga4-e-commerc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49953	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	622	OUT	GET /core/assets/js/52.b1edaf4a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:28 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23897 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:56 GMT ETag: "cd29b9bc973e48a7fcd0ee7153bdf03b" x-amz-server-side-encryption: AES256 x-amz-version-id: OyA8wqfkqEQpanqTSF_SGXXRThRd.fZj Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 21 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1721ba89df2008145b68acb827b62daa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 6ENgmUxA8rMPGcQQa07c8Div402aVuJ8jWKEVJxHQbBHw0jBTd2Xfg== Age: 164055
2024-04-24 12:22:28 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 5d 2c 7b 6a 72 76 45 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6e 66 62 41 22 29 2c 61 3d 6e 28 22 63 67 66 43 22 29 2c 69 3d 6e 28 22 61 34 67 62 22 29 2c 6f 3d 6e 28 22 2b 6e 78 76 22 29 2c 63 3d 6e 28 22 75 73 69 5a 22 29 2c 73 3d 6e 28 22 6e 62 34 72 22 29 2c 75 3d 6e 28 22 32 6e 50 2b 22 29 2c 6c 3d 6e 28 22 41 48 51 66 22 29 2c 64 3d 6e 28 22 6a 69 59 50 22 29 2c 70 3d 6e 28 22 7a 67 64 4f 22 29 2c 66 3d 6e 28 22 62 54 7a 4e 22 29 2c 76 3d 6e 28 22 6a 6e 69 43 22 29 2c 5f 3d 6e 28 22 75 49 4a 53 22 29 2c 68 3d 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[52],{jrvE:function(e,t,n){"use strict";var r=n("nfbA"),a=n("cgfC"),i=n("a4gb"),o=n("+nxv"),c=n("usiZ"),s=n("nb4r"),u=n("2nP+"),l=n("AHQf"),d=n("jiYP"),p=n("zgdO"),f=n("bTzN"),v=n("jniC"),_=n("uIJS"),h=n
2024-04-24 12:22:28 UTC	7513	IN	Data Raw: 76 6f 69 64 20 30 2c 69 2c 21 30 29 3b 63 2e 6c 65 76 65 6c 3d 22 65 72 72 6f 72 22 2c 61 64 64 4d 65 63 68 61 6e 69 73 6d 41 6e 64 43 61 70 74 75 72 65 28 72 2c 6f 2c 63 2c 22 6f 6e 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 29 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 65 6e 68 61 6e 63 65 45 76 65 6e 74 57 69 74 68 49 6e 69 74 69 61 6c 46 72 61 6d 65 28 65 2c 74 2c 6e 2c 72 29 7b 76 61 72 20 61 3d 65 2e 65 78 63 65 70 74 69 6f 6e 3d 65 2e 65 78 63 65 70 74 69 6f 6e 7c 7c 7b 7d 2c 69 3d 61 2e 76 61 6c 75 65 73 3d 61 2e 76 61 6c 75 65 73 7c 7c 5b 5d 2c 6f 3d 69 5b 30 5d 3d 69 5b 30 5d 7c 7c 7b 7d 2c 63 3d 6f 2e 73 74 61 63 6b 74 72 61 63 65 3d 6f 2e 73 74 61 63 6b 74 72 61 63 65 7c 7c 7b 7d 2c 73 3d 63 2e 66 72 61 6d 65 73 3d 63 2e 66 72 61 Data Ascii: void 0,i,!0);c.level="error",addMechanismAndCapture(r,o,c,"onunhandledrejection")}})}function _enhanceEventWithInitialFrame(e,t,n,r){var a=e.exception=e.exception\|\|{},i=a.values=a.values\|\|[],o=i[0]=i[0]\|\|{},c=o.stacktrace=o.stacktrace\|\|{},s=c.frames=c.fra

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49954	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	622	OUT	GET /core/assets/js/35.d0f1ccda.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:28 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 36995 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 20:29:38 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "46fa5a7bc37a22544a908e4ad950309c" x-amz-server-side-encryption: AES256 x-amz-version-id: H1bQl1h1.aC7h5ymaxGJg5DjuaxXX2VC Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 42 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 97d9fba07ea9b58446de67c2f4b07146.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: P83vmoDBVzW2-80F_QMxDxuztzNUzKASYrC4J9xp4bMLA9eCeYaZbA== Age: 748369
2024-04-24 12:22:28 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 35 5d 2c 7b 22 2b 6e 78 76 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 7d 29 3b 76 61 72 20 72 3d 6e 28 22 7a 67 64 4f 22 29 2c 69 3d 6e 28 22 75 73 69 5a 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 41 6e 64 42 69 6e 64 28 65 2c 74 29 7b 21 30 3d 3d 3d 74 2e 64 65 62 75 67 26 26 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 53 45 4e 54 52 59 5f 44 45 42 55 47 5f 5f 7c 7c 5f 5f 53 45 4e 54 52 59 5f 44 45 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[35],{"+nxv":function(e,t,n){"use strict";n.d(t,"a",function(){return initAndBind});var r=n("zgdO"),i=n("usiZ");function initAndBind(e,t){!0===t.debug&&("undefined"===typeof __SENTRY_DEBUG__\|\|__SENTRY_DE
2024-04-24 12:22:28 UTC	16384	IN	Data Raw: 73 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 45 76 65 6e 74 46 69 6c 74 65 72 55 72 6c 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3b 74 72 79 7b 74 3d 65 2e 65 78 63 65 70 74 69 6f 6e 2e 76 61 6c 75 65 73 5b 30 5d 2e 73 74 61 63 6b 74 72 61 63 65 2e 66 72 61 6d 65 73 7d 63 61 74 63 68 28 6e 29 7b 7d 72 65 74 75 72 6e 20 74 3f 66 75 6e 63 74 69 6f 6e 20 5f 67 65 74 4c 61 73 74 56 61 6c 69 64 55 72 6c 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5b 5d 2c 74 3d 65 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 74 2d 2d 29 7b 76 61 72 20 6e 3d 65 5b 74 5d 3b 69 66 28 6e 26 26 22 3c 61 6e 6f 6e 79 6d Data Ascii: s}();function _getEventFilterUrl(e){try{var t;try{t=e.exception.values[0].stacktrace.frames}catch(n){}return t?function _getLastValidUrl(){for(var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:[],t=e.length-1;t>=0;t--){var n=e[t];if(n&&"<anonym
2024-04-24 12:22:28 UTC	5219	IN	Data Raw: 63 6b 2e 6c 65 6e 67 74 68 2d 31 5d 7d 7d 2c 7b 6b 65 79 3a 22 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 6c 61 73 74 45 76 65 6e 74 49 64 3d 74 26 26 74 2e 65 76 65 6e 74 5f 69 64 3f 74 2e 65 76 65 6e 74 5f 69 64 3a 4f 62 6a 65 63 74 28 61 2e 66 29 28 29 2c 69 3d 6e 65 77 20 45 72 72 6f 72 28 22 53 65 6e 74 72 79 20 73 79 6e 74 68 65 74 69 63 45 78 63 65 70 74 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 77 69 74 68 43 6c 69 65 6e 74 28 66 75 6e 63 74 69 6f 6e 28 73 2c 61 29 7b 73 2e 63 61 70 74 75 72 65 45 78 63 65 70 74 69 6f 6e 28 65 2c 4f 62 6a 65 63 74 28 72 2e 61 29 28 4f 62 6a 65 Data Ascii: ck.length-1]}},{key:"captureException",value:function captureException(e,t){var n=this._lastEventId=t&&t.event_id?t.event_id:Object(a.f)(),i=new Error("Sentry syntheticException");return this._withClient(function(s,a){s.captureException(e,Object(r.a)(Obje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49957	18.244.214.96	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	617	OUT	GET /?domain=docusign.com&pId=402488676481365330 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:28 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Wed, 24 Apr 2024 12:22:28 GMT Apigw-Requestid: WuvsvhYloAMEZ7w= X-Cache: Miss from cloudfront Via: 1.1 fdd1eada351372fafa8612323f367f28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: VVJZXVHk2YmHN1k4AwABlM7mO5yP7PgN2MSI-2yScy3_qtXBN2_C4Q==
2024-04-24 12:22:28 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49955	34.233.102.171	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	485	OUT	GET /sync?UIDM=1a03fa25-3ce4-4427-a18e-6e0714981f28 HTTP/1.1 Host: partners.tremorhub.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tvid=812c99eb820a4c34b6312a21913d16cd; tv_UIDM=1a03fa25-3ce4-4427-a18e-6e0714981f28
2024-04-24 12:22:28 UTC	369	IN	HTTP/1.1 200 Date: Wed, 24 Apr 2024 12:22:28 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: close Server: nginx P3P: CP='This is not a P3P policy. See https://telaria.com/privacy-policy/' Set-Cookie: tv_UIDM=1a03fa25-3ce4-4427-a18e-6e0714981f28; Domain=.tremorhub.com; Expires=Fri, 24-Apr-2026 23:59:08 GMT; Path=/; Secure; SameSite=None
2024-04-24 12:22:28 UTC	49	IN	Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 f0 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a Data Ascii: 2bGIF89a!,D;
2024-04-24 12:22:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49959	216.137.39.63	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	754	OUT	GET /log?vendor=liveramp&user_id=Xc1297oK2PbHebak6yhb9aSDTXntf_qExefZWv5WZyr9HktTA HTTP/1.1 Host: segments.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961343\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:28 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Wed, 24 Apr 2024 12:22:28 GMT X-Cache: Miss from cloudfront Via: 1.1 a4840d65c9b0feceec7a77f10199d82a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: DNAtkAxQoi77lj8jeLThkPDK384WxYxqxtakkKSZ1UqUWydgMOvWSQ==
2024-04-24 12:22:28 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49960	104.18.36.155	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	500	OUT	GET /rum?cm_dsp_id=18&expiry=1729772543&external_user_id=1a03fa25-3ce4-4427-a18e-6e0714981f28&C=1 HTTP/1.1 Host: dsum-sec.casalemedia.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: CMID=Zij5g9HM7SUAAC0sAUMKngAA; CMPS=005; CMPRO=005
2024-04-24 12:22:28 UTC	985	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:28 GMT Content-Type: image/gif Content-Length: 43 Connection: close CF-Ray: 87960f1dae440ad3-LAS CF-Cache-Status: DYNAMIC Cache-Control: no-cache Expires: 0 Set-Cookie: CMID=Zij5g9HM7SUAAC0sAUMKngAA; Path=/; Domain=casalemedia.com; Expires=Thu, 24 Apr 2025 12:22:28 GMT; Max-Age=31536000; Secure; SameSite=None P3p: policyref="/w3c/p3p.xml", CP="NOI DSP COR DEVa TAIa OUR BUS UNI" Pragma: no-cache Set-Cookie: CMPRO=005; Path=/; Domain=casalemedia.com; Expires=Tue, 23 Jul 2024 12:22:28 GMT; Max-Age=7776000; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XAmIwq7dFs7HADndLoF7D%2Fs1%2B5c4EW1PymULiZlLC0qW7OtmKIr6Ij2BWJCAHW1%2BlqQBnp5tBRPw8iCGKBrK%2F2BKmO6GRspGWibgWkelPNGNv0C8OTA81h0qCh94rpKSiSu0r7DTwO3wEA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2024-04-24 12:22:28 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49961	142.250.141.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	1690	OUT	POST /g/collect?v=2&tid=G-1TZ7S9D6BQ&gtm=45je44m0v879027428z8856130670za200&_p=1713961329734&gcs=G111&gcd=13v3v3v3t5&npa=0&dma=0&gdid=dYWJhMj&cid=866850028.1713961341&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&_s=2&dr=&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&sid=1713961341&sct=1&seg=0&dt=Privacy%20Notice%20%7C%20DocuSign&en=demandbase_loaded&ep.gtm_setting=407%20%7C%20GTM-NXX2M47%20%7C%20&ep.hostname=www.docusign.com&ep.page_name=privacy%20policy&ep.page_section=legal&ep.gtm_tag_name=GA4%20-%20demandbase_loaded&ep.hit_timestamp=2024-04-24T14%3A22%3A22.659%2B02%3A00&ep.d_industry=(Non-Company%20Visitor)&ep.d_revenuerange=(Non-Company%20Visitor)&ep.d_companyname=(Non-Company%20Visitor)&ep.d_subindustry=(Non-Company%20Visitor)&ep.d_employeerange=(Non-Company%20Visitor)&ep.d_domain=(Non-Company%20Visitor)&ep.d_audience=Bot&_et=1170&tfd=20484 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:28 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.docusign.com Date: Wed, 24 Apr 2024 12:22:28 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49962	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	629	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=1&ClientTime=1713961347077&PageStart=1713961346738&PrevBundleTime=0&LastActivity=131&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:28 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:29 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49963	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	637	OUT	GET /core/assets/css/8.ab226b4a.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 31339 Connection: close Server: istio-envoy Date: Fri, 26 Jan 2024 21:54:43 GMT Last-Modified: Fri, 26 Jan 2024 18:11:46 GMT ETag: "1e97f00f07b87f701d0bf06259f954e4" x-amz-server-side-encryption: AES256 x-amz-version-id: Iy50rWLvnka9klYMF5qa_8hsgho0e_uB Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 31 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b7b1a2eee8508a9a20c99d23ed8145ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: OjLrW8W7Z81yHWqzpZDMnZwBzqGp3fGm7hrnzbaMeSDb4EpeiKlihA== Age: 7655266
2024-04-24 12:22:29 UTC	16384	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 61 76 61 74 61 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 2d 6d 6f 7a 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 35 30 25 7d 2e 64 72 Data Ascii: .drift-widget-avatar{-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;overflow:hidden;border:2px solid #fff;height:56px;width:56px;-webkit-background-size:cover;-moz-background-size:cover;background-size:cover;background-position:50%}.dr
2024-04-24 12:22:29 UTC	14955	IN	Data Raw: 61 62 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6a 73 2e 64 72 69 66 74 74 2e 63 6f 6d 2f 64 65 70 6c 6f 79 2f 61 73 73 65 74 73 2f 73 74 61 74 69 63 2f 66 6f 6e 74 73 2f 42 6e 67 4d 55 58 5a 59 54 58 50 49 76 49 42 67 4a 4a 53 62 36 75 66 42 35 71 57 72 34 78 43 43 51 5f 6b 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 66 3f 3f 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 20 53 6c 61 62 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 Data Ascii: ab;font-style:normal;font-weight:700;font-display:swap;src:url(https://js.driftt.com/deploy/assets/static/fonts/BngMUXZYTXPIvIBgJJSb6ufB5qWr4xCCQ_k.woff2) format("woff2");unicode-range:U+1f??}@font-face{font-family:Roboto Slab;font-style:normal;font-weigh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49964	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:28 UTC	1047	OUT	GET /core/assets/css/16.22abfce0.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	939	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 24 Connection: close Server: istio-envoy Date: Mon, 23 Oct 2023 14:01:58 GMT Last-Modified: Wed, 18 Oct 2023 18:16:50 GMT ETag: "0c5dad92482d9a7c7c253510f5082465" x-amz-server-side-encryption: AES256 x-amz-version-id: NsgVFJi2zQu9z_p_0WDb9lCvgGl9N44V Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 X-Cache: Hit from cloudfront Via: 1.1 c40a611016f947a8da0f087fe5d2af84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: vM6TcDdwPI7coVEu8aeBNLkcondtMFpN2mrn0XdlC0rfKsftbLsgXA== Age: 15891631
2024-04-24 12:22:29 UTC	24	IN	Data Raw: 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: body{margin:0;padding:0}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49968	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	872	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961347304&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961341208&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:22:29 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49969	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	987	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961347304&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961341208&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:22:29 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:22:29 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 12:22:29 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 12:22:29 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49970	18.244.214.75	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	381	OUT	GET /?domain=docusign.com&pId=402488676481365330 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Wed, 24 Apr 2024 12:22:29 GMT Apigw-Requestid: Wuvs6gLcIAMEZiw= X-Cache: Miss from cloudfront Via: 1.1 6c393e4d7ff07e3c2467f7a0cb584a8e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: OPM6vDPHqIKanK_98FQiGwYwJQqrwJ-k2oDh4xHwm8DPmjZrneqYeg==
2024-04-24 12:22:29 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49971	216.137.39.37	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	518	OUT	GET /log?vendor=liveramp&user_id=Xc1297oK2PbHebak6yhb9aSDTXntf_qExefZWv5WZyr9HktTA HTTP/1.1 Host: segments.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961343\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:29 UTC	317	IN	HTTP/1.1 200 OK Content-Type: image/gif Content-Length: 26 Connection: close Date: Wed, 24 Apr 2024 12:22:29 GMT X-Cache: Miss from cloudfront Via: 1.1 709a1e6d45446b539d00ae49408d0988.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: N9A-SqKj_0BqDJICyYXBdvi9rg-QvdS3YpfArMm0x07Kc2mtQSxcSg==
2024-04-24 12:22:29 UTC	26	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 00 ff 00 2c 00 00 00 00 01 00 01 00 00 02 00 3b Data Ascii: GIF89a,;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49972	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	1031	OUT	GET /core/assets/js/22.6b9a301a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 33094 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "d8739a9fe9a3a42936f5cd86c8727494" x-amz-server-side-encryption: AES256 x-amz-version-id: i1hvkUQX9IgZ.p.OJBIRVoQKvWpiEdtd Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 790cedeaa37da9564fb26bbab02648c4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: bfyZHAiW8uVoT6rFGoOn9FzAVhRci0LkQ-d0DoA5IOWGsy7S1sS-4A== Age: 164056
2024-04-24 12:22:29 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 32 5d 2c 7b 22 2b 4f 53 4f 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 7d 29 3b 76 61 72 20 72 3d 65 28 22 38 64 56 64 22 29 2c 69 3d 65 28 22 78 71 46 54 22 29 3b 66 75 6e 63 74 69 6f 6e 20 63 72 65 61 74 65 43 6c 69 65 6e 74 52 65 70 6f 72 74 45 6e 76 65 6c 6f 70 65 28 74 2c 6e 2c 65 29 7b 76 61 72 20 6f 3d 5b 7b 74 79 70 65 3a 22 63 6c 69 65 6e 74 5f 72 65 70 6f 72 74 22 7d 2c 7b 74 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[22],{"+OSO":function(t,n,e){"use strict";e.d(n,"a",function(){return createClientReportEnvelope});var r=e("8dVd"),i=e("xqFT");function createClientReportEnvelope(t,n,e){var o=[{type:"client_report"},{ti
2024-04-24 12:22:29 UTC	16384	IN	Data Raw: 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 34 2e 63 61 6c 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 35 2e 63 61 6c 6c 28 74 68 69 73 29 2c 53 79 6e 63 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 69 6e 69 74 36 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 72 79 7b 74 28 74 68 69 73 2e 5f 72 65 73 6f 6c 76 65 2c 74 68 69 73 2e 5f 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6e 29 7b 74 68 69 73 2e 5f 72 65 6a 65 63 74 28 6e 29 7d 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6f 2e 61 29 28 53 79 6e 63 50 72 6f 6d 69 73 65 2c 5b 7b 6b 65 79 3a 22 5f 5f 69 6e 69 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 5f 5f 69 6e Data Ascii: (this),SyncPromise.prototype.__init4.call(this),SyncPromise.prototype.__init5.call(this),SyncPromise.prototype.__init6.call(this);try{t(this._resolve,this._reject)}catch(n){this._reject(n)}}return Object(o.a)(SyncPromise,[{key:"__init",value:function __in
2024-04-24 12:22:29 UTC	1318	IN	Data Raw: 28 29 7d 2c 7a 71 68 6a 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 64 28 6e 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 52 61 74 65 4c 69 6d 69 74 65 64 7d 29 2c 65 2e 64 28 6e 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 70 64 61 74 65 52 61 74 65 4c 69 6d 69 74 73 7d 29 3b 76 61 72 20 72 3d 65 28 22 73 38 44 49 22 29 2c 69 3d 65 28 22 6e 66 62 41 22 29 2c 6f 3d 36 65 34 3b 66 75 6e 63 74 69 6f 6e 20 69 73 52 61 74 65 4c 69 6d 69 74 65 64 28 74 2c 6e 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3a 44 61 74 Data Ascii: ()},zqhj:function(t,n,e){"use strict";e.d(n,"a",function(){return isRateLimited}),e.d(n,"b",function(){return updateRateLimits});var r=e("s8DI"),i=e("nfbA"),o=6e4;function isRateLimited(t,n){var e=arguments.length>2&&void 0!==arguments[2]?arguments[2]:Dat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49973	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	622	OUT	GET /core/assets/js/19.6f85b843.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17065 Connection: close Server: istio-envoy Date: Sat, 23 Dec 2023 10:44:24 GMT Last-Modified: Tue, 19 Dec 2023 18:34:37 GMT ETag: "e28ebc3391b56e8f01ea063dc089e9d3" x-amz-server-side-encryption: AES256 x-amz-version-id: TS.9ApOzy..rylGKiVPdLcCX5dJ9HsBw Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3d4704605b9b7f44c7958c0627a493d6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: hujoJQIrzru0tjs6ljk3htjwIrMRTNfITXAYogBJglcDk8JJfWnCQQ== Age: 10633085
2024-04-24 12:22:29 UTC	15435	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 39 5d 2c 7b 22 31 4a 37 61 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 61 72 72 61 79 57 69 74 68 48 6f 6c 65 73 28 74 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 29 72 65 74 75 72 6e 20 74 7d 7d 2c 22 32 6a 62 67 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 74 2c 65 29 7b 72 65 74 75 72 6e 28 5f 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[19],{"1J7a":function(t,e){t.exports=function _arrayWithHoles(t){if(Array.isArray(t))return t}},"2jbg":function(t,e,r){"use strict";function _setPrototypeOf(t,e){return(_setPrototypeOf=Object.setPrototyp
2024-04-24 12:22:29 UTC	1630	IN	Data Raw: 61 74 6f 72 5d 28 29 3b 21 28 6e 3d 28 61 3d 75 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 72 2e 70 75 73 68 28 61 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 72 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 6e 3d 21 30 29 3b 7d 63 61 74 63 68 28 63 29 7b 6f 3d 21 30 2c 69 3d 63 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 6e 7c 7c 6e 75 6c 6c 3d 3d 75 2e 72 65 74 75 72 6e 7c 7c 75 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 6f 29 74 68 72 6f 77 20 69 7d 7d 72 65 74 75 72 6e 20 72 7d 7d 7d 2c 76 4d 4e 55 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: ator]();!(n=(a=u.next()).done)&&(r.push(a.value),!e\|\|r.length!==e);n=!0);}catch(c){o=!0,i=c}finally{try{n\|\|null==u.return\|\|u.return()}finally{if(o)throw i}}return r}}},vMNU:function(t,e){t.exports=function _defineProperty(t,e,r){return e in t?Object.defin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49974	35.201.112.186	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	540	OUT	GET /datalayer/v4/latest.js HTTP/1.1 Host: edge.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	829	IN	HTTP/1.1 200 OK X-GUploader-UploadID: ABPtcPqaP2hvX1sa3Y1NZ5r_xdveMf3yFUOzSUwy3YqDDP7kJAyf-Kyl3eRQcXNYsSIHIgfxQyc x-goog-generation: 1712689870542441 x-goog-metageneration: 1 x-goog-stored-content-encoding: gzip x-goog-stored-content-length: 11986 Content-Encoding: gzip x-goog-hash: crc32c=StVZlg== x-goog-hash: md5=27m+BE/bh7t5LrewuEioVw== x-goog-storage-class: MULTI_REGIONAL Accept-Ranges: bytes Content-Length: 11986 Access-Control-Allow-Origin: * Server: UploadServer Date: Wed, 24 Apr 2024 12:13:59 GMT Expires: Wed, 24 Apr 2024 13:13:59 GMT Cache-Control: public, max-age=3600,no-transform Age: 510 Last-Modified: Tue, 09 Apr 2024 19:11:10 GMT ETag: "dbb9be044fdb87bb792eb7b0b848a857" Content-Type: application/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:29 UTC	426	IN	Data Raw: 1f 8b 08 08 ce 92 15 66 02 ff 74 6d 70 68 66 7a 37 63 37 33 62 00 d5 7d 69 73 db 46 d2 f0 77 ff 0a 08 e5 92 81 68 cc 50 d9 a3 de 07 34 cc 52 64 39 d1 ae 2d 79 25 39 79 76 15 ae 0b 22 87 12 62 08 e0 02 a0 6c 45 e4 7f 7f bb 7b 6e 1c 94 7c 24 f5 ec d6 c6 22 e6 e8 99 e9 e9 e9 6b 7a 66 b6 e6 cb 7c 5a a7 45 1e 84 77 fe b2 e2 5e 55 97 e9 b4 f6 47 37 49 e9 71 56 b3 72 b4 a5 8b f0 f0 8e 9f f3 c1 c1 c9 c9 f1 49 3c 9c c4 3e fd f2 19 26 fe bc 77 72 14 ef 42 1a fe 10 49 87 47 2f 8f e3 ef 20 09 7f 88 a4 17 07 df bf fd 21 fe 13 a4 d1 2f 7f 1d f0 d5 2a e0 f1 dd 3a 0c 99 d3 ce e0 e0 86 e7 f5 c1 f5 a2 be 85 76 f0 8f 47 29 00 47 64 bd cd f9 c7 05 9f d6 7c 16 fb e6 b7 29 f4 ba c8 d3 ba 28 f7 93 2c 3b 28 cb a2 8c 7d 99 e2 61 92 47 69 76 b9 92 27 35 6f 96 c4 44 e8 51 ab f4 8b Data Ascii: ftmphfz7c73b}isFwhP4Rd9-y%9yv"blE{n\|$"kzf\|ZEw^UG7IqVrI<>&wrBIG/ !/*:vG)Gd\|)(,;(}aGiv'5oDQ
2024-04-24 12:22:29 UTC	1255	IN	Data Raw: 79 51 7b f3 62 99 d3 70 34 b2 7e 4a b2 25 0c 99 fe 78 8f 87 5e 92 01 61 cc 6e 3d 58 30 54 f0 f4 2a bd 7e 99 a4 59 ec e3 2f 02 02 34 56 7c 00 7a bc e0 d3 04 d7 55 71 f1 2b 10 a8 97 56 50 9f aa f0 0c be 8b 52 62 e9 30 9f f1 8f 50 5d a6 7a 29 7e 63 53 50 81 c0 79 f9 f2 fa 82 63 86 f7 78 d7 05 30 2d ca 12 7e 9e 15 ef 79 be 0f 7d af 2d 38 57 49 05 55 64 09 05 23 78 3c 0c bd 62 ee d5 58 a3 6a 83 7c 9d 64 f3 a2 bc c6 95 a5 01 89 ae 5c ab 1c a7 b8 c0 23 b5 6f 0f 01 8a 8b 1c aa dc 6c e4 a8 c0 35 52 75 57 58 88 e5 93 f2 ca ae 72 7a 9b d7 c9 c7 b7 79 b5 5c 2c 8a b2 76 fa 57 51 9e ec e6 d2 14 c1 fa 67 49 79 c9 eb d3 25 4d c1 31 fd 1b fb 22 d1 ab 44 aa 77 bd ac 6a 98 2c 2f c9 e5 54 99 8a 6a 2d 6b 7a 91 55 65 27 6f ad 8e 5b 95 92 fa aa 55 01 d2 1a 85 df e6 ef f3 e2 43 Data Ascii: yQ{bp4~J%x^an=X0T*~Y/4V\|zUq+VPRb0P]z)~cSPycx0-~y}-8WIUd#x<bXj\|d\#ol5RuWXrzy\,vWQgIy%M1"Dwj,/Tj-kzUe'o[UC
2024-04-24 12:22:29 UTC	1255	IN	Data Raw: 77 c5 4b 7e 71 eb 5d 96 09 ac c3 19 34 7c f6 e3 81 77 7a fc f2 0c 96 ca 81 77 78 ea bd 39 39 fe e9 f0 c5 c1 0b cf df 3b 85 6f df db 3b 7a e1 61 a1 bd b7 67 3f 1e 9f 78 2f 0e 4f f7 5f ed 1d be 3e f5 f6 5e bd f2 a0 d6 c9 de d1 d9 e1 c1 a9 f7 f3 e1 d9 8f 8f 4e 0e 7e d8 3b 81 f2 c7 50 05 80 19 c0 47 fb af de be 38 3c fa 81 6a 1d be 7e f3 ea 10 9a b0 6a 1f bf f4 5e 1f 9c ec ff 08 9f 7b df 1f be 3a 3c fb e7 23 6c f8 e5 e1 d9 d1 c1 e9 e9 00 00 78 47 c7 de c1 4f 07 47 67 de e9 8f 08 c4 ea d3 f7 07 de ab c3 bd ef 5f 1d 78 2f e1 6b ef e8 9f de e9 9b 83 fd c3 bd 57 0c ba 7b 72 b0 7f c6 1e 1d 1e c9 5f 1e 94 d8 3f 3e 3a 3d f8 c7 5b 80 05 65 bc 17 7b af f7 7e c0 2e 88 aa ea f3 e7 1f f7 ce 4e 8f a1 c5 13 ef e4 e0 f4 ed ab 33 ec fd cb 93 e3 d7 8f 5e 1d 9f 52 87 df 9e 1e Data Ascii: wK~q]4\|wzwx99;o;zag?x/O_>^N~;PG8<j~j^{:<#lxGOGg_x/kW{r_?>:=[e{~.N3^R
2024-04-24 12:22:29 UTC	1255	IN	Data Raw: 44 8e c8 93 48 88 fa 08 24 10 ee 59 d5 75 03 02 3a 3d 6a f8 6a c9 d5 2a 84 da 9e d8 6a 11 30 1a 6a 0d fa 4f a1 24 08 2c d7 b9 86 1e bb 2c a9 ea 43 a9 76 f8 ef fc 90 30 f2 6c e8 16 44 77 5e b5 bc 10 63 06 0a 53 ec 70 86 7a 62 50 36 64 f8 75 b2 38 2b 5a 44 cc 4a 66 9c b8 a8 4d 98 d5 8d b2 26 1e 86 4c a7 e4 64 84 0f 05 07 49 81 2b 8d f4 10 34 f5 a7 94 09 b2 6e 67 b3 0c 05 d9 b6 04 86 6d 51 07 f2 77 09 44 b4 b8 15 93 22 3e e6 3b bb 11 50 08 1b 12 16 92 e7 ce aa 77 65 cc 91 d8 21 02 82 90 1b 56 66 27 c6 e3 1f a7 9c cf 2a d0 c5 b8 97 a5 b8 75 19 48 15 45 c1 da 01 3c e3 76 13 fa 23 b9 a7 52 d1 b6 f6 77 12 8d dd 4f d5 0d 24 7a 81 93 9e e7 13 b6 8c 15 6e fd 45 72 c9 8f a4 42 03 d6 83 0f 66 fa 22 4b 6e ed 24 7e 9d a4 19 7d 84 ab 55 07 3d 01 f0 b1 ef 47 2e 8b 0a aa Data Ascii: DH$Yu:=jjj0jO$,,Cv0lDw^cSpzbP6du8+ZDJfM&LdI+4ngmQwD">;Pwe!Vf'uHE<v#RwO$znErBf"Kn$~}U=G.
2024-04-24 12:22:29 UTC	1255	IN	Data Raw: 17 0d 6b ab 6f 58 b2 1f ca e5 49 c1 6f 4f c0 b2 44 5f 28 85 62 12 b1 37 d7 a5 ed 70 07 5b 1d 16 af e4 0c 39 ac 54 8c ab c2 3f cb 78 6b 38 52 7d e4 56 1f 31 66 63 19 bb 6b 31 09 c7 49 bf 73 66 cb d1 8e c8 1d 1b b9 69 09 ca 54 35 83 18 55 f3 45 0d 20 5f c1 98 9e 20 ec 6a ca ca 0d d9 12 06 83 a3 8e 41 19 b1 a3 56 82 50 86 c5 d5 6e 5c 31 bb 2b e4 67 e4 4b d2 f1 99 0a 7b 8c 6c c5 94 89 10 a4 c8 c7 30 58 0c 4c 2c 34 ad 91 f5 cf 77 7c da 2c 17 91 8d fe 4e 25 b5 b0 86 b1 a3 17 58 a7 89 a2 56 04 98 32 44 e1 f7 15 7a 88 e9 e4 a8 57 f7 01 34 44 de 59 52 d0 32 93 26 2f 94 a7 f4 fe 92 d4 47 d2 e1 1e 06 ce d5 f7 ee e9 ac d8 02 60 d7 5f c9 34 63 b8 6b a0 9d d4 85 c9 cd d1 49 9d 3b 96 5b c3 ed 5c 74 6d 56 ce b3 a4 ae 79 fe 23 cf 00 a3 ad 20 27 b9 17 d4 ed 4e fb 54 ff 11 Data Ascii: koXIoOD_(b7p[9T?xk8R}V1fck1IsfiT5UE _ jAVPn\1+gK{l0XL,4w\|,N%XV2DzW4DYR2&/G`_4ckI;[\tmVy# 'NT
2024-04-24 12:22:29 UTC	1255	IN	Data Raw: 62 4f b2 ab ba 21 64 1b d6 3e 57 6d 3b bc 9c ee 88 40 1b ec 78 90 3f d7 ac 0c bd b8 cf c4 81 2e bd 0b 9d 87 0c d2 42 60 a4 e5 ad 3e 78 78 9e 4f d6 d3 04 69 48 a3 71 dd 8d f4 74 fa fe f3 71 85 b5 3f 03 55 41 f8 25 b8 02 56 58 c4 5b bb 23 25 d2 ec 9e 09 91 d8 1d d2 6b 22 e3 84 64 c7 dd d8 5c fd 36 a9 08 7c 48 01 e0 5b bb b8 ed a2 83 53 3b f1 47 ae 8a cf c6 1f d6 fe 74 fc 6d 01 02 3f 0b 7f e6 e4 ab c4 21 4b e2 8d 3e 55 56 c5 c3 51 f5 2c 51 ee 8f 4a bb 3f 96 71 72 5e 4d 46 9d 13 40 b5 8d f2 b0 0c 69 f3 61 89 38 5e 2a f4 92 52 70 3f 7a a5 fb e7 f3 09 94 ea 7f 3a 8a ff fd d9 34 fa e9 38 5e 02 8e 97 06 c7 4b c4 b1 82 b2 00 34 03 ce a6 50 64 fa 6c 03 b2 65 dd 29 d6 c5 d0 8a 60 c1 fa 4b 9f 4f 27 61 78 97 63 a0 60 0d ff d0 8c 48 bf d3 03 a7 a5 19 0b fb a9 d3 22 ea Data Ascii: bO!d>Wm;@x?.B`>xxOiHqtq?UA%VX[#%k"d\6\|H[S;Gtm?!K>UVQ,QJ?qr^MF@ia8^*Rp?z:48^K4Pdle)`KO'axc`H"
2024-04-24 12:22:30 UTC	1255	IN	Data Raw: a3 db be cc ed 39 cc 99 fd e6 f9 d1 8d e0 2f 90 30 d4 f9 85 a7 74 56 94 58 2b b6 21 46 d4 79 5a d4 a6 c9 4d 01 c2 4c 06 17 8b 15 6c c7 18 3f 60 b1 8b 8e df 13 d8 7c f3 d9 5d d0 94 f3 90 40 d2 b3 3f 42 78 df ad ef 13 de 1b d8 c9 09 a7 c0 b3 6e f5 ff be db 65 4c 13 a1 32 14 1c e3 40 cb b2 12 5d 84 6d a1 c2 52 90 f0 39 2a 6f 19 af b9 87 bf 19 05 2a a7 eb 07 c5 28 77 29 04 2e fb e9 d7 02 d4 01 00 7d 4f 32 5d 7d db 96 ff b5 38 11 d8 e0 6a f6 06 ac 8d 48 74 ca 7e 46 04 f4 57 3b 2e 6e d0 3b 42 e2 d8 30 81 a0 48 8b a9 6a 2e 7c e7 24 93 c3 3d 34 aa d4 59 9b 92 c6 0c ac c4 d2 31 36 36 29 43 55 73 27 54 d5 9c b2 51 b6 c3 79 0e 44 30 d9 d8 b1 a9 9a 47 d1 07 14 09 02 8c 10 11 95 ff 75 75 05 ad d8 37 d5 f3 bd df f7 70 f9 03 a5 ff af 0e d5 28 41 72 f7 38 72 c8 76 6d 6e Data Ascii: 9/0tVX+!FyZMLl?`\|]@?BxneL2@]mR9o(w).}O2]}8jHt~FW;.n;B0Hj.\|$=4Y166)CUs'TQyD0Guu7p(Ar8rvmn
2024-04-24 12:22:30 UTC	1255	IN	Data Raw: 39 56 da 00 d8 63 40 71 90 7a 78 fa 7a 06 c9 6b 6a 7e 8f 0d c4 3f d2 ce 62 a9 d8 87 f4 f8 ed 19 2a ba 5b 77 ee 42 e3 9c 13 dd 35 2e a0 36 f1 c2 d8 2b ce 95 d6 a5 1a d2 f3 25 8f f5 f3 f2 92 63 f0 da 8b 66 c3 48 37 cd 70 63 6f 33 fe b1 4f f7 4d 00 bb 83 f6 23 0b 29 eb 66 0c f3 94 1e 3d 6b 31 5a 18 58 7b 20 74 a8 43 52 de 67 51 dc 86 f1 a3 ab 9d bc 9e 5f 42 81 34 98 0e 12 b4 5e 5f e9 6a bc f3 e1 99 6e fa 10 f3 db b8 db b4 77 54 5d 80 a7 81 b8 c3 ab 13 3e 1e 8f 91 c4 5c f2 f8 4e 51 8f 73 2a dc 7d 8c cb 3f d3 a3 3f 25 d1 42 e7 cf d5 64 3d ac 22 15 a5 9a 6b 96 77 36 0b 84 d3 05 14 e9 89 15 fc 01 3a 92 78 5a e1 26 9d 39 66 3b 9e 59 d7 4f fa d0 25 78 38 3f 07 6a 95 76 1d 64 40 75 88 07 fa fd 23 3a d4 50 02 39 da d7 e1 28 25 7f cc a3 5c f8 0f 3a 5f 19 b2 76 81 ad Data Ascii: 9Vc@qzxzkj~?b[wB5.6+%cfH7pco3OM#)f=k1ZX{ tCRgQ_B4^_jnwT]>\NQs}??%Bd="kw6:xZ&9f;YO%x8?jvd@u#:P9(%\:_v
2024-04-24 12:22:30 UTC	1255	IN	Data Raw: a5 f7 f9 ad c9 a7 ad 3c 98 f2 c0 09 58 4b ed a5 d0 61 8c 74 bc d0 2e 8e 13 d4 bd 85 1b af b2 8b e2 79 7f 71 f3 1e bb 8a 68 14 fd 09 9c 0e 8f 7f 0d f4 60 c2 c8 1e 76 63 4b 53 bf 70 9e 34 38 61 23 26 5f cc 22 3e 99 97 34 af ca e9 d2 9c cb e6 7b ef 52 73 ce cd 5e 53 cd 54 67 a3 62 6d 0e 2a 49 2e 25 42 06 f5 5e b0 45 89 cc 97 23 41 54 f8 ec 0e 5a 8f da 7e 04 73 38 c7 b9 be c4 1c d9 b1 df d5 19 f8 44 ed fa da 76 dc 84 02 7b 75 9e 5e 2e e5 f7 70 ad ef eb dc d4 33 f1 fc 45 5f 9f ec 39 91 27 56 bb 27 e5 fe be d8 2b 93 2c a9 b8 07 05 4d 82 50 df 92 28 84 0a c0 d0 28 b6 9d ef fa 76 82 37 41 dd 47 91 1b cf 65 d5 d6 a9 30 5c 7a 60 d4 c2 3f 4b fc 67 01 86 ae 3a f7 23 8f 82 2f 1c e5 f9 4e e8 c6 0b 50 99 d9 3c ce e8 24 2f bb 82 1f 78 e3 d2 0c fe aa 23 b2 d8 b1 39 68 48 Data Ascii: <XKat.yqh`vcKSp48a#&_">4{Rs^STgbm*I.%B^E#ATZ~s8Dv{u^.p3E_9'V'+,MP((v7AGe0\z`?Kg:#/NP<$/x#9hH
2024-04-24 12:22:30 UTC	1255	IN	Data Raw: 95 9e 6e 6d 06 33 97 63 97 15 80 9d dd e4 0d 0a b4 39 d1 2a 1e 6f 0a 9a 05 33 6c 33 ce 61 e9 6f 6f ab 63 00 78 af be bc 55 c9 de 41 7c c5 08 b9 62 f7 50 95 5d 87 a3 a2 9b 02 b4 65 27 02 07 79 89 a8 14 4f fc b0 44 ec 84 ac 7b 64 ca 8f 02 7d 5d 2b dd 75 d4 3a 01 0b 62 f7 33 ed 8e 58 90 5b a2 b8 d6 52 b3 d6 3a 0e ce 29 8f 2a b0 f6 c2 5d 71 d0 b1 96 66 68 af 3a e5 67 a1 e3 cd 9a cb 16 26 03 7d 49 64 c5 10 57 4e f4 21 e8 82 38 93 cd be f0 16 0e 68 32 5c b6 02 43 84 75 2a 1e 67 4a 25 7f 4a b6 b7 37 17 2c c4 f0 2b 7d d6 7a 13 1b d0 91 08 dd 62 b3 bf a5 0a 90 9a d2 02 6e e1 cd ac 10 f7 7d 29 fb 52 32 b5 4f 2c 56 18 3d f3 78 c1 a1 0b dc 5a b2 f4 dc 63 7b 25 b3 85 39 48 b0 1c 3b cb 3a 5a d2 a5 5f 16 33 50 fb bf 65 f7 f8 b8 9c 7e 42 8e 15 ca 8d 64 5b 85 8d 87 e6 aa Data Ascii: nm3c9o3l3aoocxUA\|bP]e'yOD{d}]+u:b3X[R:)]qfh:g&}IdWN!8h2\Cu*gJ%J7,+}zbn})R2O,V=xZc{%9H;:Z_3Pe~Bd[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49977	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	622	OUT	GET /core/assets/js/43.7ac85d58.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 25600 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 20:29:38 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "48be1563378f7c36bdadc0f2eb616856" x-amz-server-side-encryption: AES256 x-amz-version-id: 2bLAA7zyfHK_AFmI4eU.1naazAOf_QPw Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fa29d6aa47b7c482fa023ba4aba3882c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: -_dfkoQaeUKoGB3jJk3E1zo9JekHfaaGLyUDpDq_Xh7n-6wHtcQWtQ== Age: 748371
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 33 5d 2c 7b 22 31 46 6f 62 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 6e 65 77 20 52 65 67 45 78 70 28 22 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 22 2c 22 67 69 22 29 2c 66 3d 6e 65 77 20 52 65 67 45 78 70 28 22 28 25 5b 61 2d 66 30 2d 39 5d 7b 32 7d 29 2b 22 2c 22 67 69 22 29 3b 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 43 6f 6d 70 6f 6e 65 6e 74 73 28 74 2c 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 2e 6a 6f 69 6e 28 22 22 29 29 7d 63 61 74 63 68 28 66 29 7b 7d 69 66 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[43],{"1Fob":function(t,e,r){"use strict";var n=new RegExp("%[a-f0-9]{2}","gi"),f=new RegExp("(%[a-f0-9]{2})+","gi");function decodeComponents(t,e){try{return decodeURIComponent(t.join(""))}catch(f){}if(
2024-04-24 12:22:30 UTC	9216	IN	Data Raw: 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 38 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 49 6e 74 38 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 32 38 26 74 68 69 73 5b 74 5d 3f 2d 31 2a 28 32 35 35 2d 74 68 69 73 5b 74 5d 2b 31 29 3a 74 68 69 73 5b 74 5d 7d 2c 42 75 66 66 65 72 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 20 72 65 61 64 49 6e 74 31 36 4c 45 28 74 2c 65 29 7b 65 7c 7c 63 68 65 63 6b 4f 66 66 73 65 74 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 3b 72 65 74 75 72 6e 20 33 32 37 36 38 26 72 3f 34 Data Ascii: fer.prototype.readInt8=function readInt8(t,e){return e\|\|checkOffset(t,1,this.length),128&this[t]?-1*(255-this[t]+1):this[t]},Buffer.prototype.readInt16LE=function readInt16LE(t,e){e\|\|checkOffset(t,2,this.length);var r=this[t]\|this[t+1]<<8;return 32768&r?4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49978	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	622	OUT	GET /core/assets/js/20.8c21ea18.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 75961 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "6d77a76055d81227033363af2f18caf8" x-amz-server-side-encryption: AES256 x-amz-version-id: 7YVy3o.8h18DfMlvA0U98bfl.xxKvU_F Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 22 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5deffd3025190ff558739d37ae5c95f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: MZZTXGmXLZs-boL9ktKNe6A6JLR4ztVH1MOrzH7dbPq2MBQ0uM7gmA== Age: 164056
2024-04-24 12:22:30 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 30 5d 2c 7b 22 31 31 48 6d 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 65 78 74 65 6e 64 73 28 29 7b 72 65 74 75 72 6e 28 5f 65 78 74 65 6e 64 73 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 5b 74 5d 3b 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 6e 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[20],{"11Hm":function(e,t,n){"use strict";function _extends(){return(_extends=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t++){var n=arguments[t];for(var o in n)Object.prototype.hasOwnPrope
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 28 61 2c 65 2c 30 2c 30 2c 74 2e 69 67 6e 6f 72 65 57 68 69 74 65 73 70 61 63 65 29 2c 61 7d 7d 2c 48 30 44 57 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 2e 70 2b 22 61 73 73 65 74 73 2f 6d 65 64 69 61 2f 67 65 74 46 65 74 63 68 2e 30 31 33 66 30 62 39 30 2e 63 6a 73 22 7d 2c 49 39 69 52 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 6e 76 61 72 69 61 6e 74 28 65 2c 74 2c 6e 2c 6f 2c 72 2c 69 2c 61 2c 73 29 7b 69 66 28 21 65 29 7b 76 61 72 20 63 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 74 29 63 3d 6e 65 77 20 45 72 72 6f 72 28 22 4d 69 6e 69 66 69 65 64 20 65 78 63 65 70 74 69 6f 6e 20 6f 63 63 75 72 72 65 64 3b 20 Data Ascii: (a,e,0,0,t.ignoreWhitespace),a}},H0DW:function(e,t,n){e.exports=n.p+"assets/media/getFetch.013f0b90.cjs"},I9iR:function(e,t,n){"use strict";e.exports=function invariant(e,t,n,o,r,i,a,s){if(!e){var c;if(void 0===t)c=new Error("Minified exception occurred;
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 54 72 61 6e 73 6c 61 74 6f 72 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 72 65 74 75 72 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 54 72 61 6e 73 6c 61 74 6f 72 29 2c 74 3d 5f 70 6f 73 73 69 62 6c 65 43 6f 6e 73 74 72 75 63 74 6f 72 52 65 74 75 72 6e 28 74 68 69 73 2c 5f 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 54 72 61 6e 73 6c 61 74 6f 72 29 2e 63 61 6c 6c 28 74 68 69 73 29 29 2c 69 2e 63 61 6c 6c 28 5f 61 73 73 65 72 74 54 68 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 28 74 29 29 2c 66 75 6e 63 74 69 6f 6e 20 63 6f 70 79 28 65 2c 74 2c 6e Data Ascii: unction Translator(e){var t,n=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};return _classCallCheck(this,Translator),t=_possibleConstructorReturn(this,_getPrototypeOf(Translator).call(this)),i.call(_assertThisInitialized(t)),function copy(e,t,n
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 6e 20 68 61 6e 64 6c 65 46 6f 72 6d 61 74 28 65 29 7b 69 66 28 65 2e 69 6e 64 65 78 4f 66 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 3c 30 29 7b 76 61 72 20 72 3d 67 65 74 50 61 74 68 57 69 74 68 44 65 66 61 75 6c 74 73 28 74 2c 63 2c 65 29 3b 72 65 74 75 72 6e 20 73 2e 61 6c 77 61 79 73 46 6f 72 6d 61 74 3f 73 2e 66 6f 72 6d 61 74 28 72 2c 76 6f 69 64 20 30 2c 6e 29 3a 72 7d 76 61 72 20 69 3d 65 2e 73 70 6c 69 74 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2c 61 3d 69 2e 73 68 69 66 74 28 29 2e 74 72 69 6d 28 29 2c 75 3d 69 2e 6a 6f 69 6e 28 73 2e 66 6f 72 6d 61 74 53 65 70 61 72 61 74 6f 72 29 2e 74 72 69 6d 28 29 3b 72 65 74 75 72 6e 20 73 2e 66 6f 72 6d 61 74 28 67 65 74 50 61 74 68 57 69 74 68 44 65 66 61 75 6c 74 73 28 74 Data Ascii: n handleFormat(e){if(e.indexOf(s.formatSeparator)<0){var r=getPathWithDefaults(t,c,e);return s.alwaysFormat?s.format(r,void 0,n):r}var i=e.split(s.formatSeparator),a=i.shift().trim(),u=i.join(s.formatSeparator).trim();return s.format(getPathWithDefaults(t
2024-04-24 12:22:30 UTC	11417	IN	Data Raw: 65 66 61 75 6c 74 3d 6d 7d 2c 67 6e 7a 78 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 65 66 61 75 6c 74 73 7d 29 3b 76 61 72 20 6f 3d 5b 5d 2c 72 3d 6f 2e 66 6f 72 45 61 63 68 2c 69 3d 6f 2e 73 6c 69 63 65 3b 66 75 6e 63 74 69 6f 6e 20 64 65 66 61 75 6c 74 73 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 69 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 29 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 74 29 76 6f 69 64 20 30 3d 3d 3d 65 5b 6e 5d 26 26 28 65 5b 6e 5d 3d 74 5b 6e 5d 29 7d 29 2c 65 7d 7d 2c 6c 66 75 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 Data Ascii: efault=m},gnzx:function(e,t,n){"use strict";n.d(t,"a",function(){return defaults});var o=[],r=o.forEach,i=o.slice;function defaults(e){return r.call(i.call(arguments,1),function(t){if(t)for(var n in t)void 0===e[n]&&(e[n]=t[n])}),e}},lfu7:function(e,t){fu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49980	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	622	OUT	GET /core/assets/js/26.04e7f30b.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 68076 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 07:19:36 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "49ce5445ddcf5d24ef3badc4eb1a11dd" x-amz-server-side-encryption: AES256 x-amz-version-id: wEGP9pqjSbBWXfzZt_sj5Bv85ZYceeDV Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 20 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9e9fde687cd38d3d64c729260b6189f6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 3GVH_Uni0r3c_3YrDBnjv6sCm9k_kCWLoo0lvAf8m9a9e1T1ULPqJA== Age: 795773
2024-04-24 12:22:30 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 5d 2c 7b 22 38 53 79 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 3b 76 61 72 20 72 2c 6f 2c 69 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2c 61 3d 69 26 26 69 2e 6e 6f 77 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 2e 6e 6f 77 28 29 7d 3a 66 75 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[26],{"8Sys":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return o});var r,o,i="undefined"!==typeof performance&&performance,a=i&&i.now?function(){return i.now()}:fun
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 6e 3d 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 6f 53 74 72 69 6e 67 3f 65 2e 74 6f 53 74 72 69 6e 67 28 29 3a 7b 7d 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 3b 65 3d 6e 65 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 72 65 6a 65 63 74 20 74 6f 20 62 65 20 63 61 6c 6c 65 64 20 77 69 74 68 20 45 72 72 6f 72 2c 20 67 6f 74 20 22 2b 6e 29 7d 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6a 65 63 74 65 64 3d 21 30 2c 74 68 69 73 2e 65 72 72 6f 72 3d 65 2c 74 68 69 73 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 7c 7c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 65 72 72 6f 72 48 61 6e 64 6c 65 64 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 2d 31 3d 3d 3d 63 2e 69 6e 64 65 78 4f Data Ascii: n=e&&"function"==typeof e.toString?e.toString():{}.toString.call(e);e=new Error("Expected reject to be called with Error, got "+n)}return this.rejected=!0,this.error=e,this.errorHandled\|\|setTimeout(function(){t.errorHandled\|\|function(e,t){if(-1===c.indexO
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 6e 67 69 66 79 28 74 29 29 3b 69 66 28 22 70 6f 73 74 22 3d 3d 3d 69 29 72 65 74 75 72 6e 20 73 28 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 20 6e 6f 74 20 70 6f 73 74 20 74 6f 20 77 69 6e 64 6f 77 20 77 69 74 68 6f 75 74 20 74 61 72 67 65 74 20 6e 61 6d 65 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 75 72 6c 2c 6e 3d 65 2e 74 61 72 67 65 74 2c 72 3d 65 2e 62 6f 64 79 2c 6f 3d 65 2e 6d 65 74 68 6f 64 2c 69 3d 76 6f 69 64 20 30 3d 3d 3d 6f 3f 22 70 6f 73 74 22 3a 6f 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 69 66 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 72 67 65 Data Ascii: ngify(t));if("post"===i)return s().then(function(e){if(!e)throw new Error("Can not post to window without target name");!function(e){var t=e.url,n=e.target,r=e.body,o=e.method,i=void 0===o?"post":o,a=document.createElement("form");if(a.setAttribute("targe
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 69 66 28 67 65 74 50 61 72 65 6e 74 28 65 29 3d 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 74 72 79 7b 69 66 28 69 73 41 6e 63 65 73 74 6f 72 50 61 72 65 6e 74 28 77 69 6e 64 6f 77 2c 65 29 26 26 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 6f 29 7b 7d 74 72 79 7b 69 66 28 69 73 41 6e 63 65 73 74 6f 72 50 61 72 65 6e 74 28 65 2c 77 69 6e 64 6f 77 29 26 26 77 69 6e 64 6f 77 2e 74 6f 70 29 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 6f 29 7b 7d 66 6f 72 28 76 61 72 20 74 3d 30 2c 6e 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 41 6c 6c 43 68 69 6c 64 46 72 61 6d 65 73 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 2c 72 3d 67 65 74 46 72 61 6d 65 73 28 65 29 3b 6e 3c Data Ascii: if(getParent(e)===e)return e;try{if(isAncestorParent(window,e)&&window.top)return window.top}catch(o){}try{if(isAncestorParent(e,window)&&window.top)return window.top}catch(o){}for(var t=0,n=function getAllChildFrames(e){for(var t=[],n=0,r=getFrames(e);n<
2024-04-24 12:22:30 UTC	3532	IN	Data Raw: 65 72 74 79 28 69 2c 6c 29 3f 72 28 69 5b 6c 5d 29 3f 69 5b 6c 5d 2e 70 75 73 68 28 68 29 3a 69 5b 6c 5d 3d 5b 69 5b 6c 5d 2c 68 5d 3a 69 5b 6c 5d 3d 68 7d 72 65 74 75 72 6e 20 69 7d 3b 76 61 72 20 72 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 7d 7d 2c 76 6e 31 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 74 2e 73 72 63 5f 41 6e 79 3d 6e 28 22 37 45 41 30 22 29 2e 73 6f 75 72 63 65 2c 74 2e 73 72 63 5f 43 Data Ascii: erty(i,l)?r(i[l])?i[l].push(h):i[l]=[i[l],h]:i[l]=h}return i};var r=Array.isArray\|\|function(e){return"[object Array]"===Object.prototype.toString.call(e)}},vn14:function(e,t,n){"use strict";e.exports=function(e){var t={};t.src_Any=n("7EA0").source,t.src_C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49979	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	622	OUT	GET /core/assets/js/14.e24a6190.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 92674 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:54 GMT ETag: "16d7ae86e21434a32157d3226ac9bb77" x-amz-server-side-encryption: AES256 x-amz-version-id: PVaYl3XRALUFQcaS2YuXdkh4p0FnPtuo Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 28 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 97d9fba07ea9b58446de67c2f4b07146.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 8Zx60GNDOqrJfrf68qH8qdXCHgrP-djNlJh4fvmQXGyahHqY4tqOBw== Age: 164056
2024-04-24 12:22:30 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 34 5d 2c 7b 22 2b 57 61 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 65 7d 72 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 73 46 75 6e 63 74 69 6f 6e 7d 29 7d 2c 22 2f 56 33 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 22 31 33 57 53 22 29 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[14],{"+WaJ":function(e,t,r){"use strict";function isFunction(e){return"function"===typeof e}r.d(t,"a",function(){return isFunction})},"/V3T":function(e,t,r){"use strict";var n=r("13WS"),o=function(e){fu
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 2f 73 61 6d 6f 61 22 2c 22 2d 31 30 7c 6e 22 3a 22 31 31 2f 68 6f 6e 6f 6c 75 6c 75 2c 31 31 2f 6a 6f 68 6e 73 74 6f 6e 2c 31 31 2f 72 61 72 6f 74 6f 6e 67 61 2c 31 31 2f 74 61 68 69 74 69 22 7d 7d 29 29 2c 73 3d 7b 7d 3b 4f 62 6a 65 63 74 2e 6b 65 79 73 28 75 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 7b 6f 66 66 73 65 74 3a 4e 75 6d 62 65 72 28 74 5b 30 5d 29 2c 68 65 6d 3a 74 5b 31 5d 7d 3b 74 5b 32 5d 26 26 28 72 2e 64 73 74 3d 74 5b 32 5d 29 2c 75 5b 65 5d 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 28 5e 5b 30 2d 39 5d 2b 29 5c 2f 2f 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 Data Ascii: /samoa","-10\|n":"11/honolulu,11/johnston,11/rarotonga,11/tahiti"}})),s={};Object.keys(u).forEach(function(e){var t=e.split("\|"),r={offset:Number(t[0]),hem:t[1]};t[2]&&(r.dst=t[2]),u[e].split(",").forEach(function(e){e=e.replace(/(^[0-9]+)\//,function(e,t)
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 3d 74 65 28 65 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 6e 2c 22 54 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 69 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 61 2c 22 2e 22 29 2e 63 6f 6e 63 61 74 28 75 29 2e 63 6f 6e 63 61 74 28 73 29 7d 2c 22 69 73 6f 2d 73 68 6f 72 74 22 3a 66 75 6e 63 74 69 6f 6e 20 69 73 6f 53 68 6f 72 74 28 65 29 7b 76 61 72 20 74 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 6d 6f 6e 74 68 28 29 2b 31 29 2c 72 3d 43 2e 7a 65 72 6f 50 61 64 28 65 2e 64 61 74 65 28 29 29 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 65 2e 79 65 61 72 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 74 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 Data Ascii: =te(e);return"".concat(t,"-").concat(r,"-").concat(n,"T").concat(o,":").concat(i,":").concat(a,".").concat(u).concat(s)},"iso-short":function isoShort(e){var t=C.zeroPad(e.month()+1),r=C.zeroPad(e.date());return"".concat(e.year(),"-").concat(t,"-").concat
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 32 3d 74 2e 67 65 74 48 6f 75 72 73 28 29 3b 72 65 74 75 72 6e 20 68 6f 75 72 31 32 3e 31 32 26 26 28 68 6f 75 72 31 32 2d 3d 31 32 29 2c 30 3d 3d 3d 68 6f 75 72 31 32 26 26 28 68 6f 75 72 31 32 3d 31 32 29 2c 68 6f 75 72 31 32 7d 2c 74 69 6d 65 3a 66 75 6e 63 74 69 6f 6e 20 74 69 6d 65 28 65 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 63 6c 6f 6e 65 28 29 3b 72 65 74 75 72 6e 20 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 74 72 69 6d 28 29 2c 74 2e 65 70 6f 63 68 3d 59 65 28 74 2c 65 29 2c 74 7d 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 68 31 32 28 29 2c 22 3a 22 29 2e 63 6f 6e 63 61 74 28 43 2e 7a 65 72 6f 50 61 64 28 74 68 69 73 2e 6d 69 6e 75 74 65 28 29 29 29 2e 63 6f 6e 63 61 74 Data Ascii: 2=t.getHours();return hour12>12&&(hour12-=12),0===hour12&&(hour12=12),hour12},time:function time(e){if(void 0!==e){var t=this.clone();return e=e.toLowerCase().trim(),t.epoch=Ye(t,e),t}return"".concat(this.h12(),":").concat(C.zeroPad(this.minute())).concat
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 53 74 6f 70 70 65 64 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 5f 70 61 72 65 6e 74 53 75 62 73 63 72 69 62 65 72 2c 72 3d 73 2e 61 2e 75 73 65 44 65 70 72 65 63 61 74 65 64 53 79 6e 63 68 72 6f 6e 6f 75 73 45 72 72 6f 72 48 61 6e 64 6c 69 6e 67 3b 69 66 28 74 68 69 73 2e 5f 65 72 72 6f 72 29 72 26 26 74 2e 73 79 6e 63 45 72 72 6f 72 54 68 72 6f 77 61 62 6c 65 3f 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 53 65 74 45 72 72 6f 72 28 74 2c 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3a 28 74 68 69 73 2e 5f 5f 74 72 79 4f 72 55 6e 73 75 62 28 74 68 69 73 2e 5f 65 72 72 6f 72 2c 65 29 2c 74 68 69 73 2e 75 6e 73 75 62 73 63 72 69 62 65 28 29 29 3b 65 6c 73 65 20 69 66 28 74 2e 73 79 6e 63 45 72 72 6f 72 54 68 Data Ascii: Stopped){var t=this._parentSubscriber,r=s.a.useDeprecatedSynchronousErrorHandling;if(this._error)r&&t.syncErrorThrowable?(this.__tryOrSetError(t,this._error,e),this.unsubscribe()):(this.__tryOrUnsub(this._error,e),this.unsubscribe());else if(t.syncErrorTh
2024-04-24 12:22:30 UTC	11746	IN	Data Raw: 61 2e 61 2e 45 4d 50 54 59 29 3a 74 68 69 73 2e 69 73 53 74 6f 70 70 65 64 3f 28 65 2e 63 6f 6d 70 6c 65 74 65 28 29 2c 61 2e 61 2e 45 4d 50 54 59 29 3a 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 2e 70 75 73 68 28 65 29 2c 6e 65 77 20 73 28 74 68 69 73 2c 65 29 29 7d 2c 53 75 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 61 73 4f 62 73 65 72 76 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 65 77 20 6f 2e 61 3b 72 65 74 75 72 6e 20 65 2e 73 6f 75 72 63 65 3d 74 68 69 73 2c 65 7d 2c 53 75 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 68 28 65 2c 74 29 7d 2c 53 75 62 6a 65 63 74 7d 28 6f 2e 61 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: a.a.EMPTY):this.isStopped?(e.complete(),a.a.EMPTY):(this.observers.push(e),new s(this,e))},Subject.prototype.asObservable=function(){var e=new o.a;return e.source=this,e},Subject.create=function(e,t){return new h(e,t)},Subject}(o.a),h=function(e){function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49988	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	894	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=2&ClientTime=1713961349020&PageStart=1713961346738&PrevBundleTime=1713961347841&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 4914 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	4914	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 3b 6b 73 db 38 92 7f c5 a7 ad b0 76 aa 04 11 00 41 02 cc 9e 2e 65 27 99 8c 77 12 27 37 76 26 33 bb 99 52 81 04 28 33 e1 2b 7c c8 72 a6 e6 bf 5f 03 7a 58 94 3d 94 bc 73 75 7b 1f c6 0f 88 04 ba 1b 8d 46 bf 40 b6 7e 1d 5d ea 2f a3 a7 74 3c fa 70 ad 0b b8 08 3d 6f 3c 7a b9 68 9b d1 d3 7f fe 3a fa 3e 2d d4 e8 a9 cf c7 a3 d3 7a 6e ba 08 40 56 65 5a b4 ba 2e bb 76 34 26 61 40 f1 04 87 9b 1f ce c7 04 33 e8 e6 94 4c f8 b6 3b b4 3d 74 8c 7f d9 9d e8 b7 f1 f0 0c 99 96 0b 3d 38 07 fd 93 ee 9f 74 ff a4 fb ff 95 6e 5e 76 8d 3e e4 27 1e 43 d3 3b 06 0a 26 be 6e db aa 79 ea ba 91 6c 27 51 5a cc 27 71 99 bb 95 2b e3 36 2d 0b 97 61 4c b8 a0 93 4f 0d 30 26 28 a5 13 b2 65 4c 78 63 c2 31 9f 78 77 be 8b 01 c1 26 ae d3 0a d6 81 e1 f7 01 14 dc fb Data Ascii: ;ks8vA.e'w'7v&3R(3+\|r_zX=su{F@~]/t<p=o<zh:>-zn@VeZ.v4&a@3L;=t=8tn^v>'C;&nyl'QZ'q+6-aLO0&(eLxc1xw&
2024-04-24 12:22:30 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:30 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:30 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 34 39 39 35 38 7d 0a Data Ascii: {"BundleTime":1713961349958}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49987	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:29 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=2&ClientTime=1713961349014&PageStart=1713961346738&PrevBundleTime=1713961347841&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 16138 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:29 UTC	16138	OUT	Data Raw: 7b 22 53 65 71 22 3a 32 2c 22 57 68 65 6e 22 3a 32 39 33 33 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 31 39 36 32 30 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 30 34 2c 31 39 37 32 31 2e 37 39 39 39 39 39 39 39 39 39 39 2c 31 39 37 32 32 2c 30 5d 2c 22 57 68 65 6e 22 3a 32 39 33 33 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 31 39 36 32 30 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 31 30 34 2c 31 39 37 32 32 2c 31 39 37 32 32 2c 30 5d 2c 22 57 68 65 6e 22 3a 32 39 33 33 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 31 39 36 Data Ascii: {"Seq":2,"When":2933,"Evts":[{"Kind":57,"Args":[12,"pointerout",19620.099999999977,104,19721.79999999999,19722,0],"When":2933},{"Kind":57,"Args":[12,"pointerleave",19620.099999999977,104,19722,19722,0],"When":2933},{"Kind":57,"Args":[12,"pointerleave",196
2024-04-24 12:22:30 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:30 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49989	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	636	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961347304&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961341208&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:22:30 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49990	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	673	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961347304&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961341208&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:22:30 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:22:30 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49991	35.81.127.23	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	552	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:30 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-24 12:22:30 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49992	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	622	OUT	GET /core/assets/js/11.639238ba.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 23865 Connection: close Server: istio-envoy Date: Mon, 25 Dec 2023 18:40:33 GMT Last-Modified: Tue, 19 Dec 2023 18:34:37 GMT ETag: "4049f38c00add1738dc4806148ff8829" x-amz-server-side-encryption: AES256 x-amz-version-id: cZI1cI6WRHhkzkWa3N1Jh4ekBwSSYCCx Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b7b1a2eee8508a9a20c99d23ed8145ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: LbIxLMVWTA6_RQK_LTVxN2mNePPmR66hW6-xOQMwDuXoYBv0Z73VLA== Age: 10431717
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 31 5d 2c 7b 22 30 42 38 45 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 65 28 22 72 41 63 31 22 29 2c 75 3d 65 28 22 50 59 63 48 22 29 3b 66 75 6e 63 74 69 6f 6e 20 68 61 73 4f 72 41 64 64 28 74 2c 6e 2c 65 29 7b 76 61 72 20 72 2c 63 3d 74 79 70 65 6f 66 20 74 3b 73 77 69 74 63 68 28 63 29 7b 63 61 73 65 22 73 74 72 69 6e 67 22 3a 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 30 3d 3d 3d 74 26 26 31 2f 74 3d 3d 3d 2d 31 2f 30 3f 21 21 65 2e 5f 69 74 65 6d 73 5b 22 2d 30 22 5d 7c 7c 28 6e 26 26 28 65 2e 5f 69 74 65 6d Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[11],{"0B8E":function(t,n,e){"use strict";var r=e("rAc1"),u=e("PYcH");function hasOrAdd(t,n,e){var r,c=typeof t;switch(c){case"string":case"number":return 0===t&&1/t===-1/0?!!e._items["-0"]\|\|(n&&(e._item
2024-04-24 12:22:30 UTC	7481	IN	Data Raw: 63 74 22 3b 76 61 72 20 72 3d 65 28 22 38 73 31 52 22 29 2c 75 3d 65 28 22 52 68 45 4c 22 29 2c 63 3d 65 28 22 55 2f 5a 44 22 29 2c 61 3d 65 28 22 30 4c 31 56 22 29 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 58 44 72 6f 70 28 74 2c 6e 29 7b 74 68 69 73 2e 78 66 3d 6e 2c 74 68 69 73 2e 6e 3d 74 7d 72 65 74 75 72 6e 20 58 44 72 6f 70 2e 70 72 6f 74 6f 74 79 70 65 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 69 6e 69 74 22 5d 3d 61 2e 61 2e 69 6e 69 74 2c 58 44 72 6f 70 2e 70 72 6f 74 6f 74 79 70 65 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 72 65 73 75 6c 74 22 5d 3d 61 2e 61 2e 72 65 73 75 6c 74 2c 58 44 72 6f 70 2e 70 72 6f 74 6f 74 79 70 65 5b 22 40 40 74 72 61 6e 73 64 75 63 65 72 2f 73 74 65 70 22 5d 3d 66 75 6e 63 74 69 6f Data Ascii: ct";var r=e("8s1R"),u=e("RhEL"),c=e("U/ZD"),a=e("0L1V"),i=function(){function XDrop(t,n){this.xf=n,this.n=t}return XDrop.prototype["@@transducer/init"]=a.a.init,XDrop.prototype["@@transducer/result"]=a.a.result,XDrop.prototype["@@transducer/step"]=functio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49993	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	1031	OUT	GET /core/assets/js/18.9c1bd1fb.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	994	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 63529 Connection: close Server: istio-envoy Date: Sat, 30 Dec 2023 14:27:55 GMT Last-Modified: Fri, 29 Dec 2023 19:54:12 GMT ETag: "02f09379c544befa413d22eb57ed41de" x-amz-server-side-encryption: AES256 x-amz-version-id: _t0rFFeB999c2hl_B30XuCV0lVmdNzel Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 91ef21a3655607bd999b3da05b64026c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: juAfzDS-YyK97fceZWE0j_kke1IZtQhkNHbdzaeiEFTSnhyCxBVbIA== Age: 10014875
2024-04-24 12:22:30 UTC	15390	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 5d 2c 7b 22 30 4f 39 4a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 6c 45 61 71 22 29 2c 6f 3d 6e 2e 6e 28 72 29 2c 69 3d 6e 28 22 45 52 6b 50 22 29 2c 61 3d 6e 2e 6e 28 69 29 2c 63 3d 6e 28 22 61 57 7a 7a 22 29 2c 73 3d 6e 2e 6e 28 63 29 2c 75 3d 6e 28 22 31 31 48 6d 22 29 2c 6c 3d 6e 28 22 49 39 69 52 22 29 2c 70 3d 6e 2e 6e 28 6c 29 2c 66 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 3d 31 3b 74 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[18],{"0O9J":function(e,t,n){"use strict";var r=n("lEaq"),o=n.n(r),i=n("ERkP"),a=n.n(i),c=n("aWzz"),s=n.n(c),u=n("11Hm"),l=n("I9iR"),p=n.n(l),f=Object.assign\|\|function(e){for(var t=1;t<arguments.length;t
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 5d 2e 70 61 74 74 65 72 6e 2b 22 29 24 22 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 66 6f 72 28 76 61 72 20 69 3d 22 22 2c 61 3d 6e 7c 7c 7b 7d 2c 63 3d 28 6f 7c 7c 7b 7d 29 2e 70 72 65 74 74 79 3f 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 50 72 65 74 74 79 3a 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 2c 73 3d 30 3b 73 3c 65 2e 6c 65 6e 67 74 68 3b 73 2b 2b 29 7b 76 61 72 20 75 3d 65 5b 73 5d 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 75 29 7b 76 61 72 20 6c 2c 70 3d 61 5b 75 2e 6e 61 6d 65 5d 3b 69 66 28 6e 75 6c 6c 3d 3d 70 29 7b 69 66 28 75 2e 6f 70 74 69 6f 6e 61 6c 29 7b 75 2e 70 61 72 74 69 61 6c 26 26 28 69 2b 3d 75 2e 70 72 65 66 69 78 29 3b 63 6f 6e 74 69 6e 75 65 7d 74 Data Ascii: ].pattern+")$"));return function(n,o){for(var i="",a=n\|\|{},c=(o\|\|{}).pretty?encodeURIComponentPretty:encodeURIComponent,s=0;s<e.length;s++){var u=e[s];if("string"!==typeof u){var l,p=a[u.name];if(null==p){if(u.optional){u.partial&&(i+=u.prefix);continue}t
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 73 2e 75 70 64 61 74 65 72 2e 65 6e 71 75 65 75 65 46 6f 72 63 65 55 70 64 61 74 65 28 74 68 69 73 2c 65 2c 22 66 6f 72 63 65 55 70 64 61 74 65 22 29 7d 2c 46 2e 70 72 6f 74 6f 74 79 70 65 3d 45 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 4f 3d 47 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 46 3b 4f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 47 2c 72 28 4f 2c 45 2e 70 72 6f 74 6f 74 79 70 65 29 2c 4f 2e 69 73 50 75 72 65 52 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 3d 21 30 3b 76 61 72 20 77 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 78 3d 7b 63 75 72 72 65 6e 74 3a 6e 75 6c 6c 7d 2c 50 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6a 3d 7b 6b 65 79 3a 21 30 2c 72 65 66 3a 21 30 2c 5f 5f 73 65 6c 66 3a Data Ascii: s.updater.enqueueForceUpdate(this,e,"forceUpdate")},F.prototype=E.prototype;var O=G.prototype=new F;O.constructor=G,r(O,E.prototype),O.isPureReactComponent=!0;var w={current:null},x={current:null},P=Object.prototype.hasOwnProperty,j={key:!0,ref:!0,__self:
2024-04-24 12:22:30 UTC	15371	IN	Data Raw: 49 31 38 6e 3a 22 6c 61 6e 67 75 61 67 65 43 68 61 6e 67 65 64 22 2c 62 69 6e 64 49 31 38 6e 53 74 6f 72 65 3a 22 22 2c 74 72 61 6e 73 45 6d 70 74 79 4e 6f 64 65 56 61 6c 75 65 3a 22 22 2c 74 72 61 6e 73 53 75 70 70 6f 72 74 42 61 73 69 63 48 74 6d 6c 4e 6f 64 65 73 3a 21 30 2c 74 72 61 6e 73 4b 65 65 70 42 61 73 69 63 48 74 6d 6c 4e 6f 64 65 73 46 6f 72 3a 5b 22 62 72 22 2c 22 73 74 72 6f 6e 67 22 2c 22 69 22 2c 22 70 22 5d 2c 75 73 65 53 75 73 70 65 6e 73 65 3a 21 30 7d 2c 66 3d 6e 2e 6e 28 75 29 2e 61 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 65 74 44 65 66 61 75 6c 74 73 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: I18n:"languageChanged",bindI18nStore:"",transEmptyNodeValue:"",transSupportBasicHtmlNodes:!0,transKeepBasicHtmlNodesFor:["br","strong","i","p"],useSuspense:!0},f=n.n(u).a.createContext();function setDefaults(){var e=arguments.length>0&&void 0!==arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49994	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	622	OUT	GET /core/assets/js/50.de3b5864.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 107348 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:56 GMT ETag: "114785899ceb423273fcc17aaad202e9" x-amz-server-side-encryption: AES256 x-amz-version-id: IDOshLSs59ag7cTxfipp96ACTV_0j9m8 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 23 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 30e44f6bcab5a55553866f1b4c293f0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: XvAwPRIWtE8BPwkUT0SQYV47pbo_tUfkhQA6nVqTvU3wYfj74c4MuA== Age: 164057
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 30 5d 2c 7b 22 37 6e 6d 54 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 20 63 68 65 63 6b 44 43 45 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f 42 41 4c 5f 48 4f 4f 4b 5f 5f 2e 63 68 65 63 6b 44 43 45 29 74 72 79 7b 5f 5f 52 45 41 43 54 5f 44 45 56 54 4f 4f 4c 53 5f 47 4c 4f Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[50],{"7nmT":function(e,t,n){"use strict";!function checkDCE(){if("undefined"!==typeof __REACT_DEVTOOLS_GLOBAL_HOOK__&&"function"===typeof __REACT_DEVTOOLS_GLOBAL_HOOK__.checkDCE)try{__REACT_DEVTOOLS_GLO
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 26 26 28 6e 75 6c 6c 21 3d 3d 6e 3f 21 6e 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3a 22 64 61 74 61 2d 22 21 3d 3d 28 65 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 73 6c 69 63 65 28 30 2c 35 29 29 26 26 22 61 72 69 61 2d 22 21 3d 3d 65 29 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 21 31 7d 7d 28 65 2c 74 2c 6e 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 6e 29 73 77 69 74 63 68 28 6e 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 74 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 74 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 74 29 7c 7c 31 3e 74 7d 72 65 74 75 Data Ascii: &&(null!==n?!n.acceptsBooleans:"data-"!==(e=e.toLowerCase().slice(0,5))&&"aria-"!==e);default:return!1}}(e,t,n,r))return!0;if(r)return!1;if(null!==n)switch(n.type){case 3:return!t;case 4:return!1===t;case 5:return isNaN(t);case 6:return isNaN(t)\|\|1>t}retu
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 65 7c 7c 22 75 72 6c 22 3d 3d 3d 65 2e 74 79 70 65 7c 7c 22 70 61 73 73 77 6f 72 64 22 3d 3d 3d 65 2e 74 79 70 65 29 7c 7c 22 74 65 78 74 61 72 65 61 22 3d 3d 3d 74 7c 7c 22 74 72 75 65 22 3d 3d 3d 65 2e 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 64 28 65 29 7b 76 61 72 20 74 3d 4e 64 28 29 2c 6e 3d 65 2e 66 6f 63 75 73 65 64 45 6c 65 6d 2c 72 3d 65 2e 73 65 6c 65 63 74 69 6f 6e 52 61 6e 67 65 3b 69 66 28 74 21 3d 3d 6e 26 26 6e 26 26 6e 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 26 26 66 75 6e 63 74 69 6f 6e 20 4d 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 21 28 21 65 7c 7c 21 74 29 26 26 28 65 3d 3d 3d 74 7c 7c 28 21 65 7c 7c 33 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 26 26 28 74 26 26 33 3d 3d 3d 74 2e 6e 6f 64 65 54 Data Ascii: e\|\|"url"===e.type\|\|"password"===e.type)\|\|"textarea"===t\|\|"true"===e.contentEditable)}function Qd(e){var t=Nd(),n=e.focusedElem,r=e.selectionRange;if(t!==n&&n&&n.ownerDocument&&function Md(e,t){return!(!e\|\|!t)&&(e===t\|\|(!e\|\|3!==e.nodeType)&&(t&&3===t.nodeT
2024-04-24 12:22:30 UTC	14808	IN	Data Raw: 79 70 65 3f 28 28 6c 3d 65 28 6e 2c 72 2e 70 72 6f 70 73 29 29 2e 72 65 66 3d 41 66 28 74 2c 6e 2c 72 29 2c 6c 2e 72 65 74 75 72 6e 3d 74 2c 6c 29 3a 28 28 6c 3d 59 65 28 72 2e 74 79 70 65 2c 72 2e 6b 65 79 2c 72 2e 70 72 6f 70 73 2c 6e 75 6c 6c 2c 74 2e 6d 6f 64 65 2c 6c 29 29 2e 72 65 66 3d 41 66 28 74 2c 6e 2c 72 29 2c 6c 2e 72 65 74 75 72 6e 3d 74 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 74 2c 6e 2c 72 2c 6c 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 3d 6e 7c 7c 34 21 3d 3d 6e 2e 74 61 67 7c 7c 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 21 3d 3d 72 2e 63 6f 6e 74 61 69 6e 65 72 49 6e 66 6f 7c 7c 6e 2e 73 74 61 74 65 4e 6f 64 65 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 21 3d 3d 72 2e 69 6d 70 6c 65 6d 65 6e 74 Data Ascii: ype?((l=e(n,r.props)).ref=Af(t,n,r),l.return=t,l):((l=Ye(r.type,r.key,r.props,null,t.mode,l)).ref=Af(t,n,r),l.return=t,l)}function k(t,n,r,l){return null===n\|\|4!==n.tag\|\|n.stateNode.containerInfo!==r.containerInfo\|\|n.stateNode.implementation!==r.implement
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 7c 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 34 29 2c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 53 6e 61 70 73 68 6f 74 42 65 66 6f 72 65 55 70 64 61 74 65 7c 7c 6f 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 26 26 75 3d 3d 3d 65 2e 6d 65 6d 6f 69 7a 65 64 53 74 61 74 65 7c 7c 28 74 2e 65 66 66 65 63 74 54 61 67 7c 3d 32 35 36 29 2c 72 3d 21 31 29 3b 72 65 74 75 72 6e 20 51 67 28 65 2c 74 2c 6e 2c 72 2c 61 2c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 51 67 28 65 2c 74 2c 6e 2c 72 2c 6c 2c 61 29 7b 4e 67 28 65 2c 74 29 3b 76 61 72 20 69 3d 30 21 3d 3d 28 36 34 26 74 2e 65 66 66 65 63 74 54 61 67 29 3b 69 66 28 21 72 26 26 21 69 29 72 65 74 75 72 6e 20 6c 26 26 50 65 28 74 2c 6e 2c 21 31 29 2c 4a 67 28 65 2c 74 2c 61 29 Data Ascii: \|(t.effectTag\|=4),"function"!==typeof i.getSnapshotBeforeUpdate\|\|o===e.memoizedProps&&u===e.memoizedState\|\|(t.effectTag\|=256),r=!1);return Qg(e,t,n,r,a,l)}function Qg(e,t,n,r,l,a){Ng(e,t);var i=0!==(64&t.effectTag);if(!r&&!i)return l&&Pe(t,n,!1),Jg(e,t,a)
2024-04-24 12:22:30 UTC	16384	IN	Data Raw: 6e 20 75 68 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 3b 3b 29 7b 69 66 28 35 3d 3d 3d 6e 2e 74 61 67 29 7b 76 61 72 20 72 3d 6e 2e 73 74 61 74 65 4e 6f 64 65 3b 69 66 28 74 29 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 65 6c 73 65 7b 72 3d 6e 2e 73 74 61 74 65 4e 6f 64 65 3b 76 61 72 20 6c 3d 6e 2e 6d 65 6d 6f 69 7a 65 64 50 72 6f 70 73 2e 73 74 79 6c 65 3b 6c 3d 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6e 75 6c 6c 21 3d 3d 6c 26 26 6c 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 64 69 73 70 6c 61 79 22 29 3f 6c 2e 64 69 73 70 6c 61 79 3a 6e 75 6c 6c 2c 72 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 6e 65 28 22 64 69 73 70 6c 61 79 22 2c 6c 29 7d 7d 65 6c 73 65 20 69 66 28 36 3d 3d 3d 6e 2e 74 61 67 29 6e 2e 73 74 61 Data Ascii: n uh(e,t){for(var n=e;;){if(5===n.tag){var r=n.stateNode;if(t)r.style.display="none";else{r=n.stateNode;var l=n.memoizedProps.style;l=void 0!==l&&null!==l&&l.hasOwnProperty("display")?l.display:null,r.style.display=ne("display",l)}}else if(6===n.tag)n.sta
2024-04-24 12:22:31 UTC	10620	IN	Data Raw: 72 69 74 79 28 75 2e 75 6e 73 74 61 62 6c 65 5f 49 6d 6d 65 64 69 61 74 65 50 72 69 6f 72 69 74 79 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 2c 6e 2c 72 2c 6c 29 7d 29 7d 76 61 72 20 74 6c 3d 6e 75 6c 6c 2c 6e 6c 3d 6e 75 6c 6c 2c 72 6c 3d 30 2c 6c 6c 3d 76 6f 69 64 20 30 2c 61 6c 3d 21 31 2c 69 6c 3d 6e 75 6c 6c 2c 6f 6c 3d 30 2c 75 6c 3d 30 2c 63 6c 3d 21 31 2c 73 6c 3d 6e 75 6c 6c 2c 66 6c 3d 21 31 2c 64 6c 3d 21 31 2c 70 6c 3d 6e 75 6c 6c 2c 6d 6c 3d 75 2e 75 6e 73 74 61 62 6c 65 5f 6e 6f 77 28 29 2c 68 6c 3d 31 30 37 33 37 34 31 38 32 32 2d 28 6d 6c 2f 31 30 7c 30 29 2c 67 6c 3d 68 6c 2c 76 6c 3d 35 30 2c 79 6c 3d 30 2c 62 6c 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 78 69 28 29 7b 68 6c 3d 31 30 37 33 37 34 31 38 32 32 2d Data Ascii: rity(u.unstable_ImmediatePriority,function(){return e(t,n,r,l)})}var tl=null,nl=null,rl=0,ll=void 0,al=!1,il=null,ol=0,ul=0,cl=!1,sl=null,fl=!1,dl=!1,pl=null,ml=u.unstable_now(),hl=1073741822-(ml/10\|0),gl=hl,vl=50,yl=0,bl=null;function xi(){hl=1073741822-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	50000	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	622	OUT	GET /core/assets/js/42.f634da7c.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 11808 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 07:19:36 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "c65db597e762d33246cfbec56b886523" x-amz-server-side-encryption: AES256 x-amz-version-id: p7gn_3g.5Uk0hSjwrROLaf7DYqqY.M4Q Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 29 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b7b1a2eee8508a9a20c99d23ed8145ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: zWSoZyYB6XeS5XvWEdmN9V7gHJ3tIVaIdNpEgB0JroSVppCNSlnSbg== Age: 795774
2024-04-24 12:22:31 UTC	11808	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 32 5d 2c 7b 22 39 4f 55 4e 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 72 65 61 74 65 53 74 6f 72 65 7d 29 2c 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 6f 6d 62 69 6e 65 52 65 64 75 63 65 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 69 6e 64 41 63 74 69 6f 6e 43 72 65 61 74 6f 72 73 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[42],{"9OUN":function(e,t,n){"use strict";n.d(t,"e",function(){return createStore}),n.d(t,"c",function(){return combineReducers}),n.d(t,"b",function(){return bindActionCreators}),n.d(t,"a",function(){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49998	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	622	OUT	GET /core/assets/js/29.31d09948.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:30 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 13063 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:34 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "455157cb49065fb85fed54901ddaeb0e" x-amz-server-side-encryption: AES256 x-amz-version-id: 4.AWrkwkcmSV3EGhwrdBs84571BYamhK Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 30e44f6bcab5a55553866f1b4c293f0c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: H9u1RtKB2ZAO4N_MeFWFvgi1Zxj4xR1JorXThi9NhDIlwMb_zHehZg== Age: 4024735
2024-04-24 12:22:31 UTC	13063	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 39 5d 2c 7b 22 37 45 41 30 22 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 5c 30 2d 5c 75 44 37 46 46 5c 75 45 30 30 30 2d 5c 75 46 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 7c 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 2f 7d 2c 43 6b 69 75 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 75 29 7b 74 2e 65 78 70 6f 72 74 73 3d 2f 5b 20 5c 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[29],{"7EA0":function(t,u){t.exports=/[\0-\uD7FF\uE000-\uFFFF]\|[\uD800-\uDBFF][\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])\|(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]/},Ckiu:function(t,u){t.exports=/[ \x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49999	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	622	OUT	GET /core/assets/js/21.b8c41db9.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 17003 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "65e5c965272e021ae33ff8bc39565ef5" x-amz-server-side-encryption: AES256 x-amz-version-id: NPZU3_A94QG96HM0zEMWjQo9Mh5ukg2M Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 14 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fa29d6aa47b7c482fa023ba4aba3882c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: KvYnXq2XSBSsPupsnsSiGFiHGDgSP3u84P5ldn5UyWYLb-QumKwapg== Age: 164057
2024-04-24 12:22:31 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 5d 2c 7b 22 32 53 56 64 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 69 73 41 62 73 6f 6c 75 74 65 55 52 4c 28 65 29 7b 72 65 74 75 72 6e 2f 5e 28 5b 61 2d 7a 5d 5b 61 2d 7a 5c 64 5c 2b 5c 2d 5c 2e 5d 2a 3a 29 3f 5c 2f 5c 2f 2f 69 2e 74 65 73 74 28 65 29 7d 7d 2c 22 35 6f 4d 70 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 62 69 6e 65 55 52 4c 73 28 65 2c 74 29 7b 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[21],{"2SVd":function(e,t,r){"use strict";e.exports=function isAbsoluteURL(e){return/^([a-z][a-z\d\+\-\.]*:)?\/\//i.test(e)}},"5oMp":function(e,t,r){"use strict";e.exports=function combineURLs(e,t){retur
2024-04-24 12:22:31 UTC	1611	IN	Data Raw: 29 7d 2c 69 73 46 69 6c 65 3a 66 75 6e 63 74 69 6f 6e 20 69 73 46 69 6c 65 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 46 69 6c 65 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 42 6c 6f 62 3a 66 75 6e 63 74 69 6f 6e 20 69 73 42 6c 6f 62 28 65 29 7b 72 65 74 75 72 6e 22 5b 6f 62 6a 65 63 74 20 42 6c 6f 62 5d 22 3d 3d 3d 61 2e 63 61 6c 6c 28 65 29 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 69 73 46 75 6e 63 74 69 6f 6e 2c 69 73 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 20 69 73 53 74 72 65 61 6d 28 65 29 7b 72 65 74 75 72 6e 20 69 73 4f 62 6a 65 63 74 28 65 29 26 26 69 73 46 75 6e 63 74 69 6f 6e 28 65 2e 70 69 70 65 29 7d 2c 69 73 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3a 66 75 6e 63 74 69 6f 6e 20 69 73 55 52 4c 53 65 61 72 63 68 Data Ascii: )},isFile:function isFile(e){return"[object File]"===a.call(e)},isBlob:function isBlob(e){return"[object Blob]"===a.call(e)},isFunction:isFunction,isStream:function isStream(e){return isObject(e)&&isFunction(e.pipe)},isURLSearchParams:function isURLSearch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	50002	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:30 UTC	621	OUT	GET /core/assets/js/8.10f90e75.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 83519 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 20:29:38 GMT Last-Modified: Thu, 04 Apr 2024 18:49:24 GMT ETag: "a8ceac2e3bd2c128d8f2e2f1b0ef0290" x-amz-server-side-encryption: AES256 x-amz-version-id: ydr5XnB6N9ch.ibN_3XR4XFI_Tj8bio6 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 104 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b58fb6f88568c8b48dd64d8d83a23c44.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: ZTdErEljM7Ii5tOpseXLiRKll5Z5yR8A-xt7pZVSp350pQusZ7e6Pg== Age: 748373
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 5d 2c 7b 22 2b 2f 4a 65 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 2d 31 2c 61 3d 22 50 52 45 2d 52 45 4e 44 45 52 22 7d 2c 22 2b 4b 62 73 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 22 59 57 68 70 22 29 2c 61 3d 6e 28 22 53 30 69 67 22 29 2c 6f 3d 6e 28 22 45 52 6b 50 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"+/Je":function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return a});var r=-1,a="PRE-RENDER"},"+Kbs":function(e,t,n){"use strict";var r=n("YWhp"),a=n("S0ig"),o=n("ERkP
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 63 74 28 67 2e 61 29 28 79 2e 63 2e 47 44 50 52 29 2c 21 5f 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 48 3d 21 5f 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 41 6c 77 61 79 73 4f 6e 26 26 5f 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 4c 69 6e 6b 26 26 5f 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 4c 69 6e 6b 54 65 78 74 2c 55 3d 4f 62 6a 65 63 74 28 62 2e 6d 29 28 5f 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 4c 69 6e 6b 29 3b 72 65 74 75 72 6e 20 45 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 72 65 66 3a 74 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 67 64 70 72 2d 63 6f 6e 73 65 6e 74 20 64 72 69 66 74 2d 77 69 64 67 65 74 2d 67 72 65 65 74 69 6e 67 22 7d 2c 45 2e 61 2e 63 72 65 61 74 65 45 Data Ascii: ct(g.a)(y.c.GDPR),!_)return null;var H=!_.privacyPolicyAlwaysOn&&_.privacyPolicyLink&&_.privacyPolicyLinkText,U=Object(b.m)(_.privacyPolicyLink);return E.a.createElement("div",{ref:t,className:"drift-widget-gdpr-consent drift-widget-greeting"},E.a.createE
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 22 2c 57 45 4c 43 4f 4d 45 5f 4d 45 53 53 41 47 45 5f 43 4c 4f 53 45 44 3a 22 64 72 69 66 74 3a 3a 77 65 6c 63 6f 6d 65 4d 65 73 73 61 67 65 3a 63 6c 6f 73 65 22 2c 41 57 41 59 5f 4d 45 53 53 41 47 45 5f 4f 50 45 4e 45 44 3a 22 64 72 69 66 74 3a 3a 61 77 61 79 4d 65 73 73 61 67 65 3a 6f 70 65 6e 22 2c 41 57 41 59 5f 4d 45 53 53 41 47 45 5f 43 4c 4f 53 45 44 3a 22 64 72 69 66 74 3a 3a 61 77 61 79 4d 65 73 73 61 67 65 3a 63 6c 6f 73 65 22 7d 2c 2e 2e 2e 7b 4d 45 53 53 41 47 45 5f 52 45 43 45 49 56 45 44 3a 22 64 72 69 66 74 3a 3a 6d 65 73 73 61 67 65 22 2c 4d 45 53 53 41 47 45 5f 53 45 4e 54 3a 22 64 72 69 66 74 3a 3a 6d 65 73 73 61 67 65 3a 73 65 6e 74 22 7d 2c 2e 2e 2e 7b 43 41 4d 50 41 49 47 4e 5f 43 4c 49 43 4b 45 44 3a 22 64 72 69 66 74 3a 3a 63 61 6d Data Ascii: ",WELCOME_MESSAGE_CLOSED:"drift::welcomeMessage:close",AWAY_MESSAGE_OPENED:"drift::awayMessage:open",AWAY_MESSAGE_CLOSED:"drift::awayMessage:close"},...{MESSAGE_RECEIVED:"drift::message",MESSAGE_SENT:"drift::message:sent"},...{CAMPAIGN_CLICKED:"drift::cam
2024-04-24 12:22:31 UTC	14808	IN	Data Raw: 61 67 65 3a 6e 2e 74 68 61 6e 6b 59 6f 75 4d 65 73 73 61 67 65 7c 7c 22 22 2c 73 65 6e 64 65 72 49 64 3a 6e 2e 73 65 6e 64 65 72 49 64 2c 74 79 70 65 3a 6e 2e 63 61 6d 70 61 69 67 6e 44 69 73 70 6c 61 79 54 79 70 65 7d 7d 7d 2c 68 68 68 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 29 3b 76 61 72 20 72 2c 61 3d 6e 28 22 65 66 62 45 22 29 2c 6f 3d 6e 28 22 70 75 2f 58 22 29 2c 63 3d 6e 28 22 30 6c 66 76 22 29 3b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 44 45 42 55 47 3d 22 44 45 42 55 47 22 2c 65 2e 49 4e 46 4f 3d 22 49 4e Data Ascii: age:n.thankYouMessage\|\|"",senderId:n.senderId,type:n.campaignDisplayType}}},hhh8:function(e,t,n){"use strict";n.d(t,"a",function(){return r}),n.d(t,"b",function(){return i});var r,a=n("efbE"),o=n("pu/X"),c=n("0lfv");!function(e){e.DEBUG="DEBUG",e.INFO="IN
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 63 3a 3a 63 6c 6f 73 65 2d 63 68 61 74 22 2c 6d 65 73 73 61 67 65 3a 7b 7d 7d 29 2c 6e 28 4f 62 6a 65 63 74 28 75 2e 68 29 28 7b 63 68 61 74 4f 70 65 6e 3a 21 31 2c 69 73 43 68 61 74 54 61 6b 65 6f 76 65 72 3a 21 31 7d 29 29 2c 62 28 21 31 29 29 7d 2c 5b 76 2c 6e 5d 29 3b 76 61 72 20 43 3d 4f 62 6a 65 63 74 28 64 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 69 66 28 4f 62 6a 65 63 74 28 69 2e 61 29 28 7b 74 6f 70 69 63 3a 22 72 65 6d 6f 76 65 2d 63 68 61 74 2d 74 61 6b 65 6f 76 65 72 22 2c 6d 65 73 73 61 67 65 3a 7b 63 6c 61 73 73 4e 61 6d 65 73 54 6f 52 65 6d 6f 76 65 3a 5b 6f 2e 61 5d 7d 7d 29 2c 21 4f 29 7b 76 61 72 20 61 3d 5b 6d 28 45 2c 65 29 5d 3b 69 66 28 65 26 26 65 2e 69 64 29 7b 76 61 72 20 63 2c Data Ascii: c::close-chat",message:{}}),n(Object(u.h)({chatOpen:!1,isChatTakeover:!1})),b(!1))},[v,n]);var C=Object(d.useCallback)(function(){var n;if(Object(i.a)({topic:"remove-chat-takeover",message:{classNamesToRemove:[o.a]}}),!O){var a=[m(E,e)];if(e&&e.id){var c,
2024-04-24 12:22:31 UTC	3175	IN	Data Raw: 39 20 39 2e 39 39 20 39 2e 39 39 48 38 36 2e 34 36 56 32 36 30 2e 37 35 63 34 2e 31 35 32 2d 32 30 2e 39 36 31 20 32 31 2e 32 37 33 2d 33 37 2e 32 37 20 34 32 2e 36 37 31 2d 34 30 2e 32 35 35 76 2d 31 30 2e 30 39 32 48 35 37 2e 33 31 39 63 2d 34 2e 36 38 20 30 2d 38 2e 34 35 33 2d 33 2e 37 37 33 2d 38 2e 34 35 33 2d 38 2e 34 32 37 76 2d 39 37 2e 37 35 38 63 30 2d 34 2e 36 34 37 20 33 2e 37 38 2d 38 2e 34 32 38 20 38 2e 34 34 35 2d 38 2e 34 32 38 68 36 34 2e 38 36 32 56 38 32 2e 30 33 35 68 31 33 2e 37 34 35 56 35 38 2e 33 33 63 2d 35 2e 33 33 39 2d 31 2e 38 38 38 2d 39 2e 31 36 34 2d 36 2e 39 38 33 2d 39 2e 31 36 34 2d 31 32 2e 39 37 31 20 30 2d 37 2e 35 39 36 20 36 2e 31 35 34 2d 31 33 2e 37 35 34 20 31 33 2e 37 34 36 2d 31 33 2e 37 35 34 20 37 2e 35 39 Data Ascii: 9 9.99 9.99H86.46V260.75c4.152-20.961 21.273-37.27 42.671-40.255v-10.092H57.319c-4.68 0-8.453-3.773-8.453-8.427v-97.758c0-4.647 3.78-8.428 8.445-8.428h64.862V82.035h13.745V58.33c-5.339-1.888-9.164-6.983-9.164-12.971 0-7.596 6.154-13.754 13.746-13.754 7.59

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	50005	34.111.140.246	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:31 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1231 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	1231	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 38 33 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 39 36 31 33 32 39 38 32 39 72 30 2e 33 31 31 38 32 34 36 38 36 36 32 32 38 31 34 35 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7283","visitors":[{"visitor_id":"oeu1713961329829r0.3118246866228145","session_id":"AUTO","at
2024-04-24 12:22:31 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Wed, 24 Apr 2024 12:22:31 GMT server: istio-envoy x-envoy-upstream-service-time: 3 x-request-id: 7228617b-8aef-49f6-81e1-19559885774a x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	50007	172.64.155.119	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:31 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:31 GMT Content-Type: application/json Content-Length: 67 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87960f2dc8a90ad5-LAS
2024-04-24 12:22:31 UTC	67	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NV","stateName":"Nevada","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	50006	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:31 UTC	1031	OUT	GET /core/assets/js/16.9ef4a519.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94897 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 20:29:38 GMT Last-Modified: Thu, 04 Apr 2024 18:49:23 GMT ETag: "b32ccc4557ebaeaebc835c96712693c2" x-amz-server-side-encryption: AES256 x-amz-version-id: lQqXelmqKVK8AZ0Wq2yFaGZmjI3zxEVx Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 59 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 4dcdeec31cc51cbb90ca4f534e0fdb9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: g5WQBIPlarp0-K1TsdtZt_RgO6y3e4nkF-Mh_Vex-5WdfK4Qe32sxw== Age: 748373
2024-04-24 12:22:31 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 36 5d 2c 7b 22 2b 52 79 39 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 69 3d 6e 28 22 6e 66 62 41 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 75 3d 6e 28 22 53 73 5a 4e 22 29 2c 73 3d 6e 28 22 42 38 4a 59 22 29 2c 64 3d 6e 28 22 48 76 68 67 22 29 2c 6c 3d 6e 28 22 53 46 6f 61 22 29 2c 62 3d 6e 28 22 54 44 55 45 22 29 2c 66 3d 6e 28 22 64 61 34 4c 22 29 2c 76 3d 6e 28 22 68 6d 38 62 22 29 2c 70 3d 6e 28 22 4c 56 63 58 22 29 2c 4f 3d 6e 28 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[16],{"+Ry9":function(e,t,n){"use strict";var a=n("mj2O"),r=n.n(a),c=n("7SM1"),i=n("nfbA"),o=n("QtlZ"),u=n("SsZN"),s=n("B8JY"),d=n("Hvhg"),l=n("SFoa"),b=n("TDUE"),f=n("da4L"),v=n("hm8b"),p=n("LVcX"),O=n(
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 61 64 41 67 65 6e 74 4d 65 73 73 61 67 65 73 5b 69 2e 62 5d 3d 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 7d 29 2c 6e 2e 63 6f 6e 76 65 72 73 61 74 69 6f 6e 73 5b 69 2e 62 5d 3d 7b 63 6f 6e 76 65 72 73 61 74 69 6f 6e 3a 7b 69 64 3a 69 2e 62 2c 75 70 64 61 74 65 64 41 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 6c 61 73 74 4d 65 73 73 61 67 65 3a 4f 62 6a 65 63 74 28 64 2e 61 29 28 73 29 2c 6c 61 73 74 41 67 65 6e 74 4d 65 73 73 61 67 65 3a 4f 62 6a 65 63 74 28 64 2e 61 29 28 73 29 2c 75 6e 72 65 61 64 4d 65 73 73 61 67 65 73 3a 73 2e 6c 65 6e 67 74 68 7d 2c 6e 2e 72 65 73 75 6d 65 46 6c 6f 77 43 6f 6e 74 65 78 74 3d 6f 2c 6e 2e 61 63 74 69 76 65 43 6f 6e 76 65 72 73 61 74 69 6f 6e 3d 69 2e 62 2c 6e 2e 65 78 63 68 Data Ascii: adAgentMessages[i.b]=s.map(function(e){return e.id}),n.conversations[i.b]={conversation:{id:i.b,updatedAt:Date.now()},lastMessage:Object(d.a)(s),lastAgentMessage:Object(d.a)(s),unreadMessages:s.length},n.resumeFlowContext=o,n.activeConversation=i.b,n.exch
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 66 28 74 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 6d 65 73 73 61 67 65 22 5d 2c 22 22 29 2c 6e 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 61 75 74 6f 6d 61 74 69 63 53 65 6e 64 65 72 22 5d 2c 21 31 29 2c 61 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 73 65 6e 64 65 72 49 64 22 5d 2c 6e 75 6c 6c 29 2c 72 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 73 65 6e 64 65 72 49 6e 66 6f 22 5d 2c 22 22 29 2c 63 3d 4f 62 6a 65 63 74 28 50 2e 61 29 28 65 2c 5b 22 63 74 61 22 2c 22 43 74 61 54 79 70 65 22 5d 2c 6e 75 6c 6c 29 2c 69 3d 21 21 63 26 26 63 3d 3d 3d 6b 2e 61 2e 53 43 48 45 44 55 4c 45 5f 4d 45 45 54 49 4e 47 26 26 21 61 2c 6f 3d 6e 75 6c 6c 21 3d 3d 74 2e 6d 61 74 63 68 28 46 29 2c 21 28 6f 7c 7c 6e 7c 7c 69 29 29 7b 75 2e 6e Data Ascii: f(t=Object(P.a)(e,["message"],""),n=Object(P.a)(e,["automaticSender"],!1),a=Object(P.a)(e,["senderId"],null),r=Object(P.a)(e,["senderInfo"],""),c=Object(P.a)(e,["cta","CtaType"],null),i=!!c&&c===k.a.SCHEDULE_MEETING&&!a,o=null!==t.match(F),!(o\|\|n\|\|i)){u.n
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 72 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 28 65 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 63 2c 69 2c 6f 2c 75 2c 73 3b 72 65 74 75 72 6e 20 72 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 24 28 72 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 72 2e 70 72 65 76 3d 72 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 65 2e 69 64 2c 6e 3d 65 2e 65 6d 61 69 6c 2c 61 3d 65 2e 75 73 65 72 4a 77 74 2c 63 3d 65 2e 61 6e 6f 6e 79 6d 6f 75 73 49 64 2c 69 3d 65 2e 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 52 65 71 75 69 72 65 64 53 74 61 74 75 73 2c 6f 3d 7b 7d 2c 75 3d 4f 62 6a 65 63 74 28 6c 2e 62 29 28 69 29 26 26 21 61 2c 73 3d 59 28 74 29 Data Ascii: e=Object(c.a)(r.a.mark(function _callee7(e){var t,n,a,c,i,o,u,s;return r.a.wrap(function _callee7$(r){for(;;)switch(r.prev=r.next){case 0:return t=e.id,n=e.email,a=e.userJwt,c=e.anonymousId,i=e.signedIdentityRequiredStatus,o={},u=Object(l.b)(i)&&!a,s=Y(t)
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 72 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 34 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 53 65 6e 64 49 64 46 72 6f 6d 53 74 6f 72 65 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 69 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 35 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 69 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 35 24 28 61 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 61 2e 70 72 65 76 3d 61 2e 6e 65 78 74 29 7b 63 61 73 65 20 Data Ascii: e"end":return r.stop()}},_callee4)}));return function removeSendIdFromStore(t){return e.apply(this,arguments)}}(),D=function(){var e=Object(o.a)(i.a.mark(function _callee5(e){var t,n;return i.a.wrap(function _callee5$(a){for(;;)switch(a.prev=a.next){case
2024-04-24 12:22:31 UTC	13969	IN	Data Raw: 29 7b 76 61 72 20 74 2c 6e 2c 61 2c 72 2c 69 2c 73 2c 6c 2c 66 2c 70 2c 4f 2c 67 3b 72 65 74 75 72 6e 20 63 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 37 24 28 63 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 63 2e 70 72 65 76 3d 63 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 74 3d 65 2e 69 6e 74 65 72 61 63 74 69 6f 6e 49 64 2c 6e 3d 65 2e 6c 6f 63 61 6c 65 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 22 22 3a 6e 2c 72 3d 65 2e 67 6f 54 6f 43 6f 6e 76 65 72 73 61 74 69 6f 6e 2c 69 3d 65 2e 69 73 46 72 6f 6d 43 6f 6e 76 65 72 73 61 74 69 6f 6e 61 6c 4c 61 6e 64 69 6e 67 50 61 67 65 2c 73 3d 65 2e 66 72 6f 6d 41 50 49 2c 6c 3d 76 6f 69 64 20 30 3d 3d 3d 73 7c 7c 73 2c 61 3d 61 7c 7c 4f 62 6a 65 63 74 28 76 2e Data Ascii: ){var t,n,a,r,i,s,l,f,p,O,g;return c.a.wrap(function _callee7$(c){for(;;)switch(c.prev=c.next){case 0:return t=e.interactionId,n=e.locale,a=void 0===n?"":n,r=e.goToConversation,i=e.isFromConversationalLandingPage,s=e.fromAPI,l=void 0===s\|\|s,a=a\|\|Object(v.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	50008	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:31 UTC	639	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=2&ClientTime=1713961349020&PageStart=1713961346738&PrevBundleTime=1713961347841&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:31 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:31 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	50009	35.81.127.23	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:31 UTC	1299	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145; ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; _gcl_au=1.1.568102465.1713961340; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Apr+24+2024+14%3A22%3A20+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5dc11bb1-6915-42b6-9ade-2b46c2902488&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _ga=GA1.2.866850028.1713961341; _gid=GA1.2.1110259529.1713961342; _gat_UA-39550292-1=1; _ga_1TZ7S9D6BQ=GS1.1.1713961341.1.0.1713961342.59.0.0; _uetsid=4f1c1f60023511efa8016792c6257a6f; _uetvid=4f1c74c0023511ef89da2f89b718d7a1; fs_lua=1.1713961346731; fs_uid=#12BP4E#2fb21e6e-5b70-437b-86b2-6d28b037cb26:b2abeec2-85fb-48e9-a672-7141db872fb2:1713961346731::1#/1745497346; _fbp=fb.1.1713961347300.1908196306
2024-04-24 12:22:31 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:31 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-24 12:22:31 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	50010	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:31 UTC	622	OUT	GET /core/assets/js/24.f2a14bf3.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 52313 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 07:58:37 GMT Last-Modified: Thu, 04 Apr 2024 18:49:23 GMT ETag: "eeb141d15a5542cc12f6697498a4dae4" x-amz-server-side-encryption: AES256 x-amz-version-id: h1TpcLqbPY4hV6zMUp0mzajfkh8wVGak Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 24 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 fce182da4ce1e712c0e21f2d6cad869e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 4RTOf-FjNxbuEnDdeldsYVctVhUcUGa01KeiqPMERHBFH2Vgyj944A== Age: 188634
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 34 5d 2c 7b 22 2b 66 31 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 71 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 7d 29 2c 6e 2e 64 28 74 2c 22 77 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 2c 6e 2e 64 28 74 2c 22 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 7d 29 2c 6e Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[24],{"+f1A":function(e,t,n){"use strict";n.d(t,"q",function(){return s}),n.d(t,"w",function(){return d}),n.d(t,"m",function(){return l}),n.d(t,"b",function(){return f}),n.d(t,"a",function(){return b}),n
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 65 6e 64 55 73 65 72 2e 65 6d 61 69 6c 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 6e 2e 70 61 79 6c 6f 61 64 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 74 3f 76 6f 69 64 20 30 3a 74 2e 65 6d 61 69 6c 7d 2c 52 45 43 45 49 56 45 5f 47 45 4f 3a 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 65 47 65 6f 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 6f 6e 3b 65 2e 64 72 61 66 74 2e 67 65 6f 3d 74 2e 70 61 79 6c 6f 61 64 7d 2c 52 45 43 45 49 56 45 5f 41 43 43 45 53 53 5f 54 4f 4b 45 4e 3a 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 65 41 63 63 65 73 73 54 6f 6b 65 6e 48 61 6e 64 6c 65 72 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 63 74 69 6f 6e 3b 65 2e 64 72 61 66 74 2e 61 75 74 68 2e 61 63 63 65 73 73 54 6f 6b 65 6e 3d 74 2e 70 61 79 6c 6f 61 64 2e 61 63 63 Data Ascii: endUser.email=null===(t=n.payload)\|\|void 0===t?void 0:t.email},RECEIVE_GEO:function receiveGeoHandler(e){var t=e.action;e.draft.geo=t.payload},RECEIVE_ACCESS_TOKEN:function receiveAccessTokenHandler(e){var t=e.action;e.draft.auth.accessToken=t.payload.acc
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 4e 28 65 2c 22 70 65 72 6d 61 63 6c 6f 73 65 4d 65 73 73 61 67 65 22 29 7d 2c 6b 3d 66 75 6e 63 74 69 6f 6e 20 74 72 75 6e 63 61 74 65 4d 65 73 73 61 67 65 54 65 78 74 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 76 2e 61 29 28 31 30 30 2c 65 29 5b 30 5d 2e 74 72 69 6d 28 29 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 20 74 72 75 6e 63 61 74 65 4d 65 73 73 61 67 65 50 72 65 76 69 65 77 28 65 2c 74 29 7b 76 61 72 20 6e 3d 41 28 65 2c 22 70 72 65 76 69 65 77 22 29 3b 69 66 28 6e 26 26 6e 2e 6c 65 6e 67 74 68 3e 74 29 7b 76 61 72 20 61 3d 6b 28 6e 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 72 2e 61 29 28 4f 62 6a 65 63 74 28 72 2e 61 29 28 7b 7d 2c 65 29 2c 7b 7d 2c 7b 61 74 74 72 69 62 75 74 65 73 3a 4f 62 6a 65 63 74 Data Ascii: (e){return N(e,"permacloseMessage")},k=function truncateMessageText(e){return Object(v.a)(100,e)[0].trim()},H=function truncateMessagePreview(e,t){var n=A(e,"preview");if(n&&n.length>t){var a=k(n);return Object(r.a)(Object(r.a)({},e),{},{attributes:Object
2024-04-24 12:22:31 UTC	3161	IN	Data Raw: 2e 61 2e 64 69 73 70 61 74 63 68 28 6f 2e 62 28 29 29 2c 65 2e 6e 65 78 74 3d 33 2c 6a 28 29 3b 63 61 73 65 20 33 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 65 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 35 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 55 73 65 72 4a 77 74 28 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 2c 43 3d 66 75 6e 63 74 69 6f 6e 20 67 65 74 45 78 74 65 72 6e 61 6c 45 6d 61 69 6c 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 69 2e 62 29 28 29 2e 73 65 73 73 69 6f 6e 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 75 2e 61 29 28 22 22 2c 5b 22 65 6e 64 55 73 65 72 22 2c 22 65 78 74 65 72 6e 61 6c 45 6d 61 69 6c 22 5d 2c 65 Data Ascii: .a.dispatch(o.b()),e.next=3,j();case 3:case"end":return e.stop()}},_callee5)}));return function clearUserJwt(){return e.apply(this,arguments)}}(),C=function getExternalEmail(){var e=Object(i.b)().session;return Object(u.a)("",["endUser","externalEmail"],e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	50011	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:31 UTC	622	OUT	GET /core/assets/js/17.aa20860d.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:31 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 41495 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 07:19:37 GMT Last-Modified: Thu, 04 Apr 2024 18:49:23 GMT ETag: "a013d30ad611b4379ce2caa016620cbf" x-amz-server-side-encryption: AES256 x-amz-version-id: UqtKlP1fgnBUCni0MHDQ7kjXDpJQX9r9 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 47 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 60a739d966f0e7be8035a21cab92a320.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: f6s3E6M8bWr36unhScKEj9KwiDy16m8WfB4EXCqHjzyU0N07j0BGew== Age: 795774
2024-04-24 12:22:31 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 5d 2c 7b 22 2b 44 35 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 63 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 29 2c 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 29 3b 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 43 48 41 54 3a 22 63 68 61 74 22 2c 55 53 45 52 3a 22 75 73 65 72 22 2c 50 52 45 53 45 4e 43 45 3a 22 70 72 65 73 65 6e 63 65 22 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[17],{"+D5C":function(e,t,n){"use strict";n.d(t,"c",function(){return r}),n.d(t,"b",function(){return o}),n.d(t,"a",function(){return a});var r=Object.freeze({CHAT:"chat",USER:"user",PRESENCE:"presence",
2024-04-24 12:22:31 UTC	16384	IN	Data Raw: 55 72 6c 22 5d 7d 29 2c 65 7d 7d 2c 41 3d 66 75 6e 63 74 69 6f 6e 20 70 61 72 73 65 41 6e 64 41 64 64 4c 69 6e 6b 73 28 65 29 7b 76 61 72 20 74 3d 6d 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 28 66 2e 6d 29 28 74 29 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 6e 3d 65 2c 72 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 72 3e 3d 30 3b 72 2d 2d 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 2c 61 3d 27 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 6b 65 79 3d 22 27 2e 63 6f 6e 63 61 74 28 6f 2e 74 65 78 74 2b 72 2e 74 6f 53 74 72 69 6e 67 28 29 29 2c 63 3d 27 3c 61 20 68 72 65 66 3d 22 27 2e 63 6f 6e 63 61 74 28 6f 2e 75 72 6c 2c 27 22 20 27 29 2e 63 6f 6e 63 61 74 28 61 2c 27 22 3e 27 29 2e Data Ascii: Url"]}),e}},A=function parseAndAddLinks(e){var t=m(e);if(Object(f.m)(t))return e;for(var n=e,r=t.length-1;r>=0;r--){var o=t[r],a='target="_blank" rel="noopener noreferrer" key="'.concat(o.text+r.toString()),c='<a href="'.concat(o.url,'" ').concat(a,'">').
2024-04-24 12:22:31 UTC	9719	IN	Data Raw: 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 4a 7a 46 73 22 2c 33 29 29 3b 63 61 73 65 22 6a 61 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 36 38 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 4e 36 6f 5a 22 2c 33 29 29 3b 63 61 73 65 22 6b 6f 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 36 39 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 45 41 33 6c 22 2c 33 29 29 3b 63 61 73 65 22 6e 62 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 30 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 2f 70 38 46 22 2c 33 29 29 3b 63 61 73 65 22 6e 6c 22 3a 72 65 74 75 72 6e 20 6e 2e 65 28 37 31 29 2e 74 68 65 6e 28 6e 2e 74 2e 62 69 6e 64 28 6e 75 6c 6c 2c 22 78 57 30 63 22 2c 33 29 29 3b 63 61 73 65 22 70 6c 22 3a 72 65 74 75 72 6e Data Ascii: .t.bind(null,"JzFs",3));case"ja":return n.e(68).then(n.t.bind(null,"N6oZ",3));case"ko":return n.e(69).then(n.t.bind(null,"EA3l",3));case"nb":return n.e(70).then(n.t.bind(null,"/p8F",3));case"nl":return n.e(71).then(n.t.bind(null,"xW0c",3));case"pl":return

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	50012	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:32 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=3&ClientTime=1713961350883&PageStart=1713961346738&PrevBundleTime=1713961349958&LastActivity=1858&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1477 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:32 UTC	1477	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 5a 6b 53 db 38 14 fd 2b 5e 7d 6a 67 8d b1 24 3f d3 7d 0c 1b 32 94 69 1b 18 12 da d9 69 3a 1e 61 2b 41 53 45 4a fd 08 50 96 ff be b2 9d 38 0e 49 20 05 da 65 ba 4e 18 93 b9 3a ba 2f dd 73 a5 38 be 06 3d fa 05 b4 b0 0e 3e 9c 53 01 5a 96 e7 fa 3a e8 4c d3 04 b4 3e 5e 83 37 4c 44 a0 65 bb 3a d8 8b 47 b9 08 e9 e0 3c 4d 27 49 6b 77 77 98 ec c8 b3 61 96 84 24 a5 91 c1 c4 94 70 16 fd 99 c5 7c 87 45 bf 43 ec 02 1d fa be e7 19 b6 3f 7f b9 ae 0e 1d cf 36 a0 59 bd 6c 4f 07 6c 3c 02 ba a9 de 6b f0 e6 d2 1b 41 c7 c5 86 53 01 3c 5c 0e 7c aa bb 7f a3 af f1 1b 2a c7 27 92 89 94 c6 32 4b 81 d2 64 3b b6 61 eb 10 15 5a 3d d3 70 2b ad 7e 21 81 86 b9 e4 c8 37 d9 e0 94 4c e9 aa 95 5b 3a 1b 33 db 99 81 f5 05 5f 23 6a cc 34 66 fe 8f 66 c6 32 4b e8 Data Ascii: ZkS8+^}jg$?}2ii:a+ASEJP8I eN:/s8=>SZ:L>^7LDe:G<M'Ikwwa$p\|EC?6YlOl<kAS<\\|*'2Kd;aZ=p+~!7L[:3_#j4ff2K
2024-04-24 12:22:32 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:32 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:32 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 35 32 35 35 39 7d 0a Data Ascii: {"BundleTime":1713961352559}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	50013	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:32 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=3&ClientTime=1713961350862&PageStart=1713961346738&PrevBundleTime=1713961349958&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 12094 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:32 UTC	12094	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 34 38 37 39 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 66 73 2d 6f 62 66 75 73 63 61 74 65 64 2e 69 6e 76 61 6c 69 64 3f 75 72 6c 2d 69 64 3d 31 33 37 22 2c 31 39 39 38 38 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 31 36 38 35 2e 31 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 69 6d 67 22 2c 30 2c 30 2c 31 39 39 38 38 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 31 36 37 33 2e 36 39 39 39 39 39 39 39 39 39 38 33 2c 30 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 37 39 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 32 31 35 36 35 2e 35 Data Ascii: {"Seq":3,"When":4879,"Evts":[{"Kind":57,"Args":[2,"https://fs-obfuscated.invalid?url-id=137",19988.599999999977,1685.1000000000058,"img",0,0,19988.599999999977,0,0,0,0,0,0,0,21673.699999999983,0,0,0],"When":4879},{"Kind":57,"Args":[12,"pointerout",21565.5
2024-04-24 12:22:32 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:32 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	50015	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:32 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=3&ClientTime=1713961350863&PageStart=1713961346738&PrevBundleTime=1713961349958&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 12094 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:32 UTC	12094	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 34 38 37 39 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 66 73 2d 6f 62 66 75 73 63 61 74 65 64 2e 69 6e 76 61 6c 69 64 3f 75 72 6c 2d 69 64 3d 31 33 37 22 2c 31 39 39 38 38 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 31 36 38 35 2e 31 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 69 6d 67 22 2c 30 2c 30 2c 31 39 39 38 38 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 31 36 37 33 2e 36 39 39 39 39 39 39 39 39 39 38 33 2c 30 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 34 38 37 39 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 32 31 35 36 35 2e 35 Data Ascii: {"Seq":3,"When":4879,"Evts":[{"Kind":57,"Args":[2,"https://fs-obfuscated.invalid?url-id=137",19988.599999999977,1685.1000000000058,"img",0,0,19988.599999999977,0,0,0,0,0,0,0,21673.699999999983,0,0,0],"When":4879},{"Kind":57,"Args":[12,"pointerout",21565.5
2024-04-24 12:22:32 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:32 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	50014	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:32 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961350864&PageStart=1713961346738&PrevBundleTime=1713961349958&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 516 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:32 UTC	516	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 37 31 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 36 2c 32 31 37 32 36 34 39 34 37 32 2c 34 33 35 33 33 34 34 32 2c 33 35 38 32 30 35 31 30 5d 2c 22 57 68 65 6e 22 3a 36 37 31 36 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 37 31 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 37 31 37 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e Data Ascii: {"Seq":4,"When":6716,"Evts":[{"Kind":57,"Args":[6,2172649472,43533442,35820510],"When":6716},{"Kind":100,"Args":["visible"],"When":6717},{"Kind":100,"Args":["hidden"],"When":6717},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign
2024-04-24 12:22:32 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:32 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	50016	192.29.14.118	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:32 UTC	1741	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=206&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=D32BF32183754911A4896AC2751429EC HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145; ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; _gcl_au=1.1.568102465.1713961340; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Apr+24+2024+14%3A22%3A20+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5dc11bb1-6915-42b6-9ade-2b46c2902488&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _ga=GA1.2.866850028.1713961341; _gid=GA1.2.1110259529.1713961342; _gat_UA-39550292-1=1; _ga_1TZ7S9D6BQ=GS1.1.1713961341.1.0.1713961342.59.0.0; _uetsid=4f1c1f60023511efa8016792c6257a6f; _uetvid=4f1c74c0023511ef89da2f89b718d7a1; fs_lua=1.1713961346731; fs_uid=#12BP4E#2fb21e6e-5b70-437b-86b2-6d28b037cb26:b2abeec2-85fb-48e9-a672-7141db872fb2:1713961346731::1#/1745497346; _fbp=fb.1.1713961347300.1908196306
2024-04-24 12:22:33 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:32 GMT Connection: close Content-Length: 49
2024-04-24 12:22:33 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	50018	34.111.140.246	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:34 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1135 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:34 UTC	1135	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 38 33 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 39 36 31 33 32 39 38 32 39 72 30 2e 33 31 31 38 32 34 36 38 36 36 32 32 38 31 34 35 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7283","visitors":[{"visitor_id":"oeu1713961329829r0.3118246866228145","session_id":"AUTO","at
2024-04-24 12:22:34 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Wed, 24 Apr 2024 12:22:34 GMT server: istio-envoy x-envoy-upstream-service-time: 3 x-request-id: f879427e-e691-4a5f-8283-2aa9226b08f4 x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	50022	142.250.141.103	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:34 UTC	848	OUT	POST /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=918223456.1713961353&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:34 UTC	837	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:34 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=918223456.1713961353&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:34 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	50021	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:34 UTC	1368	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=lfPdMw05TS1QTnyEaKtDBA&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:34 UTC	246	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 12:22:34 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	50019	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:34 UTC	1224	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:34 UTC	192	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:34 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5
2024-04-24 12:22:34 UTC	3918	IN	Data Raw: 66 34 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 76 4d 6a 57 37 77 6d 46 65 6b 45 59 52 41 4d 6a 34 36 53 50 48 76 6a 4e 56 30 31 6e 5f 5a 46 77 57 44 32 33 63 47 33 4a 4a 67 4d 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 56 Data Ascii: f47(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "vMjW7wmFekEYRAMj46SPHvjNV01n_ZFwWD23cG3JJgM" var userIdCookieV
2024-04-24 12:22:34 UTC	14087	IN	Data Raw: 33 36 66 66 0d 0a 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2c 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 26 26 63 75 72 72 65 6e 74 5f 77 69 6e 64 6f 77 5f 75 72 6c 5f 70 61 72 61 6d 2e 69 6e 64 65 78 4f 66 28 67 6c 6f 62 61 6c 73 2e 73 61 5f 64 65 62 75 67 5f 6b 65 79 29 3e 2d 31 26 26 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 53 41 2f 52 54 22 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4c 61 6c 28 65 29 7b 72 65 74 75 72 6e 20 6c 6f 61 64 4c 61 6c 48 65 6c 70 65 72 28 73 61 5f 75 72 6c 2c 65 29 2c 21 30 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 4c 61 6c 48 65 6c 70 65 72 28 65 2c 6f 29 7b 76 61 72 20 74 3d 6e 65 77 20 49 6d 61 67 65 3b 72 65 73 3d 63 75 72 72 65 6e 74 4c 61 6e 64 69 6e 67 55 52 4c 28 29 3b 76 61 Data Ascii: 36ffdy.appendChild(t),current_window_url_param&&current_window_url_param.indexOf(globals.sa_debug_key)>-1&&console.log("SA/RT"))}function loadLal(e){return loadLalHelper(sa_url,e),!0}function loadLalHelper(e,o){var t=new Image;res=currentLandingURL();va
2024-04-24 12:22:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	50023	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:34 UTC	836	OUT	GET /drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "493647a445d610f59f14e994de89111a-ssl"
2024-04-24 12:22:35 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:35 GMT Etag: "493647a445d610f59f14e994de89111a-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XHTZN7KCV59RBX9Q2WCB Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	50026	142.251.2.156	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:34 UTC	847	OUT	GET /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=918223456.1713961353&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-04-24 12:22:35 UTC	960	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:35 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUl2SPZDBfASCXUq5mby4G3fL8x62fofR6xWRgyLm_F8xswM2pgOmsP8TyG1; expires=Fri, 24-Apr-2026 12:22:35 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:35 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	50027	104.18.32.137	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:35 GMT Content-Type: text/javascript Content-Length: 78 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87960f46daae0ad7-LAS
2024-04-24 12:22:35 UTC	78	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NV","stateName":"Nevada","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.5	50028	146.75.92.157	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	629	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-24 12:22:35 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 12:22:35 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-bur-kbur8200032-BUR X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.5	49907	68.67.153.60	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	650	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: s.ml-attr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.25.1 Date: Wed, 24 Apr 2024 12:22:35 GMT Content-Type: text/html Content-Length: 145 Connection: close Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID
2024-04-24 12:22:35 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.5	50029	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961354343&PageStart=1713961346738&PrevBundleTime=1713961352559&LastActivity=5337&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 344 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	344	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 90 51 4b c3 30 14 85 ff 4a cc d3 06 d7 36 69 d2 a4 ed 44 18 73 28 cc a9 b0 c9 10 d9 43 d7 66 6b 58 d6 d6 b6 5b d5 b1 ff 6e 06 2a f3 61 20 c9 43 b8 f9 ce b9 e7 de 3d 9e a8 37 1c 71 c0 b3 4c e5 38 12 92 0a c0 c3 5d 53 e3 e8 75 8f 47 3a 4f 71 e4 4b c0 fd 6a 75 2c 09 f0 a8 f4 04 0f b9 f4 80 33 9f 31 ce 3d 60 7e e0 11 9f 92 f9 a9 cd 01 7e f4 94 90 5f 03 bc d3 b5 5e 18 85 4f 59 79 86 cd 74 9a 5a e4 0c 1a 86 27 64 d3 94 75 e4 ba 6d db 3a 69 91 6c 6b bd ca 9d a4 d8 b8 65 a5 77 71 f2 81 e1 1f 08 f5 04 83 90 48 fb 08 08 50 e2 d9 b5 50 87 39 c4 aa ed bd ba b8 79 1c 4c 5f 9e 86 28 6b 36 e6 da f2 22 60 e4 f8 45 25 65 a1 a0 8c 0b c9 02 c0 2a bf 7c 9e 80 0d 0c 78 5c 7c 6a 63 62 d7 77 08 ea cc 6c ec a2 ad d1 c3 14 51 e2 90 1e b2 05 c1 7b Data Ascii: QK0J6iDs(CfkX[na C=7qL8]SuG:OqKju,31=`~~_^OYytZ'dum:ilkewqHPP9yL_(k6"`E%e\|x\\|jcbwlQ{
2024-04-24 12:22:36 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:35 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:36 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 35 35 38 36 37 7d 0a Data Ascii: {"BundleTime":1713961355867}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.5	50030	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961354341&PageStart=1713961346738&PrevBundleTime=1713961352559&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 516 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	516	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 37 31 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 36 2c 32 31 37 32 36 34 39 34 37 32 2c 34 33 35 33 33 34 34 32 2c 33 35 38 32 30 35 31 30 5d 2c 22 57 68 65 6e 22 3a 36 37 31 36 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 37 31 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 37 31 37 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e Data Ascii: {"Seq":4,"When":6716,"Evts":[{"Kind":57,"Args":[6,2172649472,43533442,35820510],"When":6716},{"Kind":100,"Args":["visible"],"When":6717},{"Kind":100,"Args":["hidden"],"When":6717},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign
2024-04-24 12:22:36 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:35 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.5	50033	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	638	OUT	GET /core/assets/css/39.11d2b6a7.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 2783 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:14 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "87532c4db85f1429fa6d759bc3332f36" x-amz-server-side-encryption: AES256 x-amz-version-id: UcZhIKxPiJynhkWzqWd9d6dr.VpqzWB3 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b7b1a2eee8508a9a20c99d23ed8145ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: t21gkzAIFXqxghkknoIFKLyokLZBQWF2v0kfsEI5jFnF3q2dzaPYUA== Age: 4024761
2024-04-24 12:22:35 UTC	2783	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 7b 77 69 64 74 68 3a 32 38 70 78 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 3e 63 69 72 63 6c 65 7b 66 69 6c 6c 3a 23 34 37 34 36 34 37 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6c 6f 61 64 65 72 2d 62 61 6c 6c 73 2d 2d 76 69 73 69 62 6c 65 20 63 69 72 63 6c 65 3a 66 69 72 73 74 2d 6f 66 2d 74 79 70 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 Data Ascii: .drift-widget-loader-balls{width:28px;visibility:hidden}.drift-widget-loader-balls>circle{fill:#474647}.drift-widget-loader-balls--visible{visibility:visible}.drift-widget-loader-balls.drift-widget-loader-balls--visible circle:first-of-type{-webkit-animat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.5	50031	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime=1713961354342&PageStart=1713961346738&PrevBundleTime=1713961352559&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 3677 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	3677	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 37 33 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 64 61 74 61 6c 61 79 65 72 2f 76 34 2f 6c 61 74 65 73 74 2e 6a 73 22 2c 32 30 37 35 30 2e 37 39 39 39 39 39 39 39 39 39 39 2c 31 34 38 38 2e 31 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 73 63 72 69 70 74 22 2c 30 2c 30 2c 32 30 37 35 30 2e 37 39 39 39 39 39 39 39 39 39 39 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 32 32 33 38 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 30 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 37 33 38 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 70 78 Data Ascii: {"Seq":5,"When":6738,"Evts":[{"Kind":57,"Args":[2,"https://edge.fullstory.com/datalayer/v4/latest.js",20750.79999999999,1488.1000000000058,"script",0,0,20750.79999999999,0,0,0,0,0,0,0,22238.899999999994,0,0,0],"When":6738},{"Kind":57,"Args":[2,"https://px
2024-04-24 12:22:36 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:35 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.5	50034	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	1030	OUT	GET /core/assets/js/0.0b2ebd4a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	991	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 8798 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:54 GMT ETag: "c5efcdc9e465604f32cf24af10fd6c13" x-amz-server-side-encryption: AES256 x-amz-version-id: Z_qD3Ps97XDi2YfmP9BVSN2OaMFIwcvJ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 8c0cf74a8ac4637a28b8ef40ac35c710.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: CNxcz0yZ2u_20bEj7Si23oHeBEnEdqmsu-nIdF_yn5vhe3CvJQOVpw== Age: 164062
2024-04-24 12:22:35 UTC	8798	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 4c 61 47 41 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 4d 61 70 3b 66 75 6e 63 74 69 6f 6e 20 67 65 74 49 6e 64 65 78 28 65 2c 74 29 7b 76 61 72 20 6e 3d 2d 31 3b 72 65 74 75 72 6e 20 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 5b 30 5d 3d 3d 3d 74 26 26 28 6e 3d 72 2c 21 30 29 7d 29 2c 6e 7d 72 65 74 75 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{LaGA:function(e,t,n){"use strict";(function(e){var n=function(){if("undefined"!==typeof Map)return Map;function getIndex(e,t){var n=-1;return e.some(function(e,r){return e[0]===t&&(n=r,!0)}),n}retur

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.5	50032	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=3&ClientTime=1713961350883&PageStart=1713961346738&PrevBundleTime=1713961349958&LastActivity=1858&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:35 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:35 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.5	50036	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	622	OUT	GET /core/assets/js/39.f1d268f5.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 3114 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:14 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "b5201ff04da30312910b71e1da072dd2" x-amz-server-side-encryption: AES256 x-amz-version-id: uVEyZ5tRXLdtqtE229DGMUJWzGeJV7TR Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 16 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 86cc1234e84d8871a09112a1c66d9b78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: Bwlgqwvc2W2D9mAhpFQv0I7tT_rGHPD2yMUeoSQ2QRBjp-tDn78uag== Age: 4024761
2024-04-24 12:22:35 UTC	3114	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 39 5d 2c 7b 22 32 41 4f 33 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 61 2e 72 28 74 29 3b 76 61 72 20 63 3d 61 28 22 6d 6a 32 4f 22 29 2c 6e 3d 61 2e 6e 28 63 29 2c 72 3d 61 28 22 37 53 4d 31 22 29 2c 69 3d 61 28 22 52 71 77 78 22 29 2c 6c 3d 61 28 22 51 74 6c 5a 22 29 2c 6f 3d 61 28 22 4d 79 38 55 22 29 2c 73 3d 61 28 22 42 6a 72 65 22 29 2c 75 3d 61 28 22 49 4c 51 46 22 29 2c 64 3d 61 28 22 4b 37 69 30 22 29 2c 66 3d 61 28 22 45 52 6b 50 22 29 2c 62 3d 61 2e 6e 28 66 29 2c 70 3d 61 28 22 75 44 66 49 22 29 2c 6d 3d 61 28 22 41 44 47 43 22 29 2c Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[39],{"2AO3":function(e,t,a){"use strict";a.r(t);var c=a("mj2O"),n=a.n(c),r=a("7SM1"),i=a("Rqwx"),l=a("QtlZ"),o=a("My8U"),s=a("Bjre"),u=a("ILQF"),d=a("K7i0"),f=a("ERkP"),b=a.n(f),p=a("uDfI"),m=a("ADGC"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.5	50037	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	1031	OUT	GET /core/assets/js/31.c043863a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:35 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 27881 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "80a16a7469ece9a85df7ac8d39605662" x-amz-server-side-encryption: AES256 x-amz-version-id: VngGNH6iDw9uziy_6Y8AljRTs8PAhx8X Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 c40a611016f947a8da0f087fe5d2af84.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 7oUd2Bd784AozcKb5v9ka9170hTAefduDn5_JTLSltUZMnjmPTtLtw== Age: 164062
2024-04-24 12:22:35 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 31 5d 2c 7b 22 33 37 58 6a 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 6d 61 6b 65 46 6c 61 74 7d 29 3b 76 61 72 20 72 3d 6e 28 22 77 42 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 6d 61 6b 65 46 6c 61 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 66 6c 61 74 74 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 6f 2c 69 2c 73 3d 5b 5d 2c 61 3d 30 2c 63 3d 74 2e 6c 65 6e 67 74 68 3b 61 3c 63 3b 29 7b 69 66 28 4f 62 6a 65 63 74 28 72 2e 61 29 28 74 5b 61 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[31],{"37Xj":function(e,t,n){"use strict";n.d(t,"a",function(){return _makeFlat});var r=n("wBll");function _makeFlat(e){return function flatt(t){for(var n,o,i,s=[],a=0,c=t.length;a<c;){if(Object(r.a)(t[a
2024-04-24 12:22:35 UTC	11497	IN	Data Raw: 72 3b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 20 74 68 69 73 2e 4b 49 4e 44 53 2e 70 75 73 68 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 63 6f 64 65 50 75 73 68 28 65 2c 74 2c 72 29 3b 63 61 73 65 20 74 68 69 73 2e 4b 49 4e 44 53 2e 72 65 70 6c 79 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 63 6f 64 65 52 65 70 6c 79 28 65 2c 74 2c 72 29 3b 63 61 73 65 20 74 68 69 73 2e 4b 49 4e 44 53 2e 62 72 6f 61 64 63 61 73 74 3a 72 65 74 75 72 6e 20 74 68 69 73 2e 64 65 63 6f 64 65 42 72 6f 61 64 63 61 73 74 28 65 2c 74 2c 72 29 7d 7d 2c 64 65 63 6f 64 65 50 75 73 68 3a 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 50 75 73 68 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 2e 67 65 74 55 69 6e 74 38 28 31 29 2c 6f 3d 74 2e 67 65 74 55 69 6e 74 38 28 32 29 2c 69 3d Data Ascii: r;switch(n){case this.KINDS.push:return this.decodePush(e,t,r);case this.KINDS.reply:return this.decodeReply(e,t,r);case this.KINDS.broadcast:return this.decodeBroadcast(e,t,r)}},decodePush:function decodePush(e,t,n){var r=t.getUint8(1),o=t.getUint8(2),i=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.5	50039	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	722	OUT	GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Wed, 24 Apr 2024 12:22:36 GMT Etag: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XJNH40B56K2V8KH7G7K2 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.5	50041	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	724	OUT	GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ff808042b082f6ae8a6b808299655cad-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:35 GMT Etag: "ff808042b082f6ae8a6b808299655cad-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XJNAXGA8R4GBRC56Y5TG Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.5	50040	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	719	OUT	GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "02849653078c1b2461e1151d048ddd7d-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:35 GMT Etag: "02849653078c1b2461e1151d048ddd7d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XJNE2GYWE9QV70GZKSGV Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.5	50042	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	725	OUT	GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "240735d2acf59b5018ec9ef6c3c99d54-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:35 GMT Etag: "240735d2acf59b5018ec9ef6c3c99d54-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XJNJ3AQCKD5BSQPEB58Y Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.5	50043	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	718	OUT	GET /_next/static/chunks/610-2bd6294a230ecff5.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "0df172718be759e155ef4ac9edb2dd12-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Wed, 24 Apr 2024 12:22:36 GMT Etag: "0df172718be759e155ef4ac9edb2dd12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XJNNJMJACRRQ24TB11DP Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.5	50044	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	726	OUT	GET /_next/static/chunks/pages/drift-8f9623a7a70f033a.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "9bd292c8c30a5092cc5ecec26aefd5dc-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	327	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Date: Wed, 24 Apr 2024 12:22:36 GMT Etag: "9bd292c8c30a5092cc5ecec26aefd5dc-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XJNJKCF2G8KFB6YQTCWV Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.5	50035	192.29.14.118	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	1506	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=206&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=D32BF32183754911A4896AC2751429EC HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145; ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; _gcl_au=1.1.568102465.1713961340; _gid=GA1.2.1110259529.1713961342; _gat_UA-39550292-1=1; _uetsid=4f1c1f60023511efa8016792c6257a6f; _uetvid=4f1c74c0023511ef89da2f89b718d7a1; fs_lua=1.1713961346731; fs_uid=#12BP4E#2fb21e6e-5b70-437b-86b2-6d28b037cb26:b2abeec2-85fb-48e9-a672-7141db872fb2:1713961346731::1#/1745497346; _fbp=fb.1.1713961347300.1908196306; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Apr+24+2024+14%3A22%3A33+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5dc11bb1-6915-42b6-9ade-2b46c2902488&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _ga_1TZ7S9D6BQ=GS1.1.1713961341.1.1.1713961354.47.0.0; _ga=GA1.1.866850028.1713961341
2024-04-24 12:22:36 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:35 GMT Connection: close Content-Length: 49
2024-04-24 12:22:36 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.5	50045	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	3212	OUT	GET /saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=vMjW7wmFekEYRAMj46SPHvjNV01n_ZFwWD23cG3JJgM&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:36 UTC	299	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com
2024-04-24 12:22:36 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.5	50046	18.154.144.129	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	818	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961343\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:35 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 45 69 34 63 75 6b 57 6d 51 4d 61 33 6f 62 44 6c 41 4d 70 49 79 66 31 65 34 68 66 4a 70 64 31 35 62 44 54 73 66 4a 32 51 22 7d Data Ascii: {"src":"tag","auth":"Ei4cukWmQMa3obDlAMpIyf1e4hfJpd15bDTsfJ2Q"}
2024-04-24 12:22:36 UTC	957	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 457 Connection: close Date: Wed, 24 Apr 2024 12:22:36 GMT Server: nginx Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Tue, 23 Apr 2024 12:22:36 GMT Vary: Accept-Encoding, Origin Request-ID: 86bdee60-7032-4547-b40e-979224dfadb6 X-Cache: Miss from cloudfront Via: 1.1 bca1e49f467400f5cb1445f62d54b14e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: kWNlXfYC94dT-5-Uc0i38cl9YwuJzdhHuxb_jxQ--_oX9z-uy4jaRw==
2024-04-24 12:22:36 UTC	457	IN	Data Raw: 7b 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 4f 47 45 4e 54 2d 31 37 34 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 38 33 39 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 Data Ascii: {"registry_company_name":"COGENT-174","registry_city":"Las Vegas","registry_state":"NV","region_name":"Nevada","registry_zip_code":"89101","registry_area_code":null,"registry_dma_code":839,"registry_country":"United States","registry_country_code":"US","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.5	50048	34.96.71.22	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:35 UTC	786	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961343\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:36 UTC	510	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713961356\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Wed, 24 Apr 2024 12:22:36 GMT Content-Length: 74 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:36 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Pixels</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.5	50049	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	857	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961355121&PageStart=1713961346738&PrevBundleTime=1713961352559&IsNewSession=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 516 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	516	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 36 37 31 36 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 36 2c 32 31 37 32 36 34 39 34 37 32 2c 34 33 35 33 33 34 34 32 2c 33 35 38 32 30 35 31 30 5d 2c 22 57 68 65 6e 22 3a 36 37 31 36 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 36 37 31 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 68 69 64 64 65 6e 22 5d 2c 22 57 68 65 6e 22 3a 36 37 31 37 7d 2c 7b 22 4b 69 6e 64 22 3a 39 39 2c 22 41 72 67 73 22 3a 5b 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e Data Ascii: {"Seq":4,"When":6716,"Evts":[{"Kind":57,"Args":[6,2172649472,43533442,35820510],"When":6716},{"Kind":100,"Args":["visible"],"When":6717},{"Kind":100,"Args":["hidden"],"When":6717},{"Kind":99,"Args":["https://www.docusign.com/privacy","https://www.docusign
2024-04-24 12:22:36 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:36 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:36 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 35 36 32 36 35 7d 0a Data Ascii: {"BundleTime":1713961356265}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.5	49902	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	656	OUT	GET /conductor HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.docusign.net If-None-Match: "d320e83a1b98d0793815b4e22b96825b" If-Modified-Since: Thu, 04 Apr 2024 20:13:54 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	852	IN	HTTP/1.1 304 Not Modified Connection: close Server: istio-envoy Date: Wed, 24 Apr 2024 12:22:36 GMT Last-Modified: Thu, 04 Apr 2024 20:13:54 GMT x-amz-version-id: ECpAIUHXvnHr64vvrQweEad8ZWUjBUSY access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 12 ETag: "d320e83a1b98d0793815b4e22b96825b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4dcdeec31cc51cbb90ca4f534e0fdb9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: SKsCEtg5Y-Yf5yUeDjqbkcfaKbG_V5q7IaPcQqyKjaRhhZ-K8JKbIw==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.5	50051	104.254.151.60	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	839	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=8ADLn8EGw6GW4D1S0bAIQNfUY5ardES5dFOHze22sbnKQUwRzaiHDBhnoavoBaSrCMrAwilfnx79BSmAd0CkVePg1I20G1YF7Cc4xbpZjDk.; receive-cookie-deprecation=1; uuid2=402488676481365330
2024-04-24 12:22:36 UTC	1432	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 12:22:36 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://attr.ml-api.io/?domain=docusign.com&pId=402488676481365330 AN-X-Request-Uuid: 1e1cdfc5-2585-43a5-9a51-a093ad13ea95 Set-Cookie: XANDR_PANID=8ADLn8EGw6GW4D1S0bAIQNfUY5ardES5dFOHze22sbnKQUwRzaiHDBhnoavoBaSrCMrAwilfnx79BSmAd0CkVePg1I20G1YF7Cc4xbpZjDk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:36 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 12:22:36 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=402488676481365330; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:36 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 899.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.5	50050	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	602	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 413 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	413	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 31 32 42 50 34 45 22 2c 22 55 73 65 72 49 64 22 3a 22 32 66 62 32 31 65 36 65 2d 35 62 37 30 2d 34 33 37 62 2d 38 36 62 32 2d 36 64 32 38 62 30 33 37 63 62 32 36 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 57 69 64 74 68 22 3a 31 32 36 33 2c 22 48 65 69 67 68 74 22 3a 39 30 37 2c 22 53 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 53 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 53 6e 69 70 70 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 33 2e 30 22 2c 22 52 65 66 65 72 72 65 72 22 3a 22 22 2c 22 50 Data Ascii: {"OrgId":"12BP4E","UserId":"2fb21e6e-5b70-437b-86b2-6d28b037cb26","Url":"https://www.docusign.com/privacy","Base":"https://www.docusign.com/privacy","Width":1263,"Height":907,"ScreenWidth":1280,"ScreenHeight":1024,"SnippetVersion":"1.3.0","Referrer":"","P
2024-04-24 12:22:36 UTC	319	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:36 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-24 12:22:36 UTC	1255	IN	Data Raw: 31 34 65 62 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 Data Ascii: 14eb{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"S
2024-04-24 12:22:36 UTC	1255	IN	Data Raw: 22 53 65 6c 65 63 74 6f 72 22 3a 22 2e 69 6e 76 61 6c 69 64 22 7d 5d 2c 22 55 72 6c 4b 65 65 70 73 22 3a 6e 75 6c 6c 2c 22 44 77 65 6c 6c 54 69 6d 65 22 3a 31 2c 22 41 6a 61 78 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 50 72 69 76 61 63 79 48 61 73 68 22 3a 22 22 2c 22 55 73 65 72 55 55 49 44 22 3a 22 22 2c 22 55 73 65 72 49 6e 74 49 64 22 3a 22 30 22 2c 22 53 65 73 73 69 6f 6e 49 6e 74 49 64 22 3a 22 30 22 2c 22 50 61 67 65 49 6e 74 49 64 22 3a 22 30 22 2c 22 45 6d 62 65 64 54 6f 6b 65 6e 22 3a 22 22 2c 22 50 61 67 65 53 74 61 72 74 22 3a 31 37 31 33 39 36 31 33 35 36 34 36 36 2c 22 49 73 4e 65 77 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 46 6c 61 67 73 22 3a 7b 22 41 6a 61 78 46 65 74 63 68 22 3a 74 72 75 65 2c 22 43 61 70 74 75 72 65 41 6e 69 6d 61 Data Ascii: "Selector":".invalid"}],"UrlKeeps":null,"DwellTime":1,"AjaxWatches":[],"PrivacyHash":"","UserUUID":"","UserIntId":"0","SessionIntId":"0","PageIntId":"0","EmbedToken":"","PageStart":1713961356466,"IsNewSession":false,"Flags":{"AjaxFetch":true,"CaptureAnima
2024-04-24 12:22:36 UTC	1255	IN	Data Raw: 54 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 76 61 6c 75 65 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 63 68 65 63 6b 65 64 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 61 6c 74 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 Data Ascii: Target":1,"Tag":"","Name":"value","Action":0},{"Target":2,"Tag":"","Name":"checked","Action":0},{"Target":2,"Tag":"","Name":"data","Action":0},{"Target":2,"Tag":"","Name":"alt","Action":1},{"Target":2,"Tag":"*","Name":"placeholder","Action":1},{"Targe
2024-04-24 12:22:36 UTC	1255	IN	Data Raw: 6f 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 70 74 2d 70 61 74 63 68 22 2c 22 61 63 63 65 70 74 2d 72 61 6e 67 65 73 22 2c 22 61 67 65 22 2c 22 61 6c 6c 6f 77 22 2c 22 61 6c 74 2d 73 76 63 22 2c 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 2c 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 22 2c 22 63 6f 6e 74 Data Ascii: ol-expose-headers","access-control-max-age","access-control-allow-methods","access-control-allow-headers","accept-patch","accept-ranges","age","allow","alt-svc","cache-control","connection","content-disposition","content-encoding","content-language","cont
2024-04-24 12:22:36 UTC	348	IN	Data Raw: 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 3d 5c 22 70 72 6f 6d 6f 63 6f 64 65 45 72 72 6f 72 5c 22 5d 5b 61 72 69 61 2d 6c 61 62 65 6c 3d 5c 22 50 72 6f 6d 6f 20 63 6f 64 65 5c 22 5d 5b 6e 61 6d 65 3d 5c 22 70 72 6f 6d 6f 43 6f 64 65 5c 22 5d 5b 74 79 70 65 3d 5c 22 74 65 78 74 5c 22 5d 22 2c 22 53 69 67 6e 61 6c 73 22 3a 5b 32 2c 31 5d 7d 5d 7d 2c 22 47 43 4c 42 53 75 62 64 6f 6d 61 69 6e 22 3a 22 72 73 22 2c 22 42 6c 6f 63 6b 73 22 3a 5b 5d 2c 22 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 41 6a 61 78 46 65 74 63 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 41 6a 61 78 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6e 73 6f 6c 65 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 47 65 74 43 75 72 72 65 6e 74 53 Data Ascii: ia-describedby=\"promocodeError\"][aria-label=\"Promo code\"][name=\"promoCode\"][type=\"text\"]","Signals":[2,1]}]},"GCLBSubdomain":"rs","Blocks":[],"Watches":[],"AjaxFetchEnabled":true,"AjaxWatcherEnabled":false,"ConsoleWatcherEnabled":true,"GetCurrentS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.5	49909	18.239.199.124	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	643	OUT	GET /bg9s?x-amz-cf-id=kWNlXfYC94dT-5-Uc0i38cl9YwuJzdhHuxb_jxQ--_oX9z-uy4jaRw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 5fcd67f48c0c36ed32eae4c9f562c4fe.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: 8oaFT0NLSnW0WAlpvnCnAeRMJNxrQgS79fszzVNDyP2gv6tItp8Qww== Age: 13141 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.5	50055	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	1047	OUT	GET /core/assets/css/27.b5e8f5e1.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 8586 Connection: close Server: istio-envoy Date: Wed, 28 Feb 2024 20:51:26 GMT Last-Modified: Wed, 28 Feb 2024 20:09:21 GMT ETag: "e7107bc29ccb3c6d928f0f8f10a0f22d" x-amz-server-side-encryption: AES256 x-amz-version-id: zyzXY0HiUV0Kx0xDA0irOuT14sRG0uSI Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 64 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 ac5b42b3bd2eb6b361f7181832dd86f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: MZ2ezizB9EmVaHzP_EpQJPXT7W2HHo182u8AtrRlTmg3UW-Jerf4Qw== Age: 4807869
2024-04-24 12:22:36 UTC	8586	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 36 38 37 38 38 32 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 66 66 66 3b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 70 61 64 64 69 6e 67 3a 34 70 78 3b 68 65 69 67 68 74 3a 32 30 70 78 3b 77 69 64 74 68 3a 32 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 32 70 78 3b 2d 77 65 62 6b 69 74 2d Data Ascii: .drift-widget-message-close-button{margin:2px 0 0;position:absolute;top:-1px;z-index:1;background:#687882;border:1px solid #fff;-webkit-border-radius:50%;-moz-border-radius:50%;border-radius:50%;padding:4px;height:20px;width:20px;line-height:12px;-webkit-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.5	50054	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	637	OUT	GET /core/assets/css/3.07aa08a5.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 7555 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:24:56 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "189aeffd571884559dababa22c66d75a" x-amz-server-side-encryption: AES256 x-amz-version-id: NgCjqeUz1DXNz7UV3Lu77YLY5UV53RYZ Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 97d9fba07ea9b58446de67c2f4b07146.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: xX9sxTltVrKxnAvfufRhT6LC-rFSkewCNY0Ol3uBPv8HXYvb0qRfWw== Age: 4024660
2024-04-24 12:22:36 UTC	7555	IN	Data Raw: 2e 65 6d 6f 6a 69 2d 6d 61 72 74 2c 2e 65 6d 6f 6a 69 2d 6d 61 72 74 20 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 7d 2e 65 6d 6f 6a 69 2d 6d 61 72 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 23 32 32 32 34 32 37 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 Data Ascii: .emoji-mart,.emoji-mart *{box-sizing:border-box;line-height:1.15}.emoji-mart{font-family:-apple-system,BlinkMacSystemFont,Helvetica Neue,sans-serif;font-size:16px;display:inline-block;color:#222427;border:1px solid #d9d9d9;border-radius:5px;background:#ff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.5	50056	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	1047	OUT	GET /core/assets/css/25.c695453b.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	938	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 365 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 07:19:37 GMT Last-Modified: Wed, 10 Apr 2024 18:07:53 GMT ETag: "06b2963b029c0824382815165bfea73e" x-amz-server-side-encryption: AES256 x-amz-version-id: AHz85.tm47FH9XC_.zAqoC3Sv.M_XYzX Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 X-Cache: Hit from cloudfront Via: 1.1 fce182da4ce1e712c0e21f2d6cad869e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: ixv73g2M9jxGlebL_aAWyqfhKNUlCfYO9-FOjPm8YpE_IqIBOOJIlQ== Age: 795779
2024-04-24 12:22:36 UTC	365	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6e 74 72 6f 6c 6c 65 72 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 77 69 64 74 68 3a 35 36 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 36 29 3b 72 69 67 68 74 3a 31 32 70 78 3b 62 6f 74 74 6f 6d 3a 31 32 Data Ascii: .drift-widget-controller{outline:none;display:block;position:fixed;height:56px;width:56px;cursor:pointer;-webkit-box-shadow:0 0 8px 4px rgba(0,0,0,.16);-moz-box-shadow:0 0 8px 4px rgba(0,0,0,.16);box-shadow:0 0 8px 4px rgba(0,0,0,.16);right:12px;bottom:12

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.5	50059	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	621	OUT	GET /core/assets/js/3.2a4c7561.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 47358 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:15 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "2d79b64b95d2aa829a460e0d02cca148" x-amz-server-side-encryption: AES256 x-amz-version-id: Ij0e.e6AkWNNfAhEvnGK4qzljUH2ysS9 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 51 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 91ef21a3655607bd999b3da05b64026c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: PPYoJ9XhAkaoF0I5aoA6oxBSirhuJ6UDNkaGqSR78BrMYlh451SHJQ== Age: 4024761
2024-04-24 12:22:36 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 33 5d 2c 7b 22 2f 6d 44 47 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 72 28 22 56 42 6c 42 22 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 20 74 6f 53 70 61 63 65 43 61 73 65 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 65 29 2e 72 65 70 6c 61 63 65 28 2f 5b 5c 57 5f 5d 2b 28 2e 7c 24 29 2f 67 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 20 22 2b 74 3a 22 22 7d 29 2e 74 72 69 6d 28 29 7d 7d 2c 22 2f 76 66 37 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[3],{"/mDG":function(e,t,r){var n=r("VBlB");e.exports=function toSpaceCase(e){return n(e).replace(/[\W_]+(.\|$)/g,function(e,t){return t?" "+t:""}).trim()}},"/vf7":function(e,t,r){"use strict";Object.defi
2024-04-24 12:22:36 UTC	16384	IN	Data Raw: 78 4f 66 28 22 2e 22 29 26 26 21 65 2e 74 79 70 65 29 7b 76 61 72 20 72 3d 74 2e 73 70 6c 69 74 28 22 2e 22 29 2e 70 6f 70 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 3d 6c 2e 67 65 74 28 72 29 3b 6e 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 74 79 70 65 22 2c 7b 76 61 6c 75 65 3a 6e 2c 77 72 69 74 61 62 6c 65 3a 21 31 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 31 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 7d 29 7d 72 65 74 75 72 6e 20 65 7d 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 21 3d 3d 74 79 70 65 6f 66 20 72 2e 70 61 74 68 29 7b 76 61 72 20 6e 3d 65 2e 77 65 62 6b 69 74 52 65 6c 61 74 69 76 65 50 61 74 68 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 22 70 61 74 68 22 Data Ascii: xOf(".")&&!e.type){var r=t.split(".").pop().toLowerCase(),n=l.get(r);n&&Object.defineProperty(e,"type",{value:n,writable:!1,configurable:!1,enumerable:!0})}return e}(e);if("string"!==typeof r.path){var n=e.webkitRelativePath;Object.defineProperty(r,"path"
2024-04-24 12:22:36 UTC	14590	IN	Data Raw: 6e 74 44 69 64 55 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 28 29 7b 74 68 69 73 2e 75 70 64 61 74 65 28 29 7d 7d 2c 7b 6b 65 79 3a 22 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 6e 6d 6f 75 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 6e 6d 6f 75 6e 74 28 29 7b 74 68 69 73 2e 72 65 6d 6f 76 65 4c 69 73 74 65 6e 65 72 73 28 29 2c 28 30 2c 69 2e 63 61 6e 63 65 6c 29 28 74 68 69 73 2e 72 65 71 75 65 73 74 46 72 61 6d 65 29 2c 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 68 69 64 65 54 72 61 63 6b 73 54 69 6d 65 6f 75 74 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 64 65 74 65 63 74 53 63 72 6f 6c 6c 69 Data Ascii: ntDidUpdate",value:function componentDidUpdate(){this.update()}},{key:"componentWillUnmount",value:function componentWillUnmount(){this.removeListeners(),(0,i.cancel)(this.requestFrame),clearTimeout(this.hideTracksTimeout),clearInterval(this.detectScrolli

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.5	50057	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	727	OUT	GET /_next/static/PFxQpRcdah7Fp208MVJfR/_buildManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "64ffbb523225316f9adfb6ac32d8acec-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:36 GMT Etag: "64ffbb523225316f9adfb6ac32d8acec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XKD2F2HJFGNJ4YYPQ6P3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.5	50058	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	725	OUT	GET /_next/static/PFxQpRcdah7Fp208MVJfR/_ssgManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:36 GMT Etag: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80XKCYEB9A61FPNAQQ452Z Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.5	50061	18.244.214.96	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	617	OUT	GET /?domain=docusign.com&pId=402488676481365330 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Wed, 24 Apr 2024 12:22:37 GMT Apigw-Requestid: WuvuIj_GoAMEPdw= X-Cache: Miss from cloudfront Via: 1.1 fdd09a62da4db7212a1389ba850239b6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: RZ63uNiSg0Eqitg46AQXPz-jds8WKWER9LmzOX3s8la7Pc4CqOvslQ==
2024-04-24 12:22:37 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.5	50063	18.154.144.27	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	551	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961356\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:37 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Wed, 24 Apr 2024 12:22:37 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: d77b8d78-ef76-458c-a323-0f88c3732163 Vary: Origin X-Cache: Error from cloudfront Via: 1.1 ff19ff8c38f993b2d84936d51f51ca96.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: C6QWHYaeLYLszBv3coURn7WDCSUKfaWlbWqsls80PVNeKLYMJ6POaw==
2024-04-24 12:22:37 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.5	50065	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	870	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime=1713961356079&PageStart=1713961346738&PrevBundleTime=1713961356265&IsNewSession=true&DeltaT=1738 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 3677 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:36 UTC	3677	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 36 37 33 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 65 64 67 65 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 64 61 74 61 6c 61 79 65 72 2f 76 34 2f 6c 61 74 65 73 74 2e 6a 73 22 2c 32 30 37 35 30 2e 37 39 39 39 39 39 39 39 39 39 39 2c 31 34 38 38 2e 31 30 30 30 30 30 30 30 30 30 30 35 38 2c 22 73 63 72 69 70 74 22 2c 30 2c 30 2c 32 30 37 35 30 2e 37 39 39 39 39 39 39 39 39 39 39 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 32 32 32 33 38 2e 38 39 39 39 39 39 39 39 39 39 39 34 2c 30 2c 30 2c 30 5d 2c 22 57 68 65 6e 22 3a 36 37 33 38 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 70 78 Data Ascii: {"Seq":5,"When":6738,"Evts":[{"Kind":57,"Args":[2,"https://edge.fullstory.com/datalayer/v4/latest.js",20750.79999999999,1488.1000000000058,"script",0,0,20750.79999999999,0,0,0,0,0,0,0,22238.899999999994,0,0,0],"When":6738},{"Kind":57,"Args":[2,"https://px
2024-04-24 12:22:37 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:37 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 35 37 30 34 36 7d 0a Data Ascii: {"BundleTime":1713961357046}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.5	50062	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:36 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961354343&PageStart=1713961346738&PrevBundleTime=1713961352559&LastActivity=5337&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:37 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.5	50064	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	3006	OUT	GET /saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=vMjW7wmFekEYRAMj46SPHvjNV01n_ZFwWD23cG3JJgM&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:37 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 12:22:37 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.5	50066	35.244.154.8	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	677	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: rlas3=aNwicniGVqWD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA
2024-04-24 12:22:37 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=CZ4Yuyn63P2D11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:22:37 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:22:37 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:37 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.5	50068	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	1163	OUT	GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=4fa5f37d-70c4-4e9b-b1c3-09263b62017d&sessionStarted=1713961356.318&campaignRefreshToken=7b35cf35-500a-499b-99e5-39b4a9791167&hideController=false&pageLoadStartTime=1713961354696&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 16 Date: Wed, 24 Apr 2024 12:22:37 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 a6c9051c33e4e3f5189624306178fd02.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: 1NCSYlOMRs_rGVS97x96_i0iXvXwzh2g7pf9WT1qRi_1G1nr9Qgcyg==
2024-04-24 12:22:37 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.5	50067	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	753	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961354696 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 19 Date: Wed, 24 Apr 2024 12:22:37 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 4dcdeec31cc51cbb90ca4f534e0fdb9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: -GjkKaJoCP1rRB66Umgw-Nz11Qr23c4pZBMcrzM8MtE5gT1UAxISHQ==
2024-04-24 12:22:37 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.5	50070	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	637	OUT	GET /core/assets/css/1.1bcc8082.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 45138 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:15 GMT Last-Modified: Fri, 08 Mar 2024 21:52:24 GMT ETag: "3b8ba82e1bac13ee29e9764a55620d99" x-amz-server-side-encryption: AES256 x-amz-version-id: J9K9ed_T2U1DfO8_gHKqtr8IE2EyErto Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 19 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 9077d521265906f5bce86659dc65d41e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: m7phlIdd5dOET1fTqK8y1aE6t0-wFoPL4SxfgzOxb0ZF1oKf8KS2mA== Age: 4024762
2024-04-24 12:22:37 UTC	15420	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6e 61 6b 65 64 2d 62 75 74 74 6f 6e 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 65 6d 6f 6a 69 2d 62 61 63 6b 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 77 69 64 74 68 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 31 36 70 78 3b 74 6f 70 3a 2d 31 30 30 30 30 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 65 6d 6f 6a 69 2d 70 69 63 6b 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 35 38 70 78 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6d 61 78 2d Data Ascii: .drift-widget-naked-button.drift-widget-emoji-back-button{background:#fff;height:32px;width:32px;padding-top:4px;position:absolute;left:16px;top:-100000px;z-index:2}.drift-widget-composer-emoji-picker{position:absolute;bottom:58px;right:0;height:auto;max-
2024-04-24 12:22:37 UTC	16384	IN	Data Raw: 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 6d 73 2d 66 6c 65 78 3a 31 20 31 3b 66 6c 65 78 3a 31 20 31 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 2d 74 65 78 74 2d 61 72 65 61 2c 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 63 6f 6d 70 6f 73 65 72 2d 61 63 74 69 6f 6e 73 7b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 3b 2d 6d 6f 7a 2d 62 6f 78 2d 61 6c 69 67 6e 3a 65 6e 64 3b 2d 6d 73 2d 66 6c Data Ascii: -box-flex:1;-ms-flex:1 1;flex:1 1}.drift-widget-composer--text-area,.drift-widget-composer-actions{display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex}.drift-widget-composer-actions{-webkit-align-items:flex-end;-moz-box-align:end;-ms-fl
2024-04-24 12:22:37 UTC	13334	IN	Data Raw: 72 2d 74 79 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 37 31 65 62 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 41 47 45 4e 54 20 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 6d 65 74 61 2d 61 75 74 68 6f 72 2d 74 79 70 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 38 66 61 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 2d 6d 65 74 61 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 45 4e 44 5f 55 53 45 52 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 6d 65 73 73 61 67 65 2d 73 65 6e 64 65 72 2d 2d 45 4e 44 5f 55 53 45 52 2e 64 72 69 66 74 2d 77 69 64 67 65 74 Data Ascii: r-type{background:#0071eb}.drift-widget-message-sender--AGENT .drift-widget-message--meta-author-type{background:#f5f8fa}.drift-widget-message--meta.drift-widget-message-sender--END_USER{text-align:right}.drift-widget-message-sender--END_USER.drift-widget

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.5	50071	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	638	OUT	GET /core/assets/css/28.812d5a7c.chunk.css HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	963	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 16436 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 08:24:11 GMT Last-Modified: Wed, 10 Apr 2024 18:07:53 GMT ETag: "6f779260053e30787f84dfa7ba6743e5" x-amz-server-side-encryption: AES256 x-amz-version-id: e1S_Jk8uaFMisqhcJLvLg8iL6P_IF0z0 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 3364d01d27e5eefe2ce5d7ce499e55b2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: nf2Ynz-fih6DrokKpL1Wdpy3qkhKUtEXVrHNKzyJntn2QnwQGRfXRw== Age: 187106
2024-04-24 12:22:37 UTC	16384	IN	Data Raw: 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 31 32 30 32 31 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 33 70 78 3b 6c 65 66 74 3a 30 3b 68 65 69 67 68 74 3a 38 70 78 7d 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2c 2e 64 72 69 66 74 2d 77 69 64 67 65 74 2d 68 65 61 64 65 72 2d 74 6f 70 2d 6c 69 6e 65 7b 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 20 35 70 78 20 30 20 30 7d 2e 64 72 69 66 74 2d 77 Data Ascii: .drift-widget-header-top-line{background:#212021;width:100%;position:absolute;top:-3px;left:0;height:8px}.drift-widget-header,.drift-widget-header-top-line{-webkit-border-radius:5px 5px 0 0;-moz-border-radius:5px 5px 0 0;border-radius:5px 5px 0 0}.drift-w
2024-04-24 12:22:37 UTC	52	IN	Data Raw: 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 6f 70 61 63 69 74 79 3a 31 7d Data Ascii: orm:translateX(0);transform:translateX(0);opacity:1}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.5	50069	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	1031	OUT	GET /core/assets/js/27.42a90a1f.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 15387 Connection: close Server: istio-envoy Date: Mon, 15 Apr 2024 07:19:37 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "3305c113acc7be7b8411abd6abfa37ba" x-amz-server-side-encryption: AES256 x-amz-version-id: 5B9GXviJBBFXNUDYT9AnZAq8g0ImGcXK Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 893ef1bc6dfa69555f715c7ed525ee9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: VZWc-UGqyFGxckEiHg1fLYKe2HFfYx8zuyUYU9WmQyYM_tKOjkdqLw== Age: 795780
2024-04-24 12:22:37 UTC	15387	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 37 5d 2c 7b 22 2b 4d 48 77 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 63 3d 6e 28 22 45 52 6b 50 22 29 2c 6f 3d 6e 2e 6e 28 63 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 46 69 6c 6c 65 72 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 6f 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 22 61 72 69 61 2d 68 69 64 64 65 6e 22 3a 21 30 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 65 78 69 74 69 6e 67 20 64 72 69 66 74 20 77 69 64 67 65 74 22 2c 72 6f 6c 65 3a 22 62 75 74 74 6f 6e 22 2c 74 61 62 49 6e 64 65 78 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[27],{"+MHw":function(e,t,n){"use strict";var c=n("ERkP"),o=n.n(c);t.a=function FillerElement(){return o.a.createElement("div",{"aria-hidden":!0,"aria-label":"exiting drift widget",role:"button",tabIndex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.5	50072	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	1031	OUT	GET /core/assets/js/25.b8d3a33a.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 94361 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:55 GMT ETag: "1fab3e8d98e98fe27b86bdea9085f17b" x-amz-server-side-encryption: AES256 x-amz-version-id: RYDaQeAua7LJICwU_.PzYqp0oiRoitgA Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 26 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 b7b1a2eee8508a9a20c99d23ed8145ce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: O4IJAbEnGeR58epG_qP47t-FintP36C4pGS-PZvaoqdsLElVjWKvNg== Age: 164064
2024-04-24 12:22:37 UTC	16384	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 35 5d 2c 7b 22 31 6b 75 78 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 29 3b 76 61 72 20 61 3d 6e 28 22 6d 6a 32 4f 22 29 2c 72 3d 6e 2e 6e 28 61 29 2c 63 3d 6e 28 22 37 53 4d 31 22 29 2c 6f 3d 6e 28 22 51 74 6c 5a 22 29 2c 69 3d 6e 28 22 49 4c 51 46 22 29 2c 73 3d 6e 28 22 78 77 54 6f 22 29 2c 75 3d 6e 28 22 32 58 59 36 22 29 2c 6c 3d 6e 28 22 4c 56 63 58 22 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 63 2e 61 29 28 72 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[25],{"1kux":function(e,t,n){"use strict";n.d(t,"a",function(){return d});var a=n("mj2O"),r=n.n(a),c=n("7SM1"),o=n("QtlZ"),i=n("ILQF"),s=n("xwTo"),u=n("2XY6"),l=n("LVcX"),d=function(){var e=Object(c.a)(r
2024-04-24 12:22:37 UTC	16384	IN	Data Raw: 65 69 67 68 74 22 7d 29 3b 63 61 73 65 20 32 30 3a 72 65 74 75 72 6e 20 4f 3d 63 2e 73 65 6e 74 2c 6a 3d 4f 2e 64 61 74 61 2c 6d 3d 7b 5f 77 69 6e 64 6f 77 3a 64 2c 76 69 73 69 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 3a 6e 2e 76 69 73 69 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 63 6f 6f 6b 69 65 73 3a 66 2c 67 65 6f 3a 6e 2e 67 65 6f 2c 65 6d 62 65 64 3a 74 2c 72 65 66 65 72 72 65 72 3a 67 2c 61 75 74 6f 41 73 73 69 67 6e 65 65 49 64 3a 6f 2c 73 63 72 6f 6c 6c 61 62 6c 65 48 65 69 67 68 74 3a 6a 2c 68 61 73 45 78 69 74 49 6e 74 65 6e 74 3a 72 2e 68 61 73 45 78 69 74 49 6e 74 65 6e 74 7d 2c 63 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 2c 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6d 29 29 3b 63 61 73 65 20 32 34 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 Data Ascii: eight"});case 20:return O=c.sent,j=O.data,m={_window:d,visitInformation:n.visitInformation,cookies:f,geo:n.geo,embed:t,referrer:g,autoAssigneeId:o,scrollableHeight:j,hasExitIntent:r.hasExitIntent},c.abrupt("return",Promise.resolve(m));case 24:case"end":re
2024-04-24 12:22:37 UTC	2410	IN	Data Raw: 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 6e 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 6e 2e 70 72 65 76 3d 6e 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 69 66 28 21 74 68 69 73 2e 5f 72 75 6e 6e 69 6e 67 26 26 30 21 3d 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 6c 65 6e 67 74 68 29 7b 6e 2e 6e 65 78 74 3d 32 3b 62 72 65 61 6b 7d 72 65 74 75 72 6e 20 6e 2e 61 62 72 75 70 74 28 22 72 65 74 75 72 6e 22 29 3b 63 61 73 65 20 32 3a 74 68 69 73 2e 5f 72 75 6e 6e 69 6e 67 3d 21 30 3b 63 61 73 65 20 33 3a 69 66 28 21 28 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 6c 65 6e 67 74 68 3e 30 29 29 7b 6e 2e 6e 65 78 74 3d 31 31 3b 62 72 65 61 6b 7d 69 66 28 65 3d 74 68 69 73 2e 5f 63 61 6c 6c 62 61 63 6b 73 2e 73 68 69 66 74 28 29 2c 21 28 74 3d Data Ascii: nction _callee$(n){for(;;)switch(n.prev=n.next){case 0:if(!this._running&&0!==this._callbacks.length){n.next=2;break}return n.abrupt("return");case 2:this._running=!0;case 3:if(!(this._callbacks.length>0)){n.next=11;break}if(e=this._callbacks.shift(),!(t=
2024-04-24 12:22:37 UTC	16384	IN	Data Raw: 6f 2e 64 61 74 61 2c 63 2e 6e 65 78 74 3d 31 30 2c 57 65 28 7b 63 6f 6e 64 69 74 69 6f 6e 73 3a 69 2e 63 61 6d 70 61 69 67 6e 54 61 72 67 65 74 69 6e 67 52 65 73 75 6c 74 73 2c 69 6e 74 65 72 6e 61 6c 3a 21 30 7d 29 3b 63 61 73 65 20 31 30 3a 75 3d 63 2e 73 65 6e 74 2c 6c 3d 75 2e 54 41 4c 2c 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 28 22 5c 75 32 36 61 31 5c 75 32 36 61 31 20 44 72 69 66 74 20 44 65 62 75 67 20 2d 20 50 6c 61 79 62 6f 6f 6b 20 54 61 72 67 65 74 69 6e 67 20 52 65 73 75 6c 74 73 22 29 2c 6b 74 28 6c 2c 74 29 2c 63 6f 6e 73 6f 6c 65 2e 67 72 6f 75 70 45 6e 64 28 29 3b 63 61 73 65 20 31 35 3a 63 61 73 65 22 65 6e 64 22 3a 72 65 74 75 72 6e 20 63 2e 73 74 6f 70 28 29 7d 7d 2c 5f 63 61 6c 6c 65 65 29 7d 29 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 Data Ascii: o.data,c.next=10,We({conditions:i.campaignTargetingResults,internal:!0});case 10:u=c.sent,l=u.TAL,console.group("\u26a1\u26a1 Drift Debug - Playbook Targeting Results"),kt(l,t),console.groupEnd();case 15:case"end":return c.stop()}},_callee)}));return func
2024-04-24 12:22:37 UTC	16384	IN	Data Raw: 65 63 74 28 6d 74 2e 61 29 28 70 29 7c 7c 28 74 2e 61 75 74 6f 41 73 73 69 67 6e 65 65 3d 70 29 2c 66 26 26 28 74 2e 69 6e 62 6f 78 49 64 3d 66 29 2c 4f 62 6a 65 63 74 28 6d 74 2e 61 29 28 6a 29 7c 7c 28 74 2e 76 65 72 74 69 63 61 6c 4f 66 66 73 65 74 3d 6a 29 2c 4f 62 6a 65 63 74 28 6d 74 2e 61 29 28 6d 29 7c 7c 28 74 2e 68 6f 72 69 7a 6f 6e 74 61 6c 4f 66 66 73 65 74 3d 6d 29 2c 4f 62 6a 65 63 74 28 6d 74 2e 61 29 28 76 29 7c 7c 28 74 2e 65 6e 61 62 6c 65 64 3d 21 21 76 29 2c 4f 62 6a 65 63 74 28 6d 74 2e 61 29 28 68 29 7c 7c 28 74 2e 70 72 6f 66 69 6c 65 4d 6f 64 65 3d 21 21 68 29 2c 4f 62 6a 65 63 74 28 6d 74 2e 61 29 28 5f 29 7c 7c 28 74 2e 6c 61 6e 64 69 6e 67 50 61 67 65 43 6f 6e 66 69 67 3d 5f 29 2c 4f 62 6a 65 63 74 28 6d 74 2e 61 29 28 79 29 7c Data Ascii: ect(mt.a)(p)\|\|(t.autoAssignee=p),f&&(t.inboxId=f),Object(mt.a)(j)\|\|(t.verticalOffset=j),Object(mt.a)(m)\|\|(t.horizontalOffset=m),Object(mt.a)(v)\|\|(t.enabled=!!v),Object(mt.a)(h)\|\|(t.profileMode=!!h),Object(mt.a)(_)\|\|(t.landingPageConfig=_),Object(mt.a)(y)\|
2024-04-24 12:22:37 UTC	16384	IN	Data Raw: 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 63 61 6e 43 6f 6e 6e 65 63 74 28 29 7b 72 65 74 75 72 6e 21 4f 62 6a 65 63 74 28 51 65 2e 61 29 28 22 68 61 73 5f 70 72 65 73 65 6e 63 65 5f 64 69 73 61 62 6c 65 64 22 29 7d 7d 2c 7b 6b 65 79 3a 22 70 6f 73 74 43 6f 6e 6e 65 63 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 63 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 65 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 65 2e 70 72 65 76 3d 65 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 74 68 69 73 2e 5f 63 68 61 6e 6e 65 6c 26 26 28 74 68 69 73 2e Data Ascii: ct",value:function canConnect(){return!Object(Qe.a)("has_presence_disabled")}},{key:"postConnect",value:function(){var e=Object(o.a)(c.a.mark(function _callee(){return c.a.wrap(function _callee$(e){for(;;)switch(e.prev=e.next){case 0:this._channel&&(this.
2024-04-24 12:22:37 UTC	10031	IN	Data Raw: 6e 20 5f 63 61 6c 6c 65 65 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 63 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 61 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 61 2e 70 72 65 76 3d 61 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 61 2e 70 72 65 76 3d 30 2c 61 2e 6e 65 78 74 3d 33 2c 4f 62 6a 65 63 74 28 68 6e 2e 61 29 28 65 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 62 2e 61 29 28 7b 64 61 74 61 3a 65 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 7d 2c 65 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 29 7d 29 3b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 20 74 3d 61 2e 73 65 6e 74 2c 6e 3d 74 2e 64 61 74 61 2c 61 2e 61 62 72 75 70 74 28 Data Ascii: n _callee(e){var t,n;return c.a.wrap(function _callee$(a){for(;;)switch(a.prev=a.next){case 0:return a.prev=0,a.next=3,Object(hn.a)(e).catch(function(e){return Object(b.a)({data:e.response.data},e.response.data)});case 3:return t=a.sent,n=t.data,a.abrupt(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.5	50074	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	603	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=4&ClientTime=1713961355121&PageStart=1713961346738&PrevBundleTime=1713961352559&IsNewSession=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:37 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.5	50075	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:37 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.5	50076	18.239.199.12	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	437	OUT	GET /bg9s?x-amz-cf-id=kWNlXfYC94dT-5-Uc0i38cl9YwuJzdhHuxb_jxQ--_oX9z-uy4jaRw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 e45fbcf5a3b995bcd8a0013f6fa17c0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: wCM4a9uA-BBZn_y-ucO8EAfhRYATWsImL5nxHSztBuMHXx1ck1QL1g== Age: 13142 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.5	50077	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime=1713961356797&PageStart=1713961346738&PrevBundleTime=1713961355867&LastActivity=7792&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 904 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:37 UTC	904	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 57 5b 6f db 36 14 fe 2b 9a 1e 8c 16 a0 28 de 2f e9 bc 21 c9 82 ae 48 2f c1 9c 22 18 86 3e e8 42 db 5c 14 c9 11 65 3b 6e d1 ff 3e 2a f5 1c cb b7 35 19 b0 87 45 32 20 98 fc 0e 79 0e bf f3 9d 23 7d 09 07 e6 36 3c e2 20 bc 1a 9b 32 3c 12 92 2a 10 9e cd 1a 17 1e fd f1 25 3c b7 65 ee 67 25 08 8f eb 51 3b 44 40 38 6e 9a 89 3b 8a 63 93 8f 0c 1c 4e 8b c2 35 55 bd 80 59 75 13 e7 49 93 14 c9 c2 d4 f1 8c c5 45 d2 18 d7 c0 3f 5d 08 08 92 1c 41 a9 57 17 c0 4c 29 88 d1 ea e2 7e 57 97 d5 76 d2 84 00 f9 7b db 02 75 6e 42 08 55 50 3d cc b3 6f 13 9f d6 03 f9 0a 0e 47 30 b9 83 49 ee 60 61 cb 6b 93 db f2 3e 84 79 12 7b 7f 31 a7 a4 bb ba 56 14 84 77 37 45 6b 5b 9b db a9 0f 6d e9 e9 36 76 d3 55 8e f9 bf 75 b5 76 1b 47 5d 9b 2c 4e a7 65 5e 98 78 Data Ascii: W[o6+(/!H/">B\e;n>5E2 y#}6< 2<%<eg%Q;D@8n;cN5UYuIE?]AWL)~Wv{unBUP=oG0I`ak>y{1Vw7Ek[m6vUuvG],Ne^x
2024-04-24 12:22:38 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:38 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 35 37 37 34 32 7d 0a Data Ascii: {"BundleTime":1713961357742}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.5	50080	104.244.42.195	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	1040	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ba09147f-f683-4645-8fd1-29d73113864b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=d762e230-38b8-4739-8e24-1785b9e4c192&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171396134691071718; guest_id_ads=v1%3A171396134691071718; personalization_id="v1_O74RdUWbGOMZLTZGhxxEVA=="; guest_id=v1%3A171396134691071718
2024-04-24 12:22:38 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:37 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 2814ad859bfd6ab6 strict-transport-security: max-age=631138519 x-response-time: 7 x-connection-hash: 0b9c260a2f305febac4bc3e149274990b267312e6b248923545b04bf32b75534 connection: close
2024-04-24 12:22:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.5	50079	104.244.42.69	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	903	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ba09147f-f683-4645-8fd1-29d73113864b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=d762e230-38b8-4739-8e24-1785b9e4c192&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a46bf145-3aaa-4094-971d-11456caaeb47
2024-04-24 12:22:38 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:37 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: af818df35466c6ba strict-transport-security: max-age=0 x-response-time: 4 x-connection-hash: df85556f4e6cb2a005a4ca55d7c35789259ae01f68159026d9ba7088d56502f1 connection: close
2024-04-24 12:22:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.5	50082	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	872	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961356232&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961354021&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3402, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:22:37 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.5	50084	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	615	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime=1713961356079&PageStart=1713961346738&PrevBundleTime=1713961356265&IsNewSession=true&DeltaT=1738 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:37 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:38 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.5	50083	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	545	OUT	GET /rec/integrations?OrgId=12BP4E HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:37 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 31 61 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 Data Ascii: 1a4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultF
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 65 29 20 7b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 72 69 63 4e 61 6d 65 20 3d 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 5b 65 76 74 2e 6e 61 6d 65 5d 3b 0a 09 09 09 69 66 20 28 21 6d 65 74 72 69 63 4e 61 6d 65 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 09 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 53 74 61 74 75 73 20 3d 20 65 76 74 2e 6e 61 6d 65 20 3d 3d 3d 20 27 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 27 20 3f 20 27 46 41 49 4c 55 52 45 27 20 3a 20 27 53 55 43 43 45 53 53 27 3b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 61 64 61 74 61 20 3d 20 65 76 74 2e 61 74 74 72 69 62 75 74 65 73 20 7c 7c 20 7b 7d 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e 6e 61 6d 65 20 3d 20 6d 65 74 72 69 63 4e 61 6d 65 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e Data Ascii: e) {const metricName = eventNameMap[evt.name];if (!metricName) {return;}const eventStatus = evt.name === 'dlo_client_error' ? 'FAILURE' : 'SUCCESS';const metadata = evt.attributes \|\| {};metadata.name = metricName;metadata.
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 61 67 65 76 69 65 77 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 64 65 74 61 69 6c 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 64 65 74 61 69 6c 2e 61 63 74 69 6f 6e 46 69 65 6c Data Ascii: ame": "insert", "value": "pageview" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-detail-action", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.detail.actionFiel
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 61 63 74 69 6f 6e 46 69 65 6c 64 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 70 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 Data Ascii: er", "operators": [ { "name": "query", "select": "$.ecommerce.add.actionField" }, { "name": "insert", "value": "add" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-product", "source":
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 70 72 6f 6d 6f 5f 63 6c 69 63 6b 2d 70 72 6f 6d 6f 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 70 72 6f 6d 6f 43 6c 69 63 6b 2e 70 72 6f 6d 6f 74 69 6f 6e 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 Data Ascii: , "destination": "FS.event" }, { "id": "fs-ga-e-commerce-promo_click-promotion", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.promoClick.promotions[0]" }, { "name": "insert
2024-04-24 12:22:38 UTC	465	IN	Data Raw: 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 70 75 72 63 68 61 73 65 2e 70 72 6f 64 75 63 74 73 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 66 61 6e 2d 6f 75 74 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 Data Ascii: roduct", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.purchase.products" }, { "name": "fan-out" }, { "name": "insert", "value": "purchase_product" } ], "destination": "FS.e
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 72 65 66 75 6e 64 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 72 65 66 75 6e 64 2d 70 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 72 65 66 75 6e 64 2e 70 72 6f 64 75 63 74 73 22 20 7d 2c 0a Data Ascii: 1000nsert", "value": "refund" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-refund-product", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.refund.products" },
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 61 64 64 5f 74 6f 5f 63 61 72 74 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 Data Ascii: e": "dataLayer", "operators": [ { "name": "query", "select": "$[?(event=add_to_cart)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "
2024-04-24 12:22:38 UTC	1255	IN	Data Raw: 6e 74 3d 73 65 6c 65 63 74 5f 70 72 6f 6d 6f 74 69 6f 6e 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 73 65 6c 65 63 74 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 Data Ascii: nt=select_promotion)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "select_promotion" } ], "destination": "FS.event" }, {
2024-04-24 12:22:38 UTC	339	IN	Data Raw: 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 31 3d 76 69 65 77 5f 69 74 65 6d 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 32 5d 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 Data Ascii: ]" }, { "name": "query", "select": "$[?(1=view_item)]" }, { "name": "query", "select": "$[2].items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_item" } ], "destination": "F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.5	50085	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	987	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961356232&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961354021&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: not-navigation-source, trigger, event-source Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:22:38 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:22:38 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 12:22:38 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 12:22:38 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.5	50087	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	621	OUT	GET /core/assets/js/1.0ca46fe3.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	992	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 74516 Connection: close Server: istio-envoy Date: Mon, 22 Apr 2024 14:48:13 GMT Last-Modified: Wed, 10 Apr 2024 18:07:54 GMT ETag: "3d2eecfeab24c42f510811f441fc9bcb" x-amz-server-side-encryption: AES256 x-amz-version-id: OdVUtOp.gfWeEWZDW4V.pvaVBaiJj36o Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 17 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 86cc1234e84d8871a09112a1c66d9b78.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: b332RrHXbdH9yl9sHeBKgfam-t_22tZEYiRqSagsvGBRhKKyyZuSqg== Age: 164065
2024-04-24 12:22:38 UTC	15392	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 5d 2c 7b 22 2b 47 5a 69 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 7d 2c 22 2b 71 47 43 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 62 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 69 6e 67 4d 65 73 73 61 67 65 7d 29 2c 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 47 65 74 43 6f 6e 76 65 72 73 61 74 69 6f 6e 52 61 74 65 64 4d 65 73 73 61 67 65 7d 29 3b 76 61 72 20 61 3d 6e 28 22 64 61 34 4c 22 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],{"+GZi":function(e,t,n){},"+qGC":function(e,t,n){"use strict";n.d(t,"b",function(){return useGetConversationRatingMessage}),n.d(t,"a",function(){return useGetConversationRatedMessage});var a=n("da4L"
2024-04-24 12:22:38 UTC	16384	IN	Data Raw: 74 28 64 2e 75 73 65 45 66 66 65 63 74 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6e 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 6d 5b 65 5d 7d 29 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 69 2e 61 29 28 72 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 28 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 20 72 2e 61 2e 77 72 61 70 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 24 28 61 29 7b 66 6f 72 28 3b 3b 29 73 77 69 74 63 68 28 61 2e 70 72 65 76 3d 61 2e 6e 65 78 74 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 61 2e 70 72 65 76 3d 30 2c 61 2e 6e 65 78 74 3d 33 2c 4f 62 6a 65 63 74 28 6e 65 2e 61 29 28 65 2c 67 2e 74 6f 6b 65 6e 29 Data Ascii: t(d.useEffect)(function(){var e=n.filter(function(e){return!m[e]}),t=function(){var t=Object(i.a)(r.a.mark(function _callee(){var t,n;return r.a.wrap(function _callee$(a){for(;;)switch(a.prev=a.next){case 0:return a.prev=0,a.next=3,Object(ne.a)(e,g.token)
2024-04-24 12:22:38 UTC	16384	IN	Data Raw: 2c 75 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 22 64 72 69 66 74 2d 77 69 64 67 65 74 2d 70 6f 77 65 72 2d 62 72 61 6e 64 22 7d 2c 22 44 72 69 66 74 22 29 5d 7d 29 29 7d 29 2c 62 3d 6e 28 22 56 6b 48 71 22 29 2c 67 3d 6e 28 22 48 76 68 67 22 29 3b 6e 28 22 32 56 72 57 22 29 2c 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 46 6f 6f 74 65 72 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 66 2e 63 29 28 67 2e 63 29 2e 73 68 6f 77 42 72 61 6e 64 69 6e 67 2c 74 3d 76 6f 69 64 20 30 21 3d 3d 65 26 26 65 2c 6e 3d 4f 62 6a 65 63 74 28 62 2e 61 29 28 29 2c 61 3d 6e 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 4c 69 6e 6b 2c 69 3d 6e 2e 70 72 69 76 61 63 79 50 6f 6c 69 63 79 4c 69 6e 6b 54 65 78 74 2c 73 3d 6e Data Ascii: ,u.a.createElement("span",{className:"drift-widget-power-brand"},"Drift")]}))}),b=n("VkHq"),g=n("Hvhg");n("2VrW"),t.a=function Footer(){var e=Object(f.c)(g.c).showBranding,t=void 0!==e&&e,n=Object(b.a)(),a=n.privacyPolicyLink,i=n.privacyPolicyLinkText,s=n
2024-04-24 12:22:38 UTC	16384	IN	Data Raw: 73 74 65 64 54 65 78 74 46 72 6f 6d 46 69 6c 65 73 3a 75 2c 70 61 73 74 65 64 46 69 6c 65 73 3a 63 2c 63 6c 65 61 72 46 69 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 46 69 6c 65 73 28 29 7b 6f 28 5b 5d 29 2c 64 28 6e 75 6c 6c 29 7d 7d 7d 2c 61 65 3d 66 75 6e 63 74 69 6f 6e 20 75 73 65 53 65 6e 64 4d 65 73 73 61 67 65 28 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 28 7a 2e 62 29 28 29 2c 74 3d 4f 62 6a 65 63 74 28 7a 2e 63 29 28 4b 2e 61 29 3b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 6d 2e 75 73 65 43 61 6c 6c 62 61 63 6b 29 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 28 68 2e 61 29 28 76 2e 61 2e 6d 61 72 6b 28 66 75 6e 63 74 69 6f 6e 20 5f 63 61 6c 6c 65 65 28 6e 29 7b 72 65 74 75 72 6e 20 76 2e 61 2e 77 72 61 70 28 Data Ascii: stedTextFromFiles:u,pastedFiles:c,clearFiles:function clearFiles(){o([]),d(null)}}},ae=function useSendMessage(){var e=Object(z.b)(),t=Object(z.c)(K.a);return Object(m.useCallback)(function(){var n=Object(h.a)(v.a.mark(function _callee(n){return v.a.wrap(
2024-04-24 12:22:38 UTC	9972	IN	Data Raw: 73 29 2c 75 3d 6e 28 22 54 72 34 4c 22 29 3b 74 2e 61 3d 66 75 6e 63 74 69 6f 6e 20 4d 65 65 74 69 6e 67 53 63 68 65 64 75 6c 65 72 43 61 72 64 28 65 29 7b 76 61 72 20 74 3d 65 2e 61 67 65 6e 74 49 64 2c 6e 3d 65 2e 61 64 64 69 74 69 6f 6e 61 6c 41 67 65 6e 74 73 2c 61 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 5b 5d 3a 6e 2c 73 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 64 3d 65 2e 64 75 72 61 74 69 6f 6e 2c 66 3d 65 2e 73 68 6f 77 52 65 63 69 70 69 65 6e 74 73 2c 6d 3d 76 6f 69 64 20 30 21 3d 3d 66 26 26 66 2c 62 3d 65 2e 6c 6f 61 64 69 6e 67 46 72 61 6d 65 2c 67 3d 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2c 70 3d 4f 62 6a 65 63 74 28 75 2e 61 29 28 29 2e 74 2c 76 3d 4f 62 6a 65 63 74 28 6f 2e 61 29 28 74 2c 61 29 2c 68 3d 70 28 22 6d 65 65 74 69 6e 67 2e 73 63 68 65 Data Ascii: s),u=n("Tr4L");t.a=function MeetingSchedulerCard(e){var t=e.agentId,n=e.additionalAgents,a=void 0===n?[]:n,s=e.children,d=e.duration,f=e.showRecipients,m=void 0!==f&&f,b=e.loadingFrame,g=void 0!==b&&b,p=Object(u.a)().t,v=Object(o.a)(t,a),h=p("meeting.sche

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.5	50086	18.244.214.75	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	381	OUT	GET /?domain=docusign.com&pId=402488676481365330 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Wed, 24 Apr 2024 12:22:38 GMT Apigw-Requestid: WuvuSjpzoAMESug= X-Cache: Miss from cloudfront Via: 1.1 594aa5e4a6030c26c04a6a841838abb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: b1feoGiuTWu6AfP5EmK9x2qOQy4DLIn4ISZiAeKo6P2bl5IjqeFWHg==
2024-04-24 12:22:38 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.5	50088	35.244.154.8	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:37 UTC	441	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; rlas3=CZ4Yuyn63P2D11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=
2024-04-24 12:22:38 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=MhajISilzAaD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:22:38 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:22:38 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:22:38 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:38 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.5	50089	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	622	OUT	GET /core/assets/js/28.caa75eae.chunk.js HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961354696 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	993	IN	HTTP/1.1 200 OK Content-Type: application/javascript; charset=utf-8 Content-Length: 20426 Connection: close Server: istio-envoy Date: Fri, 08 Mar 2024 22:23:15 GMT Last-Modified: Fri, 08 Mar 2024 21:52:27 GMT ETag: "481aab9660002090188fee60921b6ec7" x-amz-server-side-encryption: AES256 x-amz-version-id: mC9SawLOV8oKr2SAmrqkSOSIj6G_pv_0 Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: max-age=31536000 x-envoy-upstream-service-time: 15 Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 1721ba89df2008145b68acb827b62daa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: _R2bp90rkNBZbKhy0fEI0uGuWQMQBzQyCJcRjQ4XPBw3igXNNrKBHQ== Age: 4024763
2024-04-24 12:22:38 UTC	15391	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 38 5d 2c 7b 22 31 53 63 41 22 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 22 61 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 73 65 52 65 66 6c 6f 77 46 72 61 6d 65 43 6c 61 73 73 4e 61 6d 65 7d 29 3b 76 61 72 20 72 3d 6e 28 22 73 38 44 49 22 29 2c 61 3d 6e 28 22 51 74 6c 5a 22 29 2c 63 3d 6e 28 22 49 4c 51 46 22 29 2c 6f 3d 6e 28 22 67 36 65 44 22 29 2c 73 3d 6e 28 22 4a 42 74 6d 22 29 2c 69 3d 6e 2e 6e 28 73 29 2c 75 3d 6e 28 22 45 52 6b 50 22 29 2c 6c 3d 6e 28 22 45 51 78 69 22 29 2c 66 3d 21 31 3b 66 75 6e 63 74 Data Ascii: (window.webpackJsonp=window.webpackJsonp\|\|[]).push([[28],{"1ScA":function(e,t,n){"use strict";n.d(t,"a",function(){return useReflowFrameClassName});var r=n("s8DI"),a=n("QtlZ"),c=n("ILQF"),o=n("g6eD"),s=n("JBtm"),i=n.n(s),u=n("ERkP"),l=n("EQxi"),f=!1;funct
2024-04-24 12:22:38 UTC	5035	IN	Data Raw: 2c 75 3d 65 2e 61 73 73 65 72 74 69 76 65 4d 65 73 73 61 67 65 49 64 3b 72 65 74 75 72 6e 20 6e 21 3d 3d 6f 7c 7c 72 21 3d 3d 73 3f 7b 70 6f 6c 69 74 65 4d 65 73 73 61 67 65 31 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3f 22 22 3a 6f 2c 70 6f 6c 69 74 65 4d 65 73 73 61 67 65 32 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3f 6f 3a 22 22 2c 6f 6c 64 50 6f 6c 69 74 65 6d 65 73 73 61 67 65 3a 6f 2c 6f 6c 64 50 6f 6c 69 74 65 4d 65 73 73 61 67 65 49 64 3a 73 2c 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 3a 21 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 50 6f 6c 69 74 65 7d 3a 61 21 3d 3d 69 7c 7c 63 21 3d 3d 75 3f 7b 61 73 73 65 72 74 69 76 65 4d 65 73 73 61 67 65 31 3a 74 2e 73 65 74 41 6c 74 65 72 6e 61 74 65 Data Ascii: ,u=e.assertiveMessageId;return n!==o\|\|r!==s?{politeMessage1:t.setAlternatePolite?"":o,politeMessage2:t.setAlternatePolite?o:"",oldPolitemessage:o,oldPoliteMessageId:s,setAlternatePolite:!t.setAlternatePolite}:a!==i\|\|c!==u?{assertiveMessage1:t.setAlternate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.5	50090	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	636	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961356232&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961354021&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:22:38 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.5	50091	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime=1713961356797&PageStart=1713961346738&PrevBundleTime=1713961355867&LastActivity=7792&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:38 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:38 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.5	50094	216.137.39.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	118	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%2227b83herk5tv%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.docusign.com%2Fprivacy%22%7D
2024-04-24 12:22:38 UTC	889	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 294 Connection: close date: Wed, 24 Apr 2024 12:22:38 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 1839614b559bcdc1 vary: Accept-Encoding x-envoy-upstream-service-time: 10 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 9fa56be62b1be7dd446abf03b1b07c74.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: rNisZbaHa_umrnzoeqdRCMVafFKVc6WMxSLWRPT4xcAukxkx_0PxyQ==
2024-04-24 12:22:38 UTC	294	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 32 37 62 38 33 68 65 72 6b 35 74 76 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 74 72 75 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 5b 22 65 63 6f 6d 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 5d 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 Data Ascii: {"embedId":"27b83herk5tv","fallback":true,"targetingEvaluated":true,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":["ecom.docusign.com","docusign.com","chat.docusign.com","docusign.net","chat.docusign.net"],"driftEngageVerificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.5	50093	104.244.42.69	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	667	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ba09147f-f683-4645-8fd1-29d73113864b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=d762e230-38b8-4739-8e24-1785b9e4c192&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a46bf145-3aaa-4094-971d-11456caaeb47
2024-04-24 12:22:38 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:37 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: ae8a8d6385f5b952 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 2b14917cee12bdd541ec7dbe5c79267e0f1a1665f6cc4cf8a29efe2cdb7e5bbf connection: close
2024-04-24 12:22:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.5	50095	104.244.42.195	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	804	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=ba09147f-f683-4645-8fd1-29d73113864b&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=d762e230-38b8-4739-8e24-1785b9e4c192&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171396134691071718; guest_id_ads=v1%3A171396134691071718; personalization_id="v1_O74RdUWbGOMZLTZGhxxEVA=="; guest_id=v1%3A171396134691071718
2024-04-24 12:22:38 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:38 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 12274e8711646e21 strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: b8110314264ae01180c150e095f9da4077716ce5b34a71ab5c31331589cc723e connection: close
2024-04-24 12:22:38 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.5	50096	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	673	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961356232&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961354021&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:22:38 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:22:38 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.5	50097	216.137.39.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:38 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:38 UTC	118	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%2227b83herk5tv%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.docusign.com%2Fprivacy%22%7D
2024-04-24 12:22:39 UTC	888	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 294 Connection: close date: Wed, 24 Apr 2024 12:22:38 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: f69be5ae4cb85553 vary: Accept-Encoding x-envoy-upstream-service-time: 9 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 250c0cb00d06687b06322aeb6c0379f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: 5W-lvmeXQFEeDoEmBQF7_pX6AJwpvwa6saPOYWORzNed-tWRHJG8mA==
2024-04-24 12:22:39 UTC	294	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 32 37 62 38 33 68 65 72 6b 35 74 76 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 74 72 75 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 5b 22 65 63 6f 6d 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 5d 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 Data Ascii: {"embedId":"27b83herk5tv","fallback":true,"targetingEvaluated":true,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":["ecom.docusign.com","docusign.com","chat.docusign.com","docusign.net","chat.docusign.net"],"driftEngageVerificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.5	50101	216.137.39.17	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 460 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift46033324564a9caacce776425f9 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:39 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 f781ef6ca1647978bf98d972dc06ed4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: eG8BYyDj0CEHxqQlOpzlbmECMdqrIhaymfjL3Mcj7wUfdMzdKDKVtQ==
2024-04-24 12:22:39 UTC	460	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.5	50102	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	868	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=1&ClientTime=1713961358704&PageStart=1713961356089&PrevBundleTime=0&LastActivity=2387&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 59247 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 89 92 db 46 b2 28 fa 2b 38 ad 70 58 6d 93 14 76 12 dd 33 7e 47 23 db cf 3e 23 7b 26 c6 1e 9f 45 76 38 40 12 24 a1 06 17 01 60 2f 62 e8 fc da fd a4 f7 0b 2f 6b 03 6a c5 42 b2 65 8d ae a4 19 0b ac 25 2b 2b 2b 2b 2b 33 ab 2a eb 70 f1 53 f2 e6 e2 ca 19 5c fc e7 2a d9 5c 5c 79 83 8b 6f 6e cb e2 e2 ea d5 e1 e2 af e9 66 7e 71 e5 06 83 8b e7 f9 12 25 5d ac ca 72 57 5c 3d 7b 76 77 77 37 9a 6f 67 fb 22 5d 6e 46 b3 ed fa d9 2e 4f 6f e3 d9 c3 c5 e0 e2 4f ff f6 f5 df 5e fc fc df 7f ff c6 5a 95 eb ec 2b 48 e9 50 e9 e2 b7 aa fd 77 03 d6 f0 c4 89 26 55 d3 8b 38 2b 92 81 a3 2f d7 0b c1 4d 7c 9b 2e e3 32 d1 b6 c9 b5 78 31 4f 16 f1 3e 2b 2f 06 9b 7d 96 0d 2e e6 db 35 fd c4 b8 68 31 09 eb da 93 70 96 f8 93 e9 74 32 4f 12 c7 8f c7 da e6 82 Data Ascii: F(+8pXmv3~G#>#{&Ev8@$`/b/kjBe%+++++3pS\\\yonf~q%]rW\={vww7og"]nF.OoO^Z+HPw&U8+/M\|.2x1O>+/}.5h1pt2O
2024-04-24 12:22:39 UTC	16384	OUT	Data Raw: 12 d0 8d 70 a9 43 43 bc 44 54 37 53 fa e2 ff 65 7c a8 f7 24 5b 18 0e ff 42 ad 67 9b 9b f6 73 35 b4 a0 de b9 c4 e4 8a 57 cb 15 c9 3a cc 93 5d 82 43 89 d0 2f 71 b6 8a a7 3d 42 c5 c6 30 f4 44 83 9e 38 89 0c 62 1a e1 25 86 24 14 ce a6 e8 78 ac 03 14 3a a0 4c 15 1d 85 e6 55 94 c4 d3 5e 79 86 ed 91 ee 87 08 e4 2d 08 f1 30 86 d8 ad c6 57 87 f4 9b 66 02 be d5 43 56 dc a1 31 25 26 70 43 f8 43 71 d7 10 9f 60 ab 9f c6 a0 7e d6 d6 d0 d9 0a 10 ba 56 5d 01 19 67 c9 0a ba 55 1f 2e 99 fb e8 2f c5 0f 5b c6 69 09 98 cd 74 e7 48 f0 5c 1a 16 30 75 66 ab 8a 2d 98 a7 d6 11 3d b5 a2 65 19 c8 8f 7a d4 4f 6e b1 83 0d 81 bc 4f e1 d4 ea 17 7f c2 ab 61 24 f8 a3 6d 52 e4 72 8d 16 95 33 9b b2 51 91 3b 48 2f d0 5d 2b fb 52 82 a7 76 ac f5 83 bb e8 3e 03 bf c9 c0 67 e2 13 c6 b5 d6 a1 8f Data Ascii: pCCDT7Se\|$[Bgs5W:]C/q=B0D8b%$x:LU^y-0WfCV1%&pCCq`~V]gU./[itH\0uf-=ezOnOa$mRr3Q;H/]+Rv>g
2024-04-24 12:22:39 UTC	16384	OUT	Data Raw: 42 eb 63 2f 7c 56 38 7d 61 46 b6 e4 d3 2a f0 27 7e 80 2f 31 23 5b 8a 3e a7 27 d2 ca a7 70 bf ef f2 2b ec e9 0a 33 50 50 56 19 90 f2 13 71 52 b2 0c b8 cd 36 dd d6 1f 2c ec f2 42 bc 0a c8 df f2 c5 4b dc fd 33 64 49 e0 04 01 ab 0a ce f9 b7 d8 9f 64 7f 33 de 0c 97 7e f4 3e b4 53 2b 9e a1 e5 c4 50 94 ba f3 e6 f5 62 51 61 12 4d f4 4f 28 d1 03 01 fd e3 6e 2a 6f 07 9d 4f ab 6e d3 7c a8 14 b0 70 be 5a f8 dd e1 cd 40 0f 05 aa 92 84 fe 63 38 b9 ea 63 39 db c2 6f b4 fa d0 db 75 55 cd 89 b2 d8 2e 25 ef 17 9f 3e 16 1c ce 7e 9f 8c 2d 59 1c c7 3a d8 44 08 0c 45 31 fd 9e 70 0b 01 0a 37 53 31 29 43 5e 0f d7 41 76 5d de d8 4e 0f 71 12 e7 4a 62 79 53 fd b4 03 ac e0 95 de 6f d0 fd 9d de 26 8c 3c e3 34 14 db 5b 1e 29 2d 0d 43 19 aa 62 84 f9 cc f2 84 bc a2 dc 85 96 f9 87 b2 aa Data Ascii: Bc/\|V8}aF'~/1#[>'p+3PPVqR6,BK3dId3~>S+PbQaMO(noOn\|pZ@c8c9ouU.%>~-Y:DE1p7S1)C^Av]NqJbySo&<4[)-Cb
2024-04-24 12:22:39 UTC	10095	OUT	Data Raw: af 17 40 c3 ab f6 b1 83 ed 55 15 52 c9 6a 9e 63 99 8b 94 b5 fe 92 43 44 a9 bf 47 2e 56 0f bc 3c cb bc 2c f4 bd d0 07 f6 d1 bb c3 30 a0 f9 c1 d1 be 69 60 70 8a 23 ef 05 a1 c2 a7 15 8a 64 5c af fb 8b ad 06 51 c4 1c 7f 98 a6 39 79 6c 60 29 97 9b 9b 9b 31 3a 27 62 9a fb 6e 9c 00 0a 6c c7 8b aa 9a 4f cb d9 87 a3 d1 d1 af bf 79 fd fa ed d9 9b 23 cb 9f 2f b8 5a 67 d7 dd 7b 7a 54 8c 8e d6 e5 b5 b0 63 df 90 87 38 dd 55 36 94 50 f3 b0 58 c7 e9 ce ab 82 4d 91 76 8b 4f 01 bf e7 f0 c3 20 e6 98 2f ee b7 8c 41 0c cf bd 2a 7b 1f af 3e 4d d1 b0 e7 bc cf ea fa fd cd 7b fb 75 18 67 a1 f9 7c bb 5b 45 fe 7b a3 59 fe 7d 18 88 7b 5f 90 44 9c bf 8c da f9 69 91 e5 64 3b f7 0b 0e 03 0a 03 a9 44 0c 68 24 d3 0d 93 2e 7e 9f 7c f0 aa 4d f2 a1 9a af 7c 5c 2f b4 3f 62 3f f8 31 ba c8 8f Data Ascii: @URjcCDG.V<,0i`p#d\Q9yl`)1:'bnlOy#/Zg{zTc8U6PXMvO /A*{>M{ug\|[E{Y}{_Did;Dh$.~\|M\|\/?b?1
2024-04-24 12:22:40 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:40 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 35 39 36 38 32 7d 0a Data Ascii: {"BundleTime":1713961359682}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.5	50099	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	508	OUT	OPTIONS /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	684	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:39 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: text/plain allow: POST,OPTIONS requestid: drift07f08cb4f3fa65a3a2d156dac1d content-length: 13 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-04-24 12:22:39 UTC	13	IN	Data Raw: 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 Data Ascii: POST, OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.5	50100	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	508	OUT	OPTIONS /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	684	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:39 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: text/plain allow: POST,OPTIONS requestid: driftbfe80f94cb4a2c738d6b1aabb12 content-length: 13 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-04-24 12:22:39 UTC	13	IN	Data Raw: 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 Data Ascii: POST, OPTIONS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.5	50103	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	893	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=6&ClientTime=1713961358927&PageStart=1713961346738&PrevBundleTime=1713961357742&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 813 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	813	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a e5 55 6b 6f db 36 14 fd 2b 1a 81 0a 2d 40 49 7c 53 72 a7 15 4e e2 6d 45 9a c6 ab 5c 04 c3 50 14 94 44 db 5a 64 c9 11 69 bb ee e3 bf 8f f6 5c 07 76 9c 75 d8 87 7d d8 48 42 90 ae ce b9 22 cf b9 22 3f 81 4c df 81 9e 80 e0 66 aa 1b d0 c3 08 27 31 04 83 a5 35 a0 f7 db 27 70 59 35 25 e8 71 09 41 bf 9b 6c 42 18 43 60 74 3d 06 90 88 84 d1 90 43 99 bc 3b 60 7f 81 27 68 04 82 a9 b5 73 d3 8b 22 ab 26 26 34 dd 32 34 56 15 b7 aa 54 73 1b 16 ed 2c fa dd bc b7 9d 8b 54 cd e4 c5 a2 ab d3 2d fe 09 ed 3f 21 3f ba b1 5a ad c2 b2 2d 16 a6 9a 34 1b b8 0b cd bb 6a a9 8a b5 bf a8 ca b4 1e 0f cb ab 15 e2 a3 0c ff 32 6a d6 03 75 69 2f ce fa fe 32 c5 fe b4 35 f6 1b c9 dc 62 38 23 32 a4 c9 be 31 88 39 15 6e 79 e0 c3 ac de b0 3b 7d b7 d0 c6 02 88 5c 3f Data Ascii: Uko6+-@I\|SrNmE\PDZdi\vu}HB""?Lf'15'pY5%qAlBC`t=C;`'hs"&&424VTs,T-?!?Z-4j2jui/25b8#219ny;}\?
2024-04-24 12:22:40 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:40 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 35 39 38 35 32 7d 0a Data Ascii: {"BundleTime":1713961359852}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.5	50104	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=6&ClientTime=1713961358915&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2162 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	2162	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 31 30 31 39 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 31 2c 22 73 65 6c 66 22 2c 32 36 39 34 33 2e 35 2c 37 39 5d 2c 22 57 68 65 6e 22 3a 31 30 31 39 38 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 6a 73 5f 74 72 61 63 6b 69 6e 67 3f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 26 75 69 64 3d 6c 66 50 64 4d 77 30 35 54 53 31 51 54 6e 79 45 61 4b 74 44 42 41 26 76 3d 31 26 68 6f 73 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 Data Ascii: {"Seq":6,"When":10198,"Evts":[{"Kind":57,"Args":[11,"self",26943.5,79],"When":10198},{"Kind":57,"Args":[2,"https://tags.srv.stackadapt.com/js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=lfPdMw05TS1QTnyEaKtDBA&v=1&host=https%3A%2F%2Fwww.docus
2024-04-24 12:22:40 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.5	50105	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=7&ClientTime=1713961358918&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1057 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	1057	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 31 33 34 32 35 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 32 66 62 32 31 65 36 65 2d 35 62 37 30 2d 34 33 37 62 2d 38 36 62 32 2d 36 64 32 38 62 30 33 37 63 62 32 36 26 53 65 73 73 69 6f 6e 49 64 3d 62 32 61 62 65 65 63 32 2d 38 35 66 62 2d 34 38 65 39 2d 61 36 37 32 2d 37 31 34 31 64 62 38 37 32 66 62 32 26 50 61 67 65 49 64 3d 63 31 38 37 39 62 63 37 2d 34 34 64 33 2d 34 62 34 30 2d 38 64 66 38 2d 39 39 37 36 34 31 35 39 34 36 61 39 26 53 65 71 3d 35 26 43 6c 69 65 6e 74 54 69 6d 65 Data Ascii: {"Seq":7,"When":13425,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime
2024-04-24 12:22:40 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.5	50106	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=6&ClientTime=1713961359093&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2162 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	2162	OUT	Data Raw: 7b 22 53 65 71 22 3a 36 2c 22 57 68 65 6e 22 3a 31 30 31 39 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 31 2c 22 73 65 6c 66 22 2c 32 36 39 34 33 2e 35 2c 37 39 5d 2c 22 57 68 65 6e 22 3a 31 30 31 39 38 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 74 61 67 73 2e 73 72 76 2e 73 74 61 63 6b 61 64 61 70 74 2e 63 6f 6d 2f 6a 73 5f 74 72 61 63 6b 69 6e 67 3f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 26 75 69 64 3d 6c 66 50 64 4d 77 30 35 54 53 31 51 54 6e 79 45 61 4b 74 44 42 41 26 76 3d 31 26 68 6f 73 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 Data Ascii: {"Seq":6,"When":10198,"Evts":[{"Kind":57,"Args":[11,"self",26943.5,79],"When":10198},{"Kind":57,"Args":[2,"https://tags.srv.stackadapt.com/js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=lfPdMw05TS1QTnyEaKtDBA&v=1&host=https%3A%2F%2Fwww.docus
2024-04-24 12:22:40 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.5	50107	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=7&ClientTime=1713961359094&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1057 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	1057	OUT	Data Raw: 7b 22 53 65 71 22 3a 37 2c 22 57 68 65 6e 22 3a 31 33 34 32 35 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 32 66 62 32 31 65 36 65 2d 35 62 37 30 2d 34 33 37 62 2d 38 36 62 32 2d 36 64 32 38 62 30 33 37 63 62 32 36 26 53 65 73 73 69 6f 6e 49 64 3d 62 32 61 62 65 65 63 32 2d 38 35 66 62 2d 34 38 65 39 2d 61 36 37 32 2d 37 31 34 31 64 62 38 37 32 66 62 32 26 50 61 67 65 49 64 3d 63 31 38 37 39 62 63 37 2d 34 34 64 33 2d 34 62 34 30 2d 38 64 66 38 2d 39 39 37 36 34 31 35 39 34 36 61 39 26 53 65 71 3d 35 26 43 6c 69 65 6e 74 54 69 6d 65 Data Ascii: {"Seq":7,"When":13425,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=5&ClientTime
2024-04-24 12:22:40 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.5	50108	142.250.141.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:39 UTC	1215	OUT	POST /g/collect?v=2&tid=G-1TZ7S9D6BQ&gtm=45je44m0v879027428z8856130670za200&_p=1713961348909&gcs=G111&gcd=13v3v3v3v5&npa=0&dma=0&gdid=dYWJhMj&cid=866850028.1713961341&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&dr=&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&sid=1713961341&sct=1&seg=1&dt=Privacy%20Notice%20%7C%20DocuSign&_s=1&tfd=12215 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 740 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:39 UTC	740	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 26 65 70 2e 67 74 6d 5f 73 65 74 74 69 6e 67 3d 34 30 37 25 32 30 25 37 43 25 32 30 47 54 4d 2d 4e 58 58 32 4d 34 37 25 32 30 25 37 43 25 32 30 26 65 70 2e 68 6f 73 74 6e 61 6d 65 3d 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 26 65 70 2e 70 61 67 65 5f 6e 61 6d 65 3d 70 72 69 76 61 63 79 25 32 30 70 6f 6c 69 63 79 26 65 70 2e 70 61 67 65 5f 73 65 63 74 69 6f 6e 3d 6c 65 67 61 6c 26 75 70 2e 63 6c 69 65 6e 74 5f 69 64 3d 38 36 36 38 35 30 30 32 38 2e 31 37 31 33 39 36 31 33 34 31 26 75 70 2e 75 5f 75 75 69 64 3d 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 0d 0a 65 6e 3d 64 65 6d 61 6e 64 62 61 73 65 5f 6c 6f 61 64 65 64 26 65 70 2e 67 74 6d 5f 73 65 74 Data Ascii: en=page_view&ep.gtm_setting=407%20%7C%20GTM-NXX2M47%20%7C%20&ep.hostname=www.docusign.com&ep.page_name=privacy%20policy&ep.page_section=legal&up.client_id=866850028.1713961341&up.u_uuid=e726a659-b15e-4860-84f0-a4f96f541646en=demandbase_loaded&ep.gtm_set
2024-04-24 12:22:40 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.docusign.com Date: Wed, 24 Apr 2024 12:22:40 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.5	50109	216.137.39.17	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:40 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:40 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 460 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftace5ed94fba8ffca13cbc050d9f cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:22:40 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 89fb248da6d030379dec9569a47a0c92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: 4Js7DaRJcLbi0kJzoRoWqIjsgwhdyxVLKxoEokOEk-zjlaXKkGrAuA==
2024-04-24 12:22:40 UTC	460	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.5	50113	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:40 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=8&ClientTime=1713961359095&PageStart=1713961346738&PrevBundleTime=1713961357742&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2055 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:40 UTC	2055	OUT	Data Raw: 7b 22 53 65 71 22 3a 38 2c 22 57 68 65 6e 22 3a 31 34 37 37 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 31 34 37 37 37 7d 2c 7b 22 4b 69 6e 64 22 3a 38 38 2c 22 41 72 67 73 22 3a 5b 32 39 30 36 2c 22 32 39 30 36 5b 73 72 63 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 5d 22 2c 36 5d 2c 22 57 68 65 6e 22 3a 31 34 37 37 39 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 33 31 35 32 34 2e 32 39 39 39 39 39 39 39 39 39 39 2c 36 34 2c 33 31 35 38 39 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 33 31 35 38 39 2e 32 30 30 30 30 30 30 30 30 30 31 2c 30 Data Ascii: {"Seq":8,"When":14777,"Evts":[{"Kind":100,"Args":["visible"],"When":14777},{"Kind":88,"Args":[2906,"2906[src=https://www.docusign.com/privacy]",6],"When":14779},{"Kind":57,"Args":[12,"pointerout",31524.29999999999,64,31589.099999999977,31589.20000000001,0
2024-04-24 12:22:40 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.5	50110	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:40 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:40 UTC	563	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 36 32 30 38 65 61 66 61 2d 38 35 30 37 2d 34 33 37 35 2d 38 32 65 66 2d 35 63 66 63 62 39 63 32 66 31 33 33 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 41 50 49 25 32 30 45 76 65 6e 74 25 32 30 46 69 72 65 64 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 34 66 61 35 66 33 37 64 2d 37 30 63 34 2d 34 65 39 62 2d 62 31 63 33 2d 30 39 32 36 33 62 36 32 30 31 37 64 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 37 64 61 62 61 37 36 66 2d 38 31 61 34 2d Data Ascii: metric_payload=%7B%22id%22%3A%226208eafa-8507-4375-82ef-5cfcb9c2f133%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20API%20Event%20Fired%22%2C%22sessionId%22%3A%224fa5f37d-70c4-4e9b-b1c3-09263b62017d%22%2C%22instanceId%22%3A%227daba76f-81a4-
2024-04-24 12:22:41 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:40 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 3d72cc6cb35239ee vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 14 server: istio-envoy connection: close
2024-04-24 12:22:41 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.5	50114	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:40 UTC	612	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=1&ClientTime=1713961358704&PageStart=1713961356089&PrevBundleTime=0&LastActivity=2387&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:40 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:40 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.5	50115	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:40 UTC	639	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=6&ClientTime=1713961358927&PageStart=1713961346738&PrevBundleTime=1713961357742&LastActivity=0&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:40 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:40 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:40 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.5	50111	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:40 UTC	635	OUT	POST /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Content-Length: 769 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:40 UTC	769	OUT	Data Raw: 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 7d 2c 22 75 73 65 72 49 64 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 38 63 66 34 61 33 66 61 2d 31 36 66 64 2d 34 39 35 35 2d 38 62 65 30 2d 35 32 63 61 65 36 31 34 64 65 64 39 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 72 65 66 65 Data Ascii: {"attributes":{"ds_a":"e726a659-b15e-4860-84f0-a4f96f541646","has_consent":true,"countryCode":"US"},"userId":"e726a659-b15e-4860-84f0-a4f96f541646","anonymousId":"8cf4a3fa-16fd-4955-8be0-52cae614ded9","context":{"page":{"hostname":"www.docusign.com","refe
2024-04-24 12:22:41 UTC	669	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:40 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 80b6ae371827285e content-length: 915 x-envoy-upstream-service-time: 82 server: istio-envoy connection: close
2024-04-24 12:22:41 UTC	915	IN	Data Raw: 7b 22 69 64 22 3a 22 31 39 62 36 33 36 36 34 37 32 61 36 33 35 39 35 65 64 39 32 31 63 32 64 31 31 32 66 39 65 63 31 22 2c 22 75 73 65 72 49 64 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 38 63 66 34 61 33 66 61 2d 31 36 66 64 2d 34 39 35 35 2d 38 62 65 30 2d 35 32 63 61 65 36 31 34 64 65 64 39 22 2c 22 63 6f 6d 70 61 6e 79 49 64 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c Data Ascii: {"id":"19b6366472a63595ed921c2d112f9ec1","userId":"e726a659-b15e-4860-84f0-a4f96f541646","anonymousId":"8cf4a3fa-16fd-4955-8be0-52cae614ded9","companyId":null,"internal":false,"attributes":{"ds_a":"e726a659-b15e-4860-84f0-a4f96f541646","has_consent":true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.5	50112	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:40 UTC	635	OUT	POST /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Content-Length: 766 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:40 UTC	766	OUT	Data Raw: 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 7d 2c 22 75 73 65 72 49 64 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 38 63 66 34 61 33 66 61 2d 31 36 66 64 2d 34 39 35 35 2d 38 62 65 30 2d 35 32 63 61 65 36 31 34 64 65 64 39 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 72 65 66 65 Data Ascii: {"attributes":{"ds_a":"e726a659-b15e-4860-84f0-a4f96f541646","has_consent":true,"countryCode":"US"},"userId":"e726a659-b15e-4860-84f0-a4f96f541646","anonymousId":"8cf4a3fa-16fd-4955-8be0-52cae614ded9","context":{"page":{"hostname":"www.docusign.com","refe
2024-04-24 12:22:41 UTC	670	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:40 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 539b76fe9b6e40c8 content-length: 912 x-envoy-upstream-service-time: 119 server: istio-envoy connection: close
2024-04-24 12:22:41 UTC	912	IN	Data Raw: 7b 22 69 64 22 3a 22 33 34 64 61 31 63 32 38 32 33 61 64 37 65 33 63 31 65 62 61 31 34 39 34 61 65 30 64 37 34 30 37 22 2c 22 75 73 65 72 49 64 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 38 63 66 34 61 33 66 61 2d 31 36 66 64 2d 34 39 35 35 2d 38 62 65 30 2d 35 32 63 61 65 36 31 34 64 65 64 39 22 2c 22 63 6f 6d 70 61 6e 79 49 64 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c Data Ascii: {"id":"34da1c2823ad7e3c1eba1494ae0d7407","userId":"e726a659-b15e-4860-84f0-a4f96f541646","anonymousId":"8cf4a3fa-16fd-4955-8be0-52cae614ded9","companyId":null,"internal":false,"attributes":{"ds_a":"e726a659-b15e-4860-84f0-a4f96f541646","has_consent":true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.5	50120	216.137.39.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:41 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 443 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:41 UTC	443	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 32 37 62 38 33 68 65 72 6b 35 74 76 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 75 73 65 72 5f 69 64 3d 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 26 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 3d 31 37 31 33 39 36 31 33 34 35 26 74 61 72 67 65 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 30 37 61 37 63 65 34 39 2d 63 65 63 36 2d 34 32 37 39 2d 62 38 63 66 2d 30 65 64 31 34 64 38 30 36 37 62 38 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: embed_id=27b83herk5tv&client_id=f6zuizdyhxrm7r&consent_id=has_consent&user_id=e726a659-b15e-4860-84f0-a4f96f541646&sessionStarted=1713961345&targeting_context=%7B%22sessionId%22%3A%2207a7ce49-cec6-4279-b8cf-0ed14d8067b8%22%2C%22pageUrl%22%3A%22https%3A%2F
2024-04-24 12:22:42 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Wed, 24 Apr 2024 12:22:41 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: e47684230833f09b vary: Accept-Encoding x-envoy-upstream-service-time: 209 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 d753bdff57c5dcd160113c97de38707a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: VrRVxBMb2KW21dgzBv02kq3OuDPk5_cBcJX_giKRRSRmNxPX6Z2oPA==
2024-04-24 12:22:42 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 2c 22 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 38 33 39 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 36 2e 31 36 38 35 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 31 31 35 2e 31 31 36 34 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 Data Ascii: 4151{"location":{"ip":"154.16.105.36","city":"Las Vegas","subdivision":"Nevada","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":839,"postalCode":"89101","latitude":36.1685,"longitude":-115.1164},"tokenResult":{"accessToke
2024-04-24 12:22:42 UTC	1242	IN	Data Raw: 34 32 37 30 34 37 7d 2c 22 65 73 22 3a 7b 22 63 6f 6e 73 65 6e 74 44 65 63 6c 69 6e 65 64 4d 65 73 73 61 67 65 22 3a 22 44 6f 63 75 53 69 67 6e 20 73 65 20 70 72 65 6f 63 75 70 61 20 70 6f 72 20 6c 61 20 74 72 61 6e 73 70 61 72 65 6e 63 69 61 20 79 20 6c 61 20 70 72 69 76 61 63 69 64 61 64 20 64 65 20 73 75 73 20 63 6c 69 65 6e 74 65 73 2e 20 50 61 72 61 20 70 6f 64 65 72 20 75 73 61 72 20 6e 75 65 73 74 72 61 20 66 75 6e 63 69 c3 b3 6e 20 64 65 20 63 68 61 74 62 6f 74 2c 20 64 65 62 65 73 20 68 61 62 69 6c 69 74 61 72 20 6c 61 73 20 63 6f 6f 6b 69 65 73 20 66 75 6e 63 69 6f 6e 61 6c 65 73 2e 20 53 69 6e 20 65 6d 62 61 72 67 6f 2c 20 70 75 65 64 65 73 20 64 65 73 68 61 62 69 6c 69 74 61 72 6c 61 73 20 63 75 61 6e 64 6f 20 6e 6f 20 65 73 74 c3 a9 73 20 63 Data Ascii: 427047},"es":{"consentDeclinedMessage":"DocuSign se preocupa por la transparencia y la privacidad de sus clientes. Para poder usar nuestra funcin de chatbot, debes habilitar las cookies funcionales. Sin embargo, puedes deshabilitarlas cuando no ests c
2024-04-24 12:22:42 UTC	16384	IN	Data Raw: 34 34 30 30 0d 0a c5 93 75 72 2e 20 50 6f 75 72 20 73 6f 75 74 65 6e 69 72 20 6c 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 61 6c 69 74 c3 a9 73 20 64 65 20 6e 6f 74 72 65 20 43 68 61 74 62 6f 74 2c 20 76 6f 75 73 20 64 65 76 65 7a 20 61 63 74 69 76 65 72 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 2e 20 54 6f 75 74 65 66 6f 69 73 2c 20 76 6f 75 73 20 70 6f 75 76 65 7a 20 6c 65 73 20 64 c3 a9 73 61 63 74 69 76 65 72 20 6c 6f 72 73 71 75 65 20 6c 65 20 63 6c 61 76 61 72 64 61 67 65 20 65 73 74 20 74 65 72 6d 69 6e c3 a9 2e 20 41 63 74 69 76 65 7a 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 20 65 6e 20 61 6c 6c 61 6e 74 20 64 61 6e 73 20 c2 ab c2 a0 50 61 72 61 6d c3 a8 74 72 65 73 20 64 65 73 20 63 6f Data Ascii: 4400ur. Pour soutenir les fonctionnalits de notre Chatbot, vous devez activer les cookies fonctionnels. Toutefois, vous pouvez les dsactiver lorsque le clavardage est termin. Activez les cookies fonctionnels en allant dans Paramtres des co
2024-04-24 12:22:42 UTC	1032	IN	Data Raw: 35 32 33 34 38 39 33 5d 2c 22 69 6e 74 65 67 72 61 74 69 6f 6e 73 22 3a 7b 22 67 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 53 65 74 74 69 6e 67 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 69 6e 64 69 76 69 64 75 61 6c 45 76 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 64 45 76 65 6e 74 4d 61 70 70 69 6e 67 73 22 3a 7b 7d 7d 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 73 22 3a 7b 22 66 61 63 65 62 6f 6f 6b 41 6e 61 6c 79 74 69 63 73 22 3a 66 61 6c 73 65 2c 22 6d 69 63 72 6f 73 6f 66 74 54 65 61 6d 73 22 3a 66 61 6c 73 65 2c 22 77 6f 72 64 70 72 65 73 73 22 3a 66 61 6c 73 65 2c 22 6c 65 61 6e 64 61 74 61 22 3a 66 61 6c 73 65 2c 22 77 6f 72 64 70 72 65 73 73 Data Ascii: 5234893],"integrations":{"googleAnalyticsSettings":{"enabled":true,"trackingName":null,"individualEventsEnabled":false,"enabledEventMappings":{}},"connections":{"facebookAnalytics":false,"microsoftTeams":false,"wordpress":false,"leandata":false,"wordpress
2024-04-24 12:22:42 UTC	11043	IN	Data Raw: 32 62 31 62 0d 0a 33 31 36 35 2c 35 32 31 33 31 36 38 2c 35 32 31 33 31 38 38 2c 35 32 31 33 31 39 34 2c 35 32 33 34 38 38 32 2c 35 32 33 34 38 39 35 2c 35 32 33 34 39 30 31 2c 35 32 33 34 39 30 33 2c 35 32 33 34 39 30 34 2c 35 32 33 34 39 30 39 2c 35 32 33 34 39 31 31 2c 35 32 33 34 39 31 33 2c 35 32 34 33 33 34 39 2c 35 32 34 33 36 34 33 2c 35 32 34 33 36 34 36 2c 35 32 34 33 36 34 37 2c 35 32 34 33 36 34 38 2c 35 32 34 33 37 30 30 2c 35 32 34 33 37 30 31 2c 35 32 34 33 37 30 32 2c 35 32 34 33 37 30 33 2c 35 32 34 34 31 30 36 2c 35 32 34 34 31 35 32 2c 35 32 34 35 36 31 30 2c 35 32 34 36 31 37 36 2c 35 32 34 37 35 33 35 2c 35 32 34 37 35 39 34 2c 35 32 34 37 37 38 36 2c 35 32 34 37 37 38 37 2c 35 32 35 35 32 35 36 2c 35 32 35 35 38 39 35 2c 35 32 35 35 Data Ascii: 2b1b3165,5213168,5213188,5213194,5234882,5234895,5234901,5234903,5234904,5234909,5234911,5234913,5243349,5243643,5243646,5243647,5243648,5243700,5243701,5243702,5243703,5244106,5244152,5245610,5246176,5247535,5247594,5247786,5247787,5255256,5255895,5255
2024-04-24 12:22:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.5	50118	216.137.39.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:41 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 443 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:41 UTC	443	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 32 37 62 38 33 68 65 72 6b 35 74 76 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 75 73 65 72 5f 69 64 3d 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 26 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 3d 31 37 31 33 39 36 31 33 35 36 26 74 61 72 67 65 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 37 62 33 35 63 66 33 35 2d 35 30 30 61 2d 34 39 39 62 2d 39 39 65 35 2d 33 39 62 34 61 39 37 39 31 31 36 37 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: embed_id=27b83herk5tv&client_id=f6zuizdyhxrm7r&consent_id=has_consent&user_id=e726a659-b15e-4860-84f0-a4f96f541646&sessionStarted=1713961356&targeting_context=%7B%22sessionId%22%3A%227b35cf35-500a-499b-99e5-39b4a9791167%22%2C%22pageUrl%22%3A%22https%3A%2F
2024-04-24 12:22:42 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Wed, 24 Apr 2024 12:22:41 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: be9df9f46fa4d57b vary: Accept-Encoding x-envoy-upstream-service-time: 218 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 d10240e7319a7132a723389f68b24380.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: xllr1fykqZL3E4FazhWItLYn4m2sio-jEVvRqjmeRkFxB9Sss4rpQQ==
2024-04-24 12:22:42 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 2c 22 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 38 33 39 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 36 2e 31 36 38 35 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 31 31 35 2e 31 31 36 34 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 Data Ascii: 4151{"location":{"ip":"154.16.105.36","city":"Las Vegas","subdivision":"Nevada","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":839,"postalCode":"89101","latitude":36.1685,"longitude":-115.1164},"tokenResult":{"accessToke
2024-04-24 12:22:42 UTC	1242	IN	Data Raw: 34 32 37 30 34 37 7d 2c 22 65 73 22 3a 7b 22 63 6f 6e 73 65 6e 74 44 65 63 6c 69 6e 65 64 4d 65 73 73 61 67 65 22 3a 22 44 6f 63 75 53 69 67 6e 20 73 65 20 70 72 65 6f 63 75 70 61 20 70 6f 72 20 6c 61 20 74 72 61 6e 73 70 61 72 65 6e 63 69 61 20 79 20 6c 61 20 70 72 69 76 61 63 69 64 61 64 20 64 65 20 73 75 73 20 63 6c 69 65 6e 74 65 73 2e 20 50 61 72 61 20 70 6f 64 65 72 20 75 73 61 72 20 6e 75 65 73 74 72 61 20 66 75 6e 63 69 c3 b3 6e 20 64 65 20 63 68 61 74 62 6f 74 2c 20 64 65 62 65 73 20 68 61 62 69 6c 69 74 61 72 20 6c 61 73 20 63 6f 6f 6b 69 65 73 20 66 75 6e 63 69 6f 6e 61 6c 65 73 2e 20 53 69 6e 20 65 6d 62 61 72 67 6f 2c 20 70 75 65 64 65 73 20 64 65 73 68 61 62 69 6c 69 74 61 72 6c 61 73 20 63 75 61 6e 64 6f 20 6e 6f 20 65 73 74 c3 a9 73 20 63 Data Ascii: 427047},"es":{"consentDeclinedMessage":"DocuSign se preocupa por la transparencia y la privacidad de sus clientes. Para poder usar nuestra funcin de chatbot, debes habilitar las cookies funcionales. Sin embargo, puedes deshabilitarlas cuando no ests c
2024-04-24 12:22:42 UTC	16384	IN	Data Raw: 34 33 66 38 0d 0a c5 93 75 72 2e 20 50 6f 75 72 20 73 6f 75 74 65 6e 69 72 20 6c 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 61 6c 69 74 c3 a9 73 20 64 65 20 6e 6f 74 72 65 20 43 68 61 74 62 6f 74 2c 20 76 6f 75 73 20 64 65 76 65 7a 20 61 63 74 69 76 65 72 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 2e 20 54 6f 75 74 65 66 6f 69 73 2c 20 76 6f 75 73 20 70 6f 75 76 65 7a 20 6c 65 73 20 64 c3 a9 73 61 63 74 69 76 65 72 20 6c 6f 72 73 71 75 65 20 6c 65 20 63 6c 61 76 61 72 64 61 67 65 20 65 73 74 20 74 65 72 6d 69 6e c3 a9 2e 20 41 63 74 69 76 65 7a 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 20 65 6e 20 61 6c 6c 61 6e 74 20 64 61 6e 73 20 c2 ab c2 a0 50 61 72 61 6d c3 a8 74 72 65 73 20 64 65 73 20 63 6f Data Ascii: 43f8ur. Pour soutenir les fonctionnalits de notre Chatbot, vous devez activer les cookies fonctionnels. Toutefois, vous pouvez les dsactiver lorsque le clavardage est termin. Activez les cookies fonctionnels en allant dans Paramtres des co
2024-04-24 12:22:42 UTC	1024	IN	Data Raw: 79 74 69 63 73 53 65 74 74 69 6e 67 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 69 6e 64 69 76 69 64 75 61 6c 45 76 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 64 45 76 65 6e 74 4d 61 70 70 69 6e 67 73 22 3a 7b 7d 7d 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 73 22 3a 7b 22 66 61 63 65 62 6f 6f 6b 41 6e 61 6c 79 74 69 63 73 22 3a 66 61 6c 73 65 2c 22 6d 69 63 72 6f 73 6f 66 74 54 65 61 6d 73 22 3a 66 61 6c 73 65 2c 22 77 6f 72 64 70 72 65 73 73 22 3a 66 61 6c 73 65 2c 22 6c 65 61 6e 64 61 74 61 22 3a 66 61 6c 73 65 2c 22 77 6f 72 64 70 72 65 73 73 56 32 22 3a 66 61 6c 73 65 2c 22 66 69 76 65 5f 62 79 5f 66 69 76 65 22 3a 66 61 6c 73 65 2c 22 6c 69 6e 6b Data Ascii: yticsSettings":{"enabled":true,"trackingName":null,"individualEventsEnabled":false,"enabledEventMappings":{}},"connections":{"facebookAnalytics":false,"microsoftTeams":false,"wordpress":false,"leandata":false,"wordpressV2":false,"five_by_five":false,"link
2024-04-24 12:22:42 UTC	11015	IN	Data Raw: 32 61 66 66 0d 0a 2c 35 32 33 34 38 38 32 2c 35 32 33 34 38 39 35 2c 35 32 33 34 39 30 31 2c 35 32 33 34 39 30 33 2c 35 32 33 34 39 30 34 2c 35 32 33 34 39 30 39 2c 35 32 33 34 39 31 31 2c 35 32 33 34 39 31 33 2c 35 32 34 33 33 34 39 2c 35 32 34 33 36 34 33 2c 35 32 34 33 36 34 36 2c 35 32 34 33 36 34 37 2c 35 32 34 33 36 34 38 2c 35 32 34 33 37 30 30 2c 35 32 34 33 37 30 31 2c 35 32 34 33 37 30 32 2c 35 32 34 33 37 30 33 2c 35 32 34 34 31 30 36 2c 35 32 34 34 31 35 32 2c 35 32 34 35 36 31 30 2c 35 32 34 36 31 37 36 2c 35 32 34 37 35 33 35 2c 35 32 34 37 35 39 34 2c 35 32 34 37 37 38 36 2c 35 32 34 37 37 38 37 2c 35 32 35 35 32 35 36 2c 35 32 35 35 38 39 35 2c 35 32 35 35 39 30 36 2c 35 32 35 35 39 32 33 2c 35 32 35 36 31 32 39 2c 35 32 35 37 34 39 36 2c Data Ascii: 2aff,5234882,5234895,5234901,5234903,5234904,5234909,5234911,5234913,5243349,5243643,5243646,5243647,5243648,5243700,5243701,5243702,5243703,5244106,5244152,5245610,5246176,5247535,5247594,5247786,5247787,5255256,5255895,5255906,5255923,5256129,5257496,
2024-04-24 12:22:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.5	50117	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:42 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:42 UTC	563	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 30 32 33 39 39 30 31 30 2d 37 62 63 65 2d 34 34 66 64 2d 38 64 34 34 2d 65 36 66 62 66 36 62 38 62 34 33 36 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 41 50 49 25 32 30 45 76 65 6e 74 25 32 30 46 69 72 65 64 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 62 65 65 66 61 30 39 62 2d 66 38 36 38 2d 34 36 38 62 2d 61 35 33 61 2d 30 62 38 39 33 61 61 33 39 39 38 66 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 34 64 35 38 64 38 33 62 2d 36 66 36 64 2d Data Ascii: metric_payload=%7B%22id%22%3A%2202399010-7bce-44fd-8d44-e6fbf6b8b436%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20API%20Event%20Fired%22%2C%22sessionId%22%3A%22beefa09b-f868-468b-a53a-0b893aa3998f%22%2C%22instanceId%22%3A%224d58d83b-6f6d-
2024-04-24 12:22:42 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:42 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: c9f66536ea579bb6 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 12 server: istio-envoy connection: close
2024-04-24 12:22:42 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.5	50116	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:42 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 573 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:42 UTC	573	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 62 65 65 66 61 30 39 62 2d 66 38 36 38 2d 34 36 38 62 2d 61 35 33 61 2d 30 62 38 39 33 61 61 33 39 39 38 66 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 34 64 35 38 64 38 33 62 2d 36 66 36 64 2d 34 39 33 63 2d 38 35 65 38 2d 66 31 35 64 30 30 66 36 35 31 33 39 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%22beefa09b-f868-468b-a53a-0b893aa3998f%22%2C%22instanceId%22%3A%224d58d83b-6f6d-493c-85e8-f15d00f65139%22%2C%22context%22%3A%7B%22url%22%3A
2024-04-24 12:22:42 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:42 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 1b87767ca2353556 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 18 server: istio-envoy connection: close
2024-04-24 12:22:42 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.5	50119	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:42 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 572 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:42 UTC	572	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 34 66 61 35 66 33 37 64 2d 37 30 63 34 2d 34 65 39 62 2d 62 31 63 33 2d 30 39 32 36 33 62 36 32 30 31 37 64 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 37 64 61 62 61 37 36 66 2d 38 31 61 34 2d 34 34 30 38 2d 38 39 65 63 2d 39 64 35 61 32 65 35 31 61 62 36 65 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%224fa5f37d-70c4-4e9b-b1c3-09263b62017d%22%2C%22instanceId%22%3A%227daba76f-81a4-4408-89ec-9d5a2e51ab6e%22%2C%22context%22%3A%7B%22url%22%3A
2024-04-24 12:22:42 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:42 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 2b72708f2ffb64c5 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-04-24 12:22:42 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.5	50121	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:42 UTC	880	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=2&ClientTime=1713961361177&PageStart=1713961356089&PrevBundleTime=1713961359682&LastActivity=1318&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 12486 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:42 UTC	12486	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 7d 0b 77 db 36 b3 e0 5f d1 f5 3d 51 db 73 45 89 78 90 04 9d d5 66 f3 70 d3 b4 79 3b e9 bb 47 07 24 41 99 36 45 2a 24 25 db f9 b6 fb db 77 00 52 32 09 ea 69 c7 69 da ba 6e 28 09 1c 0c 06 f3 c2 00 04 86 ff 39 38 16 1f 0e 0e 71 ef e0 a7 13 91 1c 1c 22 13 d1 de c1 d1 bc c8 0f 0e 7f fb cf c1 0f 51 12 1c 1c 3a ac 77 f0 30 1b cb a2 df cc 1e 92 7f 12 8c 9a 7f fc 51 af f7 67 6f 5d 05 ab aa 40 d7 55 70 cd ab 0a a8 87 19 5e 07 68 b7 00 7b bf 1d f4 fd 3c 37 d0 f4 d2 8f 4e b2 ce 7f 3a 41 94 4f 63 7e 79 d8 09 63 71 71 5f 5d 8d 20 ca 84 5f 44 69 72 d8 f1 d3 78 36 49 ee 77 c6 7c 7a d8 31 fb 56 26 26 f7 3b 7f 1e f4 9a 68 66 71 e7 7f 3a 27 18 d0 4d 78 36 8e 12 a3 48 01 1c e9 e0 c5 87 4b 72 f6 f1 a6 8d 56 58 76 6c d3 89 a2 d3 f3 d3 25 14 e0 Data Ascii: }w6_=QsExfpy;G$A6E*$%wR2iin(98q"Q:w0Qgo]@Up^h{<7N:AOc~ycqq_] _Dirx6Iw\|z1V&&;hfq:'Mx6HKrVXvl%
2024-04-24 12:22:42 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:42 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:42 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 36 32 35 33 39 7d 0a Data Ascii: {"BundleTime":1713961362539}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.5	50122	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:42 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=7&ClientTime=1713961361866&PageStart=1713961346738&PrevBundleTime=1713961359852&LastActivity=2949&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 615 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:42 UTC	615	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 93 e9 6f da 30 14 c0 ff 95 cc 1f 50 2b 39 89 ef 83 8e 4d 2d 43 5b d5 0b 09 aa 6a 9a fa 21 87 01 ab 21 a1 89 81 1e ea ff 3e 87 76 0c a6 55 9b 5e 2c bd 3c ff de 65 3f 3f 83 91 b9 07 5d 09 c1 cd cc 94 a0 8b 29 23 1c 82 c1 ca 35 a0 fb e3 19 9c d9 32 07 5d ee f7 8f eb 69 6b 22 10 cc 9c 5b 34 dd 38 ae 9b 68 b2 2c 8a c6 55 f5 63 94 55 f3 b8 36 59 9c 2e cb bc 30 f1 8a 7c be aa a7 a7 79 0f 93 93 21 1b 74 ae 1b 53 fb 3f 32 49 09 36 c2 84 3c 95 28 64 54 a6 a1 12 29 09 45 4e 54 8a a8 cc 52 22 3a 23 d3 34 b6 2a 3d 9e 92 24 35 26 23 a1 e2 93 34 64 ca e8 30 11 92 84 12 33 9c a7 4a b6 e1 3a c3 64 6a 3c 9b 61 25 75 9a c9 90 b1 9c 86 2c 65 28 54 f9 44 85 5a 4b c1 30 d7 4c 24 da 87 be ef f1 4e bf b0 a6 74 63 3b 37 3d 2c 31 d5 02 53 2e a4 96 Data Ascii: o0P+9M-C[j!!>vU^,<e??])#52]ik"[48h,UcU6Y.0\|y!tS?2I6<(dT)ENTR":#4*=$5&#4d03J:dj<a%u,e(TDZK0L$Ntc;7=,1S.
2024-04-24 12:22:43 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:43 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:43 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 36 32 38 31 38 7d 0a Data Ascii: {"BundleTime":1713961362818}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.5	50123	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:43 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift34c7e2242e8a34f6a0937511f14 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:42 GMT server: istio-envoy connection: close
2024-04-24 12:22:43 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.5	50124	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	351	OUT	GET /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:43 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift3f621da4b8e9b485d789b82dc87 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 444 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:42 GMT server: istio-envoy connection: close
2024-04-24 12:22:43 UTC	444	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 69 64 65 6e 74 69 66 79 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/identify</td></tr><tr><th>STATUS:</th><td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.5	50128	216.137.39.17	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:43 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 452 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift3bc46c04233a6691a069122257e cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:43 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 6fb7d4787cc656b14713661951c985de.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: MRl2OjJy5rAeS58xtmN7T7AooCyxVF_61VYFihxi1VUnoIgocYDO4Q==
2024-04-24 12:22:43 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.5	50129	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=2&ClientTime=1713961361177&PageStart=1713961356089&PrevBundleTime=1713961359682&LastActivity=1318&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:43 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:43 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:43 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.5	50130	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=7&ClientTime=1713961361866&PageStart=1713961346738&PrevBundleTime=1713961359852&LastActivity=2949&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:43 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:43 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:43 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.5	50126	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPfiDhCPAWIAAVGA._747cUV2B9rtMigh7-bkZmx-j7rp-CNJywL9Tqj-f2c&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: WgrOagxOVT10JGRUDPFKIg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:43 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:43 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.5	50127	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:43 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drifta4310754c819650d0bed477ec87 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:43 GMT server: istio-envoy connection: close
2024-04-24 12:22:43 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.5	50131	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	351	OUT	GET /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:44 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftb7e8aca434b95349b95c2bce274 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 444 x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:22:43 GMT server: istio-envoy connection: close
2024-04-24 12:22:44 UTC	444	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 69 64 65 6e 74 69 66 79 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/identify</td></tr><tr><th>STATUS:</th><td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.5	50132	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:43 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:44 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift5eac94f4ea8be85616d84445f10 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:43 GMT server: istio-envoy connection: close
2024-04-24 12:22:44 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.5	50133	216.137.39.17	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:44 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:44 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 452 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftd4b23a84a6ea29e5a5fd6be6d73 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:44 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 f03e10929a5a49b0e892d7ac0a147ac8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: i3e89yn8vcFCR8U2DDU4oWGy1SQRY0_d88pT52crYAPYEjrUGpDgkw==
2024-04-24 12:22:44 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.5	50134	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:44 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPziDhCPAWIAAVGA.td7Xsm42_EzvvuMWxFgXD2NWhdeimFFsu_Nz357mBoA&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: 9sx/z8+Xa2qSgdoDPZc/iw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:44 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:44 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.5	50135	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:44 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:44 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift55e755843d9a779b15e1fb2959d cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:44 GMT server: istio-envoy connection: close
2024-04-24 12:22:44 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.5	50136	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:45 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 616 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:45 UTC	616	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 34 34 34 31 34 63 34 39 2d 33 30 30 38 2d 34 36 63 33 2d 62 36 61 32 2d 61 63 61 65 37 36 32 33 63 63 38 32 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 34 37 36 31 36 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 34 66 61 35 66 33 37 64 2d 37 30 63 34 2d 34 65 39 62 2d 62 31 Data Ascii: metric_payload=%7B%22id%22%3A%2244414c49-3008-46c3-b6a2-acae7623cc82%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A47616%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%224fa5f37d-70c4-4e9b-b1
2024-04-24 12:22:45 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:45 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: a5bb53daaa06329a vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 12 server: istio-envoy connection: close
2024-04-24 12:22:45 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.5	50140	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:45 UTC	878	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=3&ClientTime=1713961364881&PageStart=1713961356089&PrevBundleTime=1713961362539&LastActivity=1438&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 485 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:45 UTC	485	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 95 5d 6b db 30 14 86 ff 8a a6 ab 16 4e 6c 7d cb 4a c7 a0 74 65 83 ac 5b 21 19 61 8c 5e f8 43 69 44 1d db b3 9d a4 5b e9 7f af 0a 69 a2 40 bb f6 62 bb 8b 6d 8c 79 79 74 1e 1d 5d f8 dc e1 b1 fd 85 87 1c f0 74 6e 2b ff a1 85 06 7c be ea 3b 3c fc 79 87 47 ae 2a f0 50 fa e8 b4 bd 7e 8c 14 30 aa 99 12 46 68 06 4a 70 43 18 95 20 29 27 52 18 7a 15 96 b9 87 a7 f5 94 90 6d 01 bc 72 9d cb 4a 8b 03 56 c9 1d 9b ec 54 92 80 10 12 8c e0 01 ab e9 8e 0d f6 45 19 e0 a6 76 55 6f db 7a d9 63 a0 34 d1 2c e2 e6 e9 52 12 44 e2 53 43 79 44 b6 a9 d6 9b 48 02 09 1d ec 35 47 69 d3 95 fd bb 45 fe c7 d2 cf 34 10 46 07 e1 41 78 10 1e 84 2f 09 17 f5 b2 b3 af fe 26 ff 85 8c bf 4c f1 2d b5 23 12 61 02 82 3d 47 48 f2 e6 59 b1 c7 ee cd a0 b9 2b 0a 8f 84 68 Data Ascii: ]k0Nl}Jte[!a^CiD[i@bmyyt]tn+\|;<yG*P~0FhJpC )'RzmrJVTEvUozc4,RDSCyDH5GiE4FAx/&L-#a=GHY+h
2024-04-24 12:22:46 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:46 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:46 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 36 35 38 33 33 7d 0a Data Ascii: {"BundleTime":1713961365833}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.5	50141	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:45 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=3&ClientTime=1713961364853&PageStart=1713961356089&PrevBundleTime=1713961362539&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2176 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:45 UTC	2176	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 33 37 34 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 36 2c 32 31 37 32 36 34 39 34 37 32 2c 36 34 33 39 30 32 31 35 2c 35 31 33 30 35 34 39 31 5d 2c 22 57 68 65 6e 22 3a 33 37 34 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 33 37 36 35 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 36 35 30 2c 34 34 35 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 33 37 37 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 31 31 38 37 32 2e 33 39 39 39 39 39 39 39 39 39 36 35 2c 34 38 2c 31 31 39 31 33 2e 30 39 39 39 39 39 39 39 39 39 37 Data Ascii: {"Seq":3,"When":3747,"Evts":[{"Kind":57,"Args":[6,2172649472,64390215,51305491],"When":3747},{"Kind":100,"Args":["visible"],"When":3765},{"Kind":8,"Args":[650,445,943],"When":3771},{"Kind":57,"Args":[12,"pointerout",11872.399999999965,48,11913.09999999997
2024-04-24 12:22:46 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:46 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.5	50142	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:45 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=4&ClientTime=1713961364854&PageStart=1713961356089&PrevBundleTime=1713961362539&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 3159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:45 UTC	3159	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 33 38 37 34 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 33 38 37 34 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 31 31 39 36 34 2e 32 39 39 39 39 39 39 39 39 39 38 38 2c 35 36 2c 31 32 30 32 31 2e 33 39 39 39 39 39 39 39 39 39 36 35 2c 31 32 30 32 31 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 30 5d 2c 22 57 68 65 6e 22 3a 33 38 38 30 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 31 31 39 36 34 2e 32 39 39 39 39 39 39 39 39 39 38 38 2c 35 36 2c 31 32 30 32 31 2e 35 39 39 39 39 39 Data Ascii: {"Seq":4,"When":3874,"Evts":[{"Kind":100,"Args":["visible"],"When":3874},{"Kind":57,"Args":[12,"pointerout",11964.299999999988,56,12021.399999999965,12021.599999999977,0],"When":3880},{"Kind":57,"Args":[12,"pointerleave",11964.299999999988,56,12021.599999
2024-04-24 12:22:46 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:46 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.5	50143	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:45 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=5&ClientTime=1713961364880&PageStart=1713961356089&PrevBundleTime=1713961362539&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1110 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:45 UTC	1110	OUT	Data Raw: 7b 22 53 65 71 22 3a 35 2c 22 57 68 65 6e 22 3a 37 32 37 38 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 32 2c 22 68 74 74 70 73 3a 2f 2f 72 73 2e 66 75 6c 6c 73 74 6f 72 79 2e 63 6f 6d 2f 72 65 63 2f 62 75 6e 64 6c 65 2f 76 32 3f 4f 72 67 49 64 3d 31 32 42 50 34 45 26 55 73 65 72 49 64 3d 32 66 62 32 31 65 36 65 2d 35 62 37 30 2d 34 33 37 62 2d 38 36 62 32 2d 36 64 32 38 62 30 33 37 63 62 32 36 26 53 65 73 73 69 6f 6e 49 64 3d 62 32 61 62 65 65 63 32 2d 38 35 66 62 2d 34 38 65 39 2d 61 36 37 32 2d 37 31 34 31 64 62 38 37 32 66 62 32 26 50 61 67 65 49 64 3d 37 66 66 31 61 65 30 34 2d 37 38 36 30 2d 34 64 62 37 2d 38 31 62 62 2d 37 64 39 65 32 34 35 66 66 61 35 38 26 53 65 71 3d 32 26 43 6c 69 65 6e 74 54 69 6d 65 3d Data Ascii: {"Seq":5,"When":7278,"Evts":[{"Kind":57,"Args":[2,"https://rs.fullstory.com/rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=2&ClientTime=
2024-04-24 12:22:46 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:46 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.5	50144	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:45 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPfiDhCPAWIAAVGA._747cUV2B9rtMigh7-bkZmx-j7rp-CNJywL9Tqj-f2c&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: /wxqE1xNhQMYRo3PLHrT0A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:46 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:46 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.5	50145	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:46 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 616 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:46 UTC	616	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 65 38 65 31 63 65 38 2d 34 34 35 61 2d 34 36 32 61 2d 38 34 34 35 2d 36 61 38 36 33 31 35 32 37 32 66 61 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 34 37 36 31 36 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 62 65 65 66 61 30 39 62 2d 66 38 36 38 2d 34 36 38 62 2d 61 35 Data Ascii: metric_payload=%7B%22id%22%3A%223e8e1ce8-445a-462a-8445-6a86315272fa%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A47616%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%22beefa09b-f868-468b-a5
2024-04-24 12:22:46 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:46 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: ef52e286edd98488 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 12 server: istio-envoy connection: close
2024-04-24 12:22:46 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.5	50147	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:46 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=3&ClientTime=1713961364881&PageStart=1713961356089&PrevBundleTime=1713961362539&LastActivity=1438&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:46 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:46 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:46 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.5	50146	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:46 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:46 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftd0a4bfd490da4f7890eb6df647a cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:46 GMT server: istio-envoy connection: close
2024-04-24 12:22:46 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.5	50148	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:46 UTC	1368	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=lfPdMw05TS1QTnyEaKtDBA&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:47 UTC	246	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 12:22:47 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.5	50149	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:47 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPziDhCPAWIAAVGA.td7Xsm42_EzvvuMWxFgXD2NWhdeimFFsu_Nz357mBoA&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: XiQlbPdOTcg/mJ5Dp3H2dw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:47 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:47 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.5	50154	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	896	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=8&ClientTime=1713961366801&PageStart=1713961346738&PrevBundleTime=1713961362818&LastActivity=7885&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 445 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:48 UTC	445	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 95 5d 6b db 30 14 86 ff 8a a6 ab 16 ce e4 23 cb 96 ac 74 1b 94 ae 6c 90 76 1b 24 23 8c 92 0b d7 56 6b 51 c5 f6 fc 91 6c 2b fd ef 53 d8 ea 24 2b 34 bd db 4d 64 23 cc eb 47 7a 8e 7c e1 73 4f 27 e6 3b 1d 25 40 67 85 29 e9 88 47 4a 29 a0 e7 cb ae a5 a3 ab 7b 3a b6 65 ee 53 44 a0 a7 cd ed 3a a3 4b db da 6b 67 e8 7c 67 cd 03 3c c2 49 32 b0 a1 46 09 74 3d 5f b5 4d f6 b6 e8 ba ba 1d 05 c1 6a b5 62 79 95 f5 ad bd 2d 59 56 2d 82 ba b1 cb 34 fb 39 a7 20 77 76 d5 9b 5d 63 35 ec ca 43 a0 75 65 cb ce 34 55 df 51 10 3c 0e 23 16 ea 61 80 8c d6 61 a2 19 0e 99 3f d5 9f 28 c4 c7 c1 01 b7 6d 1a f7 d9 9c 49 97 e6 59 df 76 f8 34 39 e8 0e ba 83 ee a0 fb 3f ba 45 d5 b7 66 df 0f f3 a9 4a 0c 81 8c 5f e6 12 cf 60 62 c0 b6 90 44 8b 0d b2 d3 6b 0a 9b Data Ascii: ]k0#tlv$#VkQl+S$+4Md#Gz\|sO';%@g)GJ){:eSD:Kkg\|g<I2Ft=_Mjby-YV-49 wv]c5Cue4UQ<#aa?(mIYv49?EfJ_`bDk
2024-04-24 12:22:48 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:48 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:48 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 36 38 31 33 30 7d 0a Data Ascii: {"BundleTime":1713961368130}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.5	50153	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=4&ClientTime=1713961366792&PageStart=1713961356089&PrevBundleTime=1713961365833&LastActivity=3383&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1048 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:48 UTC	1048	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 56 6d 6f db 36 10 fe 2b 9a 80 10 2d 20 c9 24 45 91 54 3a ad 88 63 37 db d2 b4 59 ed 22 e8 86 22 a0 24 5a 61 2b 4b 8e 28 2b 2f 6d ff fb 4e 8e e3 38 69 b7 f6 c3 3e ec 43 44 e1 48 9d 9f bb d3 dd 3d 22 fd c9 9d e8 73 77 97 79 ee c9 99 ae dc dd 50 0a 58 8f bb d6 ba bb 7f 7d 72 0f 4d 95 bb bb 04 63 cf dd 6b 8a 5e e7 76 c6 9a b4 d4 ee fb 6d 93 2f de 2d 36 12 1b 28 a1 9e bb a8 4d d5 ea a6 5e b6 ae 47 48 cc 59 40 e3 db 4b 4a 2f e2 1e a1 98 92 20 dc 68 79 b4 56 45 1b 95 10 1e de 0a 27 f1 f7 c2 95 5a 75 fa df 03 de f3 fe 18 f0 31 e0 63 c0 c7 80 5f 05 24 ff 9f 80 f3 7a 69 f5 77 f7 d1 ff 22 58 f8 8f 28 26 ef ce 81 ac ae 6c 0d e7 80 e7 96 75 01 72 34 39 1d bd 99 7e 7e 33 9e 7c 1e 03 76 e3 81 71 1c 7d 33 0e e4 74 d6 b6 0b bb 3b 18 34 36 Data Ascii: Vmo6+- $ET:c7Y""$Za+K(+/mN8i>CDH="swyPX}rMck^vm/-6(M^GHY@KJ/ hyVE'Zu1c_$ziw"X(&lur49~~3\|vq}3t;46
2024-04-24 12:22:48 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:48 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:48 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 36 38 31 33 34 7d 0a Data Ascii: {"BundleTime":1713961368134}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.5	50152	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:48 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift6eb74b54a32aad1b15110ab441b cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:47 GMT server: istio-envoy connection: close
2024-04-24 12:22:48 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.5	50161	35.81.127.23	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	552	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:48 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:48 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-24 12:22:48 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.5	50164	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	642	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=8&ClientTime=1713961366801&PageStart=1713961346738&PrevBundleTime=1713961362818&LastActivity=7885&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:49 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:49 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:49 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.5	50165	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=4&ClientTime=1713961366792&PageStart=1713961356089&PrevBundleTime=1713961365833&LastActivity=3383&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:49 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:49 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:49 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.5	50162	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 322 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:48 UTC	322	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 31 32 31 32 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 25 32 30 31 32 30 30 30 25 32 32 25 37 44 Data Ascii: metrics=%5B%7B%22value%22%3A1212%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C%2012000%22%7D
2024-04-24 12:22:49 UTC	690	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:49 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 763d7fb244cb3573 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-04-24 12:22:49 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.5	50163	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:48 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 322 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:48 UTC	322	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 31 32 31 31 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 25 32 30 31 32 30 30 30 25 32 32 25 37 44 Data Ascii: metrics=%5B%7B%22value%22%3A1211%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C%2012000%22%7D
2024-04-24 12:22:49 UTC	690	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:49 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 27c8f257fc823a9b vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 0 server: istio-envoy connection: close
2024-04-24 12:22:49 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.5	50172	172.64.155.119	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:49 UTC	599	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:49 UTC	370	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:49 GMT Content-Type: application/json Content-Length: 67 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87960fa1091d0acd-LAS
2024-04-24 12:22:49 UTC	67	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NV","stateName":"Nevada","continent":"NA"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.5	50173	34.111.140.246	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:49 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1231 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:49 UTC	1231	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 38 33 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 39 36 31 33 32 39 38 32 39 72 30 2e 33 31 31 38 32 34 36 38 36 36 32 32 38 31 34 35 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7283","visitors":[{"visitor_id":"oeu1713961329829r0.3118246866228145","session_id":"AUTO","at
2024-04-24 12:22:49 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Wed, 24 Apr 2024 12:22:49 GMT server: istio-envoy x-envoy-upstream-service-time: 2 x-request-id: a5bc5595-3400-4e5a-8564-0bfcfcdcd2e3 x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.5	50174	35.81.127.23	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:49 UTC	1299	OUT	GET /country HTTP/1.1 Host: geo.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145; ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; _gcl_au=1.1.568102465.1713961340; _gid=GA1.2.1110259529.1713961342; _gat_UA-39550292-1=1; _fbp=fb.1.1713961347300.1908196306; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Apr+24+2024+14%3A22%3A33+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5dc11bb1-6915-42b6-9ade-2b46c2902488&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _uetsid=4f1c1f60023511efa8016792c6257a6f; _uetvid=4f1c74c0023511ef89da2f89b718d7a1; _ga=GA1.2.866850028.1713961341; _ga_1TZ7S9D6BQ=GS1.1.1713961341.1.1.1713961355.46.0.0; fs_lua=1.1713961356086; fs_uid=#12BP4E#2fb21e6e-5b70-437b-86b2-6d28b037cb26:b2abeec2-85fb-48e9-a672-7141db872fb2:1713961346731::2#/1745497348
2024-04-24 12:22:49 UTC	253	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:49 GMT Content-Type: application/json Content-Length: 16 Connection: close Server: DS-Carmen Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET, OPTIONS Access-Control-Max-Age: 86400
2024-04-24 12:22:49 UTC	16	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"country":"US"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.5	50175	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:49 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPfiDhCPAWIAAVGA._747cUV2B9rtMigh7-bkZmx-j7rp-CNJywL9Tqj-f2c&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: cAituJ4dFJgRs8LBsQY5Og== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:50 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:50 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.5	50176	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift7c43760434aa6a84f0c3f80dbf6 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:22:49 GMT server: istio-envoy connection: close
2024-04-24 12:22:50 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.5	50177	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	501	OUT	OPTIONS /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	377	IN	HTTP/1.1 200 OK access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 1209600 access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:49 GMT server: istio-envoy connection: close transfer-encoding: chunked
2024-04-24 12:22:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.5	50179	104.18.32.137	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	249	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:50 GMT Content-Type: text/javascript Content-Length: 78 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87960fa56f1f09fd-LAS
2024-04-24 12:22:50 UTC	78	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NV","stateName":"Nevada","continent":"NA"});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.5	50181	142.250.141.103	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	848	OUT	POST /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=732472092.1713961369&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	837	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:50 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' Location: https://googleads.g.doubleclick.net/pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=732472092.1713961369&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:50 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.5	50182	146.75.92.157	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	629	OUT	GET /uwt.js HTTP/1.1 Host: static.ads-twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "bbbcf811d8437a575d796a4c1e5d4fad" If-Modified-Since: Thu, 04 Apr 2024 00:26:35 GMT
2024-04-24 12:22:50 UTC	339	IN	HTTP/1.1 304 Not Modified Connection: close Date: Wed, 24 Apr 2024 12:22:50 GMT Cache-Control: no-cache ETag: "bbbcf811d8437a575d796a4c1e5d4fad" X-Served-By: cache-bur-kbur8200117-BUR X-Cache: HIT Vary: Accept-Encoding,Host P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT" x-tw-cdn: FT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.5	50178	192.29.14.118	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	1741	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=356&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=D32BF32183754911A4896AC2751429EC HTTP/1.1 Host: track.docusign.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145; ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; _gcl_au=1.1.568102465.1713961340; _gid=GA1.2.1110259529.1713961342; _gat_UA-39550292-1=1; _fbp=fb.1.1713961347300.1908196306; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Apr+24+2024+14%3A22%3A33+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5dc11bb1-6915-42b6-9ade-2b46c2902488&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _uetsid=4f1c1f60023511efa8016792c6257a6f; _uetvid=4f1c74c0023511ef89da2f89b718d7a1; _ga=GA1.2.866850028.1713961341; _ga_1TZ7S9D6BQ=GS1.1.1713961341.1.1.1713961355.46.0.0; fs_lua=1.1713961356086; fs_uid=#12BP4E#2fb21e6e-5b70-437b-86b2-6d28b037cb26:b2abeec2-85fb-48e9-a672-7141db872fb2:1713961346731::2#/1745497348
2024-04-24 12:22:50 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:50 GMT Connection: close Content-Length: 49
2024-04-24 12:22:50 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.5	50180	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	1224	OUT	GET /events.js HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:50 UTC	192	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:50 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=5
2024-04-24 12:22:50 UTC	8001	IN	Data Raw: 31 66 33 39 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 77 29 20 7b 0a 20 20 2f 2f 20 42 65 67 69 6e 20 64 6f 63 0a 0a 20 20 76 61 72 20 69 73 5f 64 65 76 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 66 61 6c 73 65 20 29 20 7b 0a 20 20 20 20 69 73 5f 64 65 76 20 3d 20 74 72 75 65 3b 0a 20 20 7d 0a 0a 20 20 76 61 72 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 66 61 6c 73 65 3b 0a 0a 20 20 69 66 20 28 20 74 72 75 65 20 29 20 7b 0a 20 20 20 20 64 69 73 61 62 6c 65 5f 73 79 6e 63 20 3d 20 74 72 75 65 0a 20 20 7d 0a 0a 20 20 76 61 72 20 74 69 70 20 3d 20 22 50 75 73 35 55 45 47 54 58 53 48 54 47 67 53 31 39 33 38 78 6c 6d 36 63 44 6f 2d 33 74 37 6f 6c 33 65 34 4b 54 37 2d 4c 67 69 6b 22 0a 20 20 0a 20 20 76 61 72 20 75 73 65 72 49 64 43 6f 6f 6b 69 65 Data Ascii: 1f39(function (w) { // Begin doc var is_dev = false; if ( false ) { is_dev = true; } var disable_sync = false; if ( true ) { disable_sync = true } var tip = "Pus5UEGTXSHTGgS1938xlm6cDo-3t7ol3e4KT7-Lgik" var userIdCookie
2024-04-24 12:22:50 UTC	10005	IN	Data Raw: 32 37 30 64 0d 0a 61 72 20 6f 3d 21 31 2c 74 3d 30 3b 74 3c 73 61 43 6f 6f 6b 69 65 73 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 74 72 79 7b 72 65 73 2b 3d 22 26 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 73 61 43 6f 6f 6b 69 65 73 5b 74 5d 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 43 6f 6f 6b 69 65 73 2e 67 65 74 28 73 61 43 6f 6f 6b 69 65 73 5b 74 5d 29 29 7d 63 61 74 63 68 28 65 29 7b 63 6f 6e 74 69 6e 75 65 7d 6f 3d 21 30 7d 72 65 74 75 72 6e 5b 72 65 73 2c 6f 5d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 74 43 61 6d 70 61 69 67 6e 4c 6f 63 61 6c 53 74 6f 72 61 67 65 28 29 7b 76 61 72 20 65 3d 7b 63 61 6d 70 56 61 6c 75 65 3a 63 61 6d 70 43 6f 6f 6b 69 65 56 61 6c 75 65 2c 74 74 6c 3a 4d 61 74 68 2e 66 6c 6f Data Ascii: 270dar o=!1,t=0;t<saCookies.length;t++){try{res+="&"+encodeURIComponent(saCookies[t])+"="+encodeURIComponent(Cookies.get(saCookies[t]))}catch(e){continue}o=!0}return[res,o]}function setCampaignLocalStorage(){var e={campValue:campCookieValue,ttl:Math.flo
2024-04-24 12:22:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.5	50187	18.154.144.129	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	818	OUT	POST /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive Content-Length: 63 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961356\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:50 UTC	63	OUT	Data Raw: 7b 22 73 72 63 22 3a 22 74 61 67 22 2c 22 61 75 74 68 22 3a 22 45 69 34 63 75 6b 57 6d 51 4d 61 33 6f 62 44 6c 41 4d 70 49 79 66 31 65 34 68 66 4a 70 64 31 35 62 44 54 73 66 4a 32 51 22 7d Data Ascii: {"src":"tag","auth":"Ei4cukWmQMa3obDlAMpIyf1e4hfJpd15bDTsfJ2Q"}
2024-04-24 12:22:50 UTC	957	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 457 Connection: close Date: Wed, 24 Apr 2024 12:22:50 GMT Server: nginx Access-Control-Allow-Origin: https://www.docusign.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Expose-Headers: x-amz-cf-id Access-Control-Max-Age: 7200 Access-Control-Allow-Credentials: true Api-Version: v2 Access-Control-Allow-Headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type Identification-Source: CENTRAL Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Tue, 23 Apr 2024 12:22:50 GMT Vary: Accept-Encoding, Origin Request-ID: ac3bbd01-d3af-493e-a609-3baee3a86f4c X-Cache: Miss from cloudfront Via: 1.1 f3219597d17b6efcbda39f405ca2692a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: GwBcVh4flXzShN5qwyywan9qZO3cAuo32c_FMePxFaw0y7QsPMDqkw==
2024-04-24 12:22:50 UTC	457	IN	Data Raw: 7b 22 72 65 67 69 73 74 72 79 5f 63 6f 6d 70 61 6e 79 5f 6e 61 6d 65 22 3a 22 43 4f 47 45 4e 54 2d 31 37 34 22 2c 22 72 65 67 69 73 74 72 79 5f 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 72 65 67 69 73 74 72 79 5f 73 74 61 74 65 22 3a 22 4e 56 22 2c 22 72 65 67 69 6f 6e 5f 6e 61 6d 65 22 3a 22 4e 65 76 61 64 61 22 2c 22 72 65 67 69 73 74 72 79 5f 7a 69 70 5f 63 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 72 65 67 69 73 74 72 79 5f 61 72 65 61 5f 63 6f 64 65 22 3a 6e 75 6c 6c 2c 22 72 65 67 69 73 74 72 79 5f 64 6d 61 5f 63 6f 64 65 22 3a 38 33 39 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 72 65 67 69 73 74 72 79 5f 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 Data Ascii: {"registry_company_name":"COGENT-174","registry_city":"Las Vegas","registry_state":"NV","region_name":"Nevada","registry_zip_code":"89101","registry_area_code":null,"registry_dma_code":839,"registry_country":"United States","registry_country_code":"US","r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.5	50186	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	840	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=3&ClientTime=1713961369665&PageStart=1713961356089&PrevBundleTime=1713961362539 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 2176 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	2176	OUT	Data Raw: 7b 22 53 65 71 22 3a 33 2c 22 57 68 65 6e 22 3a 33 37 34 37 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 36 2c 32 31 37 32 36 34 39 34 37 32 2c 36 34 33 39 30 32 31 35 2c 35 31 33 30 35 34 39 31 5d 2c 22 57 68 65 6e 22 3a 33 37 34 37 7d 2c 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 33 37 36 35 7d 2c 7b 22 4b 69 6e 64 22 3a 38 2c 22 41 72 67 73 22 3a 5b 36 35 30 2c 34 34 35 2c 39 34 33 5d 2c 22 57 68 65 6e 22 3a 33 37 37 31 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 31 31 38 37 32 2e 33 39 39 39 39 39 39 39 39 39 36 35 2c 34 38 2c 31 31 39 31 33 2e 30 39 39 39 39 39 39 39 39 39 37 Data Ascii: {"Seq":3,"When":3747,"Evts":[{"Kind":57,"Args":[6,2172649472,64390215,51305491],"When":3747},{"Kind":100,"Args":["visible"],"When":3765},{"Kind":8,"Args":[650,445,943],"When":3771},{"Kind":57,"Args":[12,"pointerout",11872.399999999965,48,11913.09999999997
2024-04-24 12:22:50 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:50 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:50 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 30 36 31 35 7d 0a Data Ascii: {"BundleTime":1713961370615}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.5	50188	34.96.71.22	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	806	OUT	GET /s/sync?exc=lr HTTP/1.1 Host: s.company-target.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961356\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:50 UTC	510	IN	HTTP/1.1 200 OK Access-Control-Allow-Methods: GET,OPTIONS Content-Type: text/html; charset=UTF-8 Set-Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Set-Cookie: tuuid_lu=1713961370\|ix:0\|mctv:0\|rp:0; Path=/; Domain=company-target.com; Max-Age=63072000; Secure; SameSite=None Date: Wed, 24 Apr 2024 12:22:50 GMT Content-Length: 74 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:50 UTC	74	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 69 78 65 6c 73 3c 2f 74 69 74 6c 65 3e 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 0a 09 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head><title>Pixels</title></head><body></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.5	50189	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	602	OUT	POST /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 413 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	413	OUT	Data Raw: 7b 22 4f 72 67 49 64 22 3a 22 31 32 42 50 34 45 22 2c 22 55 73 65 72 49 64 22 3a 22 32 66 62 32 31 65 36 65 2d 35 62 37 30 2d 34 33 37 62 2d 38 36 62 32 2d 36 64 32 38 62 30 33 37 63 62 32 36 22 2c 22 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 42 61 73 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 2f 70 72 69 76 61 63 79 22 2c 22 57 69 64 74 68 22 3a 31 32 36 33 2c 22 48 65 69 67 68 74 22 3a 39 30 37 2c 22 53 63 72 65 65 6e 57 69 64 74 68 22 3a 31 32 38 30 2c 22 53 63 72 65 65 6e 48 65 69 67 68 74 22 3a 31 30 32 34 2c 22 53 6e 69 70 70 65 74 56 65 72 73 69 6f 6e 22 3a 22 31 2e 33 2e 30 22 2c 22 52 65 66 65 72 72 65 72 22 3a 22 22 2c 22 50 Data Ascii: {"OrgId":"12BP4E","UserId":"2fb21e6e-5b70-437b-86b2-6d28b037cb26","Url":"https://www.docusign.com/privacy","Base":"https://www.docusign.com/privacy","Width":1263,"Height":907,"ScreenWidth":1280,"ScreenHeight":1024,"SnippetVersion":"1.3.0","Referrer":"","P
2024-04-24 12:22:50 UTC	319	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:50 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-24 12:22:50 UTC	1255	IN	Data Raw: 66 31 38 0d 0a 7b 22 43 6f 6e 73 65 6e 74 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 44 6f 6d 61 69 6e 22 3a 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 45 6c 65 6d 65 6e 74 42 6c 6f 63 6b 73 22 3a 5b 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 69 6e 70 75 74 5b 74 79 70 65 3d 68 69 64 64 65 6e 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 6c 65 63 74 6f 72 22 3a 22 5b 61 75 74 6f 63 6f 6d 70 6c 65 74 65 5e 3d 63 63 2d 5d 22 2c 22 43 6f 6e 73 65 6e 74 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 31 7d 2c 7b 22 53 65 Data Ascii: f18{"Consented":false,"CookieDomain":"docusign.com","ElementBlocks":[{"Selector":"input[type=password]","Consent":false,"Type":1},{"Selector":"input[type=hidden]","Consent":false,"Type":1},{"Selector":"[autocomplete^=cc-]","Consent":false,"Type":1},{"Se
2024-04-24 12:22:50 UTC	1255	IN	Data Raw: 65 5c 22 5d 5b 74 79 70 65 3d 5c 22 74 65 78 74 5c 22 5d 22 7d 5d 2c 22 55 72 6c 4b 65 65 70 73 22 3a 6e 75 6c 6c 2c 22 44 77 65 6c 6c 54 69 6d 65 22 3a 31 2c 22 41 6a 61 78 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 50 72 69 76 61 63 79 48 61 73 68 22 3a 22 22 2c 22 55 73 65 72 55 55 49 44 22 3a 22 22 2c 22 55 73 65 72 49 6e 74 49 64 22 3a 22 30 22 2c 22 53 65 73 73 69 6f 6e 49 6e 74 49 64 22 3a 22 30 22 2c 22 50 61 67 65 49 6e 74 49 64 22 3a 22 30 22 2c 22 45 6d 62 65 64 54 6f 6b 65 6e 22 3a 22 22 2c 22 50 61 67 65 53 74 61 72 74 22 3a 31 37 31 33 39 36 31 33 37 30 38 33 34 2c 22 49 73 4e 65 77 53 65 73 73 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 46 6c 61 67 73 22 3a 7b 22 41 6a 61 78 46 65 74 63 68 22 3a 74 72 75 65 2c 22 43 61 70 74 75 72 65 41 6e 69 6d 61 74 Data Ascii: e\"][type=\"text\"]"}],"UrlKeeps":null,"DwellTime":1,"AjaxWatches":[],"PrivacyHash":"","UserUUID":"","UserIntId":"0","SessionIntId":"0","PageIntId":"0","EmbedToken":"","PageStart":1713961370834,"IsNewSession":false,"Flags":{"AjaxFetch":true,"CaptureAnimat
2024-04-24 12:22:50 UTC	1255	IN	Data Raw: 61 72 67 65 74 22 3a 31 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 76 61 6c 75 65 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 63 68 65 63 6b 65 64 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 64 61 74 61 22 2c 22 41 63 74 69 6f 6e 22 3a 30 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 61 6c 74 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 22 3a 32 2c 22 54 61 67 22 3a 22 2a 22 2c 22 4e 61 6d 65 22 3a 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 2c 22 41 63 74 69 6f 6e 22 3a 31 7d 2c 7b 22 54 61 72 67 65 74 Data Ascii: arget":1,"Tag":"","Name":"value","Action":0},{"Target":2,"Tag":"","Name":"checked","Action":0},{"Target":2,"Tag":"","Name":"data","Action":0},{"Target":2,"Tag":"","Name":"alt","Action":1},{"Target":2,"Tag":"*","Name":"placeholder","Action":1},{"Target
2024-04-24 12:22:50 UTC	106	IN	Data Raw: 6c 2d 65 78 70 6f 73 65 2d 68 65 61 64 65 72 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 22 2c 22 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 22 0d 0a Data Ascii: l-expose-headers","access-control-max-age","access-control-allow-methods","access-control-allow-headers"
2024-04-24 12:22:50 UTC	1255	IN	Data Raw: 35 64 33 0d 0a 2c 22 61 63 63 65 70 74 2d 70 61 74 63 68 22 2c 22 61 63 63 65 70 74 2d 72 61 6e 67 65 73 22 2c 22 61 67 65 22 2c 22 61 6c 6c 6f 77 22 2c 22 61 6c 74 2d 73 76 63 22 2c 22 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 22 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 64 69 73 70 6f 73 69 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 65 6e 63 6f 64 69 6e 67 22 2c 22 63 6f 6e 74 65 6e 74 2d 6c 61 6e 67 75 61 67 65 22 2c 22 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 22 2c 22 63 6f 6e 74 65 6e 74 2d 6c 6f 63 61 74 69 6f 6e 22 2c 22 63 6f 6e 74 65 6e 74 2d 6d 64 35 22 2c 22 63 6f 6e 74 65 6e 74 2d 72 61 6e 67 65 22 2c 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 2c 22 64 61 74 65 22 2c 22 64 65 6c 74 61 2d 62 61 73 65 22 2c 22 65 74 61 Data Ascii: 5d3,"accept-patch","accept-ranges","age","allow","alt-svc","cache-control","connection","content-disposition","content-encoding","content-language","content-length","content-location","content-md5","content-range","content-type","date","delta-base","eta
2024-04-24 12:22:50 UTC	248	IN	Data Raw: 69 67 6e 61 6c 73 22 3a 5b 32 2c 31 5d 7d 5d 7d 2c 22 47 43 4c 42 53 75 62 64 6f 6d 61 69 6e 22 3a 22 72 73 22 2c 22 42 6c 6f 63 6b 73 22 3a 5b 5d 2c 22 57 61 74 63 68 65 73 22 3a 5b 5d 2c 22 41 6a 61 78 46 65 74 63 68 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 41 6a 61 78 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6e 73 6f 6c 65 57 61 74 63 68 65 72 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 47 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 52 65 73 6f 75 72 63 65 55 70 6c 6f 61 64 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 57 68 69 74 65 6c 69 73 74 45 6c 65 6d 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 7d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: ignals":[2,1]}]},"GCLBSubdomain":"rs","Blocks":[],"Watches":[],"AjaxFetchEnabled":true,"AjaxWatcherEnabled":false,"ConsoleWatcherEnabled":true,"GetCurrentSessionEnabled":true,"ResourceUploadingEnabled":false,"WhitelistElementsEnabled":true}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.5	50183	68.67.153.60	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	650	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: s.ml-attr.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	272	IN	HTTP/1.1 302 Moved Temporarily Server: nginx/1.25.1 Date: Wed, 24 Apr 2024 12:22:50 GMT Content-Type: text/html Content-Length: 145 Connection: close Location: https://secure.adnxs.com/getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID
2024-04-24 12:22:50 UTC	145	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 31 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>nginx/1.25.1</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.5	50191	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPziDhCPAWIAAVGA.td7Xsm42_EzvvuMWxFgXD2NWhdeimFFsu_Nz357mBoA&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: g8FVKaIibr3i0PLfdAfN1A== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:51 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:51 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.5	50192	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift1583b3543259d1516f90af49ba6 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:50 GMT server: istio-envoy connection: close
2024-04-24 12:22:51 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.5	50190	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	501	OUT	OPTIONS /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: https://js.driftt.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	377	IN	HTTP/1.1 200 OK access-control-allow-methods: POST access-control-allow-headers: content-type access-control-max-age: 1209600 access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:50 GMT server: istio-envoy connection: close transfer-encoding: chunked
2024-04-24 12:22:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.5	50193	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:50 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 658 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:50 UTC	658	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 33 36 33 34 39 35 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713961363495,"level":"INFO","message":"WS Reconnec
2024-04-24 12:22:51 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Wed, 24 Apr 2024 12:22:51 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.5	50196	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	1009	OUT	GET /drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646 If-None-Match: "493647a445d610f59f14e994de89111a-ssl"
2024-04-24 12:22:51 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:51 GMT Etag: "493647a445d610f59f14e994de89111a-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y1RJT7WCGJXJXNN0J50D Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.5	50197	142.251.2.156	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	885	OUT	GET /pagead/landing?gcs=G111&gcd=13v3v3v3v5&rnd=732472092.1713961369&url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&dma=0&npa=0&gtm=45He44m0n81NXX2M47v856130670za200&auid=568102465.1713961340 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUl2SPZDBfASCXUq5mby4G3fL8x62fofR6xWRgyLm_F8xswM2pgOmsP8TyG1
2024-04-24 12:22:51 UTC	652	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:51 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:51 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.5	50203	104.254.151.60	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	839	OUT	GET /getuid?https%3a%2f%2fattr.ml-api.io%2f%3fdomain%3ddocusign.com%26pId%3d%24UID HTTP/1.1 Host: secure.adnxs.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XANDR_PANID=8ADLn8EGw6GW4D1S0bAIQNfUY5ardES5dFOHze22sbnKQUwRzaiHDBhnoavoBaSrCMrAwilfnx79BSmAd0CkVePg1I20G1YF7Cc4xbpZjDk.; receive-cookie-deprecation=1; uuid2=402488676481365330
2024-04-24 12:22:51 UTC	1432	IN	HTTP/1.1 302 Found Server: nginx/1.23.4 Date: Wed, 24 Apr 2024 12:22:51 GMT Content-Type: text/html; charset=utf-8 Content-Length: 0 Connection: close Cache-Control: no-store, no-cache, private Pragma: no-cache Expires: Sat, 15 Nov 2008 16:00:00 GMT P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE" X-XSS-Protection: 0 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Full-Version-List,Sec-CH-UA-Arch,Sec-CH-UA-Model,Sec-CH-UA-Platform-Version,Sec-CH-UA-Bitness Location: https://attr.ml-api.io/?domain=docusign.com&pId=402488676481365330 AN-X-Request-Uuid: 831dc964-dc2b-443d-9162-20589707c324 Set-Cookie: XANDR_PANID=8ADLn8EGw6GW4D1S0bAIQNfUY5ardES5dFOHze22sbnKQUwRzaiHDBhnoavoBaSrCMrAwilfnx79BSmAd0CkVePg1I20G1YF7Cc4xbpZjDk.; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:51 GMT; Domain=.adnxs.com; Secure; Partitioned Set-Cookie: receive-cookie-deprecation=1; SameSite=None; Path=/; Max-Age=314496000; Expires=Wed, 12-Apr-2034 12:22:51 GMT; Domain=.adnxs.com; Secure; HttpOnly; Partitioned Set-Cookie: uuid2=402488676481365330; SameSite=None; Path=/; Max-Age=7776000; Expires=Tue, 23-Jul-2024 12:22:51 GMT; Domain=.adnxs.com; Secure; HttpOnly X-Proxy-Origin: 154.16.105.36; 154.16.105.36; 899.bm-nginx-loadbalancer.mgmt.lax1.adnexus.net; adnxs.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.5	50198	18.239.199.124	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	643	OUT	GET /bg9s?x-amz-cf-id=GwBcVh4flXzShN5qwyywan9qZO3cAuo32c_FMePxFaw0y7QsPMDqkw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	602	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 feca0fb83230a477d3d173edd899e5f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: Fwsl22CLziFxbE-GloO2bpUiDWevLlX0yz2Ozf5SN9CiHhSXr4kbUw== Age: 13156 Access-Control-Allow-Origin: *

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.5	50201	18.154.144.27	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	551	OUT	GET /api/v2/ip.json?referrer=&page=https%3A%2F%2Fwww.docusign.com%2Fprivacy&page_title=Privacy%20Notice%20%7C%20DocuSign HTTP/1.1 Host: api.company-target.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: tuuid=1a03fa25-3ce4-4427-a18e-6e0714981f28; tuuid_lu=1713961356\|ix:0\|mctv:0\|rp:0
2024-04-24 12:22:51 UTC	492	IN	HTTP/1.1 401 Unauthorized Content-Type: text/plain;charset=utf-8 Content-Length: 12 Connection: close Date: Wed, 24 Apr 2024 12:22:51 GMT Server: nginx WWW-Authenticate: DemandBase API v2 X-Content-Type-Options: nosniff Request-ID: 2e524ece-47a0-43d5-a8d9-a522e8d1febc Vary: Origin X-Cache: Error from cloudfront Via: 1.1 358c6b4652ba761f933c81ae3644fa6a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P4 X-Amz-Cf-Id: WgKFGtT5TTVhJTOlYxlZ-gJog3FlT2M0KfBez6ywBslqsFXqV_YQxQ==
2024-04-24 12:22:51 UTC	12	IN	Data Raw: 55 6e 61 75 74 68 6f 72 69 7a 65 64 Data Ascii: Unauthorized

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.5	50204	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	840	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=4&ClientTime=1713961370448&PageStart=1713961356089&PrevBundleTime=1713961370615 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 3159 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	3159	OUT	Data Raw: 7b 22 53 65 71 22 3a 34 2c 22 57 68 65 6e 22 3a 33 38 37 34 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 31 30 30 2c 22 41 72 67 73 22 3a 5b 22 76 69 73 69 62 6c 65 22 5d 2c 22 57 68 65 6e 22 3a 33 38 37 34 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 31 31 39 36 34 2e 32 39 39 39 39 39 39 39 39 39 38 38 2c 35 36 2c 31 32 30 32 31 2e 33 39 39 39 39 39 39 39 39 39 36 35 2c 31 32 30 32 31 2e 35 39 39 39 39 39 39 39 39 39 37 37 2c 30 5d 2c 22 57 68 65 6e 22 3a 33 38 38 30 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 31 31 39 36 34 2e 32 39 39 39 39 39 39 39 39 39 38 38 2c 35 36 2c 31 32 30 32 31 2e 35 39 39 39 39 39 Data Ascii: {"Seq":4,"When":3874,"Evts":[{"Kind":100,"Args":["visible"],"When":3874},{"Kind":57,"Args":[12,"pointerout",11964.299999999988,56,12021.399999999965,12021.599999999977,0],"When":3880},{"Kind":57,"Args":[12,"pointerleave",11964.299999999988,56,12021.599999
2024-04-24 12:22:51 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:51 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:51 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 31 33 39 36 7d 0a Data Ascii: {"BundleTime":1713961371396}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.5	50205	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	585	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=3&ClientTime=1713961369665&PageStart=1713961356089&PrevBundleTime=1713961362539 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:51 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:51 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.5	50199	192.29.14.118	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	1506	OUT	GET /visitor/v200/svrGP?pps=3&siteid=566810826&ref=https%3A%2F%2Fwww.docusign.com%2Fprivacy&ref2=elqNone&tzo=-60&ms=356&optin=disabled&firstPartyCookieDomain=track.docusign.com&elqGUID=D32BF32183754911A4896AC2751429EC HTTP/1.1 Host: track.docusign.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: ds_a=e726a659-b15e-4860-84f0-a4f96f541646; optimizelyEndUserId=oeu1713961329829r0.3118246866228145; ELOQUA=GUID=D32BF32183754911A4896AC2751429EC; _gcl_au=1.1.568102465.1713961340; _gid=GA1.2.1110259529.1713961342; _gat_UA-39550292-1=1; _fbp=fb.1.1713961347300.1908196306; fs_lua=1.1713961356086; fs_uid=#12BP4E#2fb21e6e-5b70-437b-86b2-6d28b037cb26:b2abeec2-85fb-48e9-a672-7141db872fb2:1713961346731::2#/1745497348; OptanonConsent=isGpcEnabled=0&datestamp=Wed+Apr+24+2024+14%3A22%3A49+GMT%2B0200+(Central+European+Summer+Time)&version=202403.1.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=5dc11bb1-6915-42b6-9ade-2b46c2902488&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.docusign.com%2Fprivacy&groups=C0001%3A1%2CC0003%3A1%2CC0002%3A1%2CC0004%3A1; _ga=GA1.2.866850028.1713961341; _uetsid=4f1c1f60023511efa8016792c6257a6f; _uetvid=4f1c74c0023511ef89da2f89b718d7a1; _ga_1TZ7S9D6BQ=GS1.1.1713961341.1.1.1713961370.31.0.0
2024-04-24 12:22:51 UTC	345	IN	HTTP/1.1 200 OK Cache-Control: no-store Pragma: no-cache Content-Type: image/gif Expires: -1 X-Robots-Tag: noindex, nofollow X-Xss-Protection: 1; mode=block P3P: CP="IDC DSP COR DEVa TAIa OUR BUS PHY ONL UNI COM NAV CNT STA", X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:50 GMT Connection: close Content-Length: 49
2024-04-24 12:22:51 UTC	49	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 91 ff 00 ff ff ff 00 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 02 00 2c 00 00 00 00 01 00 01 00 00 02 02 54 01 00 3b Data Ascii: GIF89a!,T;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.5	50206	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	348	OUT	GET /rec/page HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	320	IN	HTTP/1.1 202 Accepted Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:51 GMT Content-Length: 46 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:51 UTC	46	IN	Data Raw: 7b 22 72 65 61 73 6f 6e 5f 63 6f 64 65 22 3a 39 2c 22 72 65 61 73 6f 6e 22 3a 22 49 6e 76 61 6c 69 64 20 70 61 67 65 20 55 52 4c 22 7d 0a Data Ascii: {"reason_code":9,"reason":"Invalid page URL"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.5	50207	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	3212	OUT	GET /saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=Pus5UEGTXSHTGgS1938xlm6cDo-3t7ol3e4KT7-Lgik&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:51 UTC	299	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:51 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com
2024-04-24 12:22:51 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.5	50209	34.111.140.246	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	621	OUT	POST /v1/events HTTP/1.1 Host: logx.optimizely.com Connection: keep-alive Content-Length: 1135 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	1135	OUT	Data Raw: 7b 22 61 63 63 6f 75 6e 74 5f 69 64 22 3a 22 32 37 35 35 33 32 39 31 38 22 2c 22 61 6e 6f 6e 79 6d 69 7a 65 5f 69 70 22 3a 66 61 6c 73 65 2c 22 63 6c 69 65 6e 74 5f 6e 61 6d 65 22 3a 22 65 64 67 65 22 2c 22 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 22 3a 22 5f 5f 5f 5f 76 31 5f 34 33 5f 30 22 2c 22 65 6e 72 69 63 68 5f 64 65 63 69 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 70 72 6f 6a 65 63 74 5f 69 64 22 3a 22 32 30 39 31 37 33 32 32 39 35 31 22 2c 22 72 65 76 69 73 69 6f 6e 22 3a 22 37 32 38 33 22 2c 22 76 69 73 69 74 6f 72 73 22 3a 5b 7b 22 76 69 73 69 74 6f 72 5f 69 64 22 3a 22 6f 65 75 31 37 31 33 39 36 31 33 32 39 38 32 39 72 30 2e 33 31 31 38 32 34 36 38 36 36 32 32 38 31 34 35 22 2c 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 41 55 54 4f 22 2c 22 61 74 Data Ascii: {"account_id":"275532918","anonymize_ip":false,"client_name":"edge","client_version":"____v1_43_0","enrich_decisions":true,"project_id":"20917322951","revision":"7283","visitors":[{"visitor_id":"oeu1713961329829r0.3118246866228145","session_id":"AUTO","at
2024-04-24 12:22:51 UTC	738	IN	HTTP/1.1 204 No Content timing-allow-origin: * access-control-allow-credentials: true access-control-allow-origin: https://www.docusign.com access-control-allow-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id,X-Optimizely-Strict access-control-allow-methods: POST,OPTIONS access-control-expose-headers: X-Requested-With,Content-Type,Accept,Origin,X-App-Trace-Id content-type: text/plain date: Wed, 24 Apr 2024 12:22:51 GMT server: istio-envoy x-envoy-upstream-service-time: 2 x-request-id: 0fc50b91-2158-45d1-842e-b982bf0698a4 x-envoy-decorator-operation: events-smart-router.edp-prod.svc.cluster.local:8080/* Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.5	50208	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 658 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:51 UTC	658	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 33 36 34 33 36 38 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713961364368,"level":"INFO","message":"WS Reconnec
2024-04-24 12:22:52 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Wed, 24 Apr 2024 12:22:52 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 41 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.5	50215	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	875	OUT	GET /_next/static/chunks/webpack-a0deeec5c85c92d3.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:52 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "e785b06b929a2d2b6a1cf10b3121a2d7-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y2GMSS5NKRYJPSHNTED7 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.5	50212	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	877	OUT	GET /_next/static/chunks/framework-ffee79c6390da51e.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "ff808042b082f6ae8a6b808299655cad-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:52 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "ff808042b082f6ae8a6b808299655cad-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y2GTT4G7PD2HN95D8S4F Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
303	192.168.2.5	50211	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	872	OUT	GET /_next/static/chunks/main-5848164edc7f05e2.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "02849653078c1b2461e1151d048ddd7d-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:52 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "02849653078c1b2461e1151d048ddd7d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y2GTPQK2B92ENRZHBHHE Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.5	50216	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	878	OUT	GET /_next/static/chunks/pages/_app-ef9da0a6572b3989.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "240735d2acf59b5018ec9ef6c3c99d54-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:52 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "240735d2acf59b5018ec9ef6c3c99d54-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y2GPERJRXNJXPPHSX3M3 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.5	50214	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	871	OUT	GET /_next/static/chunks/610-2bd6294a230ecff5.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "0df172718be759e155ef4ac9edb2dd12-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:52 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "0df172718be759e155ef4ac9edb2dd12-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y2GPXGH1BRRV5XWEWG64 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.5	50213	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	879	OUT	GET /_next/static/chunks/pages/drift-8f9623a7a70f033a.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "9bd292c8c30a5092cc5ecec26aefd5dc-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:52 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "9bd292c8c30a5092cc5ecec26aefd5dc-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y2H0C6N83X5QQ9MA8F6T Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.5	50217	18.244.214.96	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:51 UTC	617	OUT	GET /?domain=docusign.com&pId=402488676481365330 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:52 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Wed, 24 Apr 2024 12:22:52 GMT Apigw-Requestid: WuvwdhEfoAMEbRw= X-Cache: Miss from cloudfront Via: 1.1 fdd1eada351372fafa8612323f367f28.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: FlROLnHUpqAFJNx_yH81RrayBuqrixqfLqlst8Q2FcaDwEQwjl55eA==
2024-04-24 12:22:52 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.5	50219	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	585	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=4&ClientTime=1713961370448&PageStart=1713961356089&PrevBundleTime=1713961370615 HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:52 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:52 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:52 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.5	50218	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	872	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=5&ClientTime=1713961371235&PageStart=1713961356089&PrevBundleTime=1713961371396&DeltaT=6388&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:52 UTC	630	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 94 6b 6f 9b 30 14 86 ff 0a f3 07 d4 4a 06 6c e3 1b e9 b2 a9 cd a2 6e 6a bb 46 4a aa 6a aa fa 01 83 49 ac 12 48 c1 49 7a 51 ff fb 9c 5e 12 22 4d 5a 39 c8 82 e3 e7 bc f6 b1 8f fd 0c c6 fa 1e f4 18 04 d7 33 5d 81 9e 20 42 42 30 5c d9 16 f4 6e 9e c1 99 a9 72 d7 2b 20 38 6e a6 1b 17 81 60 66 ed a2 ed 45 51 d3 86 c5 b2 2c 5b 5b 37 8f 61 56 cf a3 46 67 91 5a 56 79 a9 a3 15 f9 7e d9 4c 7f e5 7d 4c 4e 46 74 e8 5f b5 ba 71 7f a4 50 04 6b ae 03 a6 04 0a 68 2c 54 20 b9 22 01 cf 89 54 28 16 99 22 dc 1f eb b6 35 75 e5 70 45 52 a5 75 46 02 c9 0a 15 50 a9 93 20 e5 82 04 02 53 9c 2b 29 36 72 fe 28 9d 6a c7 8a a2 c0 a9 46 34 10 92 3b e9 5c 89 40 62 a5 02 91 27 9a 50 56 14 29 93 4e fa be 4f fc 41 69 74 65 27 66 ae fb 58 e0 38 e1 38 e6 18 0b Data Ascii: ko0JlnjFJjIHIzQ^"MZ93] BB0\nr+ 8n`fEQ,[[7aVFgZVy~L}LNFt_qPkh,T "T("5upERuFP S+)6r(jF4;\@b'PV)NOAite'fX88
2024-04-24 12:22:52 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:52 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:52 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 32 32 32 30 7d 0a Data Ascii: {"BundleTime":1713961372220}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.5	50220	18.239.199.12	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	437	OUT	GET /bg9s?x-amz-cf-id=GwBcVh4flXzShN5qwyywan9qZO3cAuo32c_FMePxFaw0y7QsPMDqkw==&api-version=v2 HTTP/1.1 Host: tag-logger.demandbase.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:52 UTC	584	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 0 Connection: close Last-Modified: Tue, 07 Mar 2023 20:47:02 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: 8SdDCdpJvGjkSiMFPv08XcVSgwOMVVmH Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 24 Apr 2024 08:43:36 GMT ETag: "d41d8cd98f00b204e9800998ecf8427e" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 1187ac5bbeaea0b3199ef80f73171c54.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P3 X-Amz-Cf-Id: WF-7eFtYC80sXbVPpm8lLOQVUV61TVoxvLlnqiaR2yxSFKcn-L5dVg== Age: 13157 Vary: Origin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.5	50225	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	872	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961369690&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961369597&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:52 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3403, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:22:52 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.5	50223	35.244.154.8	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	677	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; rlas3=MhajISilzAaD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=
2024-04-24 12:22:52 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=Qecrhs124EWD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:22:52 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:22:52 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:22:52 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:52 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.5	50222	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	3006	OUT	GET /saq_pxl?uid=lfPdMw05TS1QTnyEaKtDBA&is_js=true&landing_url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&t=Privacy%20Notice%20%7C%20DocuSign&tip=Pus5UEGTXSHTGgS1938xlm6cDo-3t7ol3e4KT7-Lgik&host=https%3A%2F%2Fwww.docusign.com&sa_conv_data_css_value=%270-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892%27&sa_conv_data_image_value=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&sa-user-id-v3=s%253AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%252FKoU3j4332YZcJJ%252FiA09s&sa-user-id-v2=s%253AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%252FJ8W7U%252FLaN8tTEDVIwvsml2a7yWphXqbQQw&sa-user-id=s%253A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:22:52 UTC	279	IN	HTTP/1.1 200 OK Date: Wed, 24 Apr 2024 12:22:52 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 94 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: null
2024-04-24 12:22:52 UTC	94	IN	Data Raw: 7b 22 63 6f 6e 76 65 72 73 69 6f 6e 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 72 65 74 61 72 67 65 74 69 6e 67 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 2c 22 6c 6f 6f 6b 61 6c 69 6b 65 5f 74 72 61 63 6b 65 72 5f 75 69 64 73 22 3a 6e 75 6c 6c 7d Data Ascii: {"conversion_tracker_uids":null,"retargeting_tracker_uids":null,"lookalike_tracker_uids":null}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.5	50228	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	656	OUT	GET /conductor HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://chat.docusign.net If-None-Match: "d320e83a1b98d0793815b4e22b96825b" If-Modified-Since: Thu, 04 Apr 2024 20:13:54 GMT sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	852	IN	HTTP/1.1 304 Not Modified Connection: close Server: istio-envoy Date: Wed, 24 Apr 2024 12:22:52 GMT Last-Modified: Thu, 04 Apr 2024 20:13:54 GMT x-amz-version-id: ECpAIUHXvnHr64vvrQweEad8ZWUjBUSY access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains Cache-Control: no-cache x-envoy-upstream-service-time: 13 ETag: "d320e83a1b98d0793815b4e22b96825b" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 97d9fba07ea9b58446de67c2f4b07146.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: d1sDDW8bxxVLfX6vkP40-7YV89fBhsvCHyTsXIoZH899Hly5X-o52g==

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.5	50226	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	880	OUT	GET /_next/static/PFxQpRcdah7Fp208MVJfR/_buildManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "64ffbb523225316f9adfb6ac32d8acec-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:52 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "64ffbb523225316f9adfb6ac32d8acec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y37PX2Z9M36SRM9V99SD Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.5	50227	54.67.4.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	878	OUT	GET /_next/static/PFxQpRcdah7Fp208MVJfR/_ssgManifest.js HTTP/1.1 Host: chat.docusign.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" If-None-Match: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: drift_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; driftt_aid=8cf4a3fa-16fd-4955-8be0-52cae614ded9; drift_eid=e726a659-b15e-4860-84f0-a4f96f541646
2024-04-24 12:22:53 UTC	322	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Wed, 24 Apr 2024 12:22:52 GMT Etag: "4fa4dcc133fddfc011cfda6e905ecf89-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000 X-Nf-Request-Id: 01HW80Y37T1BYD63CRRR1EW15G Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.5	50229	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	878	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=5&ClientTime=1713961371849&PageStart=1713961356089&PrevBundleTime=1713961368134&LastActivity=8440&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 630 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:52 UTC	630	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 8d 94 6b 6f 9b 30 14 86 ff 0a f3 07 d4 4a 06 6c e3 1b e9 b2 a9 cd a2 6e 6a bb 46 4a aa 6a aa fa 01 83 49 ac 12 48 c1 49 7a 51 ff fb 9c 5e 12 22 4d 5a 39 c8 82 e3 e7 bc f6 b1 8f fd 0c c6 fa 1e f4 18 04 d7 33 5d 81 9e 20 42 42 30 5c d9 16 f4 6e 9e c1 99 a9 72 d7 2b 20 38 6e a6 1b 17 81 60 66 ed a2 ed 45 51 d3 86 c5 b2 2c 5b 5b 37 8f 61 56 cf a3 46 67 91 5a 56 79 a9 a3 15 f9 7e d9 4c 7f e5 7d 4c 4e 46 74 e8 5f b5 ba 71 7f a4 50 04 6b ae 03 a6 04 0a 68 2c 54 20 b9 22 01 cf 89 54 28 16 99 22 dc 1f eb b6 35 75 e5 70 45 52 a5 75 46 02 c9 0a 15 50 a9 93 20 e5 82 04 02 53 9c 2b 29 36 72 fe 28 9d 6a c7 8a a2 c0 a9 46 34 10 92 3b e9 5c 89 40 62 a5 02 91 27 9a 50 56 14 29 93 4e fa be 4f fc 41 69 74 65 27 66 ae fb 58 e0 38 e1 38 e6 18 0b Data Ascii: ko0JlnjFJjIHIzQ^"MZ93] BB0\nr+ 8n`fEQ,[[7aVFgZVy~L}LNFt_qPkh,T "T("5upERuFP S+)6r(jF4;\@b'PV)NOAite'fX88
2024-04-24 12:22:53 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:53 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:53 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 32 38 31 33 7d 0a Data Ascii: {"BundleTime":1713961372813}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.5	50230	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	987	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961369690&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961369597&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Attribution-Reporting-Eligible: event-source, trigger, not-navigation-source Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	948	IN	HTTP/1.1 200 OK Vary: Accept-Encoding Content-Type: image/png reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:22:53 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:22:53 UTC	1580	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch
2024-04-24 12:22:53 UTC	69	IN	Data Raw: 34 33 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 08 04 00 00 00 b5 1c 0c 02 00 00 00 0a 49 44 41 54 78 9c 63 00 01 00 00 05 00 01 0d 0a 2d b4 00 00 00 00 49 45 4e 44 ae 42 Data Ascii: 43PNGIHDRIDATxc-IENDB
2024-04-24 12:22:53 UTC	9	IN	Data Raw: 60 82 0d 0a 30 0d 0a 0d 0a Data Ascii: `0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.5	50231	18.244.214.75	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	381	OUT	GET /?domain=docusign.com&pId=402488676481365330 HTTP/1.1 Host: attr.ml-api.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	388	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 4 Connection: close Date: Wed, 24 Apr 2024 12:22:53 GMT Apigw-Requestid: WuvwnjIMIAMEPxQ= X-Cache: Miss from cloudfront Via: 1.1 188e78960502f402bcdf825ba82688e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P4 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: h5wNMEGLQsGrJcXCtP1uJpDi7FpROEHFOzHrE9YEkkHVZu5itZOamg==
2024-04-24 12:22:53 UTC	4	IN	Data Raw: 6e 75 6c 6c Data Ascii: null

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.5	50235	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	618	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=5&ClientTime=1713961371235&PageStart=1713961356089&PrevBundleTime=1713961371396&DeltaT=6388&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:53 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:53 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.5	50232	104.244.42.69	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	903	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=743a8742-115d-4d01-947e-bb54db271770&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=4d75221e-04d7-422c-acb3-428f9fc3823d&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a46bf145-3aaa-4094-971d-11456caaeb47
2024-04-24 12:22:53 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:52 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 16b0ef9488a55595 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 953a331fa04fd708ded86e927d66900ee85e8d0ebc2fbae5b70e71f09eaf2e8d connection: close
2024-04-24 12:22:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.5	50233	104.244.42.195	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	1040	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=743a8742-115d-4d01-947e-bb54db271770&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=4d75221e-04d7-422c-acb3-428f9fc3823d&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171396134691071718; guest_id_ads=v1%3A171396134691071718; personalization_id="v1_O74RdUWbGOMZLTZGhxxEVA=="; guest_id=v1%3A171396134691071718
2024-04-24 12:22:53 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:52 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: 944579e2fd80a5dd strict-transport-security: max-age=631138519 x-response-time: 5 x-connection-hash: 9538176a03745afd58a15b9d17280301273e3203c6106ef60d41ac7208ea42bf connection: close
2024-04-24 12:22:53 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.5	50237	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	636	OUT	GET /tr/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961369690&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961369597&coo=false&tm=1&rqm=GET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/plain Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains cross-origin-resource-policy: cross-origin Server: proxygen-bolt X-FB-Connection-Quality: MODERATE; q=0.3, rtt=159, rtx=0, c=10, mss=1277, tbw=3401, tp=-1, tpl=-1, uplat=0, ullat=0 Alt-Svc: h3=":443"; ma=86400 Date: Wed, 24 Apr 2024 12:22:53 GMT Connection: close Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.5	50236	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:52 UTC	545	OUT	GET /rec/integrations?OrgId=12BP4E HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	267	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:53 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close Transfer-Encoding: chunked
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 66 34 63 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 46 53 29 20 7b 0a 20 20 76 61 72 20 73 65 73 73 69 6f 6e 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 28 29 2c 20 73 65 73 73 69 6f 6e 55 72 6c 20 3d 20 46 53 2e 67 65 74 43 75 72 72 65 6e 74 53 65 73 73 69 6f 6e 55 52 4c 28 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 74 72 79 57 69 74 68 42 61 63 6b 6f 66 66 28 63 6f 6e 64 69 74 69 6f 6e 2c 20 63 61 6c 6c 62 61 63 6b 2c 20 6d 61 78 57 61 69 74 2c 20 66 61 69 6c 75 72 65 4d 73 67 2c 20 74 69 6d 65 6f 75 74 43 61 6c 6c 62 61 63 6b 29 20 7b 0a 20 20 20 20 76 61 72 20 74 6f 74 61 6c 54 69 6d 65 45 78 70 69 72 65 64 20 3d 20 30 3b 0a 20 20 20 20 76 61 72 20 77 61 69 74 20 3d 20 36 34 3b 0a 20 20 20 20 76 61 72 20 72 65 73 75 6c 74 46 6e Data Ascii: f4c(function(FS) { var session = FS.getCurrentSession(), sessionUrl = FS.getCurrentSessionURL(); function retryWithBackoff(condition, callback, maxWait, failureMsg, timeoutCallback) { var totalTimeExpired = 0; var wait = 64; var resultFn
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 29 20 7b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 72 69 63 4e 61 6d 65 20 3d 20 65 76 65 6e 74 4e 61 6d 65 4d 61 70 5b 65 76 74 2e 6e 61 6d 65 5d 3b 0a 09 09 09 69 66 20 28 21 6d 65 74 72 69 63 4e 61 6d 65 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 7d 0a 09 09 09 63 6f 6e 73 74 20 65 76 65 6e 74 53 74 61 74 75 73 20 3d 20 65 76 74 2e 6e 61 6d 65 20 3d 3d 3d 20 27 64 6c 6f 5f 63 6c 69 65 6e 74 5f 65 72 72 6f 72 27 20 3f 20 27 46 41 49 4c 55 52 45 27 20 3a 20 27 53 55 43 43 45 53 53 27 3b 0a 09 09 09 63 6f 6e 73 74 20 6d 65 74 61 64 61 74 61 20 3d 20 65 76 74 2e 61 74 74 72 69 62 75 74 65 73 20 7c 7c 20 7b 7d 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e 6e 61 6d 65 20 3d 20 6d 65 74 72 69 63 4e 61 6d 65 3b 0a 09 09 09 6d 65 74 61 64 61 74 61 2e 76 Data Ascii: ) {const metricName = eventNameMap[evt.name];if (!metricName) {return;}const eventStatus = evt.name === 'dlo_client_error' ? 'FAILURE' : 'SUCCESS';const metadata = evt.attributes \|\| {};metadata.name = metricName;metadata.v
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 61 67 65 76 69 65 77 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 64 65 74 61 69 6c 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 64 65 74 61 69 6c 2e 61 63 74 69 6f 6e 46 69 65 6c 64 Data Ascii: me": "insert", "value": "pageview" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-detail-action", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.detail.actionField
2024-04-24 12:22:53 UTC	158	IN	Data Raw: 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 61 63 74 69 6f 6e 46 69 65 6c 64 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 0d 0a Data Ascii: r", "operators": [ { "name": "query", "select": "$.ecommerce.add.actionField" }, { "name": "insert", "value": "add" } ], "
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 31 30 30 30 0d 0a 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 61 64 64 2d 70 72 6f 64 75 63 74 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 61 64 64 2e 70 72 6f 64 75 63 74 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 70 72 6f 64 75 Data Ascii: 1000destination": "FS.event" }, { "id": "fs-ga-e-commerce-add-product", "source": "dataLayer", "operators": [ { "name": "query", "select": "$.ecommerce.add.products[0]" }, { "name": "insert", "value": "add_produ
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 70 72 6f 6d 6f 43 6c 69 63 6b 2e 70 72 6f 6d 6f 74 69 6f 6e 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 72 6f 6d 6f 5f 63 6c 69 63 6b 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 63 68 65 63 6b 6f 75 74 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 Data Ascii: { "name": "query", "select": "$.ecommerce.promoClick.promotions[0]" }, { "name": "insert", "value": "promo_click_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-checkout-action", "sour
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 61 6e 2d 6f 75 74 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 70 75 72 63 68 61 73 65 5f 70 72 6f 64 75 63 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 2d 65 2d 63 6f 6d 6d 65 72 63 65 2d 72 65 66 75 6e 64 2d 61 63 74 69 6f 6e 22 2c 0a 20 20 20 20 20 20 22 73 6f 75 72 63 65 22 3a 20 22 64 61 74 61 4c 61 79 65 72 22 2c 0a 20 20 20 20 20 20 22 6f 70 65 72 61 74 6f 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a Data Ascii: an-out" }, { "name": "insert", "value": "purchase_product" } ], "destination": "FS.event" }, { "id": "fs-ga-e-commerce-refund-action", "source": "dataLayer", "operators": [ { "name": "query", "select":
2024-04-24 12:22:53 UTC	339	IN	Data Raw: 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 76 69 65 77 5f 69 74 65 6d 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 76 69 65 77 5f 69 74 65 6d 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 Data Ascii: t": "$[?(event=view_item)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "view_item" } ], "destination": "FS.event" }, {
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 31 36 38 30 0d 0a 72 73 22 3a 20 5b 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 5b 3f 28 65 76 65 6e 74 3d 61 64 64 5f 74 6f 5f 63 61 72 74 29 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 61 64 64 5f 74 6f 5f 63 61 72 74 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 Data Ascii: 1680rs": [ { "name": "query", "select": "$[?(event=add_to_cart)]" }, { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "add_to_cart" } ],
2024-04-24 12:22:53 UTC	1255	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 71 75 65 72 79 22 2c 20 22 73 65 6c 65 63 74 22 3a 20 22 24 2e 65 63 6f 6d 6d 65 72 63 65 2e 69 74 65 6d 73 5b 30 5d 22 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 63 6f 6e 76 65 72 74 22 2c 20 22 65 6e 75 6d 65 72 61 74 65 22 3a 20 74 72 75 65 20 7d 2c 0a 20 20 20 20 20 20 20 20 7b 20 22 6e 61 6d 65 22 3a 20 22 69 6e 73 65 72 74 22 2c 20 22 76 61 6c 75 65 22 3a 20 22 73 65 6c 65 63 74 5f 70 72 6f 6d 6f 74 69 6f 6e 22 20 7d 0a 20 20 20 20 20 20 5d 2c 0a 20 20 20 20 20 20 22 64 65 73 74 69 6e 61 74 69 6f 6e 22 3a 20 22 46 53 2e 65 76 65 6e 74 22 0a 20 20 20 20 7d 2c 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 22 69 64 22 3a 20 22 66 73 2d 67 61 34 2d 65 2d 63 6f 6d 6d 65 72 63 Data Ascii: { "name": "query", "select": "$.ecommerce.items[0]" }, { "name": "convert", "enumerate": true }, { "name": "insert", "value": "select_promotion" } ], "destination": "FS.event" }, { "id": "fs-ga4-e-commerc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.5	50240	35.244.154.8	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	441	OUT	GET /464526.gif HTTP/1.1 Host: id.rlcdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; rlas3=Qecrhs124EWD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=
2024-04-24 12:22:53 UTC	620	IN	HTTP/1.1 200 OK Cache-Control: no-cache, no-store Content-Type: image/gif P3p: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Set-Cookie: rlas3=igtf17i9ZuKD11RqjcA7mC3+4x9QJLTMEyXKWEE8HeU=; Path=/; Domain=rlcdn.com; Expires=Thu, 24 Apr 2025 12:22:53 GMT; Secure; SameSite=None Set-Cookie: pxrc=CIPzo7EGEgUI6AcQABIGCMrdKhAA; Path=/; Domain=rlcdn.com; Expires=Sun, 23 Jun 2024 12:22:53 GMT; Secure; SameSite=None Timing-Allow-Origin: * Date: Wed, 24 Apr 2024 12:22:53 GMT Content-Length: 42 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:53 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.5	50242	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	1163	OUT	GET /core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=3f17fa25-37c9-4972-a9d1-e0d99afca2b0&sessionStarted=1713961372.558&campaignRefreshToken=de56d2c1-70ea-45f7-ba05-f71ca02d2cdd&hideController=false&pageLoadStartTime=1713961371016&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 16 Date: Wed, 24 Apr 2024 12:22:53 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 1721ba89df2008145b68acb827b62daa.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: zwMQRYhjZA76nKO0JWQg5qvFfauE5mbXgBgv1JctXVPP8_He4tvBWg==
2024-04-24 12:22:53 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
327	192.168.2.5	50241	18.65.25.102	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	753	OUT	GET /core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961371016 HTTP/1.1 Host: js.driftt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://chat.docusign.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	964	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 1551 Connection: close Server: istio-envoy Last-Modified: Thu, 04 Apr 2024 19:46:21 GMT x-amz-server-side-encryption: AES256 x-amz-version-id: ZBEiLR5jfh3iii3cnfTNRQsxvVBIMKla Accept-Ranges: bytes access-control-allow-origin: * access-control-allow-credentials: true access-control-allow-methods: GET, POST, OPTIONS access-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type strict-transport-security: max-age=31536000; includeSubDomains x-envoy-upstream-service-time: 19 Date: Wed, 24 Apr 2024 12:22:53 GMT Cache-Control: no-cache ETag: "f4497bfb5a87b7c4365be2cac47f8d1a" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 ac5b42b3bd2eb6b361f7181832dd86f2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: SapCgy-5IgCnExlVhMJlm4-Nf9Vu7bdb09sON8mOVwrBUpbBSlng3w==
2024-04-24 12:22:53 UTC	1551	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 30 30 30 30 30 30 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 63 6f 72 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,shrink-to-fit=no"><meta name="theme-color" content="#000000"><link rel="manifest" href="/core/manifest.json"><link rel="dns-prefet

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.5	50243	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=5&ClientTime=1713961371849&PageStart=1713961356089&PrevBundleTime=1713961368134&LastActivity=8440&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:53 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:53 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.5	50244	31.13.70.36	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	673	OUT	GET /privacy_sandbox/pixel/register/trigger/?id=357123711145934&ev=PageView&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&rl=&if=false&ts=1713961369690&sw=1280&sh=1024&v=2.9.154&r=stable&a=tmSimo-GTM-WebTemplate&ec=0&o=4125&fbp=fb.1.1713961347300.1908196306&cs_est=true&ler=empty&cdl=API_unavailable&it=1713961369597&coo=false&tm=1&rqm=FGET HTTP/1.1 Host: www.facebook.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	900	IN	HTTP/1.1 200 OK reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
2024-04-24 12:22:53 UTC	1903	IN	Data Raw: 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 3a 20 64 65 66 61 75 6c 74 2d 73 72 63 20 64 61 74 61 3a 20 62 6c 6f 62 3a 20 27 73 65 6c 66 27 20 68 74 74 70 73 3a 2f 2f 2a 2e 66 62 73 62 78 2e 63 6f 6d 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 27 75 6e 73 61 66 65 2d 65 76 61 6c 27 3b 73 63 72 69 70 74 2d 73 72 63 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 20 2a 2e 66 62 63 64 6e 2e 6e 65 74 20 2a 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 31 32 37 2e 30 2e 30 2e 31 3a 2a 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 62 6c 6f 62 3a 20 64 61 74 61 3a 20 27 73 65 6c 66 27 20 63 6f 6e 6e 65 63 74 2e 66 61 63 65 62 6f 6f 6b 2e 6e 65 74 20 27 Data Ascii: content-security-policy: default-src data: blob: 'self' https://.fbsbx.com 'unsafe-inline' .facebook.com .fbcdn.net 'unsafe-eval';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net '
2024-04-24 12:22:53 UTC	1613	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 73 65 6c 66 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 73 65 6c 66 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
330	192.168.2.5	50246	104.244.42.69	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	667	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=743a8742-115d-4d01-947e-bb54db271770&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=4d75221e-04d7-422c-acb3-428f9fc3823d&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: t.co Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: muc_ads=a46bf145-3aaa-4094-971d-11456caaeb47
2024-04-24 12:22:54 UTC	392	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:53 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: e833e5495aad9260 strict-transport-security: max-age=0 x-response-time: 5 x-connection-hash: 756e4951b2259eb01c9c0cf594d42d7acc12321c2012d1285959b7b7abfc3896 connection: close
2024-04-24 12:22:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
331	192.168.2.5	50247	104.244.42.195	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	804	OUT	GET /1/i/adsct?bci=4&eci=3&event=%7B%7D&event_id=743a8742-115d-4d01-947e-bb54db271770&integration=gtm&p_id=Twitter&p_user_id=0&pl_id=4d75221e-04d7-422c-acb3-428f9fc3823d&tw_document_href=https%3A%2F%2Fwww.docusign.com%2Fprivacy&tw_iframe_status=0&txn_id=nx68b&type=javascript&version=2.3.30 HTTP/1.1 Host: analytics.twitter.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: guest_id_marketing=v1%3A171396134691071718; guest_id_ads=v1%3A171396134691071718; personalization_id="v1_O74RdUWbGOMZLTZGhxxEVA=="; guest_id=v1%3A171396134691071718
2024-04-24 12:22:54 UTC	400	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:53 GMT perf: 7402827104 server: tsa_p content-type: image/gif;charset=utf-8 cache-control: no-cache, no-store, max-age=0 content-length: 43 x-transaction-id: d4776d204e1be103 strict-transport-security: max-age=631138519 x-response-time: 9 x-connection-hash: 1b3ac72539ed950bc0ea86df3a94d8517640b88e8e7b88a39ce96060969b116d connection: close
2024-04-24 12:22:54 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 09 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
332	192.168.2.5	50248	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:53 UTC	868	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=1&ClientTime=1713961373052&PageStart=1713961370476&PrevBundleTime=0&LastActivity=1665&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 58912 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:53 UTC	16384	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ec bd 89 92 db 46 b2 28 fa 2b 38 ad 70 58 6d 93 14 76 12 dd 33 7e 47 23 db cf 3e 23 7b 26 c6 1e 9f c5 76 38 40 12 24 a1 06 17 01 60 6f 0c 9d 5f bb 9f f4 7e e1 65 6d 40 ad 58 48 b6 ac d1 b5 e4 05 ac 25 2b 2b 2b 2b 2b 33 ab 2a eb 70 f1 43 f2 f6 e2 ca 19 5c fc e7 2a d9 e0 8f af 6e cb e2 e2 ea e7 c3 c5 5f d3 cd fc e2 ca 0d 06 17 2f f3 25 4a ba 58 95 e5 ae b8 7a f1 e2 ee ee 6e 34 df ce f6 45 ba dc 8c 66 db f5 8b 5d 9e de c6 b3 87 8b c1 c5 9f fe ed cb bf bd fa f1 bf ff fe 95 b5 2a d7 d9 17 90 d2 a1 d2 c5 af 55 fb ef 06 ac e1 89 13 4d aa a6 17 71 56 24 03 47 5f ae 17 82 9b f8 36 5d c6 65 a2 6d 93 6b f1 62 9e 2c e2 7d 56 5e 0c 36 fb 2c 1b 5c cc b7 6b fa 89 71 d1 62 12 d6 b5 c7 41 1c 3b 0b 7b 3e 09 a2 70 12 8d f5 cd 05 75 73 8e 2f c1 Data Ascii: F(+8pXmv3~G#>#{&v8@$`o_~em@XH%+++++3pC\n_/%JXzn4Ef]*UMqV$G_6]emkb,}V^6,\kqbA;{>pus/
2024-04-24 12:22:53 UTC	16384	OUT	Data Raw: b9 2b ae 5e bc 98 cd 37 a3 d9 76 7b 93 26 59 7c 37 da e6 cb 17 68 df b8 78 41 76 0f 5f 6c cb df 00 7c 92 83 f5 fd 1b 7e 37 a6 b8 5d 7e 7a d9 6e 51 eb 89 fb 19 a1 1a de cb 5a c4 eb 34 7b b8 b2 be 49 b2 db 04 bd 40 32 b0 5e c2 82 9a 0d ac 02 84 23 52 ca d3 05 bf e5 f4 cb 06 9a f8 65 a3 b7 a0 ab bd 6f 0c 5f 23 d0 9c c8 99 b8 9e 0a a4 71 e8 ff 35 95 8e a7 d1 33 24 41 4f d4 03 dd f8 80 d6 99 ec 50 1f 67 db 35 2c f7 80 a5 70 f4 0b c1 62 9b 92 16 7f 1a 58 82 85 c5 f6 fc 66 48 78 73 b8 83 e9 34 7b 38 f0 9c c3 5e 88 e2 76 8b d1 03 82 da 8a 90 f8 8f 24 fb 1a 4a 4a 6f 07 e9 8b 23 77 a8 21 c3 37 65 84 86 8c 9d 21 3d 4b 0d 19 b1 21 bd 5c 19 32 9e 09 3f b1 95 9c a7 3b c4 58 86 0a da d4 21 7e 01 aa 5b 13 e4 d8 84 18 db be 2f 6e 72 94 33 f3 58 f8 c2 9b 51 ae b9 60 28 9e Data Ascii: +^7v{&Y\|7hxAv_l\|~7]~znQZ4{I@2^#Reo_#q53$AOPg5,pbXfHxs4{8^v$JJo#w!7e!=K!\2?;X!~[/nr3XQ`(
2024-04-24 12:22:53 UTC	16384	OUT	Data Raw: fa c2 dc 6d e9 fb 65 38 1e 8d 43 7c 89 b9 db 32 74 4a 3d 93 56 63 0a 0a fc b6 b8 c6 9e ae 31 57 05 e5 9f 49 b2 38 11 2f 26 c7 b6 db 6e b3 6d f3 d6 c1 2e 2f c5 e1 80 1c 32 5f be c2 dd 7f 86 2c 09 9c 20 60 55 c1 39 ff 16 fb 93 3c 71 d6 d1 e1 6a 1c ff 18 b9 49 18 9f a1 51 c5 52 94 a6 0b 66 cd 7c 5e 63 ae 4d 74 5d a8 d0 39 01 1d e8 6e eb 60 07 9d 4f ea 6e dd be ad 15 58 38 ad 2d fc ee f0 66 a0 f3 42 bb 5a dc 05 e8 60 86 93 ab df 55 d3 2d fc 46 83 10 bd 5d d5 f5 8c 28 8b eb 6d f2 e3 fc fd bb 92 03 df 1f 72 53 94 7c 8f 43 13 8d 22 04 86 c2 9c 7e 4f b8 85 00 85 9b 69 d0 ca 21 87 88 9b 30 bf a9 6e 5d 7f 08 98 52 ae 92 cc eb fa a7 1d 60 85 a0 0a 7e 83 fe f1 f4 36 61 e4 09 27 23 66 b9 22 52 05 0e 43 19 6a 69 84 1d cd f3 84 1c a6 fc 85 56 c5 db aa 6e f6 20 be fc 29 Data Ascii: me8C\|2tJ=Vc1WI8/&nm./2_, `U9<qjIQRf\|^cMt]9n`OnX8-fBZ`U-F](mrS\|C"~Oi!0n]R`~6a'#f"RCjiVn )
2024-04-24 12:22:53 UTC	9760	OUT	Data Raw: 79 81 65 2e 32 f6 16 93 1c 22 aa fe 1e f8 58 3d 0c 8a 3c 0f f2 68 1c 44 08 6c c1 3d 86 01 c3 0f 0e f6 4d 03 07 a7 38 08 5e 12 2a fc bc 46 91 8c eb 75 7f b4 d5 20 8e 98 e3 8f b2 34 27 8f 0d 2c e5 72 7b 7b 3b 44 e7 44 4c 73 df 0d 53 40 81 9b e1 bc ae 67 93 6a fa f6 64 70 f2 eb 2f be fe fa cd b3 d7 27 8e 3f 5f 78 bd ca 6f ba 1f e9 51 31 38 59 55 37 c2 8e 7d 41 1e e2 74 57 59 c3 44 cd a3 72 95 64 bb a0 0e d7 65 d6 cd df 87 fc 9e c3 0f c3 84 63 be b8 df 2a 01 31 bc 08 ea fc c7 64 f9 7e 82 86 3d ef 7d de 34 3f de fe e8 be 8e 92 2c b4 9f 6f 77 cb 78 fc a3 d5 2c 63 ed 61 76 ef 0b d3 88 f3 97 51 bb 71 56 e6 05 d9 ce c7 39 87 01 45 a1 54 22 0e 13 d6 88 51 c3 b4 4b 7e 4c df 06 f5 3a 7d 5b cf 96 63 5c 2f b4 3f 61 3f f8 21 ba c8 0f d1 cc 35 5c b6 78 2e bb a5 78 c8 93 Data Ascii: ye.2"X=<hDl=M8^Fu 4',r{{;DDLsS@gjdp/'?_xoQ18YU7}AtWYDrdec1d~=}4?,owx,cavQqV9ET"QK~L:}[c\/?a?!5\x.x
2024-04-24 12:22:54 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:54 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:54 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 34 30 31 34 7d 0a Data Ascii: {"BundleTime":1713961374014}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
333	192.168.2.5	50249	216.137.39.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:54 UTC	671	OUT	POST /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:54 UTC	118	OUT	Data Raw: 70 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 25 32 32 25 37 44 Data Ascii: ping_context=%7B%22embedId%22%3A%2227b83herk5tv%22%2C%22pageUrl%22%3A%22https%3A%2F%2Fwww.docusign.com%2Fprivacy%22%7D
2024-04-24 12:22:54 UTC	889	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Content-Length: 294 Connection: close date: Wed, 24 Apr 2024 12:22:54 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: 6e3d8cece40ea16b vary: Accept-Encoding x-envoy-upstream-service-time: 25 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 d753bdff57c5dcd160113c97de38707a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: u0N-js2pNZFps2hSaXMGhtw3wlmvFlW20DWVjtuf_B1VMwj2u6D-HQ==
2024-04-24 12:22:54 UTC	294	IN	Data Raw: 7b 22 65 6d 62 65 64 49 64 22 3a 22 32 37 62 38 33 68 65 72 6b 35 74 76 22 2c 22 66 61 6c 6c 62 61 63 6b 22 3a 74 72 75 65 2c 22 74 61 72 67 65 74 69 6e 67 45 76 61 6c 75 61 74 65 64 22 3a 74 72 75 65 2c 22 73 69 67 6e 65 64 49 64 65 6e 74 69 74 79 53 74 61 74 75 73 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 64 65 6d 61 6e 64 42 61 73 65 54 6f 6b 65 6e 22 3a 6e 75 6c 6c 2c 22 63 6f 6f 6b 69 65 44 6f 6d 61 69 6e 73 22 3a 5b 22 65 63 6f 6d 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 2c 22 63 68 61 74 2e 64 6f 63 75 73 69 67 6e 2e 6e 65 74 22 5d 2c 22 64 72 69 66 74 45 6e 67 61 67 65 56 65 72 69 66 69 63 61 74 69 Data Ascii: {"embedId":"27b83herk5tv","fallback":true,"targetingEvaluated":true,"signedIdentityStatus":"DISABLED","demandBaseToken":null,"cookieDomains":["ecom.docusign.com","docusign.com","chat.docusign.com","docusign.net","chat.docusign.net"],"driftEngageVerificati

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
334	192.168.2.5	50251	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:54 UTC	612	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=1&ClientTime=1713961373052&PageStart=1713961370476&PrevBundleTime=0&LastActivity=1665&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:55 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:55 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:55 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
335	192.168.2.5	50253	216.137.39.17	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:55 UTC	370	OUT	GET /widget_bootstrap/ping/v2 HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:55 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 460 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftfc5ac8a4240b46f7ea268357b0e cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 1 date: Wed, 24 Apr 2024 12:22:55 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 3c0c0202765b2b7b973e2ad3371dd028.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: O7RHXuiR4JIj9aUN1usGIe_XH_FAXDK6iXrMZVKmquQMuEVCjhp8qg==
2024-04-24 12:22:55 UTC	460	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 2f 70 69 6e 67 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap/ping/v2</td></tr><tr><th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
336	192.168.2.5	50254	142.250.141.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:55 UTC	1214	OUT	POST /g/collect?v=2&tid=G-1TZ7S9D6BQ&gtm=45je44m0v879027428z8856130670za200&_p=1713961367209&gcs=G111&gcd=13v3v3v3v5&npa=0&dma=0&gdid=dYWJhMj&cid=866850028.1713961341&ul=en-us&sr=1280x1024&ir=1&uaa=x86&uab=64&uafvl=Google%2520Chrome%3B117.0.5938.132%7CNot%253BA%253DBrand%3B8.0.0.0%7CChromium%3B117.0.5938.132&uamb=0&uam=&uap=Windows&uapv=10.0.0&uaw=0&are=1&pae=1&pscdl=noapi&_eu=EA&dr=&dl=https%3A%2F%2Fwww.docusign.com%2Fprivacy&sid=1713961341&sct=1&seg=1&dt=Privacy%20Notice%20%7C%20DocuSign&_s=1&tfd=9809 HTTP/1.1 Host: analytics.google.com Connection: keep-alive Content-Length: 635 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:55 UTC	635	OUT	Data Raw: 65 6e 3d 70 61 67 65 5f 76 69 65 77 26 65 70 2e 67 74 6d 5f 73 65 74 74 69 6e 67 3d 34 30 37 25 32 30 25 37 43 25 32 30 47 54 4d 2d 4e 58 58 32 4d 34 37 25 32 30 25 37 43 25 32 30 26 65 70 2e 68 6f 73 74 6e 61 6d 65 3d 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 26 75 70 2e 63 6c 69 65 6e 74 5f 69 64 3d 38 36 36 38 35 30 30 32 38 2e 31 37 31 33 39 36 31 33 34 31 26 75 70 2e 75 5f 75 75 69 64 3d 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 0d 0a 65 6e 3d 64 65 6d 61 6e 64 62 61 73 65 5f 6c 6f 61 64 65 64 26 65 70 2e 67 74 6d 5f 73 65 74 74 69 6e 67 3d 34 30 37 25 32 30 25 37 43 25 32 30 47 54 4d 2d 4e 58 58 32 4d 34 37 25 32 30 25 37 43 25 32 30 26 65 70 2e 68 6f 73 74 6e 61 6d 65 3d 77 77 Data Ascii: en=page_view&ep.gtm_setting=407%20%7C%20GTM-NXX2M47%20%7C%20&ep.hostname=www.docusign.com&up.client_id=866850028.1713961341&up.u_uuid=e726a659-b15e-4860-84f0-a4f96f541646en=demandbase_loaded&ep.gtm_setting=407%20%7C%20GTM-NXX2M47%20%7C%20&ep.hostname=ww
2024-04-24 12:22:55 UTC	450	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: https://www.docusign.com Date: Wed, 24 Apr 2024 12:22:55 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Access-Control-Allow-Credentials: true Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
337	192.168.2.5	50252	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:55 UTC	635	OUT	POST /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive Content-Length: 769 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:55 UTC	769	OUT	Data Raw: 7b 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 7d 2c 22 75 73 65 72 49 64 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 38 63 66 34 61 33 66 61 2d 31 36 66 64 2d 34 39 35 35 2d 38 62 65 30 2d 35 32 63 61 65 36 31 34 64 65 64 39 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 70 61 67 65 22 3a 7b 22 68 6f 73 74 6e 61 6d 65 22 3a 22 77 77 77 2e 64 6f 63 75 73 69 67 6e 2e 63 6f 6d 22 2c 22 72 65 66 65 Data Ascii: {"attributes":{"ds_a":"e726a659-b15e-4860-84f0-a4f96f541646","has_consent":true,"countryCode":"US"},"userId":"e726a659-b15e-4860-84f0-a4f96f541646","anonymousId":"8cf4a3fa-16fd-4955-8be0-52cae614ded9","context":{"page":{"hostname":"www.docusign.com","refe
2024-04-24 12:22:56 UTC	670	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:55 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: cf6b21da313eebd5 content-length: 915 x-envoy-upstream-service-time: 126 server: istio-envoy connection: close
2024-04-24 12:22:56 UTC	915	IN	Data Raw: 7b 22 69 64 22 3a 22 39 61 34 63 32 62 30 31 34 39 31 64 33 37 36 66 66 35 62 30 34 37 32 32 33 63 35 34 39 65 38 33 22 2c 22 75 73 65 72 49 64 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 61 6e 6f 6e 79 6d 6f 75 73 49 64 22 3a 22 38 63 66 34 61 33 66 61 2d 31 36 66 64 2d 34 39 35 35 2d 38 62 65 30 2d 35 32 63 61 65 36 31 34 64 65 64 39 22 2c 22 63 6f 6d 70 61 6e 79 49 64 22 3a 6e 75 6c 6c 2c 22 69 6e 74 65 72 6e 61 6c 22 3a 66 61 6c 73 65 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 64 73 5f 61 22 3a 22 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 22 2c 22 68 61 73 5f 63 6f 6e 73 65 6e 74 22 3a 74 72 75 65 2c Data Ascii: {"id":"9a4c2b01491d376ff5b047223c549e83","userId":"e726a659-b15e-4860-84f0-a4f96f541646","anonymousId":"8cf4a3fa-16fd-4955-8be0-52cae614ded9","companyId":null,"internal":false,"attributes":{"ds_a":"e726a659-b15e-4860-84f0-a4f96f541646","has_consent":true,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
338	192.168.2.5	50257	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:55 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPfiDhCPAWIAAVGA._747cUV2B9rtMigh7-bkZmx-j7rp-CNJywL9Tqj-f2c&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: M5qGt2e+8YgaTrhCNpvZmg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:56 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:56 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
339	192.168.2.5	50256	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:55 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:55 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 33 36 39 37 32 30 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713961369720,"level":"INFO","message":"WS Reconnec
2024-04-24 12:22:56 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Wed, 24 Apr 2024 12:22:56 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 22 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
340	192.168.2.5	50259	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:56 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=2&ClientTime=1713961375538&PageStart=1713961370476&PrevBundleTime=1713961374014&LastActivity=747&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 12951 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:56 UTC	12951	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 7d 89 97 9b b6 d7 e8 bf e2 6f be 13 b7 3d 9f b1 d1 86 20 7d 7e 79 59 a6 69 da ac 9d a4 7b 8f 8f 00 e1 21 83 c1 01 3c 4b 7e af ef 6f 7f 57 c2 0b 08 af 33 49 93 b6 d3 49 b1 2d ae a4 ab bb e9 5e a1 2b fe 73 74 22 df 1d dd c5 bd a3 9f 4e 65 7a 74 d7 25 76 ef e8 f8 bc 2c 8e ee fe f6 9f a3 ef e3 34 3c ba cb dd de d1 fd 7c ac 8a 7e b3 7b 08 fe 14 14 72 ff f8 a3 56 eb cf de 26 70 a6 c1 31 de 00 ee d9 2b 70 d4 c3 2e dd 00 e7 b4 e0 7a bf 1d f5 83 a2 b0 d0 f4 2a 88 4f f3 ce 7f 3a 61 5c 4c 13 71 75 b7 13 25 f2 f2 6b 7d b5 c2 38 97 41 19 67 e9 dd 4e 90 25 b3 49 fa 75 67 2c a6 77 3b 76 9f e5 72 f2 75 e7 cf a3 5e b3 99 59 d2 f9 9f ce 29 86 e6 26 22 1f c7 a9 55 66 00 8e 4c f0 f2 dd 15 39 7b 7f d3 4e e7 ad ec d9 27 8f e3 b7 17 6f 97 50 d0 Data Ascii: }o= }~yYi{!<K~oW3II-^+st"Nezt%v,4<\|~{rV&p1+p.z*O:a\Lqu%k}8AgN%Iug,w;vru^Y)&"UfL9{N'oP
2024-04-24 12:22:56 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:56 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:56 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 36 34 38 32 7d 0a Data Ascii: {"BundleTime":1713961376482}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
341	192.168.2.5	50262	216.137.39.52	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:56 UTC	663	OUT	POST /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive Content-Length: 443 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:56 UTC	443	OUT	Data Raw: 65 6d 62 65 64 5f 69 64 3d 32 37 62 38 33 68 65 72 6b 35 74 76 26 63 6c 69 65 6e 74 5f 69 64 3d 66 36 7a 75 69 7a 64 79 68 78 72 6d 37 72 26 63 6f 6e 73 65 6e 74 5f 69 64 3d 68 61 73 5f 63 6f 6e 73 65 6e 74 26 75 73 65 72 5f 69 64 3d 65 37 32 36 61 36 35 39 2d 62 31 35 65 2d 34 38 36 30 2d 38 34 66 30 2d 61 34 66 39 36 66 35 34 31 36 34 36 26 73 65 73 73 69 6f 6e 53 74 61 72 74 65 64 3d 31 37 31 33 39 36 31 33 37 32 26 74 61 72 67 65 74 69 6e 67 5f 63 6f 6e 74 65 78 74 3d 25 37 42 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 64 65 35 36 64 32 63 31 2d 37 30 65 61 2d 34 35 66 37 2d 62 61 30 35 2d 66 37 31 63 61 30 32 64 32 63 64 64 25 32 32 25 32 43 25 32 32 70 61 67 65 55 72 6c 25 32 32 25 33 41 25 32 32 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: embed_id=27b83herk5tv&client_id=f6zuizdyhxrm7r&consent_id=has_consent&user_id=e726a659-b15e-4860-84f0-a4f96f541646&sessionStarted=1713961372&targeting_context=%7B%22sessionId%22%3A%22de56d2c1-70ea-45f7-ba05-f71ca02d2cdd%22%2C%22pageUrl%22%3A%22https%3A%2F
2024-04-24 12:22:57 UTC	897	IN	HTTP/1.1 200 OK Content-Type: application/json;charset=utf-8 Transfer-Encoding: chunked Connection: close date: Wed, 24 Apr 2024 12:22:56 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains requestid: b5728a5c6e00963c vary: Accept-Encoding x-envoy-upstream-service-time: 215 server: istio-envoy X-Cache: Miss from cloudfront Via: 1.1 f03e10929a5a49b0e892d7ac0a147ac8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: n4APfJlU5jcAY5gJJ3OfUTUPID3N-1w34RfifyeO-chW6AkCdu3vZg==
2024-04-24 12:22:57 UTC	15487	IN	Data Raw: 34 31 35 31 0d 0a 7b 22 6c 6f 63 61 74 69 6f 6e 22 3a 7b 22 69 70 22 3a 22 31 35 34 2e 31 36 2e 31 30 35 2e 33 36 22 2c 22 63 69 74 79 22 3a 22 4c 61 73 20 56 65 67 61 73 22 2c 22 73 75 62 64 69 76 69 73 69 6f 6e 22 3a 22 4e 65 76 61 64 61 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 67 64 70 72 41 70 70 6c 69 63 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 6d 65 74 72 6f 43 6f 64 65 22 3a 38 33 39 2c 22 70 6f 73 74 61 6c 43 6f 64 65 22 3a 22 38 39 31 30 31 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 36 2e 31 36 38 35 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 31 31 35 2e 31 31 36 34 7d 2c 22 74 6f 6b 65 6e 52 65 73 75 6c 74 22 3a 7b 22 61 63 63 65 73 73 54 6f 6b 65 Data Ascii: 4151{"location":{"ip":"154.16.105.36","city":"Las Vegas","subdivision":"Nevada","country":"US","countryName":"United States","gdprApplicable":false,"metroCode":839,"postalCode":"89101","latitude":36.1685,"longitude":-115.1164},"tokenResult":{"accessToke
2024-04-24 12:22:57 UTC	1242	IN	Data Raw: 34 37 7d 2c 22 65 73 22 3a 7b 22 63 6f 6e 73 65 6e 74 44 65 63 6c 69 6e 65 64 4d 65 73 73 61 67 65 22 3a 22 44 6f 63 75 53 69 67 6e 20 73 65 20 70 72 65 6f 63 75 70 61 20 70 6f 72 20 6c 61 20 74 72 61 6e 73 70 61 72 65 6e 63 69 61 20 79 20 6c 61 20 70 72 69 76 61 63 69 64 61 64 20 64 65 20 73 75 73 20 63 6c 69 65 6e 74 65 73 2e 20 50 61 72 61 20 70 6f 64 65 72 20 75 73 61 72 20 6e 75 65 73 74 72 61 20 66 75 6e 63 69 c3 b3 6e 20 64 65 20 63 68 61 74 62 6f 74 2c 20 64 65 62 65 73 20 68 61 62 69 6c 69 74 61 72 20 6c 61 73 20 63 6f 6f 6b 69 65 73 20 66 75 6e 63 69 6f 6e 61 6c 65 73 2e 20 53 69 6e 20 65 6d 62 61 72 67 6f 2c 20 70 75 65 64 65 73 20 64 65 73 68 61 62 69 6c 69 74 61 72 6c 61 73 20 63 75 61 6e 64 6f 20 6e 6f 20 65 73 74 c3 a9 73 20 63 68 61 74 65 Data Ascii: 47},"es":{"consentDeclinedMessage":"DocuSign se preocupa por la transparencia y la privacidad de sus clientes. Para poder usar nuestra funcin de chatbot, debes habilitar las cookies funcionales. Sin embargo, puedes deshabilitarlas cuando no ests chate
2024-04-24 12:22:57 UTC	16384	IN	Data Raw: 34 34 30 30 0d 0a 2e 20 50 6f 75 72 20 73 6f 75 74 65 6e 69 72 20 6c 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 61 6c 69 74 c3 a9 73 20 64 65 20 6e 6f 74 72 65 20 43 68 61 74 62 6f 74 2c 20 76 6f 75 73 20 64 65 76 65 7a 20 61 63 74 69 76 65 72 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 2e 20 54 6f 75 74 65 66 6f 69 73 2c 20 76 6f 75 73 20 70 6f 75 76 65 7a 20 6c 65 73 20 64 c3 a9 73 61 63 74 69 76 65 72 20 6c 6f 72 73 71 75 65 20 6c 65 20 63 6c 61 76 61 72 64 61 67 65 20 65 73 74 20 74 65 72 6d 69 6e c3 a9 2e 20 41 63 74 69 76 65 7a 20 6c 65 73 20 63 6f 6f 6b 69 65 73 20 66 6f 6e 63 74 69 6f 6e 6e 65 6c 73 20 65 6e 20 61 6c 6c 61 6e 74 20 64 61 6e 73 20 c2 ab c2 a0 50 61 72 61 6d c3 a8 74 72 65 73 20 64 65 73 20 63 6f 6f 6b 69 65 Data Ascii: 4400. Pour soutenir les fonctionnalits de notre Chatbot, vous devez activer les cookies fonctionnels. Toutefois, vous pouvez les dsactiver lorsque le clavardage est termin. Activez les cookies fonctionnels en allant dans Paramtres des cookie
2024-04-24 12:22:57 UTC	1032	IN	Data Raw: 65 41 6e 61 6c 79 74 69 63 73 53 65 74 74 69 6e 67 73 22 3a 7b 22 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 74 72 61 63 6b 69 6e 67 4e 61 6d 65 22 3a 6e 75 6c 6c 2c 22 69 6e 64 69 76 69 64 75 61 6c 45 76 65 6e 74 73 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 65 6e 61 62 6c 65 64 45 76 65 6e 74 4d 61 70 70 69 6e 67 73 22 3a 7b 7d 7d 2c 22 63 6f 6e 6e 65 63 74 69 6f 6e 73 22 3a 7b 22 66 61 63 65 62 6f 6f 6b 41 6e 61 6c 79 74 69 63 73 22 3a 66 61 6c 73 65 2c 22 6d 69 63 72 6f 73 6f 66 74 54 65 61 6d 73 22 3a 66 61 6c 73 65 2c 22 77 6f 72 64 70 72 65 73 73 22 3a 66 61 6c 73 65 2c 22 6c 65 61 6e 64 61 74 61 22 3a 66 61 6c 73 65 2c 22 77 6f 72 64 70 72 65 73 73 56 32 22 3a 66 61 6c 73 65 2c 22 66 69 76 65 5f 62 79 5f 66 69 76 65 22 3a 66 61 6c 73 65 2c Data Ascii: eAnalyticsSettings":{"enabled":true,"trackingName":null,"individualEventsEnabled":false,"enabledEventMappings":{}},"connections":{"facebookAnalytics":false,"microsoftTeams":false,"wordpress":false,"leandata":false,"wordpressV2":false,"five_by_five":false,
2024-04-24 12:22:57 UTC	11012	IN	Data Raw: 32 61 66 63 0d 0a 33 34 38 38 32 2c 35 32 33 34 38 39 35 2c 35 32 33 34 39 30 31 2c 35 32 33 34 39 30 33 2c 35 32 33 34 39 30 34 2c 35 32 33 34 39 30 39 2c 35 32 33 34 39 31 31 2c 35 32 33 34 39 31 33 2c 35 32 34 33 33 34 39 2c 35 32 34 33 36 34 33 2c 35 32 34 33 36 34 36 2c 35 32 34 33 36 34 37 2c 35 32 34 33 36 34 38 2c 35 32 34 33 37 30 30 2c 35 32 34 33 37 30 31 2c 35 32 34 33 37 30 32 2c 35 32 34 33 37 30 33 2c 35 32 34 34 31 30 36 2c 35 32 34 34 31 35 32 2c 35 32 34 35 36 31 30 2c 35 32 34 36 31 37 36 2c 35 32 34 37 35 33 35 2c 35 32 34 37 35 39 34 2c 35 32 34 37 37 38 36 2c 35 32 34 37 37 38 37 2c 35 32 35 35 32 35 36 2c 35 32 35 35 38 39 35 2c 35 32 35 35 39 30 36 2c 35 32 35 35 39 32 33 2c 35 32 35 36 31 32 39 2c 35 32 35 37 34 39 36 2c 35 32 35 Data Ascii: 2afc34882,5234895,5234901,5234903,5234904,5234909,5234911,5234913,5243349,5243643,5243646,5243647,5243648,5243700,5243701,5243702,5243703,5244106,5244152,5245610,5246176,5247535,5247594,5247786,5247787,5255256,5255895,5255906,5255923,5256129,5257496,525
2024-04-24 12:22:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
342	192.168.2.5	50260	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:56 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 563 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:56 UTC	563	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 64 64 30 34 36 35 36 35 2d 62 65 37 34 2d 34 31 65 33 2d 61 66 65 38 2d 66 35 63 65 31 33 65 66 61 34 33 39 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 41 50 49 25 32 30 45 76 65 6e 74 25 32 30 46 69 72 65 64 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 33 66 31 37 66 61 32 35 2d 33 37 63 39 2d 34 39 37 32 2d 61 39 64 31 2d 65 30 64 39 39 61 66 63 61 32 62 30 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 34 32 38 31 33 63 37 34 2d 33 39 63 35 2d Data Ascii: metric_payload=%7B%22id%22%3A%22dd046565-be74-41e3-afe8-f5ce13efa439%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20API%20Event%20Fired%22%2C%22sessionId%22%3A%223f17fa25-37c9-4972-a9d1-e0d99afca2b0%22%2C%22instanceId%22%3A%2242813c74-39c5-
2024-04-24 12:22:57 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:56 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 68327e19a47aeaa6 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 16 server: istio-envoy connection: close
2024-04-24 12:22:57 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
343	192.168.2.5	50261	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:56 UTC	679	OUT	POST /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 572 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:56 UTC	572	OUT	Data Raw: 69 6e 69 74 5f 65 76 65 6e 74 3d 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 69 6e 69 74 25 32 32 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 33 66 31 37 66 61 32 35 2d 33 37 63 39 2d 34 39 37 32 2d 61 39 64 31 2d 65 30 64 39 39 61 66 63 61 32 62 30 25 32 32 25 32 43 25 32 32 69 6e 73 74 61 6e 63 65 49 64 25 32 32 25 33 41 25 32 32 34 32 38 31 33 63 37 34 2d 33 39 63 35 2d 34 66 35 34 2d 38 63 65 65 2d 34 66 35 62 32 38 61 62 36 33 34 37 25 32 32 25 32 43 25 32 32 63 6f 6e 74 65 78 74 25 32 32 25 33 41 25 37 42 25 32 32 75 72 6c 25 32 32 25 33 41 Data Ascii: init_event=%7B%22eventName%22%3A%22%5BV2%5D%20-%20init%22%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%223f17fa25-37c9-4972-a9d1-e0d99afca2b0%22%2C%22instanceId%22%3A%2242813c74-39c5-4f54-8cee-4f5b28ab6347%22%2C%22context%22%3A%7B%22url%22%3A
2024-04-24 12:22:57 UTC	690	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:22:56 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 4ac4eae3e8f0b85 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 15 server: istio-envoy connection: close
2024-04-24 12:22:57 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
344	192.168.2.5	50263	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:56 UTC	351	OUT	GET /identify HTTP/1.1 Host: event.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:57 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift5510bea4392896e7112ece354a5 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 444 x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:22:56 GMT server: istio-envoy connection: close
2024-04-24 12:22:57 UTC	444	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 69 64 65 6e 74 69 66 79 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a 3c 2f 74 68 3e 3c 74 64 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/identify</td></tr><tr><th>STATUS:</th><td

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
345	192.168.2.5	50266	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:58 UTC	623	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=2&ClientTime=1713961375538&PageStart=1713961370476&PrevBundleTime=1713961374014&LastActivity=747&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:58 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:58 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:58 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
346	192.168.2.5	50265	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:58 UTC	810	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAPziDhCPAWIAAVGA.td7Xsm42_EzvvuMWxFgXD2NWhdeimFFsu_Nz357mBoA&remote_ip=18.232.245.220&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: fuDPoXdIM7slBK8oJ5L8IQ== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:58 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:58 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
347	192.168.2.5	50268	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:58 UTC	898	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=9&ClientTime=1713961376387&PageStart=1713961346738&PrevBundleTime=1713961368130&LastActivity=17462&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 1045 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:58 UTC	1045	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 58 59 6f db 46 10 fe 2b 2c 1f 84 04 58 52 7b 1f 4a d5 c2 76 8d 36 70 0e a3 72 60 14 45 1e 78 ac 64 c2 14 29 93 94 14 27 c8 7f ef 50 b0 65 92 3a 6a 17 75 51 d8 26 f5 c2 d1 37 33 cb fd e6 5a 7e 73 47 f6 ca 1d 18 e4 9e 5f d8 cc 1d 10 6e 24 45 ee f1 a2 2a dd c1 9f df dc 93 24 8b dd 81 50 c8 3d 28 26 b5 88 10 e4 96 36 1d bb 88 11 49 95 2f 90 91 9f 5b da df d1 36 35 30 3a cb 93 ac b2 45 3e af 6e 95 29 be bd 08 98 01 a1 a2 cc a7 66 7d ad 24 dc c7 6b 81 52 08 3f cc 5b 6a 83 85 dd e3 af 63 fd c5 e1 8b c3 17 87 2f 0e 37 1d b2 ff 8f c3 69 3e 2f ed fe 32 fa 2f 39 63 f7 82 c1 92 2e aa 6a 56 0e fa fd a2 f4 c7 f3 34 2d ab bc b8 f6 a3 7c da 2f 6c d4 0f e7 59 9c da fe 82 fe fc b1 98 bc 8d 87 84 1e 9e f2 e3 de a7 d2 16 f0 44 c7 21 25 56 5a Data Ascii: XYoF+,XR{Jv6pr`Exd)'Pe:juQ&73Z~sG_n$E*$P=(&6I/[650:E>n)f}$kR?[jc/7i>/2/9c.jV4-\|/lYD!%VZ
2024-04-24 12:22:58 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:58 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:58 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 38 34 39 33 7d 0a Data Ascii: {"BundleTime":1713961378493}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
348	192.168.2.5	50264	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:58 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:58 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 33 37 30 36 36 36 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713961370666,"level":"INFO","message":"WS Reconnec
2024-04-24 12:22:58 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Wed, 24 Apr 2024 12:22:58 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 4 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
349	192.168.2.5	50267	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:58 UTC	897	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=9&ClientTime=1713961376385&PageStart=1713961346738&PrevBundleTime=1713961368130&IsNewSession=true&SkipResponseBody=true HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 5922 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:58 UTC	5922	OUT	Data Raw: 7b 22 53 65 71 22 3a 39 2c 22 57 68 65 6e 22 3a 31 34 39 36 32 2c 22 45 76 74 73 22 3a 5b 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 31 2c 22 73 65 6c 66 22 2c 33 31 36 32 37 2e 35 2c 39 36 5d 2c 22 57 68 65 6e 22 3a 31 34 39 36 32 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6f 75 74 22 2c 33 31 36 32 37 2e 32 30 30 30 30 30 30 30 30 30 31 2c 39 36 2c 33 31 37 32 33 2e 32 39 39 39 39 39 39 39 39 39 39 2c 33 31 37 32 34 2e 30 39 39 39 39 39 39 39 39 39 37 37 2c 30 5d 2c 22 57 68 65 6e 22 3a 31 34 39 36 32 7d 2c 7b 22 4b 69 6e 64 22 3a 35 37 2c 22 41 72 67 73 22 3a 5b 31 32 2c 22 70 6f 69 6e 74 65 72 6c 65 61 76 65 22 2c 33 31 36 32 37 2e 32 30 30 30 30 30 30 30 30 30 31 2c 39 36 2c 33 31 Data Ascii: {"Seq":9,"When":14962,"Evts":[{"Kind":57,"Args":[11,"self",31627.5,96],"When":14962},{"Kind":57,"Args":[12,"pointerout",31627.20000000001,96,31723.29999999999,31724.099999999977,0],"When":14962},{"Kind":57,"Args":[12,"pointerleave",31627.20000000001,96,31
2024-04-24 12:22:58 UTC	307	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Cross-Origin-Resource-Policy: cross-origin Date: Wed, 24 Apr 2024 12:22:58 GMT Content-Length: 0 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
350	192.168.2.5	50269	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:59 UTC	808	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAMAcDxCPAWIAAVGA.BHPkWc-Kn1KZVuV1Liy4D-2U7vnEsm9uQ-cO7uQisFM&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: unRneDPW9c6AMS80cxGDag== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:22:59 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:22:59 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
351	192.168.2.5	50270	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:59 UTC	879	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=6&ClientTime=1713961377939&PageStart=1713961356089&PrevBundleTime=1713961372813&LastActivity=14530&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 943 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:59 UTC	943	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 57 6b 6f db 36 14 fd 2b 1a 81 0a 2d 20 c9 7c 93 72 e7 15 4e e2 6e 43 9a c5 ab 5d 04 c3 50 14 7a 50 b6 16 59 72 44 da ae fb f8 ef a3 8d d4 b1 6c e7 d1 a1 9f 96 88 82 60 5f 5d de 63 de 73 ef 21 fd 19 0c d4 15 68 73 0f 5c 8c 55 09 da a1 64 d4 03 bd b9 d1 a0 fd f7 67 70 9a 97 29 68 33 e1 81 6e 3d 5a 99 10 f6 c0 b4 ca 4b a3 ea 6a 66 80 87 84 64 22 60 1e a7 f6 63 88 69 80 c3 cd 75 6d 61 1b 83 10 1e 7c bf 8d f4 d5 bb 1b a2 50 d1 5c 1d 00 69 84 7c 42 79 42 79 42 79 42 f9 3e 94 49 35 d3 ea b0 84 1d 40 10 f0 db 85 1e 04 40 1e e2 65 7f c5 d8 98 a9 6e b7 5a b5 0e b2 59 51 68 53 d5 cb 20 a9 26 ad 5a 25 ad 78 56 a6 85 6a cd f1 ab f3 7a f4 7b da 41 f8 a8 4f 7b ee 3b ad 6a fb 0d 67 31 46 8a 2b 9f c5 02 fa 94 88 d8 97 3c c6 3e 4f b1 8c 21 Data Ascii: Wko6+- \|rNnC]PzPYrDl`_]cs!hs\Udgp)h3n=ZKjfd"`ciuma\|P\i\|ByByByB>I5@@enZYQhS &Z%xVjz{AO{;jg1F+<>O!
2024-04-24 12:22:59 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:22:59 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:59 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 37 39 32 35 30 7d 0a Data Ascii: {"BundleTime":1713961379250}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
352	192.168.2.5	50274	216.137.39.17	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:59 UTC	362	OUT	GET /widget_bootstrap HTTP/1.1 Host: bootstrap.driftapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:59 UTC	967	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html;charset=iso-8859-1 Content-Length: 452 Connection: close access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift93449d14b9ea2026284433bfe81 cache-control: must-revalidate,no-cache,no-store x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:22:59 GMT server: istio-envoy X-Cache: Error from cloudfront Via: 1.1 2d00df3f936d7626d50853ebd0e73b30.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P2 X-Amz-Cf-Id: JqVva3vsI52IiSntQG_s4FfypmM7lqivk8rG6j_Z5d3cG_Kl9bl0ow==
2024-04-24 12:22:59 UTC	452	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 77 69 64 67 65 74 5f 62 6f 6f 74 73 74 72 61 70 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c 74 72 3e 3c 74 68 3e 53 54 41 54 55 53 3a Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/widget_bootstrap</td></tr><tr><th>STATUS:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
353	192.168.2.5	50275	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:59 UTC	643	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=c1879bc7-44d3-4b40-8df8-9976415946a9&Seq=9&ClientTime=1713961376387&PageStart=1713961346738&PrevBundleTime=1713961368130&LastActivity=17462&IsNewSession=true&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:59 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: POST,OPTIONS Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:22:59 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:22:59 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
354	192.168.2.5	50273	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:59 UTC	378	OUT	GET /monitoring/metrics/widget/init/v3 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:59 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftb1c971c447fa7f98c9c25f7580f cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 469 x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:22:59 GMT server: istio-envoy connection: close
2024-04-24 12:22:59 UTC	469	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 77 69 64 67 65 74 2f 69 6e 69 74 2f 76 33 3c 2f 74 64 3e 3c 2f 74 72 Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/widget/init/v3</td></tr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
355	192.168.2.5	50272	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:59 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:22:59 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift72802504229a4fbfbb4aaca8081 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:22:59 GMT server: istio-envoy connection: close
2024-04-24 12:22:59 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
356	192.168.2.5	50276	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:22:59 UTC	625	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7ff1ae04-7860-4db7-81bb-7d9e245ffa58&Seq=6&ClientTime=1713961377939&PageStart=1713961356089&PrevBundleTime=1713961372813&LastActivity=14530&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:00 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:23:00 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:23:00 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
357	192.168.2.5	50278	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:00 UTC	808	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAMAcDxCPAWIAAVGA.BHPkWc-Kn1KZVuV1Liy4D-2U7vnEsm9uQ-cO7uQisFM&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: h+gymkCyX8MhuEjvIQV7Cg== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:23:01 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:23:01 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
358	192.168.2.5	50277	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:01 UTC	676	OUT	POST /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 629 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:01 UTC	629	OUT	Data Raw: 6d 65 74 72 69 63 5f 70 61 79 6c 6f 61 64 3d 25 37 42 25 32 32 69 64 25 32 32 25 33 41 25 32 32 33 31 65 38 35 66 39 31 2d 62 32 37 33 2d 34 63 37 30 2d 38 62 34 37 2d 37 66 35 37 34 31 34 34 63 32 38 63 25 32 32 25 32 43 25 32 32 65 76 65 6e 74 73 25 32 32 25 33 41 25 35 42 25 37 42 25 32 32 65 76 65 6e 74 4e 61 6d 65 25 32 32 25 33 41 25 32 32 25 35 42 56 32 25 35 44 25 32 30 2d 25 32 30 65 6e 64 75 73 65 72 5f 62 6f 6f 74 73 74 72 61 70 25 32 32 25 32 43 25 32 32 6f 72 67 49 64 25 32 32 25 33 41 34 37 36 31 36 25 32 43 25 32 32 65 6d 62 65 64 49 64 25 32 32 25 33 41 25 32 32 32 37 62 38 33 68 65 72 6b 35 74 76 25 32 32 25 32 43 25 32 32 73 65 73 73 69 6f 6e 49 64 25 32 32 25 33 41 25 32 32 33 66 31 37 66 61 32 35 2d 33 37 63 39 2d 34 39 37 32 2d 61 39 Data Ascii: metric_payload=%7B%22id%22%3A%2231e85f91-b273-4c70-8b47-7f574144c28c%22%2C%22events%22%3A%5B%7B%22eventName%22%3A%22%5BV2%5D%20-%20enduser_bootstrap%22%2C%22orgId%22%3A47616%2C%22embedId%22%3A%2227b83herk5tv%22%2C%22sessionId%22%3A%223f17fa25-37c9-4972-a9
2024-04-24 12:23:01 UTC	691	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:23:01 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: b58344e608a0993a vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 13 server: istio-envoy connection: close
2024-04-24 12:23:01 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
359	192.168.2.5	50279	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:01 UTC	878	OUT	POST /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=3&ClientTime=1713961380536&PageStart=1713961370476&PrevBundleTime=1713961376482&LastActivity=4260&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive Content-Length: 372 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:01 UTC	372	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a 85 90 6d 4b c3 30 10 c7 bf 4a bc 57 13 d2 36 0f 6d d2 76 22 0c 37 14 e6 13 eb 64 88 88 a4 6d b6 15 b3 66 ae d5 f9 b0 7d 77 23 a8 9b af 24 c7 71 1c bf fb df fd f3 01 99 7e 82 94 63 98 cc 75 0d a9 a0 11 c3 30 78 69 1b 48 ef 3e 60 58 d5 25 a4 61 8c a1 b7 9a 7d b5 a0 b0 75 63 8d 06 0c c6 ce 5c ee 67 0f fd d1 78 33 1a 64 9b 81 63 ef f7 85 b6 f8 47 21 e2 bf 0a 3b 22 8a e2 1d 41 09 d9 2d 99 57 65 e9 90 3d 34 09 77 68 92 ec 91 6d bb 6c d2 20 58 af d7 7e 69 8b e7 a6 9a d5 7e 61 17 c1 72 55 bd a8 e2 cd 5d f8 3f 42 99 e0 38 21 d2 15 31 c1 94 b0 10 03 f5 b9 4f dc b4 8b a3 83 fe d5 c9 f8 f6 7a 80 e6 ed c2 1c 03 0e 63 e9 08 36 cd 19 d5 42 7b 51 2e 89 17 72 99 7b b1 c8 99 27 4a 16 e7 84 cb 22 67 c2 69 4b ca 13 41 b9 24 a1 14 18 74 ed dd 64 Data Ascii: mK0JW6mv"7dmf}w#$q~cu0xiH>`X%a}uc\gx3dcG!;"A-We=4whml X~i~arU]?B8!1Ozc6B{Q.r{'J"giKA$td
2024-04-24 12:23:01 UTC	311	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.docusign.com Content-Type: application/json; charset=utf-8 Date: Wed, 24 Apr 2024 12:23:01 GMT Content-Length: 29 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:23:01 UTC	29	IN	Data Raw: 7b 22 42 75 6e 64 6c 65 54 69 6d 65 22 3a 31 37 31 33 39 36 31 33 38 31 36 34 35 7d 0a Data Ascii: {"BundleTime":1713961381645}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
360	192.168.2.5	50280	3.225.21.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:01 UTC	1368	OUT	GET /js_tracking?url=https%3A%2F%2Fwww.docusign.com%2Fprivacy&uid=lfPdMw05TS1QTnyEaKtDBA&v=1&host=https%3A%2F%2Fwww.docusign.com HTTP/1.1 Host: tags.srv.stackadapt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.docusign.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.docusign.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id=s%3A0-ccfb22a2-9a9c-5cf1-5bd0-627a80ad7892.wM2o6RDW3d0QvPe7vaEBhtRh6MakEGqUvn2JOUKZBks; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v2=s%3AzPsiopqcXPFb0GJ6gK14kpoQaSQ.cHhB8NNA%2FJ8W7U%2FLaN8tTEDVIwvsml2a7yWphXqbQQw; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s; sa-user-id-v3=s%3AAQAKIN7g2bUGF1TGb_YY17xB2Rujcl9JDEbHsJAEs1vDtXDFEHwYBCD98qOxBjABOgT87-jmQgRzE-ak.8Q7htjT9MGVvY1zrRHVEBz%2FKoU3j4332YZcJJ%2FiA09s
2024-04-24 12:23:01 UTC	246	IN	HTTP/1.1 204 No Content Date: Wed, 24 Apr 2024 12:23:01 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: * Access-Control-Allow-Methods: GET Access-Control-Allow-Origin: https://www.docusign.com

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
361	192.168.2.5	50281	34.193.113.164	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:02 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:02 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 33 37 35 36 37 39 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713961375679,"level":"INFO","message":"WS Reconnec
2024-04-24 12:23:02 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Wed, 24 Apr 2024 12:23:02 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 5 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
362	192.168.2.5	50282	3.94.218.138	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:02 UTC	375	OUT	GET /monitoring/metrics/event3/bulk HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:02 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: driftae731b24263a53805c7dd6467c9 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:23:02 GMT server: istio-envoy connection: close
2024-04-24 12:23:02 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 65 76 65 6e 74 33 2f 62 75 6c 6b 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/event3/bulk</td></tr><

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
363	192.168.2.5	50283	35.186.194.58	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:02 UTC	624	OUT	GET /rec/bundle/v2?OrgId=12BP4E&UserId=2fb21e6e-5b70-437b-86b2-6d28b037cb26&SessionId=b2abeec2-85fb-48e9-a672-7141db872fb2&PageId=7e63c86c-5cc6-4a5f-bc6c-fb1a8f4523dc&Seq=3&ClientTime=1713961380536&PageStart=1713961370476&PrevBundleTime=1713961376482&LastActivity=4260&ContentEncoding=gzip HTTP/1.1 Host: rs.fullstory.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:02 UTC	280	IN	HTTP/1.1 405 Method Not Allowed Allow: OPTIONS,POST Content-Type: text/plain; charset=utf-8 X-Content-Type-Options: nosniff Date: Wed, 24 Apr 2024 12:23:02 GMT Content-Length: 19 Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-24 12:23:02 UTC	19	IN	Data Raw: 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 0a Data Ascii: Method Not Allowed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
364	192.168.2.5	50285	44.207.238.46	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:03 UTC	808	OUT	GET /ws/websocket?session_token=SFMyNTY.g2gDdAAAAAVkAAJpZG0AAAATNDc2MTYtMjE3MTAzMzQ2NDktMmQABm9yZ19pZG0AAAAFNDc2MTZkAAlzY29wZV9zZXRtAAAACGVuZF91c2VyZAAHdXNlcl9pZG0AAAALMjE3MTAzMzQ2NDlkAAl1c2VyX3R5cGVkAAhlbmRfdXNlcm4GAMAcDxCPAWIAAVGA.BHPkWc-Kn1KZVuV1Liy4D-2U7vnEsm9uQ-cO7uQisFM&remote_ip=3.229.58.120&vsn=2.0.0 HTTP/1.1 Host: 47616-16.chat.api.drift.com Connection: Upgrade Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Upgrade: websocket Origin: https://js.driftt.com Sec-WebSocket-Version: 13 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Sec-WebSocket-Key: CDE5mmhd4g39eCM62dO5Dw== Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bits
2024-04-24 12:23:04 UTC	196	IN	HTTP/1.1 426 Upgrade Required Date: Wed, 24 Apr 2024 12:23:04 GMT Content-Length: 0 Connection: close cache-control: max-age=0, private, must-revalidate server: Cowboy upgrade: websocket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
365	192.168.2.5	50284	50.16.7.188	443	2672	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:04 UTC	676	OUT	POST /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive Content-Length: 335 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:04 UTC	335	OUT	Data Raw: 6d 65 74 72 69 63 73 3d 25 35 42 25 37 42 25 32 32 76 61 6c 75 65 25 32 32 25 33 41 32 32 31 33 2e 33 39 39 39 39 39 39 39 39 39 36 35 25 32 43 25 32 32 64 69 6d 65 6e 73 69 6f 6e 73 25 32 32 25 33 41 25 37 42 25 32 32 74 79 70 65 25 32 32 25 33 41 25 32 32 62 75 63 6b 65 74 25 32 32 25 32 43 25 32 32 62 75 63 6b 65 74 73 25 32 32 25 33 41 25 32 32 35 30 30 25 32 43 25 32 30 38 30 30 25 32 43 25 32 30 31 30 30 30 25 32 43 25 32 30 31 32 30 30 25 32 43 25 32 30 31 35 30 30 25 32 43 25 32 30 32 30 30 30 25 32 43 25 32 30 33 30 30 30 25 32 43 25 32 30 35 30 30 30 25 32 43 25 32 30 36 30 30 30 25 32 43 25 32 30 37 30 30 30 25 32 43 25 32 30 38 30 30 30 25 32 43 25 32 30 39 30 30 30 25 32 43 25 32 30 31 30 30 30 30 25 32 43 25 32 30 31 31 30 30 30 25 32 43 25 Data Ascii: metrics=%5B%7B%22value%22%3A2213.399999999965%2C%22dimensions%22%3A%7B%22type%22%3A%22bucket%22%2C%22buckets%22%3A%22500%2C%20800%2C%201000%2C%201200%2C%201500%2C%202000%2C%203000%2C%205000%2C%206000%2C%207000%2C%208000%2C%209000%2C%2010000%2C%2011000%2C%
2024-04-24 12:23:04 UTC	690	IN	HTTP/1.1 200 OK date: Wed, 24 Apr 2024 12:23:04 GMT access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains content-type: application/json;charset=utf-8 requestid: 9cb39cfecb79f563 vary: Accept-Encoding content-length: 25 x-envoy-upstream-service-time: 1 server: istio-envoy connection: close
2024-04-24 12:23:04 UTC	25	IN	Data Raw: 7b 22 72 65 73 75 6c 74 22 3a 22 4f 4b 22 2c 22 6f 6b 22 3a 74 72 75 65 7d Data Ascii: {"result":"OK","ok":true}

Session ID	Source IP	Source Port	Destination IP	Destination Port
366	192.168.2.5	50286	34.193.113.164	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:04 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 425 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:04 UTC	425	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 33 37 38 33 33 30 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713961378330,"level":"INFO","message":"WS Reconnec
2024-04-24 12:23:05 UTC	245	IN	HTTP/1.1 204 No Content server: istio-envoy date: Wed, 24 Apr 2024 12:23:05 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 33 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
367	192.168.2.5	50287	34.193.113.164	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:05 UTC	628	OUT	POST /log HTTP/1.1 Host: log.api.drift.com Connection: keep-alive Content-Length: 885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://js.driftt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://js.driftt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:05 UTC	885	OUT	Data Raw: 7b 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 3a 22 77 69 64 67 65 74 22 2c 22 6f 72 67 49 64 22 3a 34 37 36 31 36 2c 22 65 6e 64 55 73 65 72 49 64 22 3a 30 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 66 61 72 69 2f 35 33 37 2e 33 36 22 2c 22 6c 6f 67 45 76 65 6e 74 73 22 3a 5b 7b 22 74 69 6d 65 73 74 61 6d 70 22 3a 31 37 31 33 39 36 31 33 37 38 39 37 32 2c 22 6c 65 76 65 6c 22 3a 22 49 4e 46 4f 22 2c 22 6d 65 73 73 61 67 65 22 3a 22 57 53 20 52 65 63 6f 6e 6e 65 63 Data Ascii: {"application":"widget","orgId":47616,"endUserId":0,"userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36","logEvents":[{"timestamp":1713961378972,"level":"INFO","message":"WS Reconnec
2024-04-24 12:23:05 UTC	244	IN	HTTP/1.1 204 No Content server: istio-envoy date: Wed, 24 Apr 2024 12:23:05 GMT access-control-allow-origin: https://js.driftt.com vary: Origin access-control-allow-credentials: true x-envoy-upstream-service-time: 2 connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port
368	192.168.2.5	50288	3.94.218.138	443

Timestamp	Bytes transferred	Direction	Data
2024-04-24 12:23:05 UTC	375	OUT	GET /monitoring/metrics/add/bulk/v2 HTTP/1.1 Host: metrics.api.drift.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 12:23:05 UTC	769	IN	HTTP/1.1 405 Method Not Allowed access-control-allow-origin: * access-control-allow-headers: origin, content-type, accept, authorization, auth-token, uber-trace-id, x-amzn-oidc-data, x-version access-control-allow-credentials: true access-control-expose-headers: X-Results-Total-Count,X-Page-Info access-control-allow-methods: GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH access-control-max-age: 1209600 strict-transport-security: max-age=31536000; includeSubDomains allow: POST,OPTIONS requestid: drift85f143849cb8a1aa980eefa7be9 cache-control: must-revalidate,no-cache,no-store content-type: text/html;charset=iso-8859-1 content-length: 466 x-envoy-upstream-service-time: 0 date: Wed, 24 Apr 2024 12:23:04 GMT server: istio-envoy connection: close
2024-04-24 12:23:05 UTC	466	IN	Data Raw: 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 2f 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 68 32 3e 48 54 54 50 20 45 52 52 4f 52 20 34 30 35 20 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 3c 2f 68 32 3e 0a 3c 74 61 62 6c 65 3e 0a 3c 74 72 3e 3c 74 68 3e 55 52 49 3a 3c 2f 74 68 3e 3c 74 64 3e 2f 6d 6f 6e 69 74 6f 72 69 6e 67 2f 6d 65 74 72 69 63 73 2f 61 64 64 2f 62 75 6c 6b 2f 76 32 3c 2f 74 64 3e 3c 2f 74 72 3e 0a 3c Data Ascii: <html><head><meta http-equiv="Content-Type" content="text/html;charset=utf-8"/><title>Error 405 Method Not Allowed</title></head><body><h2>HTTP ERROR 405 Method Not Allowed</h2><table><tr><th>URI:</th><td>/monitoring/metrics/add/bulk/v2</td></tr><

Target ID:	0
Start time:	14:21:34
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:21:37
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2096 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:21:39
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	14:22:25
Start date:	24/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5732 --field-trial-handle=2040,i,1199542501226514941,17978791881889834865,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://chat.docusign.net/drift/?ds_drt_dsa=e726a659-b15e-4860-84f0-a4f96f541646&ds_drt_hfc=1&ds_drt_country=us&ds_drt_noHook=1	HTTP Parser: No favicon
Source: https://s.company-target.com/s/sync?exc=lr	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242	HTTP Parser: No favicon
Source: https://js.driftt.com/core/chat?d=1&region=US&driftEnableLog=false&pageLoadStartTime=1713961341242	HTTP Parser: No favicon
Source: https://js.driftt.com/core?d=1&embedId=27b83herk5tv&eId=27b83herk5tv&region=US&forceShow=false&skipCampaigns=false&sessionId=beefa09b-f868-468b-a53a-0b893aa3998f&sessionStarted=1713961345.61&campaignRefreshToken=07a7ce49-cec6-4279-b8cf-0ed14d8067b8&hideController=false&pageLoadStartTime=1713961341242&mode=CHAT&driftEnableLog=false&secureIframe=false&u=https%3A%2F%2Fchat.docusign.net%2Fdrift%2F%3Fds_drt_dsa%3De726a659-b15e-4860-84f0-a4f96f541646%26ds_drt_hfc%3D1%26ds_drt_country%3Dus%26ds_drt_noHook%3D1	HTTP Parser: No favicon

Source: chromecache_287.2.dr	String found in binary or memory: (function(a,b,c,d){var e={exports:{}};e.exports;(function(){var f=a.fbq;f.execStart=a.performance&&a.performance.now&&a.performance.now();if(!function(){var b=a.postMessage\|\|function(){};if(!f){b({action:"FB_LOG",logType:"Facebook Pixel Error",logMessage:"Pixel code is not installed correctly on this page"},"");"error"in console&&console.error("Facebook Pixel Error: Pixel code is not installed correctly on this page");return!1}return!0}())return;f.__fbeventsModules\|\|(f.__fbeventsModules={},f.__fbeventsResolvedModules={},f.getFbeventsModules=function(a){f.__fbeventsResolvedModules[a]\|\|(f.__fbeventsResolvedModules[a]=f.__fbeventsModules[a]());return f.__fbeventsResolvedModules[a]},f.fbIsModuleLoaded=function(a){return!!f.__fbeventsModules[a]},f.ensureModuleRegistered=function(b,a){f.fbIsModuleLoaded(b)\|\|(f.__fbeventsModules[b]=a)});f.ensureModuleRegistered("signalsFBEventsGetIwlUrl",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("signalsFBEventsGetTier",function(){return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)});f.ensureModuleRegistered("SignalsFBEvents.plugins.iwlbootstrapper",function(){return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var c=f.getFbeventsModules("SignalsFBEventsIWLBootStrapEvent"),d=f.getFbeventsModules("SignalsFBEventsLogging"),g=f.getFbeventsModules("SignalsFBEventsNetworkConfig"),h=f.getFbeventsModules("SignalsFBEventsPlugin"),i=f.getFbeventsModules("signalsFBEventsGetIwlUrl"),j=f.getFbeventsModules("signalsFBEventsGetTier"),k=d.logUserError,l=/^https:\/\/.\.facebook\.com$/i,m="FACEBOOK_IWL_CONFIG_STORAGE_KEY",n=null;e.exports=new h(function(d,e){try{n=a.sessionStorage?a.sessionStorage:{getItem:function(a){return null},removeItem:function(a){},setItem:function(a,b){}}}catch(a){return}function h(c,d){var e=b.createElement("script");e.async=!0;e.onload=function(){if(!a.FacebookIWL\|\|!a.FacebookIWL.init)return;var b=j(g.ENDPOINT);b!=null&&a.FacebookIWL.set&&a.FacebookIWL.set("tier",b);d()};a.FacebookIWLSessionEnd=func
Source: chromecache_355.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Pj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_355.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Yg:d,Wg:e,Xg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!CC&&JC(x[B],n.ye))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_245.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: eu.docusign.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: docucdn-a.akamaihd.net
Source: global traffic	DNS traffic detected: DNS query: a.docusign.com
Source: global traffic	DNS traffic detected: DNS query: api.mixpanel.com
Source: global traffic	DNS traffic detected: DNS query: www.docusign.com
Source: global traffic	DNS traffic detected: DNS query: images.ctfassets.net
Source: global traffic	DNS traffic detected: DNS query: cdn.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: geo.docusign.com
Source: global traffic	DNS traffic detected: DNS query: logx.optimizely.com
Source: global traffic	DNS traffic detected: DNS query: img.en25.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: track.docusign.com
Source: global traffic	DNS traffic detected: DNS query: tags.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: chat.docusign.net
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: js.driftt.com
Source: global traffic	DNS traffic detected: DNS query: s.ml-attr.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: edge.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: rs.fullstory.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: customer.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: conversation.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: metrics.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: targeting.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: attr.ml-api.io
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: bootstrap.driftapi.com
Source: global traffic	DNS traffic detected: DNS query: event.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: 47616-16.chat.api.drift.com
Source: global traffic	DNS traffic detected: DNS query: log.api.drift.com

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Windows Analysis Report
https://eu.docusign.net/Signing/EmailStart.aspx?a=b96d13ec-2a21-48bc-9d6a-d550fcf6c944&acct=6c672226-9cae-4328-af82-c4f5ccd6af86&er=d3b8c1c6-f1fc-4c53-8255-e1e52f25822f