Edit tour

Windows Analysis Report
http://selecthealth.nationsbenefits.com

Overview

General Information

Sample URL:	http://selecthealth.nationsbenefits.com
Analysis ID:	1655112
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1004 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,170447850832103499,14663753469657557301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2284 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://selecthealth.nationsbenefits.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Joe Sandbox Signatures

• Phishing
• Compliance
• Software Vulnerabilities
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://selecthealth.nationsbenefits.com/login

Joe Sandbox AI: Score: 7 Reasons: The brand 'Select Health' is a known health insurance provider., The URL 'selecthealth.nationsbenefits.com' does not match the legitimate domain 'selecthealth.org'., The domain 'nationsbenefits.com' suggests a different entity, which may be a partner or service provider, but it is not the primary domain for Select Health., The presence of 'selecthealth' as a subdomain could be an attempt to mimic the legitimate brand., The URL structure with 'selecthealth' as a subdomain of 'nationsbenefits.com' is suspicious and could indicate phishing. DOM: 1.1.pages.csv

Source: https://selecthealth.nationsbenefits.com/login

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://selecthealth.nationsbenefits.com/login

HTTP Parser: <input type="password" .../> found

Source: https://selecthealth.nationsbenefits.com/login	HTTP Parser: No <meta name="author".. found
Source: https://selecthealth.nationsbenefits.com/login	HTTP Parser: No <meta name="author".. found

Source: https://selecthealth.nationsbenefits.com/login	HTTP Parser: No <meta name="copyright".. found
Source: https://selecthealth.nationsbenefits.com/login	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.149.26:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.149.26:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.119:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.119:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.119:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.149.26:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.70.204.1:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.70.204.1:443 -> 192.168.2.4:49843 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 1MB later: 46MB

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/animate.min.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/style_new.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/kendo_theme.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/legacy_style.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/apple-products.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/Unsubscribe.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/footer-link-pages.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/multiple-wallet.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/store-locator.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/transaction-style.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/instacart.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/dashboard/dashboard.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/react-datepicker.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/Cart/cart.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/Common/common.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/StoreLocator/storelocator.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/market-place.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/banner.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/new-header.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/addressbook.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/healthProfile.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/new-store-locator.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/outcomes.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/utilitiesfaq.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/benefitsusage.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/cardTracking.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/orderHistory.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /css/freshmeals.css HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /public/2437.ff5c62e3.js HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /public/main.59ea8409.js HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /js/custom.js HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /releases/latest/css/free-v4-shims.min.css HTTP/1.1Host: kit-free.fontawesome.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /releases/latest/css/free-v4-font-face.min.css HTTP/1.1Host: kit-free.fontawesome.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /releases/latest/css/free.min.css HTTP/1.1Host: kit-free.fontawesome.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
Source: global traffic	HTTP traffic detected: GET /public/9796.b02f8500.js HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3; AMP_e2430436ab=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI1MGU0ZDExNC1mYWYzLTQ0ZmEtOWE5NC0yYzhiMDZiNDQ3MjYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQzNjMwMzMyODM1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=
Source: global traffic	HTTP traffic detected: GET /public/9588.c2c8d752.js HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3; AMP_e2430436ab=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI1MGU0ZDExNC1mYWYzLTQ0ZmEtOWE5NC0yYzhiMDZiNDQ3MjYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQzNjMwMzMyODM1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=
Source: global traffic	HTTP traffic detected: GET /public/2818.aa718585.js HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3; AMP_e2430436ab=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI1MGU0ZDExNC1mYWYzLTQ0ZmEtOWE5NC0yYzhiMDZiNDQ3MjYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQzNjMwMzMyODM1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=
Source: global traffic	HTTP traffic detected: GET /public/LoginPage.68b4b337.js HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3; AMP_e2430436ab=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI1MGU0ZDExNC1mYWYzLTQ0ZmEtOWE5NC0yYzhiMDZiNDQ3MjYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQzNjMwMzMyODM1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=
Source: global traffic	HTTP traffic detected: GET /images/faq-icon.png HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3; AMP_e2430436ab=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI1MGU0ZDExNC1mYWYzLTQ0ZmEtOWE5NC0yYzhiMDZiNDQ3MjYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQzNjMwMzMyODM1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=
Source: global traffic	HTTP traffic detected: GET /logo/ruvtbum/bbb-90371320.png HTTP/1.1Host: seal-seflorida.bbb.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/faq-icon.png HTTP/1.1Host: selecthealth.nationsbenefits.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3; AMP_e2430436ab=JTdCJTIyZGV2aWNlSWQlMjIlM0ElMjI1MGU0ZDExNC1mYWYzLTQ0ZmEtOWE5NC0yYzhiMDZiNDQ3MjYlMjIlMkMlMjJzZXNzaW9uSWQlMjIlM0ExNzQzNjMwMzMyODM1JTJDJTIyb3B0T3V0JTIyJTNBZmFsc2UlMkMlMjJwYWdlQ291bnRlciUyMiUzQTAlN0Q=
Source: global traffic	HTTP traffic detected: GET /logo/ruvtbum/bbb-90371320.png HTTP/1.1Host: seal-seflorida.bbb.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: selecthealth.nationsbenefits.com
Source: global traffic	DNS traffic detected: DNS query: kit-free.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: seal-seflorida.bbb.org

Source: chromecache_136.3.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_142.3.dr	String found in binary or memory: http://dimsemenov.com/plugins/magnific-popup/
Source: chromecache_151.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)
Source: chromecache_151.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-patterns).
Source: chromecache_151.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)
Source: chromecache_151.3.dr	String found in binary or memory: http://ecma-international.org/ecma-262/7.0/#sec-samevaluezero)
Source: chromecache_146.3.dr, chromecache_142.3.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: chromecache_146.3.dr, chromecache_142.3.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: chromecache_142.3.dr	String found in binary or memory: http://gnu.org/licenses/
Source: chromecache_142.3.dr	String found in binary or memory: http://hilios.github.io/jQuery.countdown/)
Source: chromecache_142.3.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_146.3.dr, chromecache_142.3.dr	String found in binary or memory: http://kenwheeler.github.io
Source: chromecache_146.3.dr, chromecache_142.3.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: chromecache_142.3.dr	String found in binary or memory: http://markgoodyear.com/labs/scrollup/
Source: chromecache_136.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_110.3.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_110.3.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_110.3.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_110.3.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_132.3.dr	String found in binary or memory: http://rocha.la)
Source: chromecache_151.3.dr	String found in binary or memory: http://www.ecma-international.org/ecma-262/7.0/#sec-ecmascript-language-types)
Source: chromecache_142.3.dr	String found in binary or memory: http://www.meanthemes.com/plugins/meanmenu/
Source: chromecache_132.3.dr	String found in binary or memory: http://www.opensource.org/licenses/gpl-license.php)
Source: chromecache_132.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://acsbap.com/api/app/assets/js/acsb.js
Source: chromecache_151.3.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=773687
Source: chromecache_151.3.dr	String found in binary or memory: https://css-tricks.com/debouncing-throttling-explained-examples/)
Source: chromecache_119.3.dr, chromecache_167.3.dr, chromecache_215.3.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_119.3.dr, chromecache_167.3.dr, chromecache_215.3.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_151.3.dr	String found in binary or memory: https://github.com/KingSora/OverlayScrollbars/blob/master/js/OverlayScrollbars.js#L1634
Source: chromecache_151.3.dr	String found in binary or memory: https://github.com/WICG/ResizeObserver/issues/38
Source: chromecache_142.3.dr	String found in binary or memory: https://github.com/bfintal/Counter-Up
Source: chromecache_142.3.dr	String found in binary or memory: https://github.com/imakewebthings/waypoints/blob/master/licenses.txt
Source: chromecache_151.3.dr	String found in binary or memory: https://github.com/mathiasbynens/String.prototype.at
Source: chromecache_142.3.dr	String found in binary or memory: https://github.com/meanthemes/meanMenu)
Source: chromecache_151.3.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_197.3.dr	String found in binary or memory: https://github.com/onokumus)
Source: chromecache_197.3.dr	String found in binary or memory: https://github.com/onokumus/metismenu#readme
Source: chromecache_151.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/306
Source: chromecache_151.3.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_151.3.dr	String found in binary or memory: https://grsmto.github.io/simplebar/
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://images.albertsons-media.com/is/image/ABS/
Source: chromecache_178.3.dr	String found in binary or memory: https://kit-free.fontawesome.com
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://members.nationsbenefits.com
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/Nations_logos/NationsOTC-logo-c.svg
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/css/fonts.css
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-100.otf
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-100.woff
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-100.woff2
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-300.otf
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-300.woff
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-300.woff2
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-500.otf
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-500.woff
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-500.woff2
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-700.otf
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-700.woff
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/MuseoSlab/museo-slab-700.woff2
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Bold.otf
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Bold.woff
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Bold.woff2
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Light.otf
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Light.woff
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Light.woff2
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Medium.otf
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Medium.woff
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Medium.woff2
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Regular.otf
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Regular.woff
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Regular.woff2
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-RegularIt.otf
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-RegularIt.woff
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-RegularIt.woff2
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Semibold.otf
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Semibold.woff
Source: chromecache_175.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Semibold.woff2
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Bold.otf
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Bold.woff
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Bold.woff2
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.otf
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff2
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Semibold.otf
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Semibold.woff
Source: chromecache_112.3.dr, chromecache_145.3.dr, chromecache_104.3.dr, chromecache_125.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Semibold.woff2
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/Client_Logos/
Source: chromecache_129.3.dr, chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/HealthPlan-Card/Generic-Image.png
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/Products_List_2021_Live1-1
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/css/SlickSlider.css
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/css/bootstrap.min.css
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/css/owl.carousel.min.css
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/css/plan_style.css
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/css/simplebar.css
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/css/viewer.css
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/360-cursor-icon.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/360-degree_Small.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/360-icon.svg)
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/Insurance-Expired.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/acending.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/acending.svg)
Source: chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/albertson-banner.jpg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/amount-icon.svg
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/appleproducts.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/arrow-down.svg)
Source: chromecache_177.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/arrow-right-white.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/arrow-right.svg);width:
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/arrow-white-left.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/arrow-white-right.svg
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/bathroomsafety.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/bcbsaz-otc-bg.webp);
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/bcbsaz-otc-bg.webp);width:
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/benefit-pro-login-bg.webp);width:
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/benefits-image.png
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/calendar-date-range.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/calendar-icon.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/calendar-icon.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/calendar-icon.svg);right:
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/calendar-icon.svg);width:
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/calendar-today.svg);width:23px
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/close-popup-icon.svg)
Source: chromecache_192.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/close.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/date-filter.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/descending.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/descending.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/edit-icon.svg)
Source: chromecache_205.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/eligibility-banner.jpg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/eye-close.svg);width:24px;height:24px;
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/eye-icon-close.svg);width:
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/eye-icon-close.svg);width:20px;height:18px;rig
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/eye-icon-open.svg);width:
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/faq-down-arrow.png)
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/favicon.ico
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/filter.svg
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/firefox.png
Source: chromecache_193.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/food-delivered-bg.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/form-error.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/form-error.svg);width:
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/form-success.png)
Source: chromecache_177.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/fresh-meals-banner.png)
Source: chromecache_177.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/fresh-meals-banner.png)no-repeat;
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/google-chrome.png
Source: chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/groceries-pattern.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/grocery-bg-shape-mobile.svg)
Source: chromecache_193.3.dr, chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/grocery-bg-shape-small.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/grocery-bg-shape.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/hearing-bg.svg)
Source: chromecache_168.3.dr, chromecache_177.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/hearing/accordion-arrow.svg)
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/iebrowser.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/loader.gif)
Source: chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/market-pattern.png)
Source: chromecache_193.3.dr, chromecache_177.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/market-pattern.svg)
Source: chromecache_193.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/meals-pattern.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/my-benefits-bg-img.png)
Source: chromecache_193.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/nation-market.png)
Source: chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/nationsmarket-pattern.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/new-offcers-section-img1.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/new-offcers-section-img2.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/new-offcers-section-img3.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/new-offcers-section-img4.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/new-offcers-section-img5.svg)
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/no-current-benefits.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/otc-bg.webp
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/otc-bg.webp);
Source: chromecache_193.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/owl-next.svg)
Source: chromecache_193.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/pantry-box.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/print-icon.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/product-search.svg
Source: chromecache_193.3.dr, chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/products-pattern.svg)
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/safari.png
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/select-chevron.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/select-chevron.svg);background-position:calc(1
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/select-down-arow-icon.svg)
Source: chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/shop-grocery-pattern.svg)
Source: chromecache_95.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/shop-pantry-pattern.svg)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/images/success-tick-icon.svg)
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/SlickSlider.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/bootstrap.bundle.min.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/es5Conversions.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/fontawesome.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/jquery.min.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/jquery.slimscroll.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/lottie-player.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/metisMenu.min.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/owl.carousel.min.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/pdt360DegViewer.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/plugins.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/js/simplebar.js
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/pdf/
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/afternoon-icon.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/albertsons-grocery-banner.png
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/albertsons-shop-inner-banner.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/arrow-shape.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/bg-pattern.png)
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/evening-icon.svg
Source: chromecache_129.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/morning-icon.svg
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/orderpalced-shape.png)
Source: chromecache_217.3.dr	String found in binary or memory: https://nationscdn.azureedge.net/otc-container/retail-store/payment-bg-img.png)
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://nationsocrstore.blob.core.windows.net/nationsocrstore/
Source: chromecache_151.3.dr	String found in binary or memory: https://pastebin.com/N21QzeQA)
Source: chromecache_151.3.dr	String found in binary or memory: https://stackoverflow.com/questions/6024666/getting-ie-to-replace-a-regex-with-the-literal-string-0
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://subDomain.nationsotc.com
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-advancestringindex
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.every
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.filter
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.find
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.findIndex
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.foreach
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.includes
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.indexof
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.map
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.reduce
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.reduceright
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-array.prototype.some
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-arrayspeciescreate
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-function-instances-name
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-get-regexp.prototype.flags
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-getsubstitution
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-isarray
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.defineproperty
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.getownpropertynames
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexp.prototype-
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-regexpexec
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-requireobjectcoercible
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.codepointat
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.match
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-string.prototype.replace
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-tointeger
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-tolength
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toobject
Source: chromecache_151.3.dr	String found in binary or memory: https://tc39.github.io/ecma262/#sec-toprimitive
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://www.apple.com/safari/
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://www.google.com/chrome/?brand=CHBD&brand=YTUH&gclid=EAIaIQobChMIgLKu24Dk7QIVwg5yCh2iUwG7EAAYA
Source: chromecache_108.3.dr, chromecache_182.3.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/new/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866

Source: unknown	HTTPS traffic detected: 142.251.35.164:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.149.26:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.149.26:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.119:443 -> 192.168.2.4:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.119:443 -> 192.168.2.4:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.218.119:443 -> 192.168.2.4:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.96.149.26:443 -> 192.168.2.4:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.70.204.1:443 -> 192.168.2.4:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 68.70.204.1:443 -> 192.168.2.4:49843 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1976_799101255

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1976_799101255

Jump to behavior

Source: classification engine

Classification label: mal48.phis.win@23/215@14/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,170447850832103499,14663753469657557301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2284 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://selecthealth.nationsbenefits.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2248,i,170447850832103499,14663753469657557301,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2284 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://selecthealth.nationsbenefits.com"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://selecthealth.nationsbenefits.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://tc39.github.io/ecma262/#sec-object.getownpropertynames	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-toprimitive	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.includes	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/dashboard/dashboard.css	0%	Avira URL Cloud	safe
http://rocha.la)	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/footer-link-pages.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/healthProfile.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/Unsubscribe.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.foreach	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.filter	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/public/LoginPage.68b4b337.js	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.some	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-toobject	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/market-place.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/StoreLocator/storelocator.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/Cart/cart.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-string.prototype.codepointat	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-requireobjectcoercible	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-object.defineproperty	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/kendo_theme.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/react-datepicker.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/animate.min.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-object.prototype.propertyisenumerable	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/images/faq-icon.png	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-getsubstitution	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/multiple-wallet.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-advancestringindex	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/instacart.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-function-instances-name	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/orderHistory.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.map	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-arrayspeciescreate	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-isarray	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/public/9796.b02f8500.js	0%	Avira URL Cloud	safe
http://markgoodyear.com/labs/scrollup/	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/addressbook.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/apple-products.css	0%	Avira URL Cloud	safe
https://members.nationsbenefits.com	0%	Avira URL Cloud	safe
http://www.meanthemes.com/plugins/meanmenu/	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptor	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/cardTracking.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/js/custom.js	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/public/main.59ea8409.js	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/style_new.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/outcomes.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-tointeger	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/new-store-locator.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/utilitiesfaq.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.every	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/transaction-style.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.findIndex	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-string.prototype.match	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/Common/common.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/banner.css	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.indexof	0%	Avira URL Cloud	safe
https://subDomain.nationsotc.com	0%	Avira URL Cloud	safe
https://tc39.github.io/ecma262/#sec-array.prototype.reduce	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/store-locator.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/benefitsusage.css	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/	0%	Avira URL Cloud	safe
https://selecthealth.nationsbenefits.com/css/legacy_style.css	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
s-part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	high
s-part-0044.t-0009.t-msedge.net	13.107.246.72	true	false	high
kit-free.fontawesome.com.cdn.cloudflare.net	172.67.218.119	true	false	high
www.google.com	142.251.35.164	true	false	high
traf-nbotc-prod-ext.trafficmanager.net	20.96.149.26	true	false	unknown
276b.kncdn.com	68.70.204.1	true	false	high
kit-free.fontawesome.com	unknown	unknown	false	high
selecthealth.nationsbenefits.com	unknown	unknown	true	unknown
seal-seflorida.bbb.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://selecthealth.nationsbenefits.com/css/Unsubscribe.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/healthProfile.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/dashboard/dashboard.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/footer-link-pages.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/public/LoginPage.68b4b337.js	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/Cart/cart.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/StoreLocator/storelocator.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/market-place.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/kendo_theme.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/react-datepicker.css	false	Avira URL Cloud: safe	unknown
https://kit-free.fontawesome.com/releases/latest/css/free-v4-font-face.min.css	false		high
https://selecthealth.nationsbenefits.com/css/animate.min.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/images/faq-icon.png	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/multiple-wallet.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/instacart.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/orderHistory.css	false	Avira URL Cloud: safe	unknown
https://kit-free.fontawesome.com/releases/latest/css/free.min.css	false		high
https://selecthealth.nationsbenefits.com/public/9796.b02f8500.js	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/apple-products.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/addressbook.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/js/custom.js	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/public/main.59ea8409.js	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/style_new.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/cardTracking.css	false	Avira URL Cloud: safe	unknown
https://seal-seflorida.bbb.org/logo/ruvtbum/bbb-90371320.png	false		high
https://selecthealth.nationsbenefits.com/css/outcomes.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/utilitiesfaq.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/new-store-locator.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/login	true		unknown
https://selecthealth.nationsbenefits.com/css/transaction-style.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/banner.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/Common/common.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/store-locator.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/benefitsusage.css	false	Avira URL Cloud: safe	unknown
https://selecthealth.nationsbenefits.com/css/legacy_style.css	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_151.3.dr	false		high
https://tc39.github.io/ecma262/#sec-object.getownpropertynames	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://ecma-international.org/ecma-262/7.0/#sec-patterns).	chromecache_151.3.dr	false		high
http://jqueryui.com	chromecache_142.3.dr	false		high
https://kit-free.fontawesome.com	chromecache_178.3.dr	false		high
http://rocha.la)	chromecache_132.3.dr	false	Avira URL Cloud: safe	unknown
https://images.albertsons-media.com/is/image/ABS/	chromecache_108.3.dr, chromecache_182.3.dr	false		high
http://github.com/kenwheeler/slick	chromecache_146.3.dr, chromecache_142.3.dr	false		high
https://tc39.github.io/ecma262/#sec-array.prototype.filter	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://hilios.github.io/jQuery.countdown/)	chromecache_142.3.dr	false		high
https://tc39.github.io/ecma262/#sec-array.prototype.includes	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_110.3.dr	false		high
https://fontawesome.com	chromecache_119.3.dr, chromecache_167.3.dr, chromecache_215.3.dr	false		high
https://tc39.github.io/ecma262/#sec-toprimitive	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-array.prototype.foreach	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-array.prototype.some	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-string.prototype.codepointat	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-toobject	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js/issues/306	chromecache_151.3.dr	false		high
https://tc39.github.io/ecma262/#sec-object.defineproperty	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-requireobjectcoercible	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://kenwheeler.github.io	chromecache_146.3.dr, chromecache_142.3.dr	false		high
http://dimsemenov.com/plugins/magnific-popup/	chromecache_142.3.dr	false		high
http://polymer.github.io/PATENTS.txt	chromecache_110.3.dr	false		high
https://tc39.github.io/ecma262/#sec-object.prototype.propertyisenumerable	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://ecma-international.org/ecma-262/7.0/#sec-properties-of-the-map-prototype-object)	chromecache_151.3.dr	false		high
http://polymer.github.io/LICENSE.txt	chromecache_110.3.dr	false		high
https://tc39.github.io/ecma262/#sec-getsubstitution	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-function-instances-name	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php)	chromecache_132.3.dr	false		high
https://tc39.github.io/ecma262/#sec-advancestringindex	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-isarray	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://ecma-international.org/ecma-262/7.0/#sec-object.prototype.tostring)	chromecache_151.3.dr	false		high
https://tc39.github.io/ecma262/#sec-array.prototype.map	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://github.com/KingSora/OverlayScrollbars/blob/master/js/OverlayScrollbars.js#L1634	chromecache_151.3.dr	false		high
https://github.com/mathiasbynens/String.prototype.at	chromecache_151.3.dr	false		high
https://github.com/onokumus)	chromecache_197.3.dr	false		high
https://tc39.github.io/ecma262/#sec-arrayspeciescreate	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://markgoodyear.com/labs/scrollup/	chromecache_142.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-object.getownpropertydescriptor	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://members.nationsbenefits.com	chromecache_108.3.dr, chromecache_182.3.dr	false	Avira URL Cloud: safe	unknown
http://www.meanthemes.com/plugins/meanmenu/	chromecache_142.3.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/gpl-license.php)	chromecache_132.3.dr	false		high
https://github.com/WICG/ResizeObserver/issues/38	chromecache_151.3.dr	false		high
https://fontawesome.com/license/free	chromecache_119.3.dr, chromecache_167.3.dr, chromecache_215.3.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=773687	chromecache_151.3.dr	false		high
http://daneden.me/animate	chromecache_136.3.dr	false		high
https://github.com/meanthemes/meanMenu)	chromecache_142.3.dr	false		high
https://pastebin.com/N21QzeQA)	chromecache_151.3.dr	false		high
http://gnu.org/licenses/	chromecache_142.3.dr	false		high
https://tc39.github.io/ecma262/#sec-tointeger	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-array.prototype.every	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://github.com/kenwheeler/slick/issues	chromecache_146.3.dr, chromecache_142.3.dr	false		high
https://tc39.github.io/ecma262/#sec-string.prototype.match	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_110.3.dr	false		high
https://github.com/bfintal/Counter-Up	chromecache_142.3.dr	false		high
https://stackoverflow.com/questions/6024666/getting-ie-to-replace-a-regex-with-the-literal-string-0	chromecache_151.3.dr	false		high
https://tc39.github.io/ecma262/#sec-array.prototype.findIndex	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-array.prototype.indexof	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://kenwheeler.github.io/slick	chromecache_146.3.dr, chromecache_142.3.dr	false		high
https://github.com/imakewebthings/waypoints/blob/master/licenses.txt	chromecache_142.3.dr	false		high
https://subDomain.nationsotc.com	chromecache_108.3.dr, chromecache_182.3.dr	false	Avira URL Cloud: safe	unknown
https://tc39.github.io/ecma262/#sec-array.prototype.reduce	chromecache_151.3.dr	false	Avira URL Cloud: safe	unknown
http://opensource.org/licenses/MIT	chromecache_136.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
20.96.149.26	traf-nbotc-prod-ext.trafficmanager.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
68.70.204.1	276b.kncdn.com	Switzerland	44239	PROINITYPROINITYDE	false
172.67.218.119	kit-free.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
142.251.35.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1655112
Start date and time:	2025-04-02 23:44:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://selecthealth.nationsbenefits.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@23/215@14/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.99, 192.178.155.84, 142.250.65.238, 142.250.176.206, 142.251.35.174, 142.251.40.174, 142.251.40.238, 23.203.176.221, 199.232.210.172, 142.250.80.106, 142.250.65.202, 142.250.65.234, 142.250.81.234, 142.251.32.106, 142.250.64.74, 142.251.40.138, 142.250.64.106, 142.250.80.10, 142.251.40.170, 142.250.65.170, 142.250.72.106, 142.250.80.74, 142.250.80.42, 142.251.40.106, 142.251.35.170, 142.250.80.110, 142.250.80.78, 142.250.81.238, 142.251.41.14, 142.251.41.3, 142.251.40.110, 142.251.40.195, 184.31.69.3, 13.107.246.40, 13.107.246.72, 172.202.163.200, 20.12.23.50
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, reserved-g01.afd.azureedge.net, star-t-g.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, nationscdn.afd.azureedge.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, nationscdn.azureedge.net, ocsp.digicert.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://selecthealth.nationsbenefits.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 83000, version 0.0
Category:	downloaded
Size (bytes):	83000
Entropy (8bit):	7.995660077472922
Encrypted:	true
SSDEEP:	1536:KItsqVnXG4ciPhnHdwCHfzroVBXxAhVVj1aKVKgBpAP:KYs+GxiRrwxA/B8ipAP
MD5:	356A3FC686DA8D3152E161DC30FE42DB
SHA1:	9C80579EA3DB75BAF996862914CBC5473BB5CA33
SHA-256:	835BFFF77B38FD5678197E04DFBE8F1F81AA576FC67B15F84A39CFF56D0C6213
SHA-512:	E1CE69BAF91B472FB29C35778BA0C1C23E1CF426F39CC444E27424897B36736A6420F7F77A283A04BA29B80F3B40A71C65B32DB9F77F3A98C3B8A90BDF6CE689
Malicious:	false
Reputation:	low
URL:	https://nationscdn.azureedge.net/nb-container/fonts/ProximaNova/ProximaNova-Regular.woff2
Preview:	wOF2OTTO..D8......(...C............................Z...........`....6.$..^....v. [.'...k..`.?Z'.....4...aQH.Ym.3UUUUUUUUU................O...../....o.........._.....?...W......._...._....E`...:..pdN}hBG...(..:<%.....GW....`...!......N.E`.....W.?.\|......,7C}o.`.K4.T...Cxf.T...-..o.......`.'.7.E.]2.7......@,Q.N..?.J....J..Ko..,.&..A................t...$.^.,!H.%Hh.9<.hq)x..T.vi....].e..........@%.j..1....1.v.........:..E..?...d3..J......!/....p....M$..M...&..Av...<E.............y..A..V......['9..<o.......3r.6....=.(6.;.F.t.U....A...k...64B....v.Q..PW.h..q.........1...i..........jc.j.....n........EE......c.($.....R.`97...'......Qswx0qf,........P......).......h.T..[..J.h...g.7...[..3.s......%.=... ...R.%XjXM..X....I..j_a;[....w.....i^ZI.....C.CD.0.a[....Y.{.r...t......\...`.J?.C.q........#.7.#w.;.L8...-.....&!b.T+].5;..Z.G..@B.....bDSD%?.........i..+o2..\|V...?.f.:fE+.-./..."^.I)...k.B..Q9SnX...o......R-b4V.V....)bD....q...5bc...o.n.....~..%

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 2, 2025 23:45:20.767849922 CEST	53	55563	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:20.769052029 CEST	53	51275	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:21.338093042 CEST	53	56601	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:21.711029053 CEST	53	58524	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:24.585613966 CEST	60317	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:24.586011887 CEST	62757	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:24.685710907 CEST	53	60317	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:24.685925961 CEST	53	62757	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:26.037730932 CEST	59436	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:26.040374041 CEST	57591	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:26.050323963 CEST	56487	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:26.050482988 CEST	61113	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:26.150847912 CEST	53	59436	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:26.153215885 CEST	53	57591	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:26.166500092 CEST	53	61113	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:26.168231010 CEST	53	56487	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:30.814305067 CEST	51426	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:30.814912081 CEST	56059	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:30.844985008 CEST	61906	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:30.845309019 CEST	51172	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:30.926314116 CEST	53	56059	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:30.928601027 CEST	53	51426	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:30.946062088 CEST	53	51172	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:30.948398113 CEST	53	61906	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:34.552611113 CEST	62344	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:34.552982092 CEST	56017	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:34.650875092 CEST	53	56017	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:34.655811071 CEST	53	62344	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:34.752186060 CEST	53	60184	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:35.738197088 CEST	55952	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:35.738384962 CEST	51251	53	192.168.2.4	1.1.1.1
Apr 2, 2025 23:45:35.840394020 CEST	53	55952	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:35.844244003 CEST	53	51251	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:38.831247091 CEST	53	60937	1.1.1.1	192.168.2.4
Apr 2, 2025 23:45:57.538927078 CEST	53	59907	1.1.1.1	192.168.2.4
Apr 2, 2025 23:46:20.224323034 CEST	53	60188	1.1.1.1	192.168.2.4
Apr 2, 2025 23:46:20.396300077 CEST	53	62245	1.1.1.1	192.168.2.4
Apr 2, 2025 23:46:22.665486097 CEST	53	52939	1.1.1.1	192.168.2.4
Apr 2, 2025 23:46:24.138731003 CEST	138	138	192.168.2.4	192.168.2.255

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:26 UTC	682	OUT	GET / HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-02 21:45:27 UTC	670	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:26 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache,no-store Expires: -1 Pragma: no-cache Set-Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3; path=/; secure; samesite=lax; httponly Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Referrer-Policy: no-referrer
2025-04-02 21:45:27 UTC	15474	IN	Data Raw: 31 63 37 66 0d 0a 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0d 0a 20 20 20 20 3c 21 2d 2d 20 54 6f 20 73 74 6f 70 20 66 72 6f 6d 20 73 65 61 72 63 68 20 65 6e 67 69 6e 65 20 63 72 61 77 6c Data Ascii: 1c7f<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta name="viewport" content="width=device-width, initial-scale=1"> ... To stop from search engine crawl
2025-04-02 21:45:27 UTC	6698	IN	Data Raw: 53 42 69 6e 4e 75 6d 62 65 72 22 3a 22 35 33 31 34 34 35 22 2c 22 64 65 66 61 75 6c 74 4e 6f 6e 63 65 22 3a 22 22 2c 22 63 61 72 64 56 61 6c 69 64 74 69 6f 6e 46 6f 72 4f 4f 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 6d 61 72 6b 65 74 70 6c 61 63 65 43 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 5b 7b 22 57 61 72 65 68 6f 75 73 65 43 6f 64 65 22 3a 22 41 6c 62 65 72 74 73 6f 6e 73 22 2c 22 49 6d 61 67 65 43 64 6e 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 69 6d 61 67 65 73 2e 61 6c 62 65 72 74 73 6f 6e 73 2d 6d 65 64 69 61 2e 63 6f 6d 2f 69 73 2f 69 6d 61 67 65 2f 41 42 53 2f 22 2c 22 49 6d 61 67 65 45 78 74 65 6e 73 69 6f 6e 22 3a 22 22 2c 22 49 73 41 64 64 72 65 73 73 56 61 6c 69 64 61 74 69 6f 6e 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 73 70 Data Ascii: SBinNumber":"531445","defaultNonce":"","cardValidtionForOOPEnabled":false,"marketplaceConfiguration":[{"WarehouseCode":"Albertsons","ImageCdnURL":"https://images.albertsons-media.com/is/image/ABS/","ImageExtension":"","IsAddressValidationEnabled":true,"sp

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:27 UTC	751	OUT	GET /css/animate.min.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:27 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:27 GMT Content-Type: text/css Content-Length: 57997 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c5878d" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:27 UTC	15817	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0d 0a 0d 0a 2f 2a 21 0d 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0d 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 33 2e 37 2e 30 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 44 61 6e 69 65 6c 20 45 64 65 6e 0d 0a 20 2a 2f 0d 0a 0d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 7b 30 25 2c 32 30 25 2c 35 33 25 2c 38 30 25 2c 74 6f 7b 2d 77 65 62 Data Ascii: @charset "UTF-8";/! animate.css -http://daneden.me/animate * Version - 3.7.0 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2018 Daniel Eden */@-webkit-keyframes bounce{0%,20%,53%,80%,to{-web
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 31 35 2c 2e 36 31 2c 2e 33 35 35 2c 31 29 7d 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 33 30 30 30 70 78 2c 30 29 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 33 30 30 30 70 78 2c 30 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 70 78 2c 30 29 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 32 30 70 78 2c 30 29 7d 37 35 25 7b 2d 77 65 62 Data Ascii: 5,.61,.355,1);animation-timing-function:cubic-bezier(.215,.61,.355,1)}0%{-webkit-transform:translate3d(0,3000px,0);opacity:0;transform:translate3d(0,3000px,0)}60%{-webkit-transform:translate3d(0,-20px,0);opacity:1;transform:translate3d(0,-20px,0)}75%{-web
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 76 65 28 34 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 7d 33 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 2d 32 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 2d 32 30 64 65 67 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 39 30 64 65 67 29 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 58 28 39 30 Data Ascii: ve(400px);transform:perspective(400px)}30%{-webkit-transform:perspective(400px) rotateX(-20deg);opacity:1;transform:perspective(400px) rotateX(-20deg)}to{-webkit-transform:perspective(400px) rotateX(90deg);opacity:0;transform:perspective(400px) rotateX(90
2025-04-02 21:45:27 UTC	720	IN	Data Raw: 73 63 61 6c 65 33 64 28 2e 31 2c 2e 31 2c 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 30 30 70 78 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 35 35 2c 2e 36 37 35 2c 2e 31 39 29 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 31 2c 2e 31 2c 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 31 30 30 30 70 78 2c 30 29 7d 36 30 25 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 Data Ascii: scale3d(.1,.1,.1) translate3d(0,1000px,0);animation-timing-function:cubic-bezier(.55,.055,.675,.19);opacity:0;transform:scale3d(.1,.1,.1) translate3d(0,1000px,0)}60%{-webkit-animation-timing-function:cubic-bezier(.175,.885,.32,1);-webkit-transform:scale3d
2025-04-02 21:45:27 UTC	9172	IN	Data Raw: 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 36 30 70 78 2c 30 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 37 35 2c 2e 38 38 35 2c 2e 33 32 2c 31 29 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 33 64 28 2e 34 37 35 2c 2e 34 37 35 2c 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 2d 36 30 70 78 2c 30 29 7d 7d 2e 7a 6f 6f 6d 49 6e 55 70 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 Data Ascii: ction:cubic-bezier(.175,.885,.32,1);-webkit-transform:scale3d(.475,.475,.475) translate3d(0,-60px,0);animation-timing-function:cubic-bezier(.175,.885,.32,1);opacity:1;transform:scale3d(.475,.475,.475) translate3d(0,-60px,0)}}.zoomInUp{-webkit-animation-na

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:27 UTC	749	OUT	GET /css/style_new.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:27 UTC	328	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:27 GMT Content-Type: text/css Content-Length: 711694 Connection: close Accept-Ranges: bytes ETag: "1dba3c241cfb90e" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:27 UTC	15816	IN	Data Raw: ef bb bf 2f 2a 0d 0a 50 72 6f 6a 65 63 74 20 4e 61 6d 65 20 20 20 20 3a 4e 61 74 69 6f 6e 73 4f 54 43 0d 0a 56 65 72 73 69 6f 6e 20 20 20 20 20 20 20 20 20 20 3a 31 2e 30 0d 0a 2f 2a 0d 0a 0d 0a 2f 2a 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 46 6f 6e 74 73 20 2d 20 43 52 45 44 43 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 43 52 45 44 43 27 3b 0d 0a 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 2e 2e 2f 66 6f 6e 74 73 2f 63 72 65 64 63 2f 43 Data Ascii: /Project Name :NationsOTCVersion :1.0//================================================Fonts - CREDC================================================/@font-face {font-family:'CREDC';src: url('../../fonts/credc/C
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 64 69 6e 67 3a 30 20 32 38 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 29 3b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 29 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 33 70 78 3b 7d 0d 0a 2e 62 6f 72 64 65 72 2d 62 74 6e 3a 68 6f 76 65 72 2c 20 2e 62 6f 72 64 65 72 2d 62 74 6e 3a 66 6f 63 75 73 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 29 3b 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 Data Ascii: ding:0 28px;border-radius:8px;background-color:var(--white-color); color: var(--secondary-color); font-size: 18px; font-weight:700; letter-spacing: 0.3px;}.border-btn:hover, .border-btn:focus {background: var(--secondary-color); color: var(--white-color
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 69 67 68 74 2d 73 65 63 20 61 2e 64 6f 77 6e 6c 6f 61 64 2d 63 61 74 61 6c 6f 67 2e 63 68 65 63 6b 6f 75 74 20 69 6d 67 20 7b 68 65 69 67 68 74 3a 20 31 32 70 78 3b 20 6d 61 72 67 69 6e 3a 20 2d 33 70 78 20 30 20 30 20 31 30 70 78 3b 2f 2a 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 6f 75 6e 63 65 52 69 67 68 74 20 32 73 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 20 62 6f 75 6e 63 65 52 69 67 68 74 20 32 73 20 69 6e 66 69 6e 69 74 65 3b 2a 2f 7d 0d 0a 2e 74 6f 70 2d 72 69 67 68 74 2d 73 65 63 20 75 6c 20 6c 69 2e 64 6f 77 6e 6c 6f 61 64 2d 69 63 6f 6e 20 61 3a 68 6f 76 65 72 20 7b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 20 7d 0d 0a 2e 74 6f 70 2d 72 69 67 68 74 2d 73 65 63 20 75 6c 20 6c 69 2e 64 Data Ascii: ight-sec a.download-catalog.checkout img {height: 12px; margin: -3px 0 0 10px;/-webkit-animation: bounceRight 2s infinite;animation: bounceRight 2s infinite;/}.top-right-sec ul li.download-icon a:hover { text-decoration:none; }.top-right-sec ul li.d
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 6c 69 2e 6e 61 76 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 64 65 6c 69 76 61 72 79 2d 73 6c 6f 74 2d 73 65 63 20 75 6c 20 6c 69 2e 6e 61 76 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 20 2e 6e 61 76 2d 6c 69 6e 6b 20 7b 6d 61 72 67 69 6e 3a 30 3b 7d 20 20 0d 0a 2e 64 65 6c 69 76 61 72 79 2d 73 6c 6f 74 2d 73 65 63 20 75 6c 20 6c 69 20 62 75 74 74 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 35 66 36 66 38 3b 20 70 61 64 64 69 6e 67 3a 31 32 70 78 20 33 32 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 38 70 78 20 30 20 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 0d 0a 2e 64 65 6c 69 76 61 72 79 2d 73 6c 6f 74 2d 73 65 63 20 75 6c 20 6c 69 20 2e 6e 61 76 2d 6c 69 6e 6b 20 7b Data Ascii: li.nav-item:last-child{padding:0 !important;}.delivary-slot-sec ul li.nav-item:last-child .nav-link {margin:0;} .delivary-slot-sec ul li button {background:#f5f6f8; padding:12px 32px; margin:0 8px 0 0;width:100%}.delivary-slot-sec ul li .nav-link {
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 63 6b 65 64 7e 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 3a 3a 61 66 74 65 72 7b 74 6f 70 3a 36 70 78 3b 6c 65 66 74 3a 2d 32 31 70 78 3b 68 65 69 67 68 74 3a 20 31 30 70 78 3b 77 69 64 74 68 3a 20 31 30 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 32 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 35 29 3b 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 70 6f 70 75 70 2e 63 61 74 61 6c 6f 67 2d 64 6f 77 6e 6c 6f 61 64 20 2e 63 75 73 74 6f 6d 2d 72 61 64 69 6f 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 20 Data Ascii: cked~.custom-control-label::after{top:6px;left:-21px;height: 10px;width: 10px;border-radius: 10px; background-color: var(--white-color);box-shadow: 0 2px 4px 0 rgba(0,0,0,0.15);}.custom-popup.catalog-download .custom-radio .custom-control-label{color:
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 62 75 74 74 6f 6e 2e 73 65 61 72 63 68 2d 63 6c 6f 73 65 20 69 6d 67 7b 77 69 64 74 68 3a 31 32 70 78 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 7d 0d 0a 2e 63 61 74 65 67 6f 72 79 2d 73 65 61 72 63 68 2d 77 72 61 70 20 2e 73 65 61 72 63 68 2d 77 72 61 70 20 66 6f 72 6d 20 69 6e 70 75 74 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 20 2f 2a 20 43 68 72 6f 6d 65 2c 20 46 69 72 65 66 6f 78 2c 20 4f 70 65 72 61 2c 20 53 61 66 61 72 69 20 31 30 2e 31 2b 20 2a 2f 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 63 61 64 65 74 2d 62 6c 75 65 2d 63 6f 6c 6f 72 29 3b 6f 70 61 63 69 74 79 3a 20 31 3b 20 2f 2a 20 46 69 72 65 66 6f 78 20 2a 2f 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 7d 0d 0a 2e 63 61 74 65 67 6f 72 79 2d 73 65 Data Ascii: button.search-close img{width:12px;height:12px;}.category-search-wrap .search-wrap form input::placeholder { /* Chrome, Firefox, Opera, Safari 10.1+ /color: var(--cadet-blue-color);opacity: 1; / Firefox */font-size:14px;font-weight:300;}.category-se
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 67 3a 20 32 70 78 20 31 33 70 78 20 30 20 31 31 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 42 54 6e 65 77 53 74 79 6c 65 20 2e 65 78 70 69 72 69 6e 67 2d 73 6f 6f 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 36 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 35 70 78 3b 74 6f 70 3a 37 70 78 3b 63 6f 6c 6f 72 3a 23 46 39 42 44 33 44 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 31 70 78 3b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 7d 0d 0a 2e 42 54 6e 65 77 53 74 79 6c 65 20 2e 65 78 70 69 72 69 6e 67 2d 73 6f 6f 6e 20 Data Ascii: g: 2px 13px 0 11px !important;}.BTnewStyle .expiring-soon{line-height:16px;position:absolute;right:15px;top:7px;color:#F9BD3D;font-size:13px;letter-spacing:1px;display: flex;align-items: center;height:16px;font-weight: 600;}.BTnewStyle .expiring-soon
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 6e 65 72 2d 6c 65 66 74 20 70 20 73 74 72 6f 6e 67 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 7d 0d 0a 2e 70 72 6f 66 69 6c 65 2d 62 61 6e 6e 65 72 2e 61 6c 62 65 72 74 73 6f 6e 73 2d 73 68 6f 70 2d 62 61 6e 6e 65 72 2d 6e 65 77 20 2e 61 6c 62 65 72 74 73 6f 6e 73 2d 73 68 6f 70 2d 62 61 6e 6e 65 72 2d 6c 65 66 74 20 70 20 73 70 61 6e 20 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 7d 0d 0a 2e 61 6c 62 65 72 74 73 6f 6e 73 2d 6c 6f 67 6f 20 69 6d 67 20 7b 77 69 64 74 68 3a 39 32 25 3b 7d 0d 0a 2e 63 61 74 2d 61 6c 62 65 72 74 73 6f 6e 73 2d 6c 6f 67 6f 2d 73 65 63 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 62 64 66 33 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 20 70 61 64 64 69 6e 67 3a 33 32 70 78 20 32 38 70 Data Ascii: ner-left p strong {font-weight:700;}.profile-banner.albertsons-shop-banner-new .albertsons-shop-banner-left p span {font-weight:bold;}.albertsons-logo img {width:92%;}.cat-albertsons-logo-sec {background: #bdf3ff;border-radius: 6px; padding:32px 28p
2025-04-02 21:45:28 UTC	16144	IN	Data Raw: 64 74 68 3a 38 33 30 70 78 3b 7d 0d 0a 23 63 61 74 65 67 6f 72 69 65 73 2d 62 6c 6f 63 6b 20 2e 73 61 66 65 74 79 2d 70 72 6f 64 75 63 74 20 7b 7a 2d 69 6e 64 65 78 3a 39 3b 20 77 69 64 74 68 3a 31 30 30 25 3b 20 6d 61 78 2d 77 69 64 74 68 3a 38 33 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 37 66 37 66 37 7d 0d 0a 23 63 61 74 65 67 6f 72 69 65 73 2d 62 6c 6f 63 6b 20 2e 72 65 73 75 6c 74 2d 68 65 61 64 65 72 2d 66 69 78 65 64 20 2e 73 61 66 65 74 79 2d 70 72 6f 64 75 63 74 20 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 7d 0d 0a 23 63 61 74 65 67 6f 72 69 65 73 2d 62 6c 6f 63 6b 20 2e 72 65 73 75 6c 74 2d 68 65 61 64 65 72 2d 66 69 78 65 64 20 2e 73 69 6e 67 6c 65 2d 70 72 6f 64 75 63 74 2d 73 65 63 Data Ascii: dth:830px;}#categories-block .safety-product {z-index:9; width:100%; max-width:830px;padding:0;background:#f7f7f7}#categories-block .result-header-fixed .safety-product {padding-bottom:24px;}#categories-block .result-header-fixed .single-product-sec
2025-04-02 21:45:28 UTC	16144	IN	Data Raw: 74 6c 65 20 70 20 7b 20 20 63 6f 6c 6f 72 3a 20 23 32 35 32 35 32 35 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 33 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 7d 0d 0a 2e 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 70 72 6f 64 75 63 74 73 2d 73 65 63 20 2e 69 63 6f 6e 2d 74 65 78 74 2d 62 74 6e 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 72 69 67 68 74 3a 20 30 3b 20 74 6f 70 3a 20 33 30 70 78 3b 20 6d 61 72 67 69 6e 3a 31 30 70 78 20 30 20 30 3b 7d 0d 0a 2e 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 70 72 6f 64 75 63 74 73 2d 73 65 63 20 2e 69 63 6f 6e 2d 74 65 78 74 2d 62 74 6e 3a 68 6f 76 65 72 20 7b 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 7d 0d 0a 2e 72 Data Ascii: tle p { color: #252525; font-size: 16px; letter-spacing: 0.3px; line-height: 22px;}.recommended-products-sec .icon-text-btn {position: absolute; right: 0; top: 30px; margin:10px 0 0;}.recommended-products-sec .icon-text-btn:hover { opacity: 0.6;}.r

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:27 UTC	751	OUT	GET /css/kendo_theme.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:27 UTC	328	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:27 GMT Content-Type: text/css Content-Length: 933361 Connection: close Accept-Ranges: bytes ETag: "1dba3c241cb58f1" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:27 UTC	15816	IN	Data Raw: 2e 6b 2d 74 68 65 6d 65 2d 74 65 73 74 2d 63 6c 61 73 73 2c 0d 0a 2e 6b 2d 63 6f 6d 6d 6f 6e 2d 74 65 73 74 2d 63 6c 61 73 73 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 5b 68 69 64 64 65 6e 5d 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 73 63 72 69 70 74 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 68 69 64 64 65 6e 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 72 74 6c 20 7b 0d 0a 20 20 20 20 64 69 72 65 63 74 69 6f 6e 3a 20 72 74 6c 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 73 72 2d 6f 6e Data Ascii: .k-theme-test-class,.k-common-test-class { opacity: 0;}[hidden] { display: none !important;}script { display: none !important;}.k-hidden { display: none !important;}.k-rtl { direction: rtl;}.k-sr-on
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 63 75 72 72 65 6e 74 20 2e 6b 2d 66 6f 6f 74 65 72 2c 0d 0a 2e 6b 2d 66 78 2d 73 6c 69 64 65 2e 6b 2d 66 78 2d 72 65 76 65 72 73 65 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 63 75 72 72 65 6e 74 20 2e 6b 6d 2d 68 65 61 64 65 72 2c 0d 0a 2e 6b 2d 66 78 2d 73 6c 69 64 65 2e 6b 2d 66 78 2d 72 65 76 65 72 73 65 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 63 75 72 72 65 6e 74 20 2e 6b 6d 2d 66 6f 6f 74 65 72 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 66 78 2d 73 6c 69 64 65 2e 6b 2d 66 78 2d 72 65 76 65 72 73 65 2e 6b 2d 66 78 2d 65 6e 64 20 2e 6b 2d 66 78 2d 6e 65 78 74 20 2e 6b 2d 68 65 61 64 65 72 2c 0d 0a 2e 6b 2d 66 78 2d 73 6c 69 64 65 2e 6b 2d 66 78 2d 72 Data Ascii: k-fx-end .k-fx-current .k-footer,.k-fx-slide.k-fx-reverse.k-fx-end .k-fx-current .km-header,.k-fx-slide.k-fx-reverse.k-fx-end .k-fx-current .km-footer { opacity: 0;}.k-fx-slide.k-fx-reverse.k-fx-end .k-fx-next .k-header,.k-fx-slide.k-fx-r
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 72 6f 75 6e 64 65 64 2d 74 6f 70 2d 6d 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 5c 21 6b 2d 72 6f 75 6e 64 65 64 2d 74 6f 70 2d 6d 64 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 72 6f 75 6e 64 65 64 2d 74 6f 70 2d 6c 67 20 7b 0d Data Ascii: px !important;}.k-rounded-top-md { border-top-left-radius: 4px; border-top-right-radius: 4px;}.\!k-rounded-top-md { border-top-left-radius: 4px !important; border-top-right-radius: 4px !important;}.k-rounded-top-lg {
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 63 6f 6c 73 70 61 6e 2d 33 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 63 6f 6c 75 6d 6e 3a 20 73 70 61 6e 20 33 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 63 6f 6c 2d 73 74 61 72 74 2d 33 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 73 74 61 72 74 3a 20 33 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 63 6f 6c 2d 65 6e 64 2d 33 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 63 6f 6c 75 6d 6e 2d 65 6e 64 3a 20 33 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 67 72 69 64 2d 63 6f 6c 73 2d 34 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 20 72 65 70 65 61 74 28 34 2c 20 6d 69 6e 6d 61 78 28 30 2c 20 31 66 72 29 29 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 63 6f 6c 73 70 61 6e 2d 34 20 7b 0d 0a 20 20 20 20 67 72 69 64 2d 63 Data Ascii: ;}.k-colspan-3 { grid-column: span 3;}.k-col-start-3 { grid-column-start: 3;}.k-col-end-3 { grid-column-end: 3;}.k-grid-cols-4 { grid-template-columns: repeat(4, minmax(0, 1fr));}.k-colspan-4 { grid-c
2025-04-02 21:45:27 UTC	16144	IN	Data Raw: 37 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 6d 79 2d 37 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 38 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 6d 2d 38 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 33 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 6d 74 2d 38 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 Data Ascii: 7 { margin-left: 28px !important; margin-right: 28px !important;}.k-my-7 { margin-top: 28px !important; margin-bottom: 28px !important;}.k-m-8 { margin: 32px !important;}.k-mt-8 { margin-top: 32px !important
2025-04-02 21:45:28 UTC	16144	IN	Data Raw: 20 20 20 70 61 64 64 69 6e 67 3a 20 35 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 70 74 2d 31 33 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 35 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 70 72 2d 31 33 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 70 62 2d 31 33 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 35 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 70 6c 2d 31 33 20 7b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 35 32 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 70 78 2d Data Ascii: padding: 52px !important;}.k-pt-13 { padding-top: 52px !important;}.k-pr-13 { padding-right: 52px !important;}.k-pb-13 { padding-bottom: 52px !important;}.k-pl-13 { padding-left: 52px !important;}.k-px-
2025-04-02 21:45:28 UTC	16144	IN	Data Raw: 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 5c 21 6b 2d 67 61 70 2d 79 2d 6c 67 20 7b 0d 0a 20 20 20 20 72 6f 77 2d 67 61 70 3a 20 31 36 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 67 61 70 2d 78 6c 20 7b 0d 0a 20 20 20 20 67 61 70 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 67 61 70 2d 78 2d 78 6c 20 7b 0d 0a 20 20 20 20 63 6f 6c 75 6d 6e 2d 67 61 70 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 6b 2d 67 61 70 2d 79 2d 78 6c 20 7b 0d 0a 20 20 20 20 72 6f 77 2d 67 61 70 3a 20 32 34 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 5c 21 6b 2d 67 61 70 2d 78 6c 20 7b 0d 0a 20 20 20 20 67 61 70 3a 20 32 34 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 5c 21 6b 2d 67 61 70 2d 78 2d 78 6c 20 7b 0d 0a 20 20 Data Ascii: !important;}.\!k-gap-y-lg { row-gap: 16px !important;}.k-gap-xl { gap: 24px;}.k-gap-x-xl { column-gap: 24px;}.k-gap-y-xl { row-gap: 24px;}.\!k-gap-xl { gap: 24px !important;}.\!k-gap-x-xl {
2025-04-02 21:45:28 UTC	16144	IN	Data Raw: 52 41 42 6b 41 45 51 41 61 41 43 41 42 49 41 41 4d 41 41 30 41 44 77 41 58 41 41 51 41 45 51 41 59 41 42 45 41 47 51 41 52 41 42 6f 41 49 41 42 41 41 49 49 41 69 67 43 69 41 4c 34 41 7a 41 44 57 41 4e 34 41 37 41 44 79 41 51 51 42 44 67 45 6d 41 54 41 42 56 41 46 34 41 59 77 42 74 41 48 53 41 65 49 42 38 67 49 57 41 6a 51 43 54 67 4a 71 41 6f 77 43 70 67 4c 41 41 73 77 43 32 67 4c 6f 41 76 51 44 47 67 4d 6d 41 7a 6f 44 52 67 4e 57 41 32 59 44 64 67 4f 47 41 35 51 44 71 67 50 4f 41 2f 67 45 49 41 52 49 42 47 6f 45 66 41 53 4b 42 4a 67 45 70 41 54 45 42 50 49 46 4a 41 55 38 42 57 67 46 6d 41 57 75 42 62 67 46 30 67 58 69 42 66 49 47 41 41 59 63 42 69 34 42 75 41 41 44 41 43 45 41 49 41 47 71 41 41 73 41 49 51 41 66 41 43 41 41 47 77 41 5a 41 41 51 41 46 51 Data Ascii: RABkAEQAaACABIAAMAA0ADwAXAAQAEQAYABEAGQARABoAIABAAIIAigCiAL4AzADWAN4A7ADyAQQBDgEmATABVAF4AYwBtAHSAeIB8gIWAjQCTgJqAowCpgLAAswC2gLoAvQDGgMmAzoDRgNWA2YDdgOGA5QDqgPOA/gEIARIBGoEfASKBJgEpATEBPIFJAU8BWgFmAWuBbgF0gXiBfIGAAYcBi4BuAADACEAIAGqAAsAIQAfACAAGwAZAAQAFQ
2025-04-02 21:45:28 UTC	16144	IN	Data Raw: 59 41 42 34 41 42 41 41 4f 41 42 73 41 4a 41 49 78 41 41 59 41 49 51 41 5a 41 41 34 41 47 41 41 65 41 50 30 41 44 67 41 65 41 42 55 41 42 41 41 66 41 43 41 41 44 51 41 67 41 42 45 41 42 41 41 61 41 43 45 41 47 41 41 59 41 50 77 41 46 77 41 65 41 42 55 41 42 41 41 66 41 43 41 41 44 51 41 67 41 42 45 41 42 41 41 56 41 42 6f 41 45 41 41 52 41 43 41 41 45 51 41 65 41 42 6b 41 46 51 41 61 41 41 30 41 49 41 41 52 41 52 6b 41 44 41 41 65 41 41 30 41 47 67 41 66 41 42 77 41 45 51 41 65 41 41 30 41 47 67 41 50 41 43 55 42 71 41 41 59 41 42 34 41 44 51 41 50 41 42 63 41 42 41 41 50 41 42 51 41 44 51 41 61 41 42 4d 41 45 51 41 66 41 41 51 41 48 67 41 52 41 42 59 41 45 51 41 50 41 43 41 41 42 41 41 4e 41 42 67 41 47 41 47 6e 41 42 51 41 48 67 41 4e 41 41 38 41 46 77 Data Ascii: YAB4ABAAOABsAJAIxAAYAIQAZAA4AGAAeAP0ADgAeABUABAAfACAADQAgABEABAAaACEAGAAYAPwAFwAeABUABAAfACAADQAgABEABAAVABoAEAARACAAEQAeABkAFQAaAA0AIAARARkADAAeAA0AGgAfABwAEQAeAA0AGgAPACUBqAAYAB4ADQAPABcABAAPABQADQAaABMAEQAfAAQAHgARABYAEQAPACAABAANABgAGAGnABQAHgANAA8AFw
2025-04-02 21:45:28 UTC	16144	IN	Data Raw: 41 41 34 41 41 44 51 41 52 41 43 41 41 41 41 45 68 49 67 59 56 45 52 51 57 4d 79 45 79 4e 6a 55 52 4a 52 45 6a 45 51 45 68 4f 41 45 78 45 54 67 42 4d 54 4d 52 49 52 45 7a 46 77 4d 41 2f 59 41 61 4a 69 59 61 41 77 41 61 4a 76 37 41 67 41 47 41 2f 51 42 41 41 67 41 6d 6d 67 4f 41 4a 68 72 39 41 42 6f 6d 4a 68 6f 43 67 49 44 2f 41 41 45 41 2f 51 41 44 41 50 37 41 41 55 43 62 41 41 41 41 41 41 55 41 51 41 41 41 41 38 41 44 67 41 41 68 41 43 63 41 4e 51 41 35 41 44 30 41 41 41 45 6a 4e 53 63 68 49 67 59 64 41 53 4d 69 42 68 55 52 46 42 59 37 41 52 55 55 46 6a 4d 68 4d 6a 59 39 41 54 4d 79 4e 6a 55 52 4e 43 59 6c 49 52 55 7a 46 53 45 42 49 78 45 34 41 54 45 68 4f 41 45 78 45 53 4d 31 49 51 55 68 46 53 45 56 49 52 55 68 41 34 42 41 67 50 35 41 47 79 56 41 47 69 Data Ascii: AA4AADQARACAAAAEhIgYVERQWMyEyNjURJREjEQEhOAExETgBMTMRIREzFwMA/YAaJiYaAwAaJv7AgAGA/QBAAgAmmgOAJhr9ABomJhoCgID/AAEA/QADAP7AAUCbAAAAAAUAQAAAA8ADgAAhACcANQA5AD0AAAEjNSchIgYdASMiBhURFBY7ARUUFjMhMjY9ATMyNjURNCYlIRUzFSEBIxE4ATEhOAExESM1IQUhFSEVIRUhA4BAgP5AGyVAGi

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:27 UTC	752	OUT	GET /css/legacy_style.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:27 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:27 GMT Content-Type: text/css Content-Length: 2330 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c56c1a" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:27 UTC	2330	IN	Data Raw: ef bb bf 2f 2a 20 47 65 6e 65 72 61 6c 20 73 74 79 6c 65 73 20 66 6f 72 20 74 68 65 20 23 62 62 62 6c 69 6e 6b 20 6c 69 6e 6b 20 2a 2f 0d 0a 61 23 62 62 62 6c 69 6e 6b 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 35 41 37 38 3b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 53 74 79 6c 65 73 20 66 6f 72 20 Data Ascii: /* General styles for the #bbblink link /a#bbblink { display: block; position: relative; text-align: center; color: #005A78; text-decoration: none; overflow: hidden; margin: 0; padding: 0;}/ Styles for

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:27 UTC	754	OUT	GET /css/apple-products.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:27 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:27 GMT Content-Type: text/css Content-Length: 9381 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c541a5" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:27 UTC	9381	IN	Data Raw: ef bb bf 2f 2a 20 41 70 70 6c 65 20 50 72 6f 64 75 63 74 73 20 4c 69 73 74 20 43 73 73 20 53 74 61 72 74 20 48 65 72 65 20 2a 2f 0d 0a 2e 61 70 70 6c 65 2d 70 72 6f 64 75 63 74 73 20 2e 70 72 6f 64 75 63 74 73 2d 6c 69 73 74 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 7d 0d 0a 2e 61 70 70 6c 65 2d 70 72 6f 64 75 63 74 73 20 2e 63 61 72 74 2d 6c 69 73 74 20 2e 70 72 69 63 65 2d 73 65 63 74 69 6f 6e 7b 6d 61 72 67 69 6e 3a 32 30 70 78 20 30 3b 7d 0d 0a 2e 61 70 70 6c 65 2d 70 72 6f 64 75 63 74 73 20 2e 63 61 72 74 2d 6c 69 73 74 20 2e 70 72 69 63 65 2d 70 61 72 74 7b 6d 61 72 67 69 6e 3a 30 3b 7d 0d 0a 2e 61 70 70 6c 65 2d 70 72 6f 64 75 63 74 73 20 2e 63 61 72 74 2d 6c 69 73 74 20 2e 6f 72 2d 74 65 78 74 7b 70 61 64 64 69 6e 67 3a 30 20 34 Data Ascii: /* Apple Products List Css Start Here */.apple-products .products-list{padding:0;margin:0;}.apple-products .cart-list .price-section{margin:20px 0;}.apple-products .cart-list .price-part{margin:0;}.apple-products .cart-list .or-text{padding:0 4

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:27 UTC	751	OUT	GET /css/Unsubscribe.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:27 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:27 GMT Content-Type: text/css Content-Length: 2207 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c56d9f" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:27 UTC	2207	IN	Data Raw: ef bb bf 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 0d 0a 2a 20 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 0d 0a 62 6f 64 79 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 70 72 6f 78 69 6d 61 2d 6e 6f 76 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 37 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 63 6f 6c 6f 72 3a 20 23 32 31 32 31 32 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 37 66 37 66 37 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 31 35 70 78 3b 7d 0d 0a 2e 4e 42 4c 6f 67 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 31 38 30 70 78 3b 7d 0d 0a 2e 75 6e 73 75 62 73 63 72 69 62 65 43 Data Ascii: * {margin: 0;padding: 0;}* {box-sizing: border-box;}body {font-family: proxima-nova, sans-serif;font-size: 16px;line-height: 27px;font-weight: 400;color: #212121;background: #f7f7f7;letter-spacing: 0.15px;}.NBLogo{max-width:180px;}.unsubscribeC

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	757	OUT	GET /css/footer-link-pages.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 2211 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c56da3" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	2211	IN	Data Raw: 2f 2a 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 43 6f 6d 6d 6f 6e 20 43 53 53 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 7d 0d 0a 2e 64 69 73 63 6c 61 69 6d 65 72 2d 77 72 61 70 70 65 72 20 7b 70 61 64 64 69 6e 67 3a 20 37 30 70 78 20 30 20 33 30 70 78 3b 20 77 69 64 74 68 3a 31 30 30 25 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 34 70 78 Data Ascii: /================================================Common CSS================================================/* {margin: 0;padding: 0;}.disclaimer-wrapper {padding: 70px 0 30px; width:100%; position: relative; font-size: 16px;line-height: 24px

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	755	OUT	GET /css/multiple-wallet.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	325	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 421 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c564a5" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	421	IN	Data Raw: 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 37 35 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 20 7b 0d 0a 2f 2a 2e 6d 75 6c 74 69 70 6c 65 2d 57 61 6c 6c 65 74 2d 62 61 63 6b 64 72 6f 70 20 2e 6d 6f 64 61 6c 2d 62 61 63 6b 64 72 6f 70 2e 66 61 64 65 2e 73 68 6f 77 20 7b 6f 70 61 63 69 74 79 3a 20 30 3b 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2a 2f 0d 0a 2e 6d 75 6c 74 69 70 6c 65 2d 57 61 6c 6c 65 74 2d 62 61 63 6b 64 72 6f 70 20 2e 63 75 73 74 6f 6d 2d 70 6f 70 75 70 2e 73 68 6f 77 3a 62 65 66 6f 72 65 20 7b 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 3b 6c 65 66 74 3a 20 30 3b 72 69 67 68 74 3a 20 30 3b 63 6f 6e 74 65 Data Ascii: @media (min-width:375px) and (max-width:1200px) {/.multiple-Wallet-backdrop .modal-backdrop.fade.show {opacity: 0;display: none !important;}/.multiple-Wallet-backdrop .custom-popup.show:before {position: absolute;z-index: 9999;left: 0;right: 0;conte

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 433 x 293, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54302
Entropy (8bit):	7.990489229233825
Encrypted:	true
SSDEEP:	1536:LQrx88pJcBa+EkjbSZbpP7dzDIDOCTrJH0Br85y:LQrx5kNEkjbCFppCTti85y
MD5:	33F1B85C634C9618D2725AF9F47AB6A0
SHA1:	F6141EC40B8C58F35E4CAC157975A97C299519C3
SHA-256:	CEABE2439CF6307FA1E038BE2CB41CC4CCC35E7C02320516D485B373CF0FF438
SHA-512:	3F486065FE1312B76B7C8294D459653A7D1A64D30A935DA19C2BAB319AF204C91248423B1E2BE22D07E8C33C2621611032E5D5B6F1CB2DF10E83A4563030570F
Malicious:	false
Reputation:	low
URL:	https://nationscdn.azureedge.net/otc-container/images/benefits-image.png
Preview:	.PNG........IHDR.......%.....j'......tEXtSoftware.Adobe ImageReadyq.e<...'iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 9.1-c001 79.1462899777, 2023/06/25-23:57:14 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 25.3 (Windows)" xmpMM:InstanceID="xmp.iid:DA9F6ECFA09F11EEB3CFBE621132CAA1" xmpMM:DocumentID="xmp.did:DA9F6ED0A09F11EEB3CFBE621132CAA1"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DA9F6ECDA09F11EEB3CFBE621132CAA1" stRef:documentID="xmp.did:DA9F6ECEA09F11EEB3CFBE621132CAA1"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Ih.....IDATx...\T..........(v.X...[..I...'&......h....+v............yw...2.\|^......o..vvgw..E.A..A..1....... d

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	14174
Entropy (8bit):	4.6516483145466205
Encrypted:	false
SSDEEP:	192:x+wH93cBSKJ3JMuKpFjPrGErkNH93tkLVJ3xEXNwzJhuKprs3A6lG0ClAoAK:x+nBSw7Erh3xuSHs3A68HZ
MD5:	7D1639CE91EB8D160DCFFD5D6194376E
SHA1:	5BCCBB942AF5721951EDE9F46814976CADF664D4
SHA-256:	DC7DA146747D5154CC7CD640FC5B2147299C2AC4DC5C9C92990FABC26ACA65C1
SHA-512:	4F9B39CF9995433696E71A8B2A70EC787C6CEF483F04BBA5327D9D6651B259CB1D1984BD274B768EF2DCB5187479342986FBAE9919E79EF426419E0CD967BCCA
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>..<svg width="105px" height="99px" viewBox="0 0 105 99" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.. <title>8CDFBD1D-BE20-4D86-8E7C-D3EF6FC966CC@3x</title>.. <defs>.. <polygon id="path-1" points="0.82368 0.87408 89.1432 0.87408 89.1432 7.74 0.82368 7.74"></polygon>.. <linearGradient x1="0.000650710058%" y1="50.0027244%" x2="99.9998673%" y2="50.0027244%" id="linearGradient-3">.. <stop stop-color="#7E939C" offset="0%"></stop>.. <stop stop-color="#B6E1F0" offset="100%"></stop>.. </linearGradient>.. <path d="M35.09424,0.16128 C34.632,0.16128 34.25904,0.53568 34.25904,0.99792 L34.25904,0.99792 C34.25904,1.46016 34.632,1.83456 35.09424,1.83456 L35.09424,1.83456 L60.48144,1.83456 L60.48144,42.96816 L1.9944,42.96816 L1.9944,12.1824 C1.9944,11.72016 1.62,11.34432 1.15776,11.34432 L1.15776,11.34432 C0.69552,11.34432 0.32112,11.72016 0.32112,12.1824 L0.32

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (320), with CRLF line terminators
Category:	downloaded
Size (bytes):	6079
Entropy (8bit):	5.149452411074911
Encrypted:	false
SSDEEP:	96:nbw+UoFKLVVVKTT+ExxUwEkAYL51sLiVtJlwegok8TJR:fgLVVQvNxxjLVtLk3QJR
MD5:	04F828777C93478E2F531F8308A24696
SHA1:	36C328652240BB7AB646275E6EBDF3E7006EBBE4
SHA-256:	7806556801110D51CA151D00263FFA09AE650A52E0CF339CA75168A7D7433043
SHA-512:	86DD7505F59F5CA281358FAE465FDE51E0C6E5853E72E84FC03D863F8CFC28D21935717C10C7C7ABDDCB8A3F15F680CDCE9A0B6629EE2F791A096E723FCDAAE8
Malicious:	false
Reputation:	low
URL:	https://selecthealth.nationsbenefits.com/css/banner.css
Preview:	./* SFMono Fonts CSS */..@font-face {.. font-family: "SFMono-Regular";.. src: url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff2') format('woff'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff') format('truetype'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.otf') format('svg');.. font-display: auto;.. font-style: normal;.. font-weight: 400;.. font-stretch: normal;..}....@font-face {.. font-family: "SFMono-Semibold";.. src: url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Semibold.woff2') format('woff'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Semibold.woff') format('truetype'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Semibold.otf') format('svg');.. font-display: auto;.. font-style: normal;.. font-weight: 600;.. font-stretch: normal;..}....@font-face {.. fo

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	933361
Entropy (8bit):	5.505911748864268
Encrypted:	false
SSDEEP:	6144:yIe62LHV0u1jVuvT3kXL2q5Bq44jBQPW3jJgNPedC5Tp:yH6CHVz1jVEUXL2q5MPjbCf
MD5:	E6BCF3129A47306A1DD6BDA76FA6EE08
SHA1:	67D2CE4A7A8F952CD889FCDDFCBB58B4BD32A981
SHA-256:	C70F10851EA8226DA5DB94076AE8DAFC33B9925234D32BD287785416F1315D39
SHA-512:	AD3EF4A6826FC104FD01D7D4D20523A7A82E38D5A36FFDAC840E5643FC6FB2E46AC7BEBD8216F37CF63074B2A2103FAAB963804979674EE3D1955E14CE622AEF
Malicious:	false
Reputation:	low
URL:	https://selecthealth.nationsbenefits.com/css/kendo_theme.css
Preview:	.k-theme-test-class,...k-common-test-class {.. opacity: 0;..}....[hidden] {.. display: none !important;..}....script {.. display: none !important;..}.....k-hidden {.. display: none !important;..}.....k-rtl {.. direction: rtl;..}.....k-sr-only {.. position: absolute;.. left: -1px;.. width: 1px;.. height: 1px;.. overflow: hidden;..}.....k-hbox,...k-hstack {.. display: flex;.. flex-flow: row nowrap;..}.....k-vbox,...k-vstack {.. display: flex;.. flex-flow: column nowrap;..}.....k-flex,...k-spacer {.. flex: 1 0 0%;..}.....k-flex-layout {.. display: flex;..}.....k-grid-layout {.. display: grid;..}.....k-separator {.. width: auto;.. height: 0;.. border-width: 1px 0 0;.. border-style: solid;.. border-color: inherit;.. display: block;.. flex-grow: 0 !important;.. flex-shrink: 0 !important;.. align-self: stretch;..}.....k-separator-horizontal,...k-vstack > .k-separator {.. width: auto;.. height: 0;.. border-w

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	753	OUT	GET /css/store-locator.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 10037 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c54235" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	10037	IN	Data Raw: ef bb bf 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 7d 0d 0a 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 2e 73 65 63 2d 68 65 61 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 34 70 78 3b 7d 0d 0a 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 2e 73 65 63 2d 68 65 61 64 20 68 32 2c 20 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 2e 73 65 63 2d 68 65 61 64 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 2e 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 36 70 78 3b 20 6d 61 72 67 69 6e 3a 30 70 78 3b 7d 0d 0a 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 2e 73 65 63 2d 68 65 61 64 20 70 7b 66 6f 6e 74 Data Ascii: .store-locator{margin:0 auto;}.store-locator .sec-head{margin-bottom:34px;}.store-locator .sec-head h2, .store-locator .sec-head h1{font-size:32px;font-weight:bold;letter-spacing:0.3px;line-height:36px; margin:0px;}.store-locator .sec-head p{font

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	757	OUT	GET /css/transaction-style.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 4406 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c57436" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	4406	IN	Data Raw: 2e 6b 2d 69 2d 6d 6f 72 65 2d 76 65 72 74 69 63 61 6c 3a 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0d 0a 20 20 20 20 2f 2a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 74 61 62 6c 65 2d 66 69 6c 74 65 72 2d 69 63 6f 6e 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2a 2f 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 36 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 34 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0d 0a 7d 0d 0a 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 45 39 45 43 46 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0d 0a 2e 6b 2d 67 72 69 64 2d 68 65 61 64 65 72 Data Ascii: .k-i-more-vertical::before { content: ""; /background: url(../images/table-filter-icon.png) no-repeat;/ width: 16px; height: 14px; background-size: cover;}.k-grid-header{background-color: #E9ECF0 !important;}.k-grid-header

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	749	OUT	GET /css/instacart.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 8300 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c5456c" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	8300	IN	Data Raw: ef bb bf 2f 2a 20 53 46 4d 6f 6e 6f 20 46 6f 6e 74 73 20 43 53 53 20 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 22 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 Data Ascii: /* SFMono Fonts CSS */@font-face { font-family: "SFMono-Regular"; src: url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff2') format('woff'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/S

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	759	OUT	GET /css/dashboard/dashboard.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 29438 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c517fe" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	15817	IN	Data Raw: ef bb bf 2f 2a 20 53 46 4d 6f 6e 6f 20 46 6f 6e 74 73 20 43 53 53 20 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 22 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 Data Ascii: /* SFMono Fonts CSS */@font-face { font-family: "SFMono-Regular"; src: url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff2') format('woff'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/S
2025-04-02 21:45:28 UTC	13621	IN	Data Raw: 6f 75 74 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 61 6c 6c 20 30 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 7d 0d 0a 2e 70 6f 70 75 6c 61 72 2d 63 61 74 65 67 6f 72 69 65 73 20 2e 73 65 63 74 69 6f 6e 2d 74 6f 70 2d 6c 65 66 74 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 38 70 78 3b 7d 0d 0a 2e 70 6f 70 75 6c 61 72 2d 67 72 69 64 20 2e 69 6d 67 2d 62 6c 6f 63 6b 3a 68 6f 76 65 72 2c 20 2e 62 65 6e 65 66 69 74 2d 62 61 6c 61 6e 63 65 2d 63 61 72 64 20 2e 69 6d 67 2d 62 6c 6f 63 6b 3a 68 6f 76 65 72 7b 62 Data Ascii: out;-o-transition: all 0.3s ease-in-out;-moz-transition: all 0.3s ease-in-out;-webkit-transition: all 0.3s ease-in-out;}.popular-categories .section-top-left {margin-bottom: 8px;}.popular-grid .img-block:hover, .benefit-balance-card .img-block:hover{b

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	756	OUT	GET /css/react-datepicker.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 25236 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c50794" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	15817	IN	Data Raw: 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 6f 70 70 65 72 5b 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 22 62 6f 74 74 6f 6d 22 5d 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 74 72 69 61 6e 67 6c 65 2c 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 2d 70 6f 70 70 65 72 5b 64 61 74 61 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 22 74 6f 70 22 5d 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 74 72 69 61 6e 67 6c 65 2c 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 79 65 61 72 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 0d 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 72 65 61 64 2d 76 69 65 77 2d 2d 64 6f 77 6e 2d 61 72 72 6f 77 2c 0d 0a 2e Data Ascii: .react-datepicker-popper[data-placement^="bottom"] .react-datepicker__triangle, .react-datepicker-popper[data-placement^="top"] .react-datepicker__triangle, .react-datepicker__year-read-view--down-arrow,.react-datepicker__month-read-view--down-arrow,.
2025-04-02 21:45:28 UTC	9419	IN	Data Raw: 2c 0d 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 0d 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 6d 6f 6e 74 68 2d 74 65 78 74 2d 2d 69 6e 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 0d 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 73 65 6c 65 63 74 65 64 3a 68 6f 76 65 72 2c 0d 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 69 6e 2d 73 65 6c 65 63 74 69 6e 67 2d 72 61 6e 67 65 3a 68 6f 76 65 72 2c 0d 0a 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 71 75 61 72 74 65 72 2d 74 65 78 74 2d 2d 69 6e 2d Data Ascii: ,.react-datepicker__month-text--in-selecting-range:hover,.react-datepicker__month-text--in-range:hover,.react-datepicker__quarter-text--selected:hover,.react-datepicker__quarter-text--in-selecting-range:hover,.react-datepicker__quarter-text--in-

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	749	OUT	GET /css/Cart/cart.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:28 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 1229 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c561cd" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:28 UTC	1229	IN	Data Raw: ef bb bf 2e 63 61 72 74 2d 62 65 6e 65 66 69 74 73 2d 77 61 6c 6c 65 74 20 7b 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 7d 0d 0a 2e 63 61 72 74 2d 62 65 6e 65 66 69 74 73 2d 62 6c 6f 63 6b 20 2e 63 75 73 74 6f 6d 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 0d 0a 2e 63 61 72 74 2d 62 65 6e 65 66 69 74 73 2d 62 6c 6f 63 6b 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 39 38 2e 30 35 64 65 67 2c 20 23 30 30 34 39 37 41 20 37 2e 37 34 25 2c 20 23 30 30 36 35 41 39 20 39 34 2e 39 37 25 29 3b 70 61 64 64 69 6e 67 3a 20 31 36 70 78 Data Ascii: .cart-benefits-wallet { display: flex; align-items: center;justify-content: space-between;}.cart-benefits-block .custom-link:hover {color: #fff;}.cart-benefits-block {background:linear-gradient(98.05deg, #00497A 7.74%, #0065A9 94.97%);padding: 16px

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:28 UTC	753	OUT	GET /css/Common/common.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:28 GMT Content-Type: text/css Content-Length: 25130 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c5072a" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	15817	IN	Data Raw: ef bb bf 2f 2a 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 43 6f 6d 6d 6f 6e 20 43 53 53 0d 0a 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0d 0a 2a 2f 0d 0a 3a 72 6f 6f 74 7b 0d 0a 20 20 20 20 2d 2d 70 72 69 6d 61 72 79 2d 63 6f 6c 6f 72 3a 23 44 36 34 30 32 39 3b 0d 0a 20 20 20 20 2d 2d 70 72 69 6d 61 72 79 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 23 43 39 33 43 32 37 3b 0d 0a 20 20 20 20 2d 2d 70 72 69 6d 61 72 79 2d 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 64 66 30 65 64 3b 0d 0a 20 20 20 20 0d 0a 20 20 20 20 2d 2d 73 65 63 6f 6e 64 61 72 79 2d Data Ascii: /================================================Common CSS================================================/:root{ --primary-color:#D64029; --primary-hover-color:#C93C27; --primary-light-color:#fdf0ed; --secondary-
2025-04-02 21:45:29 UTC	9313	IN	Data Raw: 20 20 20 20 2e 69 6e 73 74 61 63 61 72 74 2d 62 61 6e 6e 65 72 2d 66 75 6c 6c 20 2e 62 61 6e 6e 65 72 2d 62 74 6e 7b 6d 69 6e 2d 77 69 64 74 68 3a 31 39 39 70 78 3b 7d 0d 0a 20 20 20 20 2e 6d 75 6c 74 69 2d 62 61 6e 6e 65 72 20 2e 72 65 77 61 72 64 73 2d 63 61 72 64 2d 63 6f 6e 74 65 6e 74 20 7b 6d 61 78 2d 77 69 64 74 68 3a 34 31 30 70 78 3b 7d 0d 0a 20 20 20 20 2e 6d 75 6c 74 69 2d 62 61 6e 6e 65 72 20 68 34 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 30 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 30 3b 7d 0d 0a 20 20 20 20 2e 6d 75 6c 74 69 2d 62 61 6e 6e 65 72 20 2e 72 65 77 61 72 64 73 2d 63 61 72 64 2d 69 Data Ascii: .instacart-banner-full .banner-btn{min-width:199px;} .multi-banner .rewards-card-content {max-width:410px;} .multi-banner h4 {font-size: 24px;font-weight: 600 !important;line-height: 30px;letter-spacing:0;} .multi-banner .rewards-card-i

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	765	OUT	GET /css/StoreLocator/storelocator.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 2066 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c56d12" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	2066	IN	Data Raw: ef bb bf 2f 2a 20 50 72 6f 64 75 63 74 20 45 6c 69 67 69 62 69 6c 69 74 79 20 42 61 6e 6e 65 72 20 53 65 63 74 69 6f 6e 20 43 53 53 20 2a 2f 0d 0a 2e 65 6c 69 67 69 62 69 6c 69 74 79 2d 62 61 6e 6e 65 72 20 7b 70 61 64 64 69 6e 67 3a 20 31 32 70 78 20 31 36 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6f 74 63 2d 63 6f 6e 74 61 69 6e 65 72 2f 69 6d 61 67 65 73 2f 65 6c 69 67 69 62 69 6c 69 74 79 2d 62 61 6e 6e 65 72 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 63 65 6e 74 65 72 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 Data Ascii: /* Product Eligibility Banner Section CSS */.eligibility-banner {padding: 12px 16px; background: url(https://nationscdn.azureedge.net/otc-container/images/eligibility-banner.jpg) no-repeat right center; background-size:cover; border: 1px solid rgba(0

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	752	OUT	GET /css/market-place.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 32113 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c51871" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	15817	IN	Data Raw: ef bb bf 2f 2a 20 53 46 4d 6f 6e 6f 20 46 6f 6e 74 73 20 43 53 53 20 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 22 3b 0d 0a 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 46 4d 6f 6e 6f 2d 52 65 Data Ascii: /* SFMono Fonts CSS */@font-face {font-family: "SFMono-Regular";src: url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff2') format('woff'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Re
2025-04-02 21:45:29 UTC	16144	IN	Data Raw: 7d 0d 0a 2e 6d 61 72 6b 65 74 70 6c 61 63 65 2d 63 61 74 65 67 6f 72 69 65 73 20 2e 63 61 74 65 67 6f 72 69 65 73 2d 62 67 20 2e 63 61 74 65 67 6f 72 69 65 73 2d 69 6d 67 2e 63 61 74 65 67 6f 72 69 65 73 2d 6e 6f 6e 65 20 7b 72 69 67 68 74 3a 20 31 36 70 78 3b 74 6f 70 3a 20 39 70 78 3b 77 69 64 74 68 3a 20 37 34 70 78 3b 7d 0d 0a 2e 6d 61 72 6b 65 74 70 6c 61 63 65 2d 63 61 74 65 67 6f 72 69 65 73 20 2e 63 61 74 65 67 6f 72 69 65 73 2d 62 67 20 68 35 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 65 6e 64 3b 7d 0d 0a 2e 72 65 63 6f 6d 6d 65 6e 64 65 64 2d 73 65 63 2d 6c 65 66 74 20 2e 69 74 65 6d 2d 6e 61 6d 65 20 Data Ascii: }.marketplace-categories .categories-bg .categories-img.categories-none {right: 16px;top: 9px;width: 74px;}.marketplace-categories .categories-bg h5 {font-size: 16px;line-height: 20px;display: flex;align-items: end;}.recommended-sec-left .item-name
2025-04-02 21:45:29 UTC	152	IN	Data Raw: 70 78 20 33 36 70 78 3b 77 69 64 74 68 3a 20 31 30 30 25 3b 7d 0d 0a 2e 6d 61 72 6b 65 74 70 6c 61 63 65 2d 6c 6f 67 6f 20 69 6d 67 7b 6d 61 72 67 69 6e 3a 2d 38 70 78 20 30 20 30 3b 7d 0d 0a 2e 63 61 74 65 67 6f 72 69 65 2d 6c 69 73 74 20 2e 61 6e 67 6c 65 2d 69 63 6f 6e 20 7b 74 6f 70 3a 20 31 30 70 78 3b 7d 0d 0a 2e 63 61 72 64 2d 68 65 61 64 65 72 20 2e 6f 72 64 65 72 49 6e 66 6f 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 30 3b 7d 0d 0a 7d 0d 0a Data Ascii: px 36px;width: 100%;}.marketplace-logo img{margin:-8px 0 0;}.categorie-list .angle-icon {top: 10px;}.card-header .orderInfo {margin-left: 0;}}

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	746	OUT	GET /css/banner.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 6079 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c572bf" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	6079	IN	Data Raw: ef bb bf 2f 2a 20 53 46 4d 6f 6e 6f 20 46 6f 6e 74 73 20 43 53 53 20 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 22 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 Data Ascii: /* SFMono Fonts CSS */@font-face { font-family: "SFMono-Regular"; src: url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff2') format('woff'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/S

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://selecthealth.nationsbenefits.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Windows Analysis Report
http://selecthealth.nationsbenefits.com

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	750	OUT	GET /css/new-header.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 35393 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c5ef41" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	15817	IN	Data Raw: ef bb bf 2f 2a 20 53 46 4d 6f 6e 6f 20 46 6f 6e 74 73 20 43 53 53 20 20 2a 2f 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 22 3b 0d 0a 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 20 75 72 6c 28 27 68 74 74 70 73 3a 2f 2f 6e 61 74 69 6f 6e 73 63 64 6e 2e 61 7a 75 72 65 65 64 67 65 2e 6e 65 74 2f 6e 62 2d 63 6f 6e 74 61 69 6e 65 72 2f 66 6f 6e 74 73 2f 53 46 4d 6f 6e 6f 2f 53 Data Ascii: /* SFMono Fonts CSS */@font-face { font-family: "SFMono-Regular"; src: url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/SFMono-Regular.woff2') format('woff'), url('https://nationscdn.azureedge.net/nb-container/fonts/SFMono/S
2025-04-02 21:45:29 UTC	16144	IN	Data Raw: 6c 61 79 3a 66 6c 65 78 3b 20 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 7d 0d 0a 2e 73 68 6f 70 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 7b 77 69 64 74 68 3a 35 30 25 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 36 70 78 3b 7d 0d 0a 2e 73 68 6f 70 2d 64 72 6f 70 64 6f 77 6e 20 75 6c 20 6c 69 20 61 20 7b 70 61 64 64 69 6e 67 3a 20 36 70 78 3b 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 6f 6f 64 73 6d 6f 6b 65 2d 63 6f 6c 6f 72 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 2e 33 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 30 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 69 6e 68 65 72 69 Data Ascii: lay:flex; flex-wrap:wrap;}.shop-dropdown ul li{width:50%; margin:0; margin-bottom:6px;}.shop-dropdown ul li a {padding: 6px;display: inline-block;color: var(--woodsmoke-color);font-size: 16px;letter-spacing: 0.3px;line-height: 20px;font-weight: inheri
2025-04-02 21:45:29 UTC	3432	IN	Data Raw: 72 20 2e 63 6c 69 65 6e 74 2d 6c 6f 67 6f 7b 6d 61 72 67 69 6e 3a 30 70 78 3b 20 70 61 64 64 69 6e 67 3a 30 70 78 3b 7d 0d 0a 68 65 61 64 65 72 20 2e 6f 74 63 2d 68 65 61 64 65 72 2d 69 6e 6e 65 72 20 2e 63 6c 69 65 6e 74 2d 6c 6f 67 6f 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 7d 0d 0a 2e 6f 74 63 2d 68 65 61 64 65 72 2d 69 6e 6e 65 72 20 75 6c 20 6c 69 20 61 20 69 6d 67 20 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 38 70 78 3b 68 65 69 67 68 74 3a 20 32 34 70 78 3b 7d 0d 0a 2e 6f 74 63 2d 68 65 61 64 65 72 2d 69 6e 6e 65 72 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 2c 20 2e 63 75 73 74 6f 6d 2d 6e 61 76 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 20 7b 70 61 64 64 69 6e 67 3a 20 38 70 Data Ascii: r .client-logo{margin:0px; padding:0px;}header .otc-header-inner .client-logo:before{display:none;}.otc-header-inner ul li a img {margin-right: 8px;height: 24px;}.otc-header-inner .navbar-nav .nav-link, .custom-nav .navbar-nav .nav-link {padding: 8p

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	751	OUT	GET /css/addressbook.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 9591 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c54077" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	9591	IN	Data Raw: ef bb bf 2f 2a 4e 65 77 20 63 73 73 2a 2f 0d 0a 2e 61 64 64 72 65 73 73 2d 62 6f 6f 6b 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 35 30 70 78 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 20 20 20 70 61 64 64 69 6e 67 3a 20 32 34 70 78 20 34 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 0d 0a 2e 61 64 64 72 65 73 73 2d 62 6f 6f 6b 20 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 34 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 3b 7d 0d 0a 2e 61 64 64 72 65 73 73 2d 62 6f 6f 6b 20 68 Data Ascii: /New css/.address-book{margin-bottom: 50px; max-height: 100%; margin-bottom: 16px; border-radius:0; padding: 24px 40px; position:relative}.address-book h4{font-size:28px; line-height:34px; font-weight:bold; margin-bottom:24px;}.address-book h

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	753	OUT	GET /css/healthProfile.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 3433 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c56869" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	3433	IN	Data Raw: ef bb bf 0d 0a 2f 2a 20 48 65 61 6c 74 68 20 50 72 6f 66 69 6c 65 20 43 73 73 20 53 74 61 72 74 20 48 65 72 65 20 2a 2f 0d 0a 2e 70 65 72 73 6f 6e 61 6c 2d 68 65 61 6c 74 68 2d 73 65 63 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 70 61 64 64 69 6e 67 3a 20 31 36 70 78 3b 7d 0d 0a 2e 70 65 72 73 6f 6e 61 6c 2d 68 65 61 6c 74 68 2d 63 6f 6e 74 20 7b 70 61 64 64 69 6e 67 3a 20 34 30 70 78 20 30 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 45 39 45 43 46 30 3b 7d 0d 0a 2e 70 65 72 73 6f 6e 61 6c 2d 68 65 61 6c 74 68 2d 73 65 63 20 2e 74 69 74 6c 65 2d 63 6f 6e 74 20 68 31 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 32 70 78 3b 6c 69 Data Ascii: /* Health Profile Css Start Here */.personal-health-sec {background-color: #fff;border-radius: 6px;padding: 16px;}.personal-health-cont {padding: 40px 0px;border-bottom: 1px solid #E9ECF0;}.personal-health-sec .title-cont h1 {font-size: 32px;li

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	757	OUT	GET /css/new-store-locator.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 15771 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c5589b" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	15771	IN	Data Raw: ef bb bf 2f 2a 20 53 74 6f 72 65 20 53 65 61 72 63 68 62 61 72 20 53 65 63 74 69 6f 6e 20 2a 2f 0d 0a 2e 74 72 65 6e 64 69 6e 67 2d 73 65 61 72 63 68 2d 72 65 73 75 6c 74 73 20 75 6c 20 6c 69 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 7d 0d 0a 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 2d 74 6f 70 7b 6d 61 78 2d 77 69 64 74 68 3a 38 30 38 70 78 3b 20 6d 61 72 67 69 6e 3a 32 30 70 78 20 61 75 74 6f 20 30 70 78 3b 7d 0d 0a 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 20 7b 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 0d 0a 2e 73 74 6f 72 65 2d 6c 6f 63 61 74 6f 72 2d 73 65 61 72 63 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e Data Ascii: /* Store Searchbar Section */.trending-search-results ul li {text-align: left;}.store-locator-top{max-width:808px; margin:20px auto 0px;}.store-locator {max-width: 100%;margin: 0 auto;background-color: #fff;}.store-locator-search{text-align:cen

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	748	OUT	GET /css/outcomes.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 6478 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c57c4e" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	6478	IN	Data Raw: ef bb bf 2e 6d 61 6e 61 67 65 2d 68 65 61 6c 74 68 2d 62 61 6e 6e 65 72 7b 70 61 64 64 69 6e 67 3a 33 31 70 78 20 30 70 78 3b 67 61 70 3a 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 31 34 36 35 35 37 3b 20 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 34 30 70 78 3b 7d 0d 0a 2e 6d 61 6e 61 67 65 2d 68 65 61 6c 74 68 2d 62 61 6e 6e 65 72 20 2e 74 69 74 6c 65 20 68 31 7b 6d 61 72 67 69 6e 3a 30 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 6d 61 72 67 69 6e 3a 30 70 78 20 30 70 78 20 31 32 70 78 3b 7d 0d 0a 2e 6d 61 6e 61 67 65 2d 68 65 61 6c 74 68 2d 62 61 6e 6e 65 72 20 2e 74 69 74 6c 65 20 70 7b 66 Data Ascii: .manage-health-banner{padding:31px 0px;gap:24px;background: #146557; margin:0px 0px 40px;}.manage-health-banner .title h1{margin:0px; font-size:32px; font-weight:600;color:#fff; line-height:32px;margin:0px 0px 12px;}.manage-health-banner .title p{f

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	752	OUT	GET /css/utilitiesfaq.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 3273 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c569c9" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	3273	IN	Data Raw: ef bb bf 0d 0a 2e 75 74 69 6c 69 74 69 65 73 2d 66 61 71 2d 73 65 63 7b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 30 70 78 3b 7d 0d 0a 2e 75 74 69 6c 69 74 69 65 73 2d 66 61 71 2d 73 65 63 20 2e 66 61 71 2d 63 6f 6e 74 65 6e 74 20 2e 66 61 71 2d 69 63 6f 6e 20 7b 77 69 64 74 68 3a 20 31 30 30 70 78 3b 68 65 69 67 68 74 3a 31 30 30 70 78 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 46 46 45 41 45 42 3b 7d 0d 0a 2e 75 74 69 6c 69 74 69 65 73 2d 66 61 71 2d 73 65 63 20 2e 66 61 71 2d 63 6f 6e 74 65 6e 74 20 68 32 20 7b 6d 61 72 67 69 6e 3a 20 30 20 30 20 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 32 70 78 3b 6c 69 Data Ascii: .utilities-faq-sec{padding:24px 0px;}.utilities-faq-sec .faq-content .faq-icon {width: 100px;height:100px;padding:24px;border-radius: 20px;margin:0 0 32px;background: #FFEAEB;}.utilities-faq-sec .faq-content h2 {margin: 0 0 8px;font-size: 32px;li

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	753	OUT	GET /css/benefitsusage.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 5845 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c573d5" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	5845	IN	Data Raw: ef bb bf 2e 62 65 6e 65 66 69 74 73 2d 75 73 61 67 65 2d 68 65 61 64 65 72 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 38 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 70 78 3b 7d 0d 0a 2e 62 65 6e 65 66 69 74 73 2d 76 69 64 65 6f 2d 62 6c 6f 63 6b 2c 20 2e 70 6c 61 79 69 6e 67 2d 76 69 64 65 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 29 3b 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 32 70 78 20 38 70 78 20 30 70 78 20 72 67 62 61 28 31 34 2c 20 31 30 2c 20 33 31 2c 20 30 2e 30 38 29 3b 20 68 65 69 67 68 74 3a 31 30 30 25 3b 20 70 Data Ascii: .benefits-usage-header h3{font-size:32px; font-weight:400; line-height:38px; margin-bottom:0px;}.benefits-video-block, .playing-video{background:var(--white-color); border-radius:8px; box-shadow: 0px 2px 8px 0px rgba(14, 10, 31, 0.08); height:100%; p

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	752	OUT	GET /css/cardTracking.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	326	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 3943 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c56a67" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	3943	IN	Data Raw: ef bb bf 2e 74 72 61 63 6b 69 6e 67 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 62 6f 64 79 7b 70 61 64 64 69 6e 67 3a 31 36 70 78 20 32 34 70 78 3b 7d 0d 0a 2e 74 72 61 63 6b 69 6e 67 2d 6d 6f 64 61 6c 20 2e 6d 6f 64 61 6c 2d 66 6f 6f 74 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 3b 7d 0d 0a 0d 0a 2e 74 72 61 63 6b 2d 69 6e 66 6f 20 7b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 36 70 78 3b 7d 0d 0a 2e 74 72 61 63 6b 2d 69 6e 66 6f 20 68 36 7b 6d 61 72 67 69 6e 3a 30 20 31 36 70 78 20 30 20 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 3b 7d 0d 0a 2e 74 72 61 63 6b Data Ascii: .tracking-modal .modal-body{padding:16px 24px;}.tracking-modal .modal-footer{justify-content:flex-start;}.track-info {display: flex;align-items: center;margin: 0 0 16px;}.track-info h6{margin:0 16px 0 0;font-size:16px;line-height:20px;}.track

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	752	OUT	GET /css/orderHistory.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:29 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:29 GMT Content-Type: text/css Content-Length: 10067 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c54253" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:29 UTC	10067	IN	Data Raw: ef bb bf 2e 63 75 73 74 6f 6d 2d 73 74 61 74 75 73 20 7b 0d 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 3b 0d 0a 70 61 64 64 69 6e 67 3a 20 34 70 78 20 38 70 78 3b 0d 0a 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0d 0a 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0d 0a 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0d 0a 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 0d 0a 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 63 75 73 74 6f 6d 2d 63 6f 6e 66 69 72 6d 65 64 20 7b 0d 0a 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 33 33 42 44 45 33 3b 0d 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 45 43 46 41 46 46 3b 0d 0a 63 6f 6c 6f 72 3a 20 23 30 30 Data Ascii: .custom-status {border-radius: 4px;border: 1px solid;padding: 4px 8px;font-size: 12px;font-weight: 600;line-height: normal;display:flex;align-items:center;}.custom-confirmed {border-color:#33BDE3;background: #ECFAFF;color: #00

Timestamp	Bytes transferred	Direction	Data
2025-04-02 21:45:29 UTC	750	OUT	GET /css/freshmeals.css HTTP/1.1 Host: selecthealth.nationsbenefits.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: .AspNetCore.Session=CfDJ8LeUxzkboIpPiQw1SjfzyCkUgZu3D19uGbIJhKlatRRG30CyN4c2Wz0SL1cw426g8b9uT2ckE%2FWxgJ0uSDizQZWGjgHT0ALx%2BVPIO0RS4mnwcxus%2FL4u%2FaPhuDENqMZLLxG9BQZy5vBdOZvJZSlHg6VDWuoQLMMmwGmdOk7ZskA3
2025-04-02 21:45:30 UTC	327	IN	HTTP/1.1 200 OK Date: Wed, 02 Apr 2025 21:45:30 GMT Content-Type: text/css Content-Length: 13882 Connection: close Accept-Ranges: bytes ETag: "1dba3c241c5533a" Last-Modified: Wed, 02 Apr 2025 11:27:46 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:9e41d02e-ff68-4d2a-801d-238ef82cc088
2025-04-02 21:45:30 UTC	13882	IN	Data Raw: ef bb bf 0d 0a 0d 0a 2f 2a 20 50 61 67 65 20 4c 65 76 65 6c 20 43 6f 6d 6d 6f 6e 20 43 53 53 20 53 74 61 72 74 20 48 65 72 65 20 2a 2f 0d 0a 2e 68 65 61 72 69 6e 67 2d 62 65 6e 65 66 69 74 73 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 6f 6f 64 73 6d 6f 6b 65 2d 63 6f 6c 6f 72 29 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 36 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 7d 0d 0a 2e 68 65 61 72 69 6e 67 2d 62 65 6e 65 66 69 74 73 20 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 6f 6f 64 73 6d 6f 6b 65 2d 63 6f 6c 6f 72 29 3b 6d 61 72 67 69 6e 3a 30 20 Data Ascii: /* Page Level Common CSS Start Here */.hearing-benefits h2{font-size:32px;line-height:40px;color:var(--woodsmoke-color);margin:0 0 16px;font-weight:600;}.hearing-benefits h3{font-size:24px;line-height:30px;color:var(--woodsmoke-color);margin:0