Edit tour

Windows Analysis Report
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe

Overview

General Information

Sample URL:	https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe
Analysis ID:	1670541
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	80%

Signatures

Suricata IDS alerts with low severity for network traffic

URL contains potential PII (phishing indication)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,17872778655380617681,13811433670464068560,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1964 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

ET EXPLOIT_KIT PluginDetect Observed - Possible EK Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-04-21T21:07:49.860980+0200	2028938	1	Exploit Kit Activity Detected	34.212.209.125	443	192.168.2.4	49736	TCP

HTTP traffic detected: POST /survey/selfserve/3668/250302 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveContent-Length: 945Cache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Origin: https://selfserve.decipherinc.comContent-Type: application/x-www-form-urlencodedUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 21 Apr 2025 19:07:50 GMTServer: ApacheX-Content-Type-Options: nosniffContent-Length: 196Connection: closeContent-Type: text/html; charset=iso-8859-1

Source: chromecache_82.2.dr	String found in binary or memory: http://brothercake.com/site/resources/scripts/onload/
Source: chromecache_82.2.dr	String found in binary or memory: http://code.google.com/p/swfobject/
Source: chromecache_82.2.dr	String found in binary or memory: http://code.google.com/p/swfobject/wiki/documentation
Source: chromecache_82.2.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_81.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_81.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/
Source: chromecache_82.2.dr	String found in binary or memory: http://webreflection.blogspot.com/2009/01/32-bytes-to-know-if-your-browser-is-ie.html
Source: chromecache_82.2.dr	String found in binary or memory: http://www.bobbyvandersluis.com/articles/dynamicCSS.php
Source: chromecache_82.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5Vvk4jLeTY.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5Vvl4jL.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvlIjLeTY.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5Vvm4jLeTY.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvmIjLeTY.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvmYjLeTY.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/firasans/v17/va9E4kDNxMZdWfMOD5VvmojLeTY.woff2)

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.4:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.212.209.125:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.212.209.125:443 -> 192.168.2.4:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.49.251:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.22.49.251:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.212.209.125:443 -> 192.168.2.4:49739 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@21/62@24/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,17872778655380617681,13811433670464068560,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1964 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,17872778655380617681,13811433670464068560,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1964 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://www.bobbyvandersluis.com/articles/dynamicCSS.php	0%	Avira URL Cloud	safe
http://brothercake.com/site/resources/scripts/onload/	0%	Avira URL Cloud	safe
http://webreflection.blogspot.com/2009/01/32-bytes-to-know-if-your-browser-is-ie.html	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
beacons-handoff.gcp.gvt2.com	142.251.116.94	true	false	high
selfserve.decipherinc.com	34.212.209.125	true	false	high
www.google.com	192.178.49.164	true	false	high
selfserve.surveyfiles.com	104.22.49.251	true	false	high
e2c73.gcp.gvt2.com	34.0.245.166	true	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,kna0pn5jdzsa43wp,715,797,796	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302#$	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tn2g7qzwjqrj0rx5,720,825,824	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/logo_70165257ac7e3dc837ab7417cd4b60a8.jpg	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302#*	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302#,	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302#&	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302#'	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302#)	false	high
https://selfserve.decipherinc.com/s/support/plugindetect.js?d0609be161	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302	false	high
https://selfserve.decipherinc.com/favicon.ico	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe	false	high
https://selfserve.decipherinc.com/s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.beacon.css?4ddb951d43	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,r55r66md8pe113fq,716,830,829	false	high
https://selfserve.decipherinc.com/s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.custom.min.css?ad7753b880	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,wavx1w5pc47321a5,758,896,895	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tfrztpnjmqe8a9cb,1128,3987,3986	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe#?	false	high
https://selfserve.decipherinc.com/page/appversion.js	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302/less-compiled.css?c0d726fa75340d28f12ded57284b22e0	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,na5q69y4z6u4qd02,713,804,803	false	high
https://selfserve.decipherinc.com/s/iq/swfobject22.js?8c2ec4bc2c	false	high
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,gbyte2wg49p2v1e1,720,801,800	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://jqueryui.com/themeroller/	chromecache_81.2.dr	false		high
http://webreflection.blogspot.com/2009/01/32-bytes-to-know-if-your-browser-is-ie.html	chromecache_82.2.dr	false	Avira URL Cloud: safe	unknown
http://code.google.com/p/swfobject/	chromecache_82.2.dr	false		high
http://jqueryui.com	chromecache_81.2.dr	false		high
http://www.bobbyvandersluis.com/articles/dynamicCSS.php	chromecache_82.2.dr	false	Avira URL Cloud: safe	unknown
http://brothercake.com/site/resources/scripts/onload/	chromecache_82.2.dr	false	Avira URL Cloud: safe	unknown
http://code.google.com/p/swfobject/wiki/documentation	chromecache_82.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_82.2.dr	false		high
http://javascript.nwbox.com/IEContentLoaded/	chromecache_82.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.49.164	www.google.com	United States	15169	GOOGLEUS	false
34.212.209.125	selfserve.decipherinc.com	United States	16509	AMAZON-02US	false
104.22.49.251	selfserve.surveyfiles.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1670541
Start date and time:	2025-04-21 21:06:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@21/62@24/5

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.49.174, 192.178.49.195, 142.251.2.84, 192.178.49.202, 192.178.49.163, 199.232.210.172, 192.178.49.170, 142.250.68.234, 142.250.69.10, 142.250.68.227, 142.250.141.84, 184.29.183.29, 131.253.33.254, 4.245.163.56
Excluded domains from analysis (whitelisted): a-ring-fallback.msedge.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	10827
Entropy (8bit):	5.246879292604322
Encrypted:	false
SSDEEP:	192:mdu2YqmA4kRpBmJ9TNmINU0VpNUTufTUTLbsObxr8WeCf:X9A4uBuTNmI+ANyu7UTLwObxAWeu
MD5:	50C0EF57D36875A1A0498D6C869473D6
SHA1:	71E336A142E5253177C60492DCE416D4E84EC68D
SHA-256:	7AB3DDC31926E612F596FBC8584ED167D93D6D149692F484121C0A7380D54A7C
SHA-512:	605B504FECE4D58FA574F4852F3BDCCFEC1A7DC2D0452CB410A40B5582A7AF7540B0E1342BABF13815467918FDBF0F7AE55F30AC93ADB85ECF93D43BC49690EA
Malicious:	false
Reputation:	low
URL:	https://selfserve.decipherinc.com/survey/selfserve/3668/250302
Preview:	<!DOCTYPE html>. [if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->. [if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->. [if (gt IE 9)\|!(IE)]> ><html lang="en-US"> <![endif]-->.<head>.<meta name="robots" content="noindex, nofollow, noarchive" />.<meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">.. respview.client.meta -->...<title>Market Connections, Inc.</title>... respview.css -->.<link rel="stylesheet" href="/s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.custom.min.css?ad7753b880" />.<link rel="stylesheet" href="/s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.beacon.css?4ddb951d43" />.. generated from: static/support/font-awesome-4.2.0/less/font-awesome.less, static/support/select2-4.0.1/select2.min.css, static/survey.respondent-post151.less, selfserve/3668/250302/static/theme.less and 0 themevars -->.<link rel='stylesheet' href='/survey/selfserve/3668/250302/le

Source: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe#?	HTTP Parser: No favicon
Source: https://selfserve.decipherinc.com/survey/selfserve/3668/250302#$	HTTP Parser: No favicon
Source: https://selfserve.decipherinc.com/survey/selfserve/3668/250302#&	HTTP Parser: No favicon
Source: https://selfserve.decipherinc.com/survey/selfserve/3668/250302#'	HTTP Parser: No favicon
Source: https://selfserve.decipherinc.com/survey/selfserve/3668/250302#)	HTTP Parser: No favicon
Source: https://selfserve.decipherinc.com/survey/selfserve/3668/250302#*	HTTP Parser: No favicon
Source: https://selfserve.decipherinc.com/survey/selfserve/3668/250302#,	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 52.113.196.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.custom.min.css?ad7753b880 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.beacon.css?4ddb951d43 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302/less-compiled.css?c0d726fa75340d28f12ded57284b22e0 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /s/exp/tmp/caaa730ed462680b3c3fc324ca591ac5.js HTTP/1.1Host: selfserve.surveyfiles.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://selfserve.decipherinc.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/exp/tmp/696fc7f735e0c44fc0da11231b264c0e.js HTTP/1.1Host: selfserve.surveyfiles.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://selfserve.decipherinc.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/logo_70165257ac7e3dc837ab7417cd4b60a8.jpg HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /page/appversion.js HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /s/iq/swfobject22.js?8c2ec4bc2c HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /s/support/plugindetect.js?d0609be161 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/logo_70165257ac7e3dc837ab7417cd4b60a8.jpg HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tfrztpnjmqe8a9cb,1128,3987,3986 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tfrztpnjmqe8a9cb,1128,3987,3986 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,wavx1w5pc47321a5,758,896,895 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,wavx1w5pc47321a5,758,896,895 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,gbyte2wg49p2v1e1,720,801,800 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,gbyte2wg49p2v1e1,720,801,800 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,kna0pn5jdzsa43wp,715,797,796 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,kna0pn5jdzsa43wp,715,797,796 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,r55r66md8pe113fq,716,830,829 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,r55r66md8pe113fq,716,830,829 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,na5q69y4z6u4qd02,713,804,803 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,na5q69y4z6u4qd02,713,804,803 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tn2g7qzwjqrj0rx5,720,825,824 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-alivesec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt
Source: global traffic	HTTP traffic detected: GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tn2g7qzwjqrj0rx5,720,825,824 HTTP/1.1Host: selfserve.decipherinc.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: IRIS_SESSION=suqh67awp90w2gvt

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: selfserve.decipherinc.com
Source: global traffic	DNS traffic detected: DNS query: selfserve.surveyfiles.com
Source: global traffic	DNS traffic detected: DNS query: e2c73.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 21, 2025 21:07:40.585882902 CEST	53	61467	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:40.611465931 CEST	53	51172	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:41.753359079 CEST	53	52371	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:43.920366049 CEST	49501	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:43.920464039 CEST	55470	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:44.060625076 CEST	53	55470	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:44.060759068 CEST	53	49501	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:45.958089113 CEST	62757	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:45.958090067 CEST	60959	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:46.120289087 CEST	53	62757	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:46.121263981 CEST	53	60959	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:47.055259943 CEST	52046	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:47.055453062 CEST	57287	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:47.200957060 CEST	53	52046	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:47.225799084 CEST	53	57287	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:48.265925884 CEST	53	61458	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:49.026149988 CEST	49313	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:49.026288033 CEST	55610	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:07:49.183917046 CEST	53	49313	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:49.192266941 CEST	53	55610	1.1.1.1	192.168.2.4
Apr 21, 2025 21:07:58.655431032 CEST	53	56707	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:03.788270950 CEST	53	63867	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:17.764256954 CEST	53	52660	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:40.173856974 CEST	53	52494	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:40.560787916 CEST	53	61299	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:41.857439041 CEST	53	63647	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:41.982496023 CEST	53	54290	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:42.509088993 CEST	64627	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:42.509224892 CEST	55250	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:42.649540901 CEST	53	64627	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:42.660702944 CEST	53	55250	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:43.528791904 CEST	61729	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:43.676332951 CEST	53	61729	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:45.562410116 CEST	61699	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:45.740681887 CEST	53	61699	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:46.561445951 CEST	61699	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:46.701591969 CEST	53	61699	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:47.585772991 CEST	61699	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:47.725815058 CEST	53	61699	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:49.590795994 CEST	61699	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:49.731695890 CEST	53	61699	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:50.519918919 CEST	53	52246	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:50.832796097 CEST	138	138	192.168.2.4	192.168.2.255
Apr 21, 2025 21:08:53.590993881 CEST	61699	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:53.731179953 CEST	53	61699	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:58.519280910 CEST	51645	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:58.519433975 CEST	57643	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:58.659486055 CEST	53	51645	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:58.659638882 CEST	53	57643	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:59.544132948 CEST	63631	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:59.544302940 CEST	56386	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:08:59.684474945 CEST	53	56386	1.1.1.1	192.168.2.4
Apr 21, 2025 21:08:59.684492111 CEST	53	63631	1.1.1.1	192.168.2.4
Apr 21, 2025 21:09:01.576236963 CEST	58613	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:09:01.716455936 CEST	53	58613	1.1.1.1	192.168.2.4
Apr 21, 2025 21:09:02.575465918 CEST	58613	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:09:02.715837002 CEST	53	58613	1.1.1.1	192.168.2.4
Apr 21, 2025 21:09:03.591097116 CEST	58613	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:09:03.731317997 CEST	53	58613	1.1.1.1	192.168.2.4
Apr 21, 2025 21:09:05.591226101 CEST	58613	53	192.168.2.4	1.1.1.1
Apr 21, 2025 21:09:05.732345104 CEST	53	58613	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:46 UTC	773	OUT	GET /survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 19:07:46 UTC	391	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:46 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 5887 x-xss-protection: 1; mode=block Content-Type: text/html; charset=utf-8 Expires: Tue, 28 Apr 1998 19:07:46 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:07:46 GMT; httpOnly; Path=/; secure; Vary: Accept-Encoding Connection: close
2025-04-21 19:07:46 UTC	5887	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 20 6c 74 65 2d 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: <!DOCTYPE html>...[if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->...[if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en-US">...<![endif]--><head><meta name="robots" content="n

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:47 UTC	782	OUT	GET /s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.custom.min.css?ad7753b880 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:47 UTC	290	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:47 GMT Server: Apache X-Content-Type-Options: nosniff Last-Modified: Mon, 09 May 2016 18:48:26 GMT ETag: "65ef-5326d40fa197d" Accept-Ranges: bytes Content-Length: 26095 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-21 19:07:47 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 39 2e 32 20 2d 20 32 30 31 32 2d 31 31 2d 32 33 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 6a 71 75 65 72 79 2e 75 69 2e 63 6f 72 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 62 75 74 74 6f 6e 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 64 69 61 6c 6f 67 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 6d 65 6e 75 2e 63 73 73 2c 20 6a 71 75 65 72 79 2e 75 69 2e 70 72 6f 67 72 65 73 73 62 61 72 2e Data Ascii: /! jQuery UI - v1.9.2 - 2012-11-23 http://jqueryui.com* Includes: jquery.ui.core.css, jquery.ui.accordion.css, jquery.ui.autocomplete.css, jquery.ui.button.css, jquery.ui.datepicker.css, jquery.ui.dialog.css, jquery.ui.menu.css, jquery.ui.progressbar.
2025-04-21 19:07:47 UTC	9711	IN	Data Raw: 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 31 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 34 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 31 2d 73 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 30 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 31 2d 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 39 36 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 31 2d 6e 77 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 31 32 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 32 2d 6e 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 Data Ascii: con-triangle-1-s{background-position:-64px -16px}.ui-icon-triangle-1-sw{background-position:-80px -16px}.ui-icon-triangle-1-w{background-position:-96px -16px}.ui-icon-triangle-1-nw{background-position:-112px -16px}.ui-icon-triangle-2-n-s{background-positi

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:47 UTC	772	OUT	GET /survey/selfserve/3668/250302/less-compiled.css?c0d726fa75340d28f12ded57284b22e0 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:47 UTC	291	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:47 GMT Server: Apache X-Content-Type-Options: nosniff Last-Modified: Tue, 01 Apr 2025 11:26:39 GMT ETag: "12692-631b5cf739e3a" Accept-Ranges: bytes Content-Length: 75410 Vary: Accept-Encoding Connection: close Content-Type: text/css
2025-04-21 19:07:47 UTC	16384	IN	Data Raw: 2f 2a 20 63 30 64 37 32 36 66 61 37 35 33 34 30 64 32 38 66 31 32 64 65 64 35 37 32 38 34 62 32 32 65 30 20 2a 2f 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 46 69 72 61 2b 53 61 6e 73 29 3b 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 46 6f 6e 74 41 77 65 73 6f 6d 65 3b 73 72 63 3a 75 72 6c 28 2f 73 2f 73 75 70 70 6f 72 74 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2d 34 2e 32 2e 30 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 32 2e 30 29 3b 73 72 63 3a 75 72 6c 28 2f 73 2f 73 75 70 70 6f 72 74 2f 66 6f 6e 74 2d 61 77 65 73 6f 6d 65 2d 34 2e 32 2e 30 2f 66 6f 6e 74 73 2f 66 6f 6e Data Ascii: /* c0d726fa75340d28f12ded57284b22e0 */@import url(//fonts.googleapis.com/css?family=Fira+Sans);@font-face{font-family:FontAwesome;src:url(/s/support/font-awesome-4.2.0/fonts/fontawesome-webfont.eot?v=4.2.0);src:url(/s/support/font-awesome-4.2.0/fonts/fon
2025-04-21 19:07:47 UTC	16384	IN	Data Raw: 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 63 6f 6e 2d 73 74 61 72 2d 68 61 6c 66 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 33 22 7d 0a 2e 66 61 2d 69 63 6f 6e 2d 6c 6f 63 61 74 69 6f 6e 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 34 22 7d 0a 2e 66 61 2d 69 63 6f 6e 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 35 22 7d 0a 2e 66 61 2d 69 63 6f 6e 2d 63 6f 64 65 2d 66 6f 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 36 22 7d 0a 2e 66 61 2d 69 63 6f 6e 2d 75 6e 6c 69 6e 6b 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 63 6f 6e 2d 63 68 61 69 6e 2d 62 72 6f 6b 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 37 22 7d 0a 2e 66 61 2d Data Ascii: :before,.fa-icon-star-half-o:before{content:"\f123"}.fa-icon-location-arrow:before{content:"\f124"}.fa-icon-crop:before{content:"\f125"}.fa-icon-code-fork:before{content:"\f126"}.fa-icon-unlink:before,.fa-icon-chain-broken:before{content:"\f127"}.fa-
2025-04-21 19:07:48 UTC	16384	IN	Data Raw: 61 72 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 30 70 78 7d 0a 2e 73 65 6c 65 63 74 32 2d 63 6f 6e 74 61 69 6e 65 72 2d 2d 64 65 66 61 75 6c 74 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 2d 2d 6d 75 6c 74 69 70 6c 65 20 2e 73 65 6c 65 63 74 32 2d 73 65 6c 65 63 74 69 6f 6e 5f 5f 63 68 6f 69 63 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 34 65 34 65 34 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b Data Ascii: ar{cursor:pointer;float:right;font-weight:700;margin-top:5px;margin-right:10px}.select2-container--default .select2-selection--multiple .select2-selection__choice{background-color:#e4e4e4;border:1px solid #aaa;border-radius:4px;cursor:default;float:left;
2025-04-21 19:07:48 UTC	16384	IN	Data Raw: 72 74 61 6e 74 3b 72 69 67 68 74 3a 2d 39 39 39 39 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 0a 2e 73 71 2d 72 61 74 69 6e 67 73 63 61 6c 65 20 2e 66 69 72 2d 69 63 6f 6e 2c 2e 73 71 2d 66 61 6e 63 79 62 6f 78 65 73 20 2e 66 69 72 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 6e 61 43 65 6c 6c 20 2e 66 69 72 2d 69 63 6f 6e 2c 2e 63 65 6c 6c 2d 6e 6f 2d 61 6e 73 77 65 72 20 2e 66 69 72 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 0a 2e 73 71 2d 66 69 72 20 2e 66 69 72 2d 69 63 6f 6e 2c 2e 73 71 2d 61 74 6d 74 61 62 6c 65 20 2e 66 69 72 2d 69 63 6f 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 0a 2e 6e 6f 6e 2d 74 6f 75 63 68 20 2e 66 69 72 2d 69 63 6f 6e 2e 66 6f 63 75 73 2c 2e 6e 6f 6e 2d 74 6f 75 63 68 20 Data Ascii: rtant;right:-9999px!important}.sq-ratingscale .fir-icon,.sq-fancyboxes .fir-icon{display:none}.naCell .fir-icon,.cell-no-answer .fir-icon{display:inline-block}.sq-fir .fir-icon,.sq-atmtable .fir-icon{display:none}.non-touch .fir-icon.focus,.non-touch
2025-04-21 19:07:48 UTC	9874	IN	Data Raw: 69 67 68 74 3a 31 35 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 2e 73 75 72 76 65 79 5f 69 6d 61 67 65 2e 73 75 72 76 65 79 2d 69 6d 61 67 65 2d 6d 65 64 69 75 6d 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 30 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 0a 2e 73 75 72 76 65 79 5f 69 6d 61 67 65 2e 73 75 72 76 65 79 2d 69 6d 61 67 65 2d 6c 61 72 67 65 7b 6d 61 78 2d 68 65 69 67 68 74 3a 36 30 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 7d 0a 2e 73 75 72 76 65 79 5f 69 6d 61 67 65 2e 73 75 72 76 65 79 2d 69 6d 61 67 65 2d 78 6c 61 72 67 65 7b 6d 61 78 2d 68 65 69 67 68 74 3a 39 30 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 39 30 30 70 78 7d 0a 2e 73 75 72 76 65 79 5f 69 6d 61 67 65 2e 66 69 74 2c 2e 66 69 74 7b 77 Data Ascii: ight:150px;max-width:150px}.survey_image.survey-image-medium{max-height:300px;max-width:300px}.survey_image.survey-image-large{max-height:600px;max-width:600px}.survey_image.survey-image-xlarge{max-height:900px;max-width:900px}.survey_image.fit,.fit{w

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:47 UTC	620	OUT	GET /s/exp/tmp/caaa730ed462680b3c3fc324ca591ac5.js HTTP/1.1 Host: selfserve.surveyfiles.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://selfserve.decipherinc.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 19:07:48 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff Last-Modified: Sat, 14 Aug 2021 05:25:35 GMT ETag: W/"22c1d-5c97e32933657-gzip" Vary: Accept-Encoding Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 1937 Server: cloudflare CF-RAY: 933f2a9a5d26d5dd-CDG
2025-04-21 19:07:48 UTC	977	IN	Data Raw: 37 65 31 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 76 61 72 20 74 3d 68 65 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 47 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 74 65 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 6d 65 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 69 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 29 7b 74 72 79 7b 72 3d 22 74 72 75 65 22 3d 3d 3d 72 3f 21 Data Ascii: 7e17!function(e,t){function n(e){var t=he[e]={};return G.each(e.split(te),function(e,n){t[n]=!0}),t}function r(e,n,r){if(r===t&&1===e.nodeType){var i="data-"+n.replace(me,"-$1").toLowerCase();if(r=e.getAttribute(i),"string"==typeof r){try{r="true"===r?!
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 47 2e 69 6e 41 72 72 61 79 28 65 2c 74 29 3e 3d 30 3d 3d 3d 6e 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 76 61 72 20 74 3d 50 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 6e 3d 65 2e 63 72 65 61 74 65 44 6f 63 75 6d 65 6e 74 46 72 61 67 6d 65 6e 74 28 29 3b 69 66 28 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 66 6f 72 28 3b 74 2e 6c 65 6e 67 74 68 3b 29 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 2e 70 6f 70 28 29 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 64 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 74 29 5b 30 5d 7c 7c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 Data Ascii: eturn G.inArray(e,t)>=0===n})}function c(e){var t=Pe.split("\|"),n=e.createDocumentFragment();if(n.createElement)for(;t.length;)n.createElement(t.pop());return n}function d(e,t){return e.getElementsByTagName(t)[0]\|\|e.appendChild(e.ownerDocument.createEleme
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 74 2e 6c 65 6e 67 74 68 3b 69 2d 2d 3b 29 69 66 28 74 3d 76 74 5b 69 5d 2b 6e 2c 74 20 69 6e 20 65 29 72 65 74 75 72 6e 20 74 3b 72 65 74 75 72 6e 20 72 7d 66 75 6e 63 74 69 6f 6e 20 76 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 74 7c 7c 65 2c 22 6e 6f 6e 65 22 3d 3d 3d 47 2e 63 73 73 28 65 2c 22 64 69 73 70 6c 61 79 22 29 7c 7c 21 47 2e 63 6f 6e 74 61 69 6e 73 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 2c 72 2c 69 3d 5b 5d 2c 6f 3d 30 2c 61 3d 65 2e 6c 65 6e 67 74 68 3b 61 3e 6f 3b 6f 2b 2b 29 6e 3d 65 5b 6f 5d 2c 6e 2e 73 74 79 6c 65 26 26 28 69 5b 6f 5d 3d 47 2e 5f 64 61 74 61 28 6e 2c 22 6f 6c 64 64 69 73 70 6c 61 79 22 29 2c 74 3f 28 69 5b 6f 5d 7c 7c 22 6e Data Ascii: t.length;i--;)if(t=vt[i]+n,t in e)return t;return r}function v(e,t){return e=t\|\|e,"none"===G.css(e,"display")\|\|!G.contains(e.ownerDocument,e)}function y(e,t){for(var n,r,i=[],o=0,a=e.length;a>o;o++)n=e[o],n.style&&(i[o]=G._data(n,"olddisplay"),t?(i[o]\|\|"n
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 5d 29 72 65 74 75 72 6e 20 70 74 5b 65 5d 3b 76 61 72 20 74 3d 47 28 22 3c 22 2b 65 2b 22 3e 22 29 2e 61 70 70 65 6e 64 54 6f 28 71 2e 62 6f 64 79 29 2c 6e 3d 74 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 3b 72 65 74 75 72 6e 20 74 2e 72 65 6d 6f 76 65 28 29 2c 28 22 6e 6f 6e 65 22 3d 3d 3d 6e 7c 7c 22 22 3d 3d 3d 6e 29 26 26 28 72 74 3d 71 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 72 74 7c 7c 47 2e 65 78 74 65 6e 64 28 71 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 2c 7b 66 72 61 6d 65 42 6f 72 64 65 72 3a 30 2c 77 69 64 74 68 3a 30 2c 68 65 69 67 68 74 3a 30 7d 29 29 2c 69 74 26 26 72 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 7c 7c 28 69 74 3d 28 72 74 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 7c 7c 72 74 2e Data Ascii: ])return pt[e];var t=G("<"+e+">").appendTo(q.body),n=t.css("display");return t.remove(),("none"===n\|\|""===n)&&(rt=q.body.appendChild(rt\|\|G.extend(q.createElement("iframe"),{frameBorder:0,width:0,height:0})),it&&rt.createElement\|\|(it=(rt.contentWindow\|\|rt.
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 72 5b 6f 5d 29 3b 66 6f 72 28 3b 22 2a 22 3d 3d 3d 75 5b 30 5d 3b 29 75 2e 73 68 69 66 74 28 29 2c 69 3d 3d 3d 74 26 26 28 69 3d 65 2e 6d 69 6d 65 54 79 70 65 7c 7c 6e 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 29 29 3b 69 66 28 69 29 66 6f 72 28 6f 20 69 6e 20 6c 29 69 66 28 6c 5b 6f 5d 26 26 6c 5b 6f 5d 2e 74 65 73 74 28 69 29 29 7b 75 2e 75 6e 73 68 69 66 74 28 6f 29 3b 62 72 65 61 6b 7d 69 66 28 75 5b 30 5d 69 6e 20 72 29 61 3d 75 5b 30 5d 3b 65 6c 73 65 7b 66 6f 72 28 6f 20 69 6e 20 72 29 7b 69 66 28 21 75 5b 30 5d 7c 7c 65 2e 63 6f 6e 76 65 72 74 65 72 73 5b 6f 2b 22 20 22 2b 75 5b 30 5d 5d 29 7b 61 3d 6f 3b 62 72 65 61 6b 7d 73 7c 7c 28 73 3d 6f 29 7d 61 3d 61 7c 7c 73 7d 72 65 74 75 72 6e 20 Data Ascii: r[o]);for(;"*"===u[0];)u.shift(),i===t&&(i=e.mimeType\|\|n.getResponseHeader("content-type"));if(i)for(o in l)if(l[o]&&l[o].test(i)){u.unshift(o);break}if(u[0]in r)a=u[0];else{for(o in r){if(!u[0]\|\|e.converters[o+" "+u[0]]){a=o;break}s\|\|(s=o)}a=a\|\|s}return
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 68 3b 73 3e 6f 3b 6f 2b 2b 29 6c 2e 74 77 65 65 6e 73 5b 6f 5d 2e 72 75 6e 28 69 29 3b 72 65 74 75 72 6e 20 61 2e 6e 6f 74 69 66 79 57 69 74 68 28 65 2c 5b 6c 2c 69 2c 6e 5d 29 2c 31 3e 69 26 26 73 3f 6e 3a 28 61 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 65 2c 5b 6c 5d 29 2c 21 31 29 7d 2c 6c 3d 61 2e 70 72 6f 6d 69 73 65 28 7b 65 6c 65 6d 3a 65 2c 70 72 6f 70 73 3a 47 2e 65 78 74 65 6e 64 28 7b 7d 2c 74 29 2c 6f 70 74 73 3a 47 2e 65 78 74 65 6e 64 28 21 30 2c 7b 73 70 65 63 69 61 6c 45 61 73 69 6e 67 3a 7b 7d 7d 2c 6e 29 2c 6f 72 69 67 69 6e 61 6c 50 72 6f 70 65 72 74 69 65 73 3a 74 2c 6f 72 69 67 69 6e 61 6c 4f 70 74 69 6f 6e 73 3a 6e 2c 73 74 61 72 74 54 69 6d 65 3a 4a 74 7c 7c 4f 28 29 2c 64 75 72 61 74 69 6f 6e 3a 6e 2e 64 75 72 61 74 69 6f 6e 2c 74 77 Data Ascii: h;s>o;o++)l.tweens[o].run(i);return a.notifyWith(e,[l,i,n]),1>i&&s?n:(a.resolveWith(e,[l]),!1)},l=a.promise({elem:e,props:G.extend({},t),opts:G.extend(!0,{specialEasing:{}},n),originalProperties:t,originalOptions:n,startTime:Jt\|\|O(),duration:n.duration,tw
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 2c 22 66 78 22 29 2e 6c 65 6e 67 74 68 7c 7c 63 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 29 7d 29 29 2c 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 28 22 68 65 69 67 68 74 22 69 6e 20 74 7c 7c 22 77 69 64 74 68 22 69 6e 20 74 29 26 26 28 6e 2e 6f 76 65 72 66 6c 6f 77 3d 5b 70 2e 6f 76 65 72 66 6c 6f 77 2c 70 2e 6f 76 65 72 66 6c 6f 77 58 2c 70 2e 6f 76 65 72 66 6c 6f 77 59 5d 2c 22 69 6e 6c 69 6e 65 22 3d 3d 3d 47 2e 63 73 73 28 65 2c 22 64 69 73 70 6c 61 79 22 29 26 26 22 6e 6f 6e 65 22 3d 3d 3d 47 2e 63 73 73 28 65 2c 22 66 6c 6f 61 74 22 29 26 26 28 47 2e 73 75 70 70 6f 72 74 2e 69 6e 6c 69 6e 65 42 6c 6f 63 6b 4e 65 65 64 73 4c 61 79 6f 75 74 26 26 22 69 6e 6c 69 6e 65 22 21 3d 3d 6b 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 3f 70 2e 7a 6f 6f 6d 3d 31 Data Ascii: ,"fx").length\|\|c.empty.fire()})})),1===e.nodeType&&("height"in t\|\|"width"in t)&&(n.overflow=[p.overflow,p.overflowX,p.overflowY],"inline"===G.css(e,"display")&&"none"===G.css(e,"float")&&(G.support.inlineBlockNeedsLayout&&"inline"!==k(e.nodeName)?p.zoom=1
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 59 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 56 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 2c 47 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 47 2e 66 6e 2e 69 6e 69 74 28 65 2c 74 2c 50 29 7d 2c 5a 3d 2f 5b 5c 2d 2b 5d 3f 28 3f 3a 5c 64 2a 5c 2e 7c 29 5c 64 2b 28 3f 3a 5b 65 45 5d 5b 5c 2d 2b 5d 3f 5c 64 2b 7c 29 2f 2e 73 6f 75 72 63 65 2c 65 65 3d 2f 5c 53 2f 2c 74 65 3d 2f 5c 73 2b 2f 2c 6e 65 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 72 65 3d 2f 5e 28 3f 3a 5b 5e 23 3c 5d 2a 28 3c 5b 5c 77 5c 57 5d 2b 3e 29 5b 5e 3e 5d Data Ascii: ototype.toString,Y=Object.prototype.hasOwnProperty,V=String.prototype.trim,G=function(e,t){return new G.fn.init(e,t,P)},Z=/[\-+]?(?:\d\.\|)\d+(?:[eE][\-+]?\d+\|)/.source,ee=/\S/,te=/\s+/,ne=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,re=/^(?:[^#<](<[\w\W]+>)[^>]
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 20 47 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 3f 72 2e 72 65 61 64 79 28 65 29 3a 28 65 2e 73 65 6c 65 63 74 6f 72 21 3d 3d 74 26 26 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3d 65 2e 73 65 6c 65 63 74 6f 72 2c 74 68 69 73 2e 63 6f 6e 74 65 78 74 3d 65 2e 63 6f 6e 74 65 78 74 29 2c 47 2e 6d 61 6b 65 41 72 72 61 79 28 65 2c 74 68 69 73 29 29 7d 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6a 71 75 65 72 79 3a 22 31 2e 38 2e 33 22 2c 6c 65 6e 67 74 68 3a 30 2c 73 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 65 6e 67 74 68 7d 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c Data Ascii: G.isFunction(e)?r.ready(e):(e.selector!==t&&(this.selector=e.selector,this.context=e.context),G.makeArray(e,this))},selector:"",jquery:"1.8.3",length:0,size:function(){return this.length},toArray:function(){return J.call(this)},get:function(e){return nul
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 28 47 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 69 29 7c 7c 28 6f 3d 47 2e 69 73 41 72 72 61 79 28 69 29 29 29 3f 28 6f 3f 28 6f 3d 21 31 2c 61 3d 72 26 26 47 2e 69 73 41 72 72 61 79 28 72 29 3f 72 3a 5b 5d 29 3a 61 3d 72 26 26 47 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 72 29 3f 72 3a 7b 7d 2c 73 5b 6e 5d 3d 47 2e 65 78 74 65 6e 64 28 63 2c 61 2c 69 29 29 3a 69 21 3d 3d 74 26 26 28 73 5b 6e 5d 3d 69 29 29 3b 72 65 74 75 72 6e 20 73 7d 2c 47 2e 65 78 74 65 6e 64 28 7b 6e 6f 43 6f 6e 66 6c 69 63 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 24 3d 3d 3d 47 26 26 28 65 2e 24 3d 55 29 2c 74 26 26 65 2e 6a 51 75 65 72 79 3d 3d 3d 47 26 26 28 65 2e 6a 51 75 65 72 79 3d 7a 29 2c 47 7d 2c 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 Data Ascii: (G.isPlainObject(i)\|\|(o=G.isArray(i)))?(o?(o=!1,a=r&&G.isArray(r)?r:[]):a=r&&G.isPlainObject(r)?r:{},s[n]=G.extend(c,a,i)):i!==t&&(s[n]=i));return s},G.extend({noConflict:function(t){return e.$===G&&(e.$=U),t&&e.jQuery===G&&(e.jQuery=z),G},isReady:!1,read

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:47 UTC	620	OUT	GET /s/exp/tmp/696fc7f735e0c44fc0da11231b264c0e.js HTTP/1.1 Host: selfserve.surveyfiles.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://selfserve.decipherinc.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-21 19:07:48 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:48 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff Last-Modified: Wed, 01 Mar 2023 06:26:02 GMT ETag: W/"4560e-5f5d0c94a292d-gzip" Vary: Accept-Encoding Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 1937 Server: cloudflare CF-RAY: 933f2a9a6be36ef9-CDG
2025-04-21 19:07:48 UTC	977	IN	Data Raw: 37 65 31 37 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 65 6e 65 72 61 74 65 49 64 28 74 29 7b 76 61 72 20 65 2c 69 2c 73 3b 66 6f 72 28 69 3d 35 2c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 69 3d 74 29 2c 73 3d 22 22 3b 73 2e 6c 65 6e 67 74 68 3c 69 3b 29 65 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 37 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 34 38 29 2c 65 2e 6d 61 74 63 68 28 2f 5b 41 2d 5a 61 2d 7a 30 2d 39 5d 2f 29 26 26 28 73 2b 3d 65 29 3b 72 65 74 75 72 6e 20 73 7d 66 75 6e 63 74 69 6f 6e 20 67 65 74 4f 62 6a 28 74 29 7b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3f 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 74 5d 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 Data Ascii: 7e17function generateId(t){var e,i,s;for(i=5,"number"==typeof t&&(i=t),s="";s.length<i;)e=String.fromCharCode(Math.floor(74*Math.random())+48),e.match(/[A-Za-z0-9]/)&&(s+=e);return s}function getObj(t){return document.all?document.all[t]:document.getEle
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 6e 2f 5e 72 75 6e 53 53 54 2f 2e 74 65 73 74 28 74 29 3f 76 6f 69 64 20 53 73 74 47 75 69 2e 6f 70 65 6e 28 65 29 3a 76 6f 69 64 28 22 2a 22 21 3d 3d 74 26 26 28 22 2e 22 3d 3d 3d 74 2e 63 68 61 72 41 74 28 30 29 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 22 2f 72 65 70 6f 72 74 2f 22 2b 65 2b 74 3a 22 40 22 3d 3d 3d 74 2e 63 68 61 72 41 74 28 30 29 3f 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 74 2e 73 75 62 73 74 72 28 31 29 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 22 2f 72 65 70 6f 72 74 2f 22 2b 65 2b 22 3f 22 2b 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 66 66 65 63 74 53 65 67 6d 65 6e 74 28 74 2c 65 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 70 6f 72 74 2d 63 72 65 Data Ascii: n/^runSST/.test(t)?void SstGui.open(e):void("*"!==t&&("."===t.charAt(0)?window.location="/report/"+e+t:"@"===t.charAt(0)?window.location=t.substr(1):window.location="/report/"+e+"?"+t))}function affectSegment(t,e){var i=document.getElementById("report-cre
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 70 6f 72 74 2d 6d 61 69 6e 2d 66 6f 72 6d 22 29 3b 65 5b 22 64 65 6c 65 74 65 2d 72 65 70 6f 72 74 22 5d 2e 76 61 6c 75 65 3d 74 2c 65 2e 73 75 62 6d 69 74 28 29 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 65 64 69 74 52 65 70 6f 72 74 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 72 65 70 6f 72 74 2d 6d 61 69 6e 2d 66 6f 72 6d 22 29 3b 65 5b 22 65 64 69 74 2d 72 65 70 6f 72 74 22 5d 2e 76 61 6c 75 65 3d 74 2c 65 2e 73 75 62 6d 69 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 4f 45 57 69 6e 64 6f 77 28 74 29 7b 24 28 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 68 65 61 76 79 2d 62 6f Data Ascii: {var e=document.getElementById("report-main-form");e["delete-report"].value=t,e.submit()}return!1}function editReport(t){var e=document.getElementById("report-main-form");e["edit-report"].value=t,e.submit()}function openOEWindow(t){$("<div class='heavy-bo
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 2c 64 69 72 65 63 74 6f 72 69 65 73 3d 6e 6f 2c 72 65 73 69 7a 61 62 6c 65 3d 79 65 73 2c 77 69 64 74 68 3d 33 35 30 2c 68 65 69 67 68 74 3d 33 37 30 2c 73 63 72 65 65 6e 58 3d 32 35 30 2c 73 63 72 65 65 6e 59 3d 33 30 30 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 70 65 6e 43 68 61 72 74 57 69 6e 64 6f 77 28 74 29 7b 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 74 2c 22 22 2c 22 74 6f 6f 6c 62 61 72 3d 6e 6f 2c 6c 6f 63 61 74 69 6f 6e 3d 6e 6f 2c 73 74 61 74 75 73 3d 79 65 73 2c 73 63 72 6f 6c 6c 62 61 72 73 3d 79 65 73 2c 64 69 72 65 63 74 6f 72 69 65 73 3d 6e 6f 2c 72 65 73 69 7a 61 62 6c 65 3d 79 65 73 2c 77 69 64 74 68 3d 36 30 30 2c 68 65 69 67 68 74 3d 36 35 30 2c 73 63 72 65 65 6e 58 3d 35 30 2c 73 63 72 65 65 6e 59 Data Ascii: ,scrollbars=yes,directories=no,resizable=yes,width=350,height=370,screenX=250,screenY=300")}function openChartWindow(t){window.open(t,"","toolbar=no,location=no,status=yes,scrollbars=yes,directories=no,resizable=yes,width=600,height=650,screenX=50,screenY
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 77 65 72 73 3d 6f 2e 72 61 6e 64 6f 6d 41 6e 73 77 65 72 73 3b 76 61 72 20 72 3d 61 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 73 3d 30 3b 72 3e 73 3b 73 2b 2b 29 7b 69 3d 61 5b 73 5d 3b 76 61 72 20 6c 3d 69 2e 74 61 67 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 21 28 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 26 26 22 73 65 6c 65 63 74 22 21 3d 3d 6c 7c 7c 69 2e 63 6c 61 73 73 4e 61 6d 65 2e 6d 61 74 63 68 28 2f 5f 73 6b 69 70 6d 65 2f 67 29 29 29 69 66 28 69 2e 6e 61 6d 65 2e 6d 61 74 63 68 28 2f 5e 65 76 2d 2f 29 29 7b 69 66 28 6e 5b 69 2e 6e 61 6d 65 5d 29 63 6f 6e 74 69 6e 75 65 3b 6e 5b 69 2e 6e 61 6d 65 5d 3d 21 30 2c 65 3d 74 28 61 2c 69 2e 6e 61 6d 65 29 2c 65 2e 63 68 65 63 6b 65 64 3d 21 30 Data Ascii: wers=o.randomAnswers;var r=a.length;for(s=0;r>s;s++){i=a[s];var l=i.tagName.toLowerCase();if(!("input"!==l&&"textarea"!==l&&"select"!==l\|\|i.className.match(/_skipme/g)))if(i.name.match(/^ev-/)){if(n[i.name])continue;n[i.name]=!0,e=t(a,i.name),e.checked=!0
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 3f 65 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 63 72 6f 6c 6c 54 6f 70 3a 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 26 26 28 65 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 73 63 72 6f 6c 6c 54 6f 70 29 2c 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 3d 74 2b 22 26 73 63 72 6f 6c 6c 54 6f 70 3d 22 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 72 65 73 74 6f 72 65 46 69 78 65 64 50 6f 73 69 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 6d 61 74 63 68 28 2f 26 73 63 72 6f 6c 6c 54 6f 70 3d 28 5c 64 2b 29 2f 29 3b 74 26 26 77 69 6e 64 6f 77 2e 73 63 72 6f 6c 6c 54 6f 28 30 2c 4e 75 6d 62 65 72 28 74 5b 31 5d 29 Data Ascii: ent.documentElement.scrollTop?e=document.documentElement.scrollTop:document.body&&(e=document.body.scrollTop),window.location=t+"&scrollTop="+e}function restoreFixedPosition(){var t=location.href.match(/&scrollTop=(\d+)/);t&&window.scrollTo(0,Number(t[1])
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 28 29 2c 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 66 69 6e 64 43 68 61 72 74 44 69 76 28 74 2c 65 29 7b 76 61 72 20 69 3d 22 67 72 61 70 68 2d 22 2b 74 2b 22 2d 22 2b 65 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 3f 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 2e 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 5b 69 5d 3a 77 69 6e 64 6f 77 2e 6f 70 65 6e 65 72 2e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 29 7d 66 75 6e 63 74 69 6f 6e 20 68 69 64 65 43 68 61 72 74 28 74 2c 65 29 7b 76 61 72 20 69 3d 66 69 6e 64 43 68 61 72 74 44 69 76 28 74 2c 65 29 3b 69 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 7d 66 75 6e 63 74 69 6f 6e 20 66 6f 72 63 65 43 68 61 72 74 52 65 66 72 65 73 68 28 74 Data Ascii: (),!1}return!0}function findChartDiv(t,e){var i="graph-"+t+"-"+e;return document.all?window.opener.document.all[i]:window.opener.document.getElementById(i)}function hideChart(t,e){var i=findChartDiv(t,e);i.style.display="none"}function forceChartRefresh(t
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 2c 6e 3d 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 5b 73 5d 3b 6e 26 26 6e 2e 63 68 65 63 6b 65 64 26 26 28 6e 2e 63 68 65 63 6b 65 64 3d 30 2c 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 26 26 24 28 6e 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 61 70 70 72 6f 76 65 57 61 72 6e 69 6e 67 28 74 2c 65 2c 69 29 7b 63 6f 6e 66 69 72 6d 28 22 41 70 70 72 6f 76 65 20 74 68 69 73 20 77 61 72 6e 69 6e 67 3f 5c 6e 22 2b 69 29 26 26 73 69 6d 70 6c 65 41 6a 61 78 28 22 61 70 70 72 6f 76 65 57 61 72 6e 69 6e 67 22 2c 74 2b 22 20 22 2b 65 2c 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 51 41 4d 6f 64 65 28 29 7b 67 65 74 4f 62 6a 28 22 71 61 6d 6f 64 65 2d 6c 61 62 65 6c 22 29 2e 69 6e 6e 65 72 48 Data Ascii: ,n=document.forms[0][s];n&&n.checked&&(n.checked=0,window.jQuery&&$(n).trigger("change"))}}function approveWarning(t,e,i){confirm("Approve this warning?\n"+i)&&simpleAjax("approveWarning",t+" "+e,null)}function toggleQAMode(){getObj("qamode-label").innerH
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 6c 65 6e 67 74 68 3b 61 2b 2b 29 65 5b 61 5d 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 67 72 61 79 22 3b 6e 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 67 72 65 65 6e 22 2c 64 6f 63 75 6d 65 6e 74 2e 66 6f 72 6d 73 5b 30 5d 5b 69 5d 2e 76 61 6c 75 65 3d 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 63 75 73 74 6f 6d 50 50 54 43 68 65 63 6b 41 6c 6c 28 29 7b 73 65 74 43 68 65 63 6b 62 6f 78 65 73 28 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 63 75 73 74 6f 6d 50 50 54 43 68 65 63 6b 4e 6f 6e 65 28 29 7b 73 65 74 43 68 65 63 6b 62 6f 78 65 73 28 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 43 6f 6c 6c 61 70 73 65 28 74 29 7b 76 61 72 20 65 2c 69 2c 73 3d 67 65 74 4f 62 6a 28 22 71 2d 22 2b 74 29 2c 6e Data Ascii: length;a++)e[a].style.backgroundColor="gray";n.style.backgroundColor="green",document.forms[0][i].value=s}}function customPPTCheckAll(){setCheckboxes(!0)}function customPPTCheckNone(){setCheckboxes(!1)}function toggleCollapse(t){var e,i,s=getObj("q-"+t),n
2025-04-21 19:07:48 UTC	1369	IN	Data Raw: 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 33 29 2c 72 3d 30 3b 72 3c 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 73 68 6f 77 45 6c 65 6d 65 6e 74 28 67 65 74 4f 62 6a 28 73 5b 72 5d 29 2c 6e 5e 6f 29 7d 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 50 61 6e 65 6c 28 29 7b 76 61 72 20 74 3d 67 65 74 4f 62 6a 28 22 70 61 6e 65 6c 2d 63 6f 6e 74 65 6e 74 73 22 29 2c 65 3d 67 65 74 4f 62 6a 28 22 64 69 76 2d 71 61 6d 6f 64 65 22 29 2c 69 3d 67 65 74 4f 62 6a 28 22 70 61 6e 65 6c 70 69 63 22 29 2c 73 3d 6e 65 77 20 44 61 74 65 2c 6e 3d 73 2e 67 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 29 3b 2d 31 21 3d 3d 69 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 70 6c 75 73 22 29 3f 28 73 68 6f 77 45 6c 65 6d 65 6e 74 28 74 2c 31 29 2c 73 68 6f 77 45 6c 65 6d 65 6e 74 28 65 Data Ascii: e.substring(0,3),r=0;r<s.length;r++)showElement(getObj(s[r]),n^o)}function togglePanel(){var t=getObj("panel-contents"),e=getObj("div-qamode"),i=getObj("panelpic"),s=new Date,n=s.getMilliseconds();-1!==i.src.indexOf("plus")?(showElement(t,1),showElement(e

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (32490)
Category:	downloaded
Size (bytes):	142365
Entropy (8bit):	5.386843769507223
Encrypted:	false
SSDEEP:	3072:N4yHrpsNdPCAbja2FsL2nuwqsp2RV3gwozbx9:N4yH4dPC2ja2rnuwqs8RRo3
MD5:	B1DE4F79758E04A8E0EE7173E15C0B61
SHA1:	54D908226B20C4A3FE43D1A2AB45399358F4B649
SHA-256:	02450116F8C89895906079390C99DBB6FFA32307CD40AC4DE363AC4125B51838
SHA-512:	C249E5829804BFD188C8242397EAA6280FB589DADE3C96E685A5D46ED2642D777D1B675FD9311C4E748DF41F75464BF537E40C14788A6B68CFBBC944C130C59D
Malicious:	false
Reputation:	low
URL:	https://selfserve.surveyfiles.com/s/exp/tmp/caaa730ed462680b3c3fc324ca591ac5.js
Preview:	!function(e,t){function n(e){var t=he[e]={};return G.each(e.split(te),function(e,n){t[n]=!0}),t}function r(e,n,r){if(r===t&&1===e.nodeType){var i="data-"+n.replace(me,"-$1").toLowerCase();if(r=e.getAttribute(i),"string"==typeof r){try{r="true"===r?!0:"false"===r?!1:"null"===r?null:+r+""===r?+r:ge.test(r)?G.parseJSON(r):r}catch(o){}G.data(e,n,r)}else r=t}return r}function i(e){var t;for(t in e)if(("data"!==t\|\|!G.isEmptyObject(e[t]))&&"toJSON"!==t)return!1;return!0}function o(){return!1}function a(){return!0}function s(e){return!e\|\|!e.parentNode\|\|11===e.parentNode.nodeType}function l(e,t){do e=e[t];while(e&&1!==e.nodeType);return e}function u(e,t,n){if(t=t\|\|0,G.isFunction(t))return G.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return G.grep(e,function(e,r){return e===t===n});if("string"==typeof t){var r=G.grep(e,function(e){return 1===e.nodeType});if(He.test(t))return G.filter(t,r,!n);t=G.filter(t,r)}return G.grep(e,function(e,r){return G.inArray(e,t)>=0===n})

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4313
Entropy (8bit):	4.91706034876543
Encrypted:	false
SSDEEP:	96:rEb8uj8ZULGYjgF+hDjhId9Bd9Rq3rd9pTsLLJpe7WsCdsjs4sVsJFes6sPFmXsM:4W52G9YuWFjFR2SOCDe
MD5:	4DDB951D4398553DC7D2B0828E81852E
SHA1:	75360EDDD235F26D5060B4C8BD50768CFD62BD74
SHA-256:	4CA5C539A62C510DE8B9A6C4E824BE57494679DC13F88691FF130BDFB4A40F5A
SHA-512:	C7C1518A88C4CD93E03CF3155ECF8682D235234752ED46BFAF2A4C8CB50C6623BF32F81E5C983A4CB7DCFC112BB97E7E8938B1C50E4EBAEB8397FBD6305DB6F0
Malicious:	false
Reputation:	low
URL:	https://selfserve.decipherinc.com/s/support/jquery-ui-1.9.2.custom/css/smoothness/jquery-ui-1.9.2.beacon.css?4ddb951d43
Preview:	/* =============================================== (jQuery UI modifications) ============================================== /....ui-widget,..ui-widget .ui-widget,..ui-widget input,..ui-widget select,..ui-widget textarea,..ui-widget button {.. font-family: Arial;. font-size: 12px;. }....ui-widget-content { color: #222222; font-weight: normal; }...ui-button { vertical-align: middle; }...ui-button,..ui-button .ui-button-text {}../ IE7 /.:first-child+html button.ui-button .ui-button-text { padding-top: 0.3em; padding-bottom: 0.3em; }...ui-state-default,..ui-widget-content .ui-state-default,..ui-widget-header .ui-state-default {.. border-color: #7F7F7F;. border-bottom-color: #535353;. border-right-color: #535353;. color: #333;. }...ui-state-hover,..ui-widget-content .ui-state-hover,..ui-widget-header .ui-state-hover,..ui-state-focus {.. border-color: #7F7F7F;. border-top-color: #535353;. border-left-color: #535353;. color: #212121;. }...ui-button .

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:48 UTC	802	OUT	GET /survey/selfserve/3668/logo_70165257ac7e3dc837ab7417cd4b60a8.jpg HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:48 UTC	269	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:48 GMT Server: Apache X-Content-Type-Options: nosniff Last-Modified: Mon, 13 Mar 2023 12:27:53 GMT ETag: "3cbf-5f6c73d77f380" Accept-Ranges: bytes Content-Length: 15551 Connection: close Content-Type: image/jpeg
2025-04-21 19:07:49 UTC	15551	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 02 02 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 01 02 02 02 02 02 02 02 02 02 02 ff db 00 43 01 01 01 01 01 01 01 01 01 01 01 02 01 01 01 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 02 ff c0 00 11 08 00 56 01 7e 03 01 11 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 03 01 00 02 03 01 00 00 00 00 00 00 00 00 00 08 09 0a 07 05 06 03 04 0b 02 ff c4 00 3a 10 00 00 06 02 02 00 06 01 03 02 03 05 09 00 00 00 02 03 04 05 06 07 01 08 00 09 0a 11 12 13 14 15 16 17 22 23 18 21 24 32 3a Data Ascii: JFIFddCCV~:"#!$2:

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:48 UTC	697	OUT	GET /page/appversion.js HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:48 UTC	445	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:48 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 65 x-xss-protection: 1; mode=block Last-Modified: Fri, 13 Jan 2012 22:58:41 GMT ETag: suqh67awp90w2gvt Cache-Control: private, must-revalidate, max-age=9999999 Content-Type: text/javascript Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:07:48 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:07:48 UTC	65	IN	Data Raw: 77 69 6e 64 6f 77 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 20 26 26 20 77 69 6e 64 6f 77 2e 73 65 74 41 70 70 56 65 72 73 69 6f 6e 28 22 73 75 71 68 36 37 61 77 70 39 30 77 32 67 76 74 22 29 3b Data Ascii: window.setAppVersion && window.setAppVersion("suqh67awp90w2gvt");

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:49 UTC	709	OUT	GET /s/iq/swfobject22.js?8c2ec4bc2c HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:49 UTC	304	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:49 GMT Server: Apache X-Content-Type-Options: nosniff Last-Modified: Mon, 09 May 2016 18:48:26 GMT ETag: "63d8-5326d40f73b20" Accept-Ranges: bytes Content-Length: 25560 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-21 19:07:49 UTC	16384	IN	Data Raw: 2f 2a 21 09 53 57 46 4f 62 6a 65 63 74 20 76 32 2e 32 20 3c 68 74 74 70 3a 2f 2f 63 6f 64 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 2f 73 77 66 6f 62 6a 65 63 74 2f 3e 20 0a 09 69 73 20 72 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 3c 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 3e 20 0a 2a 2f 0a 0a 76 61 72 20 73 77 66 6f 62 6a 65 63 74 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 0a 09 76 61 72 20 55 4e 44 45 46 20 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 2c 0a 09 09 4f 42 4a 45 43 54 20 3d 20 22 6f 62 6a 65 63 74 22 2c 0a 09 09 53 48 4f 43 4b 57 41 56 45 5f 46 4c 41 53 48 20 3d 20 22 53 68 6f 63 6b Data Ascii: /!SWFObject v2.2 <http://code.google.com/p/swfobject/> is released under the MIT License <http://www.opensource.org/licenses/mit-license.php> /var swfobject = function() {var UNDEF = "undefined",OBJECT = "object",SHOCKWAVE_FLASH = "Shock
2025-04-21 19:07:49 UTC	9176	IN	Data Raw: 63 6f 6d 70 6c 65 74 65 6c 79 20 72 65 6d 6f 76 65 20 61 20 53 57 46 20 69 6e 20 49 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 0a 09 2a 2f 0a 09 66 75 6e 63 74 69 6f 6e 20 72 65 6d 6f 76 65 53 57 46 28 69 64 29 20 7b 0a 09 09 76 61 72 20 6f 62 6a 20 3d 20 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 69 64 29 3b 0a 09 09 69 66 20 28 6f 62 6a 20 26 26 20 6f 62 6a 2e 6e 6f 64 65 4e 61 6d 65 20 3d 3d 20 22 4f 42 4a 45 43 54 22 29 20 7b 0a 09 09 09 69 66 20 28 75 61 2e 69 65 20 26 26 20 75 61 2e 77 69 6e 29 20 7b 0a 09 09 09 09 6f 62 6a 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 22 6e 6f 6e 65 22 3b 0a 09 09 09 09 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 09 09 09 09 09 69 66 20 28 6f 62 6a 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 20 34 29 20 7b 0a Data Ascii: completely remove a SWF in Internet Explorer*/function removeSWF(id) {var obj = getElementById(id);if (obj && obj.nodeName == "OBJECT") {if (ua.ie && ua.win) {obj.style.display = "none";(function(){if (obj.readyState == 4) {

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:49 UTC	715	OUT	GET /s/support/plugindetect.js?d0609be161 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:49 UTC	304	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:49 GMT Server: Apache X-Content-Type-Options: nosniff Last-Modified: Mon, 09 May 2016 18:48:26 GMT ETag: "548d-5326d40f7f69f" Accept-Ranges: bytes Content-Length: 21645 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-04-21 19:07:49 UTC	16384	IN	Data Raw: 2f 2a 20 50 6c 75 67 69 6e 44 65 74 65 63 74 20 76 30 2e 37 2e 35 20 62 79 20 45 72 69 63 20 47 65 72 64 73 20 77 77 77 2e 70 69 6e 6c 61 64 79 2e 6e 65 74 2f 50 6c 75 67 69 6e 44 65 74 65 63 74 20 5b 20 6f 6e 57 69 6e 64 6f 77 4c 6f 61 64 65 64 20 67 65 74 56 65 72 73 69 6f 6e 20 51 54 20 44 65 76 61 6c 56 52 20 53 68 6f 63 6b 77 61 76 65 20 46 6c 61 73 68 20 57 4d 50 20 53 69 6c 76 65 72 6c 69 67 68 74 20 41 64 6f 62 65 52 65 61 64 65 72 20 52 65 61 6c 50 6c 61 79 65 72 20 5d 20 2a 2f 76 61 72 20 50 6c 75 67 69 6e 44 65 74 65 63 74 3d 7b 76 65 72 73 69 6f 6e 3a 22 30 2e 37 2e 35 22 2c 6e 61 6d 65 3a 22 50 6c 75 67 69 6e 44 65 74 65 63 74 22 2c 68 61 6e 64 6c 65 72 3a 66 75 6e 63 74 69 6f 6e 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: /* PluginDetect v0.7.5 by Eric Gerds www.pinlady.net/PluginDetect [ onWindowLoaded getVersion QT DevalVR Shockwave Flash WMP Silverlight AdobeReader RealPlayer ] */var PluginDetect={version:"0.7.5",name:"PluginDetect",handler:function(c,b,a){return functi
2025-04-21 19:07:49 UTC	5261	IN	Data Raw: 30 3f 22 30 22 3a 22 22 29 2b 64 2e 74 6f 53 74 72 69 6e 67 28 29 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 64 2c 76 2c 77 2c 74 29 7b 72 65 74 75 72 6e 28 73 2b 22 2e 22 2b 64 2b 22 2e 22 2b 76 2b 6a 28 77 29 2b 6a 28 74 29 2b 22 2e 30 22 29 7d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 64 2c 74 29 7b 72 65 74 75 72 6e 20 72 28 73 2c 28 64 3d 3d 30 3f 74 3a 75 5b 30 5d 29 2c 28 64 3d 3d 31 3f 74 3a 75 5b 31 5d 29 2c 28 64 3d 3d 32 3f 74 3a 75 5b 32 5d 29 2c 28 64 3d 3d 33 3f 74 3a 75 5b 33 5d 29 2c 28 64 3d 3d 34 3f 74 3a 75 5b 34 5d 29 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 74 2c 73 2c 79 2c 78 2c 76 29 7b 76 61 72 20 76 3b 74 72 79 7b 72 65 74 75 72 6e 20 77 2e 49 73 56 65 72 73 69 6f 6e 53 75 70 70 6f 72 74 65 64 28 6e 28 74 2c 73 2c 79 2c Data Ascii: 0?"0":"")+d.toString()},n=function(s,d,v,w,t){return(s+"."+d+"."+v+j(w)+j(t)+".0")},o=function(s,d,t){return r(s,(d==0?t:u[0]),(d==1?t:u[1]),(d==2?t:u[2]),(d==3?t:u[3]),(d==4?t:u[4]))},r=function(w,t,s,y,x,v){var v;try{return w.IsVersionSupported(n(t,s,y,

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:50 UTC	750	OUT	GET /favicon.ico HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:50 UTC	197	IN	HTTP/1.1 404 Not Found Date: Mon, 21 Apr 2025 19:07:50 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 196 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-04-21 19:07:50 UTC	196	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:50 UTC	795	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tfrztpnjmqe8a9cb,1128,3987,3986 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:50 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:50 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:07:50 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:07:50 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:07:50 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:07:51 UTC	514	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tfrztpnjmqe8a9cb,1128,3987,3986 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:07:51 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:07:51 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:07:51 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:07:51 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:07:51 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:03 UTC	1032	OUT	POST /survey/selfserve/3668/250302 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive Content-Length: 945 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://selfserve.decipherinc.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:03 UTC	945	OUT	Data Raw: 5f 76 32 5f 63 6f 75 6e 74 65 72 3d 32 26 5f 5f 66 70 5f 65 74 61 67 3d 73 75 71 68 36 37 61 77 70 39 30 77 32 67 76 74 26 5f 5f 66 70 5f 68 74 6d 6c 35 3d 73 75 71 68 36 37 61 77 70 39 30 77 32 67 76 74 26 5f 5f 66 70 5f 66 6c 61 73 68 3d 26 5f 5f 66 70 5f 66 6f 6e 74 3d 26 5f 5f 66 70 5f 70 6c 75 67 69 6e 73 3d 43 68 72 6f 6d 65 2b 50 44 46 2b 56 69 65 77 65 72 50 6f 72 74 61 62 6c 65 2b 44 6f 63 75 6d 65 6e 74 2b 46 6f 72 6d 61 74 69 6e 74 65 72 6e 61 6c 2d 70 64 66 2d 76 69 65 77 65 72 50 6f 72 74 61 62 6c 65 2b 44 6f 63 75 6d 65 6e 74 2b 46 6f 72 6d 61 74 61 70 70 6c 69 63 61 74 69 6f 6e 25 32 46 70 64 66 70 64 66 50 6f 72 74 61 62 6c 65 2b 44 6f 63 75 6d 65 6e 74 2b 46 6f 72 6d 61 74 74 65 78 74 25 32 46 70 64 66 70 64 66 2b 43 68 72 6f 6d 69 75 6d Data Ascii: _v2_counter=2&__fp_etag=suqh67awp90w2gvt&__fp_html5=suqh67awp90w2gvt&__fp_flash=&__fp_font=&__fp_plugins=Chrome+PDF+ViewerPortable+Document+Formatinternal-pdf-viewerPortable+Document+Formatapplication%2FpdfpdfPortable+Document+Formattext%2Fpdfpdf+Chromium
2025-04-21 19:08:03 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:03 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 10051 x-xss-protection: 1; mode=block Content-Type: text/html; charset=utf-8 Expires: Tue, 28 Apr 1998 19:08:03 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:03 GMT; httpOnly; Path=/; secure; Vary: Accept-Encoding Connection: close
2025-04-21 19:08:03 UTC	7699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 20 6c 74 65 2d 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: <!DOCTYPE html>...[if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->...[if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en-US">...<![endif]--><head><meta name="robots" content="n
2025-04-21 19:08:03 UTC	493	IN	Data Raw: 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 61 6e 73 31 32 2e 30 2e 30 22 20 76 61 6c 75 65 3d 22 38 22 20 69 64 3d 61 6e 73 31 32 2e 30 2e 38 20 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 72 61 64 69 6f 22 20 2f 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 74 65 78 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 61 6e 73 31 32 2e 30 2e 38 22 3e 50 72 69 76 61 74 65 20 69 6e 64 75 73 74 72 79 2f 63 6f 6d 6d 65 72 63 69 61 6c 3c 2f 6c 61 62 65 6c 3e 20 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 6f 64 64 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 Data Ascii: type="radio" name="ans12.0.0" value="8" id=ans12.0.8 class="input radio" /></span><span class="cell-text cell-sub-column"><label for="ans12.0.8">Private industry/commercial</label> </span></span></div><div class="element odd groupingCols OneColumnE
2025-04-21 19:08:03 UTC	1859	IN	Data Raw: 6f 6c 75 6d 6e 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 61 6e 73 31 32 2e 30 2e 39 22 3e 4f 74 68 65 72 2c 20 70 6c 65 61 73 65 20 73 70 65 63 69 66 79 3a 3c 2f 6c 61 62 65 6c 3e 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 74 65 78 74 22 20 6e 61 6d 65 3d 22 6f 65 31 32 2e 30 22 20 69 64 3d 22 6f 65 31 32 2e 30 22 20 76 61 6c 75 65 3d 22 22 20 64 61 74 61 2d 63 65 6c 6c 3d 22 53 31 5f 72 31 30 22 20 73 69 7a 65 3d 22 32 35 22 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 74 65 78 74 2d 69 6e 70 75 74 20 6f 65 20 6f 65 2d 69 6e 6c 69 6e 65 22 20 2f 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 53 75 72 76 65 79 2e 68 61 6e 64 6c 65 4f 70 65 6e 28 22 6f 65 31 32 2e 30 22 2c 20 22 61 6e 73 31 32 2e 30 2e 30 Data Ascii: olumn"><label for="ans12.0.9">Other, please specify:</label> <input type="text" name="oe12.0" id="oe12.0" value="" data-cell="S1_r10" size="25" class="input text-input oe oe-inline" /><script type="text/javascript">Survey.handleOpen("oe12.0", "ans12.0.0

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:04 UTC	511	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,wavx1w5pc47321a5,758,896,895 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:04 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:04 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:08:04 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:04 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:08:04 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:19 UTC	962	OUT	POST /survey/selfserve/3668/250302 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive Content-Length: 118 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://selfserve.decipherinc.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:19 UTC	118	OUT	Data Raw: 5f 76 32 5f 63 6f 75 6e 74 65 72 3d 33 26 6f 65 31 32 2e 30 3d 26 73 74 61 74 65 3d 32 34 35 38 63 37 62 39 2d 33 64 63 32 2d 34 38 62 35 2d 61 33 35 66 2d 65 64 61 35 61 38 38 33 33 38 31 37 26 73 74 61 72 74 5f 74 69 6d 65 3d 31 37 34 35 32 36 32 34 38 33 26 5f 70 74 69 6d 65 3d 31 35 30 35 31 26 5f 5f 68 61 73 5f 6a 61 76 61 73 63 72 69 70 74 3d 31 Data Ascii: _v2_counter=3&oe12.0=&state=2458c7b9-3dc2-48b5-a35f-eda5a8833817&start_time=1745262483&_ptime=15051&__has_javascript=1
2025-04-21 19:08:19 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:19 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 10827 x-xss-protection: 1; mode=block Content-Type: text/html; charset=utf-8 Expires: Tue, 28 Apr 1998 19:08:19 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:19 GMT; httpOnly; Path=/; secure; Vary: Accept-Encoding Connection: close
2025-04-21 19:08:19 UTC	7699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 20 6c 74 65 2d 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: <!DOCTYPE html>...[if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->...[if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en-US">...<![endif]--><head><meta name="robots" content="n
2025-04-21 19:08:19 UTC	493	IN	Data Raw: 73 73 3d 22 63 65 6c 6c 2d 74 65 78 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 61 6e 73 31 32 2e 30 2e 36 22 3e 43 69 74 79 20 6f 72 20 6d 75 6e 69 63 69 70 61 6c 69 74 79 20 67 6f 76 65 72 6e 6d 65 6e 74 3c 2f 6c 61 62 65 6c 3e 20 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 6f 64 64 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: ss="cell-text cell-sub-column"><label for="ans12.0.6">City or municipality government</label> </span></span></div><div class="element odd groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class
2025-04-21 19:08:19 UTC	2635	IN	Data Raw: 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 65 76 65 6e 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 69 6e 70 75 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 61 6e 73 31 32 2e 30 2e 30 22 20 76 61 6c 75 65 3d 22 38 22 20 69 64 3d 61 6e 73 31 32 2e 30 2e 38 20 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 72 61 Data Ascii: ></div><div class="element even groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class="cell-input cell-sub-column"><input type="radio" name="ans12.0.0" value="8" id=ans12.0.8 class="input ra

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Windows Analysis Report
https://selfserve.decipherinc.com/survey/selfserve/3668/250302?list=1&email=tracy.shiffman@monmouthcountyparks.com&source=GsC5tE1aZe

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:20 UTC	511	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,gbyte2wg49p2v1e1,720,801,800 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:20 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:20 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:08:20 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:20 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:08:20 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:32 UTC	962	OUT	POST /survey/selfserve/3668/250302 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive Content-Length: 118 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://selfserve.decipherinc.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:32 UTC	118	OUT	Data Raw: 5f 76 32 5f 63 6f 75 6e 74 65 72 3d 34 26 6f 65 31 32 2e 30 3d 26 73 74 61 74 65 3d 62 32 63 31 61 38 33 61 2d 32 37 31 33 2d 34 30 30 35 2d 62 30 32 61 2d 34 35 39 65 33 61 34 61 35 37 32 62 26 73 74 61 72 74 5f 74 69 6d 65 3d 31 37 34 35 32 36 32 34 39 39 26 5f 70 74 69 6d 65 3d 31 32 32 31 37 26 5f 5f 68 61 73 5f 6a 61 76 61 73 63 72 69 70 74 3d 31 Data Ascii: _v2_counter=4&oe12.0=&state=b2c1a83a-2713-4005-b02a-459e3a4a572b&start_time=1745262499&_ptime=12217&__has_javascript=1
2025-04-21 19:08:32 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:32 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 10827 x-xss-protection: 1; mode=block Content-Type: text/html; charset=utf-8 Expires: Tue, 28 Apr 1998 19:08:32 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:32 GMT; httpOnly; Path=/; secure; Vary: Accept-Encoding Connection: close
2025-04-21 19:08:32 UTC	7699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 20 6c 74 65 2d 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: <!DOCTYPE html>...[if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->...[if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en-US">...<![endif]--><head><meta name="robots" content="n
2025-04-21 19:08:32 UTC	493	IN	Data Raw: 73 73 3d 22 63 65 6c 6c 2d 74 65 78 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 61 6e 73 31 32 2e 30 2e 36 22 3e 43 69 74 79 20 6f 72 20 6d 75 6e 69 63 69 70 61 6c 69 74 79 20 67 6f 76 65 72 6e 6d 65 6e 74 3c 2f 6c 61 62 65 6c 3e 20 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 6f 64 64 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: ss="cell-text cell-sub-column"><label for="ans12.0.6">City or municipality government</label> </span></span></div><div class="element odd groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class
2025-04-21 19:08:32 UTC	2635	IN	Data Raw: 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 65 76 65 6e 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 69 6e 70 75 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 61 6e 73 31 32 2e 30 2e 30 22 20 76 61 6c 75 65 3d 22 38 22 20 69 64 3d 61 6e 73 31 32 2e 30 2e 38 20 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 72 61 Data Ascii: ></div><div class="element even groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class="cell-input cell-sub-column"><input type="radio" name="ans12.0.0" value="8" id=ans12.0.8 class="input ra

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:33 UTC	511	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,kna0pn5jdzsa43wp,715,797,796 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:33 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:33 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:08:33 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:33 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:08:33 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:40 UTC	962	OUT	POST /survey/selfserve/3668/250302 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive Content-Length: 117 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://selfserve.decipherinc.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:40 UTC	117	OUT	Data Raw: 5f 76 32 5f 63 6f 75 6e 74 65 72 3d 35 26 6f 65 31 32 2e 30 3d 26 73 74 61 74 65 3d 34 38 34 31 65 33 36 63 2d 33 63 36 61 2d 34 62 66 33 2d 61 31 63 65 2d 39 35 39 37 35 62 38 63 35 34 34 62 26 73 74 61 72 74 5f 74 69 6d 65 3d 31 37 34 35 32 36 32 35 31 32 26 5f 70 74 69 6d 65 3d 38 30 38 33 26 5f 5f 68 61 73 5f 6a 61 76 61 73 63 72 69 70 74 3d 31 Data Ascii: _v2_counter=5&oe12.0=&state=4841e36c-3c6a-4bf3-a1ce-95975b8c544b&start_time=1745262512&_ptime=8083&__has_javascript=1
2025-04-21 19:08:41 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:41 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 10827 x-xss-protection: 1; mode=block Content-Type: text/html; charset=utf-8 Expires: Tue, 28 Apr 1998 19:08:41 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:41 GMT; httpOnly; Path=/; secure; Vary: Accept-Encoding Connection: close
2025-04-21 19:08:41 UTC	7699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 20 6c 74 65 2d 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: <!DOCTYPE html>...[if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->...[if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en-US">...<![endif]--><head><meta name="robots" content="n
2025-04-21 19:08:41 UTC	493	IN	Data Raw: 73 73 3d 22 63 65 6c 6c 2d 74 65 78 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 61 6e 73 31 32 2e 30 2e 36 22 3e 43 69 74 79 20 6f 72 20 6d 75 6e 69 63 69 70 61 6c 69 74 79 20 67 6f 76 65 72 6e 6d 65 6e 74 3c 2f 6c 61 62 65 6c 3e 20 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 6f 64 64 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: ss="cell-text cell-sub-column"><label for="ans12.0.6">City or municipality government</label> </span></span></div><div class="element odd groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class
2025-04-21 19:08:41 UTC	2635	IN	Data Raw: 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 65 76 65 6e 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 69 6e 70 75 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 61 6e 73 31 32 2e 30 2e 30 22 20 76 61 6c 75 65 3d 22 38 22 20 69 64 3d 61 6e 73 31 32 2e 30 2e 38 20 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 72 61 Data Ascii: ></div><div class="element even groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class="cell-input cell-sub-column"><input type="radio" name="ans12.0.0" value="8" id=ans12.0.8 class="input ra

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:42 UTC	511	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,r55r66md8pe113fq,716,830,829 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:42 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:42 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:08:42 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:42 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:08:42 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:50 UTC	962	OUT	POST /survey/selfserve/3668/250302 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive Content-Length: 117 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://selfserve.decipherinc.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:50 UTC	117	OUT	Data Raw: 5f 76 32 5f 63 6f 75 6e 74 65 72 3d 36 26 6f 65 31 32 2e 30 3d 26 73 74 61 74 65 3d 35 63 63 64 37 37 39 31 2d 36 64 36 66 2d 34 39 34 34 2d 62 65 66 66 2d 34 31 34 32 30 38 63 66 37 30 36 61 26 73 74 61 72 74 5f 74 69 6d 65 3d 31 37 34 35 32 36 32 35 32 31 26 5f 70 74 69 6d 65 3d 39 30 30 34 26 5f 5f 68 61 73 5f 6a 61 76 61 73 63 72 69 70 74 3d 31 Data Ascii: _v2_counter=6&oe12.0=&state=5ccd7791-6d6f-4944-beff-414208cf706a&start_time=1745262521&_ptime=9004&__has_javascript=1
2025-04-21 19:08:51 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:50 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 10827 x-xss-protection: 1; mode=block Content-Type: text/html; charset=utf-8 Expires: Tue, 28 Apr 1998 19:08:50 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:50 GMT; httpOnly; Path=/; secure; Vary: Accept-Encoding Connection: close
2025-04-21 19:08:51 UTC	7699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 20 6c 74 65 2d 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: <!DOCTYPE html>...[if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->...[if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en-US">...<![endif]--><head><meta name="robots" content="n
2025-04-21 19:08:51 UTC	493	IN	Data Raw: 73 73 3d 22 63 65 6c 6c 2d 74 65 78 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 61 6e 73 31 32 2e 30 2e 36 22 3e 43 69 74 79 20 6f 72 20 6d 75 6e 69 63 69 70 61 6c 69 74 79 20 67 6f 76 65 72 6e 6d 65 6e 74 3c 2f 6c 61 62 65 6c 3e 20 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 6f 64 64 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: ss="cell-text cell-sub-column"><label for="ans12.0.6">City or municipality government</label> </span></span></div><div class="element odd groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class
2025-04-21 19:08:51 UTC	2635	IN	Data Raw: 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 65 76 65 6e 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 69 6e 70 75 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 61 6e 73 31 32 2e 30 2e 30 22 20 76 61 6c 75 65 3d 22 38 22 20 69 64 3d 61 6e 73 31 32 2e 30 2e 38 20 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 72 61 Data Ascii: ></div><div class="element even groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class="cell-input cell-sub-column"><input type="radio" name="ans12.0.0" value="8" id=ans12.0.8 class="input ra

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:51 UTC	511	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,na5q69y4z6u4qd02,713,804,803 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:52 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:52 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:08:52 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:52 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:08:52 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:08:59 UTC	962	OUT	POST /survey/selfserve/3668/250302 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive Content-Length: 117 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://selfserve.decipherinc.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:08:59 UTC	117	OUT	Data Raw: 5f 76 32 5f 63 6f 75 6e 74 65 72 3d 37 26 6f 65 31 32 2e 30 3d 26 73 74 61 74 65 3d 64 36 66 39 61 37 34 63 2d 64 65 31 65 2d 34 63 33 64 2d 62 38 61 37 2d 30 34 65 34 39 66 35 30 30 62 35 32 26 73 74 61 72 74 5f 74 69 6d 65 3d 31 37 34 35 32 36 32 35 33 30 26 5f 70 74 69 6d 65 3d 38 30 38 34 26 5f 5f 68 61 73 5f 6a 61 76 61 73 63 72 69 70 74 3d 31 Data Ascii: _v2_counter=7&oe12.0=&state=d6f9a74c-de1e-4c3d-b8a7-04e49f500b52&start_time=1745262530&_ptime=8084&__has_javascript=1
2025-04-21 19:08:59 UTC	392	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:08:59 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 10827 x-xss-protection: 1; mode=block Content-Type: text/html; charset=utf-8 Expires: Tue, 28 Apr 1998 19:08:59 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:08:59 GMT; httpOnly; Path=/; secure; Vary: Accept-Encoding Connection: close
2025-04-21 19:08:59 UTC	7699	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 39 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 65 20 49 45 20 38 5d 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6c 74 65 2d 69 65 39 20 6c 74 65 2d 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 28 67 74 20 49 45 20 39 29 7c 21 28 49 45 29 5d 3e 3c 21 2d 2d 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e Data Ascii: <!DOCTYPE html>...[if IE 9]><html class="lte-ie9" lang="en-US"><![endif]-->...[if lte IE 8]><html class="lte-ie9 lte-ie8" lang="en-US"><![endif]-->...[if (gt IE 9)\|!(IE)]>...><html lang="en-US">...<![endif]--><head><meta name="robots" content="n
2025-04-21 19:08:59 UTC	493	IN	Data Raw: 73 73 3d 22 63 65 6c 6c 2d 74 65 78 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 61 6e 73 31 32 2e 30 2e 36 22 3e 43 69 74 79 20 6f 72 20 6d 75 6e 69 63 69 70 61 6c 69 74 79 20 67 6f 76 65 72 6e 6d 65 6e 74 3c 2f 6c 61 62 65 6c 3e 20 3c 2f 73 70 61 6e 3e 0a 3c 2f 73 70 61 6e 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 6f 64 64 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 Data Ascii: ss="cell-text cell-sub-column"><label for="ans12.0.6">City or municipality government</label> </span></span></div><div class="element odd groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class
2025-04-21 19:08:59 UTC	2635	IN	Data Raw: 3e 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 20 65 76 65 6e 20 20 67 72 6f 75 70 69 6e 67 43 6f 6c 73 20 4f 6e 65 43 6f 6c 75 6d 6e 45 6c 20 68 61 73 45 72 72 6f 72 20 20 20 20 63 6c 69 63 6b 61 62 6c 65 43 65 6c 6c 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 73 75 62 2d 77 72 61 70 70 65 72 20 63 65 6c 6c 2d 6c 65 67 65 6e 64 2d 72 69 67 68 74 22 3e 0a 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 65 6c 6c 2d 69 6e 70 75 74 20 63 65 6c 6c 2d 73 75 62 2d 63 6f 6c 75 6d 6e 22 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 72 61 64 69 6f 22 20 6e 61 6d 65 3d 22 61 6e 73 31 32 2e 30 2e 30 22 20 76 61 6c 75 65 3d 22 38 22 20 69 64 3d 61 6e 73 31 32 2e 30 2e 38 20 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 20 72 61 Data Ascii: ></div><div class="element even groupingCols OneColumnEl hasError clickableCell"><span class="cell-sub-wrapper cell-legend-right"><span class="cell-input cell-sub-column"><input type="radio" name="ans12.0.0" value="8" id=ans12.0.8 class="input ra

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:09:00 UTC	722	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tn2g7qzwjqrj0rx5,720,825,824 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://selfserve.decipherinc.com/survey/selfserve/3668/250302 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:09:00 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:09:00 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:09:00 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:09:00 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:09:00 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}

Timestamp	Bytes transferred	Direction	Data
2025-04-21 19:09:00 UTC	511	OUT	GET /survey/selfserve/3668/250302?v2timing=wgc4a9sh787qgczw,tn2g7qzwjqrj0rx5,720,825,824 HTTP/1.1 Host: selfserve.decipherinc.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: IRIS_SESSION=suqh67awp90w2gvt
2025-04-21 19:09:01 UTC	363	IN	HTTP/1.1 200 OK Date: Mon, 21 Apr 2025 19:09:00 GMT Server: Apache X-Content-Type-Options: nosniff Content-Length: 2 x-xss-protection: 1; mode=block Content-Type: application/javascript Expires: Tue, 28 Apr 1998 19:09:00 GMT Set-Cookie: IRIS_SESSION=suqh67awp90w2gvt; expires=Wed, 21-May-2025 19:09:00 GMT; httpOnly; Path=/; secure; Connection: close
2025-04-21 19:09:01 UTC	2	IN	Data Raw: 7b 7d Data Ascii: {}