Edit tour

Windows Analysis Report
http://payment.athenahealth.com

Overview

General Information

Sample URL:	http://payment.athenahealth.com
Analysis ID:	1674267
Infos:

Detection

Score:	0
Range:	0 - 100
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6292 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1672 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,3679885259594786493,16725594707151399754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,3679885259594786493,16725594707151399754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2996 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://payment.athenahealth.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST / HTTP/1.1Host: api.amplitude.comConnection: keep-aliveContent-Length: 1160sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://payment.patient.athenahealth.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://payment.patient.athenahealth.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_59.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Source
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXA-oBOL.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXQ-oA.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXc-oBOL.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXk-oBOL.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXo-oBOL.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXs-oBOL.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatS-qxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSGqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSKqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSOqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSiqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasasatSyqxA.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btS-qxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSGqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSKqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSOqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSiqxLUv.woff2)
Source: chromecache_61.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourceserifpro/v17/neIXzD-0qpwxpaWvjeD0X88SAOeasc8btSyqxA.woff2)
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/wellyshen/react-cool-dimensions#resizeobserver-polyfill
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_73.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.33.0/LICENSE
Source: chromecache_68.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/
Source: chromecache_69.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/217.a469a6
Source: chromecache_59.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/2FA_wa
Source: chromecache_59.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/credit
Source: chromecache_59.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/family
Source: chromecache_59.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/right-
Source: chromecache_69.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.9851b
Source: chromecache_69.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.c8afc
Source: chromecache_69.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/runtime.7f
Source: chromecache_69.2.dr	String found in binary or memory: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/favicon.svg
Source: chromecache_78.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_82.2.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_58.2.dr, chromecache_78.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/w0_qmZVSdobukXrBwYd9dTF7/recaptcha__.
Source: chromecache_82.2.dr, chromecache_74.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/w0_qmZVSdobukXrBwYd9dTF7/recaptcha__en.js

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701

Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.65.25.96:443 -> 192.168.2.5:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.96.122:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.28.254:443 -> 192.168.2.5:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.162.11.178:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.55:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.55:443 -> 192.168.2.5:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 50.112.151.153:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.42:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.42:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.155.173.14:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.55:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.69.4:443 -> 192.168.2.5:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.208.123.169:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.9.155.153:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.197.213.252:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 15.197.213.252:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.9.155.153:443 -> 192.168.2.5:49762 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@25/61@40/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,3679885259594786493,16725594707151399754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,3679885259594786493,16725594707151399754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2996 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://payment.athenahealth.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,3679885259594786493,16725594707151399754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2108 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2072,i,3679885259594786493,16725594707151399754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2996 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://payment.athenahealth.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/fonts/SourceSansPro-Semibold.otf.92d0153f5ca896ae4acb.woff2	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/2FA_wavy_shape_MOBILE.8e36258d72ca60017b19.svg	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/family	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/fonts/SourceSansPro-Regular.otf.c74cb4d526f9c3ea25a3.woff2	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/217.a469a69a277b6e2cee14.js	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/favicon.svg	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.9851bfe5705d67564dc7.js	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/217.a469a6	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/lock.706d973a93012dc7c0ba.svg	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/right-	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.c8afc303d28c77790a73.css	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/ILLO_Family_DGT_2048px.9fe3eb50c5fc266a069f.svg	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/athenahealth-logo.ce5c261d95ce2417a439.svg	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.9851b	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.c8afc	0%	Avira URL Cloud	safe
https://payment.athenahealth.com/	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/credit	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/runtime.7fa45b119a5d9c11d6f8.js	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/runtime.7f	0%	Avira URL Cloud	safe
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/2FA_wa	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
m.sni.global.fastly.net	151.101.1.55	true	false	high
api.amplitude.com	35.162.11.178	true	false	high
beacons-handoff.gcp.gvt2.com	108.177.122.94	true	false	high
clientstream-ga.launchdarkly.com	15.197.213.252	true	false	high
gce-beacons.gcp.gvt2.com	35.210.63.202	true	false	high
www.google.com	142.250.69.4	true	false	high
payment.athenahealth.com	18.65.25.96	true	false	unknown
events.launchdarkly.com	54.208.123.169	true	false	high
payment.patient.athenahealth.com	18.238.96.122	true	false	high
quickpay-prod2504250044-us-west-2.cf.px.athena.io	18.155.173.14	true	false	unknown
gig-ai-g-prod-westus2-2-app-v4-tag.westus2.cloudapp.azure.com	20.9.155.153	true	false	high
clientstream.launchdarkly.com	unknown	unknown	false	high
app.launchdarkly.com	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://clientstream.launchdarkly.com/eval/63eefbf849bac513170e9b1c/eyJraW5kIjoidXNlciIsImtleSI6ImFub24zMTdjIiwiYW5vbnltb3VzIjp0cnVlfQ	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/2FA_wavy_shape_MOBILE.8e36258d72ca60017b19.svg	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/fonts/SourceSansPro-Semibold.otf.92d0153f5ca896ae4acb.woff2	false	Avira URL Cloud: safe	unknown
https://api.amplitude.com/	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/favicon.svg	false	Avira URL Cloud: safe	unknown
https://payment.patient.athenahealth.com/statement/?src=statement	false		high
https://app.launchdarkly.com/sdk/goals/63eefbf849bac513170e9b1c	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/fonts/SourceSansPro-Regular.otf.c74cb4d526f9c3ea25a3.woff2	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/217.a469a69a277b6e2cee14.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/enterprise.js?render=6Lde2w8rAAAAAAxeGmG72AySJgri9Ev_FpgZoTXO&hl=en	false		high
https://dc.services.visualstudio.com/v2/track	false		high
https://events.launchdarkly.com/events/diagnostic/63eefbf849bac513170e9b1c	false		high
https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=w0_qmZVSdobukXrBwYd9dTF7	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.9851bfe5705d67564dc7.js	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/lock.706d973a93012dc7c0ba.svg	false	Avira URL Cloud: safe	unknown
https://app.launchdarkly.com/sdk/evalx/63eefbf849bac513170e9b1c/contexts/eyJraW5kIjoidXNlciIsImtleSI6ImFub24zMTdjIiwiYW5vbnltb3VzIjp0cnVlfQ	false		high
https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lde2w8rAAAAAAxeGmG72AySJgri9Ev_FpgZoTXO&co=aHR0cHM6Ly9wYXltZW50LnBhdGllbnQuYXRoZW5haGVhbHRoLmNvbTo0NDM.&hl=en&v=w0_qmZVSdobukXrBwYd9dTF7&size=invisible&cb=kh62sjexd0jr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.c8afc303d28c77790a73.css	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/ILLO_Family_DGT_2048px.9fe3eb50c5fc266a069f.svg	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/athenahealth-logo.ce5c261d95ce2417a439.svg	false	Avira URL Cloud: safe	unknown
https://payment.athenahealth.com/	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/runtime.7fa45b119a5d9c11d6f8.js	false	Avira URL Cloud: safe	unknown
https://events.launchdarkly.com/events/bulk/63eefbf849bac513170e9b1c	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://www.google.com/recaptcha/enterprise/	chromecache_82.2.dr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/family	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/wellyshen/react-cool-dimensions#resizeobserver-polyfill	chromecache_73.2.dr	false		high
https://github.com/zloirock/core-js	chromecache_73.2.dr	false		high
https://support.google.com/recaptcha#6262736	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/right-	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://github.com/zloirock/core-js/blob/v3.33.0/LICENSE	chromecache_73.2.dr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/217.a469a6	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/?hl=en#6223828	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://cloud.google.com/contact	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.c8afc	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/runtime.7f	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.9851b	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/credit	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_58.2.dr, chromecache_78.2.dr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/	chromecache_68.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_78.2.dr	false		high
https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/img/2FA_wa	chromecache_59.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/w0_qmZVSdobukXrBwYd9dTF7/recaptcha__.	chromecache_58.2.dr, chromecache_78.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.65.25.67	unknown	United States	3	MIT-GATEWAYSUS	false
142.250.69.4	www.google.com	United States	15169	GOOGLEUS	false
18.65.25.96	payment.athenahealth.com	United States	3	MIT-GATEWAYSUS	false
50.112.151.153	unknown	United States	16509	AMAZON-02US	false
35.162.11.178	api.amplitude.com	United States	16509	AMAZON-02US	false
18.238.96.122	payment.patient.athenahealth.com	United States	16509	AMAZON-02US	false
151.101.1.55	m.sni.global.fastly.net	United States	54113	FASTLYUS	false
54.208.123.169	events.launchdarkly.com	United States	14618	AMAZON-AESUS	false
15.197.213.252	clientstream-ga.launchdarkly.com	United States	7430	TANDEMUS	false
18.155.173.14	quickpay-prod2504250044-us-west-2.cf.px.athena.io	United States	16509	AMAZON-02US	false
20.9.155.153	gig-ai-g-prod-westus2-2-app-v4-tag.westus2.cloudapp.azure.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
18.155.173.42	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1674267
Start date and time:	2025-04-25 18:13:06 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://payment.athenahealth.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@25/61@40/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.49.174, 142.250.69.3, 74.125.137.84, 192.178.49.206, 142.250.68.234, 192.178.49.163, 192.178.49.170, 142.250.69.10, 192.178.49.202, 192.178.49.195, 142.250.68.227, 20.12.23.50
Excluded domains from analysis (whitelisted): fonts.googleapis.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, c2a9c95e369881c67228a6591cac2686.clo.footprintdns.com, ax-ring.msedge.net, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://payment.athenahealth.com

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1536
Entropy (8bit):	4.095819604830652
Encrypted:	false
SSDEEP:	24:tOShNtu5MtdrcQyPZmxiQQaEYcVWPQ984tEEoG2I5Qf3Q3/r13aiw0lTC6muEGdJ:vxPNQQQaE/S4tvjfQfQ3/r8SFxl9
MD5:	6213FF2F8812AF3D0427F9623ECE7B63
SHA1:	B6B4703A1C42A95595111BC7EDAAA0E72C5E3445
SHA-256:	0E6F1E3262070917B0E254EDA384A4A2D26B68710CB1ED6A63F1A06EF3A9174C
SHA-512:	1C6C55FB72E8C13629DF1E79673B06E6FF9C094B6A7E8E18E244E867690D241BA6D3ECDA6CD50E001B28293B830D4E90B618D0A525CC9159F2D17F331426D4B3
Malicious:	false
Reputation:	low
URL:	https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/favicon.svg
Preview:	<svg width="512" height="512" viewBox="0 0 512 512" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="256" cy="256" r="256" fill="#0275D4"/>.<path d="M241.5 458.5V408.5C211.167 407.5 187.667 400.667 171 388C154.333 375 145.833 357.833 145.5 336.5C148.833 328.167 153.167 322.167 158.5 318.5C163.833 314.833 169.667 313 176 313C185.667 313 193.167 315.5 198.5 320.5C204.167 325.5 208.167 334.5 210.5 347.5L216.5 379.5C220.167 380.167 224 380.667 228 381C232.333 381.333 236.833 381.667 241.5 382V274.5L238 273C208.667 263.333 186.167 250.333 170.5 234C154.833 217.667 147 197.667 147 174C147 148.333 155.5 126.833 172.5 109.5C189.5 92.1666 213.5 82 244.5 79V33H275.5V78.5C300.833 80.1666 321.167 87.1666 336.5 99.5C352.167 111.5 360.833 127.5 362.5 147.5C361.167 156.5 357.667 162.833 352 166.5C346.333 170.167 340.5 172 334.5 172C326.167 172 318.167 169.5 310.5 164.5C302.833 159.167 297.667 148 295 131L291 106.5C288.333 105.833 285.667 105.5 283 105.5C280.667 105.5 278.167 105.333 275.5

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.254
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.28.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: payment.athenahealth.com
Source: global traffic	DNS traffic detected: DNS query: payment.patient.athenahealth.com
Source: global traffic	DNS traffic detected: DNS query: quickpay-prod2504250044-us-west-2.cf.px.athena.io
Source: global traffic	DNS traffic detected: DNS query: api.amplitude.com
Source: global traffic	DNS traffic detected: DNS query: app.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: events.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: dc.services.visualstudio.com
Source: global traffic	DNS traffic detected: DNS query: clientstream.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2025 18:14:13.475462914 CEST	53	58307	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:13.489129066 CEST	53	53192	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:14.648319960 CEST	53	63918	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:17.577395916 CEST	62881	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:17.577541113 CEST	51131	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:17.718280077 CEST	53	51131	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:17.718296051 CEST	53	62881	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:18.840776920 CEST	54750	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:18.842166901 CEST	58720	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:18.852273941 CEST	63013	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:18.852639914 CEST	62580	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:19.006207943 CEST	53	63013	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:19.011185884 CEST	53	54750	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:19.012731075 CEST	53	62580	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:19.030097008 CEST	53	58720	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:19.617194891 CEST	54871	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:19.617438078 CEST	59674	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:19.761539936 CEST	53	54871	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:19.794771910 CEST	53	59674	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:21.194541931 CEST	60589	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:21.194760084 CEST	51871	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:21.355377913 CEST	53	51871	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:21.364593983 CEST	53	60589	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:22.724169016 CEST	53	49993	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:23.498883963 CEST	57953	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:23.499082088 CEST	58604	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:23.639240980 CEST	53	58604	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:23.639708042 CEST	53	57953	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:23.904053926 CEST	54936	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:23.905036926 CEST	57626	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:23.919168949 CEST	54498	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:23.919501066 CEST	63862	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:24.044378996 CEST	53	54936	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.045084000 CEST	53	57626	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.059215069 CEST	53	54498	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.060117960 CEST	53	63862	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.062597036 CEST	53	64328	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.369910955 CEST	50473	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:24.370115995 CEST	53885	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:24.473411083 CEST	55366	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:24.473788023 CEST	64601	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:24.511831999 CEST	53	53885	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.511934042 CEST	53	50473	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.615567923 CEST	53	55366	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:24.659934044 CEST	53	64601	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:25.600162983 CEST	53	56907	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:26.088749886 CEST	57647	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:26.088926077 CEST	57245	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:26.229762077 CEST	53	57245	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:26.230935097 CEST	53	57647	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:27.425168037 CEST	65463	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:27.425168037 CEST	56578	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:27.565373898 CEST	53	65463	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:27.565793037 CEST	53	56578	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:28.753113985 CEST	53	51062	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.276751995 CEST	60500	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:31.277712107 CEST	53539	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:31.305262089 CEST	53	50348	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.332999945 CEST	52062	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:31.333293915 CEST	62127	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:31.374651909 CEST	65056	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:31.374901056 CEST	63378	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:31.417305946 CEST	53	60500	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.417812109 CEST	53	53539	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.473261118 CEST	53	52062	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.475652933 CEST	53	62127	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.515101910 CEST	53	63378	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.515163898 CEST	53	65056	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:31.872493029 CEST	53	56536	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:33.482073069 CEST	56490	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:33.482721090 CEST	56608	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:14:33.623084068 CEST	53	56490	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:33.623753071 CEST	53	56608	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:50.586497068 CEST	53	54053	1.1.1.1	192.168.2.5
Apr 25, 2025 18:14:59.800362110 CEST	138	138	192.168.2.5	192.168.2.255
Apr 25, 2025 18:15:12.971345901 CEST	53	58802	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:13.399091959 CEST	53	63159	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:16.343419075 CEST	53	51130	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:25.472172022 CEST	53996	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:25.472393036 CEST	56382	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:25.612658978 CEST	53	56382	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:25.612807035 CEST	53	53996	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:26.483156919 CEST	62345	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:26.483213902 CEST	56601	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:26.623656034 CEST	53	62345	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:26.623681068 CEST	53	56601	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:28.515805006 CEST	64606	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:28.656416893 CEST	53	64606	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:29.543185949 CEST	64606	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:29.683723927 CEST	53	64606	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:30.545474052 CEST	64606	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:30.685868025 CEST	53	64606	1.1.1.1	192.168.2.5
Apr 25, 2025 18:15:32.561041117 CEST	64606	53	192.168.2.5	1.1.1.1
Apr 25, 2025 18:15:32.701311111 CEST	53	64606	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:19 UTC	674	OUT	GET / HTTP/1.1 Host: payment.athenahealth.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:19 UTC	412	IN	HTTP/1.1 302 Found Server: CloudFront Date: Fri, 25 Apr 2025 16:14:19 GMT Content-Length: 0 Connection: close Location: https://payment.patient.athenahealth.com/statement/?src=statement X-Cache: FunctionGeneratedResponse from cloudfront Via: 1.1 8cbd4665d0e455e41084d4437d5b6422.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX53-P1 X-Amz-Cf-Id: P0pMPq50B1bNCQ-oWRE7Ewh1o-9TyYCvUOsqzetUtgHWNzokBc8fsQ==

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:20 UTC	706	OUT	GET /statement/?src=statement HTTP/1.1 Host: payment.patient.athenahealth.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:20 UTC	534	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Server: CloudFront Date: Fri, 25 Apr 2025 16:14:20 GMT Location: /statement/?src=statement Set-Cookie: X-athena-px-ldu=anon317c; SameSite=None; Secure Access-Control-Allow-Origin: DENY Strict-Transport-Security: max-age=300; includeSubdomains; preload X-Cache: LambdaGeneratedResponse from cloudfront Via: 1.1 b3707aef923427d5b3d151dd164d8930.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX52-P1 X-Amz-Cf-Id: gw7Xg4w29_4Y7JEvBiWr4vqYs_RT8LGYPt5v-YIhyywBD7XWL6yH2g==

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:20 UTC	740	OUT	GET /statement/?src=statement HTTP/1.1 Host: payment.patient.athenahealth.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: X-athena-px-ldu=anon317c
2025-04-25 16:14:21 UTC	1189	IN	HTTP/1.1 200 OK Content-Type: text/html Content-Length: 1215 Connection: close x-amz-id-2: rR3CXG1lS30ItAHQZ00cvajyTbiwYF2aOestZpsi4SeHEALTih0G9rHy2TH6amTarQceAKVIVpI= x-amz-request-id: SB7MMR8G5BHYYNG6 Last-Modified: Fri, 25 Apr 2025 01:11:17 GMT x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=300; includeSubdomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; frame-src https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; img-src 'self' data: .athena.io .athenahealth.com; script-src 'self' .athena.io .athenahealth.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ X-athena-px-resolved-uri: /quickpay-prod2504250044/index.html X-Frame-Options: DENY X-athena-px-region: us-west-2 Date: Fri, 25 Apr 2025 16:14:21 GMT Cache-Control: no-cache ETag: "2d273095e920028b6457093951e2b79e" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 666df5a6f6c7e4d9718a0e9301903340.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX52-P1 X-Amz-Cf-Id: k6mskrjDIQhCW_yG3eYeWhF2-iiVWrk96M4dgUswhSteoP5qZWcqag==
2025-04-25 16:14:21 UTC	1215	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 6f 6b 69 6e 67 20 74 6f 20 70 61 79 20 79 6f 75 72 20 6d 65 64 69 63 61 6c 20 62 69 6c 6c 3f 20 4d 61 6b 65 20 61 20 71 75 69 63 6b 20 61 6e 64 20 65 61 73 79 20 70 61 79 6d 65 6e 74 20 6f 6e 6c 69 6e 65 20 75 73 69 6e 67 20 74 68 65 20 51 75 69 63 6b 50 61 79 20 50 6f 72 Data Ascii: <!doctype html><html lang="en"><head><meta charset="utf-8"/><meta name="viewport" content="width=device-width,initial-scale=1"/><meta name="description" content="Looking to pay your medical bill? Make a quick and easy payment online using the QuickPay Por

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:21 UTC	681	OUT	GET /quickpay-prod2504250044/content/main.c8afc303d28c77790a73.css HTTP/1.1 Host: quickpay-prod2504250044-us-west-2.cf.px.athena.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:22 UTC	486	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 334736 Connection: close Date: Fri, 25 Apr 2025 16:14:22 GMT Last-Modified: Fri, 25 Apr 2025 01:11:17 GMT ETag: "959c841660887a5ab7082b4ce38b5e22" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 fe7a664e98e1fa233d473b9022e08898.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX50-P1 X-Amz-Cf-Id: Sp4qIp2ublYfUS1oyZsMi8uowpZkImW6sqd367byGF9kNIeOi6VUOA==
2025-04-25 16:14:22 UTC	8192	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 65 72 69 66 2b 50 72 6f 3a 34 30 30 2c 36 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 65 72 69 66 2b 50 72 6f 3a 34 30 30 2c 36 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 65 72 69 Data Ascii: @import url(https://fonts.googleapis.com/css?family=Source+Serif+Pro:400,600,700&display=swap);@import url(https://fonts.googleapis.com/css?family=Source+Serif+Pro:400,600,700&display=swap);@import url(https://fonts.googleapis.com/css?family=Source+Seri
2025-04-25 16:14:22 UTC	8808	IN	Data Raw: 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 65 72 69 66 2b 50 72 6f 3a 34 30 30 2c 36 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 65 72 69 66 2b 50 72 6f 3a 34 30 30 2c 36 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 53 6f 75 72 63 65 2b 53 65 72 69 66 2b 50 72 6f 3a 34 30 30 2c 36 30 30 2c 37 30 30 26 64 69 73 70 6c 61 79 3d 73 77 61 70 29 3b Data Ascii: apis.com/css?family=Source+Serif+Pro:400,600,700&display=swap);@import url(https://fonts.googleapis.com/css?family=Source+Serif+Pro:400,600,700&display=swap);@import url(https://fonts.googleapis.com/css?family=Source+Serif+Pro:400,600,700&display=swap);
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 28 30 20 30 20 30 20 30 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 66 65 5f 6c 5f 67 72 69 64 2d 72 6f 77 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 72 6f 77 20 77 72 61 70 7d 2e 66 65 5f 6c 5f 67 72 69 64 2d 72 6f 77 2d 2d 6e 6f 2d 67 75 74 74 65 72 73 2d 73 6d 61 6c 6c 3e 2e 66 65 5f 6c 5f 67 72 69 64 2d 72 6f 77 5f 5f 63 6f 6c 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 66 65 5f 6c 5f 67 72 69 64 2d 72 6f 77 2d 2d 6e 65 73 74 65 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e Data Ascii: (0 0 0 0);overflow:hidden}.fe_l_grid-row{max-width:none;margin-right:auto;margin-left:auto;display:flex;flex-flow:row wrap}.fe_l_grid-row--no-gutters-small>.fe_l_grid-row__col{padding-right:0;padding-left:0}.fe_l_grid-row--nested{margin-right:-15px;margin
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 67 7b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 3a 38 30 70 78 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 61 76 61 74 61 72 2d 2d 63 6c 69 63 6b 61 62 6c 65 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 69 63 6f 6e 7b 66 69 6c 6c 3a 72 67 62 28 39 35 2c 20 39 35 2c 20 39 35 29 3b 77 69 64 74 68 3a 32 35 70 78 3b 68 65 69 67 68 74 3a 32 35 70 78 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 69 63 6f 6e 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 73 74 72 6f 6b 65 3a 6e 6f 6e 65 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 69 63 6f 6e 5f 5f 69 63 6f 6e 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 78 2d 73 68 61 64 6f 77 20 32 35 30 6d 73 Data Ascii: g{height:80px;width:80px}.fe_f_all .fe_c_avatar--clickable{cursor:pointer}.fe_f_all .fe_c_icon{fill:rgb(95, 95, 95);width:25px;height:25px}.fe_f_all .fe_c_icon__background{fill:transparent;stroke:none}.fe_f_all .fe_c_icon__icon{transition:box-shadow 250ms
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 3a 68 6f 76 65 72 20 2e 66 65 5f 63 5f 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 20 2e 66 65 5f 63 5f 69 63 6f 6e 5f 5f 69 63 6f 6e 2d 2d 69 6e 76 65 72 74 2c 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 62 75 74 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 2e 66 65 5f 63 5f 62 75 74 74 6f 6e 2d 2d 6c 69 6e 6b 3a 68 6f 76 65 72 20 2e 66 65 5f 63 5f 62 75 74 74 6f 6e 5f 5f 69 63 6f 6e 20 2e 66 65 5f 63 5f 69 63 6f 6e 5f 5f 69 63 6f 6e 2d 2d 69 6e 76 65 72 74 7b 73 74 72 6f 6b 65 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 62 75 74 74 6f 6e 2d 2d 74 65 72 74 69 61 72 79 3a 68 6f 76 65 72 20 2e 66 69 5f 63 5f 69 63 6f 6e 20 70 61 74 68 5b 66 69 6c 6c 3d 22 72 67 62 28 35 35 2c 20 35 35 Data Ascii: ton--tertiary:hover .fe_c_button__icon .fe_c_icon__icon--invert,.fe_f_all .fe_c_button--tertiary.fe_c_button--link:hover .fe_c_button__icon .fe_c_icon__icon--invert{stroke:transparent}.fe_f_all .fe_c_button--tertiary:hover .fi_c_icon path[fill="rgb(55, 55
2025-04-25 16:14:22 UTC	3072	IN	Data Raw: 69 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 77 69 64 74 68 3a 38 70 78 3b 68 65 69 67 68 74 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 28 32 2c 20 31 31 37 2c 20 32 31 32 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 34 70 78 3b 6c 65 66 74 3a 34 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 74 72 61 6e 73 66 6f 72 6d 20 32 35 30 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 2c 20 30 2e 33 35 35 2c 20 31 29 3b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 20 74 72 61 6e 73 6c 61 74 65 59 28 31 2e 37 35 70 78 29 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 72 61 64 69 Data Ascii: ion::after{content:"";width:8px;height:8px;background:rgb(2, 117, 212);position:absolute;top:4px;left:4px;border-radius:50%;transition:transform 250ms cubic-bezier(0.215, 0.61, 0.355, 1);opacity:0;transform:scale(0) translateY(1.75px)}.fe_f_all .fe_c_radi
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 5f 72 61 64 69 6f 67 72 6f 75 70 2e 66 65 5f 63 5f 66 6f 72 6d 2d 66 69 65 6c 64 5f 5f 69 6e 70 75 74 7b 6d 61 78 2d 77 69 64 74 68 3a 33 35 30 70 78 7d 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 72 61 64 69 6f 67 72 6f 75 70 2e 66 65 5f 69 73 2d 72 65 71 75 69 72 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 31 70 78 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 72 61 64 69 6f 67 72 6f 75 70 2e 66 65 5f 69 73 2d 72 65 71 75 69 72 65 64 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 36 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 2c 20 31 31 37 2c 20 32 31 32 29 3b 74 6f 70 3a 35 70 78 Data Ascii: _radiogroup.fe_c_form-field__input{max-width:350px}}.fe_f_all .fe_c_radiogroup.fe_is-required{position:relative;padding-left:11px}.fe_f_all .fe_c_radiogroup.fe_is-required::before{content:"";position:absolute;border-left:6px solid rgb(2, 117, 212);top:5px
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 35 29 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 74 6f 64 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 63 6f 6c 6f 72 3a 72 67 62 28 32 2c 20 31 31 37 2c 20 32 31 32 29 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 72 65 61 63 74 2d 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 61 79 2d 2d 74 6f 64 61 79 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 62 6f 74 74 6f 6d 3a 34 70 78 3b 6c 65 66 74 3a 38 70 78 3b 72 69 67 68 74 3a 38 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 32 70 78 20 73 6f 6c 69 64 20 72 67 62 28 Data Ascii: 5)}.fe_f_all .react-datepicker__day--today{position:relative;font-weight:600;color:rgb(2, 117, 212)}.fe_f_all .react-datepicker__day--today::after{content:"";position:absolute;display:inline-block;bottom:4px;left:8px;right:8px;border-bottom:2px solid rgb(
2025-04-25 16:14:22 UTC	1514	IN	Data Raw: 35 29 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 69 6e 70 75 74 20 69 6e 70 75 74 7b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 69 6e 70 75 74 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 69 6e 70 75 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 3a 68 6f 76 65 72 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 69 6e 70 75 74 20 69 6e 70 75 74 3a 3a 2d Data Ascii: 5);white-space:nowrap}.fe_f_all .fe_c_multiselect__input input{height:20px}.fe_f_all .fe_c_multiselect__input input:focus{box-shadow:none}.fe_f_all .fe_c_multiselect__input input[type=text]:hover{box-shadow:none}.fe_f_all .fe_c_multiselect__input input::-
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 61 6c 6c 20 2e 66 65 5f 63 5f 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 6f 70 74 69 6f 6e 2d 2d 69 73 2d 64 69 73 61 62 6c 65 64 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 63 6f 6c 6f 72 3a 72 67 62 28 31 37 39 2c 20 31 37 39 2c 20 31 37 39 29 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 6f 70 74 69 6f 6e 2d 2d 69 73 2d 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 29 7d 2e 66 65 5f 66 5f 61 6c 6c 20 2e 66 65 5f 63 5f 6d 75 6c 74 69 73 65 6c 65 63 74 5f 5f 6f 70 74 69 6f 6e 2d 2d 69 73 2d 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 20 2e 66 65 5f 63 5f 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 72 67 Data Ascii: all .fe_c_multiselect__option--is-disabled{cursor:not-allowed;color:rgb(179, 179, 179)}.fe_f_all .fe_c_multiselect__option--is-disabled:active{background-color:rgb(255, 255, 255)}.fe_f_all .fe_c_multiselect__option--is-disabled:active .fe_c_label{color:rg

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:21 UTC	669	OUT	GET /quickpay-prod2504250044/content/runtime.7fa45b119a5d9c11d6f8.js HTTP/1.1 Host: quickpay-prod2504250044-us-west-2.cf.px.athena.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:22 UTC	500	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 1989 Connection: close Date: Fri, 25 Apr 2025 16:14:22 GMT Last-Modified: Fri, 25 Apr 2025 01:11:19 GMT ETag: "8f59d7f169fd81e6e1bc18ef1825f5fc" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 6f9d1169f2bd8d5941d08b66c4e041a6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX50-P1 X-Amz-Cf-Id: 2HpNIfr6s_sinGfALvEpqx10vh-drs1vrvZ7L92UarSBG225bjch2A==
2025-04-25 16:14:22 UTC	1989	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 72 2c 74 2c 6f 3d 7b 7d 2c 6e 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 72 3d 6e 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6f 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 69 2e 4f 3d 28 72 2c 74 2c 6f 2c 6e 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 66 3d 31 2f 30 3b 66 6f 72 28 63 3d 30 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 66 6f 72 28 76 61 72 5b 74 2c 6f 2c 6e 5d 3d 65 Data Ascii: (()=>{"use strict";var e,r,t,o={},n={};function i(e){var r=n[e];if(void 0!==r)return r.exports;var t=n[e]={exports:{}};return o[e].call(t.exports,t,t.exports,i),t.exports}i.m=o,e=[],i.O=(r,t,o,n)=>{if(!t){var f=1/0;for(c=0;c<e.length;c++){for(var[t,o,n]=e

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:21 UTC	665	OUT	GET /quickpay-prod2504250044/content/217.a469a69a277b6e2cee14.js HTTP/1.1 Host: quickpay-prod2504250044-us-west-2.cf.px.athena.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:22 UTC	503	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 1657036 Connection: close Date: Fri, 25 Apr 2025 16:14:22 GMT Last-Modified: Fri, 25 Apr 2025 01:11:18 GMT ETag: "53ca6c5e52a1aa3287db8597a4852afd" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 04f3246f9dfa448924c0196336a80262.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX50-P1 X-Amz-Cf-Id: di4VuKn_E-boinPZF8XMOWdpxFGLVwGkRrMzbIM0l6gLgWVTKMaNpw==
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 31 37 2e 61 34 36 39 61 36 39 61 32 37 37 62 36 65 32 63 65 65 31 34 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 69 6e 61 6e 63 69 61 6c 73 5f 77 6f 72 6b 66 6c 6f 77 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 66 69 6e 61 6e 63 69 61 6c 73 5f 77 6f 72 6b 66 6c 6f 77 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 31 37 5d 2c 7b 37 35 31 30 37 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 34 39 39 34 29 2c 6f 3d 6e 28 37 33 37 33 38 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 Data Ascii: /! For license information please see 217.a469a69a277b6e2cee14.js.LICENSE.txt /(self.webpackChunkfinancials_workflow=self.webpackChunkfinancials_workflow\|\|[]).push([[217],{75107:(e,t,n)=>{"use strict";var r=n(24994),o=n(73738);Object.defineProperty(t,"
2025-04-25 16:14:22 UTC	611	IN	Data Raw: 37 38 35 32 20 31 31 2e 32 33 31 36 20 36 2e 38 35 30 31 20 31 32 2e 30 36 20 36 2e 38 35 30 31 5a 22 2c 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 29 29 7d 3b 66 2e 64 69 73 70 6c 61 79 4e 61 6d 65 3d 22 53 76 67 49 6e 66 6f 4c 61 72 67 65 22 2c 66 2e 73 69 7a 65 3d 22 6c 61 72 67 65 22 3b 76 61 72 20 64 3d 28 30 2c 75 2e 77 69 74 68 46 6f 72 67 65 49 63 6f 6e 50 72 6f 70 73 29 28 66 29 3b 74 2e 64 65 66 61 75 6c 74 3d 64 7d 2c 33 35 30 34 3a 28 65 2c 74 2c 6e 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 6e 28 32 34 39 39 34 29 2c 6f 3d 6e 28 37 33 37 33 38 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 Data Ascii: 7852 11.2316 6.8501 12.06 6.8501Z",fill:"white"}))};f.displayName="SvgInfoLarge",f.size="large";var d=(0,u.withForgeIconProps)(f);t.default=d},3504:(e,t,n)=>{"use strict";var r=n(24994),o=n(73738);Object.defineProperty(t,"__esModule",{value:!0}),t.default
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 61 29 3a 6e 75 6c 6c 3b 73 26 26 28 73 2e 67 65 74 7c 7c 73 2e 73 65 74 29 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 72 2c 61 2c 73 29 3a 72 5b 61 5d 3d 65 5b 61 5d 7d 72 65 74 75 72 6e 20 72 2e 64 65 66 61 75 6c 74 3d 65 2c 6e 26 26 6e 2e 73 65 74 28 65 2c 72 29 2c 72 7d 28 6e 28 39 36 35 34 30 29 29 2c 75 3d 6e 28 36 30 38 35 38 29 2c 6c 3d 5b 22 74 69 74 6c 65 22 2c 22 74 69 74 6c 65 49 64 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 57 65 61 6b 4d 61 70 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 6e 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b Data Ascii: wnPropertyDescriptor(e,a):null;s&&(s.get\|\|s.set)?Object.defineProperty(r,a,s):r[a]=e[a]}return r.default=e,n&&n.set(e,r),r}(n(96540)),u=n(60858),l=["title","titleId"];function c(e){if("function"!=typeof WeakMap)return null;var t=new WeakMap,n=new WeakMap;
2025-04-25 16:14:22 UTC	1024	IN	Data Raw: 22 72 67 62 28 32 30 33 2c 20 37 37 2c 20 31 34 30 29 22 2c 22 6f 72 63 68 69 64 2d 73 65 63 6f 6e 64 61 72 79 2d 35 30 22 3a 22 72 67 62 28 32 31 37 2c 20 31 32 38 2c 20 31 37 33 29 22 2c 22 6f 72 63 68 69 64 2d 73 65 63 6f 6e 64 61 72 79 2d 34 30 22 3a 22 72 67 62 28 32 32 35 2c 20 31 35 33 2c 20 31 38 39 29 22 2c 22 6f 72 63 68 69 64 2d 73 65 63 6f 6e 64 61 72 79 2d 32 35 22 3a 22 72 67 62 28 32 33 36 2c 20 31 39 31 2c 20 32 31 34 29 22 2c 22 6f 72 63 68 69 64 2d 73 65 63 6f 6e 64 61 72 79 2d 31 30 22 3a 22 72 67 62 28 32 34 37 2c 20 32 32 39 2c 20 32 33 39 29 22 2c 22 63 69 74 72 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 31 30 30 22 3a 22 72 67 62 28 31 36 37 2c 20 31 34 39 2c 20 32 39 29 22 2c 22 63 69 74 72 6f 6e 2d 73 65 63 6f 6e 64 61 72 79 2d 37 30 Data Ascii: "rgb(203, 77, 140)","orchid-secondary-50":"rgb(217, 128, 173)","orchid-secondary-40":"rgb(225, 153, 189)","orchid-secondary-25":"rgb(236, 191, 214)","orchid-secondary-10":"rgb(247, 229, 239)","citron-secondary-100":"rgb(167, 149, 29)","citron-secondary-70
2025-04-25 16:14:22 UTC	8949	IN	Data Raw: 2c 22 70 69 73 74 61 63 68 69 6f 2d 64 61 74 61 76 69 7a 2d 32 30 22 3a 22 72 67 62 28 32 33 33 2c 20 32 34 36 2c 20 32 33 30 29 22 2c 22 70 69 73 74 61 63 68 69 6f 2d 64 61 74 61 76 69 7a 2d 31 30 22 3a 22 72 67 62 28 32 34 34 2c 20 32 35 31 2c 20 32 34 33 29 22 2c 22 79 65 6c 6c 6f 77 2d 64 61 74 61 76 69 7a 2d 31 30 30 22 3a 22 72 67 62 28 32 33 38 2c 20 31 39 36 2c 20 37 39 29 22 2c 22 79 65 6c 6c 6f 77 2d 64 61 74 61 76 69 7a 2d 39 30 22 3a 22 72 67 62 28 32 34 30 2c 20 32 30 32 2c 20 39 37 29 22 2c 22 79 65 6c 6c 6f 77 2d 64 61 74 61 76 69 7a 2d 38 30 22 3a 22 72 67 62 28 32 34 31 2c 20 32 30 38 2c 20 31 31 34 29 22 2c 22 79 65 6c 6c 6f 77 2d 64 61 74 61 76 69 7a 2d 37 30 22 3a 22 72 67 62 28 32 34 33 2c 20 32 31 34 2c 20 31 33 32 29 22 2c 22 79 65 Data Ascii: ,"pistachio-dataviz-20":"rgb(233, 246, 230)","pistachio-dataviz-10":"rgb(244, 251, 243)","yellow-dataviz-100":"rgb(238, 196, 79)","yellow-dataviz-90":"rgb(240, 202, 97)","yellow-dataviz-80":"rgb(241, 208, 114)","yellow-dataviz-70":"rgb(243, 214, 132)","ye
2025-04-25 16:14:22 UTC	7435	IN	Data Raw: 5d 7d 3b 74 2e 64 65 66 61 75 6c 74 3d 6f 7d 2c 33 34 39 35 30 3a 28 65 2c 74 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 7b 22 62 61 73 65 2d 73 70 61 63 69 6e 67 22 3a 22 31 36 70 78 22 2c 22 67 6c 6f 62 61 6c 2d 6d 61 72 67 69 6e 22 3a 7b 6e 6f 6e 65 3a 22 30 22 2c 78 78 73 6d 61 6c 6c 3a 22 32 70 78 22 2c 78 73 6d 61 6c 6c 3a 22 34 70 78 22 2c 73 6d 61 6c 6c 3a 22 38 70 78 22 2c 6d 65 64 69 75 6d 3a 22 31 36 70 78 22 2c 6c 61 72 67 65 3a 22 32 34 70 78 22 2c 78 6c 61 72 67 65 3a 22 34 30 70 78 22 2c 78 78 6c 61 72 67 65 3a 22 36 34 70 78 22 7d 2c 22 67 6c 6f 62 61 6c 2d Data Ascii: ]};t.default=o},34950:(e,t)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default={"base-spacing":"16px","global-margin":{none:"0",xxsmall:"2px",xsmall:"4px",small:"8px",medium:"16px",large:"24px",xlarge:"40px",xxlarge:"64px"},"global-
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 66 61 75 6c 74 3a 62 2c 41 3d 65 2e 6f 6e 43 6c 69 63 6b 2c 43 3d 76 6f 69 64 20 30 3d 3d 3d 41 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3a 41 2c 78 3d 65 2e 73 68 6f 77 4c 6f 61 64 69 6e 67 53 70 69 6e 6e 65 72 2c 4e 3d 76 6f 69 64 20 30 21 3d 3d 78 26 26 78 2c 6a 3d 65 2e 73 69 7a 65 2c 4d 3d 76 6f 69 64 20 30 3d 3d 3d 6a 3f 22 6d 65 64 69 75 6d 22 3a 6a 2c 49 3d 65 2e 74 65 78 74 2c 6b 3d 65 2e 74 79 70 65 2c 53 3d 76 6f 69 64 20 30 3d 3d 3d 6b 3f 22 62 75 74 74 6f 6e 22 3a 6b 2c 50 3d 65 2e 75 73 65 4c 69 6e 6b 2c 44 3d 76 6f 69 64 20 30 21 3d 3d 50 26 26 50 2c 54 3d 65 2e 76 61 72 69 61 6e 74 2c 4c 3d 76 6f 69 64 20 30 3d 3d 3d 54 3f 22 70 72 69 6d 61 72 79 22 3a 54 2c 52 3d 28 30 2c 73 2e 64 65 66 61 75 6c 74 29 28 65 2c 67 29 3b 72 65 74 75 72 6e 20 Data Ascii: fault:b,A=e.onClick,C=void 0===A?function(){}:A,x=e.showLoadingSpinner,N=void 0!==x&&x,j=e.size,M=void 0===j?"medium":j,I=e.text,k=e.type,S=void 0===k?"button":k,P=e.useLink,D=void 0!==P&&P,T=e.variant,L=void 0===T?"primary":T,R=(0,s.default)(e,g);return
2025-04-25 16:14:22 UTC	1514	IN	Data Raw: 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 6e 2c 74 29 29 7d 29 29 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 70 3d 28 30 2c 6c 2e 66 6f 72 67 65 43 6c 61 73 73 48 65 6c 70 65 72 29 28 22 69 63 6f 6e 22 29 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 63 68 69 6c 64 72 65 6e 2c 6e 3d 65 2e 76 69 65 77 42 6f 78 2c 72 3d 65 2e 73 69 7a 65 2c 69 3d 65 2e 77 69 64 74 68 2c 75 3d 65 2e 68 65 69 67 68 74 2c 6c 3d 65 2e 74 69 74 6c 65 2c 66 3d 65 2e 63 6c 61 73 73 4e 61 6d 65 2c 68 3d 65 2e 73 74 79 6c 65 2c 76 3d 65 2e 64 69 73 61 62 6c 65 64 2c 67 3d 65 2e 65 72 72 6f 72 2c 6d 3d 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 65 2c 63 29 Data Ascii: efineProperty(e,t,Object.getOwnPropertyDescriptor(n,t))}))}return e}var p=(0,l.forgeClassHelper)("icon"),h=function(e){var t=e.children,n=e.viewBox,r=e.size,i=e.width,u=e.height,l=e.title,f=e.className,h=e.style,v=e.disabled,g=e.error,m=(0,a.default)(e,c)
2025-04-25 16:14:22 UTC	534	IN	Data Raw: 2c 7b 64 3a 22 4d 32 30 2c 35 61 31 31 2c 31 31 2c 30 2c 30 2c 30 2d 37 2e 35 2d 33 2e 31 41 31 31 2c 31 31 2c 30 2c 30 2c 30 2c 35 2c 35 2c 31 30 2e 37 2c 31 30 2e 37 2c 30 2c 30 2c 30 2c 35 2c 32 30 61 31 31 2c 31 31 2c 30 2c 30 2c 30 2c 37 2e 35 2c 33 2e 31 41 31 31 2c 31 31 2c 30 2c 30 2c 30 2c 32 30 2c 32 30 2c 31 30 2e 37 2c 31 30 2e 37 2c 30 2c 30 2c 30 2c 32 30 2c 35 5a 4d 31 38 2e 39 2c 31 38 2e 39 61 39 2e 31 2c 39 2e 31 2c 30 2c 30 2c 31 2d 36 2e 34 2c 32 2e 37 2c 39 2e 31 2c 39 2e 31 2c 30 2c 30 2c 31 2c 30 2d 31 38 2e 32 2c 39 2e 31 2c 39 2e 31 2c 30 2c 30 2c 31 2c 36 2e 34 2c 31 35 2e 35 5a 22 7d 29 29 29 29 29 7d 3b 73 2e 64 65 66 61 75 6c 74 50 72 6f 70 73 3d 7b 74 69 74 6c 65 3a 22 41 64 64 22 7d 3b 76 61 72 20 75 3d 73 3b 74 2e 64 65 66 Data Ascii: ,{d:"M20,5a11,11,0,0,0-7.5-3.1A11,11,0,0,0,5,5,10.7,10.7,0,0,0,5,20a11,11,0,0,0,7.5,3.1A11,11,0,0,0,20,20,10.7,10.7,0,0,0,20,5ZM18.9,18.9a9.1,9.1,0,0,1-6.4,2.7,9.1,9.1,0,0,1,0-18.2,9.1,9.1,0,0,1,6.4,15.5Z"})))))};s.defaultProps={title:"Add"};var u=s;t.def
2025-04-25 16:14:22 UTC	16384	IN	Data Raw: 73 73 4e 61 6d 65 3a 74 7d 29 2c 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 6e 75 6c 6c 2c 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 67 22 2c 7b 73 74 72 6f 6b 65 3a 22 6e 6f 6e 65 22 2c 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 66 65 5f 63 5f 69 63 6f 6e 5f 5f 69 63 6f 6e 20 66 65 5f 63 5f 69 63 6f 6e 5f 5f 69 63 6f 6e 2d 2d 70 72 69 6d 61 72 79 22 7d 2c 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 70 61 74 68 22 2c 7b 64 3a 22 4d 39 2e 32 38 31 32 33 37 31 31 2c 33 20 4c 39 2e 32 38 31 32 33 37 31 31 2c 35 2e 34 34 32 35 32 38 37 34 20 4c 31 35 2e 37 35 38 37 36 32 39 2c 35 2e 34 34 32 35 32 38 37 34 20 4c 31 35 2e 37 35 38 Data Ascii: ssName:t}),i.default.createElement("g",null,i.default.createElement("g",{stroke:"none",fill:"none",className:"fe_c_icon__icon fe_c_icon__icon--primary"},i.default.createElement("path",{d:"M9.28123711,3 L9.28123711,5.44252874 L15.7587629,5.44252874 L15.758

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:24 UTC	673	OUT	POST / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive Content-Length: 1160 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://payment.patient.athenahealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:24 UTC	1160	OUT	Data Raw: 63 68 65 63 6b 73 75 6d 3d 38 37 33 37 34 39 66 33 31 36 34 66 34 64 61 34 39 34 35 36 66 65 64 36 31 65 38 38 33 31 66 31 26 63 6c 69 65 6e 74 3d 61 63 37 62 33 61 33 64 35 35 64 35 39 30 30 63 62 33 36 39 39 65 30 62 37 35 61 66 64 32 64 34 26 65 3d 25 35 42 25 37 42 25 32 32 64 65 76 69 63 65 5f 69 64 25 32 32 25 33 41 25 32 32 4c 4e 30 6a 6b 75 52 33 71 4a 6c 43 38 46 50 73 32 39 46 64 71 75 25 32 32 25 32 43 25 32 32 75 73 65 72 5f 69 64 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 74 69 6d 65 73 74 61 6d 70 25 32 32 25 33 41 31 37 34 35 35 39 37 36 36 32 34 38 39 25 32 43 25 32 32 65 76 65 6e 74 5f 69 64 25 32 32 25 33 41 31 25 32 43 25 32 32 73 65 73 73 69 6f 6e 5f 69 64 25 32 32 25 33 41 31 37 34 35 35 39 37 36 36 32 34 38 38 25 32 43 25 32 32 Data Ascii: checksum=873749f3164f4da49456fed61e8831f1&client=ac7b3a3d55d5900cb3699e0b75afd2d4&e=%5B%7B%22device_id%22%3A%22LN0jkuR3qJlC8FPs29Fdqu%22%2C%22user_id%22%3Anull%2C%22timestamp%22%3A1745597662489%2C%22event_id%22%3A1%2C%22session_id%22%3A1745597662488%2C%22
2025-04-25 16:14:24 UTC	210	IN	HTTP/1.1 200 OK Date: Fri, 25 Apr 2025 16:14:24 GMT Content-Type: text/html;charset=utf-8 Content-Length: 7 Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15768000
2025-04-25 16:14:24 UTC	7	IN	Data Raw: 73 75 63 63 65 73 73 Data Ascii: success

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	32562
Entropy (8bit):	5.980187953477826
Encrypted:	false
SSDEEP:	768:5b93lWVYODKCWpCbpHBJhhFDpX6XVt/GIvaNr0:5bmKOGBGFDpXMr/GIv60
MD5:	4E155B33096EF1365A5F6C62A18F8CF8
SHA1:	7784C85F35ADE7323F300CA0FB7C7F68B7F5C1E6
SHA-256:	62C3167B6F609F9333872CDA68BB069317B13D4018D59B6DF2FFA3E426E37B03
SHA-512:	368A60AE6DC2E4B250A39EC50A8C58C668FDC70EE089964001C530E8A3FD5F20039317A360D1818BC74A5EAE3E1ECC2549EB56AFF7AE1F4FC9D7A506A0E9D88B
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<svg width="129px" height="18px" viewBox="0 0 129 18" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">. <title>63B64480-385B-4C53-A6A2-2122B08190E0@1.00x</title>. <g id="Symbols" stroke="none" stroke-width="1" fill="none" fill-rule="evenodd">. <g id="Navigation/Footer/Powered-by-Athena" transform="translate(0.000000, -18.000000)">. <image id="Bitmap" x="0" y="18" width="129" height="18" xlink:href="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAABLAAAACoCAYAAADw6xcqAAABfGlDQ1BJQ0MgUHJvZmlsZQAAKJFjYGAqSSwoyGFhYGDIzSspCnJ3UoiIjFJgv8PAzcDDIMRgxSCemFxc4BgQ4MOAE3y7xsAIoi/rgsxK8/x506a1fP4WNq+ZclYlOrj1gQF3SmpxMgMDIweQnZxSnJwLZOcA2TrJBUUlQPYMIFu3vKQAxD4BZIsUAR0IZN8BsdMh7A8gdhKYzcQCVhMS5AxkSwDZAkkQtgaInQ5hW4DYyRmJKUC2B8guiBvAgNPDRcHcwFLXkYC7SQa5OaUwO0ChxZOaFxoMcgcQyzB4MLgwKDCYMxgwWDLoMjiWpFaUgBQ65xdUFmWmZ5QoOAJDNlXBOT+3oLQktUhHwTMvWU9HwcjA0ACkDhRnEKM/B4FNZxQ7jxDLX8jAYKnMwMDcgxBLmsbAsH0PA4PEK

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (569)
Category:	downloaded
Size (bytes):	653519
Entropy (8bit):	5.821252682364424
Encrypted:	false
SSDEEP:	6144:K+4IYIWOzpUXzgXcz1RJhG3WaJynggJ9FcfZszyIFSV7RCPt7cw04Q4+k8pHyjcf:TcEcuSFcWztkB4OXIiibAvdWLi
MD5:	CBD28877A88395976F715EC0854F2851
SHA1:	F35F838AF11A3BF2A2ADC866CE3E8C73A0E3275F
SHA-256:	336E6C582C23DC0FB67E2AD68159CFCEEBEE4409A0FB47B51A4323F447BEE396
SHA-512:	E3E231C8937A6AF7B00FFBECB6FB7A483172948141B95919DFFDF9A9CE5651A996A7E8166BDE2677810AC372978B2926EF6A6E04982EB85C52C4E3E4C6B24521
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/w0_qmZVSdobukXrBwYd9dTF7/recaptcha__en.js
Preview:	(function(){/.. Copyright 2018 Google Inc. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var wS=function(){return[function(z,t,A,g,l,I,R,p,w,Y,D,G,f,n,L){return(((z^((L=[3,4,7],z)>>2>=17&&((z^42)&8)<L[0]&&(p=N[35](22,"rc-prepositional-target"),R=[],Array.prototype.forEach.call(N[8](39,l,document,g,p,"td"),function(a,q,O,S,B){((S={selected:!((B=["push",37,(O=this,17)],this.m)[B[0]](q),1),element:a,index:q},R)[B[0]](S),d[44](47,P[32](B[2],this),new sa(a),ls,function(U,C){((U=!(O.Kb((C=["rc-prepositional-selected",23,38],t)),S).selected)?(r[C[2]](20,C[0],S.element),M[4](50,A,S.index,O.m)):.(N[C[1]](99,S.element,C[0]),O.m.push(S.index)

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6984
Entropy (8bit):	5.458791712462209
Encrypted:	false
SSDEEP:	192:w+sA+s++3D+tG+p2+qnKN33ljus4n5O33GcuzK:MQOaO0AF
MD5:	7EB174FFFD642BED2934C84E8F7D267B
SHA1:	18A61B81176E0B3CCA37F4959352284B4CD118B9
SHA-256:	E863EC9A4D1216B7F3C3296936A578F583F2C5B1495E449178CC0ABED1DEC675
SHA-512:	C623AD0C2B6A1437C9F487F12915DDA5ABA3DD2CFDC300C742E8B0E52299BC203D58663DA11F08345001EA6C4612AEE1B7BE024C5874D6884841FADA913D3552
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Source+Serif+Pro:400,600,700&display=swap"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Source Serif Pro';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXk-oBOL.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Source Serif Pro';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXA-oBOL.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Source Serif Pro';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/sourceserifpro/v17/neIQzD-0qpwxpaWvjeD0X88SAOeauXc-oBOL.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1783
Entropy (8bit):	4.203848625064052
Encrypted:	false
SSDEEP:	48:6Or1NjCDdnBKU06Y3m9AV/y0WjzpdldKf5eetq:zL0RMU090DYReetq
MD5:	37FFABC4C16382109874E99A50B032F6
SHA1:	1D99159F7D1380C32B3AC0889921ED8A135FA0DE
SHA-256:	316088C2140636203B492BBA4C10E81224379FAAFF00E103E19FB058F863F66D
SHA-512:	83334763782C7CC72F5CA58E63621F88370CF7694ADC8CD3E0CD29F8D08066B2E3B7FE4ECEF51A2E4A70A2AEA45622F202AFA85F294AA4ADBC78DC26388631FE
Malicious:	false
Reputation:	low
Preview:	<svg width="10" height="13" viewBox="0 0 10 13" fill="none" xmlns="http://www.w3.org/2000/svg">.<path fill-rule="evenodd" clip-rule="evenodd" d="M0.837929 4.4212C0.353601 4.48746 0 4.90375 0 5.39258V10.9711C0 11.4599 0.353601 11.8762 0.837929 11.9424C1.82172 12.077 3.50871 12.2727 5 12.2727C6.49129 12.2727 8.17828 12.077 9.16207 11.9424C9.6464 11.8762 10 11.4599 10 10.9711V5.39258C10 4.90375 9.6464 4.48746 9.16207 4.4212C8.17828 4.28662 6.49129 4.09091 5 4.09091C3.50871 4.09091 1.82172 4.28662 0.837929 4.4212ZM5.90909 7.2727C5.90909 7.53747 5.7959 7.77581 5.61526 7.94196L5.89537 9.1091C5.90455 9.14732 5.91003 9.18727 5.89574 9.22389C5.85441 9.32975 5.68604 9.54541 5.00009 9.54541C4.31414 9.54541 4.14577 9.32975 4.10444 9.22389C4.09015 9.18727 4.09563 9.14732 4.1048 9.1091L4.38489 7.94209C4.20416 7.77594 4.09091 7.53754 4.09091 7.2727C4.09091 6.77062 4.49792 6.36361 5 6.36361C5.50208 6.36361 5.90909 6.77062 5.90909 7.2727Z" fill="black"/>.<path d="M6.57493 1.15235C6.63628 1.21371 6.7198

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:24 UTC	826	OUT	GET /quickpay-prod2504250044/content/img/2FA_wavy_shape_MOBILE.8e36258d72ca60017b19.svg HTTP/1.1 Host: quickpay-prod2504250044-us-west-2.cf.px.athena.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.c8afc303d28c77790a73.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:24 UTC	489	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1475 Connection: close Date: Fri, 25 Apr 2025 16:14:25 GMT Last-Modified: Fri, 25 Apr 2025 01:11:29 GMT ETag: "1e04b0a55382e01cd4963a916e4ce775" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e0a0043c26183d67f99a46bb7af410e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX50-P1 X-Amz-Cf-Id: PkhK2VxPQhBQqP470j4evcLst_cS7Xu1_hlMGU1CqBxtrspEi0poPQ==
2025-04-25 16:14:24 UTC	1475	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 77 69 64 74 68 3d 22 34 31 34 70 78 22 20 68 65 69 67 68 74 3d 22 34 38 38 70 78 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 31 34 20 34 38 38 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 77 61 76 79 20 73 68 61 70 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 78 31 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg width="414px" height="488px" viewBox="0 0 414 488" version="1.1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <title>wavy shape</title> <defs> <linearGradient x1

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:24 UTC	614	OUT	OPTIONS /sdk/goals/63eefbf849bac513170e9b1c HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper Origin: https://payment.patient.athenahealth.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:24 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Allow: GET, OPTIONS, HEAD Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Fri, 25 Apr 2025 16:14:24 GMT Via: 1.1 varnish X-Served-By: cache-bur-kbur8200167-BUR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1745597665.574675,VS0,VE64 Vary: Accept-Encoding Age: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:24 UTC	690	OUT	OPTIONS /sdk/evalx/63eefbf849bac513170e9b1c/contexts/eyJraW5kIjoidXNlciIsImtleSI6ImFub24zMTdjIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-launchdarkly-user-agent,x-launchdarkly-wrapper Origin: https://payment.patient.athenahealth.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:24 UTC	775	IN	HTTP/1.1 200 OK Connection: close Content-Length: 0 Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 3600 Allow: GET, OPTIONS, HEAD Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains Accept-Ranges: bytes Date: Fri, 25 Apr 2025 16:14:24 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940108-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1745597665.576113,VS0,VE70 Vary: Accept-Encoding Age: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:24 UTC	721	OUT	GET /recaptcha/enterprise.js?render=6Lde2w8rAAAAAAxeGmG72AySJgri9Ev_FpgZoTXO&hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQEI4+TOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:24 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 25 Apr 2025 16:14:24 GMT Date: Fri, 25 Apr 2025 16:14:24 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-25 16:14:24 UTC	575	IN	Data Raw: 36 38 32 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 45 3d 27 65 6e 74 65 72 70 72 69 73 65 27 2c 61 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 2c 67 72 3d 61 5b 45 5d 3d 61 5b 45 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f Data Ascii: 682/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var E='enterprise',a=w[N]=w[N]\|\|{},gr=a[E]=a[E]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['_
2025-04-25 16:14:24 UTC	1098	IN	Data Raw: 61 5f 63 6c 69 65 6e 74 27 5d 3d 74 72 75 65 3b 76 61 72 20 64 3d 64 6f 63 75 6d 65 6e 74 2c 70 6f 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 70 6f 2e 74 79 70 65 3d 27 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 27 3b 70 6f 2e 61 73 79 6e 63 3d 74 72 75 65 3b 20 70 6f 2e 63 68 61 72 73 65 74 3d 27 75 74 66 2d 38 27 3b 76 61 72 20 76 3d 77 2e 6e 61 76 69 67 61 74 6f 72 2c 6d 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 6d 65 74 61 27 29 3b 6d 2e 68 74 74 70 45 71 75 69 76 3d 27 6f 72 69 67 69 6e 2d 74 72 69 61 6c 27 3b 6d 2e 63 6f 6e 74 65 6e 74 3d 27 41 37 76 5a 49 33 76 2b 47 7a 37 4a 66 75 52 6f 6c 4b 4e 4d 34 41 66 66 36 7a 61 47 75 54 37 58 30 6d 66 33 77 74 6f 5a 54 6e 4b 76 36 34 39 37 63 56 4d 6e 68 Data Ascii: a_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true; po.charset='utf-8';var v=w.navigator,m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='A7vZI3v+Gz7JfuRolKNM4Aff6zaGuT7X0mf3wtoZTnKv6497cVMnh
2025-04-25 16:14:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:24 UTC	731	OUT	GET /quickpay-prod2504250044/content/img/lock.706d973a93012dc7c0ba.svg HTTP/1.1 Host: quickpay-prod2504250044-us-west-2.cf.px.athena.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:25 UTC	489	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1783 Connection: close Date: Fri, 25 Apr 2025 16:14:25 GMT Last-Modified: Fri, 25 Apr 2025 01:11:29 GMT ETag: "37ffabc4c16382109874e99a50b032f6" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 327c714fef3c222d628f6eae6cebf5fc.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX50-P1 X-Amz-Cf-Id: I6b2yOVKtiMC91471i2RFL4g9f3UWGmICliyFlx7b62e6qxl287FRg==
2025-04-25 16:14:25 UTC	1783	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 31 30 22 20 68 65 69 67 68 74 3d 22 31 33 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 20 31 33 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 4d 30 2e 38 33 37 39 32 39 20 34 2e 34 32 31 32 43 30 2e 33 35 33 36 30 31 20 34 2e 34 38 37 34 36 20 30 20 34 2e 39 30 33 37 35 20 30 20 35 2e 33 39 32 35 38 56 31 30 2e 39 37 31 31 43 30 20 31 31 2e 34 35 39 39 20 30 2e 33 35 33 36 30 31 20 31 31 2e 38 37 36 32 20 30 2e 38 33 37 39 32 39 20 31 31 2e 39 34 32 34 43 31 2e 38 32 Data Ascii: <svg width="10" height="13" viewBox="0 0 10 13" fill="none" xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M0.837929 4.4212C0.353601 4.48746 0 4.90375 0 5.39258V10.9711C0 11.4599 0.353601 11.8762 0.837929 11.9424C1.82

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:24 UTC	381	OUT	GET / HTTP/1.1 Host: api.amplitude.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:25 UTC	220	IN	HTTP/1.1 400 Bad Request Date: Fri, 25 Apr 2025 16:14:25 GMT Content-Type: text/html;charset=utf-8 Content-Length: 13 Connection: close Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=15768000
2025-04-25 16:14:25 UTC	13	IN	Data Raw: 6d 69 73 73 69 6e 67 5f 65 76 65 6e 74 Data Ascii: missing_event

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:25 UTC	714	OUT	GET /sdk/goals/63eefbf849bac513170e9b1c HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive X-LaunchDarkly-Wrapper: react-client-sdk/3.1.0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-LaunchDarkly-User-Agent: JSClient/3.2.0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://payment.patient.athenahealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:25 UTC	932	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2 Content-Type: application/json Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Authorization,X-Requested-With,X-LD-Private,X-LD-AccountId,X-LD-EnvId,X-LD-PrjId,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper,LD-API-Version,X-LaunchDarkly-Tags Access-Control-Allow-Methods: GET, OPTIONS, HEAD Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 Cache-Control: max-age=0 Content-Md5: d751713988987e9331980363e24189ce Etag: "d751713988987e9331980363e24189ce" Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ld-Envid: 63eefbf849bac513170e9b1c Accept-Ranges: bytes Date: Fri, 25 Apr 2025 16:14:25 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940131-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1745597665.245811,VS0,VE74 Vary: Accept-Encoding Age: 0
2025-04-25 16:14:25 UTC	2	IN	Data Raw: 5b 5d Data Ascii: []

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:25 UTC	790	OUT	GET /sdk/evalx/63eefbf849bac513170e9b1c/contexts/eyJraW5kIjoidXNlciIsImtleSI6ImFub24zMTdjIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive X-LaunchDarkly-Wrapper: react-client-sdk/3.1.0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-LaunchDarkly-User-Agent: JSClient/3.2.0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://payment.patient.athenahealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:31 UTC	811	IN	HTTP/1.1 200 OK Connection: close Content-Length: 31821 content-type: application/json x-ld-envid: 63eefbf849bac513170e9b1c cache-control: max-age=0 etag: "45828dbb" access-control-allow-origin: * access-control-max-age: 3600 access-control-allow-methods: OPTIONS, GET access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, Ld-Api-Version Accept-Ranges: bytes Date: Fri, 25 Apr 2025 16:14:31 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940130-LAX, cache-lax-kwhp1940052-LAX X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1745597665.249766,VS0,VE5956 Vary: Authorization, Accept-Encoding Age: 0
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 7b 22 41 43 43 47 4f 4c 44 2d 31 35 39 2d 50 61 74 69 65 6e 74 2d 49 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 46 46 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 2d 31 33 33 37 34 2d 52 48 59 4d 45 2d 44 4f 53 2d 45 58 50 45 52 49 4d 45 4e 54 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 2d 39 37 38 36 2d 48 55 4d Data Ascii: {"ACCGOLD-159-Patient-Identification":{"flagVersion":7,"trackEvents":false,"value":"OFF","variation":1,"version":45828},"AUTHOPS-13374-RHYME-DOS-EXPERIMENT":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"AUTHOPS-9786-HUM
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 48 4f 4c 44 5f 57 4f 52 4b 46 4c 4f 57 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 5f 52 48 59 4d 45 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 38 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 5f 53 4b 49 50 5f 41 55 54 48 5f 43 48 45 43 4b 53 5f 49 46 5f 50 45 52 4d 49 53 53 49 4f 4e 5f 46 41 49 4c 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 33 Data Ascii: HOLD_WORKFLOW":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"AUTHOPS_RHYME":{"flagVersion":8,"trackEvents":false,"value":true,"variation":0,"version":45828},"AUTHOPS_SKIP_AUTH_CHECKS_IF_PERMISSION_FAIL":{"flagVersion":3
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 6e 22 3a 31 33 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 46 46 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 45 57 2d 32 35 32 35 5f 53 55 52 56 45 59 5f 50 4f 50 55 50 5f 4e 50 50 52 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 33 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 45 57 2d 32 39 34 31 5f 4d 45 53 53 41 47 49 4e 47 5f 48 41 53 48 5f 50 41 54 43 48 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c Data Ascii: n":13,"trackEvents":false,"value":"OFF","variation":1,"version":45828},"CHEW-2525_SURVEY_POPUP_NPPR":{"flagVersion":13,"trackEvents":false,"value":"DEFAULT","variation":1,"version":45828},"CHEW-2941_MESSAGING_HASH_PATCH":{"flagVersion":7,"trackEvents":fal
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 48 52 5f 34 34 38 35 5f 54 48 5f 50 52 4f 56 49 44 45 52 5f 45 4d 42 45 44 44 45 44 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 36 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 48 52 5f 34 34 39 34 5f 54 48 5f 57 41 49 54 49 4e 47 5f 52 4f 4f 4d 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 48 52 5f 34 35 39 37 5f 54 45 4c 45 48 45 41 4c 54 48 5f 45 Data Ascii: HR_4485_TH_PROVIDER_EMBEDDED":{"flagVersion":6,"trackEvents":false,"value":"DISABLED","variation":1,"version":45828},"CHHR_4494_TH_WAITING_ROOM":{"flagVersion":4,"trackEvents":false,"value":"DISABLED","variation":1,"version":45828},"CHHR_4597_TELEHEALTH_E
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 3a 33 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 31 30 30 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 37 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4d 41 2d 31 34 30 32 2d 41 57 4f 2d 41 50 50 4f 49 4e 54 4d 45 4e 54 2d 43 41 4e 43 45 4c 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4d 50 52 2d 33 32 30 2d 63 6f 6e 73 65 6e 74 2d 74 6f 2d 74 65 78 74 2d 76 69 61 2d 70 68 6f 6e 65 2d 63 61 6c 6c 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 Data Ascii: :30,"trackEvents":false,"value":"100","variation":7,"version":45828},"CMA-1402-AWO-APPOINTMENT-CANCEL":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"CMPR-320-consent-to-text-via-phone-call":{"flagVersion":20,"trackEvent
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 2d 33 35 34 33 2d 43 4f 44 49 4e 47 2d 41 44 56 49 43 45 2d 43 4c 41 49 4d 4e 4f 54 45 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 44 4d 2d 33 36 34 36 2d 43 4f 52 45 2d 32 2d 30 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 46 46 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 44 4d 2d 33 36 38 35 2d 4e 4f 4e 2d 52 45 43 4f 56 45 52 41 42 4c 45 2d 41 4c 50 48 41 2d 44 41 52 4b Data Ascii: -3543-CODING-ADVICE-CLAIMNOTE":{"flagVersion":4,"trackEvents":false,"value":false,"variation":1,"version":45828},"COLDM-3646-CORE-2-0":{"flagVersion":4,"trackEvents":false,"value":"OFF","variation":1,"version":45828},"COLDM-3685-NON-RECOVERABLE-ALPHA-DARK
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 45 43 52 2d 32 38 31 31 2d 50 5a 44 43 2d 4c 61 74 65 73 74 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 4e 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 45 43 52 2d 32 39 33 32 2d 45 43 52 2d 53 45 52 56 49 43 45 2d 53 54 41 42 49 4c 49 54 59 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 Data Ascii: riation":1,"version":45828},"COLECR-2811-PZDC-Latest":{"flagVersion":15,"trackEvents":false,"value":"ON","variation":0,"version":45828},"COLECR-2932-ECR-SERVICE-STABILITY":{"flagVersion":4,"trackEvents":false,"value":false,"variation":1,"version":45828},"
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 32 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 54 45 43 2d 31 34 31 34 2d 45 6c 69 44 2d 44 65 6e 74 61 6c 2d 54 61 62 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 38 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 54 45 43 2d 31 35 32 34 2d 44 65 70 72 65 63 61 74 69 6f 6e 2d 42 65 68 61 76 69 6f 72 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 Data Ascii: {"flagVersion":22,"trackEvents":false,"value":"DEFAULT","variation":1,"version":45828},"COLTEC-1414-EliD-Dental-Tab":{"flagVersion":18,"trackEvents":false,"value":"DEFAULT","variation":1,"version":45828},"COLTEC-1524-Deprecation-Behavior":{"flagVersion":5
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 4e 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 4e 54 53 54 55 44 49 4f 2d 31 34 35 37 2d 45 4e 41 42 4c 45 2d 48 59 50 45 52 4c 49 4e 4b 2d 54 4f 2d 53 55 43 43 45 53 53 43 4f 4d 4d 55 4e 49 54 59 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 32 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 4e 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 4e 54 53 54 55 44 49 4f 2d 31 35 30 34 2d 45 4e 41 42 4c 45 2d 41 43 43 4f 55 4e 54 53 2d 54 41 42 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 39 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 Data Ascii: ":false,"value":"ON","variation":0,"version":45828},"INTSTUDIO-1457-ENABLE-HYPERLINK-TO-SUCCESSCOMMUNITY":{"flagVersion":12,"trackEvents":false,"value":"ON","variation":0,"version":45828},"INTSTUDIO-1504-ENABLE-ACCOUNTS-TAB":{"flagVersion":9,"trackEvents"
2025-04-25 16:14:31 UTC	1378	IN	Data Raw: 34 35 38 32 38 7d 2c 22 49 53 43 41 50 53 2d 36 30 35 33 2d 46 49 58 2d 4e 55 4c 4c 46 4c 41 56 4f 52 2d 41 54 54 52 49 42 55 54 45 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 53 43 41 50 53 2d 36 30 35 39 2d 41 44 44 2d 53 50 45 43 49 46 49 45 52 2d 41 53 2d 55 4e 49 51 55 45 2d 4b 45 59 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 53 43 41 Data Ascii: 45828},"ISCAPS-6053-FIX-NULLFLAVOR-ATTRIBUTE":{"flagVersion":4,"trackEvents":false,"value":true,"variation":0,"version":45828},"ISCAPS-6059-ADD-SPECIFIER-AS-UNIQUE-KEY":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"ISCA

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:25 UTC	785	OUT	GET /quickpay-prod2504250044/content/fonts/SourceSansPro-Regular.otf.c74cb4d526f9c3ea25a3.woff2 HTTP/1.1 Host: quickpay-prod2504250044-us-west-2.cf.px.athena.io Connection: keep-alive Origin: https://payment.patient.athenahealth.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://quickpay-prod2504250044-us-west-2.cf.px.athena.io/quickpay-prod2504250044/content/main.c8afc303d28c77790a73.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:26 UTC	1195	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Content-Length: 102552 Connection: close Date: Fri, 25 Apr 2025 04:18:47 GMT Last-Modified: Fri, 25 Apr 2025 01:11:20 GMT ETag: "0448fda3606e6dc571f763223e78861a" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Server: AmazonS3 Strict-Transport-Security: max-age=300; includeSubdomains; preload X-Content-Type-Options: nosniff Content-Security-Policy: frame-ancestors 'none'; frame-src https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; img-src 'self' data: .athena.io .athenahealth.com; script-src 'self' .athena.io .athenahealth.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ Access-Control-Allow-Origin: https://payment.patient.athenahealth.com Cache-Control: max-age=604800 X-athena-px-resolved-uri: /quickpay-prod2504250044/content/fonts/SourceSansPro-Regular.otf.c74cb4d526f9c3ea25a3.woff2 X-Frame-Options: DENY X-athena-px-region: us-west-2 X-Cache: Hit from cloudfront Via: 1.1 123e69ce4c4641277ec2a7cbf9f44f26.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX50-P1 X-Amz-Cf-Id: wwF7CgwEU_7dpSuff0yU7THekBxEsTMzj0jSrBlcdJyt6-89n0ApIg== Age: 42938
2025-04-25 16:14:26 UTC	16384	IN	Data Raw: 77 4f 46 32 4f 54 54 4f 00 01 90 98 00 0d 00 00 00 03 67 ac 00 01 90 45 00 02 05 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 19 46 0d 87 85 18 1a 87 42 1b 84 84 16 1c f8 5a 06 60 00 ec 5e 01 36 02 24 03 bc 58 04 06 05 98 1b 07 20 5b c0 66 b3 10 ea 93 bd db 0b af 65 86 d2 c1 68 99 e6 11 48 89 54 ad 5a bf 3a 87 98 7c 13 29 16 44 9c 9e 38 03 fe d7 e1 fb 49 d3 09 9b e9 1c 62 28 05 8b d7 cb 5c 9e bb 47 f0 9c 3d a8 43 76 23 4a 5e 4b bf 5b 1a d9 ff ff ff ff ff ff ff ff ff ff ff ff 9d 2c 8b 50 67 b3 2b 2b bb 77 7b 77 92 25 59 b8 20 83 4d dc 68 c5 94 a7 26 7c c2 27 24 0f 61 15 ce c3 10 02 62 2a 4a d2 af ca 9a 34 06 4f 4a 66 d0 b2 3b 18 70 c6 56 43 ce 8f c6 28 33 8e 88 30 22 ac 10 e9 d1 44 21 44 76 15 a5 53 48 37 99 d6 3a e8 c8 9e f9 71 65 2d 42 Data Ascii: wOF2OTTOgEFBZ`^6$X [fehHTZ:\|)D8Ib(\G=Cv#J^K[,Pg++w{w%Y Mh&\|'$ab*J4OJf;pVC(30"D!DvSH7:qe-B
2025-04-25 16:14:26 UTC	16384	IN	Data Raw: d2 77 ef 54 b2 0b 6d 6c fe 7e e3 f8 1e 0f 4a c6 86 3f 4c ad 60 e7 36 58 74 57 4f 61 3f b7 54 fb 1f 2f 80 d9 3f 27 09 d9 d7 bf cf df 3d 9b ec f4 07 15 ec 42 bb 02 0c b4 93 16 b7 21 f9 06 09 e9 44 6a c1 3c 63 8f 2b 82 22 e8 7c b5 51 75 09 22 0e 21 3e f4 38 76 a5 6f 5d 71 79 02 a1 4a 47 13 1b c1 83 ef 25 91 9f f1 4b 48 af 71 26 c0 a3 9d 7c 9d e8 23 f0 a9 48 08 04 7c 83 cb 88 33 ea 20 3c e7 14 a4 d4 b9 63 80 18 2e 58 c4 0e 57 bd 90 ee 7f d5 79 2a cf fb 2c 9c 1f f6 72 de 77 c4 15 81 72 f3 89 f3 f6 24 57 ef c9 8a 93 93 6e 9f e8 30 31 f6 a2 fb 22 09 d6 b1 02 45 dc e0 97 be 6a 1c ba 9a 9e ac 4f 9d 0e a9 6a 48 29 1a 62 d3 a7 58 05 ea 54 9a 7a 1f 8f ab 6f 15 08 a3 f8 ff 2f 13 b2 99 5a a4 82 75 31 9a 21 be 8d 9e cf d1 d9 4f 0a 06 3d 30 49 d0 90 02 c5 08 eb cd a9 2c Data Ascii: wTml~J?L`6XtWOa?T/?'=B!Dj<c+"\|Qu"!>8vo]qyJG%KHq&\|#H\|3 <c.XWy*,rwr$Wn01"EjOjH)bXTzo/Zu1!O=0I,
2025-04-25 16:14:26 UTC	16384	IN	Data Raw: 23 ba 34 62 bf 1e 07 65 6f 4f 57 2b e0 01 50 fe 54 c5 60 13 56 61 1f 15 ae d8 3f 63 b3 2b 83 9c 6b 0b 46 58 f5 52 dd 4e 70 99 d8 9f d6 43 c9 c8 d8 c2 96 31 6c a2 df 9d 26 77 7d c9 e8 f3 97 31 0a c3 fb af 3a 64 87 1a 14 06 63 78 6e 2a 90 a7 6f 8d 31 ca 8f 39 08 ff 18 13 49 4d 6b 5d fb 75 0f d8 f9 ab 41 55 9c b7 22 e7 09 78 93 15 67 d5 b5 20 b1 ec 16 ee b9 b7 fc a2 5d 1b d2 6e 32 27 54 98 ac f8 aa da 18 ed c5 26 fa cd d9 4b 86 99 f0 88 5c fc 64 71 c2 c5 66 d1 5c f8 49 c1 93 50 84 40 08 79 80 6d f7 86 e1 99 06 9c 09 f7 c8 d9 7e c2 2f 80 e7 ec da a9 dd f1 e3 67 80 f0 be fb 32 72 41 0e 79 8f 35 db 5f 10 07 9d 2d 0c fc 88 ee 38 57 31 3c f8 50 02 1e 9b 1e d6 d6 22 09 38 06 d1 7c 19 28 f2 1c 97 31 85 9b 79 30 c9 e0 fa 9c d6 4c 5e 78 c3 03 ac 44 6a cb fd ae ce 9a Data Ascii: #4beoOW+PT`Va?c+kFXRNpC1l&w}1:dcxn*o19IMk]uAU"xg ]n2'T&K\dqf\IP@ym~/g2rAy5_-8W1<P"8\|(1y0L^xDj
2025-04-25 16:14:26 UTC	16384	IN	Data Raw: 9b 40 ff b6 3d ab 2e 87 bb 59 70 9f e9 5a 71 7b 01 0f 39 b8 a3 3f 3d 4f 01 05 d4 c5 ed ef 2d d0 33 46 14 a3 46 4b 26 79 9b 26 eb 3b b6 3e 7c d0 d2 3e 36 d6 ba 78 c2 0a 87 25 6f 6b 6f 6c d4 0a 3a 4d a4 60 01 10 91 20 9b 10 1b 43 b2 1c 2a d9 d4 2c 43 e6 5c c1 87 ea cd 29 e2 fd b3 46 b7 d3 1f b6 62 d2 66 e4 71 90 e3 6e cd 9a 89 cb b0 6c 45 48 8b 2c 7d f1 1d ac 6b 30 70 a4 9a 0d df f8 17 82 4c 1e d0 4f c1 91 b4 e3 c0 6b d8 6a 92 2f 71 64 e9 2a 82 14 73 09 19 c2 b7 e3 ef 3a 9d b0 3e 94 52 56 f3 b0 b6 11 7e c1 ec 06 1f df a8 b1 c2 e2 76 6b b1 43 d9 8c 83 ae 80 b8 58 ff e5 56 f4 da 45 5a 61 79 83 bf 0d e5 e6 23 d7 c3 b4 cd 6a e8 ec a9 29 15 f6 3a 7a 03 58 1c 06 72 77 37 9e 9c a7 12 b6 07 8c 7a 6b 53 fb 22 8a f1 06 db d2 46 d7 a7 20 b8 be e3 7d c7 8e 49 9b f0 c9 Data Ascii: @=.YpZq{9?=O-3FFK&y&;>\|>6x%okol:M` C,C\)FbfqnlEH,}k0pLOkj/qds:>RV~vkCXVEZay#j):zXrw7zkS"F }I
2025-04-25 16:14:26 UTC	16384	IN	Data Raw: 68 0f a9 b6 e6 2b 16 aa 6c 58 fd 9f 5d 36 fa c6 f9 4e 30 af 3f 72 35 74 2d 4b ce 0b bb c9 34 b7 79 25 1e 72 38 af 06 6a e8 9c 19 6d 7c b6 ce 39 37 d8 6b dc 1e 68 89 fe f2 d3 5d ed 7a f7 46 83 c7 1d 88 36 05 5b c3 33 42 bc 73 71 0b 9d 44 ad a0 ec d5 10 b5 20 70 8e 50 88 04 ef c5 a7 7a b6 a9 20 b8 7a d0 14 61 de 9c 6f ae 8c 45 02 46 ae 81 4c 80 28 92 1e 80 83 a1 12 e9 05 d8 17 9a 5c 55 b0 83 30 f1 1e 34 5a 6b b4 d5 05 cf 89 ed 66 c7 6f 1d d6 dd 35 63 6c 89 93 5e b6 cc e6 4d 94 84 7c 0f 12 35 cb cc 6a 8d 43 35 b1 1e 23 ea 7f 9a 17 c2 5d c0 63 d0 5f 2f bf c3 73 c5 cc e7 cd 75 20 96 fe a1 e7 51 98 65 5c 8c bc 19 a3 e4 9b b5 1c db 87 4c e5 df c6 3c 17 65 8d 6a e2 58 8c 8d cb 7b 3f 6f 3e bd ed 9a f5 5a 09 be e6 e6 a9 e7 92 bc 11 5c 20 6f 8c 35 f9 57 d0 75 80 7b Data Ascii: h+lX]6N0?r5t-K4y%r8jm\|97kh]zF6[3BsqD pPz zaoEFL(\U04Zkfo5cl^M\|5jC5#]c_/su Qe\L<ejX{?o>Z\ o5Wu{
2025-04-25 16:14:26 UTC	16384	IN	Data Raw: fa 74 40 08 6e 64 1d 9a 6b 8e dd f8 8e ae 27 01 b8 8e 44 94 1a 38 ac 47 0f e5 0a 58 49 8c dc a5 c9 8e 1c 5c 79 e7 e0 73 44 19 e4 4f 7a 15 58 96 0b ea 4a b7 e5 82 2a 50 8b b1 85 47 d8 e2 99 59 d4 a5 37 3d 80 0a c0 b2 21 cb 65 b5 d1 fe e2 53 9c cd a3 e4 48 13 d9 fc 4e 58 ef 81 86 86 cd 89 03 31 91 49 0e 1a 77 1c 4e e6 0e ec 6c ce 9c ca 25 80 07 b1 fd 40 51 8a 72 49 fd ab a1 6a ab c0 52 1c ee bb 40 c3 b0 b7 a1 de b2 73 5c ea 17 55 f1 13 2e 97 5d 1f b0 1c 94 a3 c8 f5 82 1b 9e 72 ef 0a 6a df 37 50 5b 38 f9 ab 68 35 b8 8e 56 35 bf 81 76 af 7f 10 a1 cd f1 f7 98 93 d9 c4 45 a2 57 5f d5 5c 53 35 31 1c 68 ae dc 58 1a a5 68 fc 5b fb 23 4f 02 bb 05 f2 88 1a 93 cf c1 f3 6a f5 c5 73 35 a9 2e ab f7 0b b2 6e 74 07 ed 01 68 6b 01 ae c3 82 51 d2 6c 18 b4 f2 4d 41 64 b6 9d Data Ascii: t@ndk'D8GXI\ysDOzXJ*PGY7=!eSHNX1IwNl%@QrIjR@s\U.]rj7P[8h5V5vEW_\S51hXh[#Ojs5.nthkQlMAd
2025-04-25 16:14:26 UTC	4248	IN	Data Raw: 60 83 8f 36 da 64 4c a2 24 ff 24 47 4a 0a 9a 54 69 94 a5 cb a0 2d 53 16 0b b9 36 9b 2d 4f 31 57 25 b1 25 e3 3b aa 66 75 2d 56 33 b7 b3 d4 8e d8 9f f1 53 07 66 3d 05 ed 6f 72 4e 11 6c 3a f6 a5 17 cc da 6f 77 1d b0 15 47 0e 3a e8 94 39 73 9c d6 61 74 de 07 26 6d 1f a9 78 72 34 8e a5 f3 1d 77 42 ba 93 4e 7a b9 4e a1 12 cb 69 a7 c5 38 e3 8c 38 67 9d c5 70 ce 39 6c e7 9d 07 75 c1 05 5e e6 cd 83 b9 e4 92 ef 5d 76 99 9f 2b b1 90 2e 76 d5 a2 6a 4b 96 24 ce b7 49 cd 2c ae 18 d9 67 0e 3f 08 cc 3c ae c0 7b c1 2c be 97 b8 fb 92 58 26 26 80 be f6 c4 bf af a3 62 52 f7 8d d8 2c 3f d4 7d 2b b6 f1 5d a0 ef 12 67 81 fa 1e 71 0e a8 ef 57 9c d7 fd 60 8e df 51 dc fd 44 9c 12 1d f4 33 62 29 e8 e7 15 ab ba 5f c4 65 f9 b9 ee 57 ef eb 45 4f 9e 74 e3 c6 e3 6e e3 2e e3 02 f7 ee 9d Data Ascii: `6dL$$GJTi-S6-O1W%%;fu-V3Sf=orNl:owG:9sat&mxr4wBNzNi88gp9lu^]v+.vjK$I,g?<{,X&&bR,?}+]gqW`QD3b)_eWEOtn.

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:27 UTC	1181	OUT	GET /recaptcha/enterprise/anchor?ar=1&k=6Lde2w8rAAAAAAxeGmG72AySJgri9Ev_FpgZoTXO&co=aHR0cHM6Ly9wYXltZW50LnBhdGllbnQuYXRoZW5haGVhbHRoLmNvbTo0NDM.&hl=en&v=w0_qmZVSdobukXrBwYd9dTF7&size=invisible&cb=kh62sjexd0jr HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQEI4+TOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:28 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 25 Apr 2025 16:14:28 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-tYSIjH_miI5QQZzcl9CQJA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-25 16:14:28 UTC	163	IN	Data Raw: 37 31 36 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 Data Ascii: 7165<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 Data Ascii: ="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); u
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 Data Ascii: 10-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.g
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 30 31 2c 20 55 2b 30 34 30 30 2d 30 34 35 46 2c 20 55 2b 30 34 39 30 2d 30 34 39 31 2c 20 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: om/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2) format('woff2'); unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;}/* greek-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//font
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 2b 31 45 30 30 2d 31 45 39 46 2c 20 55 2b 31 45 46 32 2d 31 45 46 46 2c 20 55 2b 32 30 32 30 2c 20 55 2b 32 30 41 30 2d 32 30 41 42 2c 20 55 2b 32 30 41 44 2d 32 30 43 30 2c 20 55 2b 32 31 31 33 2c 20 55 2b 32 43 36 30 2d 32 43 37 46 2c 20 55 2b 41 37 32 30 2d 41 37 46 46 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 Data Ascii: +1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}/* latin */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f Data Ascii: t-weight: 900; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 77 30 5f 71 6d 5a 56 53 64 6f 62 75 6b 58 72 42 77 59 64 39 64 54 46 37 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 74 59 53 49 6a 48 5f 6d 69 49 35 51 51 5a 7a 63 6c 39 43 51 4a 41 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 Data Ascii: , U+2215, U+FEFF, U+FFFD;}</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/w0_qmZVSdobukXrBwYd9dTF7/styles__ltr.css"><script nonce="tYSIjH_miI5QQZzcl9CQJA" type="text/javascript">window['__recaptcha_api'
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 4f 51 66 69 35 66 41 75 6f 76 48 65 49 45 37 59 51 56 30 30 38 64 57 41 45 75 48 4a 34 45 35 65 77 35 6d 50 41 54 4b 47 64 76 4f 63 54 75 79 4b 73 4d 73 44 5a 62 4c 75 70 30 69 79 5a 65 30 73 54 35 55 32 65 6e 44 6d 74 66 6d 48 2d 35 4d 73 38 4e 71 35 2d 4e 62 79 6f 4c 6e 37 4c 45 49 58 51 42 75 68 6f 69 57 7a 57 5a 4f 75 34 4c 78 55 6c 72 69 58 4d 6b 48 45 35 7a 46 61 38 43 61 46 78 39 65 47 30 64 78 53 65 63 52 4e 71 4f 56 52 5f 4b 4b 78 53 41 76 47 35 6e 32 48 54 7a 6e 4b 57 64 43 31 6d 55 65 74 6e 51 73 6b 39 4f 52 57 6e 41 4b 54 37 79 70 2d 39 4c 4e 4e 35 48 50 4d 52 77 79 52 2d 75 31 78 61 5a 57 75 51 5f 33 6a 78 49 6f 71 52 5f 5a 33 7a 4c 2d 58 71 49 53 65 6c 42 38 61 4b 6d 4a 79 4d 6f 57 6e 6b 55 4d 69 36 4b 58 68 4f 33 7a 6c 41 53 35 4b 42 4c 32 Data Ascii: OQfi5fAuovHeIE7YQV008dWAEuHJ4E5ew5mPATKGdvOcTuyKsMsDZbLup0iyZe0sT5U2enDmtfmH-5Ms8Nq5-NbyoLn7LEIXQBuhoiWzWZOu4LxUlriXMkHE5zFa8CaFx9eG0dxSecRNqOVR_KKxSAvG5n2HTznKWdC1mUetnQsk9ORWnAKT7yp-9LNN5HPMRwyR-u1xaZWuQ_3jxIoqR_Z3zL-XqISelB8aKmJyMoWnkUMi6KXhO3zlAS5KBL2
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 74 59 53 49 6a 48 5f 6d 69 49 35 51 51 5a 7a 63 6c 39 43 51 4a 41 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 5c 78 32 32 2c 5c 78 32 32 4c 79 6f 67 51 57 35 30 61 53 31 7a 63 47 46 74 4c 69 42 58 59 57 35 30 49 48 52 76 49 48 4e 68 65 53 42 6f 5a 57 78 73 62 7a 38 67 51 32 39 75 64 47 46 6a 64 43 41 6f 59 6d 46 7a 5a 54 59 30 4b 53 42 5a 62 54 6b 77 57 6a 4e 57 61 47 4e 74 55 58 52 5a 4d 6a 6c 31 5a 45 64 47 61 6d 52 46 51 6d 35 69 4d 6a 6c 75 59 6b 64 56 64 56 6b 79 4f 58 51 67 4b 69 38 67 4b 47 5a 31 62 6d 4e 30 Data Ascii: ext/javascript" nonce="tYSIjH_miI5QQZzcl9CQJA"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22\x22,\x22LyogQW50aS1zcGFtLiBXYW50IHRvIHNheSBoZWxsbz8gQ29udGFjdCAoYmFzZTY0KSBZbTkwWjNWaGNtUXRZMjl1ZEdGamRFQm5iMjluYkdVdVkyOXQgKi8gKGZ1bmN0
2025-04-25 16:14:28 UTC	1324	IN	Data Raw: 53 77 7a 4c 43 68 4c 50 54 41 73 4d 54 41 70 4c 44 45 31 58 54 74 4c 50 44 6b 37 53 79 73 72 4b 57 64 62 4d 31 30 6f 5a 79 78 4c 4a 54 4d 73 52 46 74 4c 58 53 6c 39 66 53 78 48 56 6a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 4c 4c 47 63 73 52 43 78 6c 4c 45 63 70 65 32 5a 76 63 69 68 45 50 53 68 6c 50 53 68 6e 50 53 68 4c 50 55 73 75 63 6d 56 77 62 47 46 6a 5a 53 67 76 58 46 78 79 58 46 78 75 4c 32 63 73 49 6c 78 63 62 69 49 70 4c 44 41 70 4c 46 74 64 4b 53 77 77 4b 54 74 6e 50 45 73 75 62 47 56 75 5a 33 52 6f 4f 32 63 72 4b 79 6c 48 50 55 73 75 59 32 68 68 63 6b 4e 76 5a 47 56 42 64 43 68 6e 4b 53 78 48 50 44 45 79 4f 44 39 6c 57 30 51 72 4b 31 30 39 52 7a 6f 6f 52 7a 77 79 4d 44 51 34 50 32 56 62 52 43 73 72 58 54 31 48 50 6a 34 32 66 44 45 35 4d 6a 6f 6f Data Ascii: SwzLChLPTAsMTApLDE1XTtLPDk7SysrKWdbM10oZyxLJTMsRFtLXSl9fSxHVj1mdW5jdGlvbihLLGcsRCxlLEcpe2ZvcihEPShlPShnPShLPUsucmVwbGFjZSgvXFxyXFxuL2csIlxcbiIpLDApLFtdKSwwKTtnPEsubGVuZ3RoO2crKylHPUsuY2hhckNvZGVBdChnKSxHPDEyOD9lW0QrK109RzooRzwyMDQ4P2VbRCsrXT1HPj42fDE5Mjoo

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://payment.athenahealth.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Windows Analysis Report
http://payment.athenahealth.com

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:30 UTC	980	OUT	GET /recaptcha/enterprise/webworker.js?hl=en&v=w0_qmZVSdobukXrBwYd9dTF7 HTTP/1.1 Host: www.google.com Connection: keep-alive Accept: / X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCOPkzgEIi+XOAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Sec-Fetch-Storage-Access: active Referer: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6Lde2w8rAAAAAAxeGmG72AySJgri9Ev_FpgZoTXO&co=aHR0cHM6Ly9wYXltZW50LnBhdGllbnQuYXRoZW5haGVhbHRoLmNvbTo0NDM.&hl=en&v=w0_qmZVSdobukXrBwYd9dTF7&size=invisible&cb=kh62sjexd0jr User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:30 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Fri, 25 Apr 2025 16:14:30 GMT Date: Fri, 25 Apr 2025 16:14:30 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-04-25 16:14:30 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 77 30 5f 71 6d 5a 56 53 64 6f 62 75 6b 58 72 42 77 59 64 39 64 54 46 37 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/w0_qmZVSdobukXrBwYd9dTF7/recaptcha__en.js');
2025-04-25 16:14:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:31 UTC	701	OUT	GET /quickpay-prod2504250044/favicon.svg HTTP/1.1 Host: quickpay-prod2504250044-us-west-2.cf.px.athena.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:31 UTC	545	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Server: CloudFront Date: Fri, 25 Apr 2025 16:14:31 GMT Location: /quickpay-prod2504250044/favicon.svg Set-Cookie: X-athena-px-ldu=anon8d33; SameSite=None; Secure Access-Control-Allow-Origin: DENY Strict-Transport-Security: max-age=300; includeSubdomains; preload X-Cache: LambdaGeneratedResponse from cloudfront Via: 1.1 e0a0043c26183d67f99a46bb7af410e2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: PHX50-P1 X-Amz-Cf-Id: mEtVjGV7bIzgP0pkfyyPj9hdTbc6TAQUu-076tC7inewm8hJljFd8Q==

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:31 UTC	494	OUT	GET /sdk/evalx/63eefbf849bac513170e9b1c/contexts/eyJraW5kIjoidXNlciIsImtleSI6ImFub24zMTdjIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1 Host: app.launchdarkly.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:32 UTC	807	IN	HTTP/1.1 200 OK Connection: close Content-Length: 31821 content-type: application/json x-ld-envid: 63eefbf849bac513170e9b1c cache-control: max-age=0 etag: "45828dbb" access-control-allow-origin: * access-control-max-age: 3600 access-control-allow-methods: OPTIONS, GET access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization, X-Requested-With, X-LD-Private, X-LD-AccountId, X-LD-EnvId, X-LD-PrjId, X-LaunchDarkly-Event-Schema, X-LaunchDarkly-User-Agent, X-LaunchDarkly-Wrapper, Ld-Api-Version Accept-Ranges: bytes Date: Fri, 25 Apr 2025 16:14:32 GMT Via: 1.1 varnish X-Served-By: cache-lax-kwhp1940130-LAX, cache-lax-kwhp1940097-LAX X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1745597672.198013,VS0,VE2 Vary: Authorization, Accept-Encoding Age: 0
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 7b 22 41 43 43 47 4f 4c 44 2d 31 35 39 2d 50 61 74 69 65 6e 74 2d 49 64 65 6e 74 69 66 69 63 61 74 69 6f 6e 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 46 46 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 2d 31 33 33 37 34 2d 52 48 59 4d 45 2d 44 4f 53 2d 45 58 50 45 52 49 4d 45 4e 54 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 2d 39 37 38 36 2d 48 55 4d Data Ascii: {"ACCGOLD-159-Patient-Identification":{"flagVersion":7,"trackEvents":false,"value":"OFF","variation":1,"version":45828},"AUTHOPS-13374-RHYME-DOS-EXPERIMENT":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"AUTHOPS-9786-HUM
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 48 4f 4c 44 5f 57 4f 52 4b 46 4c 4f 57 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 5f 52 48 59 4d 45 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 38 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 41 55 54 48 4f 50 53 5f 53 4b 49 50 5f 41 55 54 48 5f 43 48 45 43 4b 53 5f 49 46 5f 50 45 52 4d 49 53 53 49 4f 4e 5f 46 41 49 4c 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 33 Data Ascii: HOLD_WORKFLOW":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"AUTHOPS_RHYME":{"flagVersion":8,"trackEvents":false,"value":true,"variation":0,"version":45828},"AUTHOPS_SKIP_AUTH_CHECKS_IF_PERMISSION_FAIL":{"flagVersion":3
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 6e 22 3a 31 33 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 46 46 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 45 57 2d 32 35 32 35 5f 53 55 52 56 45 59 5f 50 4f 50 55 50 5f 4e 50 50 52 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 33 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 45 57 2d 32 39 34 31 5f 4d 45 53 53 41 47 49 4e 47 5f 48 41 53 48 5f 50 41 54 43 48 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c Data Ascii: n":13,"trackEvents":false,"value":"OFF","variation":1,"version":45828},"CHEW-2525_SURVEY_POPUP_NPPR":{"flagVersion":13,"trackEvents":false,"value":"DEFAULT","variation":1,"version":45828},"CHEW-2941_MESSAGING_HASH_PATCH":{"flagVersion":7,"trackEvents":fal
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 48 52 5f 34 34 38 35 5f 54 48 5f 50 52 4f 56 49 44 45 52 5f 45 4d 42 45 44 44 45 44 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 36 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 48 52 5f 34 34 39 34 5f 54 48 5f 57 41 49 54 49 4e 47 5f 52 4f 4f 4d 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 49 53 41 42 4c 45 44 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 48 48 52 5f 34 35 39 37 5f 54 45 4c 45 48 45 41 4c 54 48 5f 45 Data Ascii: HR_4485_TH_PROVIDER_EMBEDDED":{"flagVersion":6,"trackEvents":false,"value":"DISABLED","variation":1,"version":45828},"CHHR_4494_TH_WAITING_ROOM":{"flagVersion":4,"trackEvents":false,"value":"DISABLED","variation":1,"version":45828},"CHHR_4597_TELEHEALTH_E
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 3a 33 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 31 30 30 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 37 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4d 41 2d 31 34 30 32 2d 41 57 4f 2d 41 50 50 4f 49 4e 54 4d 45 4e 54 2d 43 41 4e 43 45 4c 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4d 50 52 2d 33 32 30 2d 63 6f 6e 73 65 6e 74 2d 74 6f 2d 74 65 78 74 2d 76 69 61 2d 70 68 6f 6e 65 2d 63 61 6c 6c 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 Data Ascii: :30,"trackEvents":false,"value":"100","variation":7,"version":45828},"CMA-1402-AWO-APPOINTMENT-CANCEL":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"CMPR-320-consent-to-text-via-phone-call":{"flagVersion":20,"trackEvent
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 2d 33 35 34 33 2d 43 4f 44 49 4e 47 2d 41 44 56 49 43 45 2d 43 4c 41 49 4d 4e 4f 54 45 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 44 4d 2d 33 36 34 36 2d 43 4f 52 45 2d 32 2d 30 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 46 46 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 44 4d 2d 33 36 38 35 2d 4e 4f 4e 2d 52 45 43 4f 56 45 52 41 42 4c 45 2d 41 4c 50 48 41 2d 44 41 52 4b Data Ascii: -3543-CODING-ADVICE-CLAIMNOTE":{"flagVersion":4,"trackEvents":false,"value":false,"variation":1,"version":45828},"COLDM-3646-CORE-2-0":{"flagVersion":4,"trackEvents":false,"value":"OFF","variation":1,"version":45828},"COLDM-3685-NON-RECOVERABLE-ALPHA-DARK
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 45 43 52 2d 32 38 31 31 2d 50 5a 44 43 2d 4c 61 74 65 73 74 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 4e 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 45 43 52 2d 32 39 33 32 2d 45 43 52 2d 53 45 52 56 49 43 45 2d 53 54 41 42 49 4c 49 54 59 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 Data Ascii: riation":1,"version":45828},"COLECR-2811-PZDC-Latest":{"flagVersion":15,"trackEvents":false,"value":"ON","variation":0,"version":45828},"COLECR-2932-ECR-SERVICE-STABILITY":{"flagVersion":4,"trackEvents":false,"value":false,"variation":1,"version":45828},"
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 32 32 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 54 45 43 2d 31 34 31 34 2d 45 6c 69 44 2d 44 65 6e 74 61 6c 2d 54 61 62 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 38 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 43 4f 4c 54 45 43 2d 31 35 32 34 2d 44 65 70 72 65 63 61 74 69 6f 6e 2d 42 65 68 61 76 69 6f 72 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 Data Ascii: {"flagVersion":22,"trackEvents":false,"value":"DEFAULT","variation":1,"version":45828},"COLTEC-1414-EliD-Dental-Tab":{"flagVersion":18,"trackEvents":false,"value":"DEFAULT","variation":1,"version":45828},"COLTEC-1524-Deprecation-Behavior":{"flagVersion":5
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 4e 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 4e 54 53 54 55 44 49 4f 2d 31 34 35 37 2d 45 4e 41 42 4c 45 2d 48 59 50 45 52 4c 49 4e 4b 2d 54 4f 2d 53 55 43 43 45 53 53 43 4f 4d 4d 55 4e 49 54 59 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 32 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 22 4f 4e 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 4e 54 53 54 55 44 49 4f 2d 31 35 30 34 2d 45 4e 41 42 4c 45 2d 41 43 43 4f 55 4e 54 53 2d 54 41 42 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 39 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 Data Ascii: ":false,"value":"ON","variation":0,"version":45828},"INTSTUDIO-1457-ENABLE-HYPERLINK-TO-SUCCESSCOMMUNITY":{"flagVersion":12,"trackEvents":false,"value":"ON","variation":0,"version":45828},"INTSTUDIO-1504-ENABLE-ACCOUNTS-TAB":{"flagVersion":9,"trackEvents"
2025-04-25 16:14:32 UTC	1378	IN	Data Raw: 34 35 38 32 38 7d 2c 22 49 53 43 41 50 53 2d 36 30 35 33 2d 46 49 58 2d 4e 55 4c 4c 46 4c 41 56 4f 52 2d 41 54 54 52 49 42 55 54 45 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 53 43 41 50 53 2d 36 30 35 39 2d 41 44 44 2d 53 50 45 43 49 46 49 45 52 2d 41 53 2d 55 4e 49 51 55 45 2d 4b 45 59 22 3a 7b 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 35 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 7d 2c 22 49 53 43 41 Data Ascii: 45828},"ISCAPS-6053-FIX-NULLFLAVOR-ATTRIBUTE":{"flagVersion":4,"trackEvents":false,"value":true,"variation":0,"version":45828},"ISCAPS-6059-ADD-SPECIFIER-AS-UNIQUE-KEY":{"flagVersion":5,"trackEvents":false,"value":true,"variation":0,"version":45828},"ISCA

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:32 UTC	639	OUT	OPTIONS /events/diagnostic/63eefbf849bac513170e9b1c HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-launchdarkly-user-agent,x-launchdarkly-wrapper Origin: https://payment.patient.athenahealth.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:32 UTC	526	IN	HTTP/1.1 204 No Content Date: Fri, 25 Apr 2025 16:14:32 GMT Content-Type: application/json Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000; includeSubDomains

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:32 UTC	573	OUT	OPTIONS /v2/track HTTP/1.1 Host: dc.services.visualstudio.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,sdk-context Origin: https://payment.patient.athenahealth.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:32 UTC	423	IN	HTTP/1.1 204 No Content Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Origin,X-Requested-With,Content-Name,Content-Type,Accept,Cache-Control,Sdk-Context,X-Set-Cross-Origin-Resource-Policy,Content-Encoding Access-Control-Allow-Methods: POST Access-Control-Max-Age: 3600 Date: Fri, 25 Apr 2025 16:14:32 GMT Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:32 UTC	733	OUT	GET /eval/63eefbf849bac513170e9b1c/eyJraW5kIjoidXNlciIsImtleSI6ImFub24zMTdjIiwiYW5vbnltb3VzIjp0cnVlfQ HTTP/1.1 Host: clientstream.launchdarkly.com Connection: keep-alive sec-ch-ua-platform: "Windows" Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/event-stream sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://payment.patient.athenahealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:32 UTC	615	IN	HTTP/1.1 200 OK Date: Fri, 25 Apr 2025 16:14:32 GMT Content-Type: text/event-stream; charset=utf-8 Transfer-Encoding: chunked Connection: close Accept-Ranges: bytes Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,Cache-Control,X-Requested-With,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Wrapper Access-Control-Allow-Methods: GET,OPTIONS Access-Control-Allow-Origin: * Access-Control-Max-Age: 300 Cache-Control: no-cache, no-store, must-revalidate Ld-Region: us-east-1 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Ld-Envid: 63eefbf849bac513170e9b1c
2025-04-25 16:14:32 UTC	8194	IN	Data Raw: 31 66 66 61 0d 0a 65 76 65 6e 74 3a 70 75 74 0a 64 61 74 61 3a 7b 22 43 4f 4c 50 4c 4d 5f 35 36 37 31 5f 44 49 53 50 4c 41 59 5f 44 45 4e 54 41 4c 5f 53 54 41 54 45 4d 45 4e 54 53 5f 56 45 52 53 49 4f 4e 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 32 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 50 41 59 45 52 49 4e 54 2d 31 36 36 39 2d 72 65 6d 6f 76 65 2d 65 6d 70 74 79 2d 70 72 61 63 74 69 74 69 6f 6e 65 72 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 37 2c 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 76 61 72 69 61 74 69 6f 6e Data Ascii: 1ffaevent:putdata:{"COLPLM_5671_DISPLAY_DENTAL_STATEMENTS_VERSION":{"version":45828,"flagVersion":4,"value":"DEFAULT","variation":2,"trackEvents":false},"PAYERINT-1669-remove-empty-practitioner":{"version":45828,"flagVersion":7,"value":false,"variation
2025-04-25 16:14:32 UTC	12977	IN	Data Raw: 33 32 61 39 0d 0a 4e 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 49 53 43 41 50 53 2d 35 32 33 39 2d 43 61 63 68 65 5f 49 73 50 61 79 65 72 4f 70 74 4f 75 74 5f 53 75 62 72 6f 75 74 69 6e 65 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 34 2c 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 53 45 43 48 5f 34 36 36 32 5f 42 41 52 43 4f 44 45 5f 41 4c 49 47 4e 4d 45 4e 54 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 32 2c 22 76 61 6c 75 65 22 3a 22 45 4e 41 42 4c 45 44 22 2c 22 76 61 Data Ascii: 32a9N","variation":0,"trackEvents":false},"ISCAPS-5239-Cache_IsPayerOptOut_Subroutine":{"version":45828,"flagVersion":4,"value":true,"variation":0,"trackEvents":false},"SECH_4662_BARCODE_ALIGNMENT":{"version":45828,"flagVersion":12,"value":"ENABLED","va
2025-04-25 16:14:32 UTC	10687	IN	Data Raw: 32 39 62 37 0d 0a 6f 6e 22 3a 31 32 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 30 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 63 68 65 77 2d 32 39 34 32 2d 73 65 63 75 72 65 2d 6d 65 73 73 61 67 65 2d 73 66 70 69 2d 73 75 72 76 65 79 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 2c 22 66 6c 61 67 56 65 72 73 69 6f 6e 22 3a 31 33 2c 22 76 61 6c 75 65 22 3a 22 44 45 46 41 55 4c 54 22 2c 22 76 61 72 69 61 74 69 6f 6e 22 3a 31 2c 22 74 72 61 63 6b 45 76 65 6e 74 73 22 3a 66 61 6c 73 65 7d 2c 22 53 43 49 46 49 2d 32 33 2d 75 73 65 2d 6e 69 6d 62 75 73 2d 73 63 68 65 64 75 6c 65 2d 62 75 69 6c 64 65 72 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 34 35 38 32 38 2c 22 66 6c 61 67 56 65 Data Ascii: 29b7on":12,"value":"DEFAULT","variation":0,"trackEvents":false},"chew-2942-secure-message-sfpi-survey":{"version":45828,"flagVersion":13,"value":"DEFAULT","variation":1,"trackEvents":false},"SCIFI-23-use-nimbus-schedule-builder":{"version":45828,"flagVe
2025-04-25 16:14:32 UTC	7	IN	Data Raw: 32 0d 0a 3a 0a 0d 0a Data Ascii: 2:

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:32 UTC	779	OUT	POST /events/diagnostic/63eefbf849bac513170e9b1c HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Content-Length: 736 X-LaunchDarkly-Wrapper: react-client-sdk/3.1.0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 X-LaunchDarkly-User-Agent: JSClient/3.2.0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://payment.patient.athenahealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:32 UTC	736	OUT	Data Raw: 7b 22 6b 69 6e 64 22 3a 22 64 69 61 67 6e 6f 73 74 69 63 2d 63 6f 6d 62 69 6e 65 64 22 2c 22 69 64 22 3a 7b 22 64 69 61 67 6e 6f 73 74 69 63 49 64 22 3a 22 35 39 61 37 34 66 31 30 2d 32 31 66 30 2d 31 31 66 30 2d 39 31 64 65 2d 34 39 34 32 30 37 32 31 63 30 38 39 22 2c 22 73 64 6b 4b 65 79 53 75 66 66 69 78 22 3a 22 30 65 39 62 31 63 22 7d 2c 22 63 72 65 61 74 69 6f 6e 44 61 74 65 22 3a 31 37 34 35 35 39 37 36 37 30 32 36 38 2c 22 64 61 74 61 53 69 6e 63 65 44 61 74 65 22 3a 31 37 34 35 35 39 37 36 36 32 38 34 39 2c 22 64 72 6f 70 70 65 64 45 76 65 6e 74 73 22 3a 30 2c 22 65 76 65 6e 74 73 49 6e 4c 61 73 74 42 61 74 63 68 22 3a 30 2c 22 73 74 72 65 61 6d 49 6e 69 74 73 22 3a 5b 5d 2c 22 73 64 6b 22 3a 7b 22 6e 61 6d 65 22 3a 22 6a 73 2d 63 6c 69 65 6e 74 Data Ascii: {"kind":"diagnostic-combined","id":{"diagnosticId":"59a74f10-21f0-11f0-91de-49420721c089","sdkKeySuffix":"0e9b1c"},"creationDate":1745597670268,"dataSinceDate":1745597662849,"droppedEvents":0,"eventsInLastBatch":0,"streamInits":[],"sdk":{"name":"js-client
2025-04-25 16:14:33 UTC	543	IN	HTTP/1.1 202 Accepted Date: Fri, 25 Apr 2025 16:14:32 GMT Content-Type: application/json Content-Length: 0 Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000; includeSubDomains

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:33 UTC	680	OUT	POST /v2/track HTTP/1.1 Host: dc.services.visualstudio.com Connection: keep-alive Content-Length: 7048 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-type: application/json Sdk-Context: appId sec-ch-ua-mobile: ?0 Accept: / Origin: https://payment.patient.athenahealth.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:33 UTC	7048	OUT	Data Raw: 5b 7b 22 74 69 6d 65 22 3a 22 32 30 32 35 2d 30 34 2d 32 35 54 31 36 3a 31 34 3a 32 32 2e 36 37 31 5a 22 2c 22 69 4b 65 79 22 3a 22 35 34 61 35 36 34 65 64 2d 31 33 66 65 2d 34 39 39 61 2d 62 65 34 65 2d 32 38 36 32 65 63 63 35 31 36 61 64 22 2c 22 6e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 2e 41 70 70 6c 69 63 61 74 69 6f 6e 49 6e 73 69 67 68 74 73 2e 35 34 61 35 36 34 65 64 31 33 66 65 34 39 39 61 62 65 34 65 32 38 36 32 65 63 63 35 31 36 61 64 2e 45 76 65 6e 74 22 2c 22 74 61 67 73 22 3a 7b 22 61 69 2e 75 73 65 72 2e 69 64 22 3a 22 5a 76 66 62 6e 2b 6a 4d 69 38 58 70 2b 50 61 4a 38 79 64 6c 46 70 22 2c 22 61 69 2e 73 65 73 73 69 6f 6e 2e 69 64 22 3a 22 7a 4c 67 38 45 62 37 38 41 2b 72 38 2b 36 6e 64 69 48 68 6f 66 6a 22 2c 22 61 69 2e 64 65 76 69 Data Ascii: [{"time":"2025-04-25T16:14:22.671Z","iKey":"54a564ed-13fe-499a-be4e-2862ecc516ad","name":"Microsoft.ApplicationInsights.54a564ed13fe499abe4e2862ecc516ad.Event","tags":{"ai.user.id":"Zvfbn+jMi8Xp+PaJ8ydlFp","ai.session.id":"zLg8Eb78A+r8+6ndiHhofj","ai.devi
2025-04-25 16:14:33 UTC	291	IN	HTTP/1.1 200 OK Transfer-Encoding: chunked Content-Type: application/json; charset=utf-8 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Access-Control-Allow-Origin: * Date: Fri, 25 Apr 2025 16:14:33 GMT Connection: close
2025-04-25 16:14:33 UTC	102	IN	Data Raw: 36 30 0d 0a 7b 22 69 74 65 6d 73 52 65 63 65 69 76 65 64 22 3a 39 2c 22 69 74 65 6d 73 41 63 63 65 70 74 65 64 22 3a 39 2c 22 61 70 70 49 64 22 3a 22 39 39 61 32 66 64 34 62 2d 64 38 34 32 2d 34 30 62 31 2d 62 64 63 38 2d 62 37 63 65 36 30 64 37 64 36 38 33 22 2c 22 65 72 72 6f 72 73 22 3a 5b 5d 7d 0d 0a Data Ascii: 60{"itemsReceived":9,"itemsAccepted":9,"appId":"99a2fd4b-d842-40b1-bdc8-b7ce60d7d683","errors":[]}
2025-04-25 16:14:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:33 UTC	687	OUT	OPTIONS /events/bulk/63eefbf849bac513170e9b1c HTTP/1.1 Host: events.launchdarkly.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type,x-launchdarkly-event-schema,x-launchdarkly-payload-id,x-launchdarkly-user-agent,x-launchdarkly-wrapper Origin: https://payment.patient.athenahealth.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://payment.patient.athenahealth.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:34 UTC	526	IN	HTTP/1.1 204 No Content Date: Fri, 25 Apr 2025 16:14:33 GMT Content-Type: application/json Connection: close Access-Control-Allow-Headers: Accept,Content-Type,Content-Length,Accept-Encoding,X-LaunchDarkly-Event-Schema,X-LaunchDarkly-User-Agent,X-LaunchDarkly-Payload-ID,X-LaunchDarkly-Wrapper,X-LaunchDarkly-Tags Access-Control-Allow-Methods: POST,OPTIONS Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Date Access-Control-Max-Age: 300 Strict-Transport-Security: max-age=31536000; includeSubDomains

Timestamp	Bytes transferred	Direction	Data
2025-04-25 16:14:34 UTC	400	OUT	GET /v2/track HTTP/1.1 Host: dc.services.visualstudio.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-25 16:14:34 UTC	232	IN	HTTP/1.1 405 Method Not Allowed Allow: POST Content-Length: 0 Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Fri, 25 Apr 2025 16:14:34 GMT Connection: close