Edit tour

Windows Analysis Report
https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email

Overview

General Information

Sample URL:	https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email
Analysis ID:	1522867
Infos:

Detection

Score:	3
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

Detected non-DNS traffic on DNS port

Found iframes

HTML body with high number of embedded SVGs detected

HTML title does not match URL

Javascript checks online IP of machine

No HTML title found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3556 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1984,i,5894185337468321806,6981843531310123309,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /pagead/landing?gcs=G111&gcu=1&gcd=13r3r3r3r5l1&tag_exp=101671035~101686685~101747727&rnd=26848670.1727717091&url=https%3A%2F%2Fwww.qualtrics.com%2Fpowered-by-qualtrics%2F&dma=0&npa=0&gtm=45He49p0n71W6F8HXv6526812za200&auid=907069368.1727717096 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.qualtrics.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.qualtrics.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Type: application/jsonContent-Length: 42Connection: closeDate: Mon, 30 Sep 2024 17:26:00 GMTx-amzn-requestid: 227b92d6-98b6-4596-ac9b-d7298498b969x-amzn-errortype: MissingAuthenticationTokenExceptionx-amz-apigw-id: e7fOaF2ByK4ES6w=strict-transport-security: max-age=31536000; includeSubDomainsx-xss-protection: 1; mode=blockx-content-type-options: nosniffcontent-security-policy: default-src https://*.berryapp.io; style-src https://*.berryapp.io 'unsafe-inline' https://fonts.googleapis.com; script-src https://*.berryapp.io https://www.google.com https://www.gstatic.com; worker-src 'self' blob:; img-src *; media-src *; frame-src https://google.com https://www.google.com *.wistia.com *.wistia.net *.vidyard.com *.youtube.com *.loom.com *.vimeo.com; connect-src https://*.berryapp.io https://api-js.mixpanel.com https://us.cloud.langfuse.com https://o4507373747306496.ingest.us.sentry.io; font-src 'self' data: https://fonts.gstatic.comX-Cache: Error from cloudfrontVia: 1.1 41f60102fc29156bc5001d6646f75c02.cloudfront.net (CloudFront)X-Amz-Cf-Pop: FRA2-C1Alt-Svc: h3=":443"; ma=86400X-Amz-Cf-Id: U-yFsGnyITFIywRKE14AnsQx3sML91QD1ejAUsJs-dnabljAfvuypg==

Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: Iframe src: https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: Iframe src: https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: Iframe src: https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#ContactingtheSurveyCreator	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: /footer-marketo-form-landing-page/
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: /footer-marketo-form-landing-page/
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: /footer-marketo-form-landing-page/
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: https://sgtm.qualtrics.com/ns.html?id=GTM-W6F8HX
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Iframe src: /footer-marketo-form-landing-page/

Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#ContactingtheSurveyCreator	HTTP Parser: Total embedded SVG size: 160993
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Total embedded SVG size: 160993

Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#ContactingtheSurveyCreator	HTTP Parser: Title: Information for Survey Takers does not match URL
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: Title: Information for Survey Takers does not match URL

Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#ContactingtheSurveyCreator	HTTP Parser: /** * begin snippet from recaptcha api docs * https://developers.google.com/recaptcha/docs/loading /// how this code snippet works:// this logic overwrites the default behavior of `grecaptcha.ready()` to// ensure that it can be safely called at any time. when `grecaptcha.ready()`// is called before recaptcha is loaded, the callback function that is passed// by `grecaptcha.ready()` is enqueued for execution after recaptcha is// loaded.if(typeof grecaptcha === 'undefined') {grecaptcha = {}; }grecaptcha.ready = function(cb){if(typeof grecaptcha === 'undefined') {// window.__grecaptcha_cfg is a global variable that stores recaptcha's// configuration. by default, any functions listed in its 'fns' property// are automatically executed when recaptcha loads.const c = '___grecaptcha_cfg';window[c] = window[c] \|\| {};(window[c]['fns'] = window[c]['fns']\|\|[]).push(cb);} else {cb();}}/* end snippet from recaptcha api docs */var user_ip = "";var v...
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: /** * begin snippet from recaptcha api docs * https://developers.google.com/recaptcha/docs/loading /// how this code snippet works:// this logic overwrites the default behavior of `grecaptcha.ready()` to// ensure that it can be safely called at any time. when `grecaptcha.ready()`// is called before recaptcha is loaded, the callback function that is passed// by `grecaptcha.ready()` is enqueued for execution after recaptcha is// loaded.if(typeof grecaptcha === 'undefined') {grecaptcha = {}; }grecaptcha.ready = function(cb){if(typeof grecaptcha === 'undefined') {// window.__grecaptcha_cfg is a global variable that stores recaptcha's// configuration. by default, any functions listed in its 'fns' property// are automatically executed when recaptcha loads.const c = '___grecaptcha_cfg';window[c] = window[c] \|\| {};(window[c]['fns'] = window[c]['fns']\|\|[]).push(cb);} else {cb();}}/* end snippet from recaptcha api docs */var user_ip = "";var v...

Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: No favicon
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No favicon
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No favicon
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No favicon
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No favicon

Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#ContactingtheSurveyCreator	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="author".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="author".. found

Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#ContactingtheSurveyCreator	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="copyright".. found
Source: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49726 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_405.2.dr	String found in binary or memory: <a aria-label="Like us on Facebook" class="footer-round-social-icon mr-2 d-flex align-items-center justify-content-center" href="https://www.facebook.com/Qualtrics/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr, chromecache_523.2.dr	String found in binary or memory: <a aria-label="Like us on Facebook" class="px-1" href="https://www.facebook.com/Qualtrics/" target="_blank"> equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr, chromecache_523.2.dr	String found in binary or memory: <a aria-label="Follow us on LinkedIn" class="px-1" href="https://www.linkedin.com/company/qualtrics" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_405.2.dr	String found in binary or memory: <li class="mw-100 nav-item" data-id="p002658"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/connecting-monitored-profiles/" style="padding-left:75px">Connecting Monitored Profiles</a></li> <li class="mw-100 nav-item" data-id="p002659"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/supported-data-sources/" style="padding-left:75px">Supported Data Sources</a></li> <li class="mw-100 nav-item" data-id="p002660"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/connecting-a-linkedin-profile/" style="padding-left:75px">Connecting a LinkedIn Profile</a></li> <li class="mw-100 nav-item" data-id="p002661"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/monitoring-using-instagram-in-social-connect/" style="padding-left:75px">Monitoring & Using Instagram in Social Connect</a></li> <li class="mw-100 nav-item" data-id="p002662"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/connecting-khoros-forums-to-topics/" style="padding-left:75px">Connecting Khoros Forums to Topics</a></li> <li class="mw-100 nav-item" data-id="p002663"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/email-as-a-stream/" style="padding-left:75px">Email as a Stream</a></li> <li class="mw-100 nav-item" data-id="p002664"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/importing-historical-data-into-social-connect/" style="padding-left:75px">Importing Historical Data into Social Connect</a></li> <li class="mw-100 nav-item" data-id="p002665"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/connecting-telligent-to-topics/" style="padding-left:75px">Connecting Telligent to Topics</a></li> <li class="mw-100 nav-item" data-id="p002666"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/connecting-telegram-bots/" style="padding-left:75px">Connecting Telegram Bots</a></li> <li class="mw-100 nav-item" data-id="p002667"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/monitoring-an-rss-feed/" style="padding-left:75px">Monitoring an RSS Feed</a></li> <li class="mw-100 nav-item" data-id="p002668"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/reviews/" style="padding-left:75px">Reviews</a></li> <li class="mw-100 nav-item" data-id="p002670"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/connecting-profiles/ghost-banning-on-social-media/" style="padding-left:75
Source: chromecache_405.2.dr	String found in binary or memory: <li class="mw-100 nav-item" data-id="p002710"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/insights/profile-metrics/insights-profile-metrics/" style="padding-left:90px">Insights Profile Metrics</a></li> <li class="mw-100 nav-item" data-id="p002711"> <a class="menu-post nav-link" href="https://www.qualtrics.com/support/social-connect/insights/profile-metrics/metrics-for-facebook-insights/" style="padding-left:90px">Metrics for Facebook Insights</a></li> equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr	String found in binary or memory: </a> <a aria-label="Follow us on LinkedIn" class="footer-round-social-icon mr-2 d-flex align-items-center justify-content-center" href="https://www.linkedin.com/company/qualtrics" target="_blank"> equals www.linkedin.com (Linkedin)
Source: chromecache_405.2.dr	String found in binary or memory: </a> <a aria-label="Follow us on LinkedIn" class="footer-round-social-icon mr-2 d-flex align-items-center justify-content-center" href="https://www.youtube.com/user/QualtricsSoftware" target="_blank"> equals www.youtube.com (Youtube)
Source: chromecache_405.2.dr, chromecache_523.2.dr	String found in binary or memory: <link itemprop="sameAs" href="https://www.facebook.com/Qualtrics/" /> equals www.facebook.com (Facebook)
Source: chromecache_405.2.dr, chromecache_523.2.dr	String found in binary or memory: <link itemprop="sameAs" href="https://www.linkedin.com/company/qualtrics" /> equals www.linkedin.com (Linkedin)
Source: chromecache_405.2.dr, chromecache_523.2.dr	String found in binary or memory: <link itemprop="sameAs" href="https://www.youtube.com/user/QualtricsSoftware/" /> equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr, chromecache_312.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_317.2.dr, chromecache_312.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={eh:e,ah:f,bh:g,Ph:k,Qh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_604.2.dr, chromecache_420.2.dr	String found in binary or memory: re being seen as a complete individual by an employer that wants the best for them."]},"\n",{"tag":"p","html_attributes":{},"inner_html":["Employers also need to make it easier for employees to understand the ",{"tag":"a","html_attributes":{"href":"https://www.qualtrics.com/experience-management/employee/organizational-core-values/"},"inner_html":["company values"]}," and how they apply to their own personal development plans."]},"\n",{"tag":"p","html_attributes":{},"inner_html":[{"tag":"img","html_attributes":{"alt":"Career pathing map","src":"https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522.png","class":"shadow mx-auto img-fluid alignnone wp-image-115923 size-full","sizes":"(max-width: 1200px) 100vw, 1200px","width":"1200","height":"800","srcset":"https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522.png 1200w, https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522-768x512.png 768w, https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522-150x100.png 150w","decoding":"async","fetchpriority":"high"},"inner_html":[]}]},"\n",{"tag":"h2","html_attributes":{"tabindex":"-1"},"inner_html":["Why is career pathing so important?"]},"\n",{"tag":"p","html_attributes":{},"inner_html":["Career pathing is a critical component of organizational strategy because it enables companies to develop talent that can fill future positions. Even before the Great Resignation and its attendant challenges, employees were waking up to the importance of career pathing. ",{"tag":"a","html_attributes":{"href":"https://learning.linkedin.com/resources/workplace-learning-report-2018"},"inner_html":["LinkedIn equals www.linkedin.com (Linkedin)
Source: chromecache_629.2.dr, chromecache_567.2.dr, chromecache_622.2.dr, chromecache_371.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_621.2.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(a){var b=new URL(a);b=b.hostname.endsWith(".facebook.com")&&b.pathname=="/signals/iwl.js";if(!b)throw new Error("Disallowed script URL");return a}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_621.2.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_621.2.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1984,i,5894185337468321806,6981843531310123309,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2180 --field-trial-handle=1984,i,5894185337468321806,6981843531310123309,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: global traffic	DNS traffic detected: DNS query: zoominfo.sjc1.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: eu.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: co1.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: www.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: cdn.cookielaw.org
Source: global traffic	DNS traffic detected: DNS query: use.typekit.net
Source: global traffic	DNS traffic detected: DNS query: client-registry.mutinycdn.com
Source: global traffic	DNS traffic detected: DNS query: p.typekit.net
Source: global traffic	DNS traffic detected: DNS query: success.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: www-api.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: qualtrics-www.s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: api-v2.mutinyhq.io
Source: global traffic	DNS traffic detected: DNS query: j.6sc.co
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: s.yimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: sgtm.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: sp.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: 542-fmf-412.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: secure.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: c.6sc.co
Source: global traffic	DNS traffic detected: DNS query: ipv6.6sc.co
Source: global traffic	DNS traffic detected: DNS query: epsilon.6sense.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: b.6sc.co
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org
Source: global traffic	DNS traffic detected: DNS query: client.mutinycdn.com
Source: global traffic	DNS traffic detected: DNS query: user-data.mutinycdn.com
Source: global traffic	DNS traffic detected: DNS query: s3.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: extend.vimeocdn.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: www.googleoptimize.com
Source: global traffic	DNS traffic detected: DNS query: api.segment.io
Source: global traffic	DNS traffic detected: DNS query: www.berryapp.io
Source: global traffic	DNS traffic detected: DNS query: cse.google.com
Source: global traffic	DNS traffic detected: DNS query: www.adsensecustomsearchads.com
Source: global traffic	DNS traffic detected: DNS query: zzbcdhb83d4t.statuspage.io
Source: global traffic	DNS traffic detected: DNS query: syndicatedsearch.goog
Source: global traffic	DNS traffic detected: DNS query: zn85jou57xphaxsod-qxm.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: zn5bvpdtma7urhqyn-qdigitalsupport.siteintercept.qualtrics.com
Source: global traffic	DNS traffic detected: DNS query: widget.berryapp.io

Source	Detection	Scanner	Label
https://px.ads.linkedin.com/collect?	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
http://gmpg.org/xfn/11	0%	URL Reputation	safe
https://developers.marketo.com/MunchkinLicense.pdf	0%	URL Reputation	safe
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://cloud.google.com/recaptcha-enterprise/billing-information	0%	URL Reputation	safe
https://getbootstrap.com/)	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
d1errvmc6w22y3.cloudfront.net	13.224.189.9	true	false	unknown
adservice.google.com	142.250.185.66	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
spdc-global.pbp.gysm.yahoodns.net	54.246.144.89	true	false	unknown
stats.g.doubleclick.net	74.125.206.156	true	false	unknown
scontent.xx.fbcdn.net	157.240.252.13	true	false	unknown
d296je7bbdd650.cloudfront.net	13.35.58.148	true	false	unknown
s3.amazonaws.com	54.231.236.216	true	false	unknown
d1we3635mtcgus.cloudfront.net	18.245.60.76	true	false	unknown
cse.google.com	172.217.18.14	true	false	unknown
www.google.com	142.250.186.164	true	false	unknown
api.segment.io	35.160.35.184	true	false	unknown
epsilon.6sense.com	76.223.9.105	true	false	unknown
star-mini.c10r.facebook.com	157.240.0.35	true	false	unknown
sgtm.qualtrics.com	216.239.32.21	true	false	unknown
ad.doubleclick.net	142.250.186.70	true	false	unknown
syndicatedsearch.goog	142.250.186.110	true	false	unknown
ax-0001.ax-msedge.net	150.171.27.10	true	false	unknown
www.googleoptimize.com	142.250.185.174	true	false	unknown
elb-status-us.statuspage.io	108.138.7.111	true	false	unknown
s3-w.us-east-1.amazonaws.com	52.217.135.153	true	false	unknown
k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com	44.216.216.10	true	false	unknown
fg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	unknown
542-fmf-412.mktoresp.com	192.28.147.68	true	false	unknown
googleads.g.doubleclick.net	142.250.185.130	true	false	unknown
www3.l.google.com	216.58.212.174	true	false	unknown
api.ipify.org	172.67.74.152	true	false	unknown
ib.anycast.adnxs.com	185.89.210.20	true	false	unknown
cdn.cookielaw.org	104.18.87.42	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
edge.gycpi.b.yahoodns.net	87.248.119.252	true	false	unknown
sjp.mktossl.com	104.17.73.206	true	false	unknown
vimeo-video.map.fastly.net	151.101.2.109	true	false	unknown
siteintercept.qualtrics.com	unknown	unknown	false	unknown
secure.adnxs.com	unknown	unknown	false	unknown
www.adsensecustomsearchads.com	unknown	unknown	false	unknown
co1.qualtrics.com	unknown	unknown	false	unknown
client.mutinycdn.com	unknown	unknown	false	unknown
www-api.qualtrics.com	unknown	unknown	false	unknown
j.6sc.co	unknown	unknown	false	unknown
use.typekit.net	unknown	unknown	false	unknown
qualtrics-www.s3.amazonaws.com	unknown	unknown	false	unknown
c.6sc.co	unknown	unknown	false	unknown
eu.qualtrics.com	unknown	unknown	false	unknown
px.ads.linkedin.com	unknown	unknown	false	unknown
connect.facebook.net	unknown	unknown	false	unknown
munchkin.marketo.net	unknown	unknown	false	unknown
extend.vimeocdn.com	unknown	unknown	false	unknown
www.qualtrics.com	unknown	unknown	false	unknown
s.yimg.com	unknown	unknown	false	unknown
zn5bvpdtma7urhqyn-qdigitalsupport.siteintercept.qualtrics.com	unknown	unknown	false	unknown
p.typekit.net	unknown	unknown	false	unknown
www.berryapp.io	unknown	unknown	false	unknown
ipv6.6sc.co	unknown	unknown	false	unknown
sp.analytics.yahoo.com	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
b.6sc.co	unknown	unknown	false	unknown
www.facebook.com	unknown	unknown	false	unknown
client-registry.mutinycdn.com	unknown	unknown	false	unknown
zn725dkxtvxq847sl-qxm.siteintercept.qualtrics.com	unknown	unknown	false	unknown
www.linkedin.com	unknown	unknown	false	unknown
zzbcdhb83d4t.statuspage.io	unknown	unknown	false	unknown
play.vidyard.com	unknown	unknown	false	unknown
snap.licdn.com	unknown	unknown	false	unknown
success.qualtrics.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
widget.berryapp.io	unknown	unknown	false	unknown
api-v2.mutinyhq.io	unknown	unknown	false	unknown
user-data.mutinycdn.com	unknown	unknown	false	unknown
zn85jou57xphaxsod-qxm.siteintercept.qualtrics.com	unknown	unknown	false	unknown
zoominfo.sjc1.qualtrics.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://success.qualtrics.com/js/forms2/css/forms2-theme-plain.css	false		unknown
https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email	false		unknown
https://cdn.cookielaw.org/scripttemplates/otSDKStub.js	false	URL Reputation: safe	unknown
https://success.qualtrics.com/rs/542-FMF-412/images/marketo-xdframe-relative.html	false		unknown
https://s.yimg.com/wi/config/10005469.json	false		unknown
https://widget.berryapp.io/trackm/track/?verbose=1&ip=1&_=1727717156687	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6-768x543.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds11.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr2-en-380x279.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/xm-institute/five-steps-for-building-a-strong-cx-metrics-program/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://use.typekit.net/af/efd550/00000000000000007735b0d5/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_426.2.dr	false		unknown
https://www.qualtrics.com/support/de/survey-platform/information-survey-takers/	chromecache_405.2.dr	false		unknown
https://px.ads.linkedin.com/collect?	chromecache_567.2.dr, chromecache_622.2.dr, chromecache_371.2.dr	false	URL Reputation: safe	unknown
https://analytics.google.com/g/s/collect?dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5l1&gtm=45j91e49q0v883492	chromecache_640.2.dr	false		unknown
https://www.qualtrics.com/m/assets/dist/css/language-routing.css	chromecache_405.2.dr, chromecache_523.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_353.2.dr, chromecache_626.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/increase-decrease-150x73.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/support/it/survey-platform/information-survey-takers/	chromecache_405.2.dr	false		unknown
https://support.google.com/recaptcha/#6175971	chromecache_326.2.dr, chromecache_599.2.dr, chromecache_339.2.dr	false	URL Reputation: safe	unknown
https://www.qualtrics.com/m/assets/dist/css/libraries/support-global.css	chromecache_405.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies5.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/03/Screen-Shot-2022-03-24-at-1.00.21-PM.p	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/people/engage/pulse-surveys/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.inc.com/marc-emmer/95-percent-of-new-products-fail-here-are-6-steps-to-make-sure-yours-d	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.markinblog.com/customer-loyalty-retention-statistics/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://support.google.com/recaptcha	chromecache_326.2.dr, chromecache_599.2.dr, chromecache_339.2.dr	false	URL Reputation: safe	unknown
https://www.qualtrics.com/m/assets/dist/manifest.json	chromecache_405.2.dr, chromecache_523.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/03/Screen-Shot-2022-03-24-at-1.00.21-PM-1	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect?v=2&dma=0&npa=0&gcs=G111&gcd=13r3r3r3r5l1&tid=G-KREE1SMXRW	chromecache_632.2.dr, chromecache_640.2.dr	false		unknown
https://use.typekit.net/af/efd550/00000000000000007735b0d5/30/a?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_426.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/above-and-beyond-768x390.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas1-en-1-150x75.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://github.com/cssinjs/jss	chromecache_398.2.dr, chromecache_628.2.dr	false		unknown
https://siteintercept.qualtrics.com	chromecache_383.2.dr, chromecache_334.2.dr, chromecache_347.2.dr, chromecache_608.2.dr, chromecache_386.2.dr, chromecache_593.2.dr, chromecache_325.2.dr, chromecache_518.2.dr	false		unknown
https://status.qualtrics.com?utm_source=embed	chromecache_597.2.dr	false		unknown
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLCopyright	chromecache_586.2.dr, chromecache_358.2.dr	false		unknown
http://gmpg.org/xfn/11	chromecache_405.2.dr, chromecache_523.2.dr	false	URL Reputation: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/drivers-of-ex-en.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://developers.google.com/custom-search/docs/element.	chromecache_557.2.dr, chromecache_585.2.dr	false		unknown
https://www.qualtrics.com/ebooks-guides/2024-ex-trends-report/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://geolocation.onetrust.com	chromecache_405.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/living-values-150x161.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_561.2.dr, chromecache_330.2.dr, chromecache_422.2.dr, chromecache_517.2.dr	false	URL Reputation: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-12.00.37-PM.p	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr1-en.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/uk/customers/under-armour/?rid=ip	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://vwo.com/blog/ecommerce-statistics/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://use.typekit.net/af/c35fc9/00000000000000007735b0de/30/l?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_426.2.dr, chromecache_306.2.dr	false		unknown
https://www.emerald.com/insight/content/doi/10.1108/17537981211265589/full/html	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://resources.workable.com/tutorial/passive-talent-pipeline	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://github.com/ReactTooltip/react-tooltip	chromecache_493.2.dr, chromecache_587.2.dr	false		unknown
https://www.cultureamp.com/blog/biggest-lie-people-quit-bosses	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://medium.com/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/uk/wp-content/uploads/2019/09/vrt_img.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/qualtrics-xm.png	chromecache_405.2.dr, chromecache_523.2.dr	false		unknown
https://www.indeed.com/career-advice/career-development/i-feel-stuck-in-my-job	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.google.com/cse/static/element/	chromecache_557.2.dr, chromecache_585.2.dr	false		unknown
https://www.xminstitute.com/	chromecache_551.2.dr, chromecache_400.2.dr	false		unknown
https://www.qualtrics.com/m/digital-success-header/v2/xmi.svg	chromecache_551.2.dr, chromecache_405.2.dr, chromecache_400.2.dr	false		unknown
https://www.qualtrics.com/uk/design-xm/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/ebooks-guides/optimizing-digital-support-2022/?utm_source=Knowledge-Hague-	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds7.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas1-en-1.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2021/10/Yamaha.jpeg	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/digital-success-header/v2/roadmap.svg	chromecache_551.2.dr, chromecache_405.2.dr, chromecache_400.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/above-and-beyond-150x76.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/hidden/wp-content/uploads/2021/06/xm.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_326.2.dr, chromecache_599.2.dr, chromecache_339.2.dr	false	URL Reputation: safe	unknown
https://www.qualtrics.com/m/digital-success-header/v2/status.svg	chromecache_551.2.dr, chromecache_405.2.dr, chromecache_400.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/living-values.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-formula-en-150x100.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds7-150x84.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/pds6-150x106.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_01_072522.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-11.59.05-AM-7	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://status.qualtrics.com/	chromecache_551.2.dr, chromecache_400.2.dr	false		unknown
https://www.qualtrics.com/m/assets/dist/css/main-nav-2023-03.css	chromecache_405.2.dr	false		unknown
https://success.qualtrics.com	chromecache_405.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/05/concept-testing-1.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-11.59.05-AM-1	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://client-registry.mutinycdn.com	chromecache_405.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_326.2.dr, chromecache_599.2.dr, chromecache_339.2.dr	false	URL Reputation: safe	unknown
https://cookiepedia.co.uk/giving-consent-to-cookies	chromecache_552.2.dr, chromecache_356.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/08/tas3-en-1-768x384.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/dist/js/modules/internal-library-2024-07.js	chromecache_405.2.dr, chromecache_433.2.dr, chromecache_523.2.dr	false		unknown
https://www.qualtrics.com/blog/belonging-at-work/?utm_lp=hub_employee_improve-employee-engagement	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.hubspot.com/state-of-marketing	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/rr2-en-768x563.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_326.2.dr, chromecache_599.2.dr, chromecache_339.2.dr	false	URL Reputation: safe	unknown
https://use.typekit.net/af/97165a/00000000000000007735b0f3/30/d?primer=7cdcb44be4a7db8877ffa5c0007b8	chromecache_426.2.dr, chromecache_306.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/07/1419666_CareerPathing_02_072522-768x51	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/blog/global-consumer-trends-2022/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/10/retention-rate-1-en-768x351.webp	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
http://scripts.sil.org/OFLhttp://scripts.sil.org/OFLPoppinsMedium	chromecache_586.2.dr	false		unknown
https://getbootstrap.com/)	chromecache_353.2.dr, chromecache_626.2.dr	false	URL Reputation: safe	unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2023/03/Screenshot-2023-03-17-at-11.59.05-AM.p	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.mckinsey.com/business-functions/marketing-and-sales/our-insights/personalizing-at-scale	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/blog/developing-people-for-future-work/	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown
https://www.qualtrics.com/m/assets/wp-content/uploads/2022/11/crstrategies5-768x400.png	chromecache_604.2.dr, chromecache_420.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
44.216.216.10	k8s-mutiny-privatea-b7eaf9f835-63806838.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
35.160.35.184	api.segment.io	United States	16509	AMAZON-02US	false
108.138.7.111	elb-status-us.statuspage.io	United States	16509	AMAZON-02US	false
185.89.210.153	unknown	Germany	29990	ASN-APPNEXUS	false
13.248.142.121	unknown	United States	16509	AMAZON-02US	false
54.231.236.216	s3.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.73.206	sjp.mktossl.com	United States	13335	CLOUDFLARENETUS	false
104.18.32.137	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
13.35.58.148	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
104.17.74.206	unknown	United States	13335	CLOUDFLARENETUS	false
185.89.210.20	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
142.250.186.70	ad.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.110	syndicatedsearch.goog	United States	15169	GOOGLEUS	false
157.240.252.13	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
18.245.60.76	d1we3635mtcgus.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.185.66	adservice.google.com	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
104.18.87.42	cdn.cookielaw.org	United States	13335	CLOUDFLARENETUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
172.217.18.6	unknown	United States	15169	GOOGLEUS	false
151.101.2.109	vimeo-video.map.fastly.net	United States	54113	FASTLYUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
108.138.7.72	unknown	United States	16509	AMAZON-02US	false
54.246.144.89	spdc-global.pbp.gysm.yahoodns.net	United States	16509	AMAZON-02US	false
157.240.253.35	unknown	United States	32934	FACEBOOKUS	false
16.182.74.168	unknown	United States	unknown	unknown	false
76.223.9.105	epsilon.6sense.com	United States	16509	AMAZON-02US	false
172.67.74.152	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
18.245.60.93	unknown	United States	16509	AMAZON-02US	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	cse.google.com	United States	15169	GOOGLEUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
74.125.206.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.38	unknown	United States	15169	GOOGLEUS	false
87.248.119.252	edge.gycpi.b.yahoodns.net	United Kingdom	203220	YAHOO-DEBDE	false
192.28.147.68	542-fmf-412.mktoresp.com	United States	53580	MARKETOUS	false
150.171.28.10	unknown	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.224.189.2	unknown	United States	16509	AMAZON-02US	false
216.58.212.174	www3.l.google.com	United States	15169	GOOGLEUS	false
13.224.189.9	d1errvmc6w22y3.cloudfront.net	United States	16509	AMAZON-02US	false
52.217.135.153	s3-w.us-east-1.amazonaws.com	United States	16509	AMAZON-02US	false
216.239.32.21	sgtm.qualtrics.com	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
150.171.27.10	ax-0001.ax-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.250.181.226	unknown	United States	15169	GOOGLEUS	false
142.250.185.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.253.1	unknown	United States	32934	FACEBOOKUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
104.18.86.42	unknown	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522867
Start date and time:	2024-09-30 19:23:29 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean3.win@29/564@198/53
Cookbook Comments:	Browse: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu Browse: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#ContactingtheSurveyCreator Browse: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants

Input	Output
URL: https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email Model: jbxai	{ "brand":["unknown"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email Model: jbxai	{ "phishing_score":0, "reason":"No text found on page."}
	{ "phishing_score":0, "reason":"No text found on page."}
URL: https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu Model: jbxai	{ "brand":["Qualtrics"], "contains_trigger_text":true, "trigger_text":"If you have a question about the survey you were taking, please get in touch with the company that sent it to you. Learn more about Qualtrics or get support with a survey below.", "prominent_button_name":"LEARN MORE", "text_input_field_labels":["LEARN MORE", "LEARN MORE", "LEARN MORE"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants Model: jbxai	{ "brand":["Qualtrics"], "contains_trigger_text":true, "trigger_text":"Stay up-to-date with every new feature in Qualtrics XM", "prominent_button_name":"CONTACT SALES", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants Model: jbxai	{ "brand":["Qualtrics"], "contains_trigger_text":true, "trigger_text":"Stay up-to-date with every new feature in Qualtrics XM", "prominent_button_name":"CONTACT SALES", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.qualtrics.com/powered-by-qualtrics/?utm_source=internal%2Binitiatives&utm_medium=survey%2Bpowered%2Bby%2Bqualtrics&utm_content=zoominfo&utm_survey_id=SV_exJ1itd6woUBBiu Model: jbxai	{ "brand":["Qualtrics"], "contains_trigger_text":true, "trigger_text":"If you have a question about the survey you were taking, please get in touch with the company that sent it to you. Learn more about Qualtrics or get support with a survey below.", "prominent_button_name":"LEARN MORE", "text_input_field_labels":["LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "LEARN MORE", "} "], "has_visible_qrcode":false}

URL: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants Model: jbxai	{ "brand":["Qualtrics"], "contains_trigger_text":true, "trigger_text":"contact the survey owner and alert them of the issue.", "prominent_button_name":"CONTACT SALES", "text_input_field_labels":["contact the survey owner and alert them of the issue", "contact the survey owner and alert them of the issue"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants Model: jbxai	{ "brand":["Qualtrics"], "contains_trigger_text":true, "trigger_text":"Employee Experience projects", "prominent_button_name":"CONTACT SALES", "text_input_field_labels":["Was this helpful?", "Yes", "No"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.qualtrics.com/support/survey-platform/information-survey-takers/#EXParticipants Model: jbxai	{ "brand":["Qualtrics"], "contains_trigger_text":true, "trigger_text":"Employee Experience projects", "prominent_button_name":"CONTACT SALES", "text_input_field_labels":["Employee Engagement", "Employee Lifecycle", "Ad Hoc Employee Research"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Sep 30 16:24:29 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9839460680576266
Encrypted:	false
SSDEEP:	48:8bdaTme4HTeidAKZdA19ehwiZUklqehiy+3:8Mz60py
MD5:	CB7B1FAD40769CD8FF466E6B87D5983A
SHA1:	2B53E11CD86E7DCBEE435C88033801EC4D800CCF
SHA-256:	5248A6A439756F720C3E8EADE08043A584E0D1EC3F4F4D9C911A5E1AE0752032
SHA-512:	5FF150EAF8B4AADBC1EE5A6705E73AE50F659BE72CBDEEA03A3D3231B886C07B23F006F3F8A2AE7B485B14C1A3CF0AB36B8793373B091B1C44857F170D7AAD96
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....v..]...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I>Y......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V>Y......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V>Y......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V>Y............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V>Y.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:34 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 17:24:35 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=256876 Date: Mon, 30 Sep 2024 17:24:34 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Windows Analysis Report
https://zoominfo.sjc1.qualtrics.com/jfe/form/SV_exJ1itd6woUBBiu?Q_DL=5kXfW3i5ll46ypM_exJ1itd6woUBBiu_CGC_TKZRebY4jQZgC6S&Q_CHL=email

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 17:24:36 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=256818 Date: Mon, 30 Sep 2024 17:24:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-30 17:24:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:44 UTC	546	OUT	GET /scripttemplates/otSDKStub.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:44 UTC	903	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: jDFunkBoRQZ82jkCSA3wow== Last-Modified: Mon, 30 Sep 2024 02:09:16 GMT x-ms-request-id: caf749af-101e-00d4-6b39-13daaa000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * CF-Cache-Status: HIT Age: 5 Expires: Tue, 01 Oct 2024 17:24:44 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cb5e87f7f3c41e7-EWR
2024-09-30 17:24:44 UTC	466	IN	Data Raw: 35 37 65 37 0d 0a 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 6c 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 Data Ascii: 57e7var OneTrustStub=function(t){"use strict";var a,o,l=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIAB
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 22 2c 22 49 54 22 2c 22 43 59 22 2c 22 4c 56 22 2c 22 4c 54 22 2c 22 4c 55 22 2c 22 48 55 22 2c 22 4d 54 22 2c 22 4e 4c 22 2c 22 41 54 22 2c 22 50 4c 22 2c 22 50 54 22 2c 22 52 4f 22 2c 22 53 49 22 2c 22 53 4b 22 2c 22 46 49 22 2c 22 53 45 22 2c 22 47 42 22 2c 22 48 52 22 2c 22 4c 49 22 2c 22 4e 4f 22 2c 22 49 53 22 5d 2c 74 68 69 73 2e 73 74 75 62 46 69 6c 65 4e 61 6d 65 3d 22 6f 74 53 44 4b 53 74 75 62 22 2c 74 68 69 73 2e 44 41 54 41 46 49 4c 45 41 54 54 52 49 42 55 54 45 3d 22 64 61 74 61 2d 64 6f 6d 61 69 6e 2d 73 63 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 64 6f 6d 50 75 72 69 66 79 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 44 6f 6d 50 75 72 Data Ascii: ","IT","CY","LV","LT","LU","HU","MT","NL","AT","PL","PT","RO","SI","SK","FI","SE","GB","HR","LI","NO","IS"],this.stubFileName="otSDKStub",this.DATAFILEATTRIBUTE="data-domain-script",this.bannerScriptName="otBannerSdk.js",this.domPurifyScriptName="otDomPur
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 72 69 6d 28 29 7d 29 2c 6e 3d 30 2c 61 3d 76 6f 69 64 20 30 3b 6e 3c 69 2e 6c 65 6e 67 74 68 3b 2b 2b 6e 29 69 66 28 2f 3a 2f 2e 74 65 73 74 28 69 5b 6e 5d 29 29 7b 69 66 28 21 28 61 3d 69 5b 6e 5d 2e 73 70 6c 69 74 28 2f 3a 28 2e 2b 29 2f 29 29 5b 31 5d 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 65 5b 74 68 69 73 2e 63 61 6d 65 6c 69 7a 65 28 61 5b 30 5d 29 5d 3d 61 5b 31 5d 2e 74 72 69 6d 28 29 7d 72 65 74 75 72 6e 20 65 7d 2c 65 29 3b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 69 6d 70 6c 65 6d 65 6e 74 54 68 65 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 Data Ascii: ).map(function(t){return t.trim()}),n=0,a=void 0;n<i.length;++n)if(/:/.test(i[n])){if(!(a=i[n].split(/:(.+)/))[1])return null;e[this.camelize(a[0])]=a[1].trim()}return e},e);function e(){var t=this;this.implementThePolyfill=function(){var a=t,o=Element.pr
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 2e 5f 5f 67 70 70 7c 7c 28 73 2e 77 69 6e 2e 5f 5f 67 70 70 3d 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 73 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 2c 21 31 29 2c 73 2e 61 64 64 46 72 61 6d 65 28 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 29 29 7d 2c 74 68 69 73 2e 72 65 6d 6f 76 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 69 66 72 61 6d 65 5b 6e 61 6d 65 3d 22 2b 73 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 Data Ascii: .__gpp\|\|(s.win.__gpp=s.executeGppApi,window.addEventListener("message",s.messageHandler,!1),s.addFrame(s.LOCATOR_NAME))},this.removeGppApi=function(){delete s.win.__gpp;var t=document.querySelectorAll("iframe[name="+s.LOCATOR_NAME+"]")[0];t&&t.parentEleme
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 61 72 20 65 2c 69 3d 73 2e 77 69 6e 2e 64 6f 63 75 6d 65 6e 74 2c 6e 3d 42 6f 6f 6c 65 61 6e 28 73 2e 77 69 6e 2e 66 72 61 6d 65 73 5b 74 5d 29 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 69 2e 62 6f 64 79 3f 28 28 65 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 66 72 61 6d 65 22 29 29 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 2c 65 2e 6e 61 6d 65 3d 74 2c 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 69 74 6c 65 22 2c 22 47 50 50 20 4c 6f 63 61 74 6f 72 22 29 2c 69 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 Data Ascii: ar e,i=s.win.document,n=Boolean(s.win.frames[t]);return n\|\|(i.body?((e=i.createElement("iframe")).style.cssText="display:none",e.name=t,e.setAttribute("title","GPP Locator"),i.body.appendChild(e)):setTimeout(function(){s.addFrame(t)},5)),!n},this.addEvent
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 63 79 26 26 28 77 69 6e 64 6f 77 2e 4f 6e 65 54 72 75 73 74 2e 54 72 75 73 74 65 64 54 79 70 65 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 6f 74 2d 74 72 75 73 74 65 64 2d 74 79 70 65 2d 70 6f 6c 69 63 79 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 44 4f 4d 50 75 72 69 66 79 2e 73 61 6e 69 74 69 7a 65 28 74 29 7d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 69 Data Ascii: cy&&(window.OneTrust.TrustedTypePolicy=window.trustedTypes.createPolicy("ot-trusted-type-policy",{createHTML:function(t){return window.DOMPurify.sanitize(t)},createScript:function(t){return window.DOMPurify.sanitize(t)},createScriptURL:function(t){var e,i
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 6c 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 3d 22 74 72 75 65 22 3d 3d 3d 6c 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 6c 2e 62 61 6e 6e 65 72 44 61 74 61 50 61 72 65 6e 74 55 52 4c 2c 74 68 69 73 2e 67 65 74 4c 6f 63 61 74 69 6f 6e 2e 62 69 6e 64 28 74 68 69 73 29 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 44 6f 6d 61 69 6e Data Ascii: mainDataFileURL(),this.crossOrigin=l.stubScriptElement.getAttribute("crossorigin")\|\|null,this.previewMode="true"===l.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(l.bannerDataParentURL,this.getLocation.bind(this))},f.prototype.setDomain
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 29 29 3a 28 69 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 6c 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 6c 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b Data Ascii: )):(i=this.readCookieParam(l.optanonCookieName,l.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},f.prototype.handleBulkDomainMgmt=function(t,e){
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 3d 76 6f 69 64 20 30 3d 3d 3d 69 3f 22 22 3a 69 7d 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 74 46 65 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e Data Ascii: =void 0===i?"":i}},f.prototype.otFetch=function(t,i,e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.
2024-09-30 17:24:44 UTC	1369	IN	Data Raw: 74 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 74 2e 44 65 66 61 75 6c 74 7d 29 3b 69 66 28 21 61 2e 63 6f 75 6e 74 72 79 26 26 21 61 2e 73 74 61 74 65 29 72 65 74 75 72 6e 20 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 70 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 Data Ascii: t.filter(function(t){return!0===t.Default});if(!a.country&&!a.state)return o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var p=t.RuleSet[u].Stat

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:45 UTC	635	OUT	GET /consent/0174e4ef-b832-4af5-a993-2642a1c2e41e/0174e4ef-b832-4af5-a993-2642a1c2e41e.json HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:45 UTC	982	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:45 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close CF-Ray: 8cb5e8884c9341ed-EWR CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 62105 Cache-Control: public, max-age=86400 Expires: Tue, 01 Oct 2024 17:24:45 GMT Last-Modified: Tue, 07 May 2024 23:31:16 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Accept-Encoding Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Content-MD5: j6NfUAoHUArh7aiN2n+XyQ== Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: 1d0b31fc-601e-0054-42d6-a0abe3000000 x-ms-version: 2009-09-19 Cross-Origin-Resource-Policy: cross-origin Server: cloudflare
2024-09-30 17:24:45 UTC	387	IN	Data Raw: 31 33 64 39 0d 0a 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 50 52 4f 44 55 43 54 49 4f 4e 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 34 2e 31 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 30 31 37 34 Data Ascii: 13d9{"CookieSPAEnabled":false,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"PRODUCTION","Version":"202404.1.0","OptanonDataJSON":"0174
2024-09-30 17:24:45 UTC	1369	IN	Data Raw: 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 65 63 65 34 39 2d 37 66 66 30 2d 37 39 34 63 2d 62 39 32 35 2d 31 62 62 32 39 34 30 39 66 33 37 65 22 2c 22 4e 61 6d 65 22 3a 22 47 6c 6f 62 61 6c 20 41 75 64 69 65 6e 63 65 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 70 72 22 2c 22 70 73 22 2c 22 70 77 22 2c 22 70 79 22 2c 22 71 61 22 2c 22 61 64 22 2c 22 61 65 22 2c 22 61 66 22 2c 22 61 67 22 2c 22 61 69 22 2c 22 61 6c 22 2c 22 61 6d 22 2c 22 61 6f 22 2c 22 61 71 22 2c 22 61 72 22 2c 22 61 73 22 2c 22 61 75 22 2c 22 61 77 Data Ascii: eckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018ece49-7ff0-794c-b925-1bb29409f37e","Name":"Global Audience","Countries":["pr","ps","pw","py","qa","ad","ae","af","ag","ai","al","am","ao","aq","ar","as","au","aw
2024-09-30 17:24:45 UTC	1369	IN	Data Raw: 22 65 73 2d 4d 58 22 2c 22 65 73 22 3a 22 65 73 22 2c 22 6e 6c 22 3a 22 6e 6c 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 74 72 75 65 2c 22 54 79 70 65 22 3a 22 47 45 4e 45 52 49 43 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 65 6e 65 72 69 63 20 54 65 6d 70 6c 61 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 Data Ascii: "es-MX","es":"es","nl":"nl"},"BannerPushesDown":false,"Default":false,"Global":true,"Type":"GENERIC","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"Generic Template","Conditions":[],"GCEnable":true,"IsGPPE
2024-09-30 17:24:45 UTC	1369	IN	Data Raw: 74 65 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 3a 74 72 75 65 2c 22 49 73 47 50 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 45 6e 61 62 6c 65 4a 57 54 41 75 74 68 46 6f 72 4b 6e 6f 77 6e 55 73 65 72 73 22 3a 66 61 6c 73 65 7d 5d 2c 22 49 61 62 44 61 74 61 22 3a 7b 22 63 6f 6f 6b 69 65 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 72 65 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 37 54 32 33 3a 33 31 3a 31 35 2e 35 39 31 30 33 31 32 31 38 22 2c 22 75 70 64 61 74 65 64 54 69 6d 65 22 3a 22 32 30 32 34 2d 30 35 2d 30 37 54 32 33 3a 33 31 3a 31 35 2e 35 39 31 30 33 37 35 33 38 22 2c 22 63 6d 70 49 64 22 3a 22 32 38 22 2c 22 63 6d 70 56 65 72 73 69 6f 6e 22 3a 22 31 22 2c 22 63 6f 6e 73 65 6e 74 Data Ascii: te","Conditions":[],"GCEnable":true,"IsGPPEnabled":false,"EnableJWTAuthForKnownUsers":false}],"IabData":{"cookieVersion":"1","createdTime":"2024-05-07T23:31:15.591031218","updatedTime":"2024-05-07T23:31:15.591037538","cmpId":"28","cmpVersion":"1","consent
2024-09-30 17:24:45 UTC	595	IN	Data Raw: 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 43 4d 44 4d 41 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6d 6f 76 65 53 65 74 74 69 6e 67 73 49 63 6f 6e 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6e 65 72 61 6c 56 65 6e 64 6f 72 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 50 22 3a 74 72 75 65 7d 2c 22 49 73 53 75 70 70 72 65 73 73 42 61 6e 6e 65 72 22 3a 66 61 6c 73 65 2c 22 49 73 53 75 70 70 72 65 73 73 50 43 22 3a 66 61 6c 73 65 2c 22 50 75 62 6c 69 73 68 65 72 43 43 22 3a 22 55 53 22 2c 22 44 6f 6d 61 69 6e Data Ascii: kieV2GeolocationJsonApi":true,"CookieV2GCMDMA":true,"CookieV2TCF21":true,"CookieV2RemoveSettingsIcon":true,"CookieV2BannerLogo":true,"CookieV2GeneralVendors":true,"CookieV2GPP":true},"IsSuppressBanner":false,"IsSuppressPC":false,"PublisherCC":"US","Domain
2024-09-30 17:24:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:48 UTC	601	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://www.qualtrics.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:48 UTC	370	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:48 GMT Content-Type: application/json Content-Length: 69 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Headers: Content-Type Access-Control-Allow-Methods: GET, OPTIONS Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cb5e89ada418cbd-EWR
2024-09-30 17:24:48 UTC	69	IN	Data Raw: 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d Data Ascii: {"country":"US","state":"NY","stateName":"New York","continent":"NA"}

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:48 UTC	547	OUT	GET /js/forms2/js/forms2.min.js HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:48 UTC	724	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:48 GMT Content-Type: application/x-javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 19 Jul 2024 20:11:11 GMT ETag: W/"4e1d4e-31b30-61d9f4beb95c0" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2563 Expires: Mon, 30 Sep 2024 21:24:48 GMT Cache-Control: public, max-age=14400 Set-Cookie: __cf_bm=7X4w1NrL5PukULMqLmpATls1pBZhdBSkR6t5sl4j7nM-1727717088-1.0.1.1-bxocGQIAd5.3TOaQXd7RhkFjkRXoXUqCte1lXQOG4rY_V6iR9FPB16bab9w66raM6MPy2.tV11Bwe3RJvS4FnQ; path=/; expires=Mon, 30-Sep-24 17:54:48 GMT; domain=.success.qualtrics.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb5e89b3eb3c40c-EWR
2024-09-30 17:24:48 UTC	645	IN	Data Raw: 37 63 63 63 0d 0a 2f 2a 21 20 66 6f 72 6d 73 32 20 32 30 32 34 2d 30 35 2d 30 32 20 20 53 65 65 20 66 6f 72 6d 73 32 2e 6a 73 20 66 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 20 61 28 62 2c 63 2c 64 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 67 2c 68 29 7b 69 66 28 21 63 5b 67 5d 29 7b 69 66 28 21 62 5b 67 5d 29 7b 76 61 72 20 69 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 26 26 72 65 71 75 69 72 65 3b 69 66 28 21 68 26 26 69 29 72 65 74 75 72 6e 20 69 28 67 2c 21 30 29 3b 69 66 28 66 29 72 65 74 75 72 6e 20 66 28 67 2c 21 30 29 3b 76 61 72 20 6a 3d 6e 65 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 6d 6f 64 75 6c 65 20 27 22 2b 67 2b 22 27 22 29 3b 74 68 72 6f 77 Data Ascii: 7ccc/! forms2 2024-05-02 See forms2.js for license info /!function a(b,c,d){function e(g,h){if(!c[g]){if(!b[g]){var i="function"==typeof require&&require;if(!h&&i)return i(g,!0);if(f)return f(g,!0);var j=new Error("Cannot find module '"+g+"'");throw
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 72 43 6f 64 65 41 74 28 30 29 3b 72 65 74 75 72 6e 20 62 3d 3d 3d 67 7c 7c 62 3d 3d 3d 6c 3f 36 32 3a 62 3d 3d 3d 68 7c 7c 62 3d 3d 3d 6d 3f 36 33 3a 69 3e 62 3f 2d 31 3a 69 2b 31 30 3e 62 3f 62 2d 69 2b 32 36 2b 32 36 3a 6b 2b 32 36 3e 62 3f 62 2d 6b 3a 6a 2b 32 36 3e 62 3f 62 2d 6a 2b 32 36 3a 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 61 29 7b 6a 5b 6c 2b 2b 5d 3d 61 7d 76 61 72 20 64 2c 65 2c 67 2c 68 2c 69 2c 6a 3b 69 66 28 61 2e 6c 65 6e 67 74 68 25 34 3e 30 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 73 74 72 69 6e 67 2e 20 4c 65 6e 67 74 68 20 6d 75 73 74 20 62 65 20 61 20 6d 75 6c 74 69 70 6c 65 20 6f 66 20 34 22 29 3b 76 61 72 20 6b 3d 61 2e 6c 65 6e 67 74 68 Data Ascii: rCodeAt(0);return b===g\|\|b===l?62:b===h\|\|b===m?63:i>b?-1:i+10>b?b-i+26+26:k+26>b?b-k:j+26>b?b-j+26:void 0}function c(a){function c(a){j[l++]=a}var d,e,g,h,i,j;if(a.length%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var k=a.length
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 7d 74 72 79 7b 76 61 72 20 62 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 29 3b 72 65 74 75 72 6e 20 62 2e 66 6f 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 34 32 7d 2c 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 2c 34 32 3d 3d 3d 62 2e 66 6f 6f 28 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 61 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 2e 73 75 62 61 72 72 61 79 26 26 30 3d 3d 3d 62 2e 73 75 62 61 72 72 61 79 28 31 2c 31 29 2e 62 79 74 65 4c 65 6e 67 74 68 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 66 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 Data Ascii: function d(){function a(){}try{var b=new Uint8Array(1);return b.foo=function(){return 42},b.constructor=a,42===b.foo()&&b.constructor===a&&"function"==typeof b.subarray&&0===b.subarray(1,1).byteLength}catch(c){return!1}}function e(){return f.TYPED_ARRAY_S
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 74 28 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 62 29 29 29 3a 61 3d 6c 28 61 2c 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 62 29 29 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 30 7c 71 28 62 2e 6c 65 6e 67 74 68 29 3b 61 3d 70 28 61 2c 63 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 63 3e 64 3b 64 2b 3d 31 29 61 5b 64 5d 3d 32 35 35 26 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 22 42 75 66 66 65 72 22 3d 3d 3d 62 2e 74 79 70 65 26 26 59 28 62 2e 64 61 74 61 29 26 26 28 63 3d 62 2e 64 61 74 61 2c 64 3d 30 7c 71 28 63 2e 6c 65 6e 67 74 68 29 29 2c 61 3d 70 28 61 2c 64 29 3b 66 6f 72 28 76 61 72 20 65 3d 30 3b 64 3e 65 3b 65 2b 3d 31 29 61 5b 65 5d Data Ascii: t(new Uint8Array(b))):a=l(a,new Uint8Array(b)),a}function n(a,b){var c=0\|q(b.length);a=p(a,c);for(var d=0;c>d;d+=1)a[d]=255&b[d];return a}function o(a,b){var c,d=0;"Buffer"===b.type&&Y(b.data)&&(c=b.data,d=0\|q(c.length)),a=p(a,d);for(var e=0;d>e;e+=1)a[e]
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 63 61 73 65 22 62 61 73 65 36 34 22 3a 72 65 74 75 72 6e 20 41 28 74 68 69 73 2c 62 2c 63 29 3b 63 61 73 65 22 75 63 73 32 22 3a 63 61 73 65 22 75 63 73 2d 32 22 3a 63 61 73 65 22 75 74 66 31 36 6c 65 22 3a 63 61 73 65 22 75 74 66 2d 31 36 6c 65 22 3a 72 65 74 75 72 6e 20 47 28 74 68 69 73 2c 62 2c 63 29 3b 64 65 66 61 75 6c 74 3a 69 66 28 64 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 55 6e 6b 6e 6f 77 6e 20 65 6e 63 6f 64 69 6e 67 3a 20 22 2b 61 29 3b 61 3d 28 61 2b 22 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 64 3d 21 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 4e 75 6d 62 65 72 28 63 29 7c 7c 30 3b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 2d 63 3b 64 3f 28 64 3d 4e 75 6d 62 65 72 28 64 29 Data Ascii: case"base64":return A(this,b,c);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return G(this,b,c);default:if(d)throw new TypeError("Unknown encoding: "+a);a=(a+"").toLowerCase(),d=!0}}function u(a,b,c,d){c=Number(c)\|\|0;var e=a.length-c;d?(d=Number(d)
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 29 2c 67 3d 35 36 33 32 30 7c 31 30 32 33 26 67 29 2c 64 2e 70 75 73 68 28 67 29 2c 65 2b 3d 68 7d 72 65 74 75 72 6e 20 43 28 64 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 24 3e 3d 62 29 72 65 74 75 72 6e 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 61 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 30 3b 62 3e 64 3b 29 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 2e 61 70 70 6c 79 28 53 74 72 69 6e 67 2c 61 2e 73 6c 69 63 65 28 64 2c 64 2b 3d 24 29 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 22 3b 63 3d 4d 61 74 68 2e 6d 69 6e 28 61 2e 6c 65 6e 67 74 68 Data Ascii: ),g=56320\|1023&g),d.push(g),e+=h}return C(d)}function C(a){var b=a.length;if($>=b)return String.fromCharCode.apply(String,a);for(var c="",d=0;b>d;)c+=String.fromCharCode.apply(String,a.slice(d,d+=$));return c}function D(a,b,c){var d="";c=Math.min(a.length
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 3b 69 66 28 30 3e 63 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 64 65 78 20 6f 75 74 20 6f 66 20 72 61 6e 67 65 22 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 4c 28 61 2c 62 2c 63 2c 34 2c 33 2e 34 30 32 38 32 33 34 36 36 33 38 35 32 38 38 36 65 33 38 2c 2d 33 2e 34 30 32 38 32 33 34 36 36 33 38 35 32 38 38 36 65 33 38 29 2c 58 2e 77 72 69 74 65 28 61 2c 62 2c 63 2c 64 2c 32 33 2c 34 29 2c 63 2b 34 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 7c 7c 4c 28 61 2c 62 2c 63 2c 38 2c 31 2e 37 39 37 36 39 33 31 Data Ascii: ow new RangeError("index out of range");if(0>c)throw new RangeError("index out of range")}function M(a,b,c,d,e){return e\|\|L(a,b,c,4,3.4028234663852886e38,-3.4028234663852886e38),X.write(a,b,c,d,23,4),c+4}function N(a,b,c,d,e){return e\|\|L(a,b,c,8,1.7976931
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 61 2e 63 68 61 72 43 6f 64 65 41 74 28 67 29 2c 64 3d 63 3e 3e 38 2c 65 3d 63 25 32 35 36 2c 66 2e 70 75 73 68 28 65 29 2c 66 2e 70 75 73 68 28 64 29 3b 72 65 74 75 72 6e 20 66 7d 66 75 6e 63 74 69 6f 6e 20 55 28 61 29 7b 72 65 74 75 72 6e 20 57 2e 74 6f 42 79 74 65 41 72 72 61 79 28 4f 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 56 28 61 2c 62 2c 63 2c 64 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 64 3e 65 26 26 21 28 65 2b 63 3e 3d 62 2e 6c 65 6e 67 74 68 7c 7c 65 3e 3d 61 2e 6c 65 6e 67 74 68 29 3b 65 2b 2b 29 62 5b 65 2b 63 5d 3d 61 5b 65 5d 3b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 57 3d 61 28 22 62 61 73 65 36 34 2d 6a 73 22 29 2c 58 3d 61 28 22 69 65 65 65 37 35 34 22 29 2c 59 3d 61 28 22 69 73 61 72 72 61 79 22 29 3b 63 2e 42 75 66 66 65 72 3d 66 2c Data Ascii: a.charCodeAt(g),d=c>>8,e=c%256,f.push(e),f.push(d);return f}function U(a){return W.toByteArray(O(a))}function V(a,b,c,d){for(var e=0;d>e&&!(e+c>=b.length\|\|e>=a.length);e++)b[e+c]=a[e];return e}var W=a("base64-js"),X=a("ieee754"),Y=a("isarray");c.Buffer=f,
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 30 7c 74 68 69 73 2e 6c 65 6e 67 74 68 3b 72 65 74 75 72 6e 20 30 3d 3d 3d 61 3f 22 22 3a 30 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 42 28 74 68 69 73 2c 30 2c 61 29 3a 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 65 71 75 61 6c 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 66 2e 69 73 42 75 66 66 65 72 28 61 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 72 67 75 6d 65 6e 74 20 6d 75 73 74 20 62 65 20 61 20 42 75 66 66 65 72 22 29 3b 72 65 74 75 72 6e 20 74 68 69 73 3d 3d 3d 61 3f 21 30 3a 30 3d 3d 3d 66 2e 63 6f 6d 70 61 72 65 28 74 68 69 73 2c 61 29 7d 2c 66 2e 70 72 6f 74 Data Ascii: ing=function(){var a=0\|this.length;return 0===a?"":0===arguments.length?B(this,0,a):t.apply(this,arguments)},f.prototype.equals=function(a){if(!f.isBuffer(a))throw new TypeError("Argument must be a Buffer");return this===a?!0:0===f.compare(this,a)},f.prot
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 2e 73 65 74 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2e 20 41 63 63 65 73 73 20 75 73 69 6e 67 20 61 72 72 61 79 20 69 6e 64 65 78 65 73 20 69 6e 73 74 65 61 64 2e 22 29 2c 74 68 69 73 2e 77 72 69 74 65 55 49 6e 74 38 28 61 2c 62 29 7d 2c 66 2e 70 72 6f 74 6f 74 79 70 65 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 62 29 64 3d 22 75 74 66 38 22 2c 63 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 62 3d 30 3b 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 64 3d 62 2c 63 3d 74 68 69 73 2e 6c 65 6e Data Ascii: type.set=function(a,b){return console.log(".set() is deprecated. Access using array indexes instead."),this.writeUInt8(a,b)},f.prototype.write=function(a,b,c,d){if(void 0===b)d="utf8",c=this.length,b=0;else if(void 0===c&&"string"==typeof b)d=b,c=this.len

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:48 UTC	559	OUT	GET /js/forms2/css/forms2.css HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:48 UTC	706	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:48 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 19 Jul 2024 20:11:11 GMT ETag: W/"1020ea-3437-61d9f4beb95c0" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 579 Expires: Mon, 30 Sep 2024 21:24:48 GMT Cache-Control: public, max-age=14400 Set-Cookie: __cf_bm=owI4XWBRoBjB2Zh4vuXhU6MP4rYxYPZK4nfbFX_kTPw-1727717088-1.0.1.1-4Faq7zF7B3SsXGm8ijj5bkrebvJtqKWclnnkkhSr_e8SIMLpzeUH88_6K0C4q7TuRbZ4Fj.lQercqfcxGN8a1A; path=/; expires=Mon, 30-Sep-24 17:54:48 GMT; domain=.success.qualtrics.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8cb5e89b3b3341df-EWR
2024-09-30 17:24:48 UTC	663	IN	Data Raw: 33 34 33 37 0d 0a 2f 2a 20 54 68 69 73 20 69 73 20 75 73 65 64 20 74 6f 20 74 65 73 74 20 69 66 20 74 68 65 20 73 74 79 6c 65 73 68 65 65 74 20 68 61 73 20 62 65 65 6e 20 6c 6f 61 64 65 64 20 79 65 74 2a 2f 0a 23 6d 6b 74 6f 53 74 79 6c 65 4c 6f 61 64 65 64 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 31 32 33 34 35 36 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 43 6c 65 61 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 64 69 76 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 73 70 61 6e Data Ascii: 3437/* This is used to test if the stylesheet has been loaded yet*/#mktoStyleLoaded { background-color: #123456; display: none;}.mktoForm { text-align: left;}.mktoForm .mktoClear { clear: both; float: none;}.mktoForm div,.mktoForm span
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4c 61 62 65 6c 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 2e 33 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 46 69 65 6c 64 20 7b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 65 6d 3b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 50 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4c 6f 67 69 63 61 6c 46 69 65 6c 64 20 7b 0a 20 20 66 6c 6f 61 74 Data Ascii: none;}.mktoForm .mktoLabel { float: left; line-height: 1.2em; padding-top: 0.3em;}.mktoForm .mktoField { line-height: 1.2em; font-size: 1em; float: left;}.mktoForm .mktoPlaceholder { float: left;}.mktoForm .mktoLogicalField { float
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4c 61 62 65 6c 54 6f 4c 65 66 74 20 69 6e 70 75 74 5b 74 79 70 65 3d 72 61 64 69 6f 5d 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 72 69 67 68 74 3a 20 30 2e 33 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 2e 6d 6b 74 6f 4c 61 79 6f 75 74 41 62 6f 76 65 20 2e 6d 6b 74 6f 52 65 71 75 69 72 65 64 46 69 65 6c 64 20 2e 6d 6b 74 6f 41 73 74 65 72 69 78 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 35 70 78 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 52 65 71 75 69 72 65 64 46 69 65 6c 64 20 2e 6d 6b Data Ascii: t[type=checkbox],.mktoForm .mktoLabelToLeft input[type=radio] { position: absolute; right: 0.3em;}.mktoForm.mktoLayoutAbove .mktoRequiredField .mktoAsterix { float: left; padding-left: 0; padding-right: 5px;}.mktoForm .mktoRequiredField .mk
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 65 6d 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 20 20 72 65 73 69 7a 65 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2f 2a 20 46 69 72 65 66 6f 78 20 63 6f 6d 70 75 74 65 73 20 72 6f 77 20 68 65 69 67 68 74 20 77 72 6f 6e 67 20 66 6f 72 20 74 68 65 20 6c 61 73 74 20 31 33 20 79 65 61 72 73 2e 2e 2e 20 68 74 74 70 73 3a 2f 2f 62 75 67 7a 69 6c 6c 61 2e 6d 6f 7a 69 6c 6c 61 2e 6f 72 67 2f 73 68 6f 77 5f 62 75 67 2e 63 67 69 3f 69 64 3d 33 33 36 35 34 20 2a 2f 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 5b 72 6f 77 73 3d 22 31 22 5d 20 7b 0a 20 20 68 65 69 67 68 74 3a 20 32 65 6d 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f Data Ascii: margin: 0; line-height: 1.2em; overflow: auto; resize: none; float: none;}/* Firefox computes row height wrong for the last 13 years... https://bugzilla.mozilla.org/show_bug.cgi?id=33654 */.mktoForm textarea[rows="1"] { height: 2em;}.mktoFo
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 6f 72 6d 20 2e 6d 6b 74 6f 45 72 72 6f 72 20 2e 6d 6b 74 6f 45 72 72 6f 72 41 72 72 6f 77 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 35 31 62 30 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 39 66 31 33 30 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 36 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 35 64 65 67 29 3b 0a 20 20 74 72 61 6e 73 66 6f Data Ascii: orm .mktoError .mktoErrorArrow { background-color: #e51b00; border: 1px solid #9f1300; border-right: none; border-bottom: none; display: inline-block; height: 16px; -webkit-transform: rotate(45deg); -moz-transform: rotate(45deg); transfo
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 30 2e 36 65 6d 3b 0a 20 20 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 23 39 30 31 31 30 30 20 30 20 2d 31 70 78 20 30 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 45 72 72 6f 72 20 2e 6d 6b 74 6f 45 72 72 6f 72 4d 73 67 20 2e 6d 6b 74 6f 45 72 72 6f 72 44 65 74 61 69 6c 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 62 75 74 74 6f 6e 2e 6d 6b 74 6f 42 75 74 74 6f 6e 20 7b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 62 75 74 74 6f 6e 2e 6d 6b 74 6f 42 75 74 74 6f 6e 3a 64 69 73 61 62 6c 65 64 20 7b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 Data Ascii: 0.6em; text-shadow: #901100 0 -1px 0;}.mktoForm .mktoError .mktoErrorMsg .mktoErrorDetail { display: block;}.mktoForm button.mktoButton { cursor: pointer; margin: 0;}.mktoForm button.mktoButton:disabled { opacity: 0.5; -ms-filter: "progi
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 37 64 30 34 3b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 6e 6f 6e 65 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 62 6f 74 74 6f 6d 3a 20 35 70 78 3b 0a 7d 0a 2f 2a 2a 20 54 68 65 73 65 20 74 77 6f 20 73 74 79 6c 65 73 20 61 72 65 20 66 6f 72 20 62 72 6f 77 73 65 72 73 20 74 68 61 74 20 64 6f 6e 27 74 20 73 75 70 70 6f 72 74 20 63 73 73 20 74 72 61 6e 73 66 6f 72 6d 73 20 2a 2f 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 52 61 6e 67 65 46 69 65 6c 64 20 2e 6d 6b 74 6f 52 61 6e 67 65 56 61 6c 75 65 41 72 72 6f 77 57 72 61 70 2e 6d 6b 74 6f 41 72 72 6f 77 49 Data Ascii: und-color: #007d04; border-left: none; border-top: none; margin-top: 5px; position: absolute; bottom: 5px;}/** These two styles are for browsers that don't support css transforms */.mktoForm .mktoRangeField .mktoRangeValueArrowWrap.mktoArrowI
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 3b 0a 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 7a 6f 6f 6d 3a 20 31 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 29 3b 0a 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 38 30 30 30 30 30 30 30 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 38 30 30 30 30 30 30 30 29 3b 0a 20 20 2d 6d 73 2d 66 69 6c 74 65 72 3a 20 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 23 38 30 30 30 30 30 30 30 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 23 38 Data Ascii: ; right: 0; zoom: 1; background: rgba(0,0,0,0.5); filter: progid:DXImageTransform.Microsoft.gradient(startColorstr=#80000000, endColorstr=#80000000); -ms-filter: "progid:DXImageTransform.Microsoft.gradient(startColorstr=#80000000, endColorstr=#8
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 0a 20 20 2e 6d 6b 74 6f 46 6f 72 6d 20 74 65 78 74 61 72 65 61 2e 6d 6b 74 6f 46 69 65 6c 64 2c 0a 20 Data Ascii: Form fieldset { padding: 0 10px; } .mktoForm input[type=url], .mktoForm input[type=text], .mktoForm input[type=date], .mktoForm input[type=tel], .mktoForm input[type=email], .mktoForm input[type=number], .mktoForm textarea.mktoField,
2024-09-30 17:24:48 UTC	1369	IN	Data Raw: 2d 62 6f 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 47 75 74 74 65 72 2c 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 4f 66 66 73 65 74 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f 46 6f 72 6d 20 2e 6d 6b 74 6f 46 6f 72 6d 43 6f 6c 20 2e 6d 6b 74 6f 4c 61 62 65 6c 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 7d 0a 20 20 2e 6d 6b 74 6f 4d 6f 62 69 6c 65 53 68 6f 77 20 2e 6d 6b 74 6f Data Ascii: -box; padding: 10px; } .mktoMobileShow .mktoForm .mktoGutter, .mktoMobileShow .mktoForm .mktoOffset { display: none; } .mktoMobileShow .mktoForm .mktoFormCol .mktoLabel { text-align: left; width: 100%; } .mktoMobileShow .mkto

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:49 UTC	380	OUT	GET /cookieconsentpub/v1/geo/location HTTP/1.1 Host: geolocation.onetrust.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:49 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:49 GMT Content-Type: text/javascript Content-Length: 80 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8cb5e89ede9d43d6-EWR
2024-09-30 17:24:49 UTC	80	IN	Data Raw: 6a 73 6f 6e 46 65 65 64 28 7b 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 73 74 61 74 65 22 3a 22 4e 59 22 2c 22 73 74 61 74 65 4e 61 6d 65 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 41 22 7d 29 3b Data Ascii: jsonFeed({"country":"US","state":"NY","stateName":"New York","continent":"NA"});

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:49 UTC	738	OUT	GET /js/forms2/css/forms2-theme-plain.css HTTP/1.1 Host: success.qualtrics.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=owI4XWBRoBjB2Zh4vuXhU6MP4rYxYPZK4nfbFX_kTPw-1727717088-1.0.1.1-4Faq7zF7B3SsXGm8ijj5bkrebvJtqKWclnnkkhSr_e8SIMLpzeUH88_6K0C4q7TuRbZ4Fj.lQercqfcxGN8a1A
2024-09-30 17:24:49 UTC	426	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 19 Jul 2024 20:11:11 GMT ETag: W/"4e1d08-33c-61d9f4beb95c0" Vary: Accept-Encoding X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 2500 Expires: Mon, 30 Sep 2024 21:24:49 GMT Cache-Control: public, max-age=14400 Server: cloudflare CF-RAY: 8cb5e8a2897b5e5f-EWR
2024-09-30 17:24:49 UTC	835	IN	Data Raw: 33 33 63 0d 0a 23 6d 6b 74 6f 53 74 79 6c 65 4c 6f 61 64 65 64 20 7b 0a 20 20 2f 2a 20 63 73 73 20 6c 6f 61 64 20 64 65 74 65 63 74 69 6f 6e 2c 20 64 6f 20 6e 6f 74 20 72 65 6d 6f 76 65 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 23 31 32 33 34 35 36 3b 0a 7d 0a 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 7b 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 66 69 65 6c 64 73 65 74 20 6c 65 67 65 6e 64 7b 7d 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 78 74 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 75 72 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 74 65 6c 5d 2c 0a 2e 6d 6b 74 6f 46 6f 72 Data Ascii: 33c#mktoStyleLoaded { /* css load detection, do not remove */ color:#123456;}.mktoForm fieldset {}.mktoForm fieldset legend{}.mktoForm input[type=text],.mktoForm input[type=url],.mktoForm input[type=email],.mktoForm input[type=tel],.mktoFor
2024-09-30 17:24:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:54 UTC	559	OUT	GET /scripttemplates/202404.1.0/otBannerSdk.js HTTP/1.1 Host: cdn.cookielaw.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:54 UTC	859	IN	HTTP/1.1 200 OK Date: Mon, 30 Sep 2024 17:24:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-MD5: OwLk2N0IZ0eq8ykUTltEhw== Last-Modified: Tue, 16 Jul 2024 21:54:14 GMT x-ms-request-id: 4785b082-901e-0046-71cb-d74d1c000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Access-Control-Allow-Origin: * Cache-Control: max-age=86400 CF-Cache-Status: HIT Age: 82498 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 8cb5e8c08f3541ad-EWR
2024-09-30 17:24:54 UTC	510	IN	Data Raw: 37 63 34 35 0d 0a 2f 2a 2a 20 0a 20 2a 20 6f 6e 65 74 72 75 73 74 2d 62 61 6e 6e 65 72 2d 73 64 6b 0a 20 2a 20 76 32 30 32 34 30 34 2e 31 2e 30 0a 20 2a 20 62 79 20 4f 6e 65 54 72 75 73 74 20 4c 4c 43 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 78 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 28 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6f 20 69 6e Data Ascii: 7c45/** * onetrust-banner-sdk * v202404.1.0 * by OneTrust LLC * Copyright 2024 */!function(){"use strict";var x=function(e,t){return(x=Object.setPrototypeOf\|\|({__proto__:[]}instanceof Array?function(e,t){e.__proto__=t}:function(e,t){for(var o in
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6f 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6f 29 7d 76 61 72 20 48 2c 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 52 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 3c 6e 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 72 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 72 29 26 26 28 65 5b 72 5d 3d 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 65 7d 29 2e 61 70 70 6c 79 28 74 68 Data Ascii: ull===t?Object.create(t):(o.prototype=t.prototype,new o)}var H,R=function(){return(R=Object.assign\|\|function(e){for(var t,o=1,n=arguments.length;o<n;o++)for(var r in t=arguments[o])Object.prototype.hasOwnProperty.call(t,r)&&(e[r]=t[r]);return e}).apply(th
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 26 6c 2e 6c 61 62 65 6c 3c 61 5b 31 5d 29 6c 2e 6c 61 62 65 6c 3d 61 5b 31 5d 2c 61 3d 74 3b 65 6c 73 65 7b 69 66 28 21 28 61 26 26 6c 2e 6c 61 62 65 6c 3c 61 5b 32 5d 29 29 7b 61 5b 32 5d 26 26 6c 2e 6f 70 73 2e 70 6f 70 28 29 2c 6c 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 7d 6c 2e 6c 61 62 65 6c 3d 61 5b 32 5d 2c 6c 2e 6f 70 73 2e 70 75 73 68 28 74 29 7d 7d 74 3d 72 2e 63 61 6c 6c 28 6e 2c 6c 29 7d 63 61 74 63 68 28 65 29 7b 74 3d 5b 36 2c 65 5d 2c 73 3d 30 7d 66 69 6e 61 6c 6c 79 7b 69 3d 61 3d 30 7d 69 66 28 35 26 74 5b 30 5d 29 74 68 72 6f 77 20 74 5b 31 5d 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 74 5b 30 5d 3f 74 5b 31 5d 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 4d 28 29 7b 66 6f 72 28 Data Ascii: &l.label<a[1])l.label=a[1],a=t;else{if(!(a&&l.label<a[2])){a[2]&&l.ops.pop(),l.trys.pop();continue}l.label=a[2],l.ops.push(t)}}t=r.call(n,l)}catch(e){t=[6,e],s=0}finally{i=a=0}if(5&t[0])throw t[1];return{value:t[0]?t[1]:void 0,done:!0}}}}function M(){for(
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 29 29 7b 76 61 72 20 6f 3d 65 2e 74 68 65 6e 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 7a 29 72 65 74 75 72 6e 20 74 2e 5f 73 74 61 74 65 3d 33 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 76 6f 69 64 20 59 28 74 29 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 51 28 28 6e 3d 6f 2c 72 3d 65 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 61 70 70 6c 79 28 72 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2c 74 29 7d 74 2e 5f 73 74 61 74 65 3d 31 2c 74 2e 5f 76 61 6c 75 65 3d 65 2c 59 28 74 29 7d 63 61 74 63 68 28 65 29 7b 4a 28 74 2c 65 29 7d 76 61 72 20 6e 2c 72 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 65 2c 74 29 7b 65 2e 5f 73 74 61 74 65 3d 32 2c 65 2e 5f Data Ascii: nction"==typeof e)){var o=e.then;if(e instanceof z)return t._state=3,t._value=e,void Y(t);if("function"==typeof o)return void Q((n=o,r=e,function(){n.apply(r,arguments)}),t)}t._state=1,t._value=e,Y(t)}catch(e){J(t,e)}var n,r}function J(e,t){e._state=2,e._
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 66 20 65 29 29 7b 76 61 72 20 6e 3d 65 2e 74 68 65 6e 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 29 72 65 74 75 72 6e 20 76 6f 69 64 20 6e 2e 63 61 6c 6c 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 28 6f 2c 65 29 7d 2c 69 29 7d 73 5b 6f 5d 3d 65 2c 30 3d 3d 2d 2d 61 26 26 72 28 73 29 7d 63 61 74 63 68 28 65 29 7b 69 28 65 29 7d 7d 28 65 2c 73 5b 65 5d 29 7d 29 7d 2c 7a 2e 72 65 73 6f 6c 76 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 7a 3f 74 3a 6e 65 77 20 7a 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 28 74 29 7d 29 7d 2c 7a 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 Data Ascii: f e)){var n=e.then;if("function"==typeof n)return void n.call(e,function(e){t(o,e)},i)}s[o]=e,0==--a&&r(s)}catch(e){i(e)}}(e,s[e])})},z.resolve=function(t){return t&&"object"==typeof t&&t.constructor===z?t:new z(function(e){e(t)})},z.reject=function(o){re
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 7c 7c 65 21 3d 65 26 26 73 21 3d 73 29 72 65 74 75 72 6e 21 30 3b 69 2b 2b 7d 7d 72 65 74 75 72 6e 21 31 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 45 6e 64 73 57 69 74 68 50 6f 6c 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2c 22 65 6e 64 73 57 69 74 68 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 3e 74 68 69 73 2e 6c 65 6e 67 74 68 29 26 26 28 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: \|\|e!=e&&s!=s)return!0;i++}}return!1},writable:!0,configurable:!0})},Z.prototype.initEndsWithPoly=function(){String.prototype.endsWith\|\|Object.defineProperty(String.prototype,"endsWith",{value:function(e,t){return(void 0===t\|\|t>this.length)&&(t=this.length
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 7d 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 2c 5a 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 41 72 72 61 79 46 69 6c 6c 50 6f 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 6c 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2c 22 66 69 6c 6c 22 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 74 68 69 73 20 69 73 20 6e 75 6c 6c 20 6f 72 20 6e 6f 74 20 64 65 66 69 6e 65 64 22 29 3b 66 6f 72 28 76 61 72 20 74 3d 4f 62 6a 65 63 74 28 74 68 69 73 29 2c 6f 3d 74 Data Ascii: },writable:!0,configurable:!0})},Z.prototype.initArrayFillPolyfill=function(){Array.prototype.fill\|\|Object.defineProperty(Array.prototype,"fill",{value:function(e){if(null==this)throw new TypeError("this is null or not defined");for(var t=Object(this),o=t
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 2e 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 3d 35 5d 3d 22 42 61 6e 6e 65 72 53 61 76 65 53 65 74 74 69 6e 67 73 22 2c 65 5b 65 2e 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 3d 36 5d 3d 22 43 6f 6e 74 69 6e 75 65 57 69 74 68 6f 75 74 41 63 63 65 70 74 69 6e 67 42 75 74 74 6f 6e 22 2c 28 65 3d 65 65 3d 65 65 7c 7c 7b 7d 29 5b 65 2e 42 61 6e 6e 65 72 3d 31 5d 3d 22 42 61 6e 6e 65 72 22 2c 65 5b 65 2e 50 43 3d 32 5d 3d 22 50 43 22 2c 65 5b 65 2e 41 50 49 3d 33 5d 3d 22 41 50 49 22 2c 28 65 3d 74 65 3d 74 65 7c 7c 7b 7d 29 2e 41 63 63 65 70 74 41 6c 6c 3d 22 41 63 63 65 70 74 41 6c 6c 22 2c 65 2e 52 65 6a 65 63 74 41 6c 6c 3d 22 52 65 6a 65 63 74 41 6c 6c 22 2c 65 2e 55 70 64 61 74 65 43 6f 6e 73 65 Data Ascii: .BannerSaveSettings=5]="BannerSaveSettings",e[e.ContinueWithoutAcceptingButton=6]="ContinueWithoutAcceptingButton",(e=ee=ee\|\|{})[e.Banner=1]="Banner",e[e.PC=2]="PC",e[e.API=3]="API",(e=te=te\|\|{}).AcceptAll="AcceptAll",e.RejectAll="RejectAll",e.UpdateConse
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 6c 6c 6f 77 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 5d 3d 35 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 52 65 6a 65 63 74 20 41 6c 6c 22 2c 65 5b 65 5b 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 5d 3d 36 5d 3d 22 50 72 65 66 65 72 65 6e 63 65 20 43 65 6e 74 65 72 20 2d 20 43 6f 6e 66 69 72 6d 22 2c 65 5b 65 5b 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 5d 3d 37 5d 3d 22 47 50 43 20 76 61 6c 75 65 20 63 68 61 6e 67 65 64 22 2c 28 65 3d 68 65 3d 68 65 7c 7c 7b 7d 29 2e 41 63 74 69 76 65 3d 22 31 22 2c 65 2e 49 6e 41 63 74 69 76 65 3d 22 30 22 2c 28 65 3d 67 65 3d 67 65 7c 7c 7b 7d 29 2e 48 Data Ascii: llow All",e[e["Preference Center - Reject All"]=5]="Preference Center - Reject All",e[e["Preference Center - Confirm"]=6]="Preference Center - Confirm",e[e["GPC value changed"]=7]="GPC value changed",(e=he=he\|\|{}).Active="1",e.InActive="0",(e=ge=ge\|\|{}).H
2024-09-30 17:24:54 UTC	1369	IN	Data Raw: 5f 66 6f 72 5f 75 70 64 61 74 65 3d 22 77 61 69 74 5f 66 6f 72 5f 75 70 64 61 74 65 22 2c 28 65 3d 41 65 3d 41 65 7c 7c 7b 7d 29 2e 67 72 61 6e 74 65 64 3d 22 67 72 61 6e 74 65 64 22 2c 65 2e 64 65 6e 69 65 64 3d 22 64 65 6e 69 65 64 22 2c 30 2c 28 65 3d 49 65 3d 49 65 7c 7c 7b 7d 29 2e 4f 42 4a 45 43 54 5f 54 4f 5f 4c 49 3d 22 4f 62 6a 65 63 74 54 6f 4c 49 22 2c 65 2e 4c 49 5f 41 43 54 49 56 45 5f 49 46 5f 4c 45 47 41 4c 5f 42 41 53 49 53 3d 22 4c 49 41 63 74 69 76 65 49 66 4c 65 67 61 6c 42 61 73 69 73 22 2c 28 65 3d 4c 65 3d 4c 65 7c 7c 7b 7d 29 2e 63 6f 6f 6b 69 65 73 3d 22 63 6f 6f 6b 69 65 73 22 2c 65 2e 76 65 6e 64 6f 72 73 3d 22 76 65 6e 64 6f 72 73 22 2c 28 65 3d 5f 65 3d 5f 65 7c 7c 7b 7d 29 2e 47 44 50 52 3d 22 47 44 50 52 22 2c 65 2e 43 43 50 Data Ascii: _for_update="wait_for_update",(e=Ae=Ae\|\|{}).granted="granted",e.denied="denied",0,(e=Ie=Ie\|\|{}).OBJECT_TO_LI="ObjectToLI",e.LI_ACTIVE_IF_LEGAL_BASIS="LIActiveIfLegalBasis",(e=Le=Le\|\|{}).cookies="cookies",e.vendors="vendors",(e=_e=_e\|\|{}).GDPR="GDPR",e.CCP

Timestamp	Bytes transferred	Direction	Data
2024-09-30 17:24:54 UTC	602	OUT	GET /play-px.svg HTTP/1.1 Host: qualtrics-www.s3.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.qualtrics.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 17:24:54 UTC	463	IN	HTTP/1.1 200 OK x-amz-id-2: 95ZcPsKVSZYiySIBnPkIktzk8fL4SEnVCqKkcyvwuJt13r/8bD18ciZCIUrJuxyWQ6fh/nVRpVo= x-amz-request-id: 9J1R4PP7P2W4073Y Date: Mon, 30 Sep 2024 17:24:55 GMT Last-Modified: Tue, 09 Nov 2021 22:36:31 GMT ETag: "ffaff0f0992539b7d62a7d2e0f4208d7" Cache-Control: max-age=2628000 x-amz-version-id: uqJnaw3EQraUUP5U_URK7vUXyiCT5mYE Accept-Ranges: bytes Content-Type: image/svg+xml Server: AmazonS3 Content-Length: 364 Connection: close
2024-09-30 17:24:54 UTC	364	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 37 34 20 37 34 22 3e 3c 74 69 74 6c 65 3e 41 73 73 65 74 20 31 3c 2f 74 69 74 6c 65 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 32 22 3e 3c 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 2d 32 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 3e 3c 70 61 74 68 20 64 3d 22 4d 33 37 2c 30 41 33 37 2c 33 37 2c 30 2c 31 2c 30 2c 37 34 2c 33 37 2c 33 37 2c 33 37 2c 30 2c 30 2c 30 2c 33 37 2c 30 5a 4d 35 31 2e 38 34 2c 34 30 2e 37 35 2c 33 31 2e 32 38 2c 36 31 63 2d 31 2e 35 37 2c 31 2e 35 34 2d 32 2e 38 35 2c 31 2d 32 2e 38 35 2d 31 2e 32 56 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 74 74"><title>Asset 1</title><g id="Layer_2" data-name="Layer 2"><g id="Layer_1-2" data-name="Layer 1"><path d="M37,0A37,37,0,1,0,74,37,37,37,0,0,0,37,0ZM51.84,40.75,31.28,61c-1.57,1.54-2.85,1-2.85-1.2V