This protocol plug-in classifies the http traffic to the host heraldm.com. It also classifies the ssl traffic to the Common Name emember.heraldcorp.com.