Edit tour

Windows Analysis Report
https://tbit.be/ZP5s8q

Overview

General Information

Sample URL:	https://tbit.be/ZP5s8q
Analysis ID:	1644458
Infos:

Detection

Score:	48
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected Powershell download and execute

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2368 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1516 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,14291092354844727501,2656126166327269876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2100 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://tbit.be/ZP5s8q" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://$230182881765$/ MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_201	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

HTTP traffic detected: POST /logger HTTP/1.1Host: us-bridge.tabit.cloudConnection: keep-aliveContent-Length: 786sec-ch-ua-platform: "Windows"Authorization: sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"White-Label: sec-ch-ua-mobile: ?0traceparent: 00-b4fe47c8636bff093cb39d4e38eb50b5-34524217fb52dce7-01User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, */*Content-Type: application/jsonOrigin: https://tabit.usSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tabit.us/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 14:42:46 GMTContent-Type: application/json; charset=utf-8Content-Length: 32Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"20-KMohQRtjm5CRpAhLxyOgquXFdfY"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenContent-Length: 62Content-Type: application/jsonDate: Thu, 20 Mar 2025 14:42:46 GMTX-Cloud-Request-Id: Yj4Sq7AGQi2VK7TFajlpWQX-Content-Type-Options: nosniffX-Found-Handling-Cluster: 3ef79a2917344be4ad94d018685555e2X-Found-Handling-Instance: instance-0000000017Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 14:42:47 GMTContent-Type: application/json; charset=utf-8Content-Length: 32Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"20-KMohQRtjm5CRpAhLxyOgquXFdfY"Vary: Accept-Encoding
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 14:42:50 GMTContent-Type: application/json; charset=utf-8Content-Length: 32Connection: closeX-Powered-By: ExpressAccess-Control-Allow-Origin: *ETag: W/"20-KMohQRtjm5CRpAhLxyOgquXFdfY"Vary: Accept-Encoding

Source: chromecache_174.1.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_166.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_174.1.dr, chromecache_141.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://3-dot-gweb-io2016-registration.appspot.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://402-bslatkin-staging.appspot.com
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://accounts.google.com/AccountChooser
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://admob.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://alpha.home.nest.com
Source: chromecache_154.1.dr, chromecache_192.1.dr, chromecache_166.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_121.1.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_154.1.dr, chromecache_192.1.dr, chromecache_166.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_121.1.dr	String found in binary or memory: https://applepay.cdn-apple.com/jsapi/v1/acknowledgements.txt
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://apps.admob.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://arctic-ocean-116022.appspot.com
Source: chromecache_119.1.dr	String found in binary or memory: https://bunpay.app
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://bus-payments-dev.googleplex.com
Source: chromecache_117.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://checkout-green-qa.youtube.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://checkout.youtube.com
Source: chromecache_166.1.dr	String found in binary or memory: https://clientlog.cloud.google
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://clientlog.cloud.google/log?format=json&hasfast=true
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#localhost-error
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://cloudnext.withgoogle.com
Source: chromecache_161.1.dr	String found in binary or memory: https://connect.facebook.net/
Source: chromecache_161.1.dr	String found in binary or memory: https://connect.facebook.net/log/fbevents_telemetry/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://console.cloud.google
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/proto/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://defjam-staging.appspot.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://dev-dot-gweb-nextregistration.appspot.com
Source: chromecache_121.1.dr	String found in binary or memory: https://developer.apple.com/apple-pay/acceptable-use-guidelines-for-websites/
Source: chromecache_174.1.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_174.1.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_174.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_199.1.dr, chromecache_197.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_174.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_174.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_174.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_174.1.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/versions#beta-channel
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_119.1.dr	String found in binary or memory: https://dmengelt.github.io
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://embark-preprod.corp.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://embark-staging.corp.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://embark-test.corp.google.com
Source: chromecache_210.1.dr, chromecache_158.1.dr, chromecache_162.1.dr, chromecache_209.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Rubik:400
Source: chromecache_210.1.dr, chromecache_158.1.dr, chromecache_162.1.dr, chromecache_209.1.dr	String found in binary or memory: https://fonts.googleapis.com/icon?family=Material
Source: chromecache_184.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVF9eO.woff2)format(
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/productsans/v9/pxiDypQkot1TnFhsFMOfGShVGdeOcEg.woff2)format(
Source: chromecache_215.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2)
Source: chromecache_215.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nDrXyi0A.woff2)
Source: chromecache_215.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nErXyi0A.woff2)
Source: chromecache_215.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nFrXyi0A.woff2)
Source: chromecache_215.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nMrXyi0A.woff2)
Source: chromecache_215.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nPrXyi0A.woff2)
Source: chromecache_128.1.dr, chromecache_187.1.dr	String found in binary or memory: https://fts.cardconnect.com/itoke/ajax-tokenizer.html
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://gbusrides.googleplex.com
Source: chromecache_203.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_121.1.dr	String found in binary or memory: https://github.com/angular/angular/blob/master/packages/compiler/src/shadow_css.ts
Source: chromecache_203.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_121.1.dr	String found in binary or memory: https://github.com/webcomponents/webcomponentsjs/blob/4efecd7e0e/src/ShadowCSS/ShadowCSS.js
Source: chromecache_174.1.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_174.1.dr	String found in binary or memory: https://goo.gle/js-open-now
Source: chromecache_174.1.dr	String found in binary or memory: https://goo.gle/js-open-now.
Source: chromecache_141.1.dr, chromecache_130.1.dr	String found in binary or memory: https://google.com/pay
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://googlecommassage-hrd.appspot.com
Source: chromecache_161.1.dr	String found in binary or memory: https://gw.conversionsapigateway.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://gweb-io2016-registration.appspot.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://gweb-nextregistration.appspot.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://home.ft.nest.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://home.integration.nestlabs.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://home.nest.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://home.qa.nestlabs.com
Source: chromecache_141.1.dr	String found in binary or memory: https://ibfe-canary.corp
Source: chromecache_141.1.dr	String found in binary or memory: https://ibfe-canary.corp.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://ibfe-canary.corp.google.com/%
Source: chromecache_128.1.dr, chromecache_187.1.dr	String found in binary or memory: https://jakers.com/
Source: chromecache_119.1.dr	String found in binary or memory: https://js.stripe.com
Source: chromecache_196.1.dr, chromecache_190.1.dr	String found in binary or memory: https://legal.tabit.cloud/accessibility-statement/us
Source: chromecache_196.1.dr, chromecache_190.1.dr	String found in binary or memory: https://legal.tabit.cloud/tabit-privacy/us
Source: chromecache_196.1.dr, chromecache_190.1.dr	String found in binary or memory: https://legal.tabit.cloud/tabit-terms/us
Source: chromecache_128.1.dr, chromecache_187.1.dr	String found in binary or memory: https://loyaltycdn.blob.core.windows.net/accountstorage/1828/GiftCard/backgroundImage.jpg?v=17068224
Source: chromecache_128.1.dr, chromecache_187.1.dr	String found in binary or memory: https://loyaltycdn.blob.core.windows.net/accountstorage/1828/GiftCard/cardImage.jpg?v=1706569020
Source: chromecache_128.1.dr, chromecache_187.1.dr	String found in binary or memory: https://loyaltycdn.blob.core.windows.net/accountstorage/1828/GiftCard/logo.png?v=1706822281
Source: chromecache_128.1.dr, chromecache_187.1.dr	String found in binary or memory: https://loyaltycdn.blob.core.windows.net/accountstorage/1828/GiftCard/mobileBackgroundImage.avif?v=1
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://major.home.integration.nestlabs.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://major.home.qa.nestlabs.com
Source: chromecache_174.1.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/staticmap
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://massage-hrd-dev.googleplex.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://massage-hrd-stg.googleplex.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://massage-hrd.googleplex.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://massage.googleplex.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://nik.googlegoro.com
Source: chromecache_117.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_117.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_119.1.dr	String found in binary or memory: https://pay.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://pay.google.com/%
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://pay.google.com/gp/p/
Source: chromecache_141.1.dr	String found in binary or memory: https://pay.google.com/gp/p/generate_gpay_btn_img
Source: chromecache_141.1.dr	String found in binary or memory: https://pay.google.com/gp/p/loading
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://pay.google.com/gp/p/ui/pay
Source: chromecache_119.1.dr	String found in binary or memory: https://pay.google.com/gp/p/ui/payframe
Source: chromecache_119.1.dr	String found in binary or memory: https://pay.google.com/payments/v4/js/integrator.js?ss
Source: chromecache_119.1.dr	String found in binary or memory: https://pay.sandbox.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://pay.sandbox.google.com/gp/p/generate_gpay_btn_img
Source: chromecache_141.1.dr	String found in binary or memory: https://pay.sandbox.google.com/gp/p/loading
Source: chromecache_141.1.dr	String found in binary or memory: https://pay.sandbox.google.com/gp/p/payment_method_manifest.json
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://payments-demoserver-sandbox.corp.cloud.google
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://payments-dot-defjam-staging.appspot.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://payments-sandbox.cloud.google
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://payments-sandbox.corp.cloud.google
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://payments.cloud.google
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://payments.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js?ss
Source: chromecache_174.1.dr	String found in binary or memory: https://places.googleapis.com/v1/places/$
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://play.google.com
Source: chromecache_213.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_117.1.dr	String found in binary or memory: https://px.ads.linkedin.com/collect?
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://qa-dot-gweb-nextregistration.appspot.com
Source: chromecache_117.1.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://spend-preprod.corp.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://spend-staging.corp.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://spend-test.corp.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://spend.corp.google.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://support.google.com
Source: chromecache_174.1.dr	String found in binary or memory: https://support.google.com/contributionpolicy/answer/7422880
Source: chromecache_174.1.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_174.1.dr	String found in binary or memory: https://support.google.com/maps/answer/3092445
Source: chromecache_213.1.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_196.1.dr, chromecache_190.1.dr	String found in binary or memory: https://tabit.cloud
Source: chromecache_119.1.dr	String found in binary or memory: https://tabit.us"
Source: chromecache_210.1.dr, chromecache_158.1.dr, chromecache_209.1.dr	String found in binary or memory: https://tabit.us/assets/images/icon.png
Source: chromecache_162.1.dr	String found in binary or memory: https://tabit.us/assets/images/tabit-gift-it.png
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://taylormarshall-dot-test-dot-402-bslatkin-staging.appspot.com
Source: chromecache_117.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_154.1.dr, chromecache_192.1.dr, chromecache_166.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://vector-customer.googleplex.com/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://vector-dev-customer.googleplex.com/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://vector-perf-customer.googleplex.com/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://vector-staging-customer.googleplex.com/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://vector-test-customer.googleplex.com/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://website-dot-cl-syd-eap.appspot.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://www.editionsatplay.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://www.embark.google
Source: chromecache_117.1.dr, chromecache_197.1.dr, chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_174.1.dr	String found in binary or memory: https://www.google.com/maps/dir/
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_139.1.dr	String found in binary or memory: https://www.google.com/recaptcha/enterprise/
Source: chromecache_117.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_117.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_117.1.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_117.1.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_122.1.dr, chromecache_213.1.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__.
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.gstatic.com/_/boq-payments-consumer/_/r/
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-payments-consumer/_/js/k=boq-payments-consumer.InstantbuyFrontendB
Source: chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-payments-consumer/_/ss/k=boq-payments-consumer.InstantbuyFrontendB
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_141.1.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/
Source: chromecache_141.1.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/dark_gpay.svg
Source: chromecache_141.1.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/dark_gpay.svg);
Source: chromecache_141.1.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/light_gpay.svg
Source: chromecache_141.1.dr	String found in binary or memory: https://www.gstatic.com/instantbuy/svg/light_gpay.svg);
Source: chromecache_202.1.dr, chromecache_139.1.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__en.js
Source: chromecache_128.1.dr, chromecache_187.1.dr	String found in binary or memory: https://www.jakers.com/
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://youtube-xsell-tool-stg.googleplex.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://youtube-xsell-tool.googleplex.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://youtube.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://yt-web-green.corp.youtube.com
Source: chromecache_154.1.dr, chromecache_166.1.dr	String found in binary or memory: https://yt-web-release.corp.youtube.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.7:49687 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.48:443 -> 192.168.2.7:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.164.116.48:443 -> 192.168.2.7:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.57:443 -> 192.168.2.7:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.57:443 -> 192.168.2.7:49700 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.252.57:443 -> 192.168.2.7:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.204.141.221:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.2.20:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.128.25:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.225.172.133:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.225.172.133:443 -> 192.168.2.7:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.225.172.133:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.210.163.40:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.4.27:443 -> 192.168.2.7:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.225.172.133:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.225.172.133:443 -> 192.168.2.7:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.4.27:443 -> 192.168.2.7:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.4.27:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.234.152.120:443 -> 192.168.2.7:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.4.27:443 -> 192.168.2.7:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.71.61:443 -> 192.168.2.7:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.128.65:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.238.4.27:443 -> 192.168.2.7:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.225.172.133:443 -> 192.168.2.7:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 31.13.71.7:443 -> 192.168.2.7:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.253.115.92:443 -> 192.168.2.7:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.176.206:443 -> 192.168.2.7:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.253.115.92:443 -> 192.168.2.7:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.7:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.7:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.204.141.221:443 -> 192.168.2.7:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.253.115.81:443 -> 192.168.2.7:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.253.122.92:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.117.182.64:443 -> 192.168.2.7:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.7:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49811 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49813 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.7:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.7:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.81.238:443 -> 192.168.2.7:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.7:49825 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.7:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.253.62.92:443 -> 192.168.2.7:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.7:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 150.171.22.12:443 -> 192.168.2.7:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.7:49843 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.72.110:443 -> 192.168.2.7:49846 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir2368_345068913

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir2368_345068913

Jump to behavior

Source: classification engine

Classification label: mal48.evad.win@31/172@70/26

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,14291092354844727501,2656126166327269876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2100 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://tbit.be/ZP5s8q"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://$230182881765$/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1992,i,14291092354844727501,2656126166327269876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2100 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: dropped/chromecache_201, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://tbit.be/ZP5s8q	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://legal.tabit.cloud/tabit-privacy/us	0%	Avira URL Cloud	safe
https://jakers.com/	0%	Avira URL Cloud	safe
https://tabit.us/styles.css?v=4.14.3	0%	Avira URL Cloud	safe
https://tabit.us/node_modules_firebase_compat_messaging_dist_esm_index_esm_js.js	0%	Avira URL Cloud	safe
https://tabit.us/runtime.js?v=4.14.3	0%	Avira URL Cloud	safe
https://tabit.us/vendor.js?v=4.14.3	0%	Avira URL Cloud	safe
https://localization.tabit.cloud/us/en/countries.json	0%	Avira URL Cloud	safe
https://tabit.us/src_app_gift-cards_gift-cards_module_ts.js?v=4.14.3	0%	Avira URL Cloud	safe
https://us-bridge.tabit.cloud/status	0%	Avira URL Cloud	safe
https://tabit.us/assets/images/gift-card-shop/desktop-bg.png?v=4_14_3	0%	Avira URL Cloud	safe
https://tabit-us-prd.apm.us-east-1.aws.found.io/intake/v2/rum/events	0%	Avira URL Cloud	safe
https://tabit.us/assets/images/svg/svg-color-filter.svg?v=1742481763258	0%	Avira URL Cloud	safe
https://us-bridge.tabit.cloud/logger	0%	Avira URL Cloud	safe
https://legal.tabit.cloud/accessibility-statement/us	0%	Avira URL Cloud	safe
https://tabit.us/polyfills.js?v=4.14.3	0%	Avira URL Cloud	safe
https://tabit.us/src_app_online-reservations_online-reservations_module_ts.js?v=4.14.3	0%	Avira URL Cloud	safe
https://spend-staging.corp.google.com	0%	Avira URL Cloud	safe
https://tabit.us/assets/images/favicon.ico?v=4.14.3	0%	Avira URL Cloud	safe
https://embark-staging.corp.google.com	0%	Avira URL Cloud	safe
https://legal.tabit.cloud/tabit-terms/us	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
google.com	142.250.176.206	true	false	high
proxy-rr.us-east-1.aws.found.io	18.204.141.221	true	false	high
pay.sandbox.google.com	172.253.115.81	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.113.94	true	false	high
localization.tabit.cloud	108.138.128.25	true	false	unknown
tabit.us	13.33.252.57	true	false	unknown
l-0005.l-msedge.net	13.107.42.14	true	false	high
tbit.be	18.164.116.48	true	false	unknown
scontent.xx.fbcdn.net	31.13.71.7	true	false	high
play.google.com	142.250.81.238	true	false	high
ln-0002.ln-msedge.net	150.171.22.12	true	false	high
js.nagich.co.il	104.26.2.20	true	false	high
us-bridge.tabit.cloud	3.225.172.133	true	false	unknown
pay.google.com	172.253.115.92	true	false	high
www.google.com	142.251.40.164	true	false	high
us-ros-rp.tabit.cloud	18.210.163.40	true	false	unknown
a1916.dscg2.akamai.net	104.117.182.64	true	false	high
www.linkedin.com	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
connect.facebook.net	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
tabit-us-prd.apm.us-east-1.aws.found.io	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pay.google.com/gp/p/ui/pay	false		high
https://tabit.us/vendor.js?v=4.14.3	false	Avira URL Cloud: safe	unknown
https://us-bridge.tabit.cloud/status	false	Avira URL Cloud: safe	unknown
https://tabit.us/node_modules_firebase_compat_messaging_dist_esm_index_esm_js.js	false	Avira URL Cloud: safe	unknown
https://tabit.us/styles.css?v=4.14.3	false	Avira URL Cloud: safe	unknown
https://tabit.us/src_app_gift-cards_gift-cards_module_ts.js?v=4.14.3	false	Avira URL Cloud: safe	unknown
https://tabit.us/runtime.js?v=4.14.3	false	Avira URL Cloud: safe	unknown
https://localization.tabit.cloud/us/en/countries.json	false	Avira URL Cloud: safe	unknown
https://tabit.us/assets/images/gift-card-shop/desktop-bg.png?v=4_14_3	false	Avira URL Cloud: safe	unknown
https://js.nagich.co.il/assets/data/lang.json	false		high
https://tabit.us/src_app_online-reservations_online-reservations_module_ts.js?v=4.14.3	false	Avira URL Cloud: safe	unknown
https://us-bridge.tabit.cloud/logger	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/enterprise.js?render=6LcF8mgnAAAAAOwPcbV8uH8ilCy9VtQNwszkl020	false		high
https://tabit-us-prd.apm.us-east-1.aws.found.io/intake/v2/rum/events	false	Avira URL Cloud: safe	unknown
https://js.nagich.co.il/assets/scripts/classManager.js	false		high
https://tabit.us/assets/images/svg/svg-color-filter.svg?v=1742481763258	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/js/pay.js	false		high
https://px.ads.linkedin.com/wa/	false		high
https://tabit.us/polyfills.js?v=4.14.3	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/_/InstantbuyFrontendBuyflowPayframeUi/gen204/?tmambps=-1&rtembps=-1&rttms=-1&ct=undefined	false		high
https://tabit.us/assets/images/favicon.ico?v=4.14.3	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/payment_method_manifest.json	false		high
https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=J79K9xgfxwT6Syzx-UyWdD89	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://pay.google.com/gp/p/	chromecache_154.1.dr, chromecache_166.1.dr, chromecache_119.1.dr	false		high
https://support.google.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://massage-hrd-dev.googleplex.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
http://g.co/dev/maps-no-account	chromecache_174.1.dr	false		high
https://gweb-nextregistration.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://cloud.google.com/recaptcha/docs/troubleshoot-recaptcha-issues#automated-query-error	chromecache_122.1.dr, chromecache_213.1.dr	false		high
https://px.ads.linkedin.com/collect?	chromecache_117.1.dr	false		high
https://home.ft.nest.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://www.youtube.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://checkout.youtube.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://pay.google.com	chromecache_119.1.dr	false		high
https://vector-customer.googleplex.com/	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://www.editionsatplay.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_122.1.dr, chromecache_213.1.dr	false		high
https://goo.gle/js-api-loading	chromecache_174.1.dr	false		high
https://support.google.com/maps/answer/3092445	chromecache_174.1.dr	false		high
https://jakers.com/	chromecache_128.1.dr, chromecache_187.1.dr	false	Avira URL Cloud: safe	unknown
https://legal.tabit.cloud/tabit-privacy/us	chromecache_196.1.dr, chromecache_190.1.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_174.1.dr	false		high
https://support.google.com/recaptcha	chromecache_213.1.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_174.1.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_174.1.dr	false		high
https://console.cloud.google	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://pay.google.com/%	chromecache_141.1.dr	false		high
https://payments-demoserver-sandbox.corp.cloud.google	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://legal.tabit.cloud/accessibility-statement/us	chromecache_196.1.dr, chromecache_190.1.dr	false	Avira URL Cloud: safe	unknown
https://3-dot-gweb-io2016-registration.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://apis.google.com/js/api.js	chromecache_154.1.dr, chromecache_192.1.dr, chromecache_166.1.dr	false		high
https://payments.cloud.google	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://ibfe-canary.corp.google.com/%	chromecache_141.1.dr	false		high
https://nik.googlegoro.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://arctic-ocean-116022.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://google.com/pay	chromecache_141.1.dr, chromecache_130.1.dr	false		high
https://connect.facebook.net/	chromecache_161.1.dr	false		high
https://taylormarshall-dot-test-dot-402-bslatkin-staging.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/versions#beta-channel	chromecache_174.1.dr	false		high
https://bunpay.app	chromecache_119.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/advanced-markers/migration	chromecache_174.1.dr	false		high
https://defjam-staging.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://googlecommassage-hrd.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://clientlog.cloud.google/log?format=json&hasfast=true	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://yt-web-release.corp.youtube.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://ibfe-canary.corp.google.com	chromecache_141.1.dr	false		high
https://website-dot-cl-syd-eap.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://play.google.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://major.home.integration.nestlabs.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers	chromecache_174.1.dr	false		high
https://youtube-xsell-tool-stg.googleplex.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://angular.dev/license	chromecache_154.1.dr, chromecache_192.1.dr, chromecache_166.1.dr	false		high
https://vector-perf-customer.googleplex.com/	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://www.embark.google	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://cloud.google.com/contact	chromecache_122.1.dr, chromecache_213.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/libraries	chromecache_174.1.dr	false		high
https://dev-dot-gweb-nextregistration.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://support.google.com/contributionpolicy/answer/7422880	chromecache_174.1.dr	false		high
https://github.com/angular/angular/blob/master/packages/compiler/src/shadow_css.ts	chromecache_121.1.dr	false		high
https://pay.sandbox.google.com	chromecache_119.1.dr	false		high
https://massage.googleplex.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://www.google.com/recaptcha/api2/	chromecache_122.1.dr, chromecache_213.1.dr	false		high
https://spend-staging.corp.google.com	chromecache_154.1.dr, chromecache_166.1.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_122.1.dr, chromecache_213.1.dr	false		high
https://developers.google.com/maps/documentation/javascript/error-messages#	chromecache_199.1.dr, chromecache_197.1.dr	false		high
https://payments-dot-defjam-staging.appspot.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://gw.conversionsapigateway.com	chromecache_161.1.dr	false		high
https://payments-sandbox.cloud.google	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://getbootstrap.com/)	chromecache_203.1.dr	false		high
https://pay.google.com/gp/p/loading	chromecache_141.1.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_154.1.dr, chromecache_192.1.dr, chromecache_166.1.dr	false		high
https://legal.tabit.cloud/tabit-terms/us	chromecache_196.1.dr, chromecache_190.1.dr	false	Avira URL Cloud: safe	unknown
https://massage-hrd-stg.googleplex.com	chromecache_154.1.dr, chromecache_166.1.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/J79K9xgfxwT6Syzx-UyWdD89/recaptcha__.	chromecache_122.1.dr, chromecache_213.1.dr	false		high
https://embark-staging.corp.google.com	chromecache_154.1.dr, chromecache_166.1.dr	false	Avira URL Cloud: safe	unknown
https://ibfe-canary.corp	chromecache_141.1.dr	false		high
https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca	chromecache_122.1.dr, chromecache_213.1.dr	false		high
https://td.doubleclick.net	chromecache_117.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.128.65	unknown	United States	16509	AMAZON-02US	false
108.138.128.25	localization.tabit.cloud	United States	16509	AMAZON-02US	false
64.233.180.92	unknown	United States	15169	GOOGLEUS	false
142.250.176.206	google.com	United States	15169	GOOGLEUS	false
172.253.62.92	unknown	United States	15169	GOOGLEUS	false
104.26.2.20	js.nagich.co.il	United States	13335	CLOUDFLARENETUS	false
142.250.81.238	play.google.com	United States	15169	GOOGLEUS	false
13.33.252.57	tabit.us	United States	16509	AMAZON-02US	false
104.117.182.64	a1916.dscg2.akamai.net	United States	20940	AKAMAI-ASN1EU	false
3.225.172.133	us-bridge.tabit.cloud	United States	14618	AMAZON-AESUS	false
18.204.141.221	proxy-rr.us-east-1.aws.found.io	United States	14618	AMAZON-AESUS	false
172.253.115.92	pay.google.com	United States	15169	GOOGLEUS	false
150.171.22.12	ln-0002.ln-msedge.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.67.71.61	unknown	United States	13335	CLOUDFLARENETUS	false
18.210.163.40	us-ros-rp.tabit.cloud	United States	14618	AMAZON-AESUS	false
172.253.122.92	unknown	United States	15169	GOOGLEUS	false
142.250.80.100	unknown	United States	15169	GOOGLEUS	false
18.164.116.48	tbit.be	United States	3	MIT-GATEWAYSUS	false
13.107.42.14	l-0005.l-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
142.251.40.164	www.google.com	United States	15169	GOOGLEUS	false
31.13.71.7	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
18.238.4.27	unknown	United States	16509	AMAZON-02US	false
172.253.115.81	pay.sandbox.google.com	United States	15169	GOOGLEUS	false
142.250.72.110	unknown	United States	15169	GOOGLEUS	false
3.234.152.120	unknown	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644458
Start date and time:	2025-03-20 15:41:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://tbit.be/ZP5s8q
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.evad.win@31/172@70/26

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, sppsvc.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.227, 142.250.80.46, 172.253.62.84, 142.251.40.174, 142.251.40.110, 142.250.80.110, 142.250.65.238, 142.250.80.74, 142.250.65.195, 17.253.97.206, 17.253.97.205, 20.60.130.68, 142.250.65.234, 142.251.32.106, 142.251.40.106, 142.250.65.170, 142.251.40.138, 172.217.165.138, 142.250.65.202, 142.250.81.234, 142.251.40.202, 142.250.64.74, 142.251.40.234, 142.250.176.202, 142.251.40.170, 142.251.35.170, 142.250.80.106, 142.251.41.10, 142.250.64.72, 142.251.40.195, 142.251.41.14, 199.232.214.172, 142.250.80.42, 142.250.80.10, 142.250.72.106, 142.251.40.206, 142.251.32.99, 142.250.80.78, 142.251.41.3, 142.251.40.142, 34.104.35.123, 172.253.115.84, 142.251.40.99, 142.251.32.110, 20.190.144.164, 20.190.144.137, 20.190.144.163, 20.190.148.165, 20.190.148.166, 20.190.144.166, 20.190.144.162, 40.126.16.163, 20.12.23.50, 184.31.69.3
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, loyaltycdn.blob.core.windows.net, www.tm.lg.prod.aadmsa.akadns.net, clientservices.googleapis.com, dns.msftncsi.com, applepay.lb-apple.com.akadns.net, maps.googleapis.com, clients2.google.com, redirector.gvt1.com, www.googletagmanager.com, login.live.com, update.googleapis.com, blob.ams22prdstr02a.store.core.windows.net, www.gstatic.com, c.pki.goog, fonts.googleapis.com, prdv4a.aadg.msidentity.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, www.tm.v4.a.prd.aadg.trafficmanager.net, ctldl.windowsupdate.com, login.msa.msidentity.com, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, applepay.cdn-apple.com, clients.l.google.com, world-gen.g.aaplimg.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://tbit.be/ZP5s8q

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4922)
Category:	downloaded
Size (bytes):	251694
Entropy (8bit):	5.563390747815899
Encrypted:	false
SSDEEP:	3072:LeLM3xriY2s7xcyIvE80Rc/2UX6IaVXFS423jueUFKY+M8koX+2k94NlU3PapZB:0MQnIxQ1/2UX6PV8UFK7M8fX+2kESat
MD5:	B44D0D791F5FF412F5BE49927ECC2691
SHA1:	1F860231D047B52A0432E998BD7BBECDD559EBEA
SHA-256:	C954B3C6EB2AD7586FF8F1533E9D0FCCC750264D64ED4156428708833844C2FB
SHA-512:	338C8A979242E680847F9F54C8D9B63A6E6097AF45A4965C1AB012E10B686A8268C52D211A46F9F9F2733F25881949EF14BA1A94688853E22351186E7A10FD84
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-PW32SGRQ&l=dataLayer
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"3",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__u","vtp_component":"PATH","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__f","vtp_component":"URL"},{"function":"__e"},{"function":"__v","vtp_name":"gtm.element","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementClasses","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementId","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementTarget","vtp_dataLayerVersion":1},{"function":"__v","vtp_name":"gtm.elementUrl","vtp_dataLayerVersion":1},{"function":"__aev","vtp_varType":"TEXT"},{"function":"__v","vtp_name":"gtm.element","v

Source: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F	HTTP Parser: No favicon
Source: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F	HTTP Parser: No favicon
Source: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_166.1.dr	String found in binary or memory: _.FB=function(a){this.h=_.zb([],function(b){return _.$f(b)});this.g=_.zb("https://admob.google.com https://apps.admob.com https://arctic-ocean-116022.appspot.com https://gweb-io2016-registration.appspot.com https://3-dot-gweb-io2016-registration.appspot.com https://bus-payments-dev.googleplex.com https://gbusrides.googleplex.com https://www.editionsatplay.com https://website-dot-cl-syd-eap.appspot.com https://massage-hrd-dev.googleplex.com https://massage-hrd-stg.googleplex.com https://massage.googleplex.com https://massage-hrd.googleplex.com https://googlecommassage-hrd.appspot.com https://nik.googlegoro.com https://taylormarshall-dot-test-dot-402-bslatkin-staging.appspot.com https://402-bslatkin-staging.appspot.com https://gweb-nextregistration.appspot.com https://qa-dot-gweb-nextregistration.appspot.com https://dev-dot-gweb-nextregistration.appspot.com https://cloudnext.withgoogle.com https://defjam-staging.appspot.com https://payments-dot-defjam-staging.appspot.com https://vector-customer.googleplex.com/ https://vector-test-customer.googleplex.com/ https://vector-dev-customer.googleplex.com/ https://vector-staging-customer.googleplex.com/ https://vector-perf-customer.googleplex.com/ https://youtube-xsell-tool.googleplex.com https://youtube-xsell-tool-stg.googleplex.com https://youtube.com https://www.youtube.com https://yt-web-green.corp.youtube.com https://yt-web-release.corp.youtube.com https://checkout.youtube.com https://checkout-green-qa.youtube.com https://home.nest.com https://alpha.home.nest.com https://home.ft.nest.com https://home.qa.nestlabs.com https://major.home.qa.nestlabs.com https://home.integration.nestlabs.com https://major.home.integration.nestlabs.com https://www.embark.google https://embark-preprod.corp.google.com https://embark-staging.corp.google.com https://embark-test.corp.google.com https://console.cloud.google https://payments.cloud.google https://payments-demoserver-sandbox.corp.cloud.google https://payments-sandbox.corp.cloud.google https://payments-sandbox.cloud.google https://spend.corp.google.com https://spend-preprod.corp.google.com https://spend-staging.corp.google.com https://spend-test.corp.google.com".split(" "), equals www.youtube.com (Youtube)
Source: chromecache_161.1.dr	String found in binary or memory: return function(a,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var b=f.getFbeventsModules("signalsFBEventsGetTier"),c=d();function d(){try{if(a.trustedTypes&&a.trustedTypes.createPolicy){var b=a.trustedTypes;return b.createPolicy("facebook.com/signals/iwl",{createScriptURL:function(b){var c=typeof a.URL==="function"?a.URL:a.webkitURL;c=new c(b);c=c.hostname.endsWith(".facebook.com")&&c.pathname=="/signals/iwl.js";if(!c)throw new Error("Disallowed script URL");return b}})}}catch(a){}return null}e.exports=function(a,d){d=b(d);d=d==null?"www.facebook.com":"www."+d+".facebook.com";d="https://"+d+"/signals/iwl.js?pixel_id="+a;if(c!=null)return c.createScriptURL(d);else return d}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_161.1.dr	String found in binary or memory: return function(f,b,c,d){var e={exports:{}};e.exports;(function(){"use strict";var a=/^https:\/\/www\.([A-Za-z0-9\.]+)\.facebook\.com\/tr\/?$/,b=["https://www.facebook.com/tr","https://www.facebook.com/tr/"];e.exports=function(c){if(b.indexOf(c)!==-1)return null;var d=a.exec(c);if(d==null)throw new Error("Malformed tier: "+c);return d[1]}})();return e.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_161.1.dr	String found in binary or memory: return function(f,g,h,i){var j={exports:{}};j.exports;(function(){"use strict";var a={ENDPOINT:"https://www.facebook.com/tr/",INSTAGRAM_TRIGGER_ATTRIBUTION:"https://www.instagram.com/tr/",AEM_ENDPOINT:"https://www.facebook.com/.well-known/aggregated-event-measurement/",GPS_ENDPOINT:"https://www.facebook.com/privacy_sandbox/pixel/register/trigger/",TOPICS_API_ENDPOINT:"https://www.facebook.com/privacy_sandbox/topics/registration/"};j.exports=a})();return j.exports}(a,b,c,d)}); equals www.facebook.com (Facebook)
Source: chromecache_117.1.dr	String found in binary or memory: return f}JG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),LG=["www.youtube.com","www.youtube-nocookie.com"],MG,NG=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tbit.be
Source: global traffic	DNS traffic detected: DNS query: tabit.us
Source: global traffic	DNS traffic detected: DNS query: tabit-us-prd.apm.us-east-1.aws.found.io
Source: global traffic	DNS traffic detected: DNS query: us-bridge.tabit.cloud
Source: global traffic	DNS traffic detected: DNS query: js.nagich.co.il
Source: global traffic	DNS traffic detected: DNS query: localization.tabit.cloud
Source: global traffic	DNS traffic detected: DNS query: us-ros-rp.tabit.cloud
Source: global traffic	DNS traffic detected: DNS query: pay.google.com
Source: global traffic	DNS traffic detected: DNS query: connect.facebook.net
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: pay.sandbox.google.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 15:42:32.597557068 CET	53	58840	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:32.656754971 CET	53	61660	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:33.530591965 CET	53	57732	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:37.079905033 CET	62099	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:37.080090046 CET	55252	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:37.182806015 CET	53	55252	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:37.183398008 CET	53	62099	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:38.384474993 CET	52901	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:38.384696960 CET	56845	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:38.611037016 CET	53	52901	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:38.636039019 CET	53	56845	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:39.379790068 CET	56818	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:39.379954100 CET	64488	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:39.499433994 CET	53	56818	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:39.510636091 CET	53	64488	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:41.522568941 CET	53	61631	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.559714079 CET	60516	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.559808016 CET	60600	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.628118038 CET	52557	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.628242016 CET	54955	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.633115053 CET	54557	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.633407116 CET	62599	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.673422098 CET	53	60516	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.691550970 CET	65476	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.691749096 CET	52234	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:44.698227882 CET	53	60600	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.740519047 CET	53	54955	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.740530968 CET	53	54557	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.743400097 CET	53	52557	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.745961905 CET	53	62599	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.805347919 CET	53	52234	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:44.812365055 CET	53	65476	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:45.741919994 CET	53712	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:45.742115021 CET	57459	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:45.857933044 CET	53	53712	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:45.888410091 CET	53	57459	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.269284964 CET	52843	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.269674063 CET	58507	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.270845890 CET	52359	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.270987034 CET	50879	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.279556990 CET	57146	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.279730082 CET	52631	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.303041935 CET	56442	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.303231001 CET	56280	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.379676104 CET	53	50879	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.386893988 CET	53	52359	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.388664007 CET	53	57146	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.388832092 CET	53	52631	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.417762995 CET	53	56442	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.428515911 CET	63586	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.428715944 CET	59101	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.433003902 CET	53	58507	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.433929920 CET	53	52843	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.437983036 CET	53	56280	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.540441990 CET	53	59101	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.547348976 CET	53	63586	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.822400093 CET	63257	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.822802067 CET	53764	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:46.927198887 CET	53	53764	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:46.932588100 CET	53	63257	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:47.119076014 CET	65144	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:47.119232893 CET	58144	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:47.119828939 CET	61643	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:47.119937897 CET	55604	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:47.222635031 CET	53	55604	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:47.222709894 CET	53	65144	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:47.223287106 CET	53	61643	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:47.224777937 CET	53	58144	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:48.336503029 CET	50360	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:48.336661100 CET	52543	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:48.337462902 CET	56130	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:48.338107109 CET	57513	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:48.443109989 CET	53	52543	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:48.444032907 CET	53	50360	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:48.444638968 CET	53	57513	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:48.445779085 CET	53	56130	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:48.755743027 CET	57698	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:48.756033897 CET	49642	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:48.862916946 CET	53	57698	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:48.863897085 CET	53	49642	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:48.864888906 CET	53	55955	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:49.581585884 CET	53	57230	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:49.606185913 CET	63618	53	192.168.2.7	8.8.8.8
Mar 20, 2025 15:42:49.607188940 CET	59055	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:49.658951044 CET	62788	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:49.659081936 CET	57377	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:49.709021091 CET	59295	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:49.709225893 CET	56672	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:49.712369919 CET	53	63618	8.8.8.8	192.168.2.7
Mar 20, 2025 15:42:49.715388060 CET	53	59055	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:49.764096022 CET	53	56545	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:49.766498089 CET	53	57377	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:49.767107964 CET	53	62788	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:49.819670916 CET	53	56672	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:49.819875002 CET	53	59295	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:50.088860989 CET	53	56736	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:50.594404936 CET	65503	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:50.595577002 CET	50392	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:50.675579071 CET	53	50553	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:50.700526953 CET	53	50392	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:50.703747988 CET	53	65503	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:50.888098955 CET	53	64491	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:51.802939892 CET	51188	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:51.803163052 CET	55589	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:51.909894943 CET	53	55589	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:51.910150051 CET	51207	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:51.910383940 CET	53	51188	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:51.910391092 CET	62576	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:51.927582979 CET	54103	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:51.927740097 CET	63635	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:51.993999004 CET	53	59356	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.014988899 CET	53	51207	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.015832901 CET	53	62576	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.031431913 CET	53	54103	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.032387972 CET	53	63635	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.447422981 CET	53	63765	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.580260992 CET	52145	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:52.580562115 CET	63690	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:52.683634996 CET	53	63690	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.683990955 CET	53	52145	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.696830034 CET	49350	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:52.696954966 CET	53518	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:52.799263954 CET	53	53518	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:52.799870968 CET	53	49350	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:53.015566111 CET	60154	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:53.015722990 CET	61801	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:53.119590044 CET	53	60154	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:53.120765924 CET	53	61801	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:53.730087996 CET	49709	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:53.730249882 CET	60056	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:42:53.834465981 CET	53	60056	1.1.1.1	192.168.2.7
Mar 20, 2025 15:42:53.835141897 CET	53	49709	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:00.052169085 CET	60999	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:00.052334070 CET	56666	53	192.168.2.7	8.8.8.8
Mar 20, 2025 15:43:00.156785011 CET	53	56666	8.8.8.8	192.168.2.7
Mar 20, 2025 15:43:00.158023119 CET	53	60999	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:07.885597944 CET	62723	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:07.885910988 CET	62448	53	192.168.2.7	8.8.8.8
Mar 20, 2025 15:43:07.994934082 CET	53	62448	8.8.8.8	192.168.2.7
Mar 20, 2025 15:43:07.995915890 CET	53	62723	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:09.774339914 CET	53	56202	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:32.424578905 CET	53	55893	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:32.659285069 CET	53	61991	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:33.862734079 CET	53	58065	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:35.502661943 CET	53	62056	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:53.238957882 CET	64072	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:53.239121914 CET	56763	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:53.342588902 CET	53	56763	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:53.343712091 CET	53	64072	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:53.755805016 CET	64044	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:53.756175041 CET	58813	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:53.862200975 CET	53	58813	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:53.862679958 CET	53	64044	1.1.1.1	192.168.2.7
Mar 20, 2025 15:43:57.324095011 CET	57093	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:57.324387074 CET	58502	53	192.168.2.7	1.1.1.1
Mar 20, 2025 15:43:57.431566954 CET	53	57093	1.1.1.1	192.168.2.7

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:38 UTC	663	OUT	GET /ZP5s8q HTTP/1.1 Host: tbit.be Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:39 UTC	464	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Content-Length: 202 Connection: close Date: Thu, 20 Mar 2025 14:42:39 GMT Vary: Accept X-Powered-By: Express Location: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F X-Cache: Miss from cloudfront Via: 1.1 7edae070a6a25cc68c970c1111701a20.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P6 X-Amz-Cf-Id: 9y-0DPHC43EJqGoOKl6coKDVdT7MriY0S6wtqke8-skvlnQi1gc6Yg==
2025-03-20 14:42:39 UTC	202	IN	Data Raw: 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 61 62 69 74 2e 75 73 2f 67 69 66 74 2d 63 61 72 64 73 2f 72 65 64 65 65 6d 2d 63 61 72 64 3f 69 64 3d 30 32 38 38 31 36 34 35 2d 32 37 32 33 2d 34 39 41 33 2d 41 38 38 46 2d 33 42 42 33 42 45 43 38 45 32 38 46 22 3e 68 74 74 70 73 3a 2f 2f 74 61 62 69 74 2e 75 73 2f 67 69 66 74 2d 63 61 72 64 73 2f 72 65 64 65 65 6d 2d 63 61 72 64 3f 69 64 3d 30 32 38 38 31 36 34 35 2d 32 37 32 33 2d 34 39 41 33 2d 41 38 38 46 2d 33 42 42 33 42 45 43 38 45 32 38 46 3c 2f 61 3e 3c 2f 70 3e Data Ascii: <p>Found. Redirecting to <a href="https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F">https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F</a></p>

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:39 UTC	720	OUT	GET /gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F HTTP/1.1 Host: tabit.us Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:41 UTC	477	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 3048 Connection: close Server: CloudFront Date: Thu, 20 Mar 2025 14:42:41 GMT x-powered-by: Express access-control-allow-origin: * ETag: W/"be8-KORErEr4txnNRrQmrqPd/THZ5C4" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 e7f304e96533e93e18e178014a52b962.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: j3Ss12f-AOg97zg026R6Sd_iRJR7n7AdZQ8Y6k-zIzWgULfj3w21pg==
2025-03-20 14:42:41 UTC	3048	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 55 53 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 74 61 62 69 74 2e 75 73 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 59 6f 75 20 72 65 63 65 69 76 65 64 20 61 20 67 69 66 74 2d 63 61 72 64 20 66 72 6f 6d 20 4a 65 72 65 6d 79 20 50 72 65 73 6c 65 79 20 66 6f 72 20 Data Ascii: <!DOCTYPE html><html lang="en"><head><base href="/"><meta charset="utf-8"><meta property="og:locale" content="en-US" /><meta property="og:url" content="tabit.us"/><meta property="og:title" content="You received a gift-card from Jeremy Presley for

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:40 UTC	575	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIkqHLAQiKo8sBCIWgzQEI9s/OAQiA1s4BCMnczgEIhODOAQii5M4BCK/kzgEI6eTOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:40 UTC	1303	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:42:40 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-dnOJjNtJ9tFNsNSC-_zH4Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 14:42:40 UTC	874	IN	Data Raw: 33 36 33 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 6e 63 61 61 20 74 6f 75 72 6e 61 6d 65 6e 74 20 62 72 61 63 6b 65 74 20 62 61 73 6b 65 74 62 61 6c 6c 22 2c 22 64 6f 6c 6c 61 72 20 67 65 6e 65 72 61 6c 20 73 74 6f 72 65 73 20 63 6c 6f 73 69 6e 67 22 2c 22 70 61 6c 77 6f 72 6c 64 20 63 72 6f 73 73 70 6c 61 79 20 75 70 64 61 74 65 22 2c 22 73 63 68 6f 6f 6c 20 63 6c 6f 73 69 6e 67 73 20 6f 6d 61 68 61 22 2c 22 63 68 72 69 73 74 6f 70 68 65 72 20 72 65 6e 73 74 72 6f 6d 20 68 6f 72 6f 73 63 6f 70 65 73 22 2c 22 67 6f 6f 67 6c 65 20 70 69 78 65 6c 20 39 61 22 2c 22 63 6f 66 66 65 65 20 63 72 65 61 6d 65 72 20 72 65 63 61 6c 6c 65 64 22 2c 22 6e 62 61 20 6d 6f 63 6b 20 64 72 61 66 74 20 32 30 32 35 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 Data Ascii: 363)]}'["",["ncaa tournament bracket basketball","dollar general stores closing","palworld crossplay update","school closings omaha","christopher renstrom horoscopes","google pixel 9a","coffee creamer recalled","nba mock draft 2025"],["","","","","",""
2025-03-20 14:42:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:41 UTC	603	OUT	GET /styles.css?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:41 UTC	628	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 375347 Connection: close x-amz-id-2: z2HAQbucZ5bph5y07uO+BJiKNZX0AWztsRx3GMGN3+LmTubNFgg20uQRDWrY0N0yI83wfpF/4zk= x-amz-request-id: NAJ0E5B3JYCRW1H8 Date: Thu, 20 Mar 2025 14:42:42 GMT Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: 2qbn3jI2fHjNL.tGAzVQvtiwxGO6t3gW ETag: "d77ff39bcc9292cc18b806a2193be190" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 04eb98a9e0ea7d312d38391a3e694d2e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: BJpAh0QRh64pyPDfGBtHHQtE3XxKUAEWuPyxbl0M1-PIWIXe2_XKbg==
2025-03-20 14:42:41 UTC	15756	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 36 2e 30 2d 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b Data Ascii: /! Bootstrap v4.6.0-3 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors * Copyright 2011-2020 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root{--blue: #007bff;--indigo: #6610f2;
2025-03-20 14:42:41 UTC	16384	IN	Data Raw: 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 78 6c 2d 31 31 7b Data Ascii: %}.offset-xl-4{margin-left:33.333333%}.offset-xl-5{margin-left:41.666667%}.offset-xl-6{margin-left:50%}.offset-xl-7{margin-left:58.333333%}.offset-xl-8{margin-left:66.666667%}.offset-xl-9{margin-left:75%}.offset-xl-10{margin-left:83.333333%}.offset-xl-11{
2025-03-20 14:42:42 UTC	16089	IN	Data Raw: 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 66 6f 72 6d 2d 69 6e 6c 69 6e 65 20 2e 63 75 73 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c Data Ascii: fy-content:center;width:auto;padding-left:0}.form-inline .form-check-input{position:relative;flex-shrink:0;margin-top:0;margin-right:.25rem;margin-left:0}.form-inline .custom-control{align-items:center;justify-content:center}.form-inline .custom-control-l
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 7d 2e 64 72 6f 70 6c 65 66 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 72 6f 70 6c 65 66 74 20 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2e 32 35 35 65 6d 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d Data Ascii: tical-align:.255em;content:""}.dropleft .dropdown-toggle:after{display:none}.dropleft .dropdown-toggle:before{display:inline-block;margin-right:.255em;vertical-align:.255em;content:"";border-top:.3em solid transparent;border-right:.3em solid;border-bottom
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 63 65 29 7b 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 68 75 6d 62 7b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 68 75 6d 62 3a 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 33 64 37 66 66 7d 2e 63 75 73 74 6f 6d 2d 72 61 6e 67 65 3a 3a 2d 6d 6f 7a 2d 72 61 6e 67 65 2d 74 72 61 63 6b 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 2e 35 72 65 6d 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 65 65 32 65 36 3b 62 6f 72 Data Ascii: ce){.custom-range::-moz-range-thumb{-moz-transition:none;transition:none}}.custom-range::-moz-range-thumb:active{background-color:#b3d7ff}.custom-range::-moz-range-track{width:100%;height:.5rem;color:transparent;cursor:pointer;background-color:#dee2e6;bor
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 75 73 3a 2e 32 72 65 6d 7d 2e 62 61 64 67 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 20 2e 34 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 37 35 25 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 65 6c 69 6e 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 2e 32 35 72 65 6d 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 2c 62 6f 72 64 65 Data Ascii: us:.2rem}.badge{display:inline-block;padding:.25em .4em;font-size:75%;font-weight:700;line-height:1;text-align:center;white-space:nowrap;vertical-align:baseline;border-radius:.25rem;transition:color .15s ease-in-out,background-color .15s ease-in-out,borde
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 5e 3d 72 69 67 68 74 5d 7b 70 61 64 64 69 6e 67 3a 30 20 2e 34 72 65 6d 7d 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 72 69 67 68 74 20 2e 61 72 72 6f 77 2c 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 72 69 67 68 74 5d 20 2e 61 72 72 6f 77 7b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 2e 34 72 65 6d 3b 68 65 69 67 68 74 3a 2e 38 72 65 6d 7d 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 72 69 67 68 74 20 2e 61 72 72 6f 77 3a 62 65 66 6f 72 65 2c 2e 62 73 2d 74 6f 6f 6c 74 69 70 2d 61 75 74 6f 5b 78 2d 70 6c 61 63 65 6d 65 6e 74 5e 3d 72 69 67 68 74 5d 20 2e 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 72 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 2e 34 72 65 6d 20 2e 34 72 65 6d 20 2e 34 72 65 6d 20 30 3b 62 6f 72 64 65 Data Ascii: ^=right]{padding:0 .4rem}.bs-tooltip-right .arrow,.bs-tooltip-auto[x-placement^=right] .arrow{left:0;width:.4rem;height:.8rem}.bs-tooltip-right .arrow:before,.bs-tooltip-auto[x-placement^=right] .arrow:before{right:0;border-width:.4rem .4rem .4rem 0;borde
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 61 70 2d 72 65 76 65 72 73 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 66 69 6c 6c 7b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 67 72 6f 77 2d 30 7b 66 6c 65 78 2d 67 72 6f 77 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 67 72 6f 77 2d 31 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 73 68 72 69 6e 6b 2d 30 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 66 6c 65 78 2d 73 6d 2d 73 68 72 69 6e 6b 2d 31 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 73 6d 2d 73 74 61 72 74 7b 6a 75 73 74 69 66 79 2d 63 6f Data Ascii: ap-reverse!important}.flex-sm-fill{flex:1 1 auto!important}.flex-sm-grow-0{flex-grow:0!important}.flex-sm-grow-1{flex-grow:1!important}.flex-sm-shrink-0{flex-shrink:0!important}.flex-sm-shrink-1{flex-shrink:1!important}.justify-content-sm-start{justify-co
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 74 6f 6d 3a 2d 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 73 6d 2d 6e 34 2c 2e 6d 78 2d 73 6d 2d 6e 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 2e 35 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 2d 73 6d 2d 6e 35 7b 6d 61 72 67 69 6e 3a 2d 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 74 2d 73 6d 2d 6e 35 2c 2e 6d 79 2d 73 6d 2d 6e 35 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 72 2d 73 6d 2d 6e 35 2c 2e 6d 78 2d 73 6d 2d 6e 35 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 62 2d 73 6d 2d 6e 35 2c 2e 6d 79 2d 73 6d 2d 6e 35 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 33 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 6c 2d 73 Data Ascii: tom:-1.5rem!important}.ml-sm-n4,.mx-sm-n4{margin-left:-1.5rem!important}.m-sm-n5{margin:-3rem!important}.mt-sm-n5,.my-sm-n5{margin-top:-3rem!important}.mr-sm-n5,.mx-sm-n5{margin-right:-3rem!important}.mb-sm-n5,.my-sm-n5{margin-bottom:-3rem!important}.ml-s
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 6e 61 76 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6e 61 76 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 69 74 65 6d 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 69 74 65 6d 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 72 74 6c 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 69 74 65 6d 2b 2e 6e 61 76 2d 69 74 65 6d 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 69 74 65 6d 2b 2e 6e 61 76 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 7d 2e 72 74 6c 20 74 68 2c 5b 64 69 72 3d 72 74 6c 5d 20 74 68 7b 74 65 78 74 2d 61 6c 69 67 6e 3a Data Ascii: nav,[dir=rtl] .nav{padding-right:0}.rtl .navbar-nav .nav-item,[dir=rtl] .navbar-nav .nav-item{float:right}.rtl .navbar-nav .nav-item+.nav-item,[dir=rtl] .navbar-nav .nav-item+.nav-item{margin-right:inherit;margin-left:1rem}.rtl th,[dir=rtl] th{text-align:

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:41 UTC	612	OUT	GET /runtime.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:41 UTC	729	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3275 Connection: close x-amz-id-2: Aup3Ny2agNEHoKoqHAtk6w5AKV5kWHt5V+MZGlEo1MvcWA6nYF5xbjQGAuObLNwpJd7O6iReIis= x-amz-request-id: NAJ6413V8R30NS4X Date: Thu, 20 Mar 2025 14:42:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: qPfT6VRNCK3QQ3SNpxPiDrGSBOknVu39 ETag: "9cea9df66da5eda260e38e8d670fabb2" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 46742562c96bafab9ba5e97834fbd786.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: SRR59rSJvV0EhIWzWdhbgNO8Kdudc0cZewoIQH9Dq2v3NZ_UkLNOfw==
2025-03-20 14:42:41 UTC	3275	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 76 3d 7b 7d 2c 67 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 76 61 72 20 6e 3d 67 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 67 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 76 5b 65 5d 2e 63 61 6c 6c 28 74 2e 65 78 70 6f 72 74 73 2c 74 2c 74 2e 65 78 70 6f 72 74 73 2c 72 29 2c 74 2e 6c 6f 61 64 65 64 3d 21 30 2c 74 2e 65 78 70 6f 72 74 73 7d 72 2e 6d 3d 76 2c 72 2e 61 6d 64 4f 3d 7b 7d 2c 65 3d 5b 5d 2c 72 2e 4f 3d 28 6e 2c 74 2c 69 2c 6f 29 3d 3e 7b 69 66 28 21 74 29 7b 76 61 72 20 61 3d 31 2f 30 3b 66 6f 72 28 66 3d 30 Data Ascii: (()=>{"use strict";var e,v={},g={};function r(e){var n=g[e];if(void 0!==n)return n.exports;var t=g[e]={id:e,loaded:!1,exports:{}};return v[e].call(t.exports,t,t.exports,r),t.loaded=!0,t.exports}r.m=v,r.amdO={},e=[],r.O=(n,t,i,o)=>{if(!t){var a=1/0;for(f=0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 35448, version 1.0
Category:	downloaded
Size (bytes):	35448
Entropy (8bit):	7.994051931929978
Encrypted:	true
SSDEEP:	768:qxwFvUTwzIrHO7lNjFcR3JdYWAsb5l2FkhP5kE0AK/Kcrd:7FnzMHKv5c1YWHeksAK/X
MD5:	5C138044F30B8C78119264CD744E686A
SHA1:	7605E014180D49087785350BD1906C16C389690D
SHA-256:	47374CB7D373F9A8450E1237C80BC5FE68C61FBF0CDF958DF7A298143B7DD445
SHA-512:	A7A257429F4D2CE7275D7CE5667CDA9F3DF02BCE7E7D64713FA6D02605B388B7B0F79DE915A1201BE0BAF2383C55BB2A102BCA19DAFEF3A5943D78A2952BD09E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2
Preview:	wOF2.......x......@\|..............................,.......?HVAR..?MVAR3.`?STAT..'..v/\.....t..h..N.0..R.6.$.... ..J..U..[0(Q...+....._.=.n....p\|9UI........~2........K.JQ`...##U.....Z...).D.<^.b.jVZ.+.W.Twb.".A.......Mb.D......H..S......G.B.#.bf\|........3-..M...9...^...=..c.....&.b..k.p.,.O7_}.C....Gx..........c.....P%.e.y..x~m.....F...K.).K.D..r..X...)V.6.b.!.bc......t..$M.b~.;.I..x.I.P-&..2U..g.M>..2w...3.!...X.=....Q.....}.P T.,..~..3w....ef..tT$.BT.Ruf...].....}.c.E....R..D..r.[.K(A$..%. ...P.XR$.).7..E..-.&.s.-.5C..".2..Y:.9.sj.g.Q...........~....{...M&#e....._...Wr~\|..{.c..@..CB..9..%.v.JI..f.R...i.9%.....m....../.3.tji:.....e.......IM.:V......3.<.x.3..H?A....."..........d....Z..t"CFP...........tC.U0.p...QN.......8._....U...".....i].....4.c.O....yh.Ij.1AcBl]..L...P..H..r8.5.k_.i/. .A..>..;u.....q..M.....a0.~.C.px.j....9....#.&d!......w.pM/.;.hy.r..I./0>.........X............YK..=.z..N.S.W6.... ....[._.'5.T..'.FREj-2.3VN.J.Q..z.al.....1)..

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:41 UTC	614	OUT	GET /polyfills.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:41 UTC	705	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 103 Connection: close x-amz-id-2: DkSAJhZBu/xWq5qUCaFfsZ8SsbCiFIwqlMnRZ1aUy9JSGJx7bzRdOuyphzUSqFVrUcz+vrnaNd4= x-amz-request-id: NAJ5T7TS9WFQ6SVR Date: Thu, 20 Mar 2025 14:42:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: T1D2HtgrEvERwDunGFzKPeHL09HRw6DA ETag: "a77e6037948ff7ad9548d658508c037e" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 77512d19cb7ad3590ec138f5d5b2dd86.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: i31OngmXQByeLIZxvw8QYIdve8BMmTsA_2uDCrptPx7zAR3F9vskhw==
2025-03-20 14:42:41 UTC	103	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 70 6f 6c 79 66 69 6c 6c 73 22 5d 2c 7b 32 34 30 35 30 3a 28 29 3d 3e 7b 7d 7d 2c 61 3d 3e 7b 61 28 61 2e 73 3d 32 34 30 35 30 29 7d 5d 29 3b Data Ascii: (self.webpackChunktla=self.webpackChunktla\|\|[]).push([["polyfills"],{24050:()=>{}},a=>{a(a.s=24050)}]);

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:41 UTC	611	OUT	GET /vendor.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:42 UTC	732	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 3797016 Connection: close x-amz-id-2: BagcIcxVj5GF8FJQwyM0Lbc10k2S60uvCAV4FFG8oe1/3NEI+xxFHAkkHVOxtfWkGcPa+ERpE0Q= x-amz-request-id: NAJBD5G28MSXJRCY Date: Thu, 20 Mar 2025 14:42:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: 6oXmnZpiLNuPQf8wB_fF2gp6F7coE5TP ETag: "bb9a77371d9e4fef4c1f6d0d611a0f99" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 73a725fa02f9ec8c532ae0d445890568.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: peKyG386ShjUtKlEr3op_nw-SrDjzvTFIuwGmpxnamUYJ3vfggNCYg==
2025-03-20 14:42:42 UTC	12888	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 76 65 6e 64 6f 72 22 5d 2c 7b 39 32 37 33 39 3a 28 73 2c 63 2c 72 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 72 2e 64 28 63 2c 7b 54 73 3a 28 29 3d 3e 4e 6e 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 64 28 77 65 2c 6a 65 29 7b 74 68 69 73 2e 6e 61 6d 65 3d 22 41 67 67 72 65 67 61 74 65 45 72 72 6f 72 22 2c 74 68 69 73 2e 65 72 72 6f 72 73 3d 77 65 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 6a 65 7c 7c 22 22 7d 64 2e 70 72 6f 74 6f 74 79 70 65 3d 45 72 72 6f 72 2e 70 72 6f 74 6f 74 79 70 65 3b 76 61 72 20 62 3d 73 65 74 54 69 6d 65 6f 75 74 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 77 65 29 7b 72 Data Ascii: (self.webpackChunktla=self.webpackChunktla\|\|[]).push([["vendor"],{92739:(s,c,r)=>{"use strict";r.d(c,{Ts:()=>Nn});function d(we,je){this.name="AggregateError",this.errors=we,this.message=je\|\|""}d.prototype=Error.prototype;var b=setTimeout;function O(we){r
2025-03-20 14:42:42 UTC	8949	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 2c 64 65 63 6f 64 65 64 5f 62 6f 64 79 5f 73 69 7a 65 3a 77 65 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 7d 2c 6b 74 3d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 65 29 7b 76 6f 69 64 20 30 3d 3d 3d 77 65 26 26 28 77 65 3d 5b 5d 29 3b 66 6f 72 28 76 61 72 20 6a 65 3d 5b 5d 2c 73 74 3d 30 3b 73 74 3c 77 65 2e 6c 65 6e 67 74 68 3b 73 74 2b 2b 29 7b 76 61 72 20 78 74 3d 77 65 5b 73 74 5d 2c 4f 30 3d 78 74 2e 64 75 72 61 74 69 6f 6e 2c 50 30 3d 78 74 2e 64 65 73 63 72 69 70 74 69 6f 6e 2c 58 30 3d 78 74 2e 6e 61 6d 65 3b 50 30 26 26 28 58 30 2b 3d 22 3b 64 65 73 63 3d 22 2b 50 30 29 2c 4f 30 26 26 28 58 30 2b 3d 22 3b 64 75 72 3d 22 2b 4f 30 29 2c 6a 65 2e 70 75 73 68 28 58 30 29 7d 72 65 74 75 72 6e 20 6a 65 2e 6a 6f 69 6e Data Ascii: dedBodySize,decoded_body_size:we.decodedBodySize},kt=function ge(we){void 0===we&&(we=[]);for(var je=[],st=0;st<we.length;st++){var xt=we[st],O0=xt.duration,P0=xt.description,X0=xt.name;P0&&(X0+=";desc="+P0),O0&&(X0+=";dur="+O0),je.push(X0)}return je.join
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 72 20 41 65 3d 74 68 69 73 2c 73 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 67 65 74 28 22 71 75 65 75 65 4c 69 6d 69 74 22 29 2c 78 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 67 65 74 28 22 66 6c 75 73 68 49 6e 74 65 72 76 61 6c 22 29 2c 6b 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 53 65 72 76 69 63 65 2e 67 65 74 28 22 65 76 65 6e 74 73 4c 69 6d 69 74 22 29 3b 74 68 69 73 2e 71 75 65 75 65 3d 6e 65 77 20 42 6e 28 66 75 6e 63 74 69 6f 6e 28 58 30 29 7b 76 61 72 20 65 6e 3d 41 65 2e 73 65 6e 64 45 76 65 6e 74 73 28 58 30 29 3b 65 6e 26 26 65 6e 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 51 30 29 7b 41 65 2e 5f 6c 6f 67 67 69 6e 67 53 65 72 76 69 63 65 2e 77 61 72 6e 28 22 46 61 69 6c 65 64 20 73 65 6e 64 Data Ascii: r Ae=this,st=this._configService.get("queueLimit"),xt=this._configService.get("flushInterval"),kt=this._configService.get("eventsLimit");this.queue=new Bn(function(X0){var en=Ae.sendEvents(X0);en&&en.catch(function(Q0){Ae._loggingService.warn("Failed send
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 78 74 2e 6e 61 6d 65 26 26 78 74 2e 64 75 72 61 74 69 6f 6e 28 29 2f 6a 65 3c 68 74 26 26 28 78 74 2e 5f 73 74 61 72 74 2d 4f 30 2e 5f 65 6e 64 29 2f 6a 65 3c 68 74 2c 58 30 3d 77 65 2e 6c 65 6e 67 74 68 3d 3d 3d 6b 74 2b 31 3b 50 30 26 26 28 73 74 2b 2b 2c 4f 30 2e 5f 65 6e 64 3d 78 74 2e 5f 65 6e 64 29 2c 73 74 3e 31 26 26 28 21 50 30 7c 7c 58 30 29 26 26 28 4f 30 2e 6e 61 6d 65 3d 73 74 2b 22 78 20 22 2b 4f 30 2e 6e 61 6d 65 2c 73 74 3d 31 29 2c 50 30 7c 7c 41 65 2e 70 75 73 68 28 78 74 29 7d 7d 29 2c 41 65 7d 28 6a 65 2c 77 65 2e 64 75 72 61 74 69 6f 6e 28 29 2c 2e 30 35 29 3b 77 65 2e 73 70 61 6e 73 3d 41 65 7d 65 6c 73 65 20 77 65 2e 73 70 61 6e 73 3d 6a 65 7d 65 6c 73 65 20 77 65 2e 72 65 73 65 74 46 69 65 6c 64 73 28 29 3b 72 65 74 75 72 6e 20 77 Data Ascii: xt.name&&xt.duration()/je<ht&&(xt._start-O0._end)/je<ht,X0=we.length===kt+1;P0&&(st++,O0._end=xt._end),st>1&&(!P0\|\|X0)&&(O0.name=st+"x "+O0.name,st=1),P0\|\|Ae.push(xt)}}),Ae}(je,we.duration(),.05);we.spans=Ae}else we.spans=je}else we.resetFields();return w
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 2b 2b 29 7b 76 61 72 20 41 65 3d 77 65 5b 68 74 5d 3b 6a 65 2e 5f 73 74 61 72 74 3e 41 65 2e 5f 73 74 61 72 74 26 26 28 6a 65 3d 41 65 29 7d 72 65 74 75 72 6e 20 6a 65 7d 28 73 74 29 3b 78 74 26 26 78 74 2e 5f 73 74 61 72 74 3c 41 65 2e 5f 73 74 61 72 74 26 26 28 41 65 2e 5f 73 74 61 72 74 3d 78 74 2e 5f 73 74 61 72 74 29 3b 76 61 72 20 6b 74 3d 66 75 6e 63 74 69 6f 6e 20 49 74 28 77 65 29 7b 72 65 74 75 72 6e 20 69 74 28 77 65 2c 66 75 6e 63 74 69 6f 6e 28 6a 65 29 7b 72 65 74 75 72 6e 2d 31 3d 3d 3d 53 74 72 69 6e 67 28 6a 65 29 2e 69 6e 64 65 78 4f 66 28 22 65 78 74 65 72 6e 61 6c 22 29 7d 29 7d 28 73 74 29 7c 7c 7b 7d 2c 4f 30 3d 6b 74 2e 5f 65 6e 64 7c 7c 30 3b 69 66 28 41 65 2e 74 79 70 65 3d 3d 3d 76 65 29 7b 76 61 72 20 50 30 3d 41 65 2e 5f 65 6e Data Ascii: ++){var Ae=we[ht];je._start>Ae._start&&(je=Ae)}return je}(st);xt&&xt._start<Ae._start&&(Ae._start=xt._start);var kt=function It(we){return it(we,function(je){return-1===String(je).indexOf("external")})}(st)\|\|{},O0=kt._end\|\|0;if(Ae.type===ve){var P0=Ae._en
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 6e 4e 6f 4f 62 73 65 72 76 65 72 73 26 26 74 68 69 73 2e 6f 6e 4e 6f 4f 62 73 65 72 76 65 72 73 28 74 68 69 73 29 29 7d 66 6f 72 45 61 63 68 4f 62 73 65 72 76 65 72 28 76 65 29 7b 69 66 28 21 74 68 69 73 2e 66 69 6e 61 6c 69 7a 65 64 29 66 6f 72 28 6c 65 74 20 4f 74 3d 30 3b 4f 74 3c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 2e 6c 65 6e 67 74 68 3b 4f 74 2b 2b 29 74 68 69 73 2e 73 65 6e 64 4f 6e 65 28 4f 74 2c 76 65 29 7d 73 65 6e 64 4f 6e 65 28 76 65 2c 4f 74 29 7b 74 68 69 73 2e 74 61 73 6b 2e 74 68 65 6e 28 28 29 3d 3e 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 26 26 76 6f 69 64 20 30 21 3d 3d 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 5b 76 65 5d 29 74 72 79 7b 4f 74 28 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 5b Data Ascii: nNoObservers&&this.onNoObservers(this))}forEachObserver(ve){if(!this.finalized)for(let Ot=0;Ot<this.observers.length;Ot++)this.sendOne(Ot,ve)}sendOne(ve,Ot){this.task.then(()=>{if(void 0!==this.observers&&void 0!==this.observers[ve])try{Ot(this.observers[
2025-03-20 14:42:42 UTC	6056	IN	Data Raw: 30 30 63 63 3a 22 49 22 2c 5c 75 30 30 63 64 3a 22 49 22 2c 5c 75 30 30 63 65 3a 22 49 22 2c 5c 75 30 30 63 66 3a 22 49 22 2c 5c 75 30 30 65 63 3a 22 69 22 2c 5c 75 30 30 65 64 3a 22 69 22 2c 5c 75 30 30 65 65 3a 22 69 22 2c 5c 75 30 30 65 66 3a 22 69 22 2c 5c 75 30 30 64 31 3a 22 4e 22 2c 5c 75 30 30 66 31 3a 22 6e 22 2c 5c 75 30 30 64 32 3a 22 4f 22 2c 5c 75 30 30 64 33 3a 22 4f 22 2c 5c 75 30 30 64 34 3a 22 4f 22 2c 5c 75 30 30 64 35 3a 22 4f 22 2c 5c 75 30 30 64 36 3a 22 4f 22 2c 5c 75 30 30 64 38 3a 22 4f 22 2c 5c 75 30 30 66 32 3a 22 6f 22 2c 5c 75 30 30 66 33 3a 22 6f 22 2c 5c 75 30 30 66 34 3a 22 6f 22 2c 5c 75 30 30 66 35 3a 22 6f 22 2c 5c 75 30 30 66 36 3a 22 6f 22 2c 5c 75 30 30 66 38 3a 22 6f 22 2c 5c 75 30 30 64 39 3a 22 55 22 2c 5c 75 30 30 Data Ascii: 00cc:"I",\u00cd:"I",\u00ce:"I",\u00cf:"I",\u00ec:"i",\u00ed:"i",\u00ee:"i",\u00ef:"i",\u00d1:"N",\u00f1:"n",\u00d2:"O",\u00d3:"O",\u00d4:"O",\u00d5:"O",\u00d6:"O",\u00d8:"O",\u00f2:"o",\u00f3:"o",\u00f4:"o",\u00f5:"o",\u00f6:"o",\u00f8:"o",\u00d9:"U",\u00
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 30 2c 76 61 6c 75 65 3a 24 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 66 5b 7a 5d 3d 24 7d 66 75 6e 63 74 69 6f 6e 20 46 6f 28 66 2c 7a 29 7b 66 6f 72 28 76 61 72 20 24 3d 2d 31 2c 48 65 3d 7a 2e 6c 65 6e 67 74 68 2c 41 74 3d 5f 30 28 48 65 29 2c 6e 30 3d 6e 75 6c 6c 3d 3d 66 3b 2b 2b 24 3c 48 65 3b 29 41 74 5b 24 5d 3d 6e 30 3f 69 3a 6b 75 28 66 2c 7a 5b 24 5d 29 3b 72 65 74 75 72 6e 20 41 74 7d 66 75 6e 63 74 69 6f 6e 20 72 6f 28 66 2c 7a 2c 24 29 7b 72 65 74 75 72 6e 20 66 3d 3d 66 26 26 28 24 21 3d 3d 69 26 26 28 66 3d 66 3c 3d 24 3f 66 3a 24 29 2c 7a 21 3d 3d 69 26 26 28 66 3d 66 3e 3d 7a 3f 66 3a 7a 29 29 2c 66 7d 66 75 6e 63 74 69 6f 6e 20 53 31 28 66 2c 7a 2c 24 2c 48 65 2c 41 74 2c 6e 30 29 7b 76 61 72 20 76 30 2c 71 30 3d 31 26 7a 2c 56 30 3d Data Ascii: 0,value:$,writable:!0}):f[z]=$}function Fo(f,z){for(var $=-1,He=z.length,At=_0(He),n0=null==f;++$<He;)At[$]=n0?i:ku(f,z[$]);return At}function ro(f,z,$){return f==f&&($!==i&&(f=f<=$?f:$),z!==i&&(f=f>=z?f:z)),f}function S1(f,z,$,He,At,n0){var v0,q0=1&z,V0=
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 72 28 24 2c 31 29 2e 6a 6f 69 6e 28 22 22 29 3a 7a 2e 73 6c 69 63 65 28 31 29 3b 72 65 74 75 72 6e 20 48 65 5b 66 5d 28 29 2b 41 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 73 28 66 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 7a 29 7b 72 65 74 75 72 6e 20 6e 31 28 50 6c 28 47 63 28 7a 29 2e 72 65 70 6c 61 63 65 28 76 69 2c 22 22 29 29 2c 66 2c 22 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 44 73 28 66 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 7a 3d 61 72 67 75 6d 65 6e 74 73 3b 73 77 69 74 63 68 28 7a 2e 6c 65 6e 67 74 68 29 7b 63 61 73 65 20 30 3a 72 65 74 75 72 6e 20 6e 65 77 20 66 3b 63 61 73 65 20 31 3a 72 65 74 75 72 6e 20 6e 65 77 20 66 28 7a 5b 30 5d 29 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 6e 65 77 20 66 28 7a Data Ascii: r($,1).join(""):z.slice(1);return He[f]()+At}}function ts(f){return function(z){return n1(Pl(Gc(z).replace(vi,"")),f,"")}}function Ds(f){return function(){var z=arguments;switch(z.length){case 0:return new f;case 1:return new f(z[0]);case 2:return new f(z
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 48 61 28 66 29 7b 69 66 28 21 45 31 28 66 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 7a 3d 59 31 28 66 29 3b 72 65 74 75 72 6e 20 7a 3d 3d 6b 7c 7c 22 5b 6f 62 6a 65 63 74 20 44 4f 4d 45 78 63 65 70 74 69 6f 6e 5d 22 3d 3d 7a 7c 7c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 6d 65 73 73 61 67 65 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 66 2e 6e 61 6d 65 26 26 21 5a 73 28 66 29 7d 66 75 6e 63 74 69 6f 6e 20 65 61 28 66 29 7b 69 66 28 21 67 31 28 66 29 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 7a 3d 59 31 28 66 29 3b 72 65 74 75 72 6e 20 7a 3d 3d 50 7c 7c 7a 3d 3d 64 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 41 73 79 6e 63 46 75 6e 63 74 69 6f 6e 5d 22 3d 3d 7a 7c 7c 22 5b 6f 62 6a 65 63 74 20 50 72 6f 78 Data Ascii: function Ha(f){if(!E1(f))return!1;var z=Y1(f);return z==k\|\|"[object DOMException]"==z\|\|"string"==typeof f.message&&"string"==typeof f.name&&!Zs(f)}function ea(f){if(!g1(f))return!1;var z=Y1(f);return z==P\|\|z==de\|\|"[object AsyncFunction]"==z\|\|"[object Prox

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:41 UTC	609	OUT	GET /main.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:41 UTC	732	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 5038905 Connection: close x-amz-id-2: FyUU9J8pPC4TRguVGV0ddMvp9bNI26Cmw3Zy3/Fo1s0P6vZHtVjrSeEv6GtfVVbdfaSLTeZZ9Ow= x-amz-request-id: NAJ9KC5WESAA5Z4R Date: Thu, 20 Mar 2025 14:42:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: 15qGpn8oE96YmaoSoLwOVtWAuAOZJp8O ETag: "96bb5bfe789e727c58b9ba53da66d877" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 73a725fa02f9ec8c532ae0d445890568.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: D8rao2BNnLIHIinA5a59FGlEib__9QzlcNJggUIIHd2IlSCPU0guqg==
2025-03-20 14:42:41 UTC	15652	IN	Data Raw: 76 61 72 20 56 69 2c 59 69 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 2c 75 43 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 24 69 3d 28 4c 74 2c 66 74 29 3d 3e 59 69 28 75 43 28 4c 74 2c 22 72 61 77 22 2c 7b 76 61 6c 75 65 3a 59 69 28 66 74 7c 7c 4c 74 2e 73 6c 69 63 65 28 29 29 7d 29 29 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 6d 61 69 6e 22 5d 2c 7b 38 31 30 37 38 3a 28 4c 74 2c 66 74 2c 63 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 2e 64 28 66 74 2c 7b 46 3a 28 29 3d 3e 6d 2c 51 3a 28 29 3d 3e 6f 74 7d 29 3b 76 61 72 20 75 3d 63 28 38 34 34 31 32 29 2c 74 3d 63 28 39 36 33 35 34 29 2c 63 74 Data Ascii: var Vi,Yi=Object.freeze,uC=Object.defineProperty,$i=(Lt,ft)=>Yi(uC(Lt,"raw",{value:Yi(ft\|\|Lt.slice())}));(self.webpackChunktla=self.webpackChunktla\|\|[]).push([["main"],{81078:(Lt,ft,c)=>{"use strict";c.d(ft,{F:()=>m,Q:()=>ot});var u=c(84412),t=c(96354),ct
2025-03-20 14:42:41 UTC	2246	IN	Data Raw: 73 65 73 73 69 6f 6e 54 6f 6b 65 6e 29 3a 22 26 63 6f 6d 70 6f 6e 65 6e 74 73 3d 63 6f 75 6e 74 72 79 3a 69 6c 22 2c 6e 65 77 20 75 2e 63 28 68 3d 3e 7b 74 68 69 73 2e 68 74 74 70 43 6c 69 65 6e 74 2e 67 65 74 28 22 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 62 72 69 64 67 65 55 72 6c 2c 22 2f 6d 61 70 73 2d 67 6f 6f 67 6c 65 2d 61 70 69 73 2f 6d 61 70 73 2f 61 70 69 2f 70 6c 61 63 65 2f 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2f 6a 73 6f 6e 3f 22 29 2e 63 6f 6e 63 61 74 28 44 29 29 2e 73 75 62 73 63 72 69 62 65 28 6b 3d 3e 7b 69 66 28 28 6e 75 6c 6c 3d 3d 6b 3f 76 6f 69 64 20 30 3a 6b 2e 73 74 61 74 75 73 29 21 3d 3d 67 6f 6f 67 6c 65 2e 6d 61 70 73 2e 70 6c 61 63 65 73 2e 50 6c 61 63 65 73 53 65 72 76 69 63 65 53 74 61 74 75 73 2e 4f 4b 26 26 28 6e 75 6c 6c Data Ascii: sessionToken):"&components=country:il",new u.c(h=>{this.httpClient.get("".concat(this.bridgeUrl,"/maps-google-apis/maps/api/place/autocomplete/json?").concat(D)).subscribe(k=>{if((null==k?void 0:k.status)!==google.maps.places.PlacesServiceStatus.OK&&(null
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 61 74 74 65 64 5f 61 64 64 72 65 73 73 3d 74 68 69 73 2e 66 69 78 53 70 65 63 69 61 6c 43 68 61 72 73 28 42 2e 66 6f 72 6d 61 74 74 65 64 5f 61 64 64 72 65 73 73 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 71 3d 50 2e 6d 61 74 63 68 28 2f 28 5c 64 2b 29 2f 29 3b 51 2e 73 74 72 65 65 74 26 26 71 26 26 71 5b 30 5d 3f 28 51 2e 68 6f 75 73 65 3d 71 5b 30 5d 2c 51 2e 66 6f 72 6d 61 74 74 65 64 5f 61 64 64 72 65 73 73 3d 22 22 2e 63 6f 6e 63 61 74 28 51 2e 73 74 72 65 65 74 2c 22 20 22 29 2e 63 6f 6e 63 61 74 28 51 2e 68 6f 75 73 65 2c 22 2c 20 22 29 2e 63 6f 6e 63 61 74 28 51 2e 6c 6f 63 61 6c 69 74 79 29 29 3a 51 2e 70 61 72 74 69 61 6c 3d 21 30 7d 6b 2e 6e 65 78 74 28 51 7c 7c 7b 7d 29 2c 6b 2e 63 6f 6d 70 6c 65 74 65 28 29 7d 2c 77 3d 3e 6b 2e 65 72 72 6f 72 28 Data Ascii: atted_address=this.fixSpecialChars(B.formatted_address);else{const q=P.match(/(\d+)/);Q.street&&q&&q[0]?(Q.house=q[0],Q.formatted_address="".concat(Q.street," ").concat(Q.house,", ").concat(Q.locality)):Q.partial=!0}k.next(Q\|\|{}),k.complete()},w=>k.error(
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 6e 66 69 67 3d 63 74 2e 63 2e 61 70 70 43 6f 6e 66 69 67 7d 67 65 74 43 6f 75 6e 74 72 69 65 73 4c 69 73 74 28 29 7b 76 61 72 20 52 2c 73 2c 58 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 28 52 3d 74 68 69 73 2e 63 6f 75 6e 74 72 69 65 73 4c 69 73 74 29 26 26 76 6f 69 64 20 30 21 3d 3d 52 26 26 52 2e 6c 65 6e 67 74 68 3f 28 30 2c 75 2e 6f 66 29 28 74 68 69 73 2e 63 6f 75 6e 74 72 69 65 73 4c 69 73 74 29 3a 74 68 69 73 2e 68 74 74 70 2e 67 65 74 28 22 22 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 3d 28 73 3d 74 68 69 73 2e 61 70 70 43 6f 6e 66 69 67 2e 6c 6f 63 61 6c 69 7a 61 74 69 6f 6e 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 73 3f 76 6f 69 64 20 30 3a 73 2e 70 61 74 68 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 75 6c 6c 3d 3d 3d 28 58 3d 74 68 69 73 2e 61 70 Data Ascii: nfig=ct.c.appConfig}getCountriesList(){var R,s,X;return null!==(R=this.countriesList)&&void 0!==R&&R.length?(0,u.of)(this.countriesList):this.http.get("".concat(null===(s=this.appConfig.localization)\|\|void 0===s?void 0:s.path,"/").concat(null===(X=this.ap
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 33 39 2e 36 2d 33 39 2e 36 63 34 2e 37 2d 34 2e 37 20 31 32 2e 33 2d 34 2e 37 20 31 37 20 30 6c 36 35 20 36 35 2e 37 20 36 35 2e 31 2d 36 35 2e 36 63 34 2e 37 2d 34 2e 37 20 31 32 2e 33 2d 34 2e 37 20 31 37 20 30 6c 33 39 2e 36 20 33 39 2e 36 63 34 2e 37 20 34 2e 37 20 34 2e 37 20 31 32 2e 33 20 30 20 31 37 4c 33 31 32 20 32 35 36 6c 36 35 2e 36 20 36 35 2e 31 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 5c 22 29 7d 2e 74 6f 61 73 74 2d 73 75 63 63 65 73 73 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e Data Ascii: 39.6-39.6c4.7-4.7 12.3-4.7 17 0l65 65.7 65.1-65.6c4.7-4.7 12.3-4.7 17 0l39.6 39.6c4.7 4.7 4.7 12.3 0 17L312 256l65.6 65.1z'/%3E%3C/svg%3E\")}.toast-success[_ngcontent-%COMP%]{background-image:url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 36 34 20 35 2e 36 30 39 20 31 31 2e 33 34 36 20 31 31 2e 39 38 32 20 31 31 2e 33 34 36 68 34 38 2e 35 34 36 63 36 2e 33 37 33 20 30 20 31 31 2e 36 33 35 2d 34 2e 39 38 32 20 31 31 2e 39 38 32 2d 31 31 2e 33 34 36 6c 37 2e 34 31 38 2d 31 33 36 63 2e 33 37 35 2d 36 2e 38 37 34 2d 35 2e 30 39 38 2d 31 32 2e 36 35 34 2d 31 31 2e 39 38 32 2d 31 32 2e 36 35 34 68 2d 36 33 2e 33 38 33 63 2d 36 2e 38 38 34 20 30 2d 31 32 2e 33 35 36 20 35 2e 37 38 2d 31 31 2e 39 38 31 20 31 32 2e 36 35 34 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 5c 22 29 7d 2e 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 74 6f 61 73 74 2d 74 6f 70 2d 63 65 6e 74 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6e 67 78 2d 74 6f 61 73 74 72 5b 5f 6e 67 63 6f 6e Data Ascii: 64 5.609 11.346 11.982 11.346h48.546c6.373 0 11.635-4.982 11.982-11.346l7.418-136c.375-6.874-5.098-12.654-11.982-12.654h-63.383c-6.884 0-12.356 5.78-11.981 12.654z'/%3E%3C/svg%3E\")}.toast-container.toast-top-center[_ngcontent-%COMP%] .ngx-toastr[_ngcon
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 6f 61 73 74 2d 77 61 72 6e 69 6e 67 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 35 37 36 20 35 31 32 27 20 77 69 64 74 68 3d 27 35 37 36 27 20 68 65 69 67 68 74 3d 27 35 31 32 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 27 20 64 3d 27 4d 35 36 39 2e 35 31 37 20 34 34 30 2e 30 31 33 43 35 38 37 2e 39 37 35 20 34 37 32 2e 30 30 37 20 35 36 34 2e 38 30 36 20 35 Data Ascii: oast-warning[_ngcontent-%COMP%]{background-image:url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 576 512' width='576' height='512'%3E%3Cpath fill='rgb(255,255,255)' d='M569.517 440.013C587.975 472.007 564.806 5
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 61 74 2d 64 69 61 6c 6f 67 2d 63 6c 6f 73 65 22 2c 21 31 29 2c 6d 2e 52 37 24 28 29 2c 6d 2e 53 70 49 28 22 20 22 2c 6d 2e 62 4d 54 28 31 30 2c 31 33 2c 22 43 61 6e 63 65 6c 22 29 2c 22 20 22 29 29 7d 2c 64 65 70 65 6e 64 65 6e 63 69 65 73 3a 5b 73 2e 24 7a 2c 76 2e 74 78 2c 76 2e 45 37 2c 76 2e 59 69 2c 58 2e 44 39 5d 2c 73 74 79 6c 65 73 3a 5b 22 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 7b 77 69 64 74 68 3a 34 38 30 70 78 7d 7d 2e 6d 61 74 2d 6d 64 63 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 Data Ascii: at-dialog-close",!1),m.R7$(),m.SpI(" ",m.bMT(10,13,"Cancel")," "))},dependencies:[s.$z,v.tx,v.E7,v.Yi,X.D9],styles:["[_nghost-%COMP%]{display:block}@media screen and (min-width: 768px){[_nghost-%COMP%]{width:480px}}.mat-mdc-dialog-content[_ngcontent-%COMP
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 74 49 74 65 6d 28 22 74 6f 6b 65 6e 22 29 7c 7c 28 74 68 69 73 2e 61 75 74 68 53 65 72 76 69 63 65 2e 73 65 74 48 74 74 70 48 65 61 64 65 72 73 41 63 63 65 73 73 54 6f 6b 65 6e 28 74 68 69 73 2e 73 74 6f 72 61 67 65 53 65 72 76 69 63 65 2e 67 65 74 49 74 65 6d 28 22 74 6f 6b 65 6e 22 29 29 2c 21 31 29 7d 67 65 74 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 75 74 68 53 65 72 76 69 63 65 2e 67 65 74 41 6e 6f 6e 79 6d 6f 75 73 54 6f 6b 65 6e 28 29 7d 75 73 65 72 49 6e 66 6f 28 62 2c 43 29 7b 72 65 74 75 72 6e 5b 43 3f 74 68 69 73 2e 67 65 74 41 6c 6c 65 72 67 69 65 73 28 29 3a 6e 75 6c 6c 2c 74 68 69 73 2e 67 65 74 28 22 2f 6f 6e 6c 69 6e 65 2d 73 68 6f 70 70 65 72 2f 63 75 73 74 6f 6d 65 72 73 2f 63 75 72 72 65 Data Ascii: tItem("token")\|\|(this.authService.setHttpHeadersAccessToken(this.storageService.getItem("token")),!1)}getAnonymousToken(){return this.authService.getAnonymousToken()}userInfo(b,C){return[C?this.getAllergies():null,this.get("/online-shopper/customers/curre
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 63 2e 61 70 70 43 6f 6e 66 69 67 7d 70 72 65 70 61 72 65 55 73 65 72 28 44 29 7b 6c 65 74 20 68 3d 28 30 2c 78 2e 41 29 28 7b 77 61 6c 6c 65 74 3a 6e 75 6c 6c 2c 72 61 6e 6b 53 63 6f 72 65 3a 32 30 30 2c 61 76 61 74 61 72 3a 74 68 69 73 2e 61 70 70 53 65 72 76 69 63 65 2e 62 61 73 65 28 22 61 73 73 65 74 73 2f 69 6d 61 67 65 73 2f 61 76 61 74 61 72 5f 69 63 6f 6e 2e 73 76 67 22 29 2c 6c 6f 79 61 6c 74 79 43 75 73 74 6f 6d 65 72 3a 74 68 69 73 2e 61 70 70 53 65 72 76 69 63 65 2e 75 73 65 72 3f 74 68 69 73 2e 61 70 70 53 65 72 76 69 63 65 2e 75 73 65 72 2e 6c 6f 79 61 6c 74 79 43 75 73 74 6f 6d 65 72 3a 6e 75 6c 6c 7d 2c 44 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 61 6c 63 75 6c 61 74 65 55 73 65 72 52 61 6e 6b 28 68 29 2c 68 2e 72 61 6e 6b 49 6d 61 67 Data Ascii: c.appConfig}prepareUser(D){let h=(0,x.A)({wallet:null,rankScore:200,avatar:this.appService.base("assets/images/avatar_icon.svg"),loyaltyCustomer:this.appService.user?this.appService.user.loyaltyCustomer:null},D);return this.calculateUserRank(h),h.rankImag

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:41 UTC	662	OUT	GET /src_app_online-reservations_online-reservations_module_ts.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:41 UTC	731	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 766283 Connection: close x-amz-id-2: rLeI9HZb0aOAs2LVl+qfpJPLFXRWO7+V0rJkFupJYWl1XvLLPww2jhA1lncTpdAOxxp/8DAkm1s= x-amz-request-id: NAJD6DB5S1KF3093 Date: Thu, 20 Mar 2025 14:42:42 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: 0uPU9eiZfhtL3tar6C9cpd2Cv2lQ9ghV ETag: "ed1ec32b772b61a4c6fe2504d740c2ca" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 8a7d8c5d00025d5082538e58b376bbb2.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: a3YXD_tLl626F8vPJgiCRGnJjnoTTbW_t7LPWsC4EzY3f6Ir_pgenw==
2025-03-20 14:42:41 UTC	12888	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 65 2c 5f 65 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 2c 50 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 75 65 3d 28 50 74 2c 68 74 29 3d 3e 5f 65 28 50 73 28 50 74 2c 22 72 61 77 22 2c 7b 76 61 6c 75 65 3a 5f 65 28 68 74 7c 7c 50 74 2e 73 6c 69 63 65 28 29 29 7d 29 29 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 72 63 5f 61 70 70 5f 6f 6e 6c 69 6e 65 2d 72 65 73 65 72 76 61 74 69 6f 6e 73 5f 6f 6e 6c 69 6e 65 2d 72 65 73 65 72 76 61 74 69 6f 6e 73 5f 6d 6f 64 75 6c 65 5f 74 73 22 5d 2c 7b 34 30 36 32 32 3a 28 50 74 2c 68 74 2c 70 29 3d 3e 7b 70 2e Data Ascii: "use strict";var fe,_e=Object.freeze,Ps=Object.defineProperty,ue=(Pt,ht)=>_e(Ps(Pt,"raw",{value:_e(ht\|\|Pt.slice())}));(self.webpackChunktla=self.webpackChunktla\|\|[]).push([["src_app_online-reservations_online-reservations_module_ts"],{40622:(Pt,ht,p)=>{p.
2025-03-20 14:42:41 UTC	16384	IN	Data Raw: 39 39 38 20 39 2e 39 39 37 2d 32 36 2e 32 30 37 20 39 2e 39 39 37 2d 33 36 2e 32 30 34 2d 2e 30 30 31 7a 27 2f 25 33 45 25 33 43 2f 73 76 67 25 33 45 5c 22 29 7d 2e 74 6f 61 73 74 2d 77 61 72 6e 69 6e 67 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 35 37 36 20 35 31 32 27 20 77 69 64 74 68 3d 27 35 37 36 27 20 68 65 69 67 68 74 3d 27 35 31 32 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 72 67 62 28 32 35 35 Data Ascii: 998 9.997-26.207 9.997-36.204-.001z'/%3E%3C/svg%3E\")}.toast-warning[_ngcontent-%COMP%]{background-image:url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 576 512' width='576' height='512'%3E%3Cpath fill='rgb(255
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 35 32 35 32 35 32 3b 2d 2d 70 61 6c 65 74 74 65 2d 6e 65 75 74 72 61 6c 2d 38 30 3a 20 23 34 37 34 37 34 37 3b 2d 2d 70 61 6c 65 74 74 65 2d 6e 65 75 74 72 61 6c 2d 39 30 3a 20 23 33 33 33 33 33 33 3b 2d 2d 70 61 6c 65 74 74 65 2d 6e 65 75 74 72 61 6c 2d 39 35 3a 20 23 33 31 33 39 33 62 3b 2d 2d 70 61 6c 65 74 74 65 2d 6e 65 75 74 72 61 6c 2d 31 30 30 3a 20 23 32 32 32 32 32 32 3b 2d 2d 70 61 6c 65 74 74 65 2d 6e 65 75 74 72 61 6c 2d 31 31 30 3a 20 23 31 65 32 33 32 34 3b 2d 2d 70 61 6c 65 74 74 65 2d 6e 65 75 74 72 61 6c 2d 31 32 30 3a 20 23 31 34 31 34 31 34 3b 2d 2d 70 61 6c 65 74 74 65 2d 74 75 72 71 75 6f 69 73 65 2d 31 30 3a 20 23 65 33 66 39 66 39 3b 2d 2d 70 61 6c 65 74 74 65 2d 74 75 72 71 75 6f 69 73 65 2d 37 30 3a 20 23 45 38 46 41 46 41 3b 2d Data Ascii: 525252;--palette-neutral-80: #474747;--palette-neutral-90: #333333;--palette-neutral-95: #31393b;--palette-neutral-100: #222222;--palette-neutral-110: #1e2324;--palette-neutral-120: #141414;--palette-turquoise-10: #e3f9f9;--palette-turquoise-70: #E8FAFA;-
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 31 35 70 78 3b 2d 2d 64 61 72 6b 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 20 72 67 62 61 28 62 6c 61 63 6b 2c 20 2e 38 37 29 3b 2d 2d 6c 69 67 68 74 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 3a 20 23 46 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 74 68 65 6d 65 2d 35 30 3a 20 23 65 35 66 39 66 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 74 68 65 6d 65 2d 31 30 30 3a 20 23 41 36 45 33 45 34 3b 2d 2d 70 72 69 6d 61 72 79 2d 74 68 65 6d 65 2d 32 30 30 3a 20 23 39 34 65 36 66 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 74 68 65 6d 65 2d 33 30 30 3a 20 23 36 39 64 63 66 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 74 68 65 6d 65 2d 34 30 30 3a 20 23 34 39 64 35 66 66 3b 2d 2d 70 72 69 6d 61 72 79 2d 74 68 65 6d 65 2d 35 30 30 3a 20 23 30 43 41 33 41 36 3b 2d 2d 70 72 69 6d 61 72 79 2d 74 68 Data Ascii: 15px;--dark-primary-text: rgba(black, .87);--light-primary-text: #FFF;--primary-theme-50: #e5f9ff;--primary-theme-100: #A6E3E4;--primary-theme-200: #94e6ff;--primary-theme-300: #69dcff;--primary-theme-400: #49d5ff;--primary-theme-500: #0CA3A6;--primary-th
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 69 26 26 74 2e 6e 72 6d 28 30 2c 22 6f 63 63 61 73 69 6f 6e 73 22 2c 33 38 29 2c 32 26 69 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 58 70 47 28 29 2e 24 69 6d 70 6c 69 63 69 74 2c 65 3d 74 2e 58 70 47 28 32 29 3b 74 2e 59 38 47 28 22 6f 63 63 61 73 69 6f 6e 73 22 2c 6e 2e 6f 63 63 61 73 69 6f 6e 73 29 28 22 72 65 66 65 72 65 6e 63 65 50 6f 69 6e 74 22 2c 6e 2e 76 61 6c 75 65 7c 7c 6e 29 28 22 61 63 74 69 76 65 4d 6f 64 65 6c 22 2c 65 2e 63 72 65 61 74 65 52 65 73 65 72 76 61 74 69 6f 6e 53 65 72 76 69 63 65 2e 61 63 74 69 76 65 4d 6f 64 65 6c 29 28 22 74 69 6d 65 7a 6f 6e 65 22 2c 65 2e 74 69 6d 65 7a 6f 6e 65 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 6e 28 69 2c 72 29 7b 69 66 28 31 26 69 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 52 56 36 28 29 3b 74 2e 6a 34 31 28 30 Data Ascii: i&&t.nrm(0,"occasions",38),2&i){const n=t.XpG().$implicit,e=t.XpG(2);t.Y8G("occasions",n.occasions)("referencePoint",n.value\|\|n)("activeModel",e.createReservationService.activeModel)("timezone",e.timezone)}}function en(i,r){if(1&i){const n=t.RV6();t.j41(0
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 74 2d 77 61 72 6e 69 6e 67 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 5c 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 38 2c 25 33 43 73 76 67 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 35 37 36 20 35 31 32 27 20 77 69 64 74 68 3d 27 35 37 36 27 20 68 65 69 67 68 74 3d 27 35 31 32 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 27 20 64 3d 27 4d 35 36 39 2e 35 31 37 20 34 34 30 2e 30 31 33 43 35 38 37 2e 39 37 35 20 34 37 32 2e 30 30 37 20 35 36 34 2e 38 30 36 20 35 31 32 20 Data Ascii: t-warning[_ngcontent-%COMP%]{background-image:url(\"data:image/svg+xml;charset=utf8,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 576 512' width='576' height='512'%3E%3Cpath fill='rgb(255,255,255)' d='M569.517 440.013C587.975 472.007 564.806 512
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 23 45 30 45 30 45 30 3b 2d 2d 74 68 65 6d 65 2d 33 35 30 3a 20 23 44 44 44 3b 2d 2d 74 68 65 6d 65 2d 34 30 30 3a 20 23 42 44 42 44 42 44 3b 2d 2d 74 68 65 6d 65 2d 35 30 30 3a 20 23 39 45 39 45 39 45 3b 2d 2d 74 68 65 6d 65 2d 36 30 30 3a 20 23 37 35 37 35 37 35 3b 2d 2d 74 68 65 6d 65 2d 37 30 30 3a 20 23 36 31 36 31 36 31 3b 2d 2d 74 68 65 6d 65 2d 38 30 30 3a 20 23 34 32 34 32 34 32 3b 2d 2d 74 68 65 6d 65 2d 39 30 30 3a 20 23 32 31 32 31 32 31 3b 2d 2d 74 68 65 6d 65 2d 31 30 30 30 3a 20 23 30 30 30 3b 2d 2d 74 68 65 6d 65 2d 41 31 30 3a 20 23 46 46 46 3b 2d 2d 74 68 65 6d 65 2d 41 31 30 30 3a 20 23 46 46 46 3b 2d 2d 74 68 65 6d 65 2d 41 32 30 30 3a 20 23 45 45 45 3b 2d 2d 74 68 65 6d 65 2d 41 33 30 30 3a 20 23 45 44 45 44 45 44 3b 2d 2d 74 68 65 6d Data Ascii: #E0E0E0;--theme-350: #DDD;--theme-400: #BDBDBD;--theme-500: #9E9E9E;--theme-600: #757575;--theme-700: #616161;--theme-800: #424242;--theme-900: #212121;--theme-1000: #000;--theme-A10: #FFF;--theme-A100: #FFF;--theme-A200: #EEE;--theme-A300: #EDEDED;--them
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 74 6f 61 73 74 2d 74 6f 70 2d 6c 65 66 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 74 6f 70 3a 31 32 70 78 3b 6c 65 66 74 3a 31 32 70 78 7d 2e 74 6f 61 73 74 2d 74 6f 70 2d 72 69 67 68 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 74 6f 70 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 74 6f 61 73 74 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 72 69 67 68 74 3a 31 32 70 78 3b 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 74 6f 61 73 74 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 6f 74 Data Ascii: ntent-%COMP%]{bottom:0;right:0;width:100%}.toast-top-left[_ngcontent-%COMP%]{top:12px;left:12px}.toast-top-right[_ngcontent-%COMP%]{top:12px;right:12px}.toast-bottom-right[_ngcontent-%COMP%]{right:12px;bottom:12px}.toast-bottom-left[_ngcontent-%COMP%]{bot
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 5d 7b 70 61 64 64 69 6e 67 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 39 39 7d 2e 63 6f 72 64 6f 76 61 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 65 6e 76 28 73 61 66 65 2d 61 72 65 61 2d 69 6e 73 65 74 2d 62 6f 74 74 6f Data Ascii: ]{padding:0;cursor:pointer;background:transparent;border:0}.toast-container[_ngcontent-%COMP%]{pointer-events:none;position:fixed;z-index:999999}.cordova[_ngcontent-%COMP%] .toast-container[_ngcontent-%COMP%]{margin-bottom:calc(env(safe-area-inset-botto
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 74 2e 6a 34 31 28 30 2c 22 64 69 76 22 2c 34 30 29 2c 74 2e 44 4e 45 28 31 2c 7a 6e 2c 33 2c 36 2c 22 64 69 76 22 2c 34 31 29 28 32 2c 55 6e 2c 34 2c 37 2c 22 64 69 76 22 2c 34 32 29 28 33 2c 4a 6e 2c 36 2c 34 2c 22 64 69 76 22 2c 34 33 29 28 34 2c 57 6e 2c 38 2c 36 2c 22 64 69 76 22 2c 34 34 29 2c 74 2e 6b 30 73 28 29 29 2c 32 26 69 29 7b 63 6f 6e 73 74 20 6e 3d 74 2e 58 70 47 28 29 3b 74 2e 52 37 24 28 29 2c 74 2e 59 38 47 28 22 6e 67 49 66 22 2c 6e 75 6c 6c 3d 3d 6e 2e 72 65 73 70 6f 6e 73 65 44 61 74 61 3f 6e 75 6c 6c 3a 6e 2e 72 65 73 70 6f 6e 73 65 44 61 74 61 2e 64 65 73 63 72 69 70 74 69 6f 6e 5f 73 74 72 69 6e 67 29 2c 74 2e 52 37 24 28 29 2c 74 2e 59 38 47 28 22 6e 67 49 66 22 2c 6e 75 6c 6c 3d 3d 6e 2e 72 65 73 70 6f 6e 73 65 44 61 74 61 7c 7c Data Ascii: t.j41(0,"div",40),t.DNE(1,zn,3,6,"div",41)(2,Un,4,7,"div",42)(3,Jn,6,4,"div",43)(4,Wn,8,6,"div",44),t.k0s()),2&i){const n=t.XpG();t.R7$(),t.Y8G("ngIf",null==n.responseData?null:n.responseData.description_string),t.R7$(),t.Y8G("ngIf",null==n.responseData\|\|

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:42 UTC	644	OUT	GET /src_app_gift-cards_gift-cards_module_ts.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:42 UTC	731	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 299472 Connection: close x-amz-id-2: RoJdw7/DSfXOAOVMdKSo15DZ56Yc6nx1/yUjVCoFRXaQY2HoJp8AT/piC3mpWqnsLfp6bqbJDx0= x-amz-request-id: H160MCRGBPCB2C8E Date: Thu, 20 Mar 2025 14:42:43 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: kKVybRf13kcbDChfY05eX.LrVKCju.Lu ETag: "9a5da1cd3a24773ded5a0f41756c624e" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 18ea14e618c57b64a442b054083b4ed6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: SHzetpt0Bx5H0qjXoP6Bab-fgb1QykkgrMe3379xkgCB8g0_ZQ_kew==
2025-03-20 14:42:42 UTC	15358	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 72 63 5f 61 70 70 5f 67 69 66 74 2d 63 61 72 64 73 5f 67 69 66 74 2d 63 61 72 64 73 5f 6d 6f 64 75 6c 65 5f 74 73 22 5d 2c 7b 37 36 30 33 30 3a 28 54 6e 2c 56 2c 6c 29 3d 3e 7b 6c 2e 72 28 56 29 2c 6c 2e 64 28 56 2c 7b 47 69 66 74 43 61 72 64 73 4d 6f 64 75 6c 65 3a 28 29 3d 3e 49 6e 7d 29 3b 76 61 72 20 6d 3d 6c 28 36 30 31 37 37 29 2c 64 3d 6c 28 38 39 34 31 37 29 2c 6e 74 3d 6c 28 33 35 32 38 36 29 2c 6f 74 3d 6c 28 39 37 31 39 32 29 2c 61 74 3d 6c 28 36 32 30 33 38 29 2c 52 3d 6c 28 39 36 38 35 30 29 2c 72 74 3d 6c 28 33 39 30 32 29 2c 50 3d 6c Data Ascii: "use strict";(self.webpackChunktla=self.webpackChunktla\|\|[]).push([["src_app_gift-cards_gift-cards_module_ts"],{76030:(Tn,V,l)=>{l.r(V),l.d(V,{GiftCardsModule:()=>In});var m=l(60177),d=l(89417),nt=l(35286),ot=l(97192),at=l(62038),R=l(96850),rt=l(3902),P=l
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 74 68 65 6d 65 2d 30 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 68 65 6d 65 2d 35 30 30 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 39 70 78 20 2d 32 70 78 20 23 30 30 30 36 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 74 72 61 63 6b 65 72 2d 73 74 65 70 73 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 74 72 61 63 6b 65 72 2d 73 74 65 70 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 Data Ascii: nt:center;align-items:center;border-radius:100%;background:var(--theme-0);color:var(--primary-theme-500);box-shadow:0 2px 9px -2px #0006;font-size:inherit}[_nghost-%COMP%] .tracker-steps[_ngcontent-%COMP%] .tracker-step-container[_ngcontent-%COMP%]
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 7d 2e 6e 67 78 2d 74 6f 61 73 74 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 33 30 33 30 33 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 61 75 74 6f 7d 2e 74 6f 61 73 74 2d 73 75 63 63 65 73 73 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 31 61 33 35 31 7d 2e 74 6f 61 73 74 2d 65 72 72 6f 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 33 36 32 66 7d 2e 74 6f 61 73 74 2d 69 6e 66 6f 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 62 61 63 6b 67 72 6f 75 Data Ascii: :auto;margin-right:auto}.ngx-toastr[_ngcontent-%COMP%]{background-color:#030303;pointer-events:auto}.toast-success[_ngcontent-%COMP%]{background-color:#51a351}.toast-error[_ngcontent-%COMP%]{background-color:#bd362f}.toast-info[_ngcontent-%COMP%]{backgrou
2025-03-20 14:42:42 UTC	16338	IN	Data Raw: 49 31 28 33 2c 22 74 72 61 6e 73 6c 61 74 65 22 29 2c 74 2e 6b 30 73 28 29 2c 74 2e 62 56 6d 28 29 29 2c 32 26 6e 26 26 28 74 2e 52 37 24 28 32 29 2c 74 2e 4a 52 68 28 74 2e 62 4d 54 28 33 2c 31 2c 22 47 49 46 54 5f 43 41 52 44 5f 53 48 4f 50 2e 76 61 6c 69 64 61 74 69 6f 6e 5f 65 72 72 6f 72 73 2e 6e 6f 5f 64 65 63 69 6d 61 6c 22 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 6e 2c 72 29 7b 31 26 6e 26 26 28 74 2e 71 65 78 28 30 29 2c 74 2e 6a 34 31 28 31 2c 22 73 70 61 6e 22 2c 31 32 29 2c 74 2e 45 46 46 28 32 29 2c 74 2e 6e 49 31 28 33 2c 22 74 72 61 6e 73 6c 61 74 65 22 29 2c 74 2e 6b 30 73 28 29 2c 74 2e 62 56 6d 28 29 29 2c 32 26 6e 26 26 28 74 2e 52 37 24 28 32 29 2c 74 2e 4a 52 68 28 74 2e 62 4d 54 28 33 2c 31 2c 22 47 49 46 54 5f 43 41 52 44 5f Data Ascii: I1(3,"translate"),t.k0s(),t.bVm()),2&n&&(t.R7$(2),t.JRh(t.bMT(3,1,"GIFT_CARD_SHOP.validation_errors.no_decimal")))}function Tt(n,r){1&n&&(t.qex(0),t.j41(1,"span",12),t.EFF(2),t.nI1(3,"translate"),t.k0s(),t.bVm()),2&n&&(t.R7$(2),t.JRh(t.bMT(3,1,"GIFT_CARD_
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 20 35 31 32 27 20 77 69 64 74 68 3d 27 35 31 32 27 20 68 65 69 67 68 74 3d 27 35 31 32 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 27 20 64 3d 27 4d 32 35 36 20 38 43 31 31 39 20 38 20 38 20 31 31 39 20 38 20 32 35 36 73 31 31 31 20 32 34 38 20 32 34 38 20 32 34 38 20 32 34 38 2d 31 31 31 20 32 34 38 2d 32 34 38 53 33 39 33 20 38 20 32 35 36 20 38 7a 6d 31 32 31 2e 36 20 33 31 33 2e 31 63 34 2e 37 20 34 2e 37 20 34 2e 37 20 31 32 2e 33 20 30 20 31 37 4c 33 33 38 20 33 37 37 2e 36 63 2d 34 2e 37 20 34 2e 37 2d 31 32 2e 33 20 34 2e 37 2d 31 37 20 30 4c 32 35 36 20 33 31 32 6c 2d 36 35 2e 31 20 36 35 2e 36 63 2d 34 2e 37 20 34 2e 37 2d 31 32 2e 33 20 34 2e 37 2d 31 37 20 30 4c 31 33 34 2e 34 20 33 33 Data Ascii: 512' width='512' height='512'%3E%3Cpath fill='rgb(255,255,255)' d='M256 8C119 8 8 119 8 256s111 248 248 248 248-111 248-248S393 8 256 8zm121.6 313.1c4.7 4.7 4.7 12.3 0 17L338 377.6c-4.7 4.7-12.3 4.7-17 0L256 312l-65.1 65.6c-4.7 4.7-12.3 4.7-17 0L134.4 33
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 79 43 61 72 64 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 22 73 75 6d 6d 61 72 79 43 61 72 64 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 22 7d 2c 64 65 63 6c 73 3a 32 2c 76 61 72 73 3a 33 2c 63 6f 6e 73 74 73 3a 5b 5b 22 67 69 66 74 43 61 72 64 22 2c 22 22 5d 2c 5b 34 2c 22 6e 67 49 66 22 5d 2c 5b 31 2c 22 73 75 6d 6d 61 72 79 2d 64 65 74 61 69 6c 73 22 5d 2c 5b 22 61 63 63 65 73 73 69 62 6c 65 22 2c 22 22 2c 31 2c 22 73 75 6d 6d 61 72 79 2d 74 6f 70 2d 73 65 63 74 69 6f 6e 22 5d 2c 5b 31 2c 22 73 75 6d 6d 61 72 79 2d 72 6f 77 22 2c 22 75 73 65 72 2d 64 61 74 61 22 5d 2c 5b 31 2c 22 73 75 6d 6d 61 72 79 2d 6c 69 6e 65 73 22 5d 2c 5b 31 2c 22 73 75 6d 6d 61 72 79 2d 6c 69 6e 65 22 2c 22 75 73 65 72 2d 6e 61 6d 65 22 5d 2c 5b 22 63 6c 61 73 73 22 2c Data Ascii: yCardBackgroundImage:"summaryCardBackgroundImage"},decls:2,vars:3,consts:[["giftCard",""],[4,"ngIf"],[1,"summary-details"],["accessible","",1,"summary-top-section"],[1,"summary-row","user-data"],[1,"summary-lines"],[1,"summary-line","user-name"],["class",
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 5d 20 20 20 6d 61 74 2d 69 63 6f 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6c 65 66 74 3a 32 70 78 3b 63 6f 6c 6f 72 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 39 70 78 29 7b 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 7b 77 69 64 74 68 3a 32 31 72 65 6d 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 73 75 6d 6d 61 72 79 2d 64 65 74 61 69 6c 73 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 68 65 69 67 68 74 3a 31 33 2e 31 32 35 72 65 6d 3b 6d Data Ascii: ] mat-icon[_ngcontent-%COMP%]{position:relative;left:2px;color:#fff!important}@media screen and (min-width: 769px){[_nghost-%COMP%]{width:21rem;display:flex;justify-content:center}[_nghost-%COMP%] .summary-details[_ngcontent-%COMP%]{height:13.125rem;m
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 25 43 4f 4d 50 25 5d 7b 68 65 69 67 68 74 3a 2e 38 35 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 61 36 61 36 61 36 7d 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 77 61 6c 6c 65 74 2d 6f 70 74 69 6f 6e 73 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 77 61 6c 6c 65 74 2d 6f 70 74 69 6f 6e 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 70 61 79 6d 65 6e 74 2d 74 79 70 65 2d 74 6f 70 2d 63 6f 6e 74 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 70 61 79 6d 65 6e 74 2d 74 79 70 65 2d 63 6f 6d 6d 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 Data Ascii: %COMP%]{height:.85rem;width:100%;background:#a6a6a6}[_nghost-%COMP%] .wallet-options-container[_ngcontent-%COMP%] .wallet-option.list-group-item[_ngcontent-%COMP%] .payment-type-top-content[_ngcontent-%COMP%] .payment-type-comment[_ngcontent-%COMP
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 73 70 61 6e 22 2c 36 30 29 2c 74 2e 45 46 46 28 31 29 2c 74 2e 6b 30 73 28 29 29 2c 32 26 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 58 70 47 28 32 29 2e 6e 67 49 66 2c 65 3d 74 2e 58 70 47 28 29 3b 74 2e 52 37 24 28 29 2c 74 2e 53 70 49 28 22 20 22 2c 65 2e 67 65 74 42 6f 6e 75 73 41 6d 6f 75 6e 74 54 65 78 74 28 6f 29 2c 22 20 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4e 65 28 6e 2c 72 29 7b 69 66 28 31 26 6e 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 52 56 36 28 29 3b 74 2e 71 65 78 28 30 29 2c 74 2e 6a 34 31 28 31 2c 22 64 69 76 22 2c 32 29 2c 74 2e 71 65 78 28 32 2c 33 29 2c 74 2e 6a 34 31 28 33 2c 22 64 69 76 22 2c 34 29 2c 74 2e 44 4e 45 28 34 2c 69 65 2c 31 2c 32 2c 22 73 75 6d 6d 61 72 79 2d 64 65 74 61 69 6c 73 2d 63 61 72 64 22 2c 35 29 28 35 2c 4d 65 2c 34 Data Ascii: span",60),t.EFF(1),t.k0s()),2&n){const o=t.XpG(2).ngIf,e=t.XpG();t.R7$(),t.SpI(" ",e.getBonusAmountText(o)," ")}}function Ne(n,r){if(1&n){const o=t.RV6();t.qex(0),t.j41(1,"div",2),t.qex(2,3),t.j41(3,"div",4),t.DNE(4,ie,1,2,"summary-details-card",5)(5,Me,4
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 33 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 5d 2c 5b 22 63 6f 6c 6f 72 22 2c 22 70 72 69 6d 61 72 79 22 2c 22 66 6f 72 6d 43 6f 6e 74 72 6f 6c 4e 61 6d 65 22 2c 22 73 65 6e 64 52 65 63 65 69 70 74 54 6f 45 6d 61 69 6c 22 5d 2c 5b 22 6d 61 74 49 6e 70 75 74 22 2c 22 22 2c 22 66 6f 72 6d 43 6f 6e 74 72 6f 6c 4e 61 6d 65 22 2c 22 72 65 63 65 69 70 74 43 6f 6e 74 61 63 74 45 6d 61 69 6c 22 2c 22 74 79 70 65 22 2c 22 65 6d 61 69 6c 22 2c 22 72 65 71 75 69 72 65 64 22 2c 22 22 2c 33 2c 22 70 6c 61 63 65 68 6f 6c 64 65 72 22 5d 2c 5b 22 63 6c 61 73 73 22 2c 22 62 69 6c 6c 69 6e 67 2d 61 64 64 72 65 73 73 2d 74 69 74 6c 65 22 2c 22 61 63 63 65 73 73 69 62 6c 65 22 2c 22 22 2c 34 2c 22 6e 67 49 66 22 5d 2c 5b 22 63 6c 61 73 73 22 2c 22 66 6f 72 6d 2d 72 6f 77 20 Data Ascii: 3,"placeholder"],["color","primary","formControlName","sendReceiptToEmail"],["matInput","","formControlName","receiptContactEmail","type","email","required","",3,"placeholder"],["class","billing-address-title","accessible","",4,"ngIf"],["class","form-row

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:42 UTC	646	OUT	GET /src_app_tabit-order_tabit-order_module_ts.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:42 UTC	732	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2160153 Connection: close x-amz-id-2: /eo6fmTtmEG5fsy04WdQgBzkkHDEEUWKnZSYV9CuOMntmfnuJ6RHefKpV47J6coNv3QsFEHoGBc= x-amz-request-id: H16B67QMCVQG4E5S Date: Thu, 20 Mar 2025 14:42:43 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: YfM9TXB6PvNMZjEbhtHeVP0ROvU7z3cK ETag: "8582001c8bc5f9bcb2970e9c8599ebd9" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 73a725fa02f9ec8c532ae0d445890568.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: H0NKswEla3Ayqj0PRLzwJz-ScwYs5wW9hiJIvpQRz13wy16Wa17JCg==
2025-03-20 14:42:42 UTC	15652	IN	Data Raw: 76 61 72 20 42 72 2c 44 72 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 2c 4d 4d 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 52 72 3d 28 55 65 2c 49 65 29 3d 3e 44 72 28 4d 4d 28 55 65 2c 22 72 61 77 22 2c 7b 76 61 6c 75 65 3a 44 72 28 49 65 7c 7c 55 65 2e 73 6c 69 63 65 28 29 29 7d 29 29 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 73 72 63 5f 61 70 70 5f 74 61 62 69 74 2d 6f 72 64 65 72 5f 74 61 62 69 74 2d 6f 72 64 65 72 5f 6d 6f 64 75 6c 65 5f 74 73 22 5d 2c 7b 35 34 36 31 34 3a 28 55 65 2c 49 65 2c 54 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 54 2e 72 28 49 65 29 2c 54 2e 64 28 49 65 2c 7b 54 61 Data Ascii: var Br,Dr=Object.freeze,MM=Object.defineProperty,Rr=(Ue,Ie)=>Dr(MM(Ue,"raw",{value:Dr(Ie\|\|Ue.slice())}));(self.webpackChunktla=self.webpackChunktla\|\|[]).push([["src_app_tabit-order_tabit-order_module_ts"],{54614:(Ue,Ie,T)=>{"use strict";T.r(Ie),T.d(Ie,{Ta
2025-03-20 14:42:42 UTC	2246	IN	Data Raw: 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 27 20 76 69 65 77 42 6f 78 3d 27 30 20 30 20 35 31 32 20 35 31 32 27 20 77 69 64 74 68 3d 27 35 31 32 27 20 68 65 69 67 68 74 3d 27 35 31 32 27 25 33 45 25 33 43 70 61 74 68 20 66 69 6c 6c 3d 27 72 67 62 28 32 35 35 2c 32 35 35 2c 32 35 35 29 27 20 64 3d 27 4d 31 37 33 2e 38 39 38 20 34 33 39 2e 34 30 34 6c 2d 31 36 36 2e 34 2d 31 36 36 2e 34 63 2d 39 2e 39 39 37 2d 39 2e 39 39 37 2d 39 2e 39 39 37 2d 32 36 2e 32 30 36 20 30 2d 33 36 2e 32 30 34 6c 33 36 2e 32 30 33 2d 33 36 2e 32 30 34 63 39 2e 39 39 37 2d 39 2e 39 39 38 20 32 36 2e 32 30 37 2d 39 2e 39 39 38 20 33 36 2e 32 30 34 20 30 4c 31 39 32 20 33 31 32 2e 36 39 20 34 33 32 2e 30 39 35 20 37 32 2e 35 39 36 63 39 2e 39 39 37 2d 39 2e 39 39 37 20 32 Data Ascii: w.w3.org/2000/svg' viewBox='0 0 512 512' width='512' height='512'%3E%3Cpath fill='rgb(255,255,255)' d='M173.898 439.404l-166.4-166.4c-9.997-9.997-9.997-26.206 0-36.204l36.203-36.204c9.997-9.998 26.207-9.998 36.204 0L192 312.69 432.095 72.596c9.997-9.997 2
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 7b 2e 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6e 67 78 2d 74 6f 61 73 74 72 2e 64 69 76 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 38 70 78 20 38 70 78 20 35 30 70 78 3b 77 69 64 74 68 3a 31 38 65 6d 7d 2e 74 6f 61 73 74 2d 63 6f 6e 74 61 69 6e 65 72 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 74 6f 61 73 74 2d 63 6c 6f 73 65 2d 62 75 74 74 6f 6e 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 7b 72 69 67 68 74 3a 2d 2e 32 65 6d 3b 74 6f 70 3a 2d 2e 32 65 6d 7d 7d 40 6d 65 64 69 61 20 61 6c 6c 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 Data Ascii: d (max-width: 480px){.toast-container[_ngcontent-%COMP%] .ngx-toastr.div[_ngcontent-%COMP%]{padding:8px 8px 8px 50px;width:18em}.toast-container[_ngcontent-%COMP%] .toast-close-button[_ngcontent-%COMP%]{right:-.2em;top:-.2em}}@media all and (min-width
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 66 6f 72 6d 2d 66 69 65 6c 64 2d 69 6e 66 69 78 20 6d 61 74 2d 73 65 6c 65 63 74 20 2e 6d 61 74 2d 6d 64 63 2d 73 65 6c 65 63 74 2d 74 72 69 67 67 65 72 20 2e 6d 61 74 2d 6d 64 63 2d 73 65 6c 65 63 74 2d 76 61 6c 75 65 20 2e 6d 61 74 2d 6d 64 63 2d 73 65 6c 65 63 74 2d 76 61 6c 75 65 2d 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 30 70 78 7d 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 20 20 20 66 6f 72 6d 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 65 6e 74 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 6d 61 74 2d 66 6f 72 6d 2d 66 69 65 6c 64 2e Data Ascii: t[_ngcontent-%COMP%] .mat-mdc-form-field-infix mat-select .mat-mdc-select-trigger .mat-mdc-select-value .mat-mdc-select-value-text{font-size:20px}[_nghost-%COMP%] form[_ngcontent-%COMP%] .mat-mdc-dialog-content[_ngcontent-%COMP%] mat-form-field.
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 61 70 70 65 72 7b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 77 69 64 74 68 3a 31 2e 35 72 65 6d 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 69 74 69 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 73 74 61 72 74 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 73 74 61 72 74 3a 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 6c 69 67 68 74 29 7b 5b 5f 6e 67 68 6f 73 74 2d 25 43 4f 4d 50 25 5d 20 20 20 66 6f 72 6d 5b 5f 6e 67 63 6f 6e 74 65 6e 74 2d 25 43 4f 4d 50 25 5d 20 20 20 2e 6d 61 74 2d 6d 64 63 2d 64 69 61 6c 6f 67 2d 63 6f 6e 74 Data Ascii: apper{height:1.5rem;width:1.5rem;display:flex;align-items:center;transform:initial;font-size:1.5rem;-webkit-margin-start:.5rem;margin-inline-start:.5rem}@media (prefers-color-scheme: light){[_nghost-%COMP%] form[_ngcontent-%COMP%] .mat-mdc-dialog-cont
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 28 29 29 7d 29 28 29 7d 67 65 74 56 61 6c 69 64 61 74 65 53 69 74 65 73 28 65 2c 6e 2c 72 2c 73 2c 63 2c 6c 29 7b 63 6f 6e 73 74 20 64 3d 74 68 69 73 2e 64 61 74 61 53 65 72 76 69 63 65 2e 24 73 74 6f 72 61 67 65 3b 28 30 2c 44 2e 41 29 28 65 2c 67 3d 3e 7b 67 2e 64 65 6c 69 76 65 72 79 3d 74 68 69 73 2e 70 72 65 70 61 72 65 44 65 6c 69 76 65 72 79 44 61 74 61 28 6e 2c 67 29 2c 67 2e 64 65 6c 69 76 65 72 79 2e 24 72 65 67 69 6f 6e 73 50 72 65 70 61 72 65 64 7c 7c 28 67 2e 64 65 6c 69 76 65 72 79 2e 24 72 65 67 69 6f 6e 73 50 72 65 70 61 72 65 64 3d 21 30 2c 28 30 2c 44 2e 41 29 28 67 2e 64 65 6c 69 76 65 72 79 2e 72 65 67 69 6f 6e 47 72 6f 75 70 73 2c 6d 3d 3e 7b 63 6f 6e 73 74 20 70 3d Data Ascii: apply(this,arguments)}}())})()}getValidateSites(e,n,r,s,c,l){const d=this.dataService.$storage;(0,D.A)(e,g=>{g.delivery=this.prepareDeliveryData(n,g),g.delivery.$regionsPrepared\|\|(g.delivery.$regionsPrepared=!0,(0,D.A)(g.delivery.regionGroups,m=>{const p=
2025-03-20 14:42:42 UTC	4542	IN	Data Raw: 65 28 4f 2c 66 2c 79 29 3b 42 3f 4f 2e 74 6f 64 61 79 53 6c 6f 74 73 3d 42 3a 50 2b 3d 31 7d 7d 70 2e 6d 69 6e 44 61 74 65 3d 68 2e 63 6c 6f 6e 65 28 29 2e 61 64 64 28 50 2c 22 64 61 79 73 22 29 2e 73 74 61 72 74 4f 66 28 22 64 61 79 22 29 2c 70 2e 6d 61 78 44 61 74 65 3d 68 2e 63 6c 6f 6e 65 28 29 2e 61 64 64 28 64 2e 6d 61 78 44 65 6c 61 79 44 61 79 73 2c 22 64 61 79 73 22 29 2e 65 6e 64 4f 66 28 22 64 61 79 22 29 3b 6c 65 74 20 46 3d 74 68 69 73 2e 61 70 70 53 65 72 76 69 63 65 2e 67 65 74 52 65 61 6c 44 61 74 65 4d 6f 6d 65 6e 74 28 29 2e 73 74 61 72 74 4f 66 28 22 64 61 79 22 29 2e 61 64 64 28 50 2c 22 64 61 79 73 22 29 2c 6b 3d 50 3b 64 6f 7b 69 66 28 2d 31 21 3d 70 2e 61 63 74 69 76 65 44 61 79 73 2e 69 6e 64 65 78 4f 66 28 46 2e 64 61 79 28 29 29 Data Ascii: e(O,f,y);B?O.todaySlots=B:P+=1}}p.minDate=h.clone().add(P,"days").startOf("day"),p.maxDate=h.clone().add(d.maxDelayDays,"days").endOf("day");let F=this.appService.getRealDateMoment().startOf("day").add(P,"days"),k=P;do{if(-1!=p.activeDays.indexOf(F.day())
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 69 6e 64 6f 77 2e 6f 70 65 6e 28 22 74 65 6c 3a 22 2b 65 2e 63 6f 6e 66 69 67 2e 70 68 6f 6e 65 2c 22 5f 73 79 73 74 65 6d 22 29 3a 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 3d 22 74 65 6c 3a 22 2b 65 2e 63 6f 6e 66 69 67 2e 70 68 6f 6e 65 7d 6e 61 76 69 67 61 74 65 54 6f 53 69 74 65 28 29 7b 76 61 72 20 65 2c 6e 3b 6c 65 74 20 72 3d 74 68 69 73 2e 64 61 74 61 53 65 72 76 69 63 65 2e 24 73 74 6f 72 61 67 65 2c 73 3d 7b 6e 61 6d 65 3a 6e 75 6c 6c 3d 3d 3d 28 65 3d 72 2e 63 6f 6e 66 69 67 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 2e 6e 61 6d 65 2c 61 64 64 72 65 73 73 3a 72 2e 6f 72 64 65 72 2e 62 72 61 6e 63 68 2e 61 64 64 72 65 73 73 2c 6c 6f 63 61 74 69 6f 6e 3a 6e 75 6c 6c 3d 3d 3d 28 6e 3d 72 2e 6f 72 64 65 72 Data Ascii: indow.open("tel:"+e.config.phone,"_system"):window.location.href="tel:"+e.config.phone}navigateToSite(){var e,n;let r=this.dataService.$storage,s={name:null===(e=r.config)\|\|void 0===e?void 0:e.name,address:r.order.branch.address,location:null===(n=r.order
2025-03-20 14:42:42 UTC	16384	IN	Data Raw: 73 68 69 70 49 74 65 6d 41 64 64 65 64 29 7b 69 66 28 67 2e 6c 6f 79 61 6c 74 79 46 69 72 73 74 56 61 6c 69 64 49 74 65 6d 3d 74 68 69 73 2e 67 65 74 56 61 6c 69 64 4c 6f 79 61 6c 74 79 4f 66 66 65 72 49 74 65 6d 28 67 2e 72 65 6e 65 77 49 74 65 6d 73 2c 70 29 2c 21 67 2e 6c 6f 79 61 6c 74 79 46 69 72 73 74 56 61 6c 69 64 49 74 65 6d 29 72 65 74 75 72 6e 20 6e 28 75 29 3b 6c 65 74 20 66 3d 28 30 2c 47 2e 41 29 28 70 2e 6f 66 66 65 72 73 2c 7b 5f 69 64 3a 67 2e 6c 6f 79 61 6c 74 79 46 69 72 73 74 56 61 6c 69 64 49 74 65 6d 7d 29 2c 68 3d 28 30 2c 48 2e 41 29 28 66 29 3b 6d 2e 6c 6f 79 61 6c 74 79 4d 65 6d 62 65 72 73 68 69 70 49 74 65 6d 41 64 64 65 64 3d 21 30 2c 68 26 26 74 68 69 73 2e 6c 6f 79 61 6c 74 79 4d 65 6d 62 65 72 73 68 69 70 49 74 65 6d 2e 6e Data Ascii: shipItemAdded){if(g.loyaltyFirstValidItem=this.getValidLoyaltyOfferItem(g.renewItems,p),!g.loyaltyFirstValidItem)return n(u);let f=(0,G.A)(p.offers,{_id:g.loyaltyFirstValidItem}),h=(0,H.A)(f);m.loyaltyMembershipItemAdded=!0,h&&this.loyaltyMembershipItem.n
2025-03-20 14:42:42 UTC	3028	IN	Data Raw: 63 29 3a 22 22 29 3a 28 73 2e 64 69 73 61 62 6c 65 52 65 67 69 73 74 72 61 74 69 6f 6e 3d 21 30 2c 73 2e 6d 69 73 73 69 6e 67 4d 65 6d 62 65 72 73 68 69 70 49 74 65 6d 73 3d 21 30 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 72 65 6e 65 77 49 74 65 6d 73 22 3a 76 61 72 20 62 2c 4f 2c 50 2c 78 3b 6d 3f 28 64 2e 63 6c 75 62 52 65 6e 65 77 4d 65 73 73 61 67 65 3d 6e 75 6c 6c 21 3d 3d 28 62 3d 64 2e 63 61 72 64 54 79 70 65 29 26 26 76 6f 69 64 20 30 21 3d 3d 62 26 26 62 2e 69 73 50 61 79 54 6f 4a 6f 69 6e 3f 74 68 69 73 2e 61 70 70 53 65 72 76 69 63 65 2e 74 72 61 6e 73 6c 61 74 65 28 22 5f 4c 4f 59 41 4c 54 59 2e 72 65 67 52 65 6e 65 77 4d 65 73 73 61 67 65 22 2c 7b 70 72 69 63 65 3a 64 2e 72 65 6e 65 77 49 74 65 6d 73 5f 70 72 69 63 65 2c 63 75 72 72 65 6e 63 79 Data Ascii: c):""):(s.disableRegistration=!0,s.missingMembershipItems=!0);break;case"renewItems":var b,O,P,x;m?(d.clubRenewMessage=null!==(b=d.cardType)&&void 0!==b&&b.isPayToJoin?this.appService.translate("_LOYALTY.regRenewMessage",{price:d.renewItems_price,currency

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:42 UTC	654	OUT	GET /node_modules_firebase_messaging_dist_index_esm_js.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:42 UTC	476	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 2959 Connection: close Server: CloudFront Date: Thu, 20 Mar 2025 14:42:42 GMT x-powered-by: Express access-control-allow-origin: * ETag: W/"b8f-y2K1WekwlCXx8I3Y0d2Vc4BgCDE" Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08bb3c305487b3a7b5b4360d422af708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: xaWzDKHlQdQfvZK_Wjhqs2PtYlF0ZCQ-R4uyHVr1oaiNmr43lsMyGw==
2025-03-20 14:42:42 UTC	2959	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 6c 6f 63 61 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 2d 55 53 22 20 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 74 61 62 69 74 2e 75 73 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 44 65 6c 69 76 65 72 79 20 7c 20 54 61 6b 65 20 41 77 61 79 20 7c 20 54 61 62 69 74 22 2f 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f Data Ascii: <!DOCTYPE html><html lang="en"><head><base href="/"><meta charset="utf-8"><meta property="og:locale" content="en-US" /><meta property="og:url" content="tabit.us"/><meta property="og:title" content="Delivery \| Take Away \| Tabit"/><meta property="o

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:42 UTC	684	OUT	GET /default-node_modules_libphonenumber-js_min_exports_parsePhoneNumberWithError_js.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:43 UTC	730	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 84120 Connection: close x-amz-id-2: P62a4Zbnijm/u3hkt208mq/ipDZAlqg+/yU9zHGLWgilSr8Tf9Fvp8UtUS8r5EZkSSkXRL8VUJA= x-amz-request-id: H167ZRF28N96P8ES Date: Thu, 20 Mar 2025 14:42:43 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 27 Jan 2025 14:55:10 GMT x-amz-version-id: 8Vnv7_.UkvTfF6Oj7yl4ZGI2dYNfXO6K ETag: "a8bda1fb8f13f4ada5e7aecba00012e0" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 6365f8c2e6435e0ce1ea9fe112f73a92.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: Yd8B_3v_mTCezgGyTsz1xHTLE6HSdNVTaYuD3-LIJRZbn5YLN5QdUg==
2025-03-20 14:42:43 UTC	16384	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 64 65 66 61 75 6c 74 2d 6e 6f 64 65 5f 6d 6f 64 75 6c 65 73 5f 6c 69 62 70 68 6f 6e 65 6e 75 6d 62 65 72 2d 6a 73 5f 6d 69 6e 5f 65 78 70 6f 72 74 73 5f 70 61 72 73 65 50 68 6f 6e 65 4e 75 6d 62 65 72 57 69 74 68 45 72 72 6f 72 5f 6a 73 22 5d 2c 7b 36 35 34 35 36 3a 28 47 2c 24 2c 64 29 3d 3e 7b 64 2e 64 28 24 2c 7b 41 3a 28 29 3d 3e 4d 7d 29 3b 63 6f 6e 73 74 20 4d 3d 7b 76 65 72 73 69 6f 6e 3a 34 2c 63 6f 75 6e 74 72 79 5f 63 61 6c 6c 69 6e 67 5f 63 6f 64 65 73 3a 7b 31 3a 5b 22 55 53 22 2c 22 41 47 22 2c 22 41 49 22 2c 22 41 53 22 2c 22 42 42 22 2c Data Ascii: "use strict";(self.webpackChunktla=self.webpackChunktla\|\|[]).push([["default-node_modules_libphonenumber-js_min_exports_parsePhoneNumberWithError_js"],{65456:(G,$,d)=>{d.d($,{A:()=>M});const M={version:4,country_calling_codes:{1:["US","AG","AI","AS","BB",
2025-03-20 14:42:43 UTC	16384	IN	Data Raw: 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 20 24 34 22 2c 5b 22 35 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 43 46 3a 5b 22 32 33 36 22 2c 22 30 30 22 2c 22 28 3f 3a 5b 32 37 5d 5c 5c 64 7b 33 7d 7c 38 37 37 36 29 5c 5c 64 7b 34 7d 22 2c 5b 38 5d 2c 5b 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 22 2c 22 24 31 20 24 32 20 24 33 20 24 34 22 2c 5b 22 5b 32 37 38 5d 22 5d 5d 5d 5d 2c 43 47 3a 5b 22 32 34 32 22 2c 22 30 30 22 2c 22 32 32 32 5c 5c 64 7b 36 7d 7c 28 3f 3a 30 5c 5c 64 7c 38 30 29 5c 5c 64 7b 37 7d 22 2c 5b 39 5d 2c 5b 5b 22 28 5c 5c 64 29 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 38 22 5d 5d 2c Data Ascii: (\\d{3})(\\d{3})","$1 $2 $3 $4",["5"],"0$1"]],"0"],CF:["236","00","(?:[27]\\d{3}\|8776)\\d{4}",[8],[["(\\d{2})(\\d{2})(\\d{2})(\\d{2})","$1 $2 $3 $4",["[278]"]]]],CG:["242","00","222\\d{6}\|(?:0\\d\|80)\\d{7}",[9],[["(\\d)(\\d{4})(\\d{4})","$1 $2 $3",["8"]],
2025-03-20 14:42:43 UTC	3028	IN	Data Raw: 7b 35 7d 22 2c 5b 31 30 5d 5d 2c 5b 22 38 30 5b 30 38 5d 5c 5c 64 7b 37 7d 7c 38 30 30 5c 5c 64 7b 36 7d 7c 38 30 30 31 31 31 31 22 5d 2c 5b 22 28 3f 3a 38 28 3f 3a 34 5b 32 2d 35 5d 7c 37 5b 30 2d 33 5d 29 7c 39 28 3f 3a 5b 30 31 5d 5c 5c 64 7c 38 5b 30 2d 33 5d 29 29 5c 5c 64 7b 37 7d 7c 38 34 35 34 36 34 5c 5c 64 22 2c 5b 37 2c 31 30 5d 5d 2c 5b 22 37 30 5c 5c 64 7b 38 7d 22 2c 5b 31 30 5d 5d 2c 30 2c 5b 22 28 3f 3a 33 5b 30 33 34 37 5d 7c 35 35 29 5c 5c 64 7b 38 7d 22 2c 5b 31 30 5d 5d 2c 5b 22 37 36 28 3f 3a 34 36 34 7c 36 35 32 29 5c 5c 64 7b 35 7d 7c 37 36 28 3f 3a 30 5b 30 2d 32 38 5d 7c 32 5b 33 35 36 5d 7c 33 34 7c 34 5b 30 31 33 34 37 5d 7c 35 5b 34 39 5d 7c 36 5b 30 2d 33 36 39 5d 7c 37 37 7c 38 5b 31 34 5d 7c 39 5b 31 33 39 5d 29 5c 5c 64 7b Data Ascii: {5}",[10]],["80[08]\\d{7}\|800\\d{6}\|8001111"],["(?:8(?:4[2-5]\|7[0-3])\|9(?:[01]\\d\|8[0-3]))\\d{7}\|845464\\d",[7,10]],["70\\d{8}",[10]],0,["(?:3[0347]\|55)\\d{8}",[10]],["76(?:464\|652)\\d{5}\|76(?:0[0-28]\|2[356]\|34\|4[01347]\|5[49]\|6[0-369]\|77\|8[14]\|9[139])\\d{
2025-03-20 14:42:43 UTC	16384	IN	Data Raw: 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 2c 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 39 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 2c 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 32 2d 35 37 5d 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 38 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 48 54 3a 5b 22 35 30 39 22 2c 22 30 30 22 2c 22 28 3f 3a 5b 32 2d 34 38 39 5d 5c 5c 64 7c 35 35 29 5c 5c 64 7b 36 7d 22 2c 5b 38 5d 2c 5b 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 34 7d 29 22 2c 22 24 31 20 24 32 20 24 33 22 2c 5b 22 5b 32 2d 35 38 39 5d 22 Data Ascii: \\d{3})(\\d{3,4})","$1 $2 $3",["9"],"0$1"],["(\\d{2})(\\d{3})(\\d{3,4})","$1 $2 $3",["[2-57]"],"0$1"],["(\\d{3})(\\d{3})(\\d{3})","$1 $2 $3",["8"],"0$1"]],"0"],HT:["509","00","(?:[2-489]\\d\|55)\\d{6}",[8],[["(\\d{2})(\\d{2})(\\d{4})","$1 $2 $3",["[2-589]"
2025-03-20 14:42:43 UTC	16384	IN	Data Raw: 5b 32 2d 39 5d 22 5d 2c 22 30 24 31 22 5d 5d 2c 22 30 22 5d 2c 4d 41 3a 5b 22 32 31 32 22 2c 22 30 30 22 2c 22 5b 35 2d 38 5d 5c 5c 64 7b 38 7d 22 2c 5b 39 5d 2c 5b 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 22 2c 22 24 31 20 24 32 20 24 33 20 24 34 22 2c 5b 22 35 5b 34 35 5d 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 34 7d 29 28 5c 5c 64 7b 35 7d 29 22 2c 22 24 31 2d 24 32 22 2c 5b 22 35 28 3f 3a 32 5b 32 2d 34 36 2d 39 5d 7c 33 5b 33 2d 39 5d 7c 39 29 7c 38 28 3f 3a 30 5b 38 39 5d 7c 39 32 29 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 37 7d 29 22 2c 22 24 31 2d 24 32 22 2c 5b 22 38 22 5d 2c 22 30 24 31 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b Data Ascii: [2-9]"],"0$1"]],"0"],MA:["212","00","[5-8]\\d{8}",[9],[["(\\d{3})(\\d{2})(\\d{2})(\\d{2})","$1 $2 $3 $4",["5[45]"],"0$1"],["(\\d{4})(\\d{5})","$1-$2",["5(?:2[2-46-9]\|3[3-9]\|9)\|8(?:0[89]\|92)"],"0$1"],["(\\d{2})(\\d{7})","$1-$2",["8"],"0$1"],["(\\d{3})(\\d{
2025-03-20 14:42:43 UTC	15556	IN	Data Raw: 35 2d 38 5d 7c 33 5b 30 32 2d 35 5d 7c 34 5b 30 2d 33 5d 29 22 5d 2c 22 30 24 31 22 2c 30 2c 22 24 31 20 24 32 20 24 33 22 5d 2c 5b 22 28 5c 5c 64 7b 33 7d 29 28 5c 5c 64 7b 32 2c 33 7d 29 28 5c 5c 64 7b 33 7d 29 22 2c 22 24 31 2d 24 32 20 24 33 22 2c 5b 22 39 28 3f 3a 30 30 7c 33 39 7c 34 34 29 22 5d 2c 22 30 24 31 22 2c 30 2c 22 24 31 20 24 32 20 24 33 22 5d 2c 5b 22 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 2c 33 7d 29 28 5c 5c 64 7b 32 7d 29 28 5c 5c 64 7b 32 7d 29 22 2c 22 24 31 2d 24 32 20 24 33 20 24 34 22 2c 5b 22 31 5b 31 33 36 38 39 5d 7c 32 5b 30 31 33 36 5d 7c 33 5b 31 33 35 36 5d 7c 34 5b 30 32 34 36 5d 7c 35 34 7c 36 5b 30 33 5d 7c 39 30 5b 31 2d 39 5d 22 5d 2c 22 30 24 31 22 2c 30 2c 22 24 31 20 24 32 20 24 33 20 24 34 22 5d 2c 5b 22 28 5c Data Ascii: 5-8]\|3[02-5]\|4[0-3])"],"0$1",0,"$1 $2 $3"],["(\\d{3})(\\d{2,3})(\\d{3})","$1-$2 $3",["9(?:00\|39\|44)"],"0$1",0,"$1 $2 $3"],["(\\d{2})(\\d{2,3})(\\d{2})(\\d{2})","$1-$2 $3 $4",["1[13689]\|2[0136]\|3[1356]\|4[0246]\|54\|6[03]\|90[1-9]"],"0$1",0,"$1 $2 $3 $4"],["(\

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:43 UTC	611	OUT	GET /common.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:43 UTC	761	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1615 Connection: close x-amz-id-2: WiE9AUeqax1j0PlXiNrLvbf6axcrMMotJHvm9sh2bTExHTWqvMtiUlzabjOTEALGrKpHhGv4tRAFeBugZBMzsatO1zuaggvOpdAK0ixMvUw= x-amz-request-id: RJ5DW24QP1WGGV66 Date: Thu, 20 Mar 2025 14:42:44 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 300 Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: r6DSJIUurT3IugWz4DVS9ODpwNOIUbn2 ETag: "c9b28d982ce0af267bab9fc4368c005c" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 c6f8ebe3e9184b5af4e1db5847736f9c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: um90VvYbgp7t5YRwyAeQ-X_F5uuAXJs6ThAfolx5VHgq8mADiE5qqw==
2025-03-20 14:42:43 UTC	1615	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 22 5d 2c 7b 39 38 30 31 35 3a 28 6e 2c 61 2c 74 29 3d 3e 7b 74 2e 64 28 61 2c 7b 44 3a 28 29 3d 3e 76 7d 29 3b 63 6f 6e 73 74 20 76 3d 5b 7b 74 3a 22 41 6c 61 62 61 6d 61 22 2c 76 3a 22 41 4c 22 7d 2c 7b 74 3a 22 41 6c 61 73 6b 61 22 2c 76 3a 22 41 4b 22 7d 2c 7b 74 3a 22 41 6d 65 72 69 63 61 6e 20 53 61 6d 6f 61 22 2c 76 3a 22 41 53 22 7d 2c 7b 74 3a 22 41 72 69 7a 6f 6e 61 22 2c 76 3a 22 41 5a 22 7d 2c 7b 74 3a 22 41 72 6b 61 6e 73 61 73 22 2c 76 3a 22 41 52 22 7d 2c 7b 74 3a 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 76 3a 22 43 41 22 Data Ascii: "use strict";(self.webpackChunktla=self.webpackChunktla\|\|[]).push([["common"],{98015:(n,a,t)=>{t.d(a,{D:()=>v});const v=[{t:"Alabama",v:"AL"},{t:"Alaska",v:"AK"},{t:"American Samoa",v:"AS"},{t:"Arizona",v:"AZ"},{t:"Arkansas",v:"AR"},{t:"California",v:"CA"

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:43 UTC	589	OUT	GET /scripts.js?v=4.14.3 HTTP/1.1 Host: tabit.us Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:43 UTC	641	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 175791 Connection: close x-amz-id-2: e2rPWF+dFxI/S3N8Wl52gJKwvpU1hsrPa2i2gpPS58EkFMGVmTslIOj3yFHwBB1PvsnPZEy1RwE= x-amz-request-id: M8PCHSJ2W38CV39Z Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: S35SdPTo55tPdrRNCaTJ0oMYEcbUDZS9 Server: AmazonS3 Date: Thu, 20 Mar 2025 14:42:44 GMT ETag: "a816109fbf207c36af2e309e07a22d11" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 de3fca1816bcb2e2e72ebc34f7e74c4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: 02QZGbdKRnStSASlbGOEgpeOpapkMZNTcBESst_TjZrKdSMZNoD_bg==
2025-03-20 14:42:43 UTC	15743	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 6a 2c 62 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 6a 2e 64 6f 63 75 6d 65 6e 74 3f 62 65 28 6a 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 6b 65 29 7b 69 66 28 21 6b 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 62 65 28 6b 65 29 7d 3a 62 65 28 6a 29 7d 28 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3c 22 75 22 3f 77 69 6e 64 6f Data Ascii: !function(j,be){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=j.document?be(j,!0):function(ke){if(!ke.document)throw new Error("jQuery requires a window with a document");return be(ke)}:be(j)}(typeof window<"u"?windo
2025-03-20 14:42:43 UTC	11104	IN	Data Raw: 29 26 26 21 21 76 2e 63 68 65 63 6b 65 64 7c 7c 68 65 28 76 2c 22 6f 70 74 69 6f 6e 22 29 26 26 21 21 76 2e 73 65 6c 65 63 74 65 64 7d 2c 73 65 6c 65 63 74 65 64 3a 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 76 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 76 29 7b 66 6f 72 28 76 3d 76 2e 66 69 72 73 74 43 68 69 6c 64 3b 76 3b 76 3d 76 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 76 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 65 74 75 72 6e 21 74 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 76 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 65 74 75 72 6e 20 44 74 2e Data Ascii: )&&!!v.checked\|\|he(v,"option")&&!!v.selected},selected:function(v){return!0===v.selected},empty:function(v){for(v=v.firstChild;v;v=v.nextSibling)if(v.nodeType<6)return!1;return!0},parent:function(v){return!t.pseudos.empty(v)},header:function(v){return Dt.
2025-03-20 14:42:43 UTC	16384	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 5f 3d 45 26 26 45 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 5f 26 26 55 28 5f 2e 70 72 6f 6d 69 73 65 29 3f 5f 2e 70 72 6f 6d 69 73 65 28 29 2e 70 72 6f 67 72 65 73 73 28 63 2e 6e 6f 74 69 66 79 29 2e 64 6f 6e 65 28 63 2e 72 65 73 6f 6c 76 65 29 2e 66 61 69 6c 28 63 2e 72 65 6a 65 63 74 29 3a 63 5b 62 5b 30 5d 2b 22 57 69 74 68 22 5d 28 74 68 69 73 2c 45 3f 5b 5f 5d 3a 61 72 67 75 6d 65 6e 74 73 29 7d 29 7d 29 2c 73 3d 6e 75 6c 6c 7d 29 2e 70 72 6f 6d 69 73 65 28 29 7d 2c 74 68 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 73 2c 63 2c 77 29 7b 76 61 72 20 62 3d 30 3b 66 75 6e 63 74 69 6f 6e 20 45 28 5f 2c 42 2c 41 2c 4c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 Data Ascii: (function(){var _=E&&E.apply(this,arguments);_&&U(_.promise)?_.promise().progress(c.notify).done(c.resolve).fail(c.reject):c[b[0]+"With"](this,E?[_]:arguments)})}),s=null}).promise()},then:function(s,c,w){var b=0;function E(_,B,A,L){return function(){var
2025-03-20 14:42:43 UTC	16384	IN	Data Raw: 3b 73 2e 74 79 70 65 3d 22 66 6f 63 75 73 69 6e 22 3d 3d 3d 72 2e 74 79 70 65 3f 22 66 6f 63 75 73 22 3a 22 62 6c 75 72 22 2c 73 2e 69 73 53 69 6d 75 6c 61 74 65 64 3d 21 30 2c 61 28 72 29 2c 73 2e 74 61 72 67 65 74 3d 3d 3d 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 26 26 61 28 73 29 7d 65 6c 73 65 20 69 2e 65 76 65 6e 74 2e 73 69 6d 75 6c 61 74 65 28 74 2c 72 2e 74 61 72 67 65 74 2c 69 2e 65 76 65 6e 74 2e 66 69 78 28 72 29 29 7d 69 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 65 5d 3d 7b 73 65 74 75 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3b 69 66 28 4a 74 28 74 68 69 73 2c 65 2c 21 30 29 2c 21 57 2e 64 6f 63 75 6d 65 6e 74 4d 6f 64 65 29 72 65 74 75 72 6e 21 31 3b 28 72 3d 56 2e 67 65 74 28 74 68 69 73 2c 74 29 29 7c 7c 74 68 69 73 2e Data Ascii: ;s.type="focusin"===r.type?"focus":"blur",s.isSimulated=!0,a(r),s.target===s.currentTarget&&a(s)}else i.event.simulate(t,r.target,i.event.fix(r))}i.event.special[e]={setup:function(){var r;if(Jt(this,e,!0),!W.documentMode)return!1;(r=V.get(this,t))\|\|this.
2025-03-20 14:42:44 UTC	13079	IN	Data Raw: 75 65 75 65 28 65 2c 22 66 78 22 29 2e 6c 65 6e 67 74 68 7c 7c 63 2e 65 6d 70 74 79 2e 66 69 72 65 28 29 7d 29 7d 29 29 2c 74 29 69 66 28 6a 74 2e 74 65 73 74 28 61 3d 74 5b 72 5d 29 29 7b 69 66 28 64 65 6c 65 74 65 20 74 5b 72 5d 2c 73 3d 73 7c 7c 22 74 6f 67 67 6c 65 22 3d 3d 3d 61 2c 61 3d 3d 3d 28 6c 65 3f 22 68 69 64 65 22 3a 22 73 68 6f 77 22 29 29 7b 69 66 28 22 73 68 6f 77 22 21 3d 3d 61 7c 7c 21 51 7c 7c 76 6f 69 64 20 30 3d 3d 3d 51 5b 72 5d 29 63 6f 6e 74 69 6e 75 65 3b 6c 65 3d 21 30 7d 4c 5b 72 5d 3d 51 26 26 51 5b 72 5d 7c 7c 69 2e 73 74 79 6c 65 28 65 2c 72 29 7d 69 66 28 28 62 3d 21 69 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 74 29 29 7c 7c 21 69 2e 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 28 4c 29 29 66 6f 72 28 72 20 69 6e 20 42 26 26 Data Ascii: ueue(e,"fx").length\|\|c.empty.fire()})})),t)if(jt.test(a=t[r])){if(delete t[r],s=s\|\|"toggle"===a,a===(le?"hide":"show")){if("show"!==a\|\|!Q\|\|void 0===Q[r])continue;le=!0}L[r]=Q&&Q[r]\|\|i.style(e,r)}if((b=!i.isEmptyObject(t))\|\|!i.isEmptyObject(L))for(r in B&&
2025-03-20 14:42:44 UTC	16384	IN	Data Raw: 2f 2e 74 65 73 74 28 66 74 2e 70 72 6f 74 6f 63 6f 6c 29 2c 67 6c 6f 62 61 6c 3a 21 30 2c 70 72 6f 63 65 73 73 44 61 74 61 3a 21 30 2c 61 73 79 6e 63 3a 21 30 2c 63 6f 6e 74 65 6e 74 54 79 70 65 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2c 61 63 63 65 70 74 73 3a 7b 22 2a 22 3a 75 72 2c 74 65 78 74 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 2c 68 74 6d 6c 3a 22 74 65 78 74 2f 68 74 6d 6c 22 2c 78 6d 6c 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 2c 20 74 65 78 74 2f 78 6d 6c 22 2c 6a 73 6f 6e 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 2c 20 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 7d 2c 63 6f 6e 74 65 6e 74 73 3a 7b 78 6d 6c Data Ascii: /.test(ft.protocol),global:!0,processData:!0,async:!0,contentType:"application/x-www-form-urlencoded; charset=UTF-8",accepts:{"*":ur,text:"text/plain",html:"text/html",xml:"application/xml, text/xml",json:"application/json, text/javascript"},contents:{xml
2025-03-20 14:42:44 UTC	16384	IN	Data Raw: 63 74 69 6f 6e 28 6f 2c 66 2c 6d 29 7b 76 61 72 20 44 3d 5b 6e 75 6c 6c 5d 3b 44 2e 70 75 73 68 2e 61 70 70 6c 79 28 44 2c 66 29 3b 76 61 72 20 24 3d 6e 65 77 28 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 6f 2c 44 29 29 3b 72 65 74 75 72 6e 20 6d 26 26 42 65 28 24 2c 6d 2e 70 72 6f 74 6f 74 79 70 65 29 2c 24 7d 29 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 6c 29 7b 76 61 72 20 79 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4d 61 70 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 78 74 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 69 66 28 6e 75 6c 6c 3d 3d 3d 64 7c 7c 21 66 75 6e 63 74 69 6f 6e 20 6f 65 28 6c 29 7b 72 65 74 75 72 6e 2d 31 21 3d 3d Data Ascii: ction(o,f,m){var D=[null];D.push.apply(D,f);var $=new(Function.bind.apply(o,D));return m&&Be($,m.prototype),$}).apply(null,arguments)}function xt(l){var y="function"==typeof Map?new Map:void 0;return xt=function(d){if(null===d\|\|!function oe(l){return-1!==
2025-03-20 14:42:44 UTC	16384	IN	Data Raw: 72 74 26 26 28 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 3d 6e 65 77 20 57 65 62 54 72 61 6e 73 70 6f 72 74 28 74 68 69 73 2e 63 72 65 61 74 65 55 72 69 28 22 68 74 74 70 73 22 29 2c 74 68 69 73 2e 6f 70 74 73 2e 74 72 61 6e 73 70 6f 72 74 4f 70 74 69 6f 6e 73 5b 74 68 69 73 2e 6e 61 6d 65 5d 29 2c 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 2e 63 6c 6f 73 65 64 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 6f 6e 43 6c 6f 73 65 28 29 7d 29 2e 63 61 74 63 68 28 66 75 6e 63 74 69 6f 6e 28 66 29 7b 6f 2e 6f 6e 45 72 72 6f 72 28 22 77 65 62 74 72 61 6e 73 70 6f 72 74 20 65 72 72 6f 72 22 2c 66 29 7d 29 2c 74 68 69 73 2e 74 72 61 6e 73 70 6f 72 74 2e 72 65 61 64 79 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 2e 74 72 61 6e 73 70 6f 72 74 2e Data Ascii: rt&&(this.transport=new WebTransport(this.createUri("https"),this.opts.transportOptions[this.name]),this.transport.closed.then(function(){o.onClose()}).catch(function(f){o.onError("webtransport error",f)}),this.transport.ready.then(function(){o.transport.
2025-03-20 14:42:44 UTC	16384	IN	Data Raw: 7b 62 65 28 74 68 69 73 2c 6c 29 2c 74 68 69 73 2e 70 61 63 6b 65 74 3d 79 2c 74 68 69 73 2e 62 75 66 66 65 72 73 3d 5b 5d 2c 74 68 69 73 2e 72 65 63 6f 6e 50 61 63 6b 3d 79 7d 72 65 74 75 72 6e 20 44 65 28 6c 2c 5b 7b 6b 65 79 3a 22 74 61 6b 65 42 69 6e 61 72 79 44 61 74 61 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 2e 62 75 66 66 65 72 73 2e 70 75 73 68 28 67 29 2c 74 68 69 73 2e 62 75 66 66 65 72 73 2e 6c 65 6e 67 74 68 3d 3d 3d 74 68 69 73 2e 72 65 63 6f 6e 50 61 63 6b 2e 61 74 74 61 63 68 6d 65 6e 74 73 29 7b 76 61 72 20 64 3d 43 6e 28 74 68 69 73 2e 72 65 63 6f 6e 50 61 63 6b 2c 74 68 69 73 2e 62 75 66 66 65 72 73 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 66 69 6e 69 73 68 65 64 52 65 63 6f 6e 73 74 72 75 63 74 Data Ascii: {be(this,l),this.packet=y,this.buffers=[],this.reconPack=y}return De(l,[{key:"takeBinaryData",value:function(g){if(this.buffers.push(g),this.buffers.length===this.reconPack.attachments){var d=Cn(this.reconPack,this.buffers);return this.finishedReconstruct
2025-03-20 14:42:44 UTC	16384	IN	Data Raw: 6e 69 74 65 28 61 65 29 3f 53 74 72 69 6e 67 28 61 65 29 3a 22 6e 75 6c 6c 22 3b 63 61 73 65 22 62 6f 6f 6c 65 61 6e 22 3a 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 63 61 73 65 22 6e 75 6c 6c 22 3a 72 65 74 75 72 6e 20 53 74 72 69 6e 67 28 61 65 29 3b 63 61 73 65 22 6f 62 6a 65 63 74 22 3a 69 66 28 21 61 65 29 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 69 66 28 43 2b 3d 4f 2c 79 65 3d 5b 5d 2c 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3d 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 61 70 70 6c 79 28 61 65 2c 5b 5d 29 29 7b 66 6f 72 28 54 65 3d 61 65 2e 6c 65 6e 67 74 68 2c 67 65 3d 30 3b 67 65 3c 54 65 3b 67 65 2b 3d 31 29 79 65 5b 67 65 5d 3d 4e 65 28 67 65 2e 74 6f 53 74 72 69 6e 67 28 29 2c 61 65 29 7c 7c Data Ascii: nite(ae)?String(ae):"null";case"boolean":case"undefined":case"null":return String(ae);case"object":if(!ae)return"null";if(C+=O,ye=[],"[object Array]"===Object.prototype.toString.apply(ae,[])){for(Te=ae.length,ge=0;ge<Te;ge+=1)ye[ge]=Ne(ge.toString(),ae)\|\|

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://tbit.be/ZP5s8q

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Windows Analysis Report
https://tbit.be/ZP5s8q

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:44 UTC	720	OUT	GET /assets/images/svg/svg-color-filter.svg?v=1742481763258 HTTP/1.1 Host: tabit.us Connection: keep-alive traceparent: 00-b4fe47c8636bff093cb39d4e38eb50b5-64624c88a9c074b1-01 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	607	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 437 Connection: close x-amz-id-2: 3uLSREiy8CcWqeEeppYXhVEvFo+hv0stH8eEZtwvyqDDbhXXsVIHKTOY+8odUnz1stQPZPoT1v4= x-amz-request-id: 4KMJ3AFG4P47M5HR Date: Thu, 20 Mar 2025 14:42:46 GMT Last-Modified: Mon, 17 Mar 2025 07:55:32 GMT x-amz-version-id: QBYlbPAwt.vzP6bGiEJ1Le8zC6.6M6ne ETag: "60afe59e1ab3db18f2962f178542c57b" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 4118eb7b967838562b3ffdc0051e0fb8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: nIfBDDUi8IVpEBIz5uzsxdjToXeqftDpffj_StpUPSlH4sKAGLVJNQ==
2025-03-20 14:42:45 UTC	437	IN	Data Raw: 3c 73 76 67 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 30 3b 20 68 65 69 67 68 74 3a 30 3b 20 6d 61 72 67 69 6e 3a 30 3b 20 70 61 64 64 69 6e 67 3a 30 3b 20 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 22 3e 0a 20 20 20 20 3c 21 2d 2d 20 64 79 6e 61 6d 69 63 20 63 6f 6c 6f 72 20 66 69 6c 74 65 72 20 2d 2d 3e 0a 20 20 20 20 3c 66 69 6c 74 65 72 20 0a 20 20 20 20 20 20 20 20 69 64 3d 22 70 72 69 6d 61 72 79 2d 61 70 70 2d 63 6f 6c 6f 72 2d 73 76 67 2d 66 69 6c 74 65 72 22 0a 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 3d 22 73 52 47 42 22 20 0a 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 3c 66 65 43 6f 6c 6f 72 4d 61 74 72 69 78 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3d 22 70 72 69 6d 61 72 79 2d 61 Data Ascii: <svg style="width:0; height:0; margin:0; padding:0; border:none;"> ... dynamic color filter --> <filter id="primary-app-color-svg-filter" color-interpolation-filters="sRGB" > <feColorMatrix id="primary-a

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:44 UTC	602	OUT	GET /common.js HTTP/1.1 Host: tabit.us Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	639	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 1615 Connection: close x-amz-id-2: N5OzuSdvRFTJ0gtbGh/8euIE4aa+HHJTP9mw9vgsN8NKJhwXQazkb2P7MYzKllIU3PdhV+jW2Dc= x-amz-request-id: BJPQSX382VSKFVEN Last-Modified: Mon, 17 Mar 2025 07:55:33 GMT x-amz-version-id: r6DSJIUurT3IugWz4DVS9ODpwNOIUbn2 Server: AmazonS3 Date: Thu, 20 Mar 2025 14:42:46 GMT ETag: "c9b28d982ce0af267bab9fc4368c005c" Vary: Accept-Encoding X-Cache: RefreshHit from cloudfront Via: 1.1 63040e94676ef2388b33d7915b0f3966.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: BP_mmgQHd3Q1dqBwJwgydLSlWlJwrp2NuSSZ1cYd4XC6E2KLmbhlzw==
2025-03-20 14:42:45 UTC	1615	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 74 6c 61 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 22 63 6f 6d 6d 6f 6e 22 5d 2c 7b 39 38 30 31 35 3a 28 6e 2c 61 2c 74 29 3d 3e 7b 74 2e 64 28 61 2c 7b 44 3a 28 29 3d 3e 76 7d 29 3b 63 6f 6e 73 74 20 76 3d 5b 7b 74 3a 22 41 6c 61 62 61 6d 61 22 2c 76 3a 22 41 4c 22 7d 2c 7b 74 3a 22 41 6c 61 73 6b 61 22 2c 76 3a 22 41 4b 22 7d 2c 7b 74 3a 22 41 6d 65 72 69 63 61 6e 20 53 61 6d 6f 61 22 2c 76 3a 22 41 53 22 7d 2c 7b 74 3a 22 41 72 69 7a 6f 6e 61 22 2c 76 3a 22 41 5a 22 7d 2c 7b 74 3a 22 41 72 6b 61 6e 73 61 73 22 2c 76 3a 22 41 52 22 7d 2c 7b 74 3a 22 43 61 6c 69 66 6f 72 6e 69 61 22 2c 76 3a 22 43 41 22 Data Ascii: "use strict";(self.webpackChunktla=self.webpackChunktla\|\|[]).push([["common"],{98015:(n,a,t)=>{t.d(a,{D:()=>v});const v=[{t:"Alabama",v:"AL"},{t:"Alaska",v:"AK"},{t:"American Samoa",v:"AS"},{t:"Arizona",v:"AZ"},{t:"Arkansas",v:"AR"},{t:"California",v:"CA"

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:44 UTC	630	OUT	GET /config/v1/rum/agents?service.name=tabit-app&service.environment=us-prd HTTP/1.1 Host: tabit-us-prd.apm.us-east-1.aws.found.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://tabit.us Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tabit.us/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	490	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://tabit.us Access-Control-Expose-Headers: Etag Cache-Control: max-age=30, must-revalidate Content-Length: 40 Content-Type: application/json Date: Thu, 20 Mar 2025 14:42:45 GMT Etag: "706555d984125a7dda3d2303a45cc0103d6f7459" X-Cloud-Request-Id: IUiJwT8tTH6dz0RLssL-fQ X-Content-Type-Options: nosniff X-Found-Handling-Cluster: 3ef79a2917344be4ad94d018685555e2 X-Found-Handling-Instance: instance-0000000017 Connection: close
2025-03-20 14:42:45 UTC	40	IN	Data Raw: 7b 0a 20 20 22 74 72 61 6e 73 61 63 74 69 6f 6e 5f 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 20 22 30 2e 30 31 22 0a 7d 0a Data Ascii: { "transaction_sample_rate": "0.01"}

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:44 UTC	565	OUT	GET /core/4.6.11/accessibility.js HTTP/1.1 Host: js.nagich.co.il Connection: keep-alive Origin: https://tabit.us sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://tabit.us/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	1042	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 14:42:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=2604800 last-modified: Thu, 14 Mar 2024 12:22:53 GMT etag: W/"808c4556a76da1:0" vary: Accept-Encoding x-powered-by: ASP.NET access-control-allow-origin: * access-control-allow-methods: GET access-control-allow-credentials: true CF-Cache-Status: HIT Age: 694816 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rm8It432KFmASNWQjaFxsb3o6wnu6pDs4iGB7SgIBEGhbUQVhZKF%2BIaAJ1yWxD0K0LuOdrNrU5RJXMUmPc1zhd3co%2F8ZZUQoSBwD12d7EO%2Fsb4Z1uSWXo%2BUXYEm36%2F5OTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9235fa585cd89820-EWR server-timing: cfL4;desc="?proto=TCP&rtt=112770&min_rtt=110183&rtt_var=27153&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1137&delivery_rate=31534&cwnd=251&unsent_bytes=0&cid=9eea8ffdcfe86596&ts=302&x=0"
2025-03-20 14:42:45 UTC	327	IN	Data Raw: 37 63 35 61 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 63 6c 61 73 73 20 6e 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 69 66 28 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 29 72 65 74 75 72 6e 20 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 3b 74 68 69 73 2e 69 6e 73 74 61 6e 63 65 3d 65 2e 61 31 31 79 3d 74 68 69 73 2c 65 2e 76 65 72 73 69 6f 6e 3d 74 68 69 73 2e 76 65 72 73 69 6f 6e 3d 22 34 2e 36 2e 31 31 22 2c 74 68 69 73 2e 47 65 74 44 65 66 61 75 6c 74 50 72 6f 70 28 29 2c 74 68 69 73 2e 53 65 74 50 6f 6c 79 66 69 6c 6c 73 28 29 2c 74 68 69 73 2e 73 65 74 4e 61 74 69 76 65 50 72 6f 74 6f 74 79 70 65 73 28 29 2c 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 22 69 73 44 65 76 22 2c 21 31 29 2c 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 Data Ascii: 7c5a!function(e,t,i){class n{constructor(){if(this.instance)return this.instance;this.instance=e.a11y=this,e.version=this.version="4.6.11",this.GetDefaultProp(),this.SetPolyfills(),this.setNativePrototypes(),this.AssignConst("isDev",!1),this.AssignConst
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 53 4f 4e 3d 74 68 69 73 2e 4a 53 4f 4e 3d 74 68 69 73 2e 47 65 74 44 65 66 61 75 6c 74 50 72 6f 70 28 22 4a 53 4f 4e 22 29 2c 65 2e 46 75 6e 63 74 69 6f 6e 3d 74 68 69 73 2e 46 75 6e 63 74 69 6f 6e 3d 74 68 69 73 2e 47 65 74 44 65 66 61 75 6c 74 50 72 6f 70 28 22 46 75 6e 63 74 69 6f 6e 22 29 2c 74 68 69 73 2e 73 65 74 43 6f 6e 73 74 73 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 74 68 69 73 2e 69 6e 69 74 57 69 6e 64 6f 77 45 76 65 6e 74 73 28 29 2c 31 3d 3d 65 2e 6e 61 67 69 63 68 4f 6e 54 6f 70 7c 7c 30 3d 3d 65 2e 6e 61 67 69 63 68 4f 6e 54 6f 70 7c 7c 31 3d 3d 65 2e 6e 61 67 69 73 68 4f 6e 54 6f 70 7c 7c 30 3d 3d 65 2e 6e 61 67 69 73 68 4f 6e 54 6f 70 3f 28 74 68 69 73 2e 41 73 73 69 67 6e 43 6f 6e 73 74 28 22 6e 61 67 69 63 68 4f 6e 54 6f 70 22 2c 21 Data Ascii: SON=this.JSON=this.GetDefaultProp("JSON"),e.Function=this.Function=this.GetDefaultProp("Function"),this.setConsts().then((()=>{this.initWindowEvents(),1==e.nagichOnTop\|\|0==e.nagichOnTop\|\|1==e.nagishOnTop\|\|0==e.nagishOnTop?(this.AssignConst("nagichOnTop",!
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 29 2c 74 68 69 73 2e 6b 65 79 43 6f 64 65 73 3d 74 68 69 73 2e 73 65 74 4b 65 79 43 6f 64 65 73 28 29 2c 74 68 69 73 2e 68 65 61 64 3d 65 2e 68 65 61 64 3d 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2c 74 68 69 73 2e 62 6f 64 79 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2c 65 2e 6d 6f 64 65 3d 7b 7d 2c 74 68 69 73 2e 67 65 74 4d 6f 64 65 46 72 6f 6d 53 74 72 6f 61 67 65 28 29 2c 65 2e 53 68 6f 77 4d 65 6e 75 3d 65 2e 73 65 74 4e 61 76 69 67 61 74 69 6f 6e 3d 65 2e 45 72 72 4d 65 6e 75 3d 74 68 69 73 2e 45 72 72 4d 65 6e 75 2c 65 2e 61 31 31 79 2e 73 75 70 70 6f 72 74 65 64 4c 61 6e 67 73 3d 61 77 61 69 74 20 77 69 6e 64 6f 77 2e 49 4e 44 66 65 74 63 68 28 60 24 7b 74 68 69 73 2e 64 6f 6d 61 69 6e 73 2e 6a 73 7d 61 73 73 65 74 73 2f 64 61 74 61 2f 6c Data Ascii: ),this.keyCodes=this.setKeyCodes(),this.head=e.head=t\|\|document.head,this.body=document.body,e.mode={},this.getModeFromStroage(),e.ShowMenu=e.setNavigation=e.ErrMenu=this.ErrMenu,e.a11y.supportedLangs=await window.INDfetch(`${this.domains.js}assets/data/l
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 73 65 6c 66 21 3d 77 69 6e 64 6f 77 2e 74 6f 70 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 30 7d 7d 67 65 74 20 63 6f 75 6e 74 72 79 43 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 75 6c 6c 4c 61 6e 67 49 53 4f 7c 7c 65 2e 6c 61 6e 67 7d 67 65 74 20 73 69 74 65 4c 61 6e 67 28 29 7b 6c 65 74 20 74 3d 74 68 69 73 2e 73 75 70 70 6f 72 74 65 64 4c 61 6e 67 73 2c 69 3d 28 65 2c 74 29 3d 3e 65 2e 73 6f 6d 65 28 28 65 3d 3e 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 29 2c 6e 3d 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 49 4e 44 63 75 73 74 6f 6d 4d 65 6e 75 4c 61 6e 67 2d 66 75 6c 6c 2d 49 53 4f 22 29 Data Ascii: (){try{return window.self!=window.top}catch(e){return!0}}get countryCode(){return e.fullLangISO\|\|e.lang}get siteLang(){let t=this.supportedLangs,i=(e,t)=>e.some((e=>e.toLowerCase()==t.toLowerCase())),n=(sessionStorage.getItem("INDcustomMenuLang-full-ISO")
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 74 6e 29 72 65 74 75 72 6e 3b 6c 65 74 20 74 3d 74 68 69 73 2e 61 31 31 79 42 74 6e 26 26 74 68 69 73 2e 61 31 31 79 42 74 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 23 49 4e 44 6c 6f 61 64 65 72 22 29 3b 74 26 26 74 2e 72 65 6d 6f 76 65 28 29 2c 74 68 69 73 2e 61 31 31 79 42 74 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 22 49 4e 44 62 74 6e 2d 6c 6f 61 64 69 6e 67 22 29 7d 74 6f 67 67 6c 65 4c 6f 61 64 65 72 28 74 29 7b 69 66 28 65 2e 61 31 31 79 2e 6e 61 67 69 63 68 4f 6e 54 6f 70 7c 7c 21 74 68 69 73 2e 61 31 31 79 42 74 6e 29 72 65 74 75 72 6e 3b 69 66 28 21 74 68 69 73 2e 61 31 31 79 42 74 6e 26 26 21 28 74 68 69 73 2e 61 31 31 79 42 74 6e 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 49 4e 44 6d Data Ascii: tn)return;let t=this.a11yBtn&&this.a11yBtn.querySelector("#INDloader");t&&t.remove(),this.a11yBtn.classList.remove("INDbtn-loading")}toggleLoader(t){if(e.a11y.nagichOnTop\|\|!this.a11yBtn)return;if(!this.a11yBtn&&!(this.a11yBtn=document.getElementById("INDm
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 28 22 6d 65 73 73 61 67 65 22 2c 6e 2e 49 4e 44 62 69 6e 64 28 74 68 69 73 29 29 2c 77 69 6e 64 6f 77 2e 74 6f 70 21 3d 77 69 6e 64 6f 77 2e 73 65 6c 66 29 74 72 79 7b 74 68 69 73 2e 70 6f 73 74 54 6f 54 6f 70 28 7b 61 63 74 69 6f 6e 3a 22 63 68 65 63 6b 4e 61 67 69 63 68 22 7d 29 7d 63 61 74 63 68 28 65 29 7b 77 69 6e 64 6f 77 2e 49 4e 44 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 7d 74 68 69 73 2e 69 73 49 66 72 61 6d 65 7c 7c 28 74 28 21 31 29 2c 77 69 6e 64 6f 77 2e 49 4e 44 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 6e 29 29 2c 65 2e 77 61 69 74 46 6f 72 54 6f 70 7c 7c 28 49 4e 44 73 65 74 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 74 72 79 7b 74 28 6e Data Ascii: ("message",n.INDbind(this)),window.top!=window.self)try{this.postToTop({action:"checkNagich"})}catch(e){window.INDremoveEventListener("message",n)}this.isIframe\|\|(t(!1),window.INDremoveEventListener("message",n)),e.waitForTop\|\|(INDsetTimeout((()=>{try{t(n
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 2e 72 65 64 75 63 65 28 28 28 65 2c 74 29 3d 3e 28 65 5b 74 5b 30 5d 5d 3d 74 5b 31 5d 2c 65 29 29 2c 7b 7d 29 3b 4f 62 6a 65 63 74 2e 49 4e 44 6b 65 79 73 28 74 29 2e 6c 65 6e 67 74 68 26 26 21 74 68 69 73 2e 69 73 53 65 74 26 26 28 74 68 69 73 2e 69 73 53 65 74 3d 21 30 2c 4f 62 6a 65 63 74 2e 49 4e 44 61 73 73 69 67 6e 28 65 2e 6d 6f 64 65 7c 7c 7b 7d 2c 74 29 2c 74 68 69 73 2e 70 6f 73 74 46 72 61 6d 65 73 28 6e 75 6c 6c 2c 6e 29 2c 74 68 69 73 2e 73 74 61 72 74 41 31 31 79 28 29 2e 74 68 65 6e 28 28 28 29 3d 3e 7b 74 68 69 73 2e 49 4e 44 4c 6f 67 28 22 73 74 61 72 74 41 31 31 79 20 77 61 73 20 73 75 63 c2 b7 63 65 73 73 c2 b7 66 75 6c 22 29 7d 29 29 2e 63 61 74 63 68 28 28 28 29 3d 3e 7b 74 68 69 73 2e 49 4e 44 4c 6f 67 28 22 73 74 61 72 74 41 31 31 Data Ascii: .reduce(((e,t)=>(e[t[0]]=t[1],e)),{});Object.INDkeys(t).length&&!this.isSet&&(this.isSet=!0,Object.INDassign(e.mode\|\|{},t),this.postFrames(null,n),this.startA11y().then((()=>{this.INDLog("startA11y was successful")})).catch((()=>{this.INDLog("startA11
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 22 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 74 79 6c 65 22 3a 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 69 2e 73 74 79 6c 65 2c 73 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 22 65 76 65 6e 74 73 22 3a 61 3d 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 3b 62 72 65 61 6b 7d 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 73 29 69 5b 61 5d 28 6f 2c 73 5b 6f 5d 29 7d 65 6c 73 65 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 73 26 26 28 69 5b 22 68 74 6d 6c 22 3d 3d 6e 3f 22 69 6e 6e 65 72 48 54 4d 4c 22 3a 22 74 65 78 74 22 3d 3d 6e 3f 22 69 6e 6e 65 72 54 65 78 74 22 3a 22 6e 75 6c 6c 22 5d 3d 73 29 7d 72 65 74 75 72 6e 20 69 7d 74 68 69 73 2e 49 4e 44 4c 6f 67 28 22 25 63 20 4e 6f 6e 2d 73 74 72 69 6e 67 20 65 6c 65 Data Ascii: setAttribute";break;case"style":Object.assign(i.style,s);continue;case"events":a="addEventListener";break}for(var o in s)i[a](o,s[o])}else"string"==typeof s&&(i["html"==n?"innerHTML":"text"==n?"innerText":"null"]=s)}return i}this.INDLog("%c Non-string ele
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 68 69 73 2e 68 61 6e 64 6c 65 47 6c 6f 62 61 6c 43 6c 69 63 6b 29 29 7d 52 65 62 75 69 6c 64 28 29 7b 65 2e 69 73 4d 65 74 68 6f 64 73 53 65 74 3d 21 31 2c 65 2e 4d 65 6e 75 3d 6e 75 6c 6c 2c 65 2e 69 66 72 61 6d 65 3d 6e 75 6c 6c 2c 65 2e 69 73 44 65 66 69 6e 65 64 3d 21 31 2c 65 2e 68 61 73 44 61 74 61 3d 21 31 2c 65 2e 72 65 61 64 79 53 74 61 74 65 3d 21 31 2c 64 65 6c 65 74 65 20 65 2e 4d 65 6e 75 2c 64 65 6c 65 74 65 20 65 2e 61 31 31 79 2c 6e 65 77 20 6e 2c 65 2e 63 6c 61 73 73 4d 61 6e 61 67 65 72 2e 62 6f 64 79 44 61 74 61 53 65 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 64 61 74 61 73 65 74 2c 65 2e 63 6c 61 73 73 4d 61 6e 61 67 65 72 2e 62 6f 64 79 43 6c 61 73 73 6c 69 73 74 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 61 73 73 4c 69 Data Ascii: his.handleGlobalClick))}Rebuild(){e.isMethodsSet=!1,e.Menu=null,e.iframe=null,e.isDefined=!1,e.hasData=!1,e.readyState=!1,delete e.Menu,delete e.a11y,new n,e.classManager.bodyDataSet=document.body.dataset,e.classManager.bodyClasslist=document.body.classLi
2025-03-20 14:42:45 UTC	1369	IN	Data Raw: 73 65 74 41 74 74 72 69 62 75 74 65 22 2c 22 67 65 74 41 74 74 72 69 62 75 74 65 22 2c 22 69 6e 73 65 72 74 42 65 66 6f 72 65 22 2c 22 61 70 70 65 6e 64 43 68 69 6c 64 22 2c 22 69 73 53 61 6d 65 4e 6f 64 65 22 2c 22 63 6f 6e 74 61 69 6e 73 22 2c 22 70 72 65 70 65 6e 64 22 2c 22 6d 61 74 63 68 65 73 22 2c 22 61 70 70 65 6e 64 22 5d 7d 2c 48 54 4d 4c 45 6c 65 6d 65 6e 74 3a 7b 70 72 6f 74 6f 74 79 70 65 3a 5b 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 22 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 22 2c 22 68 61 73 43 68 69 6c 64 4e 6f 64 65 73 22 2c 22 64 69 73 70 61 74 63 68 45 76 65 6e 74 22 2c 22 73 65 74 41 74 74 72 69 62 75 74 65 22 2c 22 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: setAttribute","getAttribute","insertBefore","appendChild","isSameNode","contains","prepend","matches","append"]},HTMLElement:{prototype:["removeEventListener","addEventListener","removeAttribute","hasChildNodes","dispatchEvent","setAttribute","getAttribut

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:45 UTC	722	OUT	GET /assets/images/svg/accessibility-icon.svg?v=1742481763257 HTTP/1.1 Host: tabit.us Connection: keep-alive traceparent: 00-b4fe47c8636bff093cb39d4e38eb50b5-00a867f8ab47152c-01 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/plain, / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	631	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-Length: 1282 Connection: close x-amz-id-2: FjRyb9qYQsTBbG0mTc2nA8efz1UQFLXThDk4GBQSauGQB8VJ4bMJhHHbNROqidYenadLC+5ya6Y= x-amz-request-id: 4KMWJ0W517RXPN1A Date: Thu, 20 Mar 2025 14:42:46 GMT Last-Modified: Mon, 17 Mar 2025 07:55:32 GMT x-amz-version-id: uO.6O2HJ.KiM.KfDD8tDtd7BRDm2_NAK ETag: "3cb945ac9d55311e210768d94e1e8897" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 08bb3c305487b3a7b5b4360d422af708.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: 8Z2_wwXieQPMHYfPuiTj08MY86_cP1-4k1f23Cg5sk8vM4cagg5deQ==
2025-03-20 14:42:45 UTC	1282	IN	Data Raw: 3c 73 76 67 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 66 6f 63 75 73 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 70 72 65 66 69 78 3d 22 66 61 6c 22 20 64 61 74 61 2d 69 63 6f 6e 3d 22 75 6e 69 76 65 72 73 61 6c 2d 61 63 63 65 73 73 22 20 63 6c 61 73 73 3d 22 73 76 67 2d 69 6e 6c 69 6e 65 2d 2d 66 61 20 66 61 2d 75 6e 69 76 65 72 73 61 6c 2d 61 63 63 65 73 73 20 66 61 2d 77 2d 31 36 22 20 72 6f 6c 65 3d 22 69 6d 67 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 31 32 20 35 31 32 22 20 66 69 74 3d 22 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 70 72 65 73 65 72 76 65 41 73 70 65 63 Data Ascii: <svg aria-hidden="true" focusable="false" data-prefix="fal" data-icon="universal-access" class="svg-inline--fa fa-universal-access fa-w-16" role="img" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" fit="" height="100%" width="100%" preserveAspec

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:45 UTC	519	OUT	OPTIONS /us/en/countries.json HTTP/1.1 Host: localization.tabit.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: traceparent Origin: https://tabit.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tabit.us/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	525	IN	HTTP/1.1 200 OK Content-Length: 0 Connection: close Date: Thu, 20 Mar 2025 14:42:46 GMT Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: traceparent Access-Control-Max-Age: 300 Vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 d877346b368e974486e739220882b59e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P4 X-Amz-Cf-Id: 9o9Ts34CZkL-laIlvNwRlKeGdU5r2wEDfsNhoxycaNh0Tqut0voCYA==

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:45 UTC	542	OUT	OPTIONS /logger HTTP/1.1 Host: us-bridge.tabit.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization,content-type,traceparent,white-label Origin: https://tabit.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tabit.us/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	339	IN	HTTP/1.1 204 No Content Date: Thu, 20 Mar 2025 14:42:45 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: authorization,content-type,traceparent,white-label

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:45 UTC	683	OUT	GET /assets/animations/new-mail.json?v=1742481763295 HTTP/1.1 Host: tabit.us Connection: keep-alive traceparent: 00-b4fe47c8636bff093cb39d4e38eb50b5-2c651eed773ba6ea-01 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	655	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 23211 Connection: close x-amz-id-2: l2le8n0auAtYkjYp3CpPdRmSB5qycFYhpd/bzGaYIh6ovGHcO0+Ly8PKeUR2Odk4ozS3qDHI4dlLm0VH2+o6PyOpFFvme86U x-amz-request-id: 4KMRHQ7SQHA6HSWS Date: Thu, 20 Mar 2025 14:42:46 GMT Last-Modified: Mon, 17 Mar 2025 07:55:29 GMT x-amz-version-id: FnjtapWK.TN0ADZGYSSlwOaCNHrc9tKE ETag: "8d53aa71b123b11c7ac9b6626a99949b" Server: AmazonS3 Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 47ff3ef048053dda3bf441bb75edda7c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: hkKa_pTr9N6Qk7Qrfjir5d1o3TvFASW1bc0fyM4UgJW2YE-YVopFBw==
2025-03-20 14:42:45 UTC	15729	IN	Data Raw: 7b 22 76 22 3a 22 35 2e 35 2e 37 22 2c 22 6d 65 74 61 22 3a 7b 22 67 22 3a 22 4c 6f 74 74 69 65 46 69 6c 65 73 20 41 45 20 30 2e 31 2e 32 30 22 2c 22 61 22 3a 22 22 2c 22 6b 22 3a 22 22 2c 22 64 22 3a 22 22 2c 22 74 63 22 3a 22 22 7d 2c 22 66 72 22 3a 32 39 2e 39 37 30 30 30 31 32 32 30 37 30 33 31 2c 22 69 70 22 3a 30 2c 22 6f 70 22 3a 36 38 2e 30 30 30 30 30 32 37 36 39 36 39 36 38 2c 22 77 22 3a 34 38 33 2c 22 68 22 3a 37 39 36 2c 22 6e 6d 22 3a 22 63 61 69 78 61 5f 6d 61 69 6c 22 2c 22 64 64 64 22 3a 30 2c 22 61 73 73 65 74 73 22 3a 5b 5d 2c 22 6c 61 79 65 72 73 22 3a 5b 7b 22 64 64 64 22 3a 30 2c 22 69 6e 64 22 3a 31 2c 22 74 79 22 3a 33 2c 22 6e 6d 22 3a 22 4e 75 6c 6c 20 31 22 2c 22 73 72 22 3a 31 2c 22 6b 73 22 3a 7b 22 6f 22 3a 7b 22 61 22 3a 30 Data Ascii: {"v":"5.5.7","meta":{"g":"LottieFiles AE 0.1.20","a":"","k":"","d":"","tc":""},"fr":29.9700012207031,"ip":0,"op":68.0000027696968,"w":483,"h":796,"nm":"caixa_mail","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":3,"nm":"Null 1","sr":1,"ks":{"o":{"a":0
2025-03-20 14:42:45 UTC	7482	IN	Data Raw: 5d 2c 5b 2d 30 2e 30 33 36 2c 32 2e 32 38 33 5d 2c 5b 30 2e 31 35 2c 31 2e 32 36 31 5d 2c 5b 2d 31 2e 30 35 36 2c 2d 31 2e 32 32 36 5d 2c 5b 2d 37 2e 39 31 34 2c 2d 39 2e 33 36 35 5d 5d 2c 22 6f 22 3a 5b 5b 2d 30 2e 33 38 38 2c 2d 30 2e 34 39 37 5d 2c 5b 2d 32 2e 31 35 34 2c 30 2e 35 36 38 5d 2c 5b 2d 38 2e 37 37 38 2c 2d 30 2e 30 34 32 5d 2c 5b 2d 32 2e 34 36 32 2c 2d 30 2e 30 39 32 5d 2c 5b 31 2e 32 37 34 2c 2d 34 2e 38 39 31 5d 2c 5b 30 2e 39 33 33 2c 2d 33 2e 35 33 37 5d 2c 5b 30 2e 34 39 36 2c 2d 32 2e 31 36 34 5d 2c 5b 30 2e 30 31 39 2c 2d 31 2e 31 36 35 5d 2c 5b 31 2e 36 35 38 2c 30 2e 36 38 5d 2c 5b 37 2e 39 39 38 2c 39 2e 32 39 31 5d 2c 5b 31 2e 35 31 38 2c 31 2e 37 39 38 5d 5d 2c 22 76 22 3a 5b 5b 31 37 2e 32 37 36 2c 31 37 2e 31 32 31 5d 2c 5b Data Ascii: ],[-0.036,2.283],[0.15,1.261],[-1.056,-1.226],[-7.914,-9.365]],"o":[[-0.388,-0.497],[-2.154,0.568],[-8.778,-0.042],[-2.462,-0.092],[1.274,-4.891],[0.933,-3.537],[0.496,-2.164],[0.019,-1.165],[1.658,0.68],[7.998,9.291],[1.518,1.798]],"v":[[17.276,17.121],[

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:45 UTC	545	OUT	OPTIONS /app-domain HTTP/1.1 Host: us-bridge.tabit.cloud Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: authorization,content-type,traceparent,white-label Origin: https://tabit.us User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tabit.us/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	339	IN	HTTP/1.1 204 No Content Date: Thu, 20 Mar 2025 14:42:45 GMT Content-Length: 0 Connection: close X-Powered-By: Express Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Vary: Access-Control-Request-Headers Access-Control-Allow-Headers: authorization,content-type,traceparent,white-label

Timestamp	Bytes transferred	Direction	Data
2025-03-20 14:42:45 UTC	682	OUT	GET /assets/images/gift-card-shop/desktop-bg.png?v=4_14_3 HTTP/1.1 Host: tabit.us Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tabit.us/gift-cards/redeem-card?id=02881645-2723-49A3-A88F-3BB3BEC8E28F Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 14:42:45 UTC	606	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 317227 Connection: close x-amz-id-2: wDGtU4RklIPL02NDCpF0Z6ggostOf8hJbHavwl3YoVuSYMoEDf7oyK1kGE14IrA7y+Ra5KF6GVk= x-amz-request-id: 4KMQBSSFJX5RBRAC Date: Thu, 20 Mar 2025 14:42:46 GMT Last-Modified: Mon, 17 Mar 2025 07:55:31 GMT x-amz-version-id: dZ9tWsPvDIwgv0_bF_Z.yIDLuqJLDsOd ETag: "b2a3072d5c3bb560b8810246227723a0" Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 f106673324d6e3006e921c9e92055438.cloudfront.net (CloudFront) X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: 7G-rxAEVW78BAtw0We4c8MQaNFfeMm4qa4ac-WiWFmG_pI7sxMeidA==
2025-03-20 14:42:45 UTC	7160	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 10 e0 00 00 08 1f 08 06 00 00 00 63 f0 4b 81 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 40 00 49 44 41 54 78 01 ec dc 7b 90 95 f5 79 07 70 f6 c2 b2 5c 16 10 16 58 6e 8b 2c e5 be 02 22 28 ac ca 9d 5a 6c bc 44 6d 28 8d 8d 65 ea 18 63 6a c7 aa b1 46 ad c1 c4 18 a3 91 90 84 88 e0 a5 e2 9d c4 c1 20 b8 e2 60 b5 5e 6a a3 63 b0 a9 43 4c aa d1 c1 4b d5 d6 6a ed c5 da 36 33 e9 bb 69 e2 e0 f1 80 e7 ec 9e df 39 ef ef bc 9f cc 74 c2 39 e7 7d 9f f7 f9 7d 9e 9d f4 fd e7 f9 d6 cc 9c 39 f3 d0 5e fe 43 80 00 01 02 45 0b ec de bd fb b1 da da da fe 1f 77 e3 de bd 7b ff f2 84 13 4e f8 ce c7 5d e7 77 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 Data Ascii: PNGIHDRcKsRGB@IDATx{yp\Xn,"(ZlDm(ecjF `^jcCLKj63i9t9}}9^CEw{N]w @ @ @ @
2025-03-20 14:42:45 UTC	16384	IN	Data Raw: 02 04 08 10 20 40 20 90 80 00 8e 40 b0 ca 12 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 c4 21 20 80 23 8e 39 e9 92 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 20 90 80 00 8e 40 b0 ca 12 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 c4 21 20 80 23 8e 39 e9 92 Data Ascii: @ @ @ @ @ @ @ @ @ @! #9 @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @! #9
2025-03-20 14:42:45 UTC	16384	IN	Data Raw: 45 d0 5e 43 a0 85 02 02 38 5a 88 ed 55 04 9a 21 70 f8 f0 e1 af cf 9b 37 ef a7 9a f1 6c cf 24 50 55 81 d1 2f ad cb 96 2d 1b e9 ee ee fe ab 47 1e 79 e4 5f aa 3a 87 be 09 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 50 16 01 f7 8c 65 d9 84 3e ca 24 e0 9e b1 4c db d0 0b 81 89 0b 08 e0 98 b8 a1 27 10 68 9b 40 f1 65 75 d3 59 67 9d f5 89 b6 35 e0 c5 04 4a 2c 50 7c 69 fd 48 11 c2 b1 61 fe fc f9 4f 1f 39 72 e4 5f 4b dc aa d6 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 50 6a 01 f7 8c a5 5e 8f e6 da 2c e0 9e b1 cd 0b f0 Data Ascii: E^C8ZU!p7l$PU/-Gy_: @ @ @ @ @ @ Pe>$L'h@euYg5J,P\|iHaO9r_K @ @ @ @ @ @ Pj^,
2025-03-20 14:42:45 UTC	11977	IN	Data Raw: 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 e4 13 10 c0 91 6f a7 26 22 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 08 08 08 e0 08 60 29 25 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 c8 27 20 80 23 df 4e 4d 44 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 Data Ascii: @ @ @ @ @ @o&"@ @ @ @ @ @ @ @`)%@ @ @ @ @ @ @ @' #NMD @ @ @
2025-03-20 14:42:45 UTC	16384	IN	Data Raw: 7d ee f1 c0 6b 5d 71 4b c6 e9 f5 79 51 fb 91 fd cb ee 4b 94 89 72 72 05 ac a1 72 fd d5 4e 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 6c 47 40 5c f4 6d ac c4 45 df 2c ec 8d 21 20 2e 7a 8c 71 d0 0a 02 04 08 10 20 b0 17 81 dd 24 e0 88 9c b8 2f 83 5b 5e 16 2d 8b 23 1b 01 02 04 08 10 20 40 80 c0 d7 04 4a a2 88 da ad c7 7c 6e 5d 77 66 62 b5 92 28 ae 3c d4 8b da 32 fb 12 d5 07 e5 e4 0b f4 b8 e7 ac a1 f2 c7 55 0b 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 81 78 01 71 d1 57 53 71 d1 f1 d7 96 12 1f 17 10 17 fd b8 a1 12 08 10 20 40 80 00 81 9b c0 6e b2 4b bc bd bd dd 7a 15 b4 d7 b2 30 0a aa 52 31 04 08 Data Ascii: }k]qKyQKrrrN @ @ @ @lG@\mE,! .zq $/[^-# @J\|n]wfb(<2U @ @ @ @ @xqWSq @nKz0R1
2025-03-20 14:42:45 UTC	16384	IN	Data Raw: 01 02 04 d2 05 c4 45 9f 48 c5 45 a7 9f 5a 2a 4c 10 10 17 9d 80 a8 0a 02 04 08 10 20 40 60 55 02 43 09 38 2a 1e d8 8c 87 34 3b ff b2 78 c5 c2 6f 55 33 af b3 04 08 10 20 40 80 c0 ea 05 e6 24 bd a8 58 cf 5d 03 76 26 ad d8 ef f7 53 dc 6c ce 2a 9d 63 c9 1a 83 7a fa 05 2a ae 39 7b a8 fe 79 d5 03 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 20 5f 40 5c f4 c9 54 5c 74 fe b9 a5 c6 c7 05 c4 45 3f 6e a8 06 02 04 08 10 20 40 60 5d 02 df 26 e0 88 87 19 63 f1 9e 5d 3a 1f 6c 8c f1 1c 0e 87 ec 21 a9 8f 00 01 02 04 08 10 20 f0 34 81 48 64 b6 db ed 86 da cb be 11 fb b1 d1 e8 c7 76 fb ed b2 f2 e3 c7 d2 fe 9d 79 43 6f 4e f6 ec b4 01 a8 e8 e5 04 ec a1 5e 6e 4a 0d 88 00 01 02 04 08 10 20 40 80 00 Data Ascii: EHEZL @`UC84;xoU3 @$X]v&Slcz9{y @ @ @ @ @ _@\T\tE?n @`]&c]:l! 4HdvyCoN^nJ @
2025-03-20 14:42:45 UTC	16384	IN	Data Raw: 08 10 20 40 80 00 01 02 04 d6 29 20 2e fa 34 6f e2 a2 d7 79 fe be 7a af c5 45 bf fa 0c 1b 1f 01 02 04 08 10 20 30 22 b0 a4 3d 4b 49 02 8e ec cd c8 08 aa f7 10 20 40 80 00 01 02 04 b2 05 46 93 5e 3c 63 ed 33 da 97 6c 83 a8 2f f3 86 5e 24 34 89 24 07 0a 81 47 05 2a 92 55 74 5e 67 cf f8 3d f2 a8 b9 cf 13 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 eb 14 18 8d 91 7c 46 3c e3 68 5f 2a a4 c5 45 57 a8 aa f3 51 01 71 d1 8f 0a fa 3c 01 02 04 08 10 20 f0 0a 02 a3 fb 84 67 ec 59 4a 12 70 ec f7 fb 29 3a af 10 20 40 80 00 01 02 04 d6 2a b0 dd 6e 87 13 45 54 dc f0 ba 76 9b 93 bd ed fa 73 59 c7 99 e3 8b b1 28 04 1e 15 88 fd c6 e1 70 78 b4 9a 5f 3e 3f ba 51 fb e5 83 09 2f d8 43 25 20 aa 82 Data Ascii: @) .4oyzE 0"=KI @F^<c3l/^$4$GUt^g= @ @ @ @ @\|F<h_EWQq< gYJp): @*nETvsY(px_>?Q/C%
2025-03-20 14:42:45 UTC	4542	IN	Data Raw: 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 fb 10 a8 8d 91 14 17 5d 3f 9e e2 a2 eb ad bc f2 67 01 71 d1 3f db f8 0b 01 02 04 08 10 20 70 2e 01 6b 96 79 bc 6b 9e e5 94 80 e3 5c 73 43 6f 09 10 20 40 80 c0 66 04 5a 32 be 66 24 02 58 43 d4 de 3c ae df 13 79 5c 73 d3 56 7b be 96 4c 74 b5 75 7a dd f9 04 4a a2 8a b2 d9 1c 5d 8e 92 e8 26 da 45 7d 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 c0 7e 05 c4 45 2f 63 27 2e 7a b1 70 b4 0d 01 71 d1 db 18 07 ad 20 40 80 00 01 02 04 fa 0a 58 b3 2c fe 35 6b 16 09 38 16 2f 47 04 08 10 20 40 80 c0 07 05 5a 12 45 d4 dc d4 bc d3 f4 9e 09 38 a2 37 f4 7a f6 e5 9d 31 f0 de 6d 09 64 cc b9 72 6d 5e 2e 97 6e 1d cd 4e e4 d3 ad 63 4e 4c Data Ascii: @ @]?gq? p.kyk\sCo @fZ2f$XC<y\sV{LtuzJ]&E} @ @ @ @ @~E/c'.zpq @X,5k8/G @ZE87z1mdrm^.nNcNL
2025-03-20 14:42:45 UTC	16384	IN	Data Raw: 0f 81 da 18 49 71 d1 f5 e3 29 2e ba de ca 2b 7f 16 10 17 fd b3 8d bf 10 20 40 80 00 01 02 e7 12 b0 66 99 c7 3b fc 59 ce 73 5d 46 7a 4b 80 00 01 02 04 08 64 0a 94 8c 69 25 f1 45 4d c9 48 04 b0 3e 6f ed cd e3 fa 3d 91 c7 91 37 6d 2d 99 e8 22 fb a0 ae 63 09 94 44 15 65 b3 39 b2 1c 29 d1 4d a4 8b ba 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 81 7d 0b 88 8b 5e c6 4f 5c f4 62 e1 68 1b 02 e2 a2 b7 31 0e 5a 41 80 00 01 02 04 08 f4 15 b0 66 59 fc a3 d7 2c d7 a5 6a 47 04 08 10 20 40 80 00 81 f7 04 5a 12 45 44 de d4 3c 6b 75 cf 04 1c d1 1b 7a 3d fb f2 cc d6 ef f6 29 90 31 e7 5a 16 6a 19 6a 19 7d ca 68 a7 3a 09 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 Data Ascii: Iq).+ @f;Ys]FzKdi%EMH>o=7m-"cDe9)M @ @ @ @ @}^O\bh1ZAfY,jG @ZED<kuz=)1Zjj}h: @ @ @
2025-03-20 14:42:45 UTC	16384	IN	Data Raw: 78 44 80 00 01 02 04 08 1c 57 c0 9e e5 33 f7 47 db b3 68 c0 71 dc f7 bc c8 09 10 20 40 60 a7 02 6b 3f 88 1f 7d 51 f3 93 eb 74 3a 0d d3 94 77 29 11 79 43 af 34 df 58 eb fa d3 c1 9f 09 dc 05 4a 43 98 f2 be 8b 1e 99 cd 61 4a 3c cb b2 44 87 64 3e 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 c0 ea fa 5d 75 d1 eb 4f 16 75 d1 eb ad 3c f3 cf 02 ea a2 ff 6c e3 37 04 08 10 20 40 80 c0 b1 04 d6 7e e6 d0 9e 65 fd 79 b1 87 3d 4b de a7 66 d7 3b 7a 26 01 02 04 08 10 20 f0 82 40 64 83 8a 47 87 bf 5c 2e 8f 7e bc c9 cf ca 0d bd eb f5 1a 76 ac cc 58 c2 82 30 51 ba 40 8d f7 5c 69 72 53 9a dd 64 8d c8 f7 59 56 0c 8e 4b 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 20 40 80 00 01 02 04 08 10 Data Ascii: xDW3Ghq @`k?}Qt:w)yC4XJCaJ<Dd> @ @ @ @ @]uOu<l7 @~ey=Kf;z& @dG\.~vX0Q@\irSdYVK @ @